last executing test programs: 15m52.097564734s ago: executing program 0 (id=1847): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f00004f2000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x29) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20040800) r4 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r5 = shmat(r4, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmdt(r5) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) 15m50.636781462s ago: executing program 0 (id=1851): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) gettid() socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000100)=[0x0], 0x1}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000001c0)={&(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, 0x0, 0xe0e0e0e0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r5, &(0x7f0000000200)="a38d", 0x2) r6 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x2, 0x2f6}, &(0x7f00000008c0)=0x0, &(0x7f0000000500)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x70a, 0x41e3, 0x0, 0x0, 0x0) syz_usbip_server_init(0xaa7f3cec63cbb9d) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) 15m48.682881672s ago: executing program 0 (id=1854): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) capget(&(0x7f0000000100)={0x19980330}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/203, 0x3}], 0x300) sendto$inet(r1, 0x0, 0x0, 0x20008800, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$inet(r1, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000000240)="60dbc0f4aca2fd393c58413552ee20a6ffb194eb866939781720f1a589bd4a5c95c4be84deeeb45c8ce7954b1c1057ede4df0326ff749c8aabb67b0138b7c5bc96cb44ea1d", 0x45}], 0x1}}], 0x1, 0x80) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 15m45.963988208s ago: executing program 0 (id=1863): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = memfd_secret(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x0, 0x4}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0xe886c5ffc5249171, 0x4, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r2 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f00000002c0)={0x18, &(0x7f0000000300)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe01) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r5, 0xae80, 0x0) rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x98000004, 0x0}, 0x0, 0x0, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x61c28c7771d1cf6b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f00000003c0)=@arm64_sve={0x608000000015007f, &(0x7f0000000280)=0x4}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 15m42.155850132s ago: executing program 0 (id=1871): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0xf]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0xa4}}, 0x48004) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@gettclass={0x24, 0x2a, 0x10, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xb, 0xffeb}, {0x4bf57732aad013cf, 0xfff1}, {0x4, 0x7}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4001000}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x82, &(0x7f0000000140)=@assoc_value, &(0x7f0000000180)=0x8) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000002c0)) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0xe, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) getpeername$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0x80}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @random="d5ad833f2450"}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_usb_connect(0x0, 0x48, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x1f, 0x6f, 0x41, 0x40, 0x499, 0x101c, 0x52c1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x1, 0x0, 0x10, 0x2, [{{0x9, 0x4, 0x74, 0x3, 0x1, 0x2b, 0x62, 0xb5, 0xc, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x43}, {0xd, 0x24, 0xf, 0x1, 0xd3c, 0x3, 0xffff, 0x5}, [@acm={0x4, 0x24, 0x2, 0x2}]}], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="6000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="000000000000000040001280080001006772650034000280050013000100000006000200e6"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) 15m40.681182622s ago: executing program 0 (id=1878): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_io_uring_setup(0x7ce5, &(0x7f0000000480)={0x0, 0xe0df, 0x100, 0x3, 0xffffffff}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x37, 0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1cf601d21911edab}) io_uring_enter(r1, 0x47b8, 0x2669, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x42bd, 0x6d82, 0x26, 0x0, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r5, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x73}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r6}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x6}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r7}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000080) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/74, 0x4a}, {&(0x7f00000009c0)=""/99, 0x63}], 0x2}, 0x0) syz_usb_connect(0x2, 0x440, &(0x7f0000000840)=ANY=[@ANYBLOB="12010000c1b2fd40861246206fc10000000109022e040108004000090450000eff040100da0fe42101caf61f785b7bd6f9a40324b2b8253d68e955dd65abfed59c829185881ffcf5071e69d83a94cccf753dd12f7dafdf5b2d4e3c8bf7d1851b891f21b183913d49bf953bab3ee777ab2030fd27eea9c11becf582bd1b62acc0c22b85cc4a21fdf944da65c501f2bcfe60009f9fd3182f3ef9ea028b761d8d18b12c0fbf64e01fdc16ab3f19ccea2d34d16c315afe1e0654083cd85bdecc1d0c08b65aa2b2b59ecb592696ae75b74bced0a71a55e78c444bc6465fc101e4d0d773fceabb706647834c3dac7f5053ba0fc5a1b7012444dace5c0a0be4300e09210200040122e20b090503022000050b08090580014001030607cc31074fbfe106909c0e2a9e3c8f70de1215b05b4e75f54d1fa06a425bb8c7fef594d2ffdf29b12ec1b945fa8258e29da5d13e03ec0c272e99523b2a0be430b629f7fa5bb1d4efc8455fff57efa9f30ce50458ae7f8b794ead783acf5e9960b78172cee5cf148a84453239e84e0e513347117423804b3e605c5fee826960698e8fcb3ed028f3686f7e7c4fc44974d6987f3a16f956683194e67b59a1225efa8d91d82fa9115ce443a8e13e7a3e934b017d087333eef373067226b5e8d836f1f1bdb35584b0e08c8edcc0f3390725"], 0x0) 15m25.475154027s ago: executing program 32 (id=1878): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_io_uring_setup(0x7ce5, &(0x7f0000000480)={0x0, 0xe0df, 0x100, 0x3, 0xffffffff}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x37, 0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1cf601d21911edab}) io_uring_enter(r1, 0x47b8, 0x2669, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x42bd, 0x6d82, 0x26, 0x0, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r5, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x73}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r6}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x6}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r7}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000080) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/74, 0x4a}, {&(0x7f00000009c0)=""/99, 0x63}], 0x2}, 0x0) syz_usb_connect(0x2, 0x440, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0) 11.726078379s ago: executing program 4 (id=5488): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) io_setup(0x3ff, &(0x7f00000000c0)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0xc0080, 0x0) syz_fuse_handle_req(r2, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r4, &(0x7f00000063c0)=""/1024, 0x400) syz_fuse_handle_req(r2, &(0x7f00000067c0), 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x50, 0x0, 0x0, [{0x0, 0x0, 0x4, 0x0, '#,,-'}, {0x6, 0x583a6546, 0x1, 0x0, '/'}]}, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000000)={0x77359400}, 0x10) io_submit(r1, 0x2, &(0x7f00000004c0)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x6, 0x129, r5, 0x0, 0x0, 0x7}]) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x800, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xfff3}, {0x0, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x2c}}, 0x48040) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x20, 0x8, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x10) 10.783982228s ago: executing program 4 (id=5492): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000340)="1c0000005e001f3814584707f9f4ffffff000000230000001ff80000", 0x1c) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x10a000, 0x0) 9.791961926s ago: executing program 4 (id=5499): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x25b}, &(0x7f0000ffe000), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r2, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r3, &(0x7f0000000080), 0x8) ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f0000000000)) syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000, 0x2) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000007040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)="9ff9e4e159eeee95a4a134fb7b1ea0bf5c31370659e162c1a1803350a3f3a526712be8fafff4add7914f17751b5ead80cdb63c2d7832cc98ff90479931b50bd39ec72fd6cf581acadaaeef000118e1ad4becfce8a8f67eb2916966a8f2d44ad766aa05025cbc4513d872343412479de778598f3b4a643b84b2c3744070cea205fadb88fa28f14a14ff4743b4642699d0f887a3dbeedd983246c69cd47dc5eb67182a94b6d7d0fcb7ab4594ba8440", 0xae}, {&(0x7f0000000280)="6ec2f7be007693731eecb9b9c397f9f1b757841dc7740daad651a43e7576a9f7e58d8eb4bf4faa842f294267a4b9c3471400bf6aedd460d853f545e34af34cec765603a488dfd63568f8ae1127d8491310c8e92c2795f5b71a8844a9c1daaa71b6b343c507ff3c91e24725e8f2530069d4a019d419ad6cb05f23b63d7254c47a", 0x80}, {&(0x7f0000000600)="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", 0xe92}], 0x3, 0x0, 0x0, 0x4}], 0x1, 0x4044840) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40010) 6.85527964s ago: executing program 5 (id=5511): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0xc7d87892e9956c6e, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) msync(&(0x7f00004f4000/0x2000)=nil, 0x2000, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket(0x5, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001042dbd70000000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000030001280080001007369740024000280080014002f00000008000300ac"], 0x50}}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="e8020000", @ANYRES16=0x0, @ANYBLOB="000825bd7014fedbdf252100000000000300e7845030f08ade53fc1e57d304ff61c2d2891468206d00a5b87df6cb72ac01ba132fc09d48", @ANYRES32=0x0, @ANYBLOB="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"], 0x2e8}, 0x1, 0x0, 0x0, 0x4c000}, 0x4004) mmap(&(0x7f00000fe000/0xd000)=nil, 0xd000, 0x1000005, 0xd2952, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 6.686932551s ago: executing program 2 (id=5513): syz_usb_connect(0x6, 0x3f8, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5c, 0xd5, 0xc, 0x20, 0x1a8d, 0x1004, 0x6495, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3e6, 0x3, 0x4, 0x6, 0x0, 0xfb, [{{0x9, 0x4, 0xf, 0x2, 0x2, 0xff, 0xdd, 0x80, 0x77, [], [{{0x9, 0x5, 0x5, 0x2, 0x3ff, 0x2, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x478}, @generic={0x54, 0x21, "8feaabf2966f39a27cac606d11889ff9408fe12e0ab883cd15e8cbc192dbd255c0da976f9a8a4e508075f27b0c9f746ad4e42b562cfbba16578a75a7d96992d34e52181fa1b9881ea7ce672e9eb499bd9e36"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x3, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x770}]}}]}}, {{0x9, 0x4, 0xb7, 0x1, 0x0, 0x8, 0x3, 0x1, 0x4, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, 'N'}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x8, 0xe607, 0xfd}, [@ncm={0x6, 0x24, 0x1a, 0x41, 0x34}, @mdlm_detail={0xac, 0x24, 0x13, 0x4, "d572a2a02237cd377dbdb697aa6e7ee9eed37a7493e80f57725a1503e5339d11cec7f0a0a9c2c360aae4fae8a123e1c813889e4cf4faee86e55ec83d726fdfe43e9d5094ec71c8e12abf86e165a8422d6e862393b7d9f3b434be355de4bb390c136ba712b746f0adba417e40937ef75b9245271c6f29257caee6f2b447e8bbee08f81705399b2fb9d8c29278399eb57e134cc2679a8bcfb294c82fa44a807a7046a59a2889b3eb66"}, @mbim_extended={0x8, 0x24, 0x1c, 0x58c, 0x3, 0x6}, @mdlm_detail={0xe9, 0x24, 0x13, 0x8, "82b41764bc129ac375e217afe57209facb7f7a775fa0ae9d0cbb7119360d30a7d4b158acff5eafbdedd47a210ae0c4406c9a650cc3348ca7f638476428152dfdc38ad9b829fee0de536d8d64ac0a597805a336d3802466ca6782654df5efb2e593f283defeb2758fa6030aabf259522393ae8a1ad230f862ecb9383ee9023dc3d880298b0c566c145547e0d4d459c0a03976baa4f3fed3294fcf6a409426328cf90fcebb8ff2b095b08b3e07dbfaa6cdfe287b114bade7a693baae2e405c1eef4b57911b4895587f650c819ff3db515e429b93b19908414278bbd3071bcdbf379719d74f66"}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x9, 0x7}, @mdlm={0x15, 0x24, 0x12, 0x8}]}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x51, 0x7}, [@country_functional={0x8, 0x24, 0x7, 0x4, 0x6e14, [0x8]}, @mdlm_detail={0x81, 0x24, 0x13, 0x6, "f1a76f4fe7042a5d8ccf932075474ee315bae3448b15edb895c0b2b9144bd5159ea4b7badad49eeea2b69adc1c7c974ea81106cdaa6666b461a770b64b30a0b86566c9ac344402f3c929c384b6335a971ed7f20817c43c265e467dcae681e9ef176c13782e64aba72ecec57db6812e3243da99f1722b7b91e0e679d9bf"}, @mdlm={0x15}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0xb}, @obex={0x5, 0x24, 0x15, 0x7}]}]}}, {{0x9, 0x4, 0x88, 0xf9, 0x5, 0xff, 0xff, 0xff, 0x8, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "eeaed6"}, {0x5, 0x24, 0x0, 0xd65f}, {0xd, 0x24, 0xf, 0x1, 0x38e5df62, 0x4, 0x4, 0xc}}, @uac_as={[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x4, 0x2, 0x40, 0x9, "cbdaf7", "73e1"}]}], [{{0x9, 0x5, 0xa, 0x6, 0x400, 0x4, 0x2, 0xf7}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x5, 0x6, 0xbb, [@generic={0x63, 0xa, "656d5803726fd3c1a6c47bd77469bd12c80be402efc7434ace657b74c63184e4b53da36b335fa5aaa6df147fad79f1253d770e43ff15bc32718710f934d579ae1a16d8f5e21345336fc87262a8f98a4ba16940760b0eb46062caf6105d1c48b9a4"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x600, 0x3, 0x6, 0x2}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x1, 0xc2, 0xa2}}, {{0x9, 0x5, 0x1, 0x14, 0x3ff, 0x0, 0x17, 0x3}}]}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x201, 0x4, 0x1a, 0x0, 0x10, 0x8}, 0x5, &(0x7f0000000440)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x4ff}}, {0x9b, &(0x7f0000000500)=@string={0x9b, 0x3, "b2b1f2fefec91cd90cfacc36418ebf5b63c015b35e898014c86fca2a5b01f3115ebff1b52a1e5130abff1116fde5b5af984fed1e5ea246dc4758817c8c578a84fc7f9f682ac70fc23780e66c333f34d1381796248e2e340e51d068abf36c8b02a3a2c7be3ce3b53a3051bd8e1e139ec3a52dd47870bc2dff5aeda67fdf86684a0b5933b883dca2f8e0b04708fe5ae61b7470ca6fcd7ba27a5a"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x2c09}}]}) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000680)={{0x12, 0x1, 0x41, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0xc4, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x3, 0x54, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x4, 0x2, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x78, 0x7f, 0x7f}}]}}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x250, 0x4, 0x4, 0x14, 0x0, 0x68}, 0x3c, &(0x7f0000000700)={0x5, 0xf, 0x3c, 0x4, [@ssp_cap={0x10, 0x10, 0xa, 0x92, 0x1, 0xd, 0xf000, 0x330, [0x3f00]}, @ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x7fffffb, 0xf00, 0x6, [0xf]}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "95607c67ee9a4af1be140c0e477e3f67"}, @ptm_cap={0x3}]}, 0x3, [{0xcf, &(0x7f0000000740)=@string={0xcf, 0x3, "5ab2acc647b595dac9c3b56e3a0b7610dc1999376ca3c7d7b24e8d0861b3fbb44596b628c22e07d5a3a55d5fb2c1a04a4c40ab269c9dbcd22740ca951b867aa7bca3bb600c328f64e3f175a4f97215b443bfd1492f10a78aa5d741351c98491f07205b225aa63e5ece02501991ac5d96a4392602ca912656786dacb1539bf9507a9ce204b482052ae56c9c2c27af0beaa331b3a5467b3a7bbb73cb071c6f2e02f7379d7320a7f8b53df4375a1c12edb8196a75ccbddcfd1dbff941f86e921c587aa6771c56e63fb651f1946cd4"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x44f}}]}) syz_usb_connect$hid(0x7, 0x36, &(0x7f0000000900)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x24b8, 0x40, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x77, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0xf65a, 0x1, 0x1, {0x22, 0xc49}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0x9, 0x5d}}}}}]}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x200, 0x2, 0xd, 0x7, 0x40, 0x8}, 0xe3, &(0x7f0000000980)={0x5, 0xf, 0xe3, 0x1, [@generic={0xde, 0x10, 0x3, "cc903a535fb0ef738ccd0f87d88b2b583705ed1120d3f8e1f759aa1d656b7a33ece1ce8ee674a8a51dc50150b9c4b2db8d6fce33f8c4ce4fb06dc85bf8e4e6dc3b208823eadc662992b3cc54e890d042b95b51d33eb4f65c51e70fa39d1624456bd964b18b903a2a6071627deb6cae329ab1447ec0f1c16a1f4c0f1546d539188bf94d32e92c865d114f9487cdc836c36531e520dd4f1d37a28916d1188be291cae2d369142081c87ee5f11f4fb5bc19bda49e5d52a1306e716d0da305ba7b462113bc352c2efc08303e0f6bfc6a4197232c673e9419e8bb2ca254"}]}, 0x5, [{0x93, &(0x7f0000000a80)=@string={0x93, 0x3, "dd63a76758a9d9bf5076610ddf7fc72f3f6fd1bcc35a6a45ec774a8699af693937b56417b370a1849436cc5251302db180d6d00987731e7b6171b5e4373decf982522ebd4670959dc981eae8fa8601ad949d71494780da3482a8f3c65ebe25f042b28d0441f3def73b139f9d2e007f255a27a87e0c370d68f181cfa401227ca050ff8bf9407f8782a7607c4f4e6abf3ebc"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x41b}}, {0xaf, &(0x7f0000000b80)=@string={0xaf, 0x3, "17935d3e8554753165373da59b0782e04df1a9468df185cf5c4d2e56c68d88bf27e549b01d4b4f95a90cfa35c049101211f974ae225d79e1307667073537e2b4bc8a38a14c5e6d332406a2630ba5ee09c3a1fb20aad21a1c6e106428538aabdcef8dbecbbe1aba318090b0d685de4b2c5ee2895c749488a5b037f137d4b56c6b0dd794f3b8b3bdeff48c45c1a2867cf1f1431ac56dd6b0904eae827220e35ad70d59eccf53b3fbed28fa41a6b5"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x305049e3d5f03f29}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x1404}}]}) syz_usb_connect(0x7, 0xbdc, &(0x7f0000000d40)={{0x12, 0x1, 0x300, 0xc6, 0x96, 0x7a, 0x10, 0x1199, 0xc080, 0x9b83, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbca, 0x3, 0x0, 0xdc, 0x10, 0x2e, [{{0x9, 0x4, 0xdc, 0x1, 0x4, 0x7, 0x82, 0xde, 0x7, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x2ba5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x9, 0x0, 0x71}, [@obex={0x5, 0x24, 0x15, 0x11}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x9, 0x3}, @obex={0x5, 0x24, 0x15, 0x8}, @mbim={0xc, 0x24, 0x1b, 0x40, 0x3, 0x1, 0xfa, 0x4, 0x40}, @ncm={0x6, 0x24, 0x1a, 0x40, 0x14}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x4, 0x4}]}, @uac_control={{0xa, 0x24, 0x1, 0xff}, [@feature_unit={0xd, 0x24, 0x6, 0x2, 0x2, 0x3, [0x4, 0x4, 0x2], 0x3}, @extension_unit={0xb, 0x24, 0x8, 0x1, 0x0, 0x9, "914814d5"}, @feature_unit={0xb, 0x24, 0x6, 0x6, 0x3, 0x2, [0x9, 0x5], 0xd}, @selector_unit={0xa, 0x24, 0x5, 0x4, 0xb, "e201a38245"}, @extension_unit={0xb, 0x24, 0x8, 0x6, 0x3, 0xe0, "54dcd4bb"}, @selector_unit={0x5, 0x24, 0x5, 0x1, 0x2}]}], [{{0x9, 0x5, 0x5, 0x0, 0x10, 0x0, 0x8, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x97a}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x1, 0x4, 0x2}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x7, 0x9, 0x7}}, {{0x9, 0x5, 0x5, 0x16, 0x10, 0x7, 0xe9, 0x6}}]}}, {{0x9, 0x4, 0xf7, 0xb, 0x10, 0x41, 0x77, 0x3c, 0x4, [], [{{0x9, 0x5, 0x5, 0x2, 0x20, 0x5, 0xa5, 0x3}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x7, 0xfe, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x7}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x9, 0x5, 0x8, [@generic={0x8, 0xc, "37ff8dc78e37"}, @generic={0xe9, 0x23, "4221231b7bab133556ae3678d19d695c1d654abd4d8fd2958f9852c3ebdcecfbf5b5ca08a87db7e796a26cdb89a2adb35cbc3f40cb982e038d39638a95fd3a7fdda0b8f55cc863e2b6f16bc255e29d75b24505b75d2ae9f9ff6501c50502a6732c32566a24a05f36d0b1a4b2b4db34f766ea9d325a0aafd24aadacb65f3eb88bb138294482932b045ec6edbce4613d13a53b0da3a27a8244c7201b2afb1282d8c0a803ba1ec02bcb185dd5eaf25565e33a8a118da8194dc2f2a107f4a2adb8e9d8fa2692b564021660d66af544bd7c7045982e09b8300584a64b7c49f5f3c52ff22e37f2208812"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x400, 0x3, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x40, 0x4000}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x9, 0x3, 0x4, [@generic={0xe0, 0x6, "24c40fb269a8699babee258a471638c5309837f4eaa3f1ec8f8a162f796ff30a9fb496f45871c40b2a05b4bf5a9622686c3ccadc7c8809a93bf670eb4ca62e2b7e37804dbf44b999d3793260fce77fa823fcd5e555022190cb115c70cb44a66dc2ef43ca9be20794c312e2e5ce4995ba4e557915a48aa1501e08707ef231b876e18dcd5a266173296734affba391c696d90a0775c0d93c3f129b7981dbb675e92d3e343f9b5927efdd9559f954adcc58895c992df895aa2546230824970f1d23db1ed6a8b0470aee2223b079b24fd079d6d1a70394841dfccf8fac5d1796"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x0, 0x0, 0x7, 0x6}}, {{0x9, 0x5, 0x8a, 0x0, 0x10, 0xea, 0x93, 0xfd, [@generic={0x51, 0x21, "e444789b88579c2d97c54d4daed7b8107b9ad6ee009a405715df139ea675754e8c059c8af4e11a373f2a070f7b71eee5a5019fddd30cf6d54a57c82693728589a222aeca0e2125147b3f94bc6ff709"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x327}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ef, 0x8, 0x82, 0x40}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x84, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0xff}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0xf, 0x3, 0xd}}, {{0x9, 0x5, 0x6, 0x4, 0x400, 0x0, 0xff, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x6}]}}, {{0x9, 0x5, 0x1, 0x10, 0x420, 0x9, 0x7f, 0x6, [@generic={0x34, 0x22, "b2fda1fc36fcddc7cf760a00e0793c4358b0a9a2fef8952c4e7fa5167e86404bbec124b664e0f2d3e82c8fdba44cccfa7cf7"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd3, 0x7}]}}, {{0x9, 0x5, 0x8, 0x2, 0x40, 0xbf, 0x2, 0xff}}, {{0x9, 0x5, 0xd, 0xc, 0x20, 0x2, 0xe, 0xd5, [@generic={0xd7, 0x23, "bc12eaa6d6ef2bddaa71dabd6717cce31153ebeb7700c03b5e3685c09163fb7d2292bc0889c500b98ea8a7bdb44a943736d533ff20d3b0e05782d6bf2c211fcd25c25f06de3221e5e0d106a263dca46349f8496af52300e4fec747e4ecc7cf631cd2a4d08d1ddf1a0cd436b486427131b5a51cd2ae43d38df9967a3432feb7e0d4836de7f0845f6ba0f16d4d4fe664703cd78cc1997c77ea2962bfa3aa46db942d655cbc8cfb99dd0043ce37a8622c9a5b55a8029fe6c46074ff3671f8b25a09e488f3afaf145772df80ea66341c8a113e8ff3805a"}]}}, {{0x9, 0x5, 0x80, 0xc, 0x20, 0x1c, 0x74, 0x9, [@generic={0x3, 0x23, "bd"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x0, 0xca, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x6}, @generic={0xc2, 0x24, "234ca9d93f8807f7da94a936f49fce6f5b939b2796eae411e8b8960213e124e80727cdba6e0f2486cf9dcd1726a630dac60d35b2a7bd614114917001f1d0bdfd45fa6dcb6fb43afbf91837ffb2e387e38cd568097e5b6185cbcd907a3deb6030144cd8858bcd234d85398a3724c0406b10a143412ae7ca5ef59f870dab0a37663d35c93ff18ea9e5cc303e8e7a1a006b2688df31832199b69a52ea864236746398fb7b0ed36adf43cb2e1a647f84c8ea44f0351ca71a8b4d10eb884416a66ece"}]}}]}}, {{0x9, 0x4, 0x1a, 0x2e, 0xe, 0xff, 0xff, 0xff, 0xd, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "b1"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x0, 0x1, 0x5}, [@mdlm={0x15, 0x24, 0x12, 0x9}, @ncm={0x6, 0x24, 0x1a, 0x200, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x1000, 0x5, 0x8, 0x5, 0x2, 0x70}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x80, 0x5}]}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "b12979921b"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x8, 0x5, 0x8}, {0x6, 0x24, 0x1a, 0x8, 0x1a}, [@mbim_extended={0x8, 0x24, 0x1c, 0xa, 0x8, 0x4}]}], [{{0x9, 0x5, 0xe, 0x10, 0x8, 0x4, 0x30, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xda, 0x4d2}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x5, 0xb, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x41, 0x8, 0x2b5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x5}]}}, {{0x9, 0x5, 0x80, 0x8, 0x400, 0x9, 0x8, 0x4}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x7f, 0x9, 0x1, [@generic={0xcc, 0x3, "b05bb7f1661ecbb639596beef1ae23ce35aee5bab03757bf3e1523cb56da95a39c04d4686fb264f6ee402aaf1130e439af620f368c597ba10e04f7721a9f871c33451219d948f0ff3fc4e8538edc02dccd8ae3a2637f790394b1f7cfb896e649e4a1334340bbbe61bbe77bf3026125849886c1be76a30e5353cb04c2a88374dac88c9f679b791247b7bbf7b8a82ca2e7b4d2135c661de8b74be1c1212bc70291070f67cfce7f657227a8e13f5f24c2db090925a7b96152c6c522b9e75ab4747cfe34c0814141ce385183"}, @generic={0x98, 0x9, "b5984d6698113e22be80db622d177b8d66dc803f6b2d8eb6fe550ec0138a96cda008545bd038fcc7e82af1ac9df1ec8a5ef70981cf7d3260312ccf317753426971cef90d3910ffa32c0da908e2f3ce1993231358f7f9a97d53e42d1cb345272f0e63e2bdc9070ca6998192c8e9b04d60ddaaf1c3502753af99f88becdb49bc30db4b23a76caf240b90a74ae18867bcb76cd18acd30a3"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x25, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4}, @generic={0xad, 0x9, "8c2255ccee428336beb28c3e6b8ff0d5b1d59a74080ea1ce6792b65ad196e6fcf6d452b5229f969a02a9194b0c29fef4dfe68bb14a7092bad04849e0f138684fac42414382722155bc5e34475cdda891e059d9f83b73cb7055c4cca005f286bc99bd6deb8938fbd479b43ffe9cdeab09b91adfc8aa3ac50f88bc018cc793e53a8e5a1e1969e40c9aad4a4b29403f29773a7697baa62f6bce65596d22a1c1bbd962c9f87804f7b0afce4e50"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x10, 0x11, 0x6, 0x1}}, {{0x9, 0x5, 0x8, 0xc, 0x40, 0x7f, 0xb8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xe, 0x8001}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0xb, 0x8, 0x0, [@generic={0x96, 0x5, "2562eabe9e58c690ea2c35029d222c93c3e5f6ad87122e98fe43a617366532983c192a70d70a43d5898289248bde99ba83868ad1407d9cd3457cf1180f251f66cb1540a4f371e167886cbc55baf50e36ed623d770f7da1968ddd7ba7d522999d05b5a4ba69bc4b31e57273772d89b756cef528cc4937aa453cfd0cd6b9b43d5b9d89a3035475966af1820ea7d7d020454566520c"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xf, 0x6}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x2, 0x5, 0x2}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x8, 0x8, 0x3, [@generic={0x34, 0x23, "f5ab2108d7a1926b69ad6ffff9b5c974dbc5c5e716baccc0333efba7bd35cc172d846e236ec7b0be40959413d3910248088a"}]}}, {{0x9, 0x5, 0x5f4641b419747e1f, 0x0, 0x3ff, 0xe, 0x80, 0x5, [@generic={0xa, 0xa, "a4f88558bf403bb1"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x1}]}}, {{0x9, 0x5, 0xc, 0x2, 0x40, 0x3, 0xa0, 0xfc, [@generic={0xf2, 0xd, "ad3ebd533a2ed1ac75e694ff60d581a541731d10ad53d0a35aba2fe25a2361713fffce66c5fcc2e7d66cfff14e206ceb749f3f069e7dd244a71737e598d790bcbcf31d6e1984f310aeb53f05ae27831cdae607dd203863cd959343e2a9a08589018c144234650ea7e4e121c7f8ada65957a510967a5239a4268eacfe3c1a892d0f43287e4fe11d029656e39467b80a3ae7f7642e3b8bdb76558fb0509465e3a0a9e7f52341be1f9e10c769515d6e209b8a1625b759f961219cac0f570a1db8e0ae8eb6ca03b1d7af0dc30eb63ab6ea0602bacb690f393fa9fd696f9f1722ea962cad253fd7a1c2b993181c183786aa6d"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x9}]}}, {{0x9, 0x5, 0x8, 0xc, 0x200, 0x0, 0x3, 0x26, [@generic={0x4a, 0x21, "9a01c562f6c3c0854522ff16d252a6873b221bb6b8f50c59612fc62fea8d0a2c1d814653f5de451ced8952414d07eed98fe191b27dc70584342d7a70bac71f2205e9f7f2170af031"}, @uac_iso={0x7, 0x25, 0x1, 0x100, 0x0, 0x4}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x6, 0x3, 0xdd, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xfffc}, @generic={0xe9, 0x21, "98daeeb9b6e03a3329d8781f7d1c56ae9230912891583160e1be4b4b173c26cafd66a024e989d49d5070b6c735f9c711cd6f0bc12aeeddc385ea9b546c42b953ab32c4019ca2accd2a67769259a56388ba7c32837b738c25293b663469354e313a345f99bfbde3927e8bddeac5db8780181084f86edbc351ea9dca85ec8acc7e8493cbed7a0c4d5137f5c066d4a5aaaa898bbcb92c423ba352c9f0b2a03374cb4538090ab04b704e714eef8cc54113bdb23d27635c04e40aaf20b12ee52fd058b99a4cd23ad28bf0e71e34faeed1439314c3124bc61c75a885f0cd3b9d9ed3827f01159f800b83"}]}}]}}]}}]}}, &(0x7f0000001ac0)={0xa, &(0x7f0000001940)={0xa, 0x6, 0x310, 0x8, 0x5, 0x5f, 0x20, 0x9}, 0x13, &(0x7f0000001980)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x19, 0x9, 0x4, 0x7, 0x4}]}, 0x2, [{0xf, &(0x7f00000019c0)=@string={0xf, 0x3, "fe5deadb19de93d37eaade09ea"}}, {0xa5, &(0x7f0000001a00)=@string={0xa5, 0x3, "09e94222a875f7997d848e98b52eeac1c0c20eed680df3e63c81c977ab2c626e403d27e3099344d3fba5b2fae582d8d0b71226557f4a6eca6c89fc497af602d2af6e5c595b9d7c3688638e7154051e7378628357ce768f1620ae62c7e77f3195baaf5e0c5880f58a07ba70db812af45f49ccb81fa4284b3bd86f7dd868ba201ad575df5bbc6d95d610139e68e011c06d3697ed18cc76a4b667ded1d1541f1f6163b373"}}]}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000001b00)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x7f, 0x20, 0xf, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4683}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x46bb, 0x9, 0x9}, {0x6, 0x24, 0x1a, 0x7, 0x12}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x1, 0x9, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x3d, 0x1, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x50, 0x4, 0x6}}}}}}}]}}, &(0x7f0000001d40)={0xa, &(0x7f0000001b80)={0xa, 0x6, 0x200, 0x23, 0x7, 0x50, 0x40, 0x3}, 0x1e, &(0x7f0000001bc0)={0x5, 0xf, 0x1e, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x3e, 0x8, 0x6, 0x7fff, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x5, 0xc, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x9, 0xc, 0x70b8}]}, 0x4, [{0x4, &(0x7f0000001c00)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000001c40)=@lang_id={0x4, 0x3, 0x40c}}, {0x68, &(0x7f0000001c80)=@string={0x68, 0x3, "e7c1cf42e61624b7e861d53739e31878a003ef1a592009b54e91c7675b1132df77468efcac2384168241b6a7c8e49bd83bcb101d6e37b9c998bd19e43564a116a99b09bbd362e27727c7cf2bfbf467f6b45f8877a0645b1fc63fddf458e390abb186d14d342c"}}, {0x4, &(0x7f0000001d00)=@lang_id={0x4}}]}) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001dc0), 0xab5a46b80c7942f0, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x4) r1 = syz_open_dev$usbmon(&(0x7f0000001e00), 0xee, 0x800) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000001f80)={&(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000001e80)=""/210, 0xd2}) syz_usb_connect(0x2, 0x0, 0xffffffffffffffff, &(0x7f0000002240)={0xa, &(0x7f0000001fc0)={0xa, 0x6, 0x310, 0x6, 0x3, 0x30, 0x10, 0x7}, 0x50, &(0x7f0000002000)={0x5, 0xf, 0x50, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x7232, 0xf00f, 0x7, [0x3fcf, 0xc000]}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "9a8eb98c783621b7e878d707c239ebac"}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x98, 0x5, 0x6, 0xf000, 0x9, [0xf, 0xc00f, 0x3f6f, 0xffff00, 0xff0000]}]}, 0x7, [{0x4, &(0x7f0000002080)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f00000020c0)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000002100)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000002140)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000002180)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f00000021c0)=@lang_id={0x4}}, {0x4, &(0x7f0000002200)=@lang_id={0x4, 0x3, 0x816}}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f00000022c0), r2) r3 = socket$igmp(0x2, 0x3, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000002300), 0x200200, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000002340)) socket$nl_route(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000002380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000024c0)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x89000008}, 0xc, &(0x7f0000002480)={&(0x7f0000002400)={0x58, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x40008) pidfd_send_signal(r5, 0x22, &(0x7f0000002500)={0xa, 0x7, 0x4}, 0x0) r6 = syz_usb_connect$cdc_ncm(0x6, 0xa3, &(0x7f0000002580)={{0x12, 0x1, 0x100, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91, 0x2, 0x1, 0x8, 0x0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "c379727f2690"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xfffffffc, 0x3, 0xc3, 0x37}, {0x6, 0x24, 0x1a, 0xfff6, 0x10}, [@dmm={0x7, 0x24, 0x14, 0x8, 0x3}, @mdlm={0x15, 0x24, 0x12, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x8d, 0xa, 0x8}, @obex={0x5, 0x24, 0x15, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x80, 0x0, 0x60}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0xc, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x9, 0x6, 0x62}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xe, 0x9, 0x9}}}}}}}]}}, &(0x7f0000002880)={0xa, &(0x7f0000002640)={0xa, 0x6, 0x0, 0x5, 0xb, 0x6, 0x8, 0xfc}, 0x10, &(0x7f0000002680)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0xc, 0xa, 0x9, 0x7, 0x3}]}, 0x3, [{0x65, &(0x7f00000026c0)=@string={0x65, 0x3, "0f9b589d1ffff06fd223f9dbc9bb2f4ad0c4e383e5b6b850467685d0309a25f4cd1b7beaf436302b37cec13d3bd415ea63fd93ca4a96385d47a57452bb01b4d6ec69883b3a4ce53c497449f8fbf0b01e68f3af0d5802a791b3104a112b6c01b00d559a"}}, {0xe9, &(0x7f0000002740)=@string={0xe9, 0x3, "c055c9cf52acf8fc03fd1653b1ba4c5d369f0cf62e5071811a4647d703625f2c6756952b91478d8468181362cdd6063c39904c7dd388829547855ad56e906b56aeef2757b8e743ede366abb63600c7d10172e6b2ece12d268d6aeb22dcbbc31dee0cda5cef6d28b0445b8657e94fe4bbd458d8276cafb0a9e82d74004a74a73ce7314a3f48ce8c5b8b68f4260c81e76e7bc18864e62ad944b501d263752f103c66fad5258af7f15229e2c354d8d1fbc172cfd4d03f0f12912363fe6760a1596f92ceb2d9140f6b82dc054b9ad7a7b9274442190d08389c2b4394bb1e811f115cf2c3f093cbf262"}}, {0x4, &(0x7f0000002840)=@lang_id={0x4, 0x3, 0x459}}]}) syz_usb_ep_write(r6, 0x7, 0x99, &(0x7f00000028c0)="11875a8602904e4df5eff8ebb62cffa3f33d1d98009ed48c169dde27be5dab2c6954225a0ff5c400d1cd729956aa9849b63c66d4b07f572d19479a47e4715a5decb2cf55cdf0d335ac43a1da9b6a572f35e904e05b9da5b22ab7ddf28913a986d9054950bc65a69d5d821ddde9922f429ac2f7490a3a747f297541d04ed47ba86030d92d8c7aa96546cc9dd55d867d4870938703439b4ea837") ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000002980)={{0x2, 0x4e22, @broadcast}, {0x1, @remote}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth1_to_team\x00'}) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000002a00)=']:[\x00', &(0x7f0000002a40)="b75b652979bd96727a734ecbc385f80df5f99eb0844dd609b5b124c8e122ca3938be571facad4e531d0c39422c1f242285ed3ddec85208fcfd329fd6acd53c6e64d2fee76b09f847787eff3a1eb2aee2cbf39045a7ed843da42e64851bee2bfbf4bc6c8958b37f62238ac236d09d1d9bf0332681e2e101e359b4f863e4043a2928209fb42977ca6a02ac7ea1bfe1494440285bd4e14f7cb1234ed64c007c7d09df21f87be8b36e7511d57ed4d638f3834daed50158d775e7a94605df38c71d169576b0a21f99a79d6f1363e1719a687fbdf2669976969b3079f0ed17133d92913b1703e2b7dd06b23e907b", 0xeb) r7 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000002b40)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002b80)=0x4, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000002bc0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r7, 0x50009418, &(0x7f0000002e40)={{r4}, r8, 0x6, @inherit={0x60, &(0x7f0000002dc0)={0x0, 0x3, 0x6, 0x80000001, {0x1, 0x7, 0x53b3, 0xfb69, 0x3}, [0x1, 0x41, 0x800]}}, @name="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"}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r5, 0x40a85321, &(0x7f0000003e40)={{0x3, 0x3}, 'port1\x00', 0x14, 0x802, 0x9, 0x2, 0x80, 0x200, 0x3, 0x0, 0x6, 0x8}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) 5.843166751s ago: executing program 4 (id=5518): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2c1, 0x1c8) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000000c0)={'veth1_to_bridge\x00', 0x2}) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000040)={0x7, 0x5, 0x7, 0xdedb, 0x15, "fd1500fdffffffff"}) ioctl$TIOCMSET(r8, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r9 = socket$kcm(0x2, 0xb, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000002e0000000800d803", @ANYRES32, @ANYBLOB="0a00340001010101010100001e009400000302fdffffffffffffff510005000800000001000e0000001f0000"], 0x48}}, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r7, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="08042cbd70992e28b725ed72a295460b41b55f36789d9462f50c00504916d5de0601c1ae6295f39bf96e7369cba36a6299520eb770e87aeacc398946b3ff226c0533ceaac22e4149d87d124c0e798a483b1da7fc542ced454a3b06fd7639b070f3b3655fca8374449aebda240fb7388e8cbce79d6dd261fbf980803e704067bc3d8f87a395bc84630170c1be6164008ac2571ab02f96972185f99ec490aa4a9aa686ce8316c70a07325cd01421a59e1d75affb33e29c375c579354b2462244de275b5dee6cfdc499df4a1714812f80188d7a", @ANYRES32=0x0, @ANYBLOB="0c0099000000000059000000"], 0x28}, 0x1, 0x0, 0x0, 0x400c800}, 0x40004) fanotify_mark(r5, 0x80, 0x40000009, r6, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x000\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31000000000000000008000a00", @ANYRES32=0x0, @ANYBLOB="e8001a8048000a80140007"], 0x15c}}, 0x4c0a0) 5.842353305s ago: executing program 5 (id=5519): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x1, 0x28, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfc}}, 0x82}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0acadc1f9440b6c3c85a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9e09000000000000000a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a42a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a175e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436c101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521b3ebb0cc52f49129b204eb99b6150e320c9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d255be1ed66d9051f22614d1f62734d6780393e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f231200743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069fbff63a06578d6d184f5de7bfb6aa800016996d536256c02294cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798abe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e7005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9c9e5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde3885b06548862de809d3dae3cccf109f7c78e8479a345e805e47dfa82caed44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1bfeb51f5c65a907f2217d5f80c580dc31b0963ff953ce09148e8dfe3a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e97c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20ab2b5baa1b07b16e81f278e54a479f1a068658e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4657b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce798c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f7c6294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b13287615b972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0590000130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80c4014ff11d9dbceba41d8dfce410333a054e82b1d050331c5bc4acb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6b93d28db8ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a82632ff3a9a48ff805202ae9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dae1028d1bc68b6336eb1a5d18f6148354df7e60a489dc543ccdee1fff9d8f8d78844f0c6a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d6410000000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2cea0d6269ffc8580a01e9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168eabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2835d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95bad8f8ed85cd5b03a7352a0fb83398566d1bc133582ce2d95636cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef47b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c32f5fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538bccd48a0325aa9b151855c800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b3145bf54a851f3c08931d4c2c32bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c929e7de4e9620000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da208e9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45a4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d50270a1deec1a6d7441d0b5b8d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656db528f81f6a9465d2c94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be1881000000000000006fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bb24ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855c5c95ef5c83b18b23517ca935a0fa1b630d70c4ca4029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17e0000815a42318151feaad37f7abf9bfa0bcac3c1934854b3f6dc6de835952ebdda297dd3b29c07c69888cf029271449e035edc8a4459705f222bda537481e66ce3c665129f9829524eca8b5bef27adde96bd3ee95da4a176deff3408da050fe8d512e5a19379b403ee11d010bf86d0af4ac5c2057709b18cff438d0d58810670b222dfeb317bb935f925d2a070e68a701fd4316a677bb513c9476f25969097c165ca1705473341ea03f259dc5bee6a2d2e05176965192941abfae36b3a1e30784e6532c96ab971c5706a88b6f66860e31098b5b788788aad67507ffab2184a950065c1337259b63135fa060fc5ce3e4f6cdfb64f40e1a90351a01fd3d70f9dde03c335a931e58b8570316590ae22c7de567260849049e963ee15db15f592abb24111a219f0d128ceaf19764d92755abc9c313f65e7a220e64bb0d7139ce59da85bc710cea0c6553b336763bd3e39c2374b86885a32cdfae817196a7850257ead09f3e30e676b51062bb9000000000000000000000000000000000000000000000000000000aefb12dd3507c8dd24490bf9de062cd166a4dad6b9f2e53bad342546e546f6dece81d53cf717bd91ad72f4da82018f43259899e53e0b69a92180f1345699045fd23689e66d21d13be1a2d20eb1ce23eda84a63855173ca7f51d436306c"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xe, 0x0, &(0x7f00000002c0)="5c71f91b05c413550230b4c817a6", 0x0, 0x8, 0x0, 0x1, 0x0, &(0x7f0000000240)='b', 0x0}, 0x50) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 5.840953765s ago: executing program 2 (id=5520): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x2, 0x1, 0x0, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, 'AB'}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0x125, 0x0, 0x9, 0xc}, {0x6, 0x24, 0x1a, 0x6, 0x20}, [@obex={0x5, 0x24, 0x15, 0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x7d}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0x80, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x6, 0xee, 0xa}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x2, 0xb5, 0xa}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0xe, 0x5, 0x7, 0x10, 0x5}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x7, [{0x14, &(0x7f0000000200)=@string={0x14, 0x3, "eb7955a5076ea5c0049b46f6e38e17d0e847"}}, {0x7, &(0x7f0000000280)=@string={0x7, 0x3, "60ad461a03"}}, {0xf3, &(0x7f00000002c0)=@string={0xf3, 0x3, "63da9a0121d65c0f28b6ce75e4b8b25d56909022ed09167df4a8a5988948dd4fb01da9e3e5b7f4431c57bfcb8a7204f309d978eb1ba0648faf5b9e73818406af9fbb7147bbf42e5ed09c3a20e663bf228a4002286b5c78278d471722c0aad85eb530ecc7f2e6c6935e38034dd8164619ce37f0a2abe22d9d716575354775943beefe4b981102a55d67613f14f15d92bc2b7982dbb04cf29b7abeb83d9192257ac817e9097553ba6bea92f5a820a78a4c3ce3d70bcc6aad142511bb519ffc78dc8ac290e855dc2785e7eaaf7abe1824872de2d5e4f5735be74422ab43e98f001e3fb11458fbc2606191396e136fcba91bfa"}}, {0xce, &(0x7f0000000500)=@string={0xce, 0x3, "7316e0a14b0120963c9a629f948f6eec1e55dcbe08648d5f869c2241dd71f6b54a917c33db060a66720db59267593c3477ffc5d20769781e3cd7accf527c0a4d3d053c67e6d817a6acf2a7f7bb967ca66a2c37cb69f75f504627dd43ca1be7256974bbee95aad72ced6dec87a306beaf3138fc10ed8c1b25eeae0e3e4740f1edeea551f0acad81892e2d269c2c5092e6fa214088e71bd0a5a7d67d5d677a627c42e30df9609c0b06f2915d59c17c8e03eaacd2a9b06d9582fe9cf187919c2073c2eddf97db197717e2f10d50"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x807}}]}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f0000000240)=[{0x3, 0xd001, 0x0, 0x0}], 0x7}) 5.662246576s ago: executing program 5 (id=5522): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x400011f, 0x140, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0xff86, 0x5, 0x28, 0x8001, 0x100000, 0x9, 0x0, 0xfffffe0000000001, 0xf211, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0xff86, 0x5, 0x28, 0x8001, 0x100000, 0x9, 0x0, 0xfffffe0000000001, 0xf211, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) (async) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r5 = socket(0x2b, 0x80801, 0x1) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r7}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r7}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}, r7}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}, r7}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, r7}}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@uncond, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7fff, 0x9, 0x7, 'syz0\x00', {0x719}}}}, {{@ipv6={@private0, @private2, [0xff, 0x0, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'tunl0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x4, 0x9456fff08070a538, 0x70}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x82b, 0x0, 0x0, 'syz0\x00', 'syz0\x00', {0x8000800000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x0, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) (async) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000570000/0x4000)=nil, 0x4000, 0x9) 5.495102288s ago: executing program 1 (id=5524): syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000fb000100"/28], 0x50) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = getpid() r4 = syz_open_procfs(r3, &(0x7f0000000080)='net/ip_tables_names\x00') r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) writev(r6, &(0x7f00000014c0)=[{&(0x7f0000000200)="561700", 0x3}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[], 0x50) write$binfmt_aout(r5, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x9d3) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{}, 0x0, &(0x7f00000001c0)='%+9llu \x00'}, 0x20) pipe2$watch_queue(&(0x7f00000006c0), 0x80) write$sysctl(r2, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r7, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac00"], 0x92fc}}, 0x0) 5.224128317s ago: executing program 5 (id=5525): personality(0x40000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) ptrace$ARCH_MAP_VDSO_X32(0x1e, r1, 0x7, 0x2001) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'fo\x00', 0x0, 0x7f}, 0x2c) sendto$inet(r2, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) uname(&(0x7f0000000180)=""/224) 4.100534245s ago: executing program 4 (id=5528): syz_usb_connect(0x5, 0xb1c, &(0x7f0000000180)=ANY=[@ANYBLOB="12010102bb3e7c083d1b8d0107ee0102030109020a0b04050b50050904b8010726d70a05db0e11e6044e94e3ee629544d66164eed846b879a2bb1749b74340ceb662167f1df465036b000bbb960eec111e6ef11578ad614808512f1c6430493c133d39d992ae56631cf0a3664735313f7905d9c19d55c7b876818ff027270991488af306c5344cbe20c5009da159b178f906b7ccba8737dc38fd9da745823bac0bd7aa2fb6d6ff5e48d9a9b9a18da82791"], &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x32, &(0x7f00000000c0)=@string={0x32, 0x3, "2b8943bf95e2bd3b4a0b20d7039f12df0f378772179ff881b64b7dd3255ff3ce514a4030b3215a2abcd79930216d95d3"}}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0xfd, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xf8, 0x19, 0x7, 0x3, 0x0, 0x9d, 0x1, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0xea, 0x55e, 0xffffffff, 0x4, 0xfffffffffffffffd, 0x7, 0x9, 0xb, 0x5, 0x80, 0x6, 0x794, 0xa, 0x40, 0xc976, 0x6], 0x4000, 0x20200}) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000100)=0x2, 0x4) lseek(r4, 0x100000000, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.038260731s ago: executing program 5 (id=5529): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) (async) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x101042, 0x1db) r7 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x100, 0x3, 0x41}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x41, 0x0, @fd_index=0x7, 0x0, 0x0, 0x1, 0x7}) (async) write$UHID_CREATE2(r10, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) (async) io_uring_enter(r7, 0x7277, 0x0, 0x28, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x10000}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8, 0x4, 0x2, 0x1, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x38}}, 0x4008000) (async) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.929985379s ago: executing program 5 (id=5531): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x1000001b, 0xffffffffffffffff, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000002b40), 0x2, 0x0) writev(r6, &(0x7f0000002c80)=[{&(0x7f0000002b80)="707a0bf0", 0x4}], 0x1) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r5, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000100)={0xc, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r5, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000140)}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) inotify_init() 3.894910527s ago: executing program 1 (id=5532): syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0028000002010a004c0012800900010069706970000000003c00028005000400eb000000060011004e24000008001400ffffffff080002000a01010108000100", @ANYRES32=0x0, @ANYBLOB="05000a0001000000080001", @ANYRES32=r4, @ANYBLOB="48288fb4bdb539ce04ffd732bd98ddd62ea1c24a467ea9a5baaa64f314eb750451faa1259a7eeb717b6e8b2d248fa5c8064c1d1314ec1d63711ae176c645d73e35b9313f8d64c8f6245d16cd4aeb95c8318a14743b521286ccfdf101f4f24e8aff09ae180b56526661a63557a85c8d97"], 0x6c}}, 0x0) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/71, 0x47}], 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101000000090400000302060000052406000005240000000d240f010000000000000000000905820240000000"], 0x0) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x1, @loopback}, 0xb) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r7, 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109301) ioctl$USBDEVFS_DROP_PRIVILEGES(r8, 0x4004551e, &(0x7f0000000000)) ioctl$USBDEVFS_RESET(r8, 0x5514) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x5, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0007008019000200000000000000022122af0e4ccfb7b3cada00", [0x0, 0x2000000000001]}}) close_range(r0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r9) inotify_init() 3.850490243s ago: executing program 3 (id=5533): r0 = syz_io_uring_setup(0x3e9, &(0x7f0000000000)={0x0, 0x92c2, 0x40, 0x3, 0x11e}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYRESHEX=r2, @ANYRES32=r0, @ANYRESOCT=r1, @ANYRES64=r0, @ANYRESOCT=r2, @ANYRESHEX=r2, @ANYBLOB="dbc4174e598881dab2d648fe9621b0debf67643a07059194bc5a59c13e41b5c5c50d5c97b4e82fc5f15871bd8b428cd82343830e555df86f5cc01906e63b12b8fcccbe5f58ebeea216e7faa6508493701c726c4f07bf540f2e31d4399b32c37ff743c87aae857e7f44ca172c873f13a80ce2f8aef340dd4ecaa9d789ef4491861e919b59e6f5497b536d13897c99cd703a8f05f5cc690f0d9929accc12f84e390142eac94a7f17ae49183851ef56a8cf352f42d5d4f79923c69fb8dbd41da32c084dcec0fd10b43f9cca1106b6a1db15ecd02939ac402f", @ANYRESHEX=r2], 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, &(0x7f0000000100), 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0}], 0x2) 3.845795739s ago: executing program 3 (id=5534): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001180)="2fae", 0x2}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x4044040) 3.755807801s ago: executing program 3 (id=5535): r0 = socket$nl_route(0x10, 0x3, 0x0) dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioperm(0x0, 0x82, 0x1e) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='+', 0x1}], 0x1}}], 0x1, 0x400c404) fanotify_init(0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) r3 = getpid() r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000ec0)={'syz0\x00', {0xfff}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x4], [0x10000000, 0x0, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) write$uinput_user_dev(r4, &(0x7f0000000a40)={'syz1\x00', {}, 0x4d, [0x0, 0x2fa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x81, 0x0, 0x419], [0xffffffff, 0x3, 0x3, 0x0, 0x0, 0x40000, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x400000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x42af19d6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x800000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x1, 0x84, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6], [0x81, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x507, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10000, 0x0, 0x0, 0xe58b, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1ff]}, 0x45c) syz_pidfd_open(r3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f00000002c0)}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r6, 0x40086603, &(0x7f0000000040)) 3.465877311s ago: executing program 2 (id=5536): setresuid(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_INPUT(r1, &(0x7f0000000040)={0xf, {"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", 0x1000}}, 0x1006) 1.928481546s ago: executing program 3 (id=5537): ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0xfff, 0x4, {0x2, @win={{}, 0x7, 0xfffffe01, 0x0, 0x0, 0x0}}, 0xffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r0 = syz_io_uring_setup(0x20fe, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x3}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x402}}) io_uring_enter(r0, 0x2ce5, 0x400e40b, 0x44, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) 1.852009429s ago: executing program 2 (id=5538): connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x0, 0x0, 0x0, 0x5, 0x9, 0x8, 0x6, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x20000000) r3 = socket$kcm(0x10, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)="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"/377, 0x179}], 0x1, 0x0, 0x0, 0x2663}, 0x4000000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x4001c000}, 0x0) listen(r1, 0x8) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r6, 0x0, 0x0, 0x4000, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) 1.849135393s ago: executing program 3 (id=5539): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2c1, 0x1c8) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000000c0)={'veth1_to_bridge\x00', 0x2}) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000040)={0x7, 0x5, 0x7, 0xdedb, 0x15, "fd1500fdffffffff"}) ioctl$TIOCMSET(r8, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) socket$kcm(0x2, 0xb, 0x2) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000002e0000000800d803", @ANYRES32, @ANYBLOB="0a00340001010101010100001e009400000302fdffffffffffffff510005000800000001000e0000001f0000"], 0x48}}, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r7, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="08042cbd70992e28b725ed72a295460b41b55f36789d9462f50c00504916d5de0601c1ae6295f39bf96e7369cba36a6299520eb770e87aeacc398946b3ff226c0533ceaac22e4149d87d124c0e798a483b1da7fc542ced454a3b06fd7639b070f3b3655fca8374449aebda240fb7388e8cbce79d6dd261fbf980803e704067bc3d8f87a395bc84630170c1be6164008ac2571ab02f96972185f99ec490aa4a9aa686ce8316c70a07325cd01421a59e1d75affb33e29c375c579354b2462244de275b5dee6cfdc499df4a1714812f80188d7a", @ANYRES32=0x0, @ANYBLOB="0c0099000000000059000000"], 0x28}, 0x1, 0x0, 0x0, 0x400c800}, 0x40004) fanotify_mark(r5, 0x80, 0x40000009, r6, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x000\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31000000000000000008000a00", @ANYRES32=0x0, @ANYBLOB="e8001a8048000a80140007"], 0x15c}}, 0x4c0a0) 1.844395276s ago: executing program 4 (id=5540): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') lseek(r1, 0x2, 0x1) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000000)={0x0, 0xfff}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000100)={r2, 0x6, 0x5, [0x1ff, 0x9, 0x1000, 0x401, 0x2]}, &(0x7f0000000140)=0x12) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f00000000c0)=0xc) setresuid(r4, r4, r4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002dbd7000fedbcb2510000410080003008321aec085e27486ed54607befda32ac9999f8e69c0f6d8391534ebf68ef838f13e77f9521e58c34e037c80157a47ea7097ded5a38c6d2457dfa73d1fd4e4e4be18d3218420ee13d0bf047e6246b1468f4f1eac1e1ddc8568eeaab7605f6eb694b356e5900080aaa99b373c471d77cb33f5dd47d", @ANYRES32=r8, @ANYBLOB="76c06f13f252faaf6bd9bacb83c281cde938bcc53ec706fc16d27a6c51ba47b8b2cf14cf9cd56c1552adb9e482eee9"], 0x1c}, 0x1, 0x0, 0x0, 0x4e8c1}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) getdents64(r1, &(0x7f0000000340)=""/188, 0xbc) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r9}, 0x10) r10 = syz_open_dev$tty1(0xc, 0x4, 0x4) write(r10, &(0x7f0000000280)="e8bd8a4c56281ba2ba42cfa5b9fe5fc6dcde2ee431f5595ceadb9a2c95e57f15ee4a83f9e7d78ea996f78bd588bedcdbc730d6d15df6d2a26ca4e55e97ed0522a190ce241a37bad3317fba7e4be3dbbfec5e2f401b5658cc8fda", 0xffffffe5) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r11, 0x3ba0, &(0x7f00000003c0)={0x48}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r12, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf3, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0x11, 0x4623f, 0x6, 0x0, 0x1ff, 0x8000, 0xfffffffe, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0xa, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0xa, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c33, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x985, 0x4, 0x8, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0xff, 0xfffffff9, 0xfffffffd, 0x9, 0x3, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x9a, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x6, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x204, 0xffffffff], [0x401, 0xc584, 0xffff, 0xcd3, 0x7, 0x20, 0x404, 0x4, 0x8, 0xc, 0x7, 0x9, 0xe8b, 0x9, 0x80000001, 0x8, 0x3f92, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x1000, 0x80000001, 0x4, 0xff, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x47, 0x0, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x95e, 0x0, 0x3ff, 0x3, 0x1, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000003, 0x8, 0xd9, 0x5, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x1, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x7, 0x0, 0x5, 0x1e2, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0xfffffff8, 0x20008, 0x8a8, 0x2, 0x800, 0x409, 0x7, 0x4, 0x4, 0x10, 0x4, 0x0, 0x7fff, 0x8, 0x8, 0x401, 0x1, 0x1fd, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xe, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r12, 0x5501) 1.67426607s ago: executing program 1 (id=5541): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3a1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) r6 = socket$inet(0x2, 0x1, 0x100) listen(r6, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3e7000005006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00121000a6400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 1.522386418s ago: executing program 1 (id=5542): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x80000000000000) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYRESOCT=r2, @ANYRES32, @ANYBLOB, @ANYRES8=r3, @ANYRES16=r4, @ANYRESHEX], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x10001) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000140)={0x14, r7, 0xf1aad47e89fb43b5}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x1c4, r7, 0x2, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x100}, {0x8, 0x13, 0x1}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x10000}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x7fff}, {0x8, 0x13, 0x5}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffff7}, {0x6, 0x11, 0xa00}, {0x8, 0x13, 0x6}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x8001}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x1}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x434e}, {0x8, 0x13, 0x40000000}, {0x5, 0x14, 0x1}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x50}, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'veth1_to_batadv\x00', &(0x7f00000000c0)=@ethtool_cmd={0x49, 0x10000, 0x4, 0x2, 0x5, 0x6, 0x6, 0x7, 0x7, 0x2, 0x6, 0x5d4c, 0x1, 0x2, 0x9, 0x0, [0x6, 0x4]}}) 868.114254ms ago: executing program 3 (id=5543): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x84, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x30000}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3ff, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3bb, 0x9de7}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) r4 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2de, 0x0, 0xffffffff, 0x4}, &(0x7f00000003c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r3, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r4, 0x47f5, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000002c0)={0x20, 0x8, 0x4, "04b14fff"}, 0x0, 0x0, 0x0, 0x0}) 460.087163ms ago: executing program 1 (id=5544): socket$inet_tcp(0x2, 0x1, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x84, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x60ef, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 413.561134ms ago: executing program 1 (id=5545): r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x7ff, 0x2) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x8, r1, 0x0, 0x4, 0x0, 0x0, 0x2}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000500)={0x0, 0x4005, 0x4, {0x1, @win={{0xfffffffe, 0xffffffff}, 0x3, 0x2007f, 0x0, 0x0, 0x0}}, 0x2}) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x18d1, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xfd, 0x1, {0x22, 0x4}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000300)={0x2c, &(0x7f0000000140)={0x20, 0xb, 0x2f, {0x2f, 0x30, "b9d02d1fbb42de954ec615971eb4206a1a18d9405fe05a85b06532d3ca97d4e0b4f35a7179ba7831eca5a173c2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 77.392947ms ago: executing program 2 (id=5546): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x1) fchdir(r5) r6 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) getdents(r6, &(0x7f0000000280)=""/4096, 0x9005) r7 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x6, 0x129103) r8 = syz_io_uring_setup(0xb2, &(0x7f0000000380)={0x0, 0xbbcd, 0x10100, 0x10000000, 0x53b}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x0, 0x3, r11, &(0x7f0000000100)=0x80, &(0x7f0000001280)=@caif, 0x0, 0x40000, 0x1}) io_uring_enter(r8, 0x38c5, 0x2000000, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0x8, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x64, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x5}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x3}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x98}, @TCA_FQ_QUANTUM={0x8}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x1}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x5}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x7f}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x74a5a0cb}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x7ff}]}}]}, 0x90}}, 0x0) r13 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) unshare(0xc040400) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x39) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r13, 0x0) fcntl$getownex(r13, 0x10, &(0x7f00000001c0)) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)) r14 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2c41, 0x0) flock(r14, 0x1) flock(r14, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 0s ago: executing program 2 (id=5547): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x2a, 0x2, 0x0) r3 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x2b94, 0x80, 0x4, 0x3cf}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x404}) chroot(&(0x7f00000000c0)='./file0\x00') setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r2, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0xffffffffffffffff) kernel console output (not intermixed with test programs): 21][ T6113] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1344.479968][T25132] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1344.648362][T25132] usb 4-1: Using ep0 maxpacket: 8 [ 1344.657585][T25132] usb 4-1: config 1 has an invalid interface number: 6 but max is 0 [ 1344.666739][T25132] usb 4-1: config 1 has no interface number 0 [ 1344.708430][T25132] usb 4-1: New USB device found, idVendor=082d, idProduct=0300, bcdDevice=c3.4b [ 1344.727714][T25132] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.753258][T25132] usb 4-1: Product: syz [ 1344.765453][T25132] usb 4-1: Manufacturer: syz [ 1344.779415][T25132] usb 4-1: SerialNumber: syz [ 1345.085100][T25132] usb 4-1: palm_os_4_probe - error -71 getting connection info [ 1345.104554][T25132] visor 4-1:1.6: Handspring Visor / Palm OS converter detected [ 1345.133064][T25132] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1345.174798][T25132] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1345.216070][T25132] usb 4-1: USB disconnect, device number 112 [ 1345.262757][ T6113] usb 2-1: config 0 has no interfaces? [ 1345.274656][ T6113] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1345.284778][ T6113] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.284941][T25132] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1345.307575][T25132] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1345.317532][T25132] visor 4-1:1.6: device disconnected [ 1345.350506][ T6113] usb 2-1: Product: syz [ 1345.354738][ T6113] usb 2-1: Manufacturer: syz [ 1345.368197][ T6113] usb 2-1: SerialNumber: syz [ 1345.410097][ T6113] usb 2-1: config 0 descriptor?? [ 1345.628752][T15107] usb 6-1: USB disconnect, device number 75 [ 1345.700165][ T6113] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1345.937648][ T6113] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 1345.970213][ T6113] usb 5-1: config 0 has no interface number 0 [ 1346.041507][ T6113] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1346.258241][ T6113] usb 5-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1346.275091][T26162] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5088'. [ 1346.287246][T26162] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5088'. [ 1346.300069][T26162] bond0: entered promiscuous mode [ 1346.305423][T26162] ±ÿ: entered promiscuous mode [ 1346.314035][T26162] bond_slave_1: entered promiscuous mode [ 1346.322243][T26162] bond0: left promiscuous mode [ 1346.328088][T26162] ±ÿ: left promiscuous mode [ 1346.356705][T26162] bond_slave_1: left promiscuous mode [ 1346.424281][ T6113] usb 5-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 1346.433780][ T6113] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.443903][ T6113] usb 5-1: Product: syz [ 1346.473942][ T6113] usb 5-1: Manufacturer: syz [ 1346.506280][ T6113] usb 5-1: SerialNumber: syz [ 1346.522725][ T6113] usb 5-1: config 0 descriptor?? [ 1346.540986][ T6113] vmk80xx 5-1:0.255: driver 'vmk80xx' failed to auto-configure device. [ 1346.572229][ T6113] vmk80xx 5-1:0.255: probe with driver vmk80xx failed with error -22 [ 1346.658561][T15107] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1346.771421][ T9229] usb 5-1: USB disconnect, device number 127 [ 1346.807316][T26174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5090'. [ 1346.816778][T26174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5090'. [ 1346.830125][T25132] hid_parser_main: 6 callbacks suppressed [ 1346.830150][T25132] hid-generic 00A0:0008:0003.0050: unknown main item tag 0x0 [ 1346.845561][T25132] hid-generic 00A0:0008:0003.0050: unknown main item tag 0x0 [ 1346.853219][T25132] hid-generic 00A0:0008:0003.0050: unknown main item tag 0x0 [ 1346.860869][T15107] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1346.860899][T25132] hid-generic 00A0:0008:0003.0050: unknown main item tag 0x0 [ 1346.879541][T15107] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1346.879597][T15107] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1346.890488][T25132] hid-generic 00A0:0008:0003.0050: unknown main item tag 0x0 [ 1346.906235][T25132] hid-generic 00A0:0008:0003.0050: unknown main item tag 0x0 [ 1346.913958][T25132] hid-generic 00A0:0008:0003.0050: unknown main item tag 0x0 [ 1346.921706][T25132] hid-generic 00A0:0008:0003.0050: unknown main item tag 0x0 [ 1346.938834][T25132] hid-generic 00A0:0008:0003.0050: hidraw0: HID v0.05 Device [syz1] on syz0 [ 1346.983870][T26173] fuse: Unknown parameter 'user_i00000000000000000000' [ 1346.992459][T15107] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.004303][T26176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1347.016212][T26163] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1347.025957][T15107] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1347.040900][T26176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1347.585004][T26181] netlink: 'syz.4.5093': attribute type 13 has an invalid length. [ 1347.715486][T15107] usb 2-1: USB disconnect, device number 66 [ 1347.747971][T26183] openvswitch: netlink: Geneve opt len 54 is not a multiple of 4. [ 1347.892012][T26187] netlink: 'syz.1.5095': attribute type 2 has an invalid length. [ 1347.939439][T26191] netlink: 'syz.1.5095': attribute type 2 has an invalid length. [ 1347.986731][T26189] syzkaller1: entered promiscuous mode [ 1347.993748][T26189] syzkaller1: entered allmulticast mode [ 1348.135158][ T30] audit: type=1800 audit(1755536787.144:1153): pid=26197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5099" name="nullb0" dev="devtmpfs" ino=5407 res=0 errno=0 [ 1348.338774][T25132] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1348.707898][T25132] usb 2-1: device descriptor read/64, error -71 [ 1348.958412][T25132] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1349.102227][T26213] netlink: 'syz.3.5101': attribute type 6 has an invalid length. [ 1349.108382][T25132] usb 2-1: device descriptor read/64, error -71 [ 1349.117370][T26214] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5101'. [ 1349.244017][ T7783] usb 6-1: USB disconnect, device number 76 [ 1349.251848][T25132] usb usb2-port1: attempt power cycle [ 1349.391555][T26228] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.401239][T26228] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.409202][T26229] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5105'. [ 1349.428837][T26231] netlink: 'syz.5.5104': attribute type 16 has an invalid length. [ 1349.450579][T26231] netlink: 'syz.5.5104': attribute type 17 has an invalid length. [ 1349.490213][T26231] bridge0: port 1(bridge_slave_0) entered blocking state [ 1349.497410][T26231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1349.507057][T26231] bridge0: port 2(bridge_slave_1) entered blocking state [ 1349.514244][T26231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1349.546751][T26226] mÐZ`Ô€@: entered promiscuous mode [ 1349.588497][T26226] syzkaller1: entered promiscuous mode [ 1349.594119][T26226] syzkaller1: entered allmulticast mode [ 1349.632831][T25132] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1349.660657][T25132] usb 2-1: device descriptor read/8, error -71 [ 1349.848424][ T9229] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1349.898251][T25132] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1349.918826][T25132] usb 2-1: device descriptor read/8, error -71 [ 1350.008546][T18347] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 1350.028589][T25132] usb usb2-port1: unable to enumerate USB device [ 1350.035029][ T9229] usb 6-1: Using ep0 maxpacket: 16 [ 1350.041959][ T9229] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1350.054448][ T9229] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1350.065259][ T9229] usb 6-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 1350.075508][ T9229] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.087358][ T9229] usb 6-1: config 0 descriptor?? [ 1350.177278][T26253] vlan0: entered allmulticast mode [ 1350.182740][T26253] erspan0: entered allmulticast mode [ 1350.190867][T18347] usb 5-1: too many configurations: 96, using maximum allowed: 8 [ 1350.203028][T18347] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1350.212605][T18347] usb 5-1: can't read configurations, error -61 [ 1350.358363][T18347] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 1350.519843][T18347] usb 5-1: too many configurations: 96, using maximum allowed: 8 [ 1350.531559][T18347] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1350.537075][T26261] netlink: 'syz.2.5113': attribute type 1 has an invalid length. [ 1350.539965][T18347] usb 5-1: can't read configurations, error -61 [ 1350.554559][T18347] usb usb5-port1: attempt power cycle [ 1350.568140][T26261] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1350.580200][ T9229] viewsonic 0003:0543:E621.0051: hidraw0: USB HID v0.00 Device [HID 0543:e621] on usb-dummy_hcd.5-1/input0 [ 1350.598237][ T6113] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1350.737709][T26265] vlan2: entered allmulticast mode [ 1350.745776][T26265] macvtap0: entered allmulticast mode [ 1350.751376][T26265] veth0_macvtap: entered allmulticast mode [ 1350.760544][ T6113] usb 4-1: no configurations [ 1350.762380][T26265] bond2: (slave vlan2): making interface the new active one [ 1350.765194][ T6113] usb 4-1: can't read configurations, error -22 [ 1350.781136][T15107] usb 6-1: USB disconnect, device number 77 [ 1350.782259][T26265] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 1350.889860][ T6113] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1350.899512][T18347] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 1350.920708][T18347] usb 5-1: too many configurations: 96, using maximum allowed: 8 [ 1350.930207][T18347] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1350.937860][T18347] usb 5-1: can't read configurations, error -61 [ 1351.049062][ T6113] usb 4-1: no configurations [ 1351.053727][ T6113] usb 4-1: can't read configurations, error -22 [ 1351.060508][ T6113] usb usb4-port1: attempt power cycle [ 1351.068360][T18347] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 1351.104007][T18347] usb 5-1: too many configurations: 96, using maximum allowed: 8 [ 1351.116171][T18347] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1351.125808][T18347] usb 5-1: can't read configurations, error -61 [ 1351.133071][T18347] usb usb5-port1: unable to enumerate USB device [ 1351.309507][T26269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1351.320252][T26269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1351.346679][T26269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1351.360471][T26269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1351.372102][T26269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5115'. [ 1351.386811][T26269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5115'. [ 1351.398336][ T6113] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1351.431368][ T6113] usb 4-1: no configurations [ 1351.436012][ T6113] usb 4-1: can't read configurations, error -22 [ 1351.472171][T26273] netlink: 'syz.5.5117': attribute type 9 has an invalid length. [ 1351.493268][T15107] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1351.578489][ T6113] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1351.599606][ T6113] usb 4-1: no configurations [ 1351.604663][ T6113] usb 4-1: can't read configurations, error -22 [ 1351.611568][ T6113] usb usb4-port1: unable to enumerate USB device [ 1351.668442][T15107] usb 2-1: Using ep0 maxpacket: 32 [ 1351.674330][T15107] usb 2-1: too many configurations: 229, using maximum allowed: 8 [ 1351.683750][T15107] usb 2-1: config index 0 descriptor too short (expected 61554, got 27) [ 1351.692259][T15107] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1351.702825][T15107] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1351.712786][T15107] usb 2-1: config index 1 descriptor too short (expected 61554, got 27) [ 1351.721205][T15107] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1351.731568][T15107] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1351.738360][ T9229] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1351.741818][T15107] usb 2-1: config index 2 descriptor too short (expected 61554, got 27) [ 1351.756842][T15107] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1351.767051][T15107] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1351.777219][T15107] usb 2-1: config index 3 descriptor too short (expected 61554, got 27) [ 1351.786363][T15107] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1351.796526][T15107] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1351.806460][T15107] usb 2-1: config index 4 descriptor too short (expected 61554, got 27) [ 1351.814975][T15107] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1351.825141][T15107] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1351.835162][T15107] usb 2-1: config index 5 descriptor too short (expected 61554, got 27) [ 1351.843608][T15107] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1351.853799][T15107] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1351.864432][T15107] usb 2-1: config index 6 descriptor too short (expected 61554, got 27) [ 1351.873040][T15107] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1351.883217][T15107] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1351.893480][T15107] usb 2-1: config index 7 descriptor too short (expected 61554, got 27) [ 1351.902073][T15107] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1351.912243][T15107] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1351.922403][ T9229] usb 6-1: Using ep0 maxpacket: 16 [ 1351.923247][T15107] usb 2-1: New USB device found, idVendor=05ac, idProduct=347a, bcdDevice=89.cb [ 1351.929892][ T9229] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1351.936926][T15107] usb 2-1: New USB device strings: Mfr=135, Product=131, SerialNumber=201 [ 1351.949763][ T9229] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1351.966830][T15107] usb 2-1: Product: syz [ 1351.970226][ T9229] usb 6-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 1351.971403][T15107] usb 2-1: Manufacturer: syz [ 1351.983172][ T9229] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.985245][T15107] usb 2-1: SerialNumber: syz [ 1351.993165][ T9229] usb 6-1: Product: syz [ 1352.006406][ T9229] usb 6-1: Manufacturer: syz [ 1352.011997][ T9229] usb 6-1: SerialNumber: syz [ 1352.023140][ T9229] usb 6-1: config 0 descriptor?? [ 1352.030827][ T9229] kobil_sct 6-1:0.0: KOBIL USB smart card terminal converter detected [ 1352.043527][ T9229] usb 6-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1352.241174][T26273] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1352.250978][T26273] tipc: Enabled bearer , priority 10 [ 1352.260640][ T9229] usb 6-1: USB disconnect, device number 78 [ 1352.270198][ T9229] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1352.283258][ T9229] kobil_sct 6-1:0.0: device disconnected [ 1352.339572][T26278] fuse: Unknown parameter 'fd0x000000000000000d' [ 1353.368276][T25132] tipc: Node number set to 1239168455 [ 1353.453967][T26301] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5126'. [ 1353.465281][T15107] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1353.628305][T15107] usb 5-1: Using ep0 maxpacket: 8 [ 1353.635217][T15107] usb 5-1: config 1 has an invalid descriptor of length 21, skipping remainder of the config [ 1353.646077][T15107] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1353.658013][T15107] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1353.681242][T15107] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1353.708395][T15107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.720632][T15107] usb 5-1: Product: syz [ 1353.730564][T15107] usb 5-1: Manufacturer: syz [ 1353.740196][T15107] usb 5-1: SerialNumber: syz [ 1353.754750][T26287] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1353.794538][T15107] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 1353.803831][T15107] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 1353.810372][T15107] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 1354.051769][T15107] usb 5-1: USB disconnect, device number 6 [ 1354.124886][ T5867] usb 2-1: USB disconnect, device number 71 [ 1354.706000][T26326] netlink: 228 bytes leftover after parsing attributes in process `syz.5.5131'. [ 1354.898425][T25132] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1355.438314][T25132] usb 2-1: Using ep0 maxpacket: 16 [ 1355.444970][T25132] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1355.457992][T25132] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1355.471481][T25132] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1355.487969][T25132] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1355.498138][T26332] fuse: Bad value for 'fd' [ 1355.581560][T25132] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.623694][T25132] usb 2-1: config 0 descriptor?? [ 1355.639976][T26319] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1355.656954][T25132] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input178 [ 1356.178448][T25132] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1356.243131][T26352] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5142'. [ 1356.319404][T25132] usb 4-1: device descriptor read/64, error -71 [ 1356.328457][T26355] binder: 26351:26355 ioctl c0306201 200000000480 returned -14 [ 1356.402017][T15107] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 1356.600013][T15107] usb 5-1: config 32 has an invalid interface number: 72 but max is 0 [ 1356.609668][T15107] usb 5-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 1356.621705][T15107] usb 5-1: config 32 has no interface number 0 [ 1356.628401][T15107] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=5d.bf [ 1356.631630][T25132] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1356.637820][T15107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.654296][T26355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1356.665036][T26355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1356.688431][T26355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1356.699028][T26355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1356.768445][T25132] usb 4-1: device descriptor read/64, error -71 [ 1356.885914][ T6133] usb 5-1: USB disconnect, device number 7 [ 1356.894644][T25132] usb usb4-port1: attempt power cycle [ 1357.238300][T25132] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1357.260051][T25132] usb 4-1: device descriptor read/8, error -71 [ 1357.372523][ T6133] usb 2-1: USB disconnect, device number 72 [ 1357.401524][T15107] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1357.508318][T25132] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1357.623627][T26377] fuse: Bad value for 'fd' [ 1357.668491][T25132] usb 4-1: device descriptor read/8, error -71 [ 1357.722219][T15107] usb 6-1: Using ep0 maxpacket: 8 [ 1357.749905][T15107] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 1357.794149][T15107] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1357.822458][T15107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.828554][T25132] usb usb4-port1: unable to enumerate USB device [ 1357.838460][T15107] usb 6-1: Product: syz [ 1357.847243][T15107] usb 6-1: Manufacturer: syz [ 1357.859940][T15107] usb 6-1: SerialNumber: syz [ 1357.873940][T15107] usb 6-1: config 0 descriptor?? [ 1357.885730][T15107] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1357.917481][T15107] usb 6-1: setting power ON [ 1357.925245][T15107] dvb-usb: bulk message failed: -22 (2/0) [ 1357.960714][T15107] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1357.974877][T15107] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1357.991175][T15107] usb 6-1: media controller created [ 1358.026463][T15107] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1358.062356][T15107] usb 6-1: selecting invalid altsetting 6 [ 1358.069090][T15107] usb 6-1: digital interface selection failed (-22) [ 1358.075706][T15107] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1358.086972][T15107] usb 6-1: setting power OFF [ 1358.090387][T26365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1358.109885][T26365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1358.125235][T15107] dvb-usb: bulk message failed: -22 (2/0) [ 1358.142514][T15107] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1358.287315][T15107] (NULL device *): no alternate interface [ 1358.315866][T15107] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1358.392768][T15107] usb 6-1: USB disconnect, device number 79 [ 1358.628623][ T5867] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 1358.786178][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1358.807388][ T5867] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 1358.819241][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.828394][T15107] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1358.871986][ T5867] usb 5-1: config 0 descriptor?? [ 1359.032317][T15107] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1359.048302][T15107] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1359.063215][T15107] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1359.074022][T15107] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1359.090924][T15107] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1359.092026][T26398] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1359.122317][T15107] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1359.141893][T26398] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1359.148286][T15107] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1359.156434][T15107] usb 2-1: Product: syz [ 1359.165081][T15107] usb 2-1: Manufacturer: syz [ 1359.180021][T15107] cdc_wdm 2-1:1.0: skipping garbage [ 1359.192796][T15107] cdc_wdm 2-1:1.0: skipping garbage [ 1359.202156][T26400] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5148'. [ 1359.288454][T15107] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1359.288505][T15107] cdc_wdm 2-1:1.0: Unknown control protocol [ 1359.481859][T18347] usb 4-1: new low-speed USB device number 121 using dummy_hcd [ 1359.654634][T18347] usb 4-1: device descriptor read/64, error -71 [ 1359.769806][T26409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5150'. [ 1359.908488][T18347] usb 4-1: new low-speed USB device number 122 using dummy_hcd [ 1360.048468][T18347] usb 4-1: device descriptor read/64, error -71 [ 1360.091441][T26410] vivid-007: disconnect [ 1360.158684][T18347] usb usb4-port1: attempt power cycle [ 1360.227590][T15107] usb 2-1: USB disconnect, device number 73 [ 1360.236117][T26388] vivid-007: reconnect [ 1360.498341][T18347] usb 4-1: new low-speed USB device number 123 using dummy_hcd [ 1360.530027][T18347] usb 4-1: device descriptor read/8, error -71 [ 1360.768257][T18347] usb 4-1: new low-speed USB device number 124 using dummy_hcd [ 1360.801559][T18347] usb 4-1: device descriptor read/8, error -71 [ 1360.928655][T18347] usb usb4-port1: unable to enumerate USB device [ 1361.068245][T26429] fuse: Bad value for 'fd' [ 1361.232783][T26431] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5159'. [ 1361.430212][ T5867] usbhid 5-1:0.0: can't add hid device: -71 [ 1361.456394][ T5867] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1361.472502][ T5867] usb 5-1: USB disconnect, device number 8 [ 1361.688376][T18347] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1361.778351][ T6113] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1361.838340][T18347] usb 6-1: Using ep0 maxpacket: 16 [ 1361.846202][T18347] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1361.888386][T18347] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1361.900384][T18347] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1361.915550][T18347] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1361.928322][ T6113] usb 2-1: Using ep0 maxpacket: 8 [ 1361.933561][T18347] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1361.944560][T18347] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.952876][ T6113] usb 2-1: config 1 has an invalid descriptor of length 234, skipping remainder of the config [ 1361.968287][ T6113] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1361.981022][ T6113] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1361.994773][T18347] usb 6-1: config 0 descriptor?? [ 1362.006963][ T6113] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1362.016492][ T6113] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.024972][ T6113] usb 2-1: Product: syz [ 1362.029318][ T6113] usb 2-1: Manufacturer: syz [ 1362.034000][ T6113] usb 2-1: SerialNumber: syz [ 1362.054254][T26438] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 1362.082018][ T6113] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1362.094921][ T6113] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 1362.102472][ T6113] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 1362.154177][ T30] audit: type=1326 audit(1755536801.174:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26455 comm="syz.2.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c438ebe9 code=0x7ffc0000 [ 1362.209999][ T30] audit: type=1326 audit(1755536801.174:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26455 comm="syz.2.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c438ebe9 code=0x7ffc0000 [ 1362.235737][ T30] audit: type=1326 audit(1755536801.174:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26455 comm="syz.2.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f61c438ebe9 code=0x7ffc0000 [ 1362.259844][ T30] audit: type=1326 audit(1755536801.174:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26455 comm="syz.2.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c438ebe9 code=0x7ffc0000 [ 1362.288879][ T30] audit: type=1326 audit(1755536801.174:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26455 comm="syz.2.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f61c438ebe9 code=0x7ffc0000 [ 1362.313178][ T30] audit: type=1326 audit(1755536801.174:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26455 comm="syz.2.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c438ebe9 code=0x7ffc0000 [ 1362.402565][T25132] usb 2-1: USB disconnect, device number 74 [ 1362.460934][ T30] audit: type=1326 audit(1755536801.174:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26455 comm="syz.2.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f61c438ebe9 code=0x7ffc0000 [ 1362.554245][ T30] audit: type=1326 audit(1755536801.184:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26455 comm="syz.2.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c438ebe9 code=0x7ffc0000 [ 1362.576813][ C1] vkms_vblank_simulate: vblank timer overrun [ 1362.590402][ T30] audit: type=1326 audit(1755536801.184:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26455 comm="syz.2.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f61c438ebe9 code=0x7ffc0000 [ 1362.618617][ T30] audit: type=1326 audit(1755536801.184:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26455 comm="syz.2.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c438ebe9 code=0x7ffc0000 [ 1362.641158][ C1] vkms_vblank_simulate: vblank timer overrun [ 1363.196710][T26473] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1363.204156][T26463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1363.254836][T26463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1363.265437][T26476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5174'. [ 1363.274852][T26476] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5174'. [ 1363.290467][T26477] syz.3.5172: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1363.310352][T26477] CPU: 0 UID: 0 PID: 26477 Comm: syz.3.5172 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 1363.310385][T26477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1363.310400][T26477] Call Trace: [ 1363.310411][T26477] [ 1363.310419][T26477] dump_stack_lvl+0x189/0x250 [ 1363.310447][T26477] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1363.310477][T26477] ? __pfx__printk+0x10/0x10 [ 1363.310508][T26477] ? lock_release+0x4b/0x3e0 [ 1363.310540][T26477] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1363.310564][T26477] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1363.310585][T26477] warn_alloc+0x214/0x310 [ 1363.310615][T26477] ? stack_depot_save_flags+0x40/0x860 [ 1363.310648][T26477] ? __pfx_warn_alloc+0x10/0x10 [ 1363.310682][T26477] ? kasan_save_track+0x4f/0x80 [ 1363.310708][T26477] ? xskq_create+0x56/0x170 [ 1363.310729][T26477] ? xsk_init_queue+0xb0/0x110 [ 1363.310747][T26477] ? xsk_setsockopt+0x4dc/0x8d0 [ 1363.310773][T26477] ? do_sock_setsockopt+0x179/0x1b0 [ 1363.310794][T26477] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 1363.310814][T26477] ? do_syscall_64+0xfa/0x3b0 [ 1363.310844][T26477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1363.310866][T26477] __vmalloc_node_range_noprof+0x125/0x12f0 [ 1363.310901][T26477] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1363.310937][T26477] ? xsk_setsockopt+0x462/0x8d0 [ 1363.310964][T26477] ? __kasan_kmalloc+0x93/0xb0 [ 1363.310994][T26477] vmalloc_user_noprof+0xad/0xf0 [ 1363.311021][T26477] ? xskq_create+0xbf/0x170 [ 1363.311042][T26477] xskq_create+0xbf/0x170 [ 1363.311069][T26477] xsk_init_queue+0xb0/0x110 [ 1363.311100][T26477] xsk_setsockopt+0x4dc/0x8d0 [ 1363.311127][T26477] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1363.311153][T26477] ? __pfx_aa_sk_perm+0x10/0x10 [ 1363.311185][T26477] ? lock_release+0x4b/0x3e0 [ 1363.311226][T26477] ? aa_sock_opt_perm+0xff/0x1b0 [ 1363.311249][T26477] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1363.311276][T26477] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1363.311303][T26477] do_sock_setsockopt+0x179/0x1b0 [ 1363.311324][T26477] __x64_sys_setsockopt+0x13f/0x1b0 [ 1363.311341][T26477] do_syscall_64+0xfa/0x3b0 [ 1363.311370][T26477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1363.311395][T26477] ? clear_bhb_loop+0x60/0xb0 [ 1363.311419][T26477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1363.311440][T26477] RIP: 0033:0x7f0808f8ebe9 [ 1363.311461][T26477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1363.311475][T26477] RSP: 002b:00007f0809dd8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1363.311493][T26477] RAX: ffffffffffffffda RBX: 00007f08091b6180 RCX: 00007f0808f8ebe9 [ 1363.311505][T26477] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 1363.311521][T26477] RBP: 00007f0809011e19 R08: 0000000000000052 R09: 0000000000000000 [ 1363.311538][T26477] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1363.311553][T26477] R13: 00007f08091b6218 R14: 00007f08091b6180 R15: 00007f08092dfa28 [ 1363.311577][T26477] [ 1363.311598][T26477] Mem-Info: [ 1363.616603][T26477] active_anon:14725 inactive_anon:0 isolated_anon:0 [ 1363.616603][T26477] active_file:19949 inactive_file:40408 isolated_file:0 [ 1363.616603][T26477] unevictable:768 dirty:180 writeback:0 [ 1363.616603][T26477] slab_reclaimable:7204 slab_unreclaimable:155797 [ 1363.616603][T26477] mapped:34440 shmem:9359 pagetables:1707 [ 1363.616603][T26477] sec_pagetables:0 bounce:0 [ 1363.616603][T26477] kernel_misc_reclaimable:0 [ 1363.616603][T26477] free:1237759 free_pcp:17274 free_cma:0 [ 1363.663625][T26477] Node 0 active_anon:58900kB inactive_anon:0kB active_file:79780kB inactive_file:161428kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:140344kB dirty:720kB writeback:0kB shmem:35900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13256kB pagetables:6596kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1363.695738][ C1] vkms_vblank_simulate: vblank timer overrun [ 1363.703749][T26477] Node 1 active_anon:0kB inactive_anon:0kB active_file:16kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:232kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1363.734734][ C1] vkms_vblank_simulate: vblank timer overrun [ 1363.742391][T26477] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1363.771675][T26477] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 1363.777947][T26477] Node 0 DMA32 free:1050964kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:59056kB inactive_anon:0kB active_file:79780kB inactive_file:159848kB unevictable:1536kB writepending:720kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:41224kB local_pcp:20216kB free_cma:0kB [ 1363.810448][ C1] vkms_vblank_simulate: vblank timer overrun [ 1363.817086][T26477] lowmem_reserve[]: 0 0 1 1 1 [ 1363.823130][T26477] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1363.853084][T26477] lowmem_reserve[]: 0 0 0 0 0 [ 1363.858068][T26477] Node 1 Normal free:3884456kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:16kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:27744kB local_pcp:9172kB free_cma:0kB [ 1363.891839][ C1] vkms_vblank_simulate: vblank timer overrun [ 1363.898379][T26477] lowmem_reserve[]: 0 0 0 0 0 [ 1363.905047][T26477] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1363.919720][T26477] Node 0 DMA32: 1508*4kB (UME) 1500*8kB (UME) 1003*16kB (UME) 843*32kB (UME) 537*64kB (UME) 319*128kB (UME) 158*256kB (UME) 111*512kB (UME) 34*1024kB (UME) 4*2048kB (UME) 189*4096kB (UM) = 1050688kB [ 1363.944876][T26477] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1363.960738][T26477] Node 1 Normal: 158*4kB (UME) 78*8kB (UME) 56*16kB (UME) 234*32kB (UME) 74*64kB (UME) 23*128kB (UME) 12*256kB (UM) 9*512kB (UM) 3*1024kB (UM) 7*2048kB (UME) 938*4096kB (UM) = 3884456kB [ 1363.979512][T26477] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1363.990473][T26477] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1364.000825][T26477] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1364.010867][T26477] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1364.020759][T26477] 69710 total pagecache pages [ 1364.025725][T26477] 0 pages in swap cache [ 1364.034688][T26477] Free swap = 124996kB [ 1364.039422][T26477] Total swap = 124996kB [ 1364.043710][T26477] 2097051 pages RAM [ 1364.047833][T26477] 0 pages HighMem/MovableOnly [ 1364.053002][T26477] 425656 pages reserved [ 1364.057237][T26477] 0 pages cma reserved [ 1364.462908][T18347] usbhid 6-1:0.0: can't add hid device: -71 [ 1364.504462][T26492] pim6reg: entered allmulticast mode [ 1364.510217][T18347] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1364.593404][T18347] usb 6-1: USB disconnect, device number 80 [ 1365.071075][ T6113] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1365.398480][ T6113] usb 4-1: Using ep0 maxpacket: 32 [ 1365.515014][T15107] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1365.559849][ T6113] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1365.793622][T26519] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1366.096773][T26511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1366.113760][T26511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1366.778271][T15107] usb 2-1: Using ep0 maxpacket: 16 [ 1366.838607][ T6113] usb 4-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=d4.09 [ 1366.898280][ T6113] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.908272][T18347] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1366.924067][ T6113] usb 4-1: Product: syz [ 1366.928325][ T6113] usb 4-1: Manufacturer: syz [ 1366.932982][ T6113] usb 4-1: SerialNumber: syz [ 1366.982689][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.989755][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1366.998287][T15107] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1367.008591][T15107] usb 2-1: config 0 has no interfaces? [ 1367.023709][T15107] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1367.032906][T15107] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1367.041653][ T6113] usb 4-1: config 0 descriptor?? [ 1367.046704][T15107] usb 2-1: Manufacturer: syz [ 1367.062108][T15107] usb 2-1: config 0 descriptor?? [ 1367.082901][ T6113] peak_usb 4-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 1367.090776][ T6113] peak_usb 4-1:0.0: unable to read PCAN-USB serial number (err -22) [ 1367.143254][T26526] usb usb8: usbfs: process 26526 (syz.4.5186) did not claim interface 3 before use [ 1367.233671][ T6113] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -22 [ 1367.260593][T15107] usb 2-1: USB disconnect, device number 75 [ 1367.373299][ T6113] usb 4-1: USB disconnect, device number 125 [ 1367.401182][T25132] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1367.510314][T26492] pim6reg: left allmulticast mode [ 1367.552530][T26527] netlink: 228 bytes leftover after parsing attributes in process `syz.5.5185'. [ 1367.559969][T25132] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1367.585860][T26535] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5188'. [ 1367.596568][T25132] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1367.609265][T25132] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1367.641400][T25132] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1367.652951][T25132] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.666914][T25132] usb 5-1: config 0 descriptor?? [ 1367.891165][T26545] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5191'. [ 1367.903459][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 1367.903475][ T30] audit: type=1326 audit(1755536806.934:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26542 comm="syz.3.5190" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0808f8ebe9 code=0x0 [ 1367.933761][T26545] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5191'. [ 1367.946249][T26545] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5191'. [ 1368.097094][T25132] plantronics 0003:047F:FFFF.0052: reserved main item tag 0xd [ 1368.105223][T26550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5193'. [ 1368.127442][T25132] plantronics 0003:047F:FFFF.0052: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1368.411655][T26570] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1368.628456][T26568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5198'. [ 1368.641085][T26568] openvswitch: netlink: nsh attr 0 has unexpected len 2044 expected 0 [ 1368.652411][T26568] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1369.229722][ T9229] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1369.391245][ T9229] usb 2-1: Using ep0 maxpacket: 32 [ 1369.398862][ T9229] usb 2-1: config 0 has an invalid interface number: 37 but max is 0 [ 1369.407106][ T9229] usb 2-1: config 0 has no interface number 0 [ 1369.415144][ T9229] usb 2-1: config 0 interface 37 has no altsetting 0 [ 1369.424474][ T9229] usb 2-1: New USB device found, idVendor=07b8, idProduct=401a, bcdDevice=10.8f [ 1369.435195][ T9229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.443355][T25132] usb 5-1: reset high-speed USB device number 9 using dummy_hcd [ 1369.453230][ T9229] usb 2-1: Product: syz [ 1369.457651][ T9229] usb 2-1: Manufacturer: syz [ 1369.466326][ T9229] usb 2-1: SerialNumber: syz [ 1369.485507][ T9229] usb 2-1: config 0 descriptor?? [ 1369.502181][ T9229] rtl8150 2-1:0.37: couldn't find required endpoints [ 1369.519985][ T9229] rtl8150 2-1:0.37: probe with driver rtl8150 failed with error -5 [ 1369.546494][ T30] audit: type=1800 audit(1755536808.564:1221): pid=26584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5200" name="file0" dev="fuse" ino=2 res=0 errno=0 [ 1369.815864][ T9229] usb 2-1: USB disconnect, device number 76 [ 1370.024036][T26598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1370.033425][T26598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1370.269293][T15442] usb 6-1: new full-speed USB device number 82 using dummy_hcd [ 1370.417804][T26603] fuse: Bad value for 'fd' [ 1370.503811][T15442] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1370.535040][T15442] usb 6-1: not running at top speed; connect to a high speed hub [ 1370.550713][T26611] ptrace attach of "./syz-executor exec"[16405] was attempted by "./syz-executor exec"[26611] [ 1370.799516][T26615] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5208'. [ 1371.132352][T15442] usb 6-1: config 219 has an invalid interface number: 147 but max is 1 [ 1371.231529][T15442] usb 6-1: config 219 has an invalid interface number: 147 but max is 1 [ 1371.288527][T15442] usb 6-1: config 219 has 1 interface, different from the descriptor's value: 2 [ 1371.356873][T15442] usb 6-1: config 219 has no interface number 0 [ 1371.369127][ T6133] usb 5-1: USB disconnect, device number 9 [ 1371.431246][T15442] usb 6-1: config 219 interface 147 has no altsetting 0 [ 1371.513153][T15442] usb 6-1: config 219 interface 147 has no altsetting 1 [ 1371.533377][T15442] usb 6-1: New USB device found, idVendor=07b0, idProduct=0006, bcdDevice=9e.d4 [ 1371.648384][T15442] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.888350][T15442] usb 6-1: Product: syz [ 1371.892604][T15442] usb 6-1: Manufacturer: syz [ 1371.897224][T15442] usb 6-1: SerialNumber: syz [ 1372.640121][T15107] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1372.849896][T15107] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1372.868233][T15107] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1372.917469][T15107] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1372.945631][T15107] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1372.965451][T15107] usb 4-1: Product: syz [ 1373.000623][T15107] usb 4-1: Manufacturer: syz [ 1373.006840][T15107] usb 4-1: SerialNumber: syz [ 1373.018339][T15107] usb 4-1: config 0 descriptor?? [ 1373.029079][T15107] usb 4-1: selecting invalid altsetting 0 [ 1373.390602][T18347] usb 4-1: USB disconnect, device number 126 [ 1374.072304][T15442] HFC-S_USB 6-1:219.147: probe with driver HFC-S_USB failed with error -5 [ 1374.114658][T15442] usb 6-1: USB disconnect, device number 82 [ 1374.438272][T25793] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1374.590132][T15107] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 1374.608341][T25793] usb 2-1: Using ep0 maxpacket: 8 [ 1374.616857][T25793] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1374.627228][T25793] usb 2-1: config 0 has no interfaces? [ 1374.636486][T25793] usb 2-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 1374.645885][T25793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.655242][T25793] usb 2-1: Product: syz [ 1374.660803][T25793] usb 2-1: Manufacturer: syz [ 1374.665423][T25793] usb 2-1: SerialNumber: syz [ 1374.675390][T25793] usb 2-1: config 0 descriptor?? [ 1374.728348][T15107] usb 5-1: device descriptor read/64, error -71 [ 1374.900661][T25793] usb 2-1: USB disconnect, device number 77 [ 1374.968258][T15107] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 1375.027387][T26681] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5221'. [ 1375.108502][T15107] usb 5-1: device descriptor read/64, error -71 [ 1375.218672][T15107] usb usb5-port1: attempt power cycle [ 1375.558216][T15107] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 1375.588877][T15107] usb 5-1: device descriptor read/8, error -71 [ 1375.686408][T26697] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5230'. [ 1375.828394][T15107] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 1375.860465][T15107] usb 5-1: device descriptor read/8, error -71 [ 1375.979056][T15107] usb usb5-port1: unable to enumerate USB device [ 1376.201254][T26707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1376.213818][T26707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1376.428317][T15107] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1376.544677][T26722] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5237'. [ 1376.578270][T15107] usb 4-1: Using ep0 maxpacket: 16 [ 1376.586091][T15107] usb 4-1: config 0 has an invalid descriptor of length 59, skipping remainder of the config [ 1376.598435][T15107] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1376.613485][T15107] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1376.622747][T15107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.632409][T15107] usb 4-1: Product: syz [ 1376.636765][T15107] usb 4-1: Manufacturer: syz [ 1376.641864][T15107] usb 4-1: SerialNumber: syz [ 1376.648291][T15107] usb 4-1: config 0 descriptor?? [ 1376.808351][T18347] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1376.858823][T15107] usb 4-1: USB disconnect, device number 127 [ 1376.970107][T18347] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1376.982299][T18347] usb 2-1: config 0 has no interfaces? [ 1376.987808][T18347] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1376.997389][T18347] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1377.009683][T18347] usb 2-1: config 0 descriptor?? [ 1377.069886][T26724] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5238'. [ 1377.087968][T26724] mÐZ`Ô€@: entered promiscuous mode [ 1377.217341][T15442] usb 2-1: USB disconnect, device number 78 [ 1377.281522][T26729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1377.324246][T26729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1377.438250][T25793] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1377.553774][T26736] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5241'. [ 1377.651591][T25793] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1377.662067][T25793] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1377.672695][T25793] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1377.692917][T25793] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1377.702414][T25793] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.806883][T25793] usb 6-1: Product: syz [ 1377.827499][T25793] usb 6-1: Manufacturer: syz [ 1377.832256][T25793] usb 6-1: SerialNumber: syz [ 1377.897373][T25793] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 1377.907180][T25793] cdc_ncm 6-1:1.0: bind() failure [ 1377.940056][T26732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1377.966640][T26732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1378.658559][T25793] usb 6-1: USB disconnect, device number 83 [ 1378.732004][T26757] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5250'. [ 1378.772832][T26757] mÐZ`Ô€@: entered promiscuous mode [ 1378.898699][T15442] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 1379.067566][T15442] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1379.118350][T15442] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1379.201311][T15442] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1379.222720][T15442] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1379.239306][T15442] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1379.254808][T15442] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1379.267221][T15442] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1379.283090][T15442] usb 5-1: Product: syz [ 1379.287489][T15442] usb 5-1: Manufacturer: syz [ 1379.294450][T15442] usb 5-1: SerialNumber: syz [ 1379.308550][T15442] usb 5-1: config 0 descriptor?? [ 1379.508248][T25793] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1379.526424][T15442] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1379.534625][T15442] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1379.790701][T15442] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 1379.801413][T25793] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1379.826325][T15442] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1379.864028][T25793] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1379.873156][T25793] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1379.884419][T15442] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1379.897445][T25793] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1379.906485][T25793] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1379.960160][T25793] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1380.000950][T15442] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 1380.029957][T25793] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1380.066662][T25793] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1380.103101][T25793] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1380.294924][T25793] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1380.302741][T25793] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1380.322860][T25793] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1380.371358][T26786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5260'. [ 1380.385447][T26786] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5260'. [ 1380.445627][T25793] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1380.464768][T25793] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1380.482520][T25793] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1380.493685][T25793] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1380.661558][T26793] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5261'. [ 1380.692418][T25793] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1380.766829][T25793] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1380.788451][T25793] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1380.802310][T15442] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 1380.833353][T15442] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 1380.847253][T25793] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1380.873750][T25793] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1380.944579][T25793] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1380.945318][T18347] usb 5-1: USB disconnect, device number 14 [ 1380.957593][T15107] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1380.994534][T25793] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1381.019798][T25793] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1381.034076][T25793] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1381.043096][T25793] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1381.052416][T25793] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1381.061219][T25793] usb 4-1: Product: syz [ 1381.065504][T25793] usb 4-1: Manufacturer: syz [ 1381.071449][T25793] usb 4-1: SerialNumber: syz [ 1381.081307][T25793] usb 4-1: config 0 descriptor?? [ 1381.098695][T25793] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 1381.122125][T15107] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1381.135462][T15107] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1381.157429][T15107] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1381.183550][T15107] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1381.209682][T15107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.228470][T15107] usb 6-1: Product: syz [ 1381.232704][T15107] usb 6-1: Manufacturer: syz [ 1381.237335][T15107] usb 6-1: SerialNumber: syz [ 1381.262507][T15107] usb 6-1: config 0 descriptor?? [ 1381.464448][T15107] usb-storage 6-1:0.0: USB Mass Storage device detected [ 1381.590406][ T6133] usb 4-1: USB disconnect, device number 2 [ 1381.597200][ T6133] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 1381.641397][T15107] usb-storage 6-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 1381.731793][T15107] usb 6-1: USB disconnect, device number 84 [ 1381.895553][T26822] netem: incorrect ge model size [ 1381.906052][T26822] netem: change failed [ 1382.061042][T26826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5256'. [ 1382.094267][T25793] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 1382.248413][T25793] usb 5-1: device descriptor read/64, error -71 [ 1382.499963][T25793] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 1382.648448][T25793] usb 5-1: device descriptor read/64, error -71 [ 1382.698221][ T6113] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1382.931416][T25793] usb usb5-port1: attempt power cycle [ 1383.064377][ T6113] usb 6-1: Using ep0 maxpacket: 16 [ 1383.154975][ T6113] usb 6-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 1383.249795][ T6113] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.278251][T25793] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 1383.280176][ T6113] usb 6-1: Product: syz [ 1383.297574][ T6113] usb 6-1: Manufacturer: syz [ 1383.308960][T25793] usb 5-1: device descriptor read/8, error -71 [ 1383.315587][ T6113] usb 6-1: SerialNumber: syz [ 1383.324281][ T6113] usb 6-1: config 0 descriptor?? [ 1383.335776][ T6113] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 1383.824728][T25793] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 1383.896498][T25793] usb 5-1: device descriptor read/8, error -71 [ 1383.956813][T26846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1383.965637][T26846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1384.018527][T25793] usb usb5-port1: unable to enumerate USB device [ 1385.009584][T26861] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5281'. [ 1385.026589][T26861] netlink: 43 bytes leftover after parsing attributes in process `syz.4.5281'. [ 1385.036468][T26861] netlink: 'syz.4.5281': attribute type 5 has an invalid length. [ 1385.064741][T26861] netlink: 43 bytes leftover after parsing attributes in process `syz.4.5281'. [ 1385.098235][T25793] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1385.228246][T25793] usb 2-1: device descriptor read/64, error -71 [ 1385.259646][T18347] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1385.488488][T25793] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1385.539041][T18347] usb 5-1: Using ep0 maxpacket: 8 [ 1385.544328][ T6113] pwc: Warning: more than 1 configuration available. [ 1385.551540][ T6113] pwc: Failed to set LED on/off time (-71) [ 1385.558020][ T6113] pwc: send_video_command error -71 [ 1385.563513][ T6113] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1385.575704][T18347] usb 5-1: config 179 has an invalid interface number: 65 but max is -1 [ 1385.592263][T18347] usb 5-1: config 179 has an invalid descriptor of length 249, skipping remainder of the config [ 1385.628547][T25793] usb 2-1: device descriptor read/64, error -71 [ 1385.654209][ T6113] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 1385.728584][T18347] usb 5-1: config 179 has 1 interface, different from the descriptor's value: 0 [ 1385.738735][T25793] usb usb2-port1: attempt power cycle [ 1385.754756][ T6113] usb 6-1: USB disconnect, device number 85 [ 1385.771650][T18347] usb 5-1: config 179 has no interface number 0 [ 1385.805992][T18347] usb 5-1: config 179 interface 65 has no altsetting 0 [ 1385.813826][T18347] usb 5-1: New USB device found, idVendor=12ab, idProduct=0077, bcdDevice= 0.00 [ 1385.823667][T18347] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1386.082810][T18347] usb 5-1: string descriptor 0 read error: -71 [ 1386.098596][T25793] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1386.107793][T18347] hub 5-1:179.65: bad descriptor, ignoring hub [ 1386.114129][T18347] hub 5-1:179.65: probe with driver hub failed with error -5 [ 1386.139516][T25793] usb 2-1: device descriptor read/8, error -71 [ 1386.175370][T18347] usb 5-1: USB disconnect, device number 19 [ 1386.389753][T25793] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1386.419525][T25793] usb 2-1: device descriptor read/8, error -71 [ 1386.618993][T25793] usb usb2-port1: unable to enumerate USB device [ 1387.016537][T26897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5289'. [ 1387.326882][T26902] sctp: [Deprecated]: syz.4.5292 (pid 26902) Use of int in max_burst socket option deprecated. [ 1387.326882][T26902] Use struct sctp_assoc_value instead [ 1387.918446][ T6113] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1388.070257][ T6113] usb 5-1: device descriptor read/64, error -71 [ 1388.418341][ T6113] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1388.558325][ T6113] usb 5-1: device descriptor read/64, error -71 [ 1388.591297][T26917] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 1388.668463][ T6113] usb usb5-port1: attempt power cycle [ 1388.788342][T15107] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 1388.973938][T15107] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1388.984978][T15107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.997671][T15107] usb 4-1: Product: syz [ 1389.004935][T15107] usb 4-1: Manufacturer: syz [ 1389.012595][T15107] usb 4-1: SerialNumber: syz [ 1389.042047][ T6113] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1389.050315][T15107] usb 4-1: config 0 descriptor?? [ 1389.062633][T15107] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1389.077002][T15107] usb 4-1: setting power ON [ 1389.083312][T15107] dvb-usb: bulk message failed: -22 (2/0) [ 1389.088468][T25793] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1389.091145][ T6113] usb 5-1: device descriptor read/8, error -71 [ 1389.108635][T15107] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1389.127078][T15107] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 1389.146839][T15107] dvb_usb_cxusb 4-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 1389.248808][T25793] usb 6-1: Using ep0 maxpacket: 16 [ 1389.269289][ T6133] usb 4-1: USB disconnect, device number 3 [ 1389.289614][T25793] usb 6-1: config 8 has an invalid interface number: 39 but max is 0 [ 1389.299806][T25793] usb 6-1: config 8 has no interface number 0 [ 1389.307152][T25793] usb 6-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 1389.319501][T25793] usb 6-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1389.330057][T25793] usb 6-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 1389.340244][T25793] usb 6-1: config 8 interface 39 has no altsetting 0 [ 1389.353281][T25793] usb 6-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 1389.362859][T25793] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.369339][ T6113] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1389.388232][T25793] usb 6-1: Product: syz [ 1389.392551][T25793] usb 6-1: Manufacturer: syz [ 1389.398431][T25793] usb 6-1: SerialNumber: syz [ 1389.413299][ T6113] usb 5-1: device descriptor read/8, error -71 [ 1389.538491][ T6113] usb usb5-port1: unable to enumerate USB device [ 1389.846935][T25793] ipheth 6-1:8.39: ipheth_enable_ncm: usb_control_msg: 0 [ 1389.862763][T25793] ipheth 6-1:8.39: Apple iPhone USB Ethernet device attached [ 1389.918232][ T6133] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1389.990549][ T6113] usb 6-1: USB disconnect, device number 86 [ 1390.065218][ T6113] ipheth 6-1:8.39: Apple iPhone USB Ethernet now disconnected [ 1390.084036][ T6133] usb 2-1: Using ep0 maxpacket: 32 [ 1390.096240][ T6133] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1390.138419][ T6133] usb 2-1: config 0 has no interface number 0 [ 1390.151056][ T6133] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1390.179409][ T6133] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1390.205460][ T6133] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.232060][ T6133] usb 2-1: Product: syz [ 1390.240868][ T6133] usb 2-1: Manufacturer: syz [ 1390.252079][ T6133] usb 2-1: SerialNumber: syz [ 1390.276244][ T6133] usb 2-1: config 0 descriptor?? [ 1390.306430][ T6133] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1390.332078][ T6133] em28xx 2-1:0.132: Video interface 132 found: [ 1390.528889][ T6113] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1390.559388][ T6133] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 1390.688282][ T6113] usb 6-1: Using ep0 maxpacket: 16 [ 1390.742995][ T6113] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1390.787039][ T6133] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1390.796240][ T6113] usb 6-1: config 0 has no interface number 0 [ 1390.824658][ T6133] em28xx 2-1:0.132: board has no eeprom [ 1390.830406][ T6113] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1390.890971][ T6113] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1390.923356][ T6113] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1390.939464][ T6133] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1390.956345][ T6133] em28xx 2-1:0.132: analog set to bulk mode. [ 1390.973067][T25132] em28xx 2-1:0.132: Registering V4L2 extension [ 1390.978191][ T6113] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.994271][ T6133] usb 2-1: USB disconnect, device number 83 [ 1391.021787][ T6133] em28xx 2-1:0.132: Disconnecting em28xx [ 1391.173817][ T6113] usb 6-1: config 0 descriptor?? [ 1391.217452][T25132] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 1391.227375][T25132] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 1391.237128][T25132] em28xx 2-1:0.132: No AC97 audio processor [ 1391.247119][T25132] usb 2-1: Decoder not found [ 1391.253936][T25132] em28xx 2-1:0.132: failed to create media graph [ 1391.688411][T25132] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 1391.758511][T25132] em28xx 2-1:0.132: Remote control support is not available for this card. [ 1391.837931][ T6113] input: HID 28bd:0071 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0071.0053/input/input184 [ 1391.880174][ T6133] em28xx 2-1:0.132: Closing input extension [ 1391.922828][ T6113] input: HID 28bd:0071 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0071.0053/input/input185 [ 1391.930117][ T6133] em28xx 2-1:0.132: Freeing device [ 1392.151169][ T6113] uclogic 0003:28BD:0071.0053: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.5-1/input1 [ 1392.268645][ T6113] usb 6-1: USB disconnect, device number 87 [ 1392.345750][T27008] fido_id[27008]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1392.501991][ T6133] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1392.543761][T27019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5320'. [ 1392.712610][ T6133] usb 2-1: Using ep0 maxpacket: 8 [ 1392.726342][ T6133] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 1392.734767][ T6133] usb 2-1: config 0 has no interface number 0 [ 1392.746405][ T6133] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1392.756090][ T6133] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.764907][ T6133] usb 2-1: Product: syz [ 1392.769332][ T6133] usb 2-1: Manufacturer: syz [ 1392.773943][ T6133] usb 2-1: SerialNumber: syz [ 1392.801056][ T6133] usb 2-1: config 0 descriptor?? [ 1392.838381][ T6113] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1392.998811][T27034] openvswitch: netlink: Message has 4 unknown bytes. [ 1393.018323][T27000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1393.044747][T27000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1393.174316][ T6133] uvcvideo 2-1:0.31: probe with driver uvcvideo failed with error -22 [ 1393.189934][ T6113] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1393.192721][ T6133] usb 2-1: USB disconnect, device number 84 [ 1393.198350][ T6113] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1393.272651][ T6113] usb 5-1: config 0 has no interface number 0 [ 1393.287041][ T6113] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice= 0.05 [ 1393.317545][ T6113] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.345434][ T6113] usb 5-1: config 0 descriptor?? [ 1393.367043][ T6113] usb 5-1: bad CDC descriptors [ 1393.590069][ T5867] usb 5-1: USB disconnect, device number 24 [ 1393.970515][T27047] netlink: 'syz.1.5329': attribute type 29 has an invalid length. [ 1393.982194][T27047] netlink: 'syz.1.5329': attribute type 29 has an invalid length. [ 1393.999609][T27047] netlink: 500 bytes leftover after parsing attributes in process `syz.1.5329'. [ 1394.161608][T20505] Bluetooth: hci0: unexpected Set CIG Parameters response data [ 1395.798075][T15442] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 1396.258433][T20505] Bluetooth: hci0: command tx timeout [ 1396.327636][T15442] usb 5-1: config 0 has an invalid interface number: 110 but max is 0 [ 1396.380673][T15442] usb 5-1: config 0 has no interface number 0 [ 1397.169202][T15442] usb 5-1: config 0 interface 110 altsetting 2 endpoint 0x2 has invalid maxpacket 58112, setting to 64 [ 1397.184740][T15442] usb 5-1: config 0 interface 110 has no altsetting 0 [ 1397.409590][T15442] usb 5-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1397.425253][T15442] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.458216][T15442] usb 5-1: Product: syz [ 1397.462447][T15442] usb 5-1: Manufacturer: syz [ 1397.479767][T15442] usb 5-1: SerialNumber: syz [ 1397.498575][T15442] usb 5-1: config 0 descriptor?? [ 1397.507832][T27069] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1397.543977][T27085] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1397.726107][T27069] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1397.741229][T15442] cdc_subset 5-1:0.110: probe with driver cdc_subset failed with error -22 [ 1398.298030][T20505] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1398.306414][T20505] Bluetooth: hci0: Injecting HCI hardware error event [ 1398.313356][T20505] Bluetooth: hci0: hardware error 0x00 [ 1398.418326][T27096] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5340'. [ 1398.532233][T27092] vlan2: entered allmulticast mode [ 1398.537574][T27092] bond2: entered allmulticast mode [ 1398.774304][T27110] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0 [ 1399.740978][ T5867] usb 5-1: USB disconnect, device number 25 [ 1399.757706][T27121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5348'. [ 1400.439736][T20505] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1401.180424][T27156] trusted_key: encrypted_key: insufficient parameters specified [ 1401.305957][T27154] tipc: Enabling of bearer rejected, already enabled [ 1401.378254][T15442] usb 6-1: new full-speed USB device number 88 using dummy_hcd [ 1401.532575][T15442] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1401.546345][T15442] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1401.557932][T15442] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1401.571926][T15442] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.642916][T15442] usb 6-1: config 0 descriptor?? [ 1401.651430][T27152] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1402.171050][T15442] creative-sb0540 0003:041E:3100.0054: item fetching failed at offset 1/5 [ 1402.233554][T15442] creative-sb0540 0003:041E:3100.0054: parse failed [ 1402.412190][T15442] creative-sb0540 0003:041E:3100.0054: probe with driver creative-sb0540 failed with error -22 [ 1402.528286][T15442] usb 6-1: USB disconnect, device number 88 [ 1402.617134][T27175] netdevsim0: mtu less than device minimum [ 1402.876020][T27184] netlink: 'syz.5.5361': attribute type 1 has an invalid length. [ 1402.906588][T27184] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1402.945115][T27184] bond3: (slave ip6erspan0): making interface the new active one [ 1402.983890][T27184] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1403.270811][T27198] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5364'. [ 1403.280123][T15442] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1403.314287][ T6133] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1403.505608][T15442] usb 2-1: Using ep0 maxpacket: 32 [ 1403.521015][T15442] usb 2-1: config 0 has an invalid interface number: 83 but max is 0 [ 1403.529280][ T6133] usb 4-1: Using ep0 maxpacket: 16 [ 1403.536320][T15442] usb 2-1: config 0 has no interface number 0 [ 1403.545475][ T6133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1403.565597][ T6133] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1403.584570][T15442] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=92.f7 [ 1403.596425][T15442] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.607604][ T6133] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.624473][T15442] usb 2-1: Product: syz [ 1403.633328][ T6133] usb 4-1: config 0 descriptor?? [ 1403.645111][T15442] usb 2-1: Manufacturer: syz [ 1403.729775][T15442] usb 2-1: SerialNumber: syz [ 1403.741938][T15442] usb 2-1: config 0 descriptor?? [ 1404.153588][T15442] peak_usb 2-1:0.83 can0: unable to request usb[type=0 value=0] err=-71 [ 1404.174602][T15442] peak_usb 2-1:0.83: unable to read PCAN-USB Pro bootloader info (err -71) [ 1404.188664][ T6133] mcp2221 0003:04D8:00DD.0055: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 1404.255190][T15442] peak_usb 2-1:0.83: probe with driver peak_usb failed with error -71 [ 1404.320102][T15442] usb 2-1: USB disconnect, device number 85 [ 1404.571490][T15442] usb 4-1: USB disconnect, device number 4 [ 1404.728043][T27206] bridge0: port 3(netdevsim0) entered blocking state [ 1404.741011][T27206] bridge0: port 3(netdevsim0) entered disabled state [ 1404.747967][T27206] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1404.762635][T27206] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1404.773433][T27206] bridge0: port 3(netdevsim0) entered blocking state [ 1404.780383][T27206] bridge0: port 3(netdevsim0) entered forwarding state [ 1404.943704][T27215] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5367'. [ 1404.943807][T27215] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5367'. [ 1404.944458][T27215] veth1_vlan: left promiscuous mode [ 1404.998828][T27215] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5367'. [ 1405.036336][T27219] tipc: Failed to remove unknown binding: 66,1,1/0:860796019/860796021 [ 1405.036372][T27219] tipc: Failed to remove unknown binding: 66,1,1/0:860796019/860796021 [ 1405.431424][T27229] tipc: Enabled bearer , priority 0 [ 1405.461212][T27229] syzkaller0: entered promiscuous mode [ 1405.477181][T27229] syzkaller0: entered allmulticast mode [ 1405.513851][T27228] tipc: Resetting bearer [ 1405.523951][T27228] tipc: Disabling bearer [ 1405.963243][T27238] netlink: 'syz.1.5375': attribute type 3 has an invalid length. [ 1405.971638][T27238] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5375'. [ 1406.053591][T27238] netlink: 'syz.1.5375': attribute type 3 has an invalid length. [ 1406.053610][T27238] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5375'. [ 1406.903122][T27261] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5384'. [ 1406.988365][T15107] usb 2-1: new low-speed USB device number 86 using dummy_hcd [ 1407.142841][T15107] usb 2-1: device descriptor read/64, error -71 [ 1407.198227][ T6113] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1407.328568][ T6113] usb 6-1: device descriptor read/64, error -71 [ 1407.379034][ T6133] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1407.388237][T15107] usb 2-1: new low-speed USB device number 87 using dummy_hcd [ 1407.547041][T15107] usb 2-1: device descriptor read/64, error -71 [ 1407.548742][ T6133] usb 5-1: Using ep0 maxpacket: 16 [ 1407.561645][ T6133] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1407.573005][ T6133] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1407.584265][ T6133] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1407.597671][ T6133] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1407.608049][ T6133] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.608290][ T6113] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1407.627532][ T6133] usb 5-1: config 0 descriptor?? [ 1407.658418][T15107] usb usb2-port1: attempt power cycle [ 1407.758334][ T6113] usb 6-1: device descriptor read/64, error -71 [ 1407.872971][ T6113] usb usb6-port1: attempt power cycle [ 1408.008434][T15107] usb 2-1: new low-speed USB device number 88 using dummy_hcd [ 1408.027049][T27277] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5389'. [ 1408.039893][T15107] usb 2-1: device descriptor read/8, error -71 [ 1408.127646][ T6133] microsoft 0003:045E:07DA.0056: ignoring exceeding usage max [ 1408.144485][T27277] syzkaller1: entered promiscuous mode [ 1408.145144][ T6133] microsoft 0003:045E:07DA.0056: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1408.151597][T27277] syzkaller1: entered allmulticast mode [ 1408.163855][ T6133] microsoft 0003:045E:07DA.0056: no inputs found [ 1408.187619][ T6133] microsoft 0003:045E:07DA.0056: could not initialize ff, continuing anyway [ 1408.248456][ T6113] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1408.281703][ T6113] usb 6-1: device descriptor read/8, error -71 [ 1408.318386][T15107] usb 2-1: new low-speed USB device number 89 using dummy_hcd [ 1408.343479][T15107] usb 2-1: device descriptor read/8, error -71 [ 1408.468533][T15107] usb usb2-port1: unable to enumerate USB device [ 1408.518262][ T6113] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1408.532356][T27287] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5391'. [ 1408.542129][ T6113] usb 6-1: device descriptor read/8, error -71 [ 1408.548590][T27287] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5391'. [ 1408.561963][T27287] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5391'. [ 1408.658460][ T6113] usb usb6-port1: unable to enumerate USB device [ 1408.730240][ T6133] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1408.888240][ T6133] usb 4-1: Using ep0 maxpacket: 16 [ 1408.894923][ T6133] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1408.905613][ T6133] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1408.917361][ T6133] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1408.927095][ T6133] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.935269][ T6133] usb 4-1: Product: syz [ 1408.939898][ T6133] usb 4-1: Manufacturer: syz [ 1408.944788][ T6133] usb 4-1: SerialNumber: syz [ 1409.159222][ T6133] usb 4-1: 0:2 : does not exist [ 1409.167573][ T6133] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1409.184283][ T6133] usb 4-1: USB disconnect, device number 5 [ 1409.207059][T21468] udevd[21468]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1409.482989][T27296] netlink: 'syz.2.5396': attribute type 1 has an invalid length. [ 1409.516351][T27295] netlink: 'syz.2.5396': attribute type 1 has an invalid length. [ 1409.526023][T27295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1409.535092][T27295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1409.543904][T27295] ip6tnl0: left promiscuous mode [ 1410.006851][T27306] __nla_validate_parse: 1 callbacks suppressed [ 1410.006867][T27306] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5399'. [ 1410.022253][T27306] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5399'. [ 1410.069265][ T5867] usb 5-1: USB disconnect, device number 26 [ 1410.238247][ T6113] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1410.336018][T27314] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5401'. [ 1410.428219][ T6113] usb 2-1: Using ep0 maxpacket: 32 [ 1410.442329][ T6113] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1410.460794][T27312] syzkaller1: entered promiscuous mode [ 1410.466661][T27312] syzkaller1: entered allmulticast mode [ 1410.472433][ T5867] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1410.514197][T27318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1410.526858][T27318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1410.544682][ T6113] usb 2-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.40 [ 1410.574259][ T6113] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.594158][ T6113] usb 2-1: Product: syz [ 1410.600115][ T6113] usb 2-1: Manufacturer: syz [ 1410.604758][ T6113] usb 2-1: SerialNumber: syz [ 1410.628359][ T5867] usb 5-1: Using ep0 maxpacket: 16 [ 1410.636139][ T5867] usb 5-1: config 1 has an invalid descriptor of length 95, skipping remainder of the config [ 1410.660355][ T6113] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input188 [ 1410.670035][ T5867] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1410.691992][ T5867] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1410.707333][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.725379][ T5867] usb 5-1: Product: syz [ 1410.737730][ T5867] usb 5-1: Manufacturer: syz [ 1410.746127][ T5867] usb 5-1: SerialNumber: syz [ 1410.852080][T27302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1410.878675][T27302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1410.889357][ T5218] bcm5974 2-1:1.0: could not read from device [ 1410.945860][ T6113] usb 2-1: USB disconnect, device number 90 [ 1410.958527][ T5218] bcm5974 2-1:1.0: could not read from device [ 1410.969041][ T5867] usb 5-1: 0:2 : does not exist [ 1410.981648][ T5867] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1411.024723][ T5867] usb 5-1: USB disconnect, device number 27 [ 1411.095422][T21468] udevd[21468]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1411.271125][T27333] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5407'. [ 1411.326559][T27338] tipc: Enabled bearer , priority 0 [ 1411.562253][T27338] syzkaller0: entered promiscuous mode [ 1411.685445][T27342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5411'. [ 1411.694656][T27342] netlink: 'syz.4.5411': attribute type 30 has an invalid length. [ 1411.702707][T27342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5411'. [ 1411.703489][T27338] syzkaller0: entered allmulticast mode [ 1411.873924][T27353] tipc: Resetting bearer [ 1412.181013][T27337] tipc: Resetting bearer [ 1412.345016][ T6113] tipc: Node number set to 2585076929 [ 1412.441626][T27337] tipc: Disabling bearer [ 1412.502949][T27369] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5415'. [ 1412.530330][T27367] mÐZ`Ô€@: entered promiscuous mode [ 1412.575032][T27367] syzkaller1: entered promiscuous mode [ 1412.588552][T27367] syzkaller1: entered allmulticast mode [ 1412.763654][T25132] IPVS: starting estimator thread 0... [ 1412.809563][T27372] delete_channel: no stack [ 1412.858280][T27377] IPVS: using max 49 ests per chain, 117600 per kthread [ 1413.088279][T25132] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1413.260416][T25132] usb 5-1: Using ep0 maxpacket: 32 [ 1413.281345][T25132] usb 5-1: config 71 has an invalid interface number: 194 but max is 0 [ 1413.306721][T25132] usb 5-1: config 71 has no interface number 0 [ 1413.313454][T25132] usb 5-1: config 71 interface 194 has no altsetting 0 [ 1413.331521][T25132] usb 5-1: New USB device found, idVendor=0403, idProduct=a951, bcdDevice=29.70 [ 1413.351517][T25132] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.368521][T25132] usb 5-1: Product: syz [ 1413.387643][T27399] netlink: 'syz.2.5420': attribute type 30 has an invalid length. [ 1413.388230][T25132] usb 5-1: Manufacturer: syz [ 1413.408229][T25132] usb 5-1: SerialNumber: syz [ 1413.474377][T27399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5420'. [ 1413.489599][T27399] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 1413.597183][T27408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1413.622822][T27379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1413.632710][T27408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1413.636329][T27379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1413.704736][ T30] audit: type=1326 audit(1755536852.714:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27378 comm="syz.4.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6118ebe9 code=0x7ffc0000 [ 1413.727493][ T6113] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1413.768495][ T30] audit: type=1326 audit(1755536852.714:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27378 comm="syz.4.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f2f6118ebe9 code=0x7ffc0000 [ 1413.840778][ T30] audit: type=1326 audit(1755536852.714:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27378 comm="syz.4.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6118ebe9 code=0x7ffc0000 [ 1413.876926][ T30] audit: type=1326 audit(1755536852.714:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27378 comm="syz.4.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2f6118ebe9 code=0x7ffc0000 [ 1413.902868][ T30] audit: type=1326 audit(1755536852.714:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27378 comm="syz.4.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6118ebe9 code=0x7ffc0000 [ 1413.926866][ T30] audit: type=1326 audit(1755536852.714:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27378 comm="syz.4.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2f6118ebe9 code=0x7ffc0000 [ 1413.951306][ T30] audit: type=1326 audit(1755536852.714:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27378 comm="syz.4.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6118ebe9 code=0x7ffc0000 [ 1413.974199][ T30] audit: type=1326 audit(1755536852.714:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27378 comm="syz.4.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2f6118ebe9 code=0x7ffc0000 [ 1413.997603][ T30] audit: type=1326 audit(1755536852.714:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27378 comm="syz.4.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6118ebe9 code=0x7ffc0000 [ 1414.031501][ T30] audit: type=1326 audit(1755536852.724:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27378 comm="syz.4.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6118ebe9 code=0x7ffc0000 [ 1414.038239][ T6113] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1414.075708][T25132] ftdi_sio 5-1:71.194: FTDI USB Serial Device converter detected [ 1414.084586][T25132] ftdi_sio ttyUSB0: unknown device type: 0x2970 [ 1414.097530][T25132] usb 5-1: USB disconnect, device number 28 [ 1414.098018][ T6113] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1414.114279][T25132] ftdi_sio 5-1:71.194: device disconnected [ 1414.153882][ T6113] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 1414.163814][ T6113] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.242464][T27419] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1414.596488][ T6113] usb 4-1: config 0 descriptor?? [ 1414.609342][ T6113] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1415.080728][ T6113] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1415.257729][T27435] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5434'. [ 1415.287676][T27435] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5434'. [ 1415.297263][T27435] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5434'. [ 1415.475625][ T6113] usb 5-1: Using ep0 maxpacket: 16 [ 1415.514989][ T6113] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1415.594587][ T6113] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1415.671914][ T6113] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1415.757282][T27437] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1415.831940][ T6113] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.847758][ T6113] usb 5-1: Product: syz [ 1415.857887][ T6113] usb 5-1: Manufacturer: syz [ 1415.869972][ T6113] usb 5-1: SerialNumber: syz [ 1415.890527][ T6113] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1415.899906][ T6113] r8152-cfgselector 5-1: config 0 descriptor?? [ 1416.058313][ T5867] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1416.209889][T15442] usb 4-1: USB disconnect, device number 6 [ 1416.231189][ T5867] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1416.241197][ T5867] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1416.294773][ T5867] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1416.324573][ T5867] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1416.334287][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.345839][ T5867] usb 6-1: Product: syz [ 1416.358347][ T5867] usb 6-1: Manufacturer: syz [ 1416.363009][ T5867] usb 6-1: SerialNumber: syz [ 1416.647696][T27447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1416.718730][T27447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1416.720990][ T5867] hub 6-1:1.0: bad descriptor, ignoring hub [ 1416.734333][ T5867] hub 6-1:1.0: probe with driver hub failed with error -5 [ 1416.788492][T27448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5437'. [ 1416.797540][T27448] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1416.810443][T27449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1416.822331][T27448] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1416.829809][T27448] bridge0: port 3(netdevsim0) entered disabled state [ 1416.840258][T27449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1416.851004][T27448] bridge_slave_1: left allmulticast mode [ 1416.856955][T27448] bridge_slave_1: left promiscuous mode [ 1416.868356][T27448] bridge0: port 2(bridge_slave_1) entered disabled state [ 1416.901129][T27448] bridge_slave_0: left allmulticast mode [ 1416.910278][T27448] bridge_slave_0: left promiscuous mode [ 1416.930446][T27448] bridge0: port 1(bridge_slave_0) entered disabled state [ 1416.970187][ T5867] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 93 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1418.079186][T25132] usb 6-1: USB disconnect, device number 93 [ 1418.087095][T25132] usblp0: removed [ 1418.228334][T25793] r8152-cfgselector 5-1: USB disconnect, device number 29 [ 1420.282238][T27497] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5447'. [ 1420.300878][T27497] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5447'. [ 1420.345434][T27497] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5447'. [ 1421.098347][ T5867] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1421.248471][ T5867] usb 4-1: Using ep0 maxpacket: 32 [ 1421.256762][ T5867] usb 4-1: config 0 has an invalid interface number: 145 but max is 1 [ 1421.265383][ T5867] usb 4-1: config 0 has an invalid interface number: 43 but max is 1 [ 1421.273683][ T5867] usb 4-1: config 0 has no interface number 0 [ 1421.284825][ T5867] usb 4-1: config 0 has no interface number 1 [ 1421.656690][ T5867] usb 4-1: config 0 interface 145 altsetting 236 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1421.680030][ T5867] usb 4-1: config 0 interface 43 altsetting 250 bulk endpoint 0xF has invalid maxpacket 1023 [ 1421.722935][ T5867] usb 4-1: config 0 interface 43 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1421.977951][ T5867] usb 4-1: config 0 interface 145 has no altsetting 0 [ 1421.988218][ T5867] usb 4-1: config 0 interface 43 has no altsetting 0 [ 1421.997984][ T5867] usb 4-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice=c8.6a [ 1422.007521][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1422.016153][ T5867] usb 4-1: Product: syz [ 1422.022816][ T5867] usb 4-1: Manufacturer: syz [ 1422.027804][ T5867] usb 4-1: SerialNumber: syz [ 1422.036336][ T5867] usb 4-1: config 0 descriptor?? [ 1422.208282][T15442] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1422.243484][T27507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5450'. [ 1422.268650][T27507] dummy0: left allmulticast mode [ 1422.278851][T27507] dummy0: left promiscuous mode [ 1422.290114][T27507] bridge0: port 3(dummy0) entered disabled state [ 1422.325507][T27507] bridge_slave_1: left allmulticast mode [ 1422.332711][T27507] bridge_slave_1: left promiscuous mode [ 1422.339133][T27507] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.347656][T27507] bridge_slave_0: left allmulticast mode [ 1422.356713][T27507] bridge_slave_0: left promiscuous mode [ 1422.363354][T27507] bridge0: port 1(bridge_slave_0) entered disabled state [ 1422.368439][T15442] usb 2-1: Using ep0 maxpacket: 16 [ 1422.380307][T27507] bridge0 (unregistering): left allmulticast mode [ 1422.424293][T15442] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1422.434727][T15442] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1422.444700][T27524] ptrace attach of "./syz-executor exec"[23068] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ /dev/net/tun ª ÿO  € ÐV 0  | /dev/net/tun"[27524] [ 1422.450156][T15442] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1422.548291][T15442] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1422.556469][T15442] usb 2-1: Product: syz [ 1422.562879][T15442] usb 2-1: Manufacturer: syz [ 1422.567663][T15442] usb 2-1: SerialNumber: syz [ 1422.587990][T15442] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1422.594489][T15442] r8152-cfgselector 2-1: config 0 descriptor?? [ 1422.676397][ T5867] keyspan_pda 4-1:0.145: required endpoints missing [ 1422.689606][ T5867] keyspan_pda 4-1:0.43: required endpoints missing [ 1422.699854][ T5867] usb 4-1: USB disconnect, device number 7 [ 1423.048498][T15442] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1423.207769][T27553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1423.222555][T27553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1423.226607][T27555] binder: 27554:27555 ioctl 40046205 0 returned -22 [ 1423.240274][T15442] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1423.252982][T15442] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1423.292398][T15442] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1423.310220][T15442] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.320599][T27556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1423.346921][T15442] usb 5-1: config 0 descriptor?? [ 1423.359377][T27556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1423.708477][T25793] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1423.784022][T27561] geneve2: entered promiscuous mode [ 1423.790083][T27561] geneve2: entered allmulticast mode [ 1423.881815][T25793] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1423.897724][T25793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1423.910590][T25793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1423.922260][T25793] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1423.937429][T25793] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1423.968206][T25793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.031038][T25793] usb 4-1: config 0 descriptor?? [ 1424.042900][T27558] raw-gadget.6 gadget.3: fail, usb_ep_enable returned -22 [ 1424.076472][T27535] sctp: [Deprecated]: syz.4.5457 (pid 27535) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1424.076472][T27535] Use struct sctp_sack_info instead [ 1424.359678][T27564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1424.648740][T27564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1424.662771][T27558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1424.671979][T27558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1424.708313][T27558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1424.730764][T27558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1424.745779][T25793] plantronics 0003:047F:FFFF.0057: unknown main item tag 0x0 [ 1424.765881][T25793] plantronics 0003:047F:FFFF.0057: unknown main item tag 0x0 [ 1424.787368][T25793] plantronics 0003:047F:FFFF.0057: unknown main item tag 0x0 [ 1424.799780][T25132] r8152-cfgselector 2-1: USB disconnect, device number 92 [ 1424.834997][T25793] plantronics 0003:047F:FFFF.0057: unknown main item tag 0x0 [ 1424.846521][T25793] plantronics 0003:047F:FFFF.0057: unknown main item tag 0x0 [ 1424.884371][T25793] plantronics 0003:047F:FFFF.0057: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1425.002849][T27573] netlink: 'syz.3.5465': attribute type 10 has an invalid length. [ 1425.011048][T27573] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5465'. [ 1425.020802][T27573] bond0: entered promiscuous mode [ 1425.025897][T27573] ±ÿ: entered promiscuous mode [ 1425.030970][T27573] bond_slave_1: entered promiscuous mode [ 1425.047149][T27573] bond0: entered allmulticast mode [ 1425.385616][T27573] ±ÿ: entered allmulticast mode [ 1425.400170][T27573] bond_slave_1: entered allmulticast mode [ 1425.409572][T27573] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1425.721567][T15442] usbhid 5-1:0.0: can't add hid device: -71 [ 1425.727833][T15442] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1425.792560][T15442] usb 5-1: USB disconnect, device number 30 [ 1426.208345][T15442] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1426.358303][T15442] usb 5-1: Using ep0 maxpacket: 8 [ 1426.385099][T15442] usb 5-1: config 162 has an invalid interface number: 246 but max is 1 [ 1426.400531][T15442] usb 5-1: config 162 has an invalid interface number: 245 but max is 1 [ 1426.409282][T15442] usb 5-1: config 162 has no interface number 0 [ 1426.415569][T15442] usb 5-1: config 162 has no interface number 1 [ 1426.460931][T15442] usb 5-1: config 162 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1426.474429][T15442] usb 5-1: config 162 interface 245 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1426.502871][T15442] usb 5-1: config 162 interface 245 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1426.517002][T15442] usb 5-1: config 162 interface 245 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1426.529157][T15442] usb 5-1: config 162 interface 245 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1426.544083][T15442] usb 5-1: config 162 interface 245 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1426.558758][T15442] usb 5-1: config 162 interface 246 has no altsetting 0 [ 1426.565784][T15442] usb 5-1: config 162 interface 245 has no altsetting 0 [ 1426.575110][T15442] usb 5-1: New USB device found, idVendor=8087, idProduct=0a5a, bcdDevice=5f.2c [ 1426.585083][T15442] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.594210][T15442] usb 5-1: Product: syz [ 1426.598651][T15442] usb 5-1: Manufacturer: syz [ 1426.603296][T15442] usb 5-1: SerialNumber: syz [ 1426.688264][T25132] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1426.688267][ T5867] usb 4-1: reset high-speed USB device number 8 using dummy_hcd [ 1426.738289][T25793] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1426.848265][T25132] usb 6-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=30.00 [ 1426.858191][ T5867] usb 4-1: device descriptor read/64, error -32 [ 1426.870277][T25132] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.885630][T25132] usb 6-1: Product: syz [ 1426.892433][T25793] usb 2-1: Using ep0 maxpacket: 8 [ 1426.909468][T25793] usb 2-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1426.944539][T25132] usb 6-1: Manufacturer: syz [ 1426.964489][T25132] usb 6-1: SerialNumber: syz [ 1426.977671][T25793] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1426.989009][T25132] usb 6-1: config 0 descriptor?? [ 1426.999159][T25793] usb 2-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 1427.010469][T25132] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1427.054354][T25132] usb 6-1: Detected FT2232HP [ 1427.059510][T25793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.098431][ T5867] usb 4-1: reset high-speed USB device number 8 using dummy_hcd [ 1427.156912][T25793] usb 2-1: config 0 descriptor?? [ 1427.222315][T27591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1427.247188][T27591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1427.268224][ T5867] usb 4-1: device descriptor read/64, error -32 [ 1427.295783][T25132] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1427.300199][T27604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1427.330395][T27604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1427.339254][T25132] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1427.353386][T27601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1427.354635][T25132] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1427.365688][T27601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1427.402271][T25132] usb 6-1: USB disconnect, device number 94 [ 1427.429588][T25132] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1427.444688][T27604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1427.462533][T25132] ftdi_sio 6-1:0.0: device disconnected [ 1427.476508][T27604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1427.518534][ T5867] usb 4-1: reset high-speed USB device number 8 using dummy_hcd [ 1427.548910][ T5867] usb 4-1: device descriptor read/8, error -32 [ 1427.594473][T25793] lenovo 0003:17EF:60FE.0058: hidraw1: USB HID v0.0b Device [HID 17ef:60fe] on usb-dummy_hcd.1-1/input0 [ 1427.795555][T27593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1427.804786][T27593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1427.829762][T15107] usb 2-1: USB disconnect, device number 93 [ 1427.911374][T27617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5482'. [ 1427.921346][T27617] mac80211_hwsim hwsim77 wlan0: entered promiscuous mode [ 1428.098373][ T5867] usb 4-1: reset high-speed USB device number 8 using dummy_hcd [ 1428.178911][ T5867] usb 4-1: device reset changed ep0 maxpacket size! [ 1428.186357][ T6113] usb 4-1: USB disconnect, device number 8 [ 1428.453811][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.460767][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.518212][ T6113] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1428.689678][ T6113] usb 4-1: Using ep0 maxpacket: 32 [ 1428.696765][ T6113] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1428.709864][ T6113] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1428.721417][ T6113] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1428.730466][ T6113] usb 4-1: Product: syz [ 1428.734909][ T6113] usb 4-1: Manufacturer: syz [ 1428.743230][ T6113] usb 4-1: SerialNumber: syz [ 1428.757670][ T6113] usb 4-1: config 0 descriptor?? [ 1428.866413][T15442] Bluetooth: failed to set interface 0, alt 0 -22 [ 1428.873468][T15442] btusb 5-1:162.245: probe with driver btusb failed with error -22 [ 1428.877514][T27610] raw-gadget.6 gadget.3: fail, usb_ep_enable returned -22 [ 1428.939186][ T6113] hub 4-1:0.0: bad descriptor, ignoring hub [ 1428.988309][ T6113] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1429.047085][T15442] usb 5-1: USB disconnect, device number 31 [ 1429.130441][T27633] netlink: 'syz.1.5485': attribute type 4 has an invalid length. [ 1429.238472][T25793] usb 4-1: USB disconnect, device number 9 [ 1429.560009][T15442] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1429.728256][T15442] usb 4-1: Using ep0 maxpacket: 32 [ 1429.738517][T15442] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1429.753098][T15442] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1429.762891][T15442] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1429.772523][T25793] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1429.783449][T15442] usb 4-1: Product: syz [ 1429.788217][T15442] usb 4-1: Manufacturer: syz [ 1429.793364][T15442] usb 4-1: SerialNumber: syz [ 1429.800110][T15442] usb 4-1: config 0 descriptor?? [ 1429.806500][T27610] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1429.816942][T15442] hub 4-1:0.0: bad descriptor, ignoring hub [ 1429.823411][T15442] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1429.963204][T25793] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1429.973731][T25793] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1429.983801][T25793] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1429.993161][T25793] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1430.001350][T25793] usb 6-1: SerialNumber: syz [ 1430.128562][T15442] usb 4-1: USB disconnect, device number 10 [ 1430.257968][T25793] usb 6-1: 0:2 : does not exist [ 1430.277635][T25793] usb 6-1: USB disconnect, device number 95 [ 1430.374289][T21468] udevd[21468]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1430.622792][T27663] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5494'. [ 1430.670402][T27665] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5493'. [ 1430.683239][T27665] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5493'. [ 1431.088314][ T6113] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1431.308812][ T6113] usb 4-1: config 0 has no interfaces? [ 1431.460731][ T6113] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1431.469996][ T6113] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.553160][ T6113] usb 4-1: Product: syz [ 1431.598178][T27687] openvswitch: netlink: Key type 31 is not supported [ 1431.787388][ T6113] usb 4-1: Manufacturer: syz [ 1431.858330][ T6113] usb 4-1: SerialNumber: syz [ 1431.994743][T25793] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1432.153591][T25793] usb 2-1: device descriptor read/64, error -71 [ 1432.226847][ T6113] usb 4-1: config 0 descriptor?? [ 1432.398271][T25793] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1432.558248][T25793] usb 2-1: device descriptor read/64, error -71 [ 1432.638389][ T5867] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1432.721533][T25793] usb usb2-port1: attempt power cycle [ 1432.809465][ T5867] usb 5-1: Using ep0 maxpacket: 16 [ 1432.822421][ T5867] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1432.834165][ T5867] usb 5-1: config 0 has no interfaces? [ 1432.845110][ T5867] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1432.858988][ T5867] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1432.867467][ T5867] usb 5-1: Manufacturer: syz [ 1432.873885][ T5867] usb 5-1: config 0 descriptor?? [ 1433.138533][T25793] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1433.158981][T25793] usb 2-1: device descriptor read/8, error -71 [ 1433.413717][T25793] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1433.511637][T25793] usb 2-1: device descriptor read/8, error -71 [ 1433.658984][T25793] usb usb2-port1: unable to enumerate USB device [ 1434.091993][T25793] usb 4-1: USB disconnect, device number 11 [ 1434.126553][T27713] tipc: Enabled bearer , priority 0 [ 1434.134318][T27713] syzkaller0: entered promiscuous mode [ 1434.153647][T27713] syzkaller0: entered allmulticast mode [ 1434.165240][T27713] tipc: Resetting bearer [ 1434.174511][T27712] tipc: Resetting bearer [ 1434.186667][T27712] tipc: Disabling bearer [ 1434.374948][T27727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1434.386182][T27727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1434.397066][T27727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1434.405965][T27727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1434.448536][T25793] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1434.610230][T25793] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1434.619563][T25793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1434.629663][T25793] usb 4-1: config 0 descriptor?? [ 1434.639472][T25793] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1434.838237][T25793] gp8psk: usb in 128 operation failed. [ 1434.846433][T27734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5515'. [ 1434.876296][T25793] gp8psk: usb in 137 operation failed. [ 1434.884582][T25793] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1434.896476][T27734] netlink: 'syz.1.5515': attribute type 21 has an invalid length. [ 1434.917085][T25793] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 1434.931855][T27734] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5515'. [ 1434.947587][T27734] netlink: 'syz.1.5515': attribute type 4 has an invalid length. [ 1434.958578][T25793] usb 4-1: media controller created [ 1434.971574][T27734] netlink: 'syz.1.5515': attribute type 5 has an invalid length. [ 1434.986686][T25793] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1434.996754][T27734] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5515'. [ 1435.022528][T25793] gp8psk_fe: Frontend attached [ 1435.037810][T25793] usb 4-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 1435.065441][T25793] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1435.124860][ T5867] usb 5-1: USB disconnect, device number 32 [ 1435.218548][T25793] gp8psk: usb in 138 operation failed. [ 1435.228378][T25793] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 1435.248196][T25793] gp8psk: found Genpix USB device pID = 203 (hex) [ 1435.277915][T25793] usb 4-1: USB disconnect, device number 12 [ 1435.395334][T27752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1435.435795][T25793] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 1435.463907][T27747] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5518'. [ 1435.501460][T27747] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5518'. [ 1435.531393][T27747] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5518'. [ 1435.591070][T27752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1435.635495][T27752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1435.833491][T27767] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 1436.078672][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1436.078690][ T30] audit: type=1326 audit(1755536874.994:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27768 comm="syz.5.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846fb8ebe9 code=0x7ffc0000 [ 1436.160167][ T30] audit: type=1326 audit(1755536874.994:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27768 comm="syz.5.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846fb8ebe9 code=0x7ffc0000 [ 1436.195699][ T30] audit: type=1326 audit(1755536874.994:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27768 comm="syz.5.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f846fb2add9 code=0x7ffc0000 [ 1436.242612][T27752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1436.597781][ T30] audit: type=1326 audit(1755536874.994:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27768 comm="syz.5.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f846fb2add9 code=0x7ffc0000 [ 1436.678259][ T30] audit: type=1326 audit(1755536874.994:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27768 comm="syz.5.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f846fb2add9 code=0x7ffc0000 [ 1436.729421][ T30] audit: type=1326 audit(1755536874.994:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27768 comm="syz.5.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846fb8ebe9 code=0x7ffc0000 [ 1436.788802][ T30] audit: type=1326 audit(1755536874.994:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27768 comm="syz.5.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f846fb2add9 code=0x7ffc0000 [ 1436.868464][ T30] audit: type=1326 audit(1755536874.994:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27768 comm="syz.5.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846fb8ebe9 code=0x7ffc0000 [ 1436.938299][ T30] audit: type=1326 audit(1755536874.994:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27768 comm="syz.5.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f846fb2add9 code=0x7ffc0000 [ 1436.967073][ T30] audit: type=1326 audit(1755536874.994:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27768 comm="syz.5.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f846fb2add9 code=0x7ffc0000 [ 1437.065920][T27778] tipc: Enabled bearer , priority 0 [ 1437.129967][T27784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5530'. [ 1437.299407][ T5867] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1437.448354][T15442] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1437.472489][ T5867] usb 5-1: Using ep0 maxpacket: 8 [ 1437.494969][ T5867] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1437.615836][ T5867] usb 5-1: config 5 has an invalid interface number: 184 but max is 3 [ 1437.638288][ T5867] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1437.640435][T25793] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1437.664183][ T5867] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 4 [ 1437.692990][T15442] usb 6-1: Using ep0 maxpacket: 8 [ 1437.698450][T15442] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1437.702459][T15442] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1437.702618][T15442] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.702637][T15442] usb 6-1: Product: syz [ 1437.702649][T15442] usb 6-1: Manufacturer: syz [ 1437.702661][T15442] usb 6-1: SerialNumber: syz [ 1437.703913][T15442] usb 6-1: config 0 descriptor?? [ 1437.708658][T15442] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1437.755228][ T5867] usb 5-1: config 5 has no interface number 0 [ 1437.848353][T25793] usb 2-1: Using ep0 maxpacket: 8 [ 1437.886263][T25793] usb 2-1: config 1 has an invalid descriptor of length 178, skipping remainder of the config [ 1437.886312][T25793] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1437.886332][T25793] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1437.889580][T25793] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1437.889604][T25793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.889619][T25793] usb 2-1: Product: syz [ 1437.889631][T25793] usb 2-1: Manufacturer: syz [ 1437.889642][T25793] usb 2-1: SerialNumber: syz [ 1437.894597][T27796] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 1437.897049][T25793] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1437.897675][T25793] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 1437.897715][T25793] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 1438.078562][ T5867] usb 5-1: config 5 interface 184 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 1438.078604][ T5867] usb 5-1: config 5 interface 184 has no altsetting 0 [ 1438.086712][ T5867] usb 5-1: New USB device found, idVendor=1b3d, idProduct=018d, bcdDevice=ee.07 [ 1438.092188][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.093817][ T5867] usb 5-1: Product: syz [ 1438.093837][ T5867] usb 5-1: Manufacturer: syz [ 1438.093853][ T5867] usb 5-1: SerialNumber: syz [ 1438.265812][ T6113] usb 2-1: USB disconnect, device number 98 [ 1438.381961][T27780] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1438.689460][ T5867] ftdi_sio 5-1:5.184: FTDI USB Serial Device converter detected [ 1438.975739][ T5867] ftdi_sio ttyUSB0: unknown device type: 0xee07 [ 1438.978016][ T5867] usb 5-1: USB disconnect, device number 33 [ 1438.979146][ T5867] ftdi_sio 5-1:5.184: device disconnected [ 1439.459873][T27815] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5539'. [ 1439.469618][T27815] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5539'. [ 1439.478933][T27815] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5539'. [ 1439.508442][ T6133] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1439.661553][ T6133] usb 5-1: device descriptor read/64, error -71 [ 1439.920182][ T6133] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1440.058224][ T6133] usb 5-1: device descriptor read/64, error -71 [ 1440.175143][ T6133] usb usb5-port1: attempt power cycle [ 1440.228417][T27822] blktrace: Concurrent blktraces are not allowed on sg0 [ 1440.311772][T27825] netlink: 'syz.2.5538': attribute type 20 has an invalid length. [ 1440.528336][ T6133] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1440.536178][T25793] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1440.538074][T27786] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1440.543927][T15442] gspca_zc3xx: reg_r err -32 [ 1440.568906][ T6133] usb 5-1: device descriptor read/8, error -71 [ 1440.698185][T25793] usb 4-1: Using ep0 maxpacket: 32 [ 1440.704772][T25793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1440.716096][T25793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1440.726286][T25793] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1440.735468][T25793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.749771][T25793] usb 4-1: config 0 descriptor?? [ 1440.757013][T25793] hub 4-1:0.0: USB hub found [ 1440.808259][ T6133] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1440.831986][ T6133] usb 5-1: device descriptor read/8, error -71 [ 1440.848235][ T5867] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1440.948805][ T6133] usb usb5-port1: unable to enumerate USB device [ 1440.970801][T25793] hub 4-1:0.0: 1 port detected [ 1441.008315][ T5867] usb 2-1: Using ep0 maxpacket: 32 [ 1441.015806][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1441.027102][ T5867] usb 2-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 1441.040483][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.050336][ T5867] usb 2-1: config 0 descriptor?? [ 1441.138349][T15442] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1441.144798][T15442] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 1441.475019][ T5867] stadia 0003:18D1:9400.0059: item fetching failed at offset 0/4 [ 1441.483598][ T5867] stadia 0003:18D1:9400.0059: parse failed [ 1441.489682][ T5867] stadia 0003:18D1:9400.0059: probe with driver stadia failed with error -22 [ 1441.592740][T25793] hub 4-1:0.0: activate --> -90 [ 1441.673901][ T5867] usb 2-1: USB disconnect, device number 99 [ 1441.868934][ T31] INFO: task kworker/0:15:7782 blocked for more than 143 seconds. [ 1441.877064][ T31] Not tainted 6.17.0-rc2-syzkaller #0 [ 1441.883267][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1441.892103][ T31] task:kworker/0:15 state:D stack:21072 pid:7782 tgid:7782 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1441.904630][ T31] Workqueue: usb_hub_wq hub_event [ 1441.910470][ T31] Call Trace: [ 1441.913856][ T31] [ 1441.916966][ T31] __schedule+0x1798/0x4cc0 [ 1441.921965][ T31] ? __pfx___schedule+0x10/0x10 [ 1441.928070][ T31] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 1441.935906][ T31] ? lock_release+0x4b/0x3e0 [ 1441.941041][ T31] ? rcu_is_watching+0x15/0xb0 [ 1441.946021][ T31] schedule+0x165/0x360 [ 1441.950778][ T31] schedule_preempt_disabled+0x13/0x30 [ 1441.956516][ T31] __mutex_lock+0x7e6/0x1350 [ 1441.961700][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1441.966807][ T31] ? hub_event+0x21e5/0x4a20 [ 1441.970397][ T5867] usb 6-1: USB disconnect, device number 96 [ 1441.972167][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1441.986924][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1441.997042][ T31] hub_event+0x21e5/0x4a20 [ 1442.003147][T15442] usb 4-1: USB disconnect, device number 13 [ 1442.009418][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1442.015031][ T31] ? __pfx_hub_event+0x10/0x10 [ 1442.020254][ T31] ? rcu_is_watching+0x15/0xb0 [ 1442.025271][ T31] ? lock_acquire+0x5f/0x360 [ 1442.030227][ T31] ? rcu_is_watching+0x15/0xb0 [ 1442.035040][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1442.041119][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1442.046971][ T31] process_scheduled_works+0xade/0x17b0 [ 1442.052921][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1442.059161][ T31] worker_thread+0x8a0/0xda0 [ 1442.063904][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1442.071609][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1442.077824][ T31] ? __kthread_parkme+0x7b/0x200 [ 1442.083264][ T31] kthread+0x70e/0x8a0 [ 1442.087759][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1442.093211][ T31] ? __pfx_kthread+0x10/0x10 [ 1442.099025][ T31] ? rcu_is_watching+0x15/0xb0 [ 1442.103920][ T31] ? __pfx_kthread+0x10/0x10 [ 1442.108813][ T31] ret_from_fork+0x3f9/0x770 [ 1442.113607][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1442.119263][ T31] ? __switch_to_asm+0x39/0x70 [ 1442.124161][ T31] ? __switch_to_asm+0x33/0x70 [ 1442.129235][ T31] ? __pfx_kthread+0x10/0x10 [ 1442.133945][ T31] ret_from_fork_asm+0x1a/0x30 [ 1442.199967][ T31] [ 1442.203156][ T31] INFO: lockdep is turned off. [ 1442.213266][ T31] NMI backtrace for cpu 1 [ 1442.213287][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 1442.213313][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1442.213334][ T31] Call Trace: [ 1442.213342][ T31] [ 1442.213352][ T31] dump_stack_lvl+0x189/0x250 [ 1442.213388][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1442.213413][ T31] ? __pfx__printk+0x10/0x10 [ 1442.213447][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1442.213473][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1442.213505][ T31] ? __pfx__printk+0x10/0x10 [ 1442.213535][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1442.213573][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1442.213601][ T31] watchdog+0xf93/0xfe0 [ 1442.213632][ T31] ? watchdog+0x1de/0xfe0 [ 1442.213662][ T31] kthread+0x70e/0x8a0 [ 1442.213690][ T31] ? __pfx_watchdog+0x10/0x10 [ 1442.213717][ T31] ? __pfx_kthread+0x10/0x10 [ 1442.213744][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1442.213781][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1442.213809][ T31] ? __pfx_kthread+0x10/0x10 [ 1442.213834][ T31] ret_from_fork+0x3f9/0x770 [ 1442.213856][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1442.213879][ T31] ? __switch_to_asm+0x39/0x70 [ 1442.213905][ T31] ? __switch_to_asm+0x33/0x70 [ 1442.213933][ T31] ? __pfx_kthread+0x10/0x10 [ 1442.213959][ T31] ret_from_fork_asm+0x1a/0x30 [ 1442.213995][ T31] [ 1442.214026][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1442.372060][ C0] NMI backtrace for cpu 0 [ 1442.372080][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 1442.372102][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1442.372115][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1442.372146][ C0] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 c6 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1442.372163][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 1442.372181][ C0] RAX: c979caca26080d00 RBX: ffffffff81968308 RCX: c979caca26080d00 [ 1442.372196][ C0] RDX: 0000000000000001 RSI: ffffffff8be33460 RDI: ffffffff81968308 [ 1442.372209][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 1442.372224][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa38130 [ 1442.372239][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 1442.372251][ C0] FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 1442.372267][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1442.372280][ C0] CR2: 000055557c8515c8 CR3: 000000007ba3c000 CR4: 00000000003526f0 [ 1442.372296][ C0] Call Trace: [ 1442.372304][ C0] [ 1442.372312][ C0] default_idle+0x13/0x20 [ 1442.372328][ C0] default_idle_call+0x74/0xb0 [ 1442.372347][ C0] do_idle+0x1e8/0x510 [ 1442.372368][ C0] ? __pfx_do_idle+0x10/0x10 [ 1442.372392][ C0] cpu_startup_entry+0x44/0x60 [ 1442.372409][ C0] rest_init+0x2de/0x300 [ 1442.372428][ C0] start_kernel+0x3a9/0x410 [ 1442.372451][ C0] x86_64_start_reservations+0x24/0x30 [ 1442.372481][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1442.372507][ C0] common_startup_64+0x13e/0x147 [ 1442.372539][ C0] [ 1442.373301][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1442.555886][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 1442.566050][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1442.576121][ T31] Call Trace: [ 1442.579416][ T31] [ 1442.582369][ T31] dump_stack_lvl+0x99/0x250 [ 1442.587061][ T31] ? __asan_memcpy+0x40/0x70 [ 1442.591849][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1442.597150][ T31] ? __pfx__printk+0x10/0x10 [ 1442.601869][ T31] vpanic+0x281/0x750 [ 1442.605864][ T31] ? __pfx_vpanic+0x10/0x10 [ 1442.610399][ T31] ? rcu_is_watching+0x15/0xb0 [ 1442.615163][ T31] ? preempt_schedule+0xae/0xc0 [ 1442.620203][ T31] ? preempt_schedule_common+0x83/0xd0 [ 1442.625685][ T31] panic+0xb9/0xc0 [ 1442.629411][ T31] ? __pfx_panic+0x10/0x10 [ 1442.633837][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1442.639228][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1442.645404][ T31] watchdog+0xfd2/0xfe0 [ 1442.649581][ T31] ? watchdog+0x1de/0xfe0 [ 1442.653936][ T31] kthread+0x70e/0x8a0 [ 1442.658024][ T31] ? __pfx_watchdog+0x10/0x10 [ 1442.662721][ T31] ? __pfx_kthread+0x10/0x10 [ 1442.667411][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1442.672619][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1442.677924][ T31] ? __pfx_kthread+0x10/0x10 [ 1442.682732][ T31] ret_from_fork+0x3f9/0x770 [ 1442.687334][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1442.692464][ T31] ? __switch_to_asm+0x39/0x70 [ 1442.697239][ T31] ? __switch_to_asm+0x33/0x70 [ 1442.702011][ T31] ? __pfx_kthread+0x10/0x10 [ 1442.706635][ T31] ret_from_fork_asm+0x1a/0x30 [ 1442.711523][ T31] [ 1442.715661][ T31] Kernel Offset: disabled [ 1442.720207][ T31] Rebooting in 86400 seconds..