last executing test programs: 16m12.636613135s ago: executing program 3 (id=1402): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000000000200000010000000000000000000", @ANYRES32=0x1], 0x50) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0182101, &(0x7f00000004c0)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0182101, &(0x7f00000004c0)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000002000)=[{{&(0x7f00000000c0)=@hci, 0x80, &(0x7f0000001480)=[{&(0x7f0000000140)=""/193, 0xc1}, {&(0x7f0000000040)=""/64, 0x40}, {&(0x7f0000000240)=""/104, 0x68}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/33, 0x21}, {&(0x7f0000000300)=""/39, 0x27}, {&(0x7f0000001380)=""/243, 0xf3}], 0x7}, 0xff}, {{&(0x7f00000014c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000001880), 0x0, &(0x7f00000018c0)=""/21, 0x15}, 0x10000}, {{&(0x7f0000001900)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001980)=""/35, 0x23}, {&(0x7f00000019c0)=""/5, 0x5}, {&(0x7f0000001a00)=""/245, 0xf5}, {&(0x7f00000015c0)}, {&(0x7f0000001b40)=""/94, 0x5e}], 0x5, &(0x7f0000001c00)=""/2, 0x2}, 0x3}, {{&(0x7f0000001c40)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001cc0)=""/18, 0x12}, {&(0x7f0000001d00)=""/51, 0x33}, {&(0x7f0000001540)=""/95, 0x5f}, {&(0x7f0000001dc0)=""/102, 0x66}, {&(0x7f0000001e40)=""/30, 0x1e}, {&(0x7f0000002080)=""/151, 0x97}, {&(0x7f0000001f40)}], 0x7, &(0x7f0000001fc0)=""/23, 0x17}, 0x9}], 0x4, 0x102, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfe, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0, 0x0, 0x0, 0xfffc}}}}}, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000340)) (async) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000340)) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x3}) (async) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x3}) prlimit64(0x0, 0xb, 0x0, &(0x7f00000015c0)) timer_create(0xfffffffffffffffc, 0x0, 0x0) (async) timer_create(0xfffffffffffffffc, 0x0, 0x0) gettid() (async) gettid() 16m12.136173511s ago: executing program 3 (id=1406): r0 = socket$inet(0x2, 0x2, 0x73) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xac, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xc5df}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4}, 0x0) 16m11.890113862s ago: executing program 3 (id=1409): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000580)=0x281) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe, 0x0, 0x0, "df3f0400000000000000020000000609000040"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) 16m11.806736117s ago: executing program 3 (id=1411): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') getdents64(r1, &(0x7f0000001300)=""/4102, 0x1006) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000000)=0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r6 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file1/file4\x00') openat$binfmt(0xffffffffffffff9c, r6, 0x41, 0x1ff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x800}]}, @NFTA_SET_USERDATA={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}}, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) ioctl$BTRFS_IOC_BALANCE(r8, 0x5000940c, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat$binfmt(0xffffff9c, r6, 0x41, 0x1ff) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) sendto$packet(r0, &(0x7f0000000100)="93234cb0556d3f031c000302e8f7d504efbd3a82195dc6486ea09d14000600000089e9", 0xe, 0x20000801, &(0x7f00000000c0)={0xc9, 0xd, r5, 0x1, 0x65, 0x6, @remote}, 0x36) 16m10.839288031s ago: executing program 3 (id=1414): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r2, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) listen(r2, 0xd3) socket$nl_netfilter(0x10, 0x3, 0xc) 16m9.446429269s ago: executing program 3 (id=1415): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000000c0)={0x1b, 0x5, 0xd}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000097"]) 16m8.635445604s ago: executing program 32 (id=1415): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000000c0)={0x1b, 0x5, 0xd}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000097"]) 13m23.946388268s ago: executing program 4 (id=2061): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) r1 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x7f, 0x7ffc0002}]}) r2 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r2, r2, 0x21) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="240000001a0001000000ff7f00000000800000", @ANYRES8], 0x24}}, 0x0) getgroups(0x2, &(0x7f00000003c0)=[0x0, 0xffffffffffffffff]) keyctl$setperm(0x5, r0, 0x30925) keyctl$get_security(0x11, r0, 0x0, 0x0) syz_usb_connect(0x2, 0x6b, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a2401020005028a010209240603040001a53011240606040508000400050006000100050924030506030501f9092407"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x40000, 0x0) 13m22.492920722s ago: executing program 4 (id=2068): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x9, 0x3, 0xfffffff9) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) listen(0xffffffffffffffff, 0x802) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000080)='./bus\x00', 0x2, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2) sendmsg$nl_xfrm(r1, &(0x7f0000004640)={0x0, 0x0, &(0x7f0000004600)={&(0x7f0000004180)=@getpolicy={0x1a0, 0x15, 0x1, 0x70bd27, 0x25dfdbff, {{@in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x33}, 0x4e24, 0xc, 0x4e24, 0x10, 0x2, 0x20, 0x20, 0x5c, 0x0, 0xee01}}, [@policy={0xa8, 0x7, {{@in=@private=0xa010102, @in6=@loopback, 0x4e21, 0x0, 0x4e20, 0xd, 0x2, 0x20, 0x20, 0x5e}, {0x400, 0x3, 0x7, 0x8001, 0x7, 0x0, 0x81, 0x6}, {0x4, 0xffff, 0x6, 0x2}, 0x4, 0x6e6bbe, 0x0, 0x1, 0x1}}, @policy={0xa8, 0x7, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x0, 0x4e21, 0x7f, 0x2, 0x80, 0x80, 0x11}, {0x6, 0x2, 0x8d, 0x8, 0x1, 0x800, 0x33, 0x1}, {0x7, 0x0, 0x101, 0xffffffff}, 0x401, 0x0, 0x2, 0x1, 0x0, 0x1}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4804}, 0x810) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xfff2, 0xa}, {0x2, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) syz_emit_ethernet(0x7a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaff442f00fe8000000000000000000000000000befe88000000007752098da85434dd32ecda7f2f000000000000000001010c20880b0000000000000800000086dd080088be000000041f06d4030100000000000007080022eb0000000024089b84020000000000000000000000000000000000005fff484d2881ceeb95811edc400f3c922620120e20687cd67a6a2d1240f8acae62efa9"], 0x0) 13m19.95723773s ago: executing program 4 (id=2078): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) r1 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x7f, 0x7ffc0002}]}) r2 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r2, r2, 0x21) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="240000001a0001000000ff7f00000000800000", @ANYRES8], 0x24}}, 0x0) getgroups(0x2, &(0x7f00000003c0)=[0x0, 0xffffffffffffffff]) keyctl$setperm(0x5, r0, 0x30925) keyctl$get_security(0x11, r0, 0x0, 0x0) syz_usb_connect(0x2, 0x6b, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a2401020005028a010209240603040001a53011240606040508000400050006000100050924030506030501f9092407"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x40000, 0x0) 13m18.232132081s ago: executing program 4 (id=2088): unshare(0x2000200) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x9901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000040)=0x3) umount2(&(0x7f0000000140)='./file0\x00', 0x8) unshare(0x22020600) 13m18.114316664s ago: executing program 4 (id=2090): socket$inet6(0xa, 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0xff, 0x3}, 0x20) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r6, &(0x7f0000001600)=""/4089, 0x5, 0x200000000000049a) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@deltclass={0x50, 0x29, 0x100, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0x7}, {0xe, 0x2}, {0xfff3, 0xe}}, [@tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x8, 0x5}}, @tclass_kind_options=@c_taprio={0xb}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x40045) socket$inet_smc(0x2b, 0x1, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a6ff2640cda9eecdb9050000000109022b000100000000090400000201035100090503130000000000"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a0000000000000000070000", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f3000"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x8000) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000580)={0x1, @pix={0x97, 0x8, 0x32315559, 0x2, 0x3, 0x8, 0x3, 0xfffffffe, 0x0, 0x3, 0x0, 0x6}}) setxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'system.', ',+*.-\xe1\x00'}, &(0x7f00000002c0)='\x00', 0x1, 0x3) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) 13m18.088626192s ago: executing program 4 (id=2091): chdir(&(0x7f0000000480)='./cgroup\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/43, 0x2b}, {&(0x7f0000000180)=""/54, 0x36}, {&(0x7f0000000280)=""/133, 0x85}], 0x3, &(0x7f0000000380)=""/45, 0x2d}, 0x5}, {{&(0x7f0000000500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000400)=""/9, 0x9}, {&(0x7f0000000600)=""/218, 0xda}], 0x2, &(0x7f0000000740)=""/214, 0xd6}, 0x3ff}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000840)=""/182, 0xb6}, {&(0x7f0000000900)=""/52, 0x34}, {&(0x7f0000000940)=""/122, 0x7a}], 0x3, &(0x7f0000000a00)=""/113, 0x71}}, {{&(0x7f0000000a80)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000b00)=""/182, 0xb6}], 0x1, &(0x7f0000000c00)}, 0x7}, {{&(0x7f0000000c40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000cc0)=""/135, 0x87}, {&(0x7f0000000d80)=""/97, 0x61}], 0x2, &(0x7f0000000e40)=""/42, 0x2a}, 0xffffff81}], 0x5, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg(r1, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f000020c000/0x4000)=nil, 0x4000) munlockall() r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open_by_handle_at(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000380000000500000000000000f7ffffffffffffff"], 0x513300) r4 = socket$pppoe(0x18, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r4, 0xcb16c000) readv(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003280)=@deltfilter={0xff8, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0x3}, {0xd, 0xffff}, {0xa, 0xb}}, [@TCA_RATE={0x6, 0x5, {0xc, 0x5}}, @filter_kind_options=@f_basic={{0xa}, {0xfc0, 0x2, [@TCA_BASIC_POLICE={0x10, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xdfe8}]}, @TCA_BASIC_POLICE={0x42c, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x8a18, 0xccf, 0x6, 0x4, 0x9, 0x8, 0x3, 0x1, 0x0, 0x1, 0xf6d, 0x5ca, 0x9, 0xffff, 0x0, 0x7, 0x7, 0x6, 0xfffff001, 0x1, 0xb6ce, 0x958b, 0x9, 0x2, 0x6a6, 0x101, 0x7, 0x1ff, 0xc1, 0x5, 0x5, 0x5, 0xb4, 0x7fffffff, 0xbf, 0x8, 0x10000, 0xf, 0x200, 0xfff, 0x6, 0x2, 0x3, 0x7, 0x183, 0x0, 0x2, 0x7fff, 0x99de, 0xb, 0x3, 0x7fff, 0xfffffffd, 0x5, 0xb, 0x1000, 0x2, 0x81, 0x6, 0x5, 0x7, 0x4, 0x32a1, 0x0, 0x0, 0x39, 0x7, 0x10, 0x3, 0x80000001, 0x8001, 0x7, 0x301, 0xfffffffc, 0x3, 0x10, 0x6, 0x62, 0x1, 0x8, 0xf, 0x7, 0x3, 0x8, 0xa, 0x75db, 0x1, 0x7f, 0x6b4e4a7c, 0x8001, 0x3, 0x30, 0x2, 0x6, 0xffffffff, 0x6, 0xd, 0x3, 0xfffffe01, 0x1, 0x800, 0x81, 0x94, 0x7ff, 0x4a, 0xd51b, 0x0, 0x5, 0x2, 0x0, 0x0, 0x800, 0x200, 0x6, 0x1, 0x7ff, 0x1, 0x9, 0x7fff, 0x3, 0x6, 0x40, 0x8, 0xfffffffc, 0x1, 0x8, 0x68d, 0x4, 0x0, 0x4, 0x0, 0x3, 0xfffffcfa, 0x3f, 0x3ff, 0x3, 0x5, 0x800, 0x2, 0x4, 0x5, 0x5, 0x0, 0xffffffff, 0x401, 0x1, 0xb, 0x0, 0x4, 0x5, 0xfffeffff, 0x3, 0x2, 0x10001, 0x3, 0x1, 0x200, 0x40, 0x1, 0x0, 0x5, 0x0, 0x4, 0xfffffffb, 0x399c, 0x2, 0x78, 0x1ff, 0xeeb, 0x6, 0x4, 0x200, 0x6, 0x10, 0x5, 0x0, 0xff, 0x0, 0x5, 0x1000, 0xe568, 0xe832, 0xffffffff, 0x10000, 0xbce, 0x5, 0x7, 0x5, 0x9652, 0x8, 0xa, 0x1, 0x4, 0x45, 0x2, 0x101, 0x80, 0x0, 0x3, 0x6, 0xffffffff, 0x2, 0x8, 0x6, 0x7fffffff, 0x3, 0x3, 0xae3, 0xfc000000, 0x4, 0xbe53, 0xc32e, 0xb, 0xea, 0x3, 0x5, 0x0, 0x8, 0x4, 0x46, 0x92, 0x1, 0x3ff, 0x3, 0x9, 0x80000001, 0x9, 0x3, 0x7ff, 0x4, 0x96, 0x518, 0x4, 0x400, 0x1, 0x6, 0x1, 0xfffffffc, 0x6, 0x4, 0x7, 0x9, 0x4, 0x2, 0x9, 0x4, 0x20000, 0x6, 0x49, 0x6, 0xbe7, 0x30c, 0xfffffffe, 0x9, 0x6, 0x2]}]}, @TCA_BASIC_POLICE={0x20, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}]}, @TCA_BASIC_EMATCHES={0x510, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x9, 0x2, 0xfb}, {0x5, 0x4, 0x2, "a469b22d"}}}]}, @TCA_EMATCH_TREE_LIST={0x20c, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0xfffb}, {0xffffffffffffffff}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x84, 0x7, 0x9}, {{0x4, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xfc, 0x2, 0x0, 0x0, {{0x101, 0x0, 0x8}, "21a05c1614f9cbd6bc942ca850dd89cb6f647e43097429f8d2ca6b99ed300038ca95eed99d9df699c933fb57331895a1ad1372cde7909f6065315227363e5a0b3bb78e2441924c1f6ea2a07f960a93e368451de366af23a495f49c5e66cf94514e92435cbcb394d7abad7688ca47a24381c20ef55682335d65da6377bfe9a2bffcce32656b7028130a6cc8c87ca6df6b5a4dff826b05d8419394a6f54fb080844a504b58ef8fb5cbb2b9eb25a0406a6a1e35c7fc53c58e4f7619e12bceafb4eb1ad06ab1b5e3113c575cd26c2d156243daa74f500105fca97c6560e3227b089ba9bb2f680c87649196b5e7cb7532ff2d"}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x200, 0x1, 0xf}, {0x100, 0x9, 0x7, 0x2, 0xa}}}, @TCF_EM_CONTAINER={0xa4, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x9}, "dde756b8c10c86f52ddea60d1e3b0a75459bfe47aee3fddf48d4d53fd9507667163939af9b5d65c761c1a3ecd28caae572f2b970f83f502650cc8111dbf394d65c8dba612525c9e918dff8986558578e53471f6f1626632c76c2a17375448b7361e188b32cad5043c43ea530f4e2880392dfc3dc84470e2932eeb2aed56cc4e926c0b9ea811669044278c02b965afcd0647fb998152435"}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x7, 0x1, 0x16}, {0x12d, 0x2, 0x5, 0x0, 0x1, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7f, 0x7, 0x2}, {{0x4, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x180, 0x2, 0x0, 0x1, [@TCF_EM_META={0x28, 0x3, 0x0, 0x0, {{0x9, 0x4, 0x7}, [@TCA_EM_META_RVALUE={0x1c, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="53a1ff5f99859b", @TCF_META_TYPE_VAR="0a4e11a552c2f4375d", @TCF_META_TYPE_INT=0x9]}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x9, 0x7, 0xffec}, {{0x4, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x3, 0x7, 0x1}, {{0x3, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xd8, 0x3, 0x0, 0x0, {{0x9}, "9fb3c4881c2dee88fbe3a8d70ee474f7a31bbd4dbe328ccabd3544d8d4d2a44416e55f97f94227734936da63e06ac7e7b1c50f8086134eb5548fcdd640000f0dae69249773479ae9fd92d922c55f7a15046921801cda03fa1353d5c3682640a358c3d7596f1b53f986fa2afcf4c4d803ce544b8d20f2560a36b4679081c3493f930d3100964f5fb454e51b4b158e724e610b764b796b42a155436dc5c6b38402f145cd1fa56f2d5be9a09a4cdaa011a3b51a46ce807367fd7a62474f40952f1a0cb8503cbf669ce8f7"}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x8001}, {{0x3, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0xff, 0x2, 0xfff}, {0x3, 0x1, 0x2, "8b"}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x5, 0x2, 0x1}, {0xcb, 0x1, 0x2, '\n'}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x100, 0x1, 0x9}, {0x0, 0x333, 0x1, 0x2, 0x3, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x3, 0x7, 0x4}, {{0x2, 0x0, 0x1, 0x1}, {0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0xd4, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x1, 0x3, 0x8}, {0xda, 0x80000000, 0x0, 0x1}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x8, 0x1, 0x3}, {0x10, 0x38c3, 0xb4b2, 0x2, 0xf}}}, @TCF_EM_IPT={0x28, 0x2, 0x0, 0x0, {{0x8, 0x9, 0x3}, [@TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}]}}, @TCF_EM_CMP={0x18, 0x12, 0x0, 0x0, {{0x165e, 0x1, 0xd886}, {0xe2f, 0x401, 0x7, 0x1, 0x4}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xfffc, 0x3, 0xf06}, {0x0, 0xb681, 0x1a, 0xb642}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x3000, 0x7, 0x401}, {{0x3, 0x1, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x100, 0x7, 0xa1}, {{0x4, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x2, 0x1, 0x200}, {0x0, 0x3, 0x8, 0x0, 0x8, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x64, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x4c, 0x1, 0x0, 0x0, {{0x16, 0x0, 0xe}, "21bedf80c2fc8284efdd379b5565e6b158b1f5c26f0263725ebe0f4161777f1c7be7b30f500be87abdd3502ee07b7ee0bd9de7d97434ac3f490d706bd2e5"}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x2, 0x7, 0x8}, {{0x4, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}, @TCA_BASIC_POLICE={0x44c, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7fffffff, 0x2, 0x80000000, 0xffff, 0x2, {0x7, 0x2, 0xd, 0x0, 0x4, 0x100}, {0x9, 0x1, 0xfae0, 0x3, 0xdf0, 0x6}, 0x80000001, 0x7, 0x64a0}}, @TCA_POLICE_RATE={0x404, 0x2, [0x40, 0xfffeffff, 0x0, 0x400, 0x9, 0x0, 0x3, 0xffff, 0x2, 0x0, 0x3ff, 0x0, 0x1, 0x7, 0x88c, 0x0, 0x7, 0x6, 0xa, 0x3, 0xc, 0x2, 0x5cc, 0x400, 0x3, 0x8, 0xffff, 0x2, 0x7db, 0x4, 0xb480000, 0x3, 0x2, 0x431, 0x7ff, 0x34c0, 0x1, 0x2, 0x3, 0x3, 0x9, 0x5, 0xffffffff, 0xfffffffc, 0x5, 0x5, 0xb00000, 0x80000000, 0x2, 0x2, 0xff, 0x2, 0x101, 0x5, 0x2, 0x3cb, 0x9, 0xa, 0x3, 0x3ff, 0x6, 0x6, 0xd79, 0x80000001, 0x2, 0xffff9b1d, 0x200, 0xfff, 0x10, 0x1, 0x4, 0x9, 0x0, 0x876, 0xffffffff, 0x77d, 0xdd, 0xffffffff, 0x0, 0x9, 0x5c, 0x2e7a2aee, 0x1, 0xf8, 0x6, 0x262, 0x3, 0x10000, 0xbd, 0x314, 0x7fff, 0x9, 0xc, 0x2, 0x1, 0xffffffff, 0x1, 0x3, 0x2, 0x5, 0x3, 0x7, 0x7, 0x5, 0x1, 0x5, 0xc, 0x100, 0x1, 0x4, 0xd1, 0xdcc, 0x7, 0x800, 0x5, 0x3, 0x6cf, 0x9, 0x1, 0x0, 0x41b, 0x8, 0x9, 0x9, 0x7, 0x9, 0x6, 0x3, 0x4, 0x9, 0x4, 0x6, 0x5b, 0x4, 0x6022abb3, 0x800, 0x7, 0x9, 0x6, 0x6, 0x401, 0x1, 0x5, 0xfffffffa, 0x8, 0x21, 0x81, 0xfffffff9, 0xcf4, 0xf, 0x8, 0x53, 0x316, 0x2000, 0x88c, 0xdd, 0x897, 0x2, 0x401, 0x676, 0x8, 0x400, 0x8, 0x80, 0x4, 0x9, 0xfffffffc, 0x0, 0x3, 0x10, 0xfffffff9, 0x10, 0x9, 0x0, 0x6, 0x3, 0x3, 0x5, 0xffffffff, 0x3, 0x1, 0xdb, 0x3, 0x4, 0x1, 0xf, 0x304, 0xce, 0x71d0, 0x1, 0xffffff2f, 0x4, 0xfffffff0, 0x2, 0x4, 0x7ff, 0x76e6, 0xead3, 0x80, 0x7fff, 0x7, 0x5, 0xf, 0x34c0, 0x2, 0xd49, 0x9, 0x4, 0x6, 0x4, 0x7ff, 0xb8b5, 0xe87, 0x1000, 0x3, 0xf1, 0xf, 0x5, 0x9, 0x4, 0xfd, 0x1, 0x9, 0x9, 0xf8, 0x1, 0x7, 0x3, 0x2, 0x8, 0x3, 0xfffffffc, 0x9, 0xf, 0x5, 0x129, 0xa, 0x8001, 0x670, 0x400, 0x2b8680c8, 0xd9c, 0x9, 0x6, 0x5, 0xe694, 0x8bc, 0x9, 0x7, 0x5d3, 0x8001, 0x6, 0x4, 0x2, 0x7, 0x8]}]}, @TCA_BASIC_EMATCHES={0x1e4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x4c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xe, 0x1, 0x9}, {0x5, 0xa9b8, 0xfffe, 0x1, 0x4, 0x1, 0x2}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x4, 0x3, 0x9}, {0xffff, 0x35c5, 0x7, 0x8}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x8, 0x7, 0x9}, {{0x4, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0xcc, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x28, 0x3, 0x0, 0x0, {{0x9, 0x9, 0x7}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x9dcd, 0x1, 0x8}, {0x6, 0x0, 0x81, 0x1, 0x9, 0x0, 0x1}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x8}, {0x1, 0x1}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x9, 0x3, 0x6b}, {0x8, 0x1, 0x5, 0x372}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x7, 0x8, 0xbb9}, {0x3, 0x3, 0x3}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x714, 0x8, 0xfffb}, {0x3, 0x0, 0x4}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xffff, 0x1, 0x4}, {0x819f, 0x4, 0xf, 0x3, 0x2, 0x1}}}, @TCF_EM_CONTAINER={0x24, 0x1, 0x0, 0x0, {{0x401}, "8694e5e582d1d793abdf7721867747d5e9e89bcd8a67"}}]}, @TCA_EMATCH_TREE_LIST={0xa0, 0x2, 0x0, 0x1, [@TCF_EM_META={0x60, 0x1, 0x0, 0x0, {{0x79a1, 0x4, 0x2fd7}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0x2c, 0x3, [@TCF_META_TYPE_VAR="8a0d7d", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="a1", @TCF_META_TYPE_VAR="449f7f11c0", @TCF_META_TYPE_VAR="d6e083a4", @TCF_META_TYPE_VAR="9c5697dd935652", @TCF_META_TYPE_VAR="71a8ff796154728c"]}, @TCA_EM_META_RVALUE={0x18, 0x3, [@TCF_META_TYPE_VAR="51c10d", @TCF_META_TYPE_VAR="5597a21fec917b", @TCF_META_TYPE_VAR="09e59f077b77b39fc728"]}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x2, 0x8, 0x1}, {0x3, 0x0, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x5809, 0x7, 0x6}, {{0x1, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x5, 0x2, 0xa5ff}, {0x7, 0x7, 0x2, "d1a2389e54ca25"}}}]}]}, @TCA_BASIC_POLICE={0x10, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0x5}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0x3}}]}}]}, 0xff8}}, 0x20044000) set_mempolicy_home_node(&(0x7f0000110000/0x3000)=nil, 0x3000, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000eec3b65b3cf815000500"], 0x48) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000c00)={0x9000001a}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a35f200140600fe7000000000000000000000000000000000000000000000000000aa00004e2200000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRESDEC=r4], 0x0) 13m17.782226053s ago: executing program 33 (id=2091): chdir(&(0x7f0000000480)='./cgroup\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/43, 0x2b}, {&(0x7f0000000180)=""/54, 0x36}, {&(0x7f0000000280)=""/133, 0x85}], 0x3, &(0x7f0000000380)=""/45, 0x2d}, 0x5}, {{&(0x7f0000000500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000400)=""/9, 0x9}, {&(0x7f0000000600)=""/218, 0xda}], 0x2, &(0x7f0000000740)=""/214, 0xd6}, 0x3ff}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000840)=""/182, 0xb6}, {&(0x7f0000000900)=""/52, 0x34}, {&(0x7f0000000940)=""/122, 0x7a}], 0x3, &(0x7f0000000a00)=""/113, 0x71}}, {{&(0x7f0000000a80)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000b00)=""/182, 0xb6}], 0x1, &(0x7f0000000c00)}, 0x7}, {{&(0x7f0000000c40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000cc0)=""/135, 0x87}, {&(0x7f0000000d80)=""/97, 0x61}], 0x2, &(0x7f0000000e40)=""/42, 0x2a}, 0xffffff81}], 0x5, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg(r1, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f000020c000/0x4000)=nil, 0x4000) munlockall() r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open_by_handle_at(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000380000000500000000000000f7ffffffffffffff"], 0x513300) r4 = socket$pppoe(0x18, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r4, 0xcb16c000) readv(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003280)=@deltfilter={0xff8, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0x3}, {0xd, 0xffff}, {0xa, 0xb}}, [@TCA_RATE={0x6, 0x5, {0xc, 0x5}}, @filter_kind_options=@f_basic={{0xa}, {0xfc0, 0x2, [@TCA_BASIC_POLICE={0x10, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xdfe8}]}, @TCA_BASIC_POLICE={0x42c, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x8a18, 0xccf, 0x6, 0x4, 0x9, 0x8, 0x3, 0x1, 0x0, 0x1, 0xf6d, 0x5ca, 0x9, 0xffff, 0x0, 0x7, 0x7, 0x6, 0xfffff001, 0x1, 0xb6ce, 0x958b, 0x9, 0x2, 0x6a6, 0x101, 0x7, 0x1ff, 0xc1, 0x5, 0x5, 0x5, 0xb4, 0x7fffffff, 0xbf, 0x8, 0x10000, 0xf, 0x200, 0xfff, 0x6, 0x2, 0x3, 0x7, 0x183, 0x0, 0x2, 0x7fff, 0x99de, 0xb, 0x3, 0x7fff, 0xfffffffd, 0x5, 0xb, 0x1000, 0x2, 0x81, 0x6, 0x5, 0x7, 0x4, 0x32a1, 0x0, 0x0, 0x39, 0x7, 0x10, 0x3, 0x80000001, 0x8001, 0x7, 0x301, 0xfffffffc, 0x3, 0x10, 0x6, 0x62, 0x1, 0x8, 0xf, 0x7, 0x3, 0x8, 0xa, 0x75db, 0x1, 0x7f, 0x6b4e4a7c, 0x8001, 0x3, 0x30, 0x2, 0x6, 0xffffffff, 0x6, 0xd, 0x3, 0xfffffe01, 0x1, 0x800, 0x81, 0x94, 0x7ff, 0x4a, 0xd51b, 0x0, 0x5, 0x2, 0x0, 0x0, 0x800, 0x200, 0x6, 0x1, 0x7ff, 0x1, 0x9, 0x7fff, 0x3, 0x6, 0x40, 0x8, 0xfffffffc, 0x1, 0x8, 0x68d, 0x4, 0x0, 0x4, 0x0, 0x3, 0xfffffcfa, 0x3f, 0x3ff, 0x3, 0x5, 0x800, 0x2, 0x4, 0x5, 0x5, 0x0, 0xffffffff, 0x401, 0x1, 0xb, 0x0, 0x4, 0x5, 0xfffeffff, 0x3, 0x2, 0x10001, 0x3, 0x1, 0x200, 0x40, 0x1, 0x0, 0x5, 0x0, 0x4, 0xfffffffb, 0x399c, 0x2, 0x78, 0x1ff, 0xeeb, 0x6, 0x4, 0x200, 0x6, 0x10, 0x5, 0x0, 0xff, 0x0, 0x5, 0x1000, 0xe568, 0xe832, 0xffffffff, 0x10000, 0xbce, 0x5, 0x7, 0x5, 0x9652, 0x8, 0xa, 0x1, 0x4, 0x45, 0x2, 0x101, 0x80, 0x0, 0x3, 0x6, 0xffffffff, 0x2, 0x8, 0x6, 0x7fffffff, 0x3, 0x3, 0xae3, 0xfc000000, 0x4, 0xbe53, 0xc32e, 0xb, 0xea, 0x3, 0x5, 0x0, 0x8, 0x4, 0x46, 0x92, 0x1, 0x3ff, 0x3, 0x9, 0x80000001, 0x9, 0x3, 0x7ff, 0x4, 0x96, 0x518, 0x4, 0x400, 0x1, 0x6, 0x1, 0xfffffffc, 0x6, 0x4, 0x7, 0x9, 0x4, 0x2, 0x9, 0x4, 0x20000, 0x6, 0x49, 0x6, 0xbe7, 0x30c, 0xfffffffe, 0x9, 0x6, 0x2]}]}, @TCA_BASIC_POLICE={0x20, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}]}, @TCA_BASIC_EMATCHES={0x510, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x9, 0x2, 0xfb}, {0x5, 0x4, 0x2, "a469b22d"}}}]}, @TCA_EMATCH_TREE_LIST={0x20c, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0xfffb}, {0xffffffffffffffff}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x84, 0x7, 0x9}, {{0x4, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xfc, 0x2, 0x0, 0x0, {{0x101, 0x0, 0x8}, "21a05c1614f9cbd6bc942ca850dd89cb6f647e43097429f8d2ca6b99ed300038ca95eed99d9df699c933fb57331895a1ad1372cde7909f6065315227363e5a0b3bb78e2441924c1f6ea2a07f960a93e368451de366af23a495f49c5e66cf94514e92435cbcb394d7abad7688ca47a24381c20ef55682335d65da6377bfe9a2bffcce32656b7028130a6cc8c87ca6df6b5a4dff826b05d8419394a6f54fb080844a504b58ef8fb5cbb2b9eb25a0406a6a1e35c7fc53c58e4f7619e12bceafb4eb1ad06ab1b5e3113c575cd26c2d156243daa74f500105fca97c6560e3227b089ba9bb2f680c87649196b5e7cb7532ff2d"}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x200, 0x1, 0xf}, {0x100, 0x9, 0x7, 0x2, 0xa}}}, @TCF_EM_CONTAINER={0xa4, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x9}, "dde756b8c10c86f52ddea60d1e3b0a75459bfe47aee3fddf48d4d53fd9507667163939af9b5d65c761c1a3ecd28caae572f2b970f83f502650cc8111dbf394d65c8dba612525c9e918dff8986558578e53471f6f1626632c76c2a17375448b7361e188b32cad5043c43ea530f4e2880392dfc3dc84470e2932eeb2aed56cc4e926c0b9ea811669044278c02b965afcd0647fb998152435"}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x7, 0x1, 0x16}, {0x12d, 0x2, 0x5, 0x0, 0x1, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7f, 0x7, 0x2}, {{0x4, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x180, 0x2, 0x0, 0x1, [@TCF_EM_META={0x28, 0x3, 0x0, 0x0, {{0x9, 0x4, 0x7}, [@TCA_EM_META_RVALUE={0x1c, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="53a1ff5f99859b", @TCF_META_TYPE_VAR="0a4e11a552c2f4375d", @TCF_META_TYPE_INT=0x9]}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x9, 0x7, 0xffec}, {{0x4, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x3, 0x7, 0x1}, {{0x3, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xd8, 0x3, 0x0, 0x0, {{0x9}, "9fb3c4881c2dee88fbe3a8d70ee474f7a31bbd4dbe328ccabd3544d8d4d2a44416e55f97f94227734936da63e06ac7e7b1c50f8086134eb5548fcdd640000f0dae69249773479ae9fd92d922c55f7a15046921801cda03fa1353d5c3682640a358c3d7596f1b53f986fa2afcf4c4d803ce544b8d20f2560a36b4679081c3493f930d3100964f5fb454e51b4b158e724e610b764b796b42a155436dc5c6b38402f145cd1fa56f2d5be9a09a4cdaa011a3b51a46ce807367fd7a62474f40952f1a0cb8503cbf669ce8f7"}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x8001}, {{0x3, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0xff, 0x2, 0xfff}, {0x3, 0x1, 0x2, "8b"}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x5, 0x2, 0x1}, {0xcb, 0x1, 0x2, '\n'}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x100, 0x1, 0x9}, {0x0, 0x333, 0x1, 0x2, 0x3, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x3, 0x7, 0x4}, {{0x2, 0x0, 0x1, 0x1}, {0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0xd4, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x1, 0x3, 0x8}, {0xda, 0x80000000, 0x0, 0x1}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x8, 0x1, 0x3}, {0x10, 0x38c3, 0xb4b2, 0x2, 0xf}}}, @TCF_EM_IPT={0x28, 0x2, 0x0, 0x0, {{0x8, 0x9, 0x3}, [@TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}]}}, @TCF_EM_CMP={0x18, 0x12, 0x0, 0x0, {{0x165e, 0x1, 0xd886}, {0xe2f, 0x401, 0x7, 0x1, 0x4}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xfffc, 0x3, 0xf06}, {0x0, 0xb681, 0x1a, 0xb642}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x3000, 0x7, 0x401}, {{0x3, 0x1, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x100, 0x7, 0xa1}, {{0x4, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x2, 0x1, 0x200}, {0x0, 0x3, 0x8, 0x0, 0x8, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x64, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x4c, 0x1, 0x0, 0x0, {{0x16, 0x0, 0xe}, "21bedf80c2fc8284efdd379b5565e6b158b1f5c26f0263725ebe0f4161777f1c7be7b30f500be87abdd3502ee07b7ee0bd9de7d97434ac3f490d706bd2e5"}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x2, 0x7, 0x8}, {{0x4, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}, @TCA_BASIC_POLICE={0x44c, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7fffffff, 0x2, 0x80000000, 0xffff, 0x2, {0x7, 0x2, 0xd, 0x0, 0x4, 0x100}, {0x9, 0x1, 0xfae0, 0x3, 0xdf0, 0x6}, 0x80000001, 0x7, 0x64a0}}, @TCA_POLICE_RATE={0x404, 0x2, [0x40, 0xfffeffff, 0x0, 0x400, 0x9, 0x0, 0x3, 0xffff, 0x2, 0x0, 0x3ff, 0x0, 0x1, 0x7, 0x88c, 0x0, 0x7, 0x6, 0xa, 0x3, 0xc, 0x2, 0x5cc, 0x400, 0x3, 0x8, 0xffff, 0x2, 0x7db, 0x4, 0xb480000, 0x3, 0x2, 0x431, 0x7ff, 0x34c0, 0x1, 0x2, 0x3, 0x3, 0x9, 0x5, 0xffffffff, 0xfffffffc, 0x5, 0x5, 0xb00000, 0x80000000, 0x2, 0x2, 0xff, 0x2, 0x101, 0x5, 0x2, 0x3cb, 0x9, 0xa, 0x3, 0x3ff, 0x6, 0x6, 0xd79, 0x80000001, 0x2, 0xffff9b1d, 0x200, 0xfff, 0x10, 0x1, 0x4, 0x9, 0x0, 0x876, 0xffffffff, 0x77d, 0xdd, 0xffffffff, 0x0, 0x9, 0x5c, 0x2e7a2aee, 0x1, 0xf8, 0x6, 0x262, 0x3, 0x10000, 0xbd, 0x314, 0x7fff, 0x9, 0xc, 0x2, 0x1, 0xffffffff, 0x1, 0x3, 0x2, 0x5, 0x3, 0x7, 0x7, 0x5, 0x1, 0x5, 0xc, 0x100, 0x1, 0x4, 0xd1, 0xdcc, 0x7, 0x800, 0x5, 0x3, 0x6cf, 0x9, 0x1, 0x0, 0x41b, 0x8, 0x9, 0x9, 0x7, 0x9, 0x6, 0x3, 0x4, 0x9, 0x4, 0x6, 0x5b, 0x4, 0x6022abb3, 0x800, 0x7, 0x9, 0x6, 0x6, 0x401, 0x1, 0x5, 0xfffffffa, 0x8, 0x21, 0x81, 0xfffffff9, 0xcf4, 0xf, 0x8, 0x53, 0x316, 0x2000, 0x88c, 0xdd, 0x897, 0x2, 0x401, 0x676, 0x8, 0x400, 0x8, 0x80, 0x4, 0x9, 0xfffffffc, 0x0, 0x3, 0x10, 0xfffffff9, 0x10, 0x9, 0x0, 0x6, 0x3, 0x3, 0x5, 0xffffffff, 0x3, 0x1, 0xdb, 0x3, 0x4, 0x1, 0xf, 0x304, 0xce, 0x71d0, 0x1, 0xffffff2f, 0x4, 0xfffffff0, 0x2, 0x4, 0x7ff, 0x76e6, 0xead3, 0x80, 0x7fff, 0x7, 0x5, 0xf, 0x34c0, 0x2, 0xd49, 0x9, 0x4, 0x6, 0x4, 0x7ff, 0xb8b5, 0xe87, 0x1000, 0x3, 0xf1, 0xf, 0x5, 0x9, 0x4, 0xfd, 0x1, 0x9, 0x9, 0xf8, 0x1, 0x7, 0x3, 0x2, 0x8, 0x3, 0xfffffffc, 0x9, 0xf, 0x5, 0x129, 0xa, 0x8001, 0x670, 0x400, 0x2b8680c8, 0xd9c, 0x9, 0x6, 0x5, 0xe694, 0x8bc, 0x9, 0x7, 0x5d3, 0x8001, 0x6, 0x4, 0x2, 0x7, 0x8]}]}, @TCA_BASIC_EMATCHES={0x1e4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x4c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xe, 0x1, 0x9}, {0x5, 0xa9b8, 0xfffe, 0x1, 0x4, 0x1, 0x2}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x4, 0x3, 0x9}, {0xffff, 0x35c5, 0x7, 0x8}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x8, 0x7, 0x9}, {{0x4, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0xcc, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x28, 0x3, 0x0, 0x0, {{0x9, 0x9, 0x7}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x9dcd, 0x1, 0x8}, {0x6, 0x0, 0x81, 0x1, 0x9, 0x0, 0x1}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x8}, {0x1, 0x1}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x9, 0x3, 0x6b}, {0x8, 0x1, 0x5, 0x372}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x7, 0x8, 0xbb9}, {0x3, 0x3, 0x3}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x714, 0x8, 0xfffb}, {0x3, 0x0, 0x4}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xffff, 0x1, 0x4}, {0x819f, 0x4, 0xf, 0x3, 0x2, 0x1}}}, @TCF_EM_CONTAINER={0x24, 0x1, 0x0, 0x0, {{0x401}, "8694e5e582d1d793abdf7721867747d5e9e89bcd8a67"}}]}, @TCA_EMATCH_TREE_LIST={0xa0, 0x2, 0x0, 0x1, [@TCF_EM_META={0x60, 0x1, 0x0, 0x0, {{0x79a1, 0x4, 0x2fd7}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0x2c, 0x3, [@TCF_META_TYPE_VAR="8a0d7d", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="a1", @TCF_META_TYPE_VAR="449f7f11c0", @TCF_META_TYPE_VAR="d6e083a4", @TCF_META_TYPE_VAR="9c5697dd935652", @TCF_META_TYPE_VAR="71a8ff796154728c"]}, @TCA_EM_META_RVALUE={0x18, 0x3, [@TCF_META_TYPE_VAR="51c10d", @TCF_META_TYPE_VAR="5597a21fec917b", @TCF_META_TYPE_VAR="09e59f077b77b39fc728"]}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x2, 0x8, 0x1}, {0x3, 0x0, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x5809, 0x7, 0x6}, {{0x1, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x5, 0x2, 0xa5ff}, {0x7, 0x7, 0x2, "d1a2389e54ca25"}}}]}]}, @TCA_BASIC_POLICE={0x10, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0x5}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0x3}}]}}]}, 0xff8}}, 0x20044000) set_mempolicy_home_node(&(0x7f0000110000/0x3000)=nil, 0x3000, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000eec3b65b3cf815000500"], 0x48) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000c00)={0x9000001a}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a35f200140600fe7000000000000000000000000000000000000000000000000000aa00004e2200000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRESDEC=r4], 0x0) 12.28911367s ago: executing program 5 (id=5026): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0xff, 0x3}, 0x20) r5 = syz_open_procfs(0x0, 0x0) pread64(r5, &(0x7f0000001600)=""/4089, 0x5, 0x200000000000049a) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@deltclass={0x50, 0x29, 0x100, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0x7}, {0xe, 0x2}, {0xfff3, 0xe}}, [@tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x8, 0x5}}, @tclass_kind_options=@c_taprio={0xb}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x40045) socket$inet_smc(0x2b, 0x1, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a6ff2640cda9eecdb9050000000109022b000100000000090400000201035100090503130000000000"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a0000000000000000070000", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f3000"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x8000) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000580)={0x1, @pix={0x97, 0x8, 0x32315559, 0x2, 0x3, 0x8, 0x3, 0xfffffffe, 0x0, 0x3, 0x0, 0x6}}) setxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'system.', ',+*.-\xe1\x00'}, &(0x7f00000002c0)='\x00', 0x1, 0x3) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000280)={0x8006, 0x1, 0x0, "eee98fb006178749cb4dfd93e33c9b6b7bd152f35ed730fc700000cb4f1891e2", 0x43353039}) 10.858848996s ago: executing program 2 (id=5033): r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x4002) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "d67a8527f76ec1d39e537c4c3060c6a405106c72"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000005400778ce70f00000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010003b503a9"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 10.538170283s ago: executing program 2 (id=5035): socket$inet6(0xa, 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) gettid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0xff, 0x3}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r3, &(0x7f0000001600)=""/4089, 0x5, 0x200000000000049a) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@deltclass={0x50, 0x29, 0x100, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0x7}, {0xe, 0x2}, {0xfff3, 0xe}}, [@tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x8, 0x5}}, @tclass_kind_options=@c_taprio={0xb}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x40045) syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a6ff2640cda9eecdb9050000000109022b000100000000090400000201035100090503130000000000"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a0000000000000000070000", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f3000"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x8000) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) setxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'system.', ',+*.-\xe1\x00'}, &(0x7f00000002c0)='\x00', 0x1, 0x3) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000280)={0x8006, 0x1, 0x0, "eee98fb006178749cb4dfd93e33c9b6b7bd152f35ed730fc700000cb4f1891e2", 0x43353039}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 8.519944517s ago: executing program 5 (id=5037): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x169a82, 0x0) sendfile(r2, r2, 0x0, 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xaf) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SREG_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x201, 0xa000000, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 7.543457087s ago: executing program 1 (id=5040): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000012c0)=[{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f00000010c0)}], 0x1, &(0x7f0000001280)=[@op={0x10}, @op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10, 0x117, 0x4, 0x2}, @assoc={0x10, 0x117, 0x4, 0x6}], 0x40}], 0x1, 0x48800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 7.410132526s ago: executing program 1 (id=5041): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0xfe, 0x10, 0x0, 0x0, 0x0, 0x7e4, 0x0, 0x0, 0x45, [0x7fff, 0x10000000]}}) socket$kcm(0xa, 0x5, 0x0) io_uring_setup(0x8004d57, &(0x7f0000000200)={0x0, 0xcd41, 0x1, 0x80000013, 0x143}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@getchain={0x54, 0x66, 0x10, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xd, 0x3}, {0xfff3, 0x8}, {0xc, 0xf}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0xff}, {0x8, 0xb, 0xfffffff8}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x6000000}]}, 0x54}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x87c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xf, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x84c, 0x2, [@TCA_CGROUP_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x10000, 0x6, 0x7, 0xb, 0xfffffffe, 0x0, 0x80, 0x10000, 0x4, 0x2, 0xd2, 0xffffffff, 0x6, 0x0, 0x0, 0x4, 0x7, 0x38fd, 0x10001, 0x7fff, 0x1, 0x9, 0xbbc6, 0x7, 0xfffffffa, 0x1c, 0x1e, 0x3, 0x9, 0x10000, 0x988, 0x4, 0x6, 0x10000, 0x756e, 0x8000, 0x10000, 0x3, 0x3ada, 0x401, 0x0, 0x1bc, 0x4, 0x9, 0x80000001, 0x3, 0x100, 0x2f2, 0x475f, 0x1e9, 0xf7b, 0xf, 0x2707, 0x8, 0x6, 0x1000, 0x4, 0x10001, 0x5, 0x0, 0x5, 0x8, 0x101, 0x8001, 0x1, 0xffffff81, 0x2, 0xef, 0x80, 0x7, 0x8, 0x9, 0x9, 0x3ff000, 0xde49, 0x0, 0x5, 0x4, 0xa99, 0x2, 0x200, 0x8, 0x2, 0x36d000, 0x5, 0x2, 0x0, 0x101, 0x58, 0x0, 0xde5, 0xfff, 0x0, 0x1aa8, 0x9, 0x2, 0xf, 0x400, 0x200, 0x1, 0x4, 0x2, 0x0, 0x401, 0x1ff, 0x5, 0x1, 0x5, 0xfffffffa, 0x5, 0x3, 0x5, 0x3, 0x2, 0x1ac, 0xdd64, 0x8001, 0x5, 0x3, 0xffff, 0xfffffff8, 0x7, 0x8, 0x1000, 0x1, 0x8, 0x5, 0xb08, 0xa, 0xfe7f, 0xfffffff5, 0x6, 0x7, 0xff, 0x2, 0x101, 0x2, 0x1, 0x7ff, 0x1, 0x14, 0x6, 0x4, 0x7, 0x2, 0x4, 0x0, 0x4, 0x5, 0x6, 0x4, 0xab1, 0x74f1, 0x9, 0x4a, 0x2, 0x7d2, 0x8c8a, 0xc, 0x5, 0xf6, 0x5, 0x8, 0x7f, 0x0, 0x0, 0x9c, 0x1, 0x1, 0xfffffbff, 0x5, 0x80000001, 0x10, 0x8000, 0x0, 0x0, 0xd, 0x3, 0x4, 0x6, 0x2, 0x3, 0x7, 0xfffff843, 0x6, 0x6, 0x9, 0x9, 0xffffff93, 0xd, 0xfff, 0x4, 0x80000001, 0xf93, 0x6, 0xd, 0xd, 0x7, 0x9, 0x4, 0x7fffffff, 0x5, 0xe92e, 0x2, 0x8, 0x0, 0x2, 0x2, 0xd, 0x2, 0x80, 0x4, 0x90, 0xfffffbff, 0xb0bb, 0x4, 0xc0, 0x19fa, 0x2b, 0xfffffeff, 0x6, 0x7, 0xa900, 0x8, 0x0, 0x9, 0x4, 0x4, 0x4, 0xfffff000, 0x7, 0x3dbc4d99, 0x4e, 0xcef, 0x80000000, 0x400, 0x7, 0x6103, 0xf, 0x5, 0x5, 0x40, 0x5, 0x6, 0x7, 0x6, 0xe9c8, 0x1a0, 0x3fe, 0x10001, 0x8000, 0x5, 0x1000, 0x4, 0xb13]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe, 0x9, 0x80, 0x7, 0x10, 0x8000, 0x7, 0x9, 0x2000000, 0x800004, 0x5, 0x7, 0x6, 0x8, 0xb48, 0x5, 0x9, 0x101, 0xa, 0x3, 0x5, 0xfff, 0x7, 0x10000000, 0xffffffff, 0x1d3e, 0x4, 0x22, 0xfffffffd, 0x80000000, 0x8, 0xffffffff, 0x200, 0x7fff, 0x20009, 0x5, 0x1, 0xfff, 0x402, 0x0, 0x0, 0x3d0, 0x3, 0x78b5, 0x8, 0x5, 0x9d, 0x5, 0x40, 0xf9e, 0x8, 0x1, 0xb, 0x6, 0x3, 0x8, 0x8, 0x800, 0x0, 0x3, 0xaa, 0x9, 0x4, 0x9, 0xfffffff9, 0x8, 0x7, 0x6, 0xffe, 0x800, 0x1, 0x6, 0x2, 0x81, 0x81, 0x5, 0x200, 0x401, 0x9464, 0x1, 0x7fff, 0x2, 0x9, 0x5a, 0x1a, 0x5fd, 0x81, 0x1, 0x7fffffff, 0x2, 0xf8c, 0x4, 0x6, 0x2, 0x0, 0x1, 0x6, 0xab99, 0xe, 0x1, 0x2, 0x3ff, 0x6, 0xb, 0x7f1, 0x7fffffff, 0x3, 0x40, 0x7, 0x1, 0x15, 0x1, 0x7fffffff, 0x1, 0x6, 0x3, 0x91, 0x0, 0x9, 0x4, 0x3, 0xffffff0d, 0xe, 0x7, 0xdc, 0x8, 0x80100001, 0xb, 0x6, 0x8, 0x0, 0x2f, 0xe1, 0x10000, 0x0, 0x1407, 0x9, 0x5, 0x8, 0x81, 0x1, 0x9, 0x2, 0x10000, 0x9, 0x8, 0x5, 0x3, 0x0, 0x8000, 0x4, 0x7, 0x3, 0x400, 0x2, 0x6, 0x5, 0x4e38211e, 0x0, 0xa959, 0x67, 0x400, 0x1000, 0xaf, 0xfffffff9, 0x30cfd753, 0xe0, 0x4, 0x1, 0x800, 0x9, 0x4, 0x400, 0x39a, 0x2, 0x1ff, 0x1, 0x7fff, 0xffffffff, 0x40, 0x9742393, 0x0, 0x4ef5, 0x6, 0x80000001, 0xffff0fb7, 0x1, 0x0, 0x1, 0x0, 0xe, 0x3, 0x0, 0x5000, 0x4, 0xb14, 0x6, 0xf864eed, 0xc5, 0x8, 0x7, 0x125, 0x40, 0x2, 0x3ff, 0x9, 0x10000, 0x101, 0xc, 0x0, 0x9, 0x800, 0x7, 0x4, 0x3, 0x0, 0xf34a, 0x9, 0x18, 0x3ff, 0x1, 0xde, 0x0, 0x2, 0x77f, 0x0, 0x5, 0xcd0c, 0x0, 0x3, 0x0, 0x8, 0x4, 0x3ff, 0x1000, 0x1, 0x1, 0x100, 0x5553, 0x4, 0xfffffffe, 0x25f76613, 0xffffffff, 0xc7, 0x4, 0x1000, 0xf0, 0x3, 0x1, 0x7f, 0x3, 0x7fff, 0x5, 0x3, 0x101, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0x6, 0x9, 0x8, 0x4, {0x6, 0x0, 0xb, 0x2, 0x8, 0x1}, {0x4, 0x2, 0x30, 0x1, 0x7, 0x3}, 0xb, 0x5}}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) creat(&(0x7f0000000300)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000008c0)=@v3={0x3000000, [{0x1, 0xa}, {0x3, 0xffffff15}]}, 0x18, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001a00010000000000fdffffff0a000000", @ANYRES32=0x0, @ANYBLOB="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"/371], 0x4c}}, 0x0) syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x40000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000180)}}], 0x1, 0x4000000) 7.394555845s ago: executing program 2 (id=5042): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0x1f5, 0x4) recvmmsg(r0, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x45833af92e4b39ff, 0x0) 7.391466148s ago: executing program 6 (id=5043): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0xfffffffffffffd2e, 0x8000, 0x3}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x141301) ioctl$USBDEVFS_CLEAR_HALT(r6, 0x80045515, &(0x7f00000000c0)={0x1, 0x1}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000100001040000000000000000000000003b032b0b1380acf1f624b506e4328ec4a1b39e3cf06243ef1ff1634da756e86e11f62795fee95fb3b0bfa818cc4c947ef43c6dfc3488b159fc858dea1d307b0d979e0000d0bb9405b8f690c8deff44d44ed5e1481ef4e08c19dea3b0d42fb0feb2c5b49f468e6f66fda95b23", @ANYRES32=0x0, @ANYBLOB="03000000000a0000"], 0x20}}, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x262) openat$autofs(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x400c806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab190c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f0000000000)={0x6c}, 0x8) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e23, 0xd7, @local, 0x9}, 0x1c) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x1000000}, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="600000000206010100000000000000000100ffff14000780080012400000800008000b400000cd200500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d6172"], 0x60}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x0, 0x3fc, 0x1, 0x32, 0xb}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x4, 0x8a}, 0x9c) 6.843431704s ago: executing program 0 (id=5045): r0 = syz_open_dev$video(0x0, 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0x9, {0xf8000000, 0x4403, 0x8, 0xffffbfff}}) 6.614977015s ago: executing program 2 (id=5046): r0 = mq_open(&(0x7f0000000000)='\x00', 0x40, 0x0, &(0x7f0000000080)={0x2, 0x10001, 0x161, 0x6}) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103642, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x20048004) recvmmsg(r2, &(0x7f0000005380)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000300)=""/74, 0x4a}, {&(0x7f0000000380)=""/131, 0x83}, {&(0x7f0000002f40)=""/239, 0xef}, {&(0x7f0000000540)=""/226, 0xe2}], 0x5, &(0x7f0000000640)=""/112, 0x70}, 0x3}, {{&(0x7f0000000700)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000780)=""/90, 0x5a}, {&(0x7f0000000800)=""/65, 0x41}], 0x2, &(0x7f0000000880)=""/35, 0x23}, 0x2}, {{&(0x7f00000008c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000001980)=""/5, 0x5}, {&(0x7f00000019c0)=""/119, 0x77}, {&(0x7f0000001a40)=""/27, 0x1b}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/98, 0x62}, {&(0x7f0000002b00)=""/241, 0xf1}], 0x6, &(0x7f0000002c40)=""/88, 0x58}, 0x2}, {{&(0x7f0000002cc0)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000002e40)=[{&(0x7f0000002d40)=""/246, 0xf6}], 0x1}, 0x3}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005440)=""/4106, 0x100a}, 0x3}, {{&(0x7f0000003f40)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000005300)=[{&(0x7f0000003fc0)=""/4096, 0x1000}, {&(0x7f0000004fc0)=""/164, 0xa4}, {&(0x7f0000005080)=""/4, 0x4}, {&(0x7f00000050c0)=""/224, 0xe0}, {&(0x7f00000051c0)=""/143, 0x8f}, {&(0x7f0000005280)=""/97, 0x61}], 0x6, &(0x7f0000005340)=""/21, 0x15}, 0x5}], 0x6, 0x10000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x3bb) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) close(r5) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000004000000060000000100000004000000080000000800"/45]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) mlock(&(0x7f0000a38000/0x1000)=nil, 0x1000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000043b000/0x1000)=nil, 0xfffffffffffffdb5, &(0x7f0000000080)='\x00\xc9\xf5\x00\x00\x00\x00\x00\x00\x00+\x1ct\xc6\fr\xbaU\xc1\xb2\xd2\xde\xbfk\xc0\x18\x94\xc5&\xec\x03\xa0w\"E\xc9\xf2,K4\x10\xc8\x8cuj\xd3\xf0\xb3\xa9f\xf7\xb7\x17\xdf\xca\xac\x8b\x81K\t\x14^\xc3\xb7<\xa1\x15\v4\xd0\xbe\xa8\x01\x00<:-Y\n<\x1d\xb2\xe0kU\xc0\xc1\x14') openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x890}, 0x0) 6.546432186s ago: executing program 0 (id=5047): r0 = socket(0x1000000000000010, 0x80802, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000200000000000c00095000000000000002ba728041598d6fbd30cb599e83d24a3aa81d36b26fb0b71d0e6adfefcf1d8f7faf75e0f226bd99eea7960717142fa9ea4318123741c4a0e168c1886d0d4d94f2f4e345c652fbc16ee988e6e0dc8cedf3ce99fbfbf9b0a4def23d410f6296b32a334388107200759cda9036b4e369a9e152ddcc7f05a5f3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c3b35967deabe802f5ab3e89bd6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ececb0cd2b6d357b85a0218ce740068725837074e098ee207d2f73902fbcfcf49822775985bf32d715f5888b24efa000000000000ffffffdf000000000000000000000089a7b9b00000000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab29ea3323aa9fdfb52faf449c3bfd09000000b91ab219efdebb7b3de8f67581cf796a1d4223b9ff7ffcad3f6c962b9f292324b7ab7f91a31cf41ab11f12fb1e0a494034127de7c6592df1a6c64d8f20a67745409e011f1264d43e153b3d34899f40159e800ea2474b544035a30b23bcee46762c2093bcc9eae5dff5adbdee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d337c56abf1128744bab6677fcb78e313841ec309baed0495f06d058a75fa4c81e5c9f42d9383e41d277b10392a912ffaf6f658f3fadd16286744f839c3f128f8f92d0992239eafce5c1b3f97a297c9e49a0c3510ef74080e6d1e0c8a868a353409e34d3e82279637598f37ad380a447483cac394c7bbdcd0e3b1c39b6e00916de48a4e70f03cc4146a77af02c1d4cef5379da860aed8477dfa8ceefb405005c6977c78cdbf37704ec73755539280b064bda154910fe050038ec9e47de89298b7bf4d769ccc18eede00e8ca5457870eb30d211e23ccc8e06cd58b61799257ab55ff413c86ba9affb12ec757c7234c270246c87a901160e6c07bc6cf8809c3a0d46ff7f008000000000ad1e1f493354b2822b98371d000000167d78e65b90eba0768e825972ea3b774a1467c89fa0f82e8440105051e5510a33dcda5e143fbfff161c12ca389cbe4c51b3fa00675cd1b66c5fd9c26a54d43fa050645bd9109b7e7131421c0f39113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a84a4e3344b155cc20f49e298727340e97cdefb40e56e9cfad973347d0de7ba4754ff231a1b033d8f931ba3442b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf46306f2ef79b8d4c2ff030000000000000007b82e6044f643068cd47ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c99220002af8c5e53d52c83ac3fa7c3a3ee6c08384865b66d2b4dcb5dd9cba16b64ebbbf8702ae12c77e6e34991a225c120a3c950942fe0bc9f2a1a7506d35e5b439edeb7088aeda890cf8a4a6f31ba6d9b8cb098f935bdcbb29fd0f1a342c9eed00000000ab6648a9dea0b6c91996d65da6c24a702a86c814459f3cdaaf99000000000000000000bfb32c826563c518d0ad23bc83ba3f3757210a057eff7615c868bd7d74233da1a3b56d4e04a7ec4792b1c4cffddbbdcfdd23ab5268f1b3d08ebb8ce498cbaaf5aaab812201d1aba3d70471fcd9b466569f3ef72f39d87fcccab514fc02b70be8629c9b73ce7bc4be7f8be71cb7b2d0a4acff8f6abe7dbad64dfa44966945d93c33b038ce0d890f851811e387723a25dda119f64b35e71c5400000000000000000000000000000034c751ebdf3f20a95b817ea3df3d6c0002a41783058e56c70afe8016b3dd9dc7785b36e609f173cc6b893ecd138289709839747837d6a6283b3452c57a5d44cacd363589845637071320921d22c1663964eddec902fc7cc33158bc306d8c3bdae8108a23d2dc96a5cdb518f58832ec0906aaec43659c79c8ad37b0f961f3beaa3e02f7762c5dd633d13b5e487e996597b2ab42c898b7dd8390e13b395aacce4683e55bcfe8c17615257364365fd48bd77da79e52ce9adfe6dca9c42c4d719347f39ef006c2df747ee6adb7cd04faf05c36de72354c64ebaf28a3de18607ebc4b70f50f71dae565749568a23319232dc213342fb472e98c9a412199ce7976bee5eaf40e60cb3fbe8b92dae5008e92d17d05ce74ffffe74ae71d5b8bd43a4e0bf0390335aa489689f5e3a4ac5adca96caab658b43cd499d95d3876c220d147ad1d0e626621d88f1370982f663793cac52ea0d14e595ff1f56427a0a813bb3b84d31d021eeea8faeff25bb66f5940d08a5509a66fc43962bcb2f7415bc38e355e80ec935aa6fe2d74bd475d89449fb46320fee40faff2fd005549fe6a042bd95decfde5e166971935f4cfd9c9e5bfd2d803644f4e5b7e6dc1a7a35df7134e2fad79269bf24bea4eb0213068e3054d9e4a8d1a9eb032cb390e2016d0ce10549728cb4732dc5adab16fa19ac70780b29e079be27c95d3dd2bd91a584c46d84d430fc6ea31ce0ba62fa27be9f6bc435203da7c3a5d68bf4dd4f81cbfaa1c87a15b9272853c9837db930952dca667194b71815a9eb49b495360dcdf31e0e560857d0541a916d6b5469ac1b36babc5a91e1d58925f20d9d5f8a0da3c30711b0d101cabceffbe072be69613ea0003c6e9bb5cd2413c8ddc17cfa319cf7aaeed0ffb07a08f8fb439f709dfe0732fe42192819870bdd87d5f612ade03540a28be446095269d9ea5a60bba1f2462f9921f2a731dbcf1d03964ea1e4f79514914d37877f57617b60fa2b58aa694fcb023024653c4b73efb12a57ffc6f8943262b77be933051e12bd4d768a422ea652d45b04a9c43b5c97fc3edea7002d51a0a74"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) 6.113785061s ago: executing program 0 (id=5048): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0xff, 0x3}, 0x20) r5 = syz_open_procfs(0x0, 0x0) pread64(r5, &(0x7f0000001600)=""/4089, 0x5, 0x200000000000049a) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@deltclass={0x50, 0x29, 0x100, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0x7}, {0xe, 0x2}, {0xfff3, 0xe}}, [@tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x8, 0x5}}, @tclass_kind_options=@c_taprio={0xb}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x40045) socket$inet_smc(0x2b, 0x1, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a6ff2640cda9eecdb9050000000109022b000100000000090400000201035100090503130000000000"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a0000000000000000070000", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f3000"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x8000) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000580)={0x1, @pix={0x97, 0x8, 0x32315559, 0x2, 0x3, 0x8, 0x3, 0xfffffffe, 0x0, 0x3, 0x0, 0x6}}) setxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'system.', ',+*.-\xe1\x00'}, &(0x7f00000002c0)='\x00', 0x1, 0x3) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000280)={0x8006, 0x1, 0x0, "eee98fb006178749cb4dfd93e33c9b6b7bd152f35ed730fc700000cb4f1891e2", 0x43353039}) 5.986246826s ago: executing program 5 (id=5049): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380086dd5400778ce70f00000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010003b503a9"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5.720402655s ago: executing program 5 (id=5050): socket$inet6(0xa, 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0xff, 0x3}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r4, &(0x7f0000001600)=""/4089, 0x5, 0x200000000000049a) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x40045) syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a6ff2640cda9eecdb9050000000109022b000100000000090400000201035100090503130000000000"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a0000000000000000070000", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f3000"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) setxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'system.', ',+*.-\xe1\x00'}, &(0x7f00000002c0)='\x00', 0x1, 0x3) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000280)={0x8006, 0x1, 0x0, "eee98fb006178749cb4dfd93e33c9b6b7bd152f35ed730fc700000cb4f1891e2", 0x43353039}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 5.719193581s ago: executing program 6 (id=5051): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000012c0)=[{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f00000010c0)}], 0x1, &(0x7f0000001280)=[@op={0x10}, @op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10, 0x117, 0x4, 0x2}, @assoc={0x10, 0x117, 0x4, 0x6}], 0x40}], 0x1, 0x48800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 5.54632717s ago: executing program 1 (id=5052): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x2040) r0 = syz_open_dev$dri(0x0, 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f00000005c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x78, 0xfffe, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x19, 0x4, 0x2, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x200, 0xd}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0x12, [0x5, 0x5, 0x1, 0x0]}, @md5sig={0x13, 0x12, "4d561d7ef6737b6a2efa8f86467f69a2"}, @sack={0x5, 0x1a, [0x5, 0x9, 0x7f, 0x7723, 0x5, 0x1]}]}}}}}}}, 0x0) 5.497861674s ago: executing program 6 (id=5053): socket$inet6(0xa, 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) gettid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0xff, 0x3}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r3, &(0x7f0000001600)=""/4089, 0x5, 0x200000000000049a) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@deltclass={0x50, 0x29, 0x100, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0x7}, {0xe, 0x2}, {0xfff3, 0xe}}, [@tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x8, 0x5}}, @tclass_kind_options=@c_taprio={0xb}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x40045) syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a6ff2640cda9eecdb9050000000109022b000100000000090400000201035100090503130000000000"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a0000000000000000070000", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f3000"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x8000) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) setxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'system.', ',+*.-\xe1\x00'}, &(0x7f00000002c0)='\x00', 0x1, 0x3) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000280)={0x8006, 0x1, 0x0, "eee98fb006178749cb4dfd93e33c9b6b7bd152f35ed730fc700000cb4f1891e2", 0x43353039}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 5.206916335s ago: executing program 1 (id=5054): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) rt_sigpending(0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/188, 0xbc) rt_sigaction(0xd, &(0x7f00000002c0)={&(0x7f0000000240)="8fe97882abce000000360f6eb9890ee380362d00000000c4c2f93053000f38ca84ecfe6a3c0765660fd506db596b2e660f28c6c4e1fbf08800000080c4e17b2c5a65", 0xc0000004, &(0x7f0000000140)="d15ebdc4c1bb5d4d078fc92094ad05000000f30f01ad04000000c4e3791d3c5c20c4e2f5bf1cf0c4e1596b5b32c8070000c4e279787cba00652e0f0f6e0097", {[0x400, 0xfffffff7]}}, &(0x7f00000003c0)={&(0x7f0000000300)="c4c1fbd0e626677101c4e2113f2ac4c2d1b7cbc4e1fbf088c2e0d6330f00c1ffb50f000000660f6782f4ffffff3e0fa508c4c3f50de232", 0x0, &(0x7f0000000340)="c4c23945a009000000c4c2b92856ffdad8f30f1eecc4e22d3696000000008fe98090b5fecd4a2c67dd840000c4c1e1e421363ef30f5b887200000036660fc5c200"}, 0x8, &(0x7f0000000400)) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x1b, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x12, 0x45, 0x14, 0x20, 0x17e9, 0xc960, 0xe066, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0xe, 0x6, 0x50, 0x28}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x5c, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRES64=0x0, @ANYRES64=r2]}]}) close(r1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x10000000) r6 = open$dir(&(0x7f00000004c0)='./file0\x00', 0x507802, 0x20) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r9 = syz_io_uring_setup(0x24fd, &(0x7f0000000f80)={0x0, 0xfffffffb, 0x10100, 0x0, 0x80}, &(0x7f00000000c0), &(0x7f0000000280)) io_uring_enter(r9, 0x2d3e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x4ae4, 0x10100, 0x2}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x0, @fd=r9, 0x6, &(0x7f0000000500)=""/253, 0xfd, 0x4, 0x1, {0x0, r12}}) syz_io_uring_submit(0x0, r5, &(0x7f0000000540)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r6, 0x0, &(0x7f0000000500)='./file0\x00', 0x1c9, 0x4000, 0x23456, {0x0, r12}}) 4.093396479s ago: executing program 2 (id=5055): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYBLOB="010800000000030000000b00000008000300", @ANYRES32=r1, @ANYBLOB="3000508008001a0001ac0f00090001007ee5d52ffd00000008000700000000000800070001000000050002000100000023d114e2cf96528d83e3f3b40d00c63442fe8d0749a03a21bc380b00000000000000d6f28c8a5abfe41b3b0b98d915416011bc99cbccc96c39b172dd20e578661bf5cfae0bd84a5a73af7b3d07a0223eb51b971192e6d19357ecbde62b6580bc168ec29c8fdfb23365fdbd4b2563836f9d6181084cb260e231c1e5b5a49bc32f300662e86b"], 0x4c}}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000709c3120e80401669b81010203010902120001010000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000240)={0x20, 0x3}, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) 3.714088994s ago: executing program 6 (id=5056): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="170900000000000000000100000005000700000000000800090000000000060002000000000008000a000000000008001800ac1414aa08001900ffffffff14001b"], 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 3.380983343s ago: executing program 6 (id=5057): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0x1f5, 0x4) recvmmsg(r0, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x45833af92e4b39ff, 0x0) 3.072018679s ago: executing program 6 (id=5058): r0 = socket(0x1000000000000010, 0x80802, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000200000000000c00095000000000000002ba728041598d6fbd30cb599e83d24a3aa81d36b26fb0b71d0e6adfefcf1d8f7faf75e0f226bd99eea7960717142fa9ea4318123741c4a0e168c1886d0d4d94f2f4e345c652fbc16ee988e6e0dc8cedf3ce99fbfbf9b0a4def23d410f6296b32a334388107200759cda9036b4e369a9e152ddcc7f05a5f3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c3b35967deabe802f5ab3e89bd6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ececb0cd2b6d357b85a0218ce740068725837074e098ee207d2f73902fbcfcf49822775985bf32d715f5888b24efa000000000000ffffffdf000000000000000000000089a7b9b00000000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab29ea3323aa9fdfb52faf449c3bfd09000000b91ab219efdebb7b3de8f67581cf796a1d4223b9ff7ffcad3f6c962b9f292324b7ab7f91a31cf41ab11f12fb1e0a494034127de7c6592df1a6c64d8f20a67745409e011f1264d43e153b3d34899f40159e800ea2474b544035a30b23bcee46762c2093bcc9eae5dff5adbdee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d337c56abf1128744bab6677fcb78e313841ec309baed0495f06d058a75fa4c81e5c9f42d9383e41d277b10392a912ffaf6f658f3fadd16286744f839c3f128f8f92d0992239eafce5c1b3f97a297c9e49a0c3510ef74080e6d1e0c8a868a353409e34d3e82279637598f37ad380a447483cac394c7bbdcd0e3b1c39b6e00916de48a4e70f03cc4146a77af02c1d4cef5379da860aed8477dfa8ceefb405005c6977c78cdbf37704ec73755539280b064bda154910fe050038ec9e47de89298b7bf4d769ccc18eede00e8ca5457870eb30d211e23ccc8e06cd58b61799257ab55ff413c86ba9affb12ec757c7234c270246c87a901160e6c07bc6cf8809c3a0d46ff7f008000000000ad1e1f493354b2822b98371d000000167d78e65b90eba0768e825972ea3b774a1467c89fa0f82e8440105051e5510a33dcda5e143fbfff161c12ca389cbe4c51b3fa00675cd1b66c5fd9c26a54d43fa050645bd9109b7e7131421c0f39113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a84a4e3344b155cc20f49e298727340e97cdefb40e56e9cfad973347d0de7ba4754ff231a1b033d8f931ba3442b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf46306f2ef79b8d4c2ff030000000000000007b82e6044f643068cd47ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c99220002af8c5e53d52c83ac3fa7c3a3ee6c08384865b66d2b4dcb5dd9cba16b64ebbbf8702ae12c77e6e34991a225c120a3c950942fe0bc9f2a1a7506d35e5b439edeb7088aeda890cf8a4a6f31ba6d9b8cb098f935bdcbb29fd0f1a342c9eed00000000ab6648a9dea0b6c91996d65da6c24a702a86c814459f3cdaaf99000000000000000000bfb32c826563c518d0ad23bc83ba3f3757210a057eff7615c868bd7d74233da1a3b56d4e04a7ec4792b1c4cffddbbdcfdd23ab5268f1b3d08ebb8ce498cbaaf5aaab812201d1aba3d70471fcd9b466569f3ef72f39d87fcccab514fc02b70be8629c9b73ce7bc4be7f8be71cb7b2d0a4acff8f6abe7dbad64dfa44966945d93c33b038ce0d890f851811e387723a25dda119f64b35e71c5400000000000000000000000000000034c751ebdf3f20a95b817ea3df3d6c0002a41783058e56c70afe8016b3dd9dc7785b36e609f173cc6b893ecd138289709839747837d6a6283b3452c57a5d44cacd363589845637071320921d22c1663964eddec902fc7cc33158bc306d8c3bdae8108a23d2dc96a5cdb518f58832ec0906aaec43659c79c8ad37b0f961f3beaa3e02f7762c5dd633d13b5e487e996597b2ab42c898b7dd8390e13b395aacce4683e55bcfe8c17615257364365fd48bd77da79e52ce9adfe6dca9c42c4d719347f39ef006c2df747ee6adb7cd04faf05c36de72354c64ebaf28a3de18607ebc4b70f50f71dae565749568a23319232dc213342fb472e98c9a412199ce7976bee5eaf40e60cb3fbe8b92dae5008e92d17d05ce74ffffe74ae71d5b8bd43a4e0bf0390335aa489689f5e3a4ac5adca96caab658b43cd499d95d3876c220d147ad1d0e626621d88f1370982f663793cac52ea0d14e595ff1f56427a0a813bb3b84d31d021eeea8faeff25bb66f5940d08a5509a66fc43962bcb2f7415bc38e355e80ec935aa6fe2d74bd475d89449fb46320fee40faff2fd005549fe6a042bd95decfde5e166971935f4cfd9c9e5bfd2d803644f4e5b7e6dc1a7a35df7134e2fad79269bf24bea4eb0213068e3054d9e4a8d1a9eb032cb390e2016d0ce10549728cb4732dc5adab16fa19ac70780b29e079be27c95d3dd2bd91a584c46d84d430fc6ea31ce0ba62fa27be9f6bc435203da7c3a5d68bf4dd4f81cbfaa1c87a15b9272853c9837db930952dca667194b71815a9eb49b495360dcdf31e0e560857d0541a916d6b5469ac1b36babc5a91e1d58925f20d9d5f8a0da3c30711b0d101cabceffbe072be69613ea0003c6e9bb5cd2413c8ddc17cfa319cf7aaeed0ffb07a08f8fb439f709dfe0732fe42192819870bdd87d5f612ade03540a28be446095269d9ea5a60bba1f2462f9921f2a731dbcf1d03964ea1e4f79514914d37877f57617b60fa2b58aa694fcb023024653c4b73efb12a57ffc6f8943262b77be933051e12bd4d768a422ea652d45b04a9c43b5c97fc3edea7002d51a0a74"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) 2.19936633s ago: executing program 5 (id=5060): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0x1f5, 0x4) recvmmsg(r0, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x45833af92e4b39ff, 0x0) 2.127068558s ago: executing program 0 (id=5061): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) r0 = io_uring_setup(0x191a, &(0x7f0000000000)={0x0, 0x761, 0x40, 0x81, 0x1b5}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (fail_nth: 16) 1.586242164s ago: executing program 0 (id=5062): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0xfffffffffffffd2e, 0x8000, 0x3}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x141301) ioctl$USBDEVFS_CLEAR_HALT(r6, 0x80045515, &(0x7f00000000c0)={0x1, 0x1}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000100001040000000000000000000000003b032b0b1380acf1f624b506e4328ec4a1b39e3cf06243ef1ff1634da756e86e11f62795fee95fb3b0bfa818cc4c947ef43c6dfc3488b159fc858dea1d307b0d979e0000d0bb9405b8f690c8deff44d44ed5e1481ef4e08c19dea3b0d42fb0feb2c5b49f468e6f66fda95b23", @ANYRES32=0x0, @ANYBLOB="03000000000a0000"], 0x20}}, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x262) openat$autofs(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x400c806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab190c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f0000000000)={0x6c}, 0x8) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e23, 0xd7, @local, 0x9}, 0x1c) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x1000000}, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="600000000206010100000000000000000100ffff14000780080012400000800008000b400000cd200500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x4, 0x8a}, 0x9c) 1.225285562s ago: executing program 1 (id=5063): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000012c0)=[{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f00000010c0)="dddd63dca3650fc0b671d88df7ca283789d33784bc01a50c9cee7327ac67a23f7e", 0x21}], 0x1, &(0x7f0000001280)=[@op={0x10}, @op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10, 0x117, 0x4, 0x2}, @assoc={0x10, 0x117, 0x4, 0x6}], 0x40}], 0x1, 0x48800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.064756469s ago: executing program 1 (id=5064): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000200)=[@mss, @sack_perm, @mss={0x2, 0xfff}, @window={0x3, 0x7}, @window={0x3, 0x0, 0x401}, @window, @mss={0x2, 0x3}, @mss={0x2, 0x2}], 0x8) socket$kcm(0x29, 0x2, 0x0) set_mempolicy(0x1, &(0x7f0000000000)=0x1, 0x4) syz_clone(0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x58) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 810.745568ms ago: executing program 2 (id=5065): socket$inet6(0xa, 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0xff, 0x3}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r5, &(0x7f0000001600)=""/4089, 0x5, 0x200000000000049a) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@deltclass={0x50, 0x29, 0x100, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0x7}, {0xe, 0x2}, {0xfff3, 0xe}}, [@tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x8, 0x5}}, @tclass_kind_options=@c_taprio={0xb}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x40045) syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a6ff2640cda9eecdb9050000000109022b000100000000090400000201035100090503130000000000"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a0000000000000000070000", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f3000"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x8000) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) setxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'system.', ',+*.-\xe1\x00'}, &(0x7f00000002c0)='\x00', 0x1, 0x3) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000280)={0x8006, 0x1, 0x0, "eee98fb006178749cb4dfd93e33c9b6b7bd152f35ed730fc700000cb4f1891e2", 0x43353039}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 646.754859ms ago: executing program 5 (id=5066): r0 = mq_open(&(0x7f0000000000)='\x00', 0x40, 0x0, &(0x7f0000000080)={0x2, 0x10001, 0x161, 0x6}) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103642, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x20048004) recvmmsg(r2, &(0x7f0000005380)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000300)=""/74, 0x4a}, {&(0x7f0000000380)=""/131, 0x83}, {&(0x7f0000002f40)=""/239, 0xef}, {&(0x7f0000000540)=""/226, 0xe2}], 0x5, &(0x7f0000000640)=""/112, 0x70}, 0x3}, {{&(0x7f0000000700)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000780)=""/90, 0x5a}, {&(0x7f0000000800)=""/65, 0x41}], 0x2, &(0x7f0000000880)=""/35, 0x23}, 0x2}, {{&(0x7f00000008c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000001980)=""/5, 0x5}, {&(0x7f00000019c0)=""/119, 0x77}, {&(0x7f0000001a40)=""/27, 0x1b}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/98, 0x62}, {&(0x7f0000002b00)=""/241, 0xf1}], 0x6, &(0x7f0000002c40)=""/88, 0x58}, 0x2}, {{&(0x7f0000002cc0)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000002e40)=[{&(0x7f0000002d40)=""/246, 0xf6}], 0x1}, 0x3}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002e80)=""/48, 0x30}], 0x1, &(0x7f0000005440)=""/4106, 0x100a}, 0x3}, {{&(0x7f0000003f40)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000005300)=[{&(0x7f0000003fc0)=""/4096, 0x1000}, {&(0x7f0000004fc0)=""/164, 0xa4}, {&(0x7f0000005080)=""/4, 0x4}, {&(0x7f00000050c0)=""/224, 0xe0}, {&(0x7f00000051c0)=""/143, 0x8f}, {&(0x7f0000005280)=""/97, 0x61}], 0x6, &(0x7f0000005340)=""/21, 0x15}, 0x5}], 0x6, 0x10000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x3bb) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) close(r5) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000004000000060000000100000004000000080000000800"/45]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) mlock(&(0x7f0000a38000/0x1000)=nil, 0x1000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000043b000/0x1000)=nil, 0xfffffffffffffdb5, &(0x7f0000000080)='\x00\xc9\xf5\x00\x00\x00\x00\x00\x00\x00+\x1ct\xc6\fr\xbaU\xc1\xb2\xd2\xde\xbfk\xc0\x18\x94\xc5&\xec\x03\xa0w\"E\xc9\xf2,K4\x10\xc8\x8cuj\xd3\xf0\xb3\xa9f\xf7\xb7\x17\xdf\xca\xac\x8b\x81K\t\x14^\xc3\xb7<\xa1\x15\v4\xd0\xbe\xa8\x01\x00<:-Y\n<\x1d\xb2\xe0kU\xc0\xc1\x14') openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x890}, 0x0) 0s ago: executing program 0 (id=5067): syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x162682, 0x0) fanotify_init(0x200, 0x8000) dup(r2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffff", @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x4) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) kernel console output (not intermixed with test programs): valid bInterval 0, changing to 7 [ 1356.841844][T21123] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1356.853733][T21123] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1356.898443][T12825] usb 7-1: USB disconnect, device number 16 [ 1356.902975][T21123] usb 6-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1356.984199][T21123] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.028873][T21123] usb 6-1: config 0 descriptor?? [ 1357.060167][T21123] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1357.077391][T21123] usb 6-1: MIDIStreaming interface descriptor not found [ 1357.267973][T22460] netlink: 'syz.5.4360': attribute type 2 has an invalid length. [ 1357.545209][T22469] usb usb8: usbfs: process 22469 (syz.0.4371) did not claim interface 0 before use [ 1359.364025][ T3078] usb 6-1: USB disconnect, device number 86 [ 1359.431586][T12825] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1359.524740][T22505] netlink: 'syz.5.4375': attribute type 27 has an invalid length. [ 1359.533964][T21123] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1359.635558][T12825] usb 2-1: config 0 has no interfaces? [ 1359.649797][T12825] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1359.697552][T12825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.702755][T21123] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1359.779377][T12825] usb 2-1: Product: syz [ 1359.787173][T12825] usb 2-1: Manufacturer: syz [ 1359.796722][T21123] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1360.036743][T12825] usb 2-1: SerialNumber: syz [ 1360.046709][T21123] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1360.060229][T12825] usb 2-1: config 0 descriptor?? [ 1360.105649][T21123] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1360.154436][T21123] usb 7-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1360.190863][T21123] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.228314][T21123] usb 7-1: config 0 descriptor?? [ 1360.254303][T21123] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1360.274478][T21123] usb 7-1: MIDIStreaming interface descriptor not found [ 1360.299584][T21678] usb 2-1: USB disconnect, device number 31 [ 1360.413516][T22514] netlink: 'syz.5.4377': attribute type 10 has an invalid length. [ 1361.150900][T22529] usb usb8: usbfs: process 22529 (syz.0.4382) did not claim interface 0 before use [ 1361.430663][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.437124][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.490249][T22531] trusted_key: encrypted_key: insufficient parameters specified [ 1362.621663][T22542] xt_recent: hitcount (33554432) is larger than allowed maximum (65535) [ 1363.058884][T22546] netlink: 'syz.0.4389': attribute type 15 has an invalid length. [ 1363.154686][T21678] usb 7-1: USB disconnect, device number 17 [ 1363.591746][T22559] usb usb8: usbfs: process 22559 (syz.0.4393) did not claim interface 0 before use [ 1363.667393][T21123] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1363.914699][T21123] usb 6-1: Using ep0 maxpacket: 32 [ 1363.925912][T21123] usb 6-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 1363.935114][T21123] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.943098][T21123] usb 6-1: Product: syz [ 1363.990609][T21123] usb 6-1: Manufacturer: syz [ 1364.008920][T21123] usb 6-1: SerialNumber: syz [ 1364.263888][T21123] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 1364.512281][T21123] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1364.544204][T21123] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1364.629886][T21123] usb 6-1: USB disconnect, device number 87 [ 1364.660075][T21123] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1364.719805][T21123] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1364.722268][T22549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1364.824366][T21123] visor 6-1:1.0: device disconnected [ 1365.091428][T22566] FAULT_INJECTION: forcing a failure. [ 1365.091428][T22566] name failslab, interval 1, probability 0, space 0, times 0 [ 1365.150949][T22566] CPU: 0 UID: 0 PID: 22566 Comm: syz.0.4394 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 1365.150974][T22566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1365.150985][T22566] Call Trace: [ 1365.150993][T22566] [ 1365.151000][T22566] dump_stack_lvl+0x189/0x250 [ 1365.151033][T22566] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1365.151058][T22566] ? __pfx__printk+0x10/0x10 [ 1365.151080][T22566] ? __pfx___might_resched+0x10/0x10 [ 1365.151101][T22566] should_fail_ex+0x414/0x560 [ 1365.151125][T22566] should_failslab+0xa8/0x100 [ 1365.151151][T22566] __kmalloc_cache_noprof+0x70/0x3d0 [ 1365.151174][T22566] ? device_add+0xbe/0xb50 [ 1365.151198][T22566] device_add+0xbe/0xb50 [ 1365.151219][T22566] ? device_initialize+0x24b/0x440 [ 1365.151241][T22566] wakeup_source_sysfs_add+0x1af/0x280 [ 1365.151268][T22566] wakeup_source_register+0x175/0x250 [ 1365.151291][T22566] device_wakeup_enable+0xf2/0x280 [ 1365.151314][T22566] usb_hcd_submit_urb+0xc45/0x1aa0 [ 1365.151352][T22566] usbfs_start_wait_urb+0x144/0x420 [ 1365.151379][T22566] ? __pfx_usbfs_start_wait_urb+0x10/0x10 [ 1365.151412][T22566] ? snoop_urb+0x32/0x200 [ 1365.151439][T22566] do_proc_control+0x7d6/0xe40 [ 1365.151476][T22566] proc_control_compat+0x129/0x170 [ 1365.151499][T22566] ? __pfx_proc_control_compat+0x10/0x10 [ 1365.151532][T22566] usbdev_ioctl+0x13ba/0x20c0 [ 1365.151557][T22566] ? __fget_files+0x2a/0x420 [ 1365.151582][T22566] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1365.151601][T22566] ? __fget_files+0x3a0/0x420 [ 1365.151624][T22566] ? __fget_files+0x2a/0x420 [ 1365.151649][T22566] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1365.151677][T22566] __ia32_compat_sys_ioctl+0x551/0x840 [ 1365.151700][T22566] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1365.151720][T22566] ? __fget_files+0x3a0/0x420 [ 1365.151748][T22566] ? fput+0xa0/0xd0 [ 1365.151774][T22566] ? ksys_write+0x1f0/0x250 [ 1365.151801][T22566] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1365.151825][T22566] ? lockdep_hardirqs_on+0x9c/0x150 [ 1365.151849][T22566] __do_fast_syscall_32+0xb4/0x110 [ 1365.151875][T22566] ? lockdep_hardirqs_on+0x9c/0x150 [ 1365.151900][T22566] do_fast_syscall_32+0x34/0x80 [ 1365.151924][T22566] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1365.151946][T22566] RIP: 0023:0xf7f11539 [ 1365.151960][T22566] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1365.151975][T22566] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1365.151993][T22566] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0105500 [ 1365.152005][T22566] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1365.152015][T22566] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1365.152025][T22566] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1365.152035][T22566] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1365.152060][T22566] [ 1365.642987][T22575] program syz.0.4396 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1365.664674][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 1365.664692][ T30] audit: type=1326 audit(1747918613.167:5742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22573 comm="syz.0.4396" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 1365.714292][ T3078] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1365.742588][ T30] audit: type=1326 audit(1747918613.207:5743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22573 comm="syz.0.4396" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 1365.765390][ T30] audit: type=1326 audit(1747918613.207:5744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22573 comm="syz.0.4396" exe="/root/syz-executor" sig=0 arch=40000003 syscall=320 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 1365.794099][ T30] audit: type=1326 audit(1747918613.207:5745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22573 comm="syz.0.4396" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 1365.818654][ T30] audit: type=1326 audit(1747918613.207:5746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22573 comm="syz.0.4396" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 1365.853931][ T30] audit: type=1326 audit(1747918613.207:5747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22573 comm="syz.0.4396" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 1365.934284][ T30] audit: type=1326 audit(1747918613.207:5748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22573 comm="syz.0.4396" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 1365.943167][ T3078] usb 6-1: Using ep0 maxpacket: 32 [ 1365.986849][ T3078] usb 6-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 1366.043844][ T30] audit: type=1326 audit(1747918613.207:5749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22573 comm="syz.0.4396" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 1366.076635][ T3078] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.109153][ T30] audit: type=1326 audit(1747918613.217:5750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22573 comm="syz.0.4396" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 1366.111736][ T3078] usb 6-1: Product: syz [ 1366.178187][ T3078] usb 6-1: Manufacturer: syz [ 1366.182816][ T3078] usb 6-1: SerialNumber: syz [ 1366.192044][ T30] audit: type=1326 audit(1747918613.217:5751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22573 comm="syz.0.4396" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 1366.215609][T22590] netlink: 'syz.6.4402': attribute type 10 has an invalid length. [ 1366.383987][T21123] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1366.447925][ T3078] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 1366.462977][ T3078] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1366.492061][ T3078] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1366.544949][T21123] usb 1-1: Using ep0 maxpacket: 32 [ 1366.564258][T21123] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1366.640500][T21123] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1366.663115][ T3078] usb 6-1: USB disconnect, device number 88 [ 1366.672554][ T3078] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1366.689449][T21123] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1366.753742][T21123] usb 1-1: Product: syz [ 1366.761351][ T3078] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1366.771334][T21123] usb 1-1: Manufacturer: syz [ 1366.779680][T21123] usb 1-1: SerialNumber: syz [ 1366.787785][ T3078] visor 6-1:1.0: device disconnected [ 1366.803110][T21123] usb 1-1: config 0 descriptor?? [ 1366.827967][T22586] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1366.840246][T21123] hub 1-1:0.0: bad descriptor, ignoring hub [ 1366.847952][T21123] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1367.513882][ T3078] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1367.682524][ T3078] usb 6-1: config 0 has no interfaces? [ 1367.690309][ T3078] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1367.701065][ T3078] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.709140][ T3078] usb 6-1: Product: syz [ 1367.713394][ T3078] usb 6-1: Manufacturer: syz [ 1367.718079][ T3078] usb 6-1: SerialNumber: syz [ 1367.725008][ T3078] usb 6-1: config 0 descriptor?? [ 1367.754115][T22586] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 1367.910191][T22586] usb 1-1: device firmware changed [ 1367.916819][T21678] usb 1-1: USB disconnect, device number 3 [ 1367.946631][T21123] usb 6-1: USB disconnect, device number 89 [ 1368.054098][T21678] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1368.089837][T22593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1368.213898][T21678] usb 1-1: Using ep0 maxpacket: 32 [ 1368.220916][T21678] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1368.237923][T21678] usb 1-1: language id specifier not provided by device, defaulting to English [ 1368.253929][T21678] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1368.263297][T21678] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1368.272094][T21678] usb 1-1: Product: syz [ 1368.278477][T21678] usb 1-1: config 0 descriptor?? [ 1368.285737][T22592] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1368.294879][T21678] hub 1-1:0.0: bad descriptor, ignoring hub [ 1368.300798][T21678] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1368.811935][T22600] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1368.818566][T22600] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1368.828431][T22600] vhci_hcd vhci_hcd.0: Device attached [ 1368.854221][T22603] vhci_hcd: connection closed [ 1368.860562][T19322] vhci_hcd: stop threads [ 1368.874155][T21123] usb 1-1: USB disconnect, device number 4 [ 1368.888500][T19322] vhci_hcd: release socket [ 1368.893073][T19322] vhci_hcd: disconnect device [ 1369.450867][T22618] usb usb8: usbfs: process 22618 (syz.6.4407) did not claim interface 0 before use [ 1370.176584][T22624] netlink: 'syz.0.4410': attribute type 15 has an invalid length. [ 1370.384423][T12825] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1370.499293][T22609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1370.549777][T12825] usb 6-1: Using ep0 maxpacket: 32 [ 1370.577507][T12825] usb 6-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 1370.633857][T12825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.655494][T12825] usb 6-1: Product: syz [ 1370.662324][T12825] usb 6-1: Manufacturer: syz [ 1370.675732][T12825] usb 6-1: SerialNumber: syz [ 1370.928956][T12825] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 1370.976574][T12825] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1370.992261][T12825] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1370.994062][ T3078] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1371.140412][ T5885] usb 6-1: USB disconnect, device number 90 [ 1371.154609][ T5885] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1371.164106][ T3078] usb 2-1: Using ep0 maxpacket: 32 [ 1371.173977][T21678] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1371.174648][ T3078] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 1371.214890][ T5885] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1371.236742][ T3078] usb 2-1: config 0 has no interface number 0 [ 1371.260669][ T3078] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1371.284889][ T5885] visor 6-1:1.0: device disconnected [ 1371.300558][ T3078] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1371.329234][ T3078] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1371.345653][ T3078] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1371.354220][T21678] usb 7-1: Using ep0 maxpacket: 32 [ 1371.356288][ T3078] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1371.392424][ T3078] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1371.425122][T21678] usb 7-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 1371.425981][ T3078] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1371.444590][ T3078] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1371.454474][T21678] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.454496][T21678] usb 7-1: Product: syz [ 1371.454510][T21678] usb 7-1: Manufacturer: syz [ 1371.454525][T21678] usb 7-1: SerialNumber: syz [ 1371.486165][ T3078] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1371.496384][ T3078] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1371.514152][ T3078] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1371.525321][ T3078] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.537386][ T3078] usb 2-1: Product: syz [ 1371.541673][ T3078] usb 2-1: Manufacturer: syz [ 1371.547461][ T3078] usb 2-1: SerialNumber: syz [ 1371.680873][ T3078] usb 2-1: config 0 descriptor?? [ 1371.686419][T21678] visor 7-1:1.0: Handspring Visor / Palm OS converter detected [ 1371.687320][T22632] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1371.723136][T21678] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1371.741321][ T3078] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 1371.752927][ T3078] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 1371.784750][T21678] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1371.812705][ T3078] scsi host1: microtekX6 [ 1371.825730][ T5885] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1371.844446][T19329] microtek usb (rev 0.4.3): error -90 submitting URB [ 1371.874142][T20945] microtek usb (rev 0.4.3): error -90 submitting URB [ 1371.914235][T20945] microtek usb (rev 0.4.3): error -90 submitting URB [ 1371.936337][T21678] usb 7-1: USB disconnect, device number 18 [ 1371.963446][T20945] microtek usb (rev 0.4.3): error -90 submitting URB [ 1372.017865][T21678] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1372.037340][ T5885] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1372.094942][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1372.136969][T21678] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1372.144544][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1372.177512][T21678] visor 7-1:1.0: device disconnected [ 1372.187911][ T5885] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1372.240976][ T5885] usb 1-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1372.274362][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.297549][T22632] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4412'. [ 1372.313603][T22632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1372.324270][ T5885] usb 1-1: config 0 descriptor?? [ 1372.329525][T22632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1372.350518][ T5885] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1372.370767][ T5885] usb 1-1: MIDIStreaming interface descriptor not found [ 1372.413119][T21678] usb 2-1: USB disconnect, device number 32 [ 1372.429727][ T1206] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1372.594240][ T1206] usb 6-1: Using ep0 maxpacket: 32 [ 1372.624334][ T1206] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1372.678890][ T1206] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1372.723462][T22659] netlink: 'syz.6.4423': attribute type 10 has an invalid length. [ 1372.747606][ T1206] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1372.819939][ T1206] usb 6-1: Product: syz [ 1372.844462][ T1206] usb 6-1: Manufacturer: syz [ 1372.899706][ T1206] usb 6-1: SerialNumber: syz [ 1373.071085][ T1206] usb 6-1: config 0 descriptor?? [ 1373.113100][T22650] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1373.170757][ T1206] hub 6-1:0.0: bad descriptor, ignoring hub [ 1373.208898][ T1206] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1373.209394][T22665] netlink: 'syz.1.4425': attribute type 15 has an invalid length. [ 1374.385662][ T1206] raw-gadget.2 gadget.5: failed to queue suspend event [ 1374.474235][T22650] raw-gadget.2 gadget.5: failed to queue resume event [ 1374.529708][ T3078] raw-gadget.2 gadget.5: failed to queue suspend event [ 1374.584593][ T3078] usb 1-1: USB disconnect, device number 5 [ 1374.603923][T22650] raw-gadget.2 gadget.5: failed to queue resume event [ 1374.688324][T21123] raw-gadget.2 gadget.5: failed to queue suspend event [ 1374.763972][T22650] raw-gadget.2 gadget.5: failed to queue resume event [ 1374.785866][T21123] raw-gadget.2 gadget.5: failed to queue suspend event [ 1374.853905][T22650] raw-gadget.2 gadget.5: failed to queue resume event [ 1374.877183][T21123] raw-gadget.2 gadget.5: failed to queue suspend event [ 1374.963899][T22650] raw-gadget.2 gadget.5: failed to queue resume event [ 1374.986929][ T3078] raw-gadget.2 gadget.5: failed to queue suspend event [ 1375.034312][T22691] netlink: 'syz.2.4438': attribute type 15 has an invalid length. [ 1375.064013][T22650] raw-gadget.2 gadget.5: failed to queue resume event [ 1375.100488][ T5885] raw-gadget.2 gadget.5: failed to queue suspend event [ 1375.126477][T22650] raw-gadget.2 gadget.5: failed to queue disconnect event [ 1375.134320][ T3078] usb 6-1: USB disconnect, device number 91 [ 1375.204788][T21123] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1375.278698][T22675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1375.374684][T21123] usb 1-1: Using ep0 maxpacket: 32 [ 1375.391297][T21123] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 1375.408771][T21123] usb 1-1: config 0 has no interface number 0 [ 1375.420963][T21123] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1375.449477][T21123] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1375.484283][T21123] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1375.504227][T21123] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1375.517372][T21123] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1375.529619][T21123] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1375.540423][T21123] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1375.681335][T21123] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1375.706170][T21123] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1375.716335][T21123] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1375.737033][T21123] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1375.746227][T21123] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.759666][T21123] usb 1-1: Product: syz [ 1375.765736][T21123] usb 1-1: Manufacturer: syz [ 1375.770479][T21123] usb 1-1: SerialNumber: syz [ 1375.852874][T21123] usb 1-1: config 0 descriptor?? [ 1375.864250][T22689] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1375.882386][T21123] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 1375.891266][T21123] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 1375.907345][T21123] scsi host1: microtekX6 [ 1375.922188][T19323] microtek usb (rev 0.4.3): error -90 submitting URB [ 1375.964423][T20446] microtek usb (rev 0.4.3): error -90 submitting URB [ 1376.004315][T20446] microtek usb (rev 0.4.3): error -90 submitting URB [ 1376.044114][T20446] microtek usb (rev 0.4.3): error -90 submitting URB [ 1376.124281][T22689] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4437'. [ 1376.165896][T22689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1376.191152][T22689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1376.261407][ T1206] usb 1-1: USB disconnect, device number 6 [ 1377.484311][ T1206] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1377.684933][ T1206] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1377.699294][ T1206] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1377.957026][ T1206] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1377.976445][ T1206] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1378.024650][ T1206] usb 7-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1378.129551][ T1206] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.179950][ T1206] usb 7-1: config 0 descriptor?? [ 1378.201493][ T1206] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1378.211692][ T1206] usb 7-1: MIDIStreaming interface descriptor not found [ 1378.443901][T22735] netlink: 'syz.6.4451': attribute type 2 has an invalid length. [ 1379.185265][T22740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1380.427851][ T1206] usb 7-1: USB disconnect, device number 19 [ 1380.514175][ T5882] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 1380.770490][ T5882] usb 2-1: not running at top speed; connect to a high speed hub [ 1380.822219][ T5882] usb 2-1: config 1 has an invalid descriptor of length 90, skipping remainder of the config [ 1380.835814][ T5882] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1380.876887][ T5882] usb 2-1: New USB device found, idVendor=0535, idProduct=a4a8, bcdDevice= 0.40 [ 1380.888309][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.899376][ T5882] usb 2-1: Product: syz [ 1380.903601][ T5882] usb 2-1: Manufacturer: syz [ 1380.909197][ T5882] usb 2-1: SerialNumber: syz [ 1381.095861][T22793] netlink: 'syz.5.4475': attribute type 10 has an invalid length. [ 1381.105117][T22792] netlink: 'syz.6.4473': attribute type 15 has an invalid length. [ 1381.698659][T22805] usb usb8: usbfs: process 22805 (syz.6.4479) did not claim interface 0 before use [ 1383.338196][ T5882] usb 2-1: USB disconnect, device number 33 [ 1383.394133][ T1206] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1383.576950][ T1206] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1383.594034][ T1206] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1383.615422][ T1206] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1383.635208][ T1206] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1383.664155][ T1206] usb 1-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1383.681568][ T1206] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.919864][ T5882] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1383.965888][ T1206] usb 1-1: config 0 descriptor?? [ 1383.987975][ T1206] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1384.185959][ T1206] usb 1-1: MIDIStreaming interface descriptor not found [ 1384.224199][ T5882] usb 2-1: Using ep0 maxpacket: 32 [ 1384.236258][T22811] netlink: 'syz.0.4480': attribute type 2 has an invalid length. [ 1384.253708][ T5882] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1384.281727][ T5882] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1384.332015][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1384.383939][ T5882] usb 2-1: Product: syz [ 1384.394603][ T5882] usb 2-1: Manufacturer: syz [ 1384.426489][ T5882] usb 2-1: SerialNumber: syz [ 1384.634491][ T5882] usb 2-1: config 0 descriptor?? [ 1384.644590][T22819] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1384.655424][ T5882] hub 2-1:0.0: bad descriptor, ignoring hub [ 1384.662545][ T5882] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1384.803499][T22834] netlink: 'syz.2.4487': attribute type 15 has an invalid length. [ 1384.900910][T22814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1385.538126][T22847] usb usb8: usbfs: process 22847 (syz.5.4491) did not claim interface 0 before use [ 1385.767172][ T3078] usb 1-1: USB disconnect, device number 7 [ 1386.146719][ T5882] raw-gadget.0 gadget.1: failed to queue suspend event [ 1386.224014][T22819] raw-gadget.0 gadget.1: failed to queue resume event [ 1386.245706][ T5882] raw-gadget.0 gadget.1: failed to queue suspend event [ 1386.313996][T22819] raw-gadget.0 gadget.1: failed to queue resume event [ 1386.323863][ T3078] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1386.337553][ T5882] raw-gadget.0 gadget.1: failed to queue suspend event [ 1386.414301][T22819] raw-gadget.0 gadget.1: failed to queue resume event [ 1386.488693][ T5882] raw-gadget.0 gadget.1: failed to queue suspend event [ 1386.503936][ T3078] usb 1-1: Using ep0 maxpacket: 32 [ 1386.562396][T22819] raw-gadget.0 gadget.1: failed to queue disconnect event [ 1386.673888][ T5882] usb 2-1: USB disconnect, device number 34 [ 1386.727651][ T3078] usb 1-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 1386.747865][ T3078] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.769008][ T3078] usb 1-1: Product: syz [ 1386.823889][ T3078] usb 1-1: Manufacturer: syz [ 1386.840645][ T3078] usb 1-1: SerialNumber: syz [ 1386.944062][T18539] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 1387.001067][T22867] netlink: 'syz.5.4496': attribute type 10 has an invalid length. [ 1387.068878][ T3078] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 1387.096274][ T3078] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1387.116923][ T3078] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1387.129897][T18539] usb 7-1: not running at top speed; connect to a high speed hub [ 1387.140935][T18539] usb 7-1: config 1 has an invalid descriptor of length 90, skipping remainder of the config [ 1387.174315][T18539] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1387.206748][T18539] usb 7-1: New USB device found, idVendor=0535, idProduct=a4a8, bcdDevice= 0.40 [ 1387.216144][T18539] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.302080][T18539] usb 7-1: Product: syz [ 1387.322372][ T3078] usb 1-1: USB disconnect, device number 8 [ 1387.332047][T18539] usb 7-1: Manufacturer: syz [ 1387.338549][T18539] usb 7-1: SerialNumber: syz [ 1387.359666][ T3078] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1387.380854][ T3078] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1387.395529][ T3078] visor 1-1:1.0: device disconnected [ 1389.406183][T18539] usb 7-1: USB disconnect, device number 20 [ 1389.635964][T22881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1389.960695][T22899] usb usb8: usbfs: process 22899 (syz.0.4507) did not claim interface 0 before use [ 1390.244518][ T5882] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1390.394302][ T5882] usb 6-1: Using ep0 maxpacket: 32 [ 1390.409319][ T5882] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1390.654343][ T5882] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1390.663534][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1390.674587][ T5882] usb 6-1: Product: syz [ 1390.699185][ T5882] usb 6-1: Manufacturer: syz [ 1390.723874][ T5882] usb 6-1: SerialNumber: syz [ 1390.741221][ T5882] usb 6-1: config 0 descriptor?? [ 1390.754690][T22900] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1390.855480][ T5882] hub 6-1:0.0: bad descriptor, ignoring hub [ 1390.861530][ T5882] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1391.230340][T22917] usb usb8: usbfs: process 22917 (syz.6.4512) did not claim interface 0 before use [ 1391.333929][ T5882] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 1391.413839][ T5905] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1391.527527][ T5882] usb 2-1: not running at top speed; connect to a high speed hub [ 1391.625646][ T5882] usb 2-1: config 1 has an invalid descriptor of length 90, skipping remainder of the config [ 1391.636087][ T5882] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1391.646244][ T5905] usb 1-1: Using ep0 maxpacket: 32 [ 1391.659002][ T5882] usb 2-1: New USB device found, idVendor=0535, idProduct=a4a8, bcdDevice= 0.40 [ 1391.668245][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.677040][ T5882] usb 2-1: Product: syz [ 1391.681438][ T5882] usb 2-1: Manufacturer: syz [ 1391.689366][ T5882] usb 2-1: SerialNumber: syz [ 1391.689464][ T5905] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1391.722100][ T5905] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1391.731760][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1391.740516][ T5905] usb 1-1: Product: syz [ 1391.757000][ T5905] usb 1-1: Manufacturer: syz [ 1391.781574][ T5905] usb 1-1: SerialNumber: syz [ 1392.203422][ T5905] usb 1-1: config 0 descriptor?? [ 1392.217722][T22916] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1392.227304][ T5905] hub 1-1:0.0: bad descriptor, ignoring hub [ 1392.235815][ T5905] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1392.260256][ T5905] chaoskey 1-1:0.0: Unable to register with hwrng [ 1392.614097][ T3078] usb 1-1: USB disconnect, device number 9 [ 1392.644176][ T5905] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 1392.838010][ T5905] usb 7-1: not running at top speed; connect to a high speed hub [ 1392.849122][ T5905] usb 7-1: config 1 has an invalid descriptor of length 90, skipping remainder of the config [ 1392.869580][ T5905] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1392.908693][ T5905] usb 7-1: New USB device found, idVendor=0535, idProduct=a4a8, bcdDevice= 0.40 [ 1392.936253][ T5905] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.959605][ T5905] usb 7-1: Product: syz [ 1393.047998][ T5905] usb 7-1: Manufacturer: syz [ 1393.059631][ T5905] usb 7-1: SerialNumber: syz [ 1394.327496][ T5885] usb 6-1: USB disconnect, device number 92 [ 1395.086536][ T5882] usb 2-1: USB disconnect, device number 35 [ 1395.322071][ T5905] usb 7-1: USB disconnect, device number 21 [ 1395.333400][T22938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1395.383315][T22949] netlink: 'syz.6.4525': attribute type 15 has an invalid length. [ 1396.333953][ T5905] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1396.494171][ T5905] usb 7-1: Using ep0 maxpacket: 32 [ 1396.507017][ T5905] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1396.539802][ T5905] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1396.567326][ T5905] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1396.620295][ T5905] usb 7-1: Product: syz [ 1396.652727][ T5905] usb 7-1: Manufacturer: syz [ 1396.664854][ T5882] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1396.673195][ T5905] usb 7-1: SerialNumber: syz [ 1396.689970][ T5905] usb 7-1: config 0 descriptor?? [ 1396.697411][T22965] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1396.751721][ T5905] hub 7-1:0.0: bad descriptor, ignoring hub [ 1396.768909][ T5905] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1396.844043][ T5882] usb 2-1: Using ep0 maxpacket: 32 [ 1396.857485][ T5882] usb 2-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 1396.869459][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.878798][ T5882] usb 2-1: Product: syz [ 1396.883150][ T5882] usb 2-1: Manufacturer: syz [ 1396.892529][ T5882] usb 2-1: SerialNumber: syz [ 1397.209758][ T5882] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 1397.217748][ T5905] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 1397.247646][ T5882] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1397.257998][T22984] netlink: 'syz.5.4537': attribute type 15 has an invalid length. [ 1397.298390][ T5882] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1397.383939][ T5905] usb 1-1: not running at top speed; connect to a high speed hub [ 1397.405768][ T5905] usb 1-1: config 1 has an invalid descriptor of length 90, skipping remainder of the config [ 1397.437008][ T5882] usb 2-1: USB disconnect, device number 36 [ 1397.450446][ T5905] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1397.475003][ T5882] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1397.535242][ T5905] usb 1-1: New USB device found, idVendor=0535, idProduct=a4a8, bcdDevice= 0.40 [ 1397.562229][ T5882] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1397.589122][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.604555][ T5882] visor 2-1:1.0: device disconnected [ 1397.609991][ T5905] usb 1-1: Product: syz [ 1397.621653][ T5905] usb 1-1: Manufacturer: syz [ 1397.665152][ T5905] usb 1-1: SerialNumber: syz [ 1397.887636][ T3078] usb 7-1: USB disconnect, device number 22 [ 1398.318375][T23005] usb usb8: usbfs: process 23005 (syz.5.4545) did not claim interface 0 before use [ 1398.464242][T12825] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1398.711423][T12825] usb 2-1: Using ep0 maxpacket: 32 [ 1398.729031][T12825] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1398.765119][T12825] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1398.788958][T23014] usb usb8: usbfs: process 23014 (syz.6.4548) did not claim interface 0 before use [ 1398.799897][T12825] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1398.839913][T12825] usb 2-1: Product: syz [ 1398.849933][T12825] usb 2-1: Manufacturer: syz [ 1398.873271][T12825] usb 2-1: SerialNumber: syz [ 1398.906004][T12825] usb 2-1: config 0 descriptor?? [ 1398.928885][T23003] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1398.981392][T12825] hub 2-1:0.0: bad descriptor, ignoring hub [ 1399.070787][T12825] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1399.435093][T12825] usb 2-1: USB disconnect, device number 37 [ 1400.230722][T23021] netlink: 'syz.6.4550': attribute type 15 has an invalid length. [ 1400.403920][T21678] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1400.653375][T21678] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1400.675829][T21678] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1400.690422][T21678] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1400.700852][T21678] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1400.723577][T21678] usb 6-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1400.797510][T21678] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.830882][T21678] usb 6-1: config 0 descriptor?? [ 1400.852547][T21678] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1400.860085][T21678] usb 6-1: MIDIStreaming interface descriptor not found [ 1401.002049][ T5905] usb 1-1: USB disconnect, device number 10 [ 1401.413861][T21123] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1401.504368][ T3078] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1401.564919][T21123] usb 2-1: Using ep0 maxpacket: 32 [ 1401.574376][T21123] usb 2-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 1401.590817][T21123] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.601954][T21123] usb 2-1: Product: syz [ 1401.607967][T21123] usb 2-1: Manufacturer: syz [ 1401.614958][T21123] usb 2-1: SerialNumber: syz [ 1401.623833][ T5885] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1401.646010][T23047] usb usb8: usbfs: process 23047 (syz.2.4561) did not claim interface 0 before use [ 1401.674107][ T3078] usb 7-1: Using ep0 maxpacket: 32 [ 1401.681435][ T3078] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1401.724246][T23048] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4561'. [ 1401.737075][ T3078] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1401.748558][ T3078] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1401.802426][ T3078] usb 7-1: Product: syz [ 1401.807002][ T5885] usb 1-1: Using ep0 maxpacket: 16 [ 1401.818903][ T5885] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1401.841397][T21123] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 1401.862518][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1401.877802][ T3078] usb 7-1: Manufacturer: syz [ 1401.883104][T21123] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1401.891821][ T3078] usb 7-1: SerialNumber: syz [ 1401.903165][ T5885] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1401.920412][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.929700][ T3078] usb 7-1: config 0 descriptor?? [ 1401.935063][T21123] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1401.944447][ T5885] usb 1-1: Product: syz [ 1401.953056][T23038] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 1401.960553][ T5885] usb 1-1: Manufacturer: syz [ 1401.965448][ T5885] usb 1-1: SerialNumber: syz [ 1401.974114][ T3078] hub 7-1:0.0: bad descriptor, ignoring hub [ 1401.982065][ T3078] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1401.991296][ T5885] usb 1-1: config 0 descriptor?? [ 1402.047753][T18539] usb 2-1: USB disconnect, device number 38 [ 1402.056899][T18539] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1402.072519][ T5885] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1402.088289][ T5885] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1402.099184][T18539] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1402.112664][T18539] visor 2-1:1.0: device disconnected [ 1402.238743][T23049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1402.259927][T23049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1402.608504][ T5885] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1402.616313][ T5885] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1402.909029][T18539] raw-gadget.3 gadget.6: failed to queue suspend event [ 1402.953891][ T5905] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1402.984005][T23038] raw-gadget.3 gadget.6: failed to queue resume event [ 1403.005507][ T3078] usb 6-1: USB disconnect, device number 93 [ 1403.027766][T21678] raw-gadget.3 gadget.6: failed to queue suspend event [ 1403.107267][T23038] raw-gadget.3 gadget.6: failed to queue resume event [ 1403.114335][ T5905] usb 2-1: Using ep0 maxpacket: 32 [ 1403.140857][ T5905] usb 2-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 1403.159625][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.185514][T18539] raw-gadget.3 gadget.6: failed to queue suspend event [ 1403.185611][ T5905] usb 2-1: Product: syz [ 1403.197295][ T5905] usb 2-1: Manufacturer: syz [ 1403.201906][ T5905] usb 2-1: SerialNumber: syz [ 1403.246109][ T5885] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 1403.263886][T23038] raw-gadget.3 gadget.6: failed to queue resume event [ 1403.276141][ T5885] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 1403.292425][ T5885] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 1403.305212][T21678] raw-gadget.3 gadget.6: failed to queue suspend event [ 1403.373907][T23038] raw-gadget.3 gadget.6: failed to queue resume event [ 1403.419444][ T3078] raw-gadget.3 gadget.6: failed to queue suspend event [ 1403.422355][ T5905] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 1403.438404][ T5905] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1403.461477][ T5905] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1403.504282][T23038] raw-gadget.3 gadget.6: failed to queue resume event [ 1403.534865][ T3078] raw-gadget.3 gadget.6: failed to queue suspend event [ 1403.604057][T21678] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1403.617158][T23038] raw-gadget.3 gadget.6: failed to queue resume event [ 1403.642877][ T3078] usb 2-1: USB disconnect, device number 39 [ 1403.649590][ T5905] raw-gadget.3 gadget.6: failed to queue suspend event [ 1403.659366][ T3078] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1403.676632][ T3078] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1403.693376][ T3078] visor 2-1:1.0: device disconnected [ 1403.702457][ T5885] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 1403.719305][ T5885] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 1403.724490][T23038] raw-gadget.3 gadget.6: failed to queue resume event [ 1403.729274][ T5885] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 1403.745495][ T5885] usb 1-1: USB disconnect, device number 11 [ 1403.754082][T21678] usb 6-1: Using ep0 maxpacket: 32 [ 1403.767139][T12825] raw-gadget.3 gadget.6: failed to queue suspend event [ 1403.775207][T21678] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1403.790554][T21678] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1403.799908][T21678] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1403.813388][T21678] usb 6-1: Product: syz [ 1403.818029][T21678] usb 6-1: Manufacturer: syz [ 1403.822754][T21678] usb 6-1: SerialNumber: syz [ 1403.829579][T21678] usb 6-1: config 0 descriptor?? [ 1403.835488][T23061] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1403.844448][T21678] hub 6-1:0.0: bad descriptor, ignoring hub [ 1403.850510][T21678] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1403.857896][T23038] raw-gadget.3 gadget.6: failed to queue resume event [ 1403.867524][T21678] chaoskey 6-1:0.0: Unable to register with hwrng [ 1403.895035][T18539] raw-gadget.3 gadget.6: failed to queue suspend event [ 1403.964180][T23038] raw-gadget.3 gadget.6: failed to queue resume event [ 1403.984774][T21678] raw-gadget.3 gadget.6: failed to queue suspend event [ 1404.057874][T23038] raw-gadget.3 gadget.6: failed to queue resume event [ 1404.085331][ T5885] raw-gadget.3 gadget.6: failed to queue suspend event [ 1404.174413][T23038] raw-gadget.3 gadget.6: failed to queue resume event [ 1404.194829][T12825] raw-gadget.3 gadget.6: failed to queue suspend event [ 1404.225025][T21678] usb 6-1: USB disconnect, device number 94 [ 1404.306775][T23038] raw-gadget.3 gadget.6: failed to queue resume event [ 1404.412796][ T5885] raw-gadget.3 gadget.6: failed to queue suspend event [ 1404.453237][T23038] raw-gadget.3 gadget.6: failed to queue disconnect event [ 1404.463044][T18539] usb 7-1: USB disconnect, device number 23 [ 1404.554482][T21678] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1404.723878][T21678] usb 6-1: Using ep0 maxpacket: 32 [ 1404.736618][T21678] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1404.815778][T21678] usb 6-1: language id specifier not provided by device, defaulting to English [ 1404.860162][T21678] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1404.881959][T21678] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1404.898942][T21678] usb 6-1: Product: syz [ 1404.915416][T21678] usb 6-1: config 0 descriptor?? [ 1404.929665][T23061] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1404.947745][T21678] hub 6-1:0.0: bad descriptor, ignoring hub [ 1404.960376][T21678] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1405.274173][T18539] usb 6-1: USB disconnect, device number 95 [ 1405.336928][ T3078] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1405.385351][T23082] netlink: 'syz.1.4574': attribute type 15 has an invalid length. [ 1405.400458][T23083] usb usb8: usbfs: process 23083 (syz.0.4573) did not claim interface 0 before use [ 1405.519265][T23085] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4573'. [ 1405.603179][ T3078] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1405.621987][ T3078] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1405.644869][ T3078] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1405.660758][ T3078] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1405.702363][ T3078] usb 7-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1405.819594][ T3078] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1405.916262][ T3078] usb 7-1: config 0 descriptor?? [ 1405.992217][ T3078] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1406.113850][ T3078] usb 7-1: MIDIStreaming interface descriptor not found [ 1406.154193][ T5885] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1406.271989][T23075] netlink: 'syz.6.4571': attribute type 2 has an invalid length. [ 1406.409281][ T5885] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1406.498588][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1406.601901][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1406.635526][ T5885] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1406.681968][ T5885] usb 2-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1406.718001][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.726063][ T5905] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1406.797646][ T5885] usb 2-1: config 0 descriptor?? [ 1406.826925][ T5885] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1406.849313][ T5885] usb 2-1: MIDIStreaming interface descriptor not found [ 1406.904275][ T5905] usb 6-1: Using ep0 maxpacket: 32 [ 1406.923706][ T5905] usb 6-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 1406.956515][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.988023][ T5905] usb 6-1: Product: syz [ 1407.003650][ T5905] usb 6-1: Manufacturer: syz [ 1407.028347][ T5905] usb 6-1: SerialNumber: syz [ 1407.281730][ T5905] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 1407.295996][ T5905] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1407.329969][ T5905] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1407.488375][ T5905] usb 6-1: USB disconnect, device number 96 [ 1407.517158][ T5905] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1407.554678][ T5905] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1407.603575][ T5905] visor 6-1:1.0: device disconnected [ 1407.715233][T23112] usb usb8: usbfs: process 23112 (syz.0.4582) did not claim interface 0 before use [ 1408.054529][T21678] usb 7-1: USB disconnect, device number 24 [ 1408.790680][T23123] netlink: 'syz.6.4586': attribute type 15 has an invalid length. [ 1408.923857][ T3078] usb 2-1: USB disconnect, device number 40 [ 1409.263992][ T5885] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1409.440597][ T5885] usb 7-1: Using ep0 maxpacket: 32 [ 1409.698567][ T3078] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1409.735429][ T5885] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1409.760050][ T5885] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1409.769464][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1409.778019][ T5885] usb 7-1: Product: syz [ 1409.843007][ T5885] usb 7-1: Manufacturer: syz [ 1409.858092][ T5885] usb 7-1: SerialNumber: syz [ 1409.895379][ T3078] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1409.913596][ T5885] usb 7-1: config 0 descriptor?? [ 1409.918809][ T3078] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1409.934534][T23127] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1409.951035][ T5885] hub 7-1:0.0: bad descriptor, ignoring hub [ 1409.960177][ T5885] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1409.973788][ T3078] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1410.017785][ T3078] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1410.155613][ T3078] usb 2-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1410.187658][ T3078] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.334101][ T3078] usb 2-1: config 0 descriptor?? [ 1410.360712][ T3078] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1410.390793][ T3078] usb 2-1: MIDIStreaming interface descriptor not found [ 1410.612394][T23135] netlink: 'syz.1.4591': attribute type 2 has an invalid length. [ 1410.763843][ T5885] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1410.927287][ T5885] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1410.939398][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1410.951660][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1410.963113][ T5885] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1410.977084][ T5885] usb 1-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1410.986195][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.997365][ T5885] usb 1-1: config 0 descriptor?? [ 1411.008150][ T5885] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1411.019024][ T5885] usb 1-1: MIDIStreaming interface descriptor not found [ 1411.033998][T23127] usb 7-1: reset high-speed USB device number 25 using dummy_hcd [ 1411.198325][T23127] usb 7-1: device firmware changed [ 1411.205723][ T5905] usb 7-1: USB disconnect, device number 25 [ 1411.217129][T23150] netlink: 'syz.0.4595': attribute type 2 has an invalid length. [ 1411.355210][ T5905] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1411.503934][ T5905] usb 7-1: Using ep0 maxpacket: 32 [ 1411.510532][ T5905] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1411.524422][ T5905] usb 7-1: language id specifier not provided by device, defaulting to English [ 1411.540379][ T5905] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1411.549604][ T5905] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1411.560710][ T5905] usb 7-1: Product: syz [ 1411.568068][ T5905] usb 7-1: config 0 descriptor?? [ 1411.575423][T23145] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 1411.584524][ T5905] hub 7-1:0.0: bad descriptor, ignoring hub [ 1411.590581][ T5905] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1411.915827][ T3078] usb 7-1: USB disconnect, device number 26 [ 1412.181937][ T3078] usb 2-1: USB disconnect, device number 41 [ 1412.250554][T23154] netlink: 'syz.5.4598': attribute type 15 has an invalid length. [ 1412.515554][T23162] usb usb8: usbfs: process 23162 (syz.1.4597) did not claim interface 0 before use [ 1412.644081][T21678] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1412.896011][T21678] usb 6-1: Using ep0 maxpacket: 16 [ 1412.929722][T21678] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1412.962463][T21678] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1413.001390][T21678] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1413.030465][T21678] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.078398][T21678] usb 6-1: Product: syz [ 1413.132437][T21678] usb 6-1: Manufacturer: syz [ 1413.138093][T12825] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1413.584524][ T5905] usb 1-1: USB disconnect, device number 12 [ 1413.613839][T21678] usb 6-1: SerialNumber: syz [ 1413.650304][T21678] usb 6-1: config 0 descriptor?? [ 1413.672170][T21678] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1413.697650][T12825] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1413.718308][T12825] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1413.769742][T21678] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1413.800856][T12825] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1413.842773][T12825] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1413.932657][T12825] usb 7-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1414.009412][T12825] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.066383][T12825] usb 7-1: config 0 descriptor?? [ 1414.091000][T12825] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1414.105273][T12825] usb 7-1: MIDIStreaming interface descriptor not found [ 1414.272902][T21678] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1414.280075][T21678] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1414.348919][T23189] usb usb8: usbfs: process 23189 (syz.1.4607) did not claim interface 0 before use [ 1414.524124][T23190] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4607'. [ 1414.832755][T23194] netlink: 'syz.0.4610': attribute type 15 has an invalid length. [ 1414.897507][T21678] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 1414.908103][T21678] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 1414.916166][T21678] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 1415.326673][T21678] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 1415.339986][T21678] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 1415.368448][T21678] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 1415.424029][T12825] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1415.445247][T21678] usb 6-1: USB disconnect, device number 97 [ 1415.453288][T23176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1415.574082][T12825] usb 1-1: Using ep0 maxpacket: 32 [ 1415.592704][T12825] usb 1-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 1415.601835][T12825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.611921][T12825] usb 1-1: Product: syz [ 1415.616400][T12825] usb 1-1: Manufacturer: syz [ 1415.621067][T12825] usb 1-1: SerialNumber: syz [ 1415.839771][T12825] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 1415.862353][T12825] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1415.884245][T12825] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1416.049719][ T1206] usb 1-1: USB disconnect, device number 13 [ 1416.076633][ T1206] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1416.125180][ T1206] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1416.141727][ T1206] visor 1-1:1.0: device disconnected [ 1416.154476][T12825] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1416.315890][T12825] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1416.343519][T12825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1416.376967][T12825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1416.407303][T12825] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1416.432147][T12825] usb 2-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1416.444884][T12825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.462536][T12825] usb 2-1: config 0 descriptor?? [ 1416.472345][T12825] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1416.492052][T12825] usb 2-1: MIDIStreaming interface descriptor not found [ 1416.660262][T12825] usb 7-1: USB disconnect, device number 27 [ 1416.685926][T23204] netlink: 'syz.1.4614': attribute type 2 has an invalid length. [ 1416.953668][T23224] netlink: 'syz.6.4622': attribute type 15 has an invalid length. [ 1417.155383][T23232] usb usb8: usbfs: process 23232 (syz.0.4623) did not claim interface 0 before use [ 1417.257582][T23235] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4623'. [ 1417.384643][T12825] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1417.559184][T12825] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1417.571667][T12825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.583596][T12825] usb 6-1: Product: syz [ 1417.592888][T12825] usb 6-1: Manufacturer: syz [ 1417.606755][T12825] usb 6-1: SerialNumber: syz [ 1417.620462][T12825] usb 6-1: config 0 descriptor?? [ 1417.636748][T12825] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1417.834247][ T5885] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1418.004103][ T5885] usb 7-1: Using ep0 maxpacket: 16 [ 1418.024674][ T5885] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1418.043649][ T5885] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1418.060985][ T5885] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1418.071238][T12825] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 1418.084151][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.092231][ T5885] usb 7-1: Product: syz [ 1418.092339][T12825] sq905c 6-1:0.0: Reading version command failed [ 1418.096637][ T5885] usb 7-1: Manufacturer: syz [ 1418.096655][ T5885] usb 7-1: SerialNumber: syz [ 1418.128420][ T5885] usb 7-1: config 0 descriptor?? [ 1418.149138][T12825] sq905c 6-1:0.0: probe with driver sq905c failed with error -71 [ 1418.153118][ T5885] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1418.168386][T12825] usb 6-1: USB disconnect, device number 98 [ 1418.182212][ T5885] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1418.767266][ T5885] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1418.798722][ T5885] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 1418.902841][T12825] usb 2-1: USB disconnect, device number 42 [ 1419.044039][T18539] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1419.238695][T18539] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1419.250794][T18539] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1419.269944][T18539] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1419.279968][T18539] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1419.294027][T23244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1419.315273][T18539] usb 6-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1419.324554][T18539] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.337341][T18539] usb 6-1: config 0 descriptor?? [ 1419.400433][T18539] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1419.408734][T18539] usb 6-1: MIDIStreaming interface descriptor not found [ 1419.425397][ T5885] em28xx 7-1:0.0: Unknown AC97 audio processor detected! [ 1419.426046][T12825] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1419.458519][ T5885] em28xx 7-1:0.0: couldn't setup AC97 register 2 [ 1419.488779][ T5885] em28xx 7-1:0.0: couldn't setup AC97 register 4 [ 1419.622892][T12825] usb 2-1: Using ep0 maxpacket: 32 [ 1419.647737][T12825] usb 2-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 1419.678102][T12825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.697150][T12825] usb 2-1: Product: syz [ 1419.705019][T12825] usb 2-1: Manufacturer: syz [ 1419.709814][T12825] usb 2-1: SerialNumber: syz [ 1419.926175][ T5885] em28xx 7-1:0.0: couldn't setup AC97 register 6 [ 1419.941835][ T5885] em28xx 7-1:0.0: couldn't setup AC97 register 54 [ 1419.960064][T12825] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 1419.964097][ T5885] em28xx 7-1:0.0: couldn't setup AC97 register 56 [ 1419.983222][T12825] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1420.028212][T12825] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1420.061521][ T5885] usb 7-1: USB disconnect, device number 28 [ 1420.217999][T12825] usb 2-1: USB disconnect, device number 43 [ 1420.231937][T12825] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1420.283512][T12825] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1420.321934][T12825] visor 2-1:1.0: device disconnected [ 1420.355888][T23260] netlink: 'syz.0.4635': attribute type 15 has an invalid length. [ 1421.078650][T23276] usb usb8: usbfs: process 23276 (syz.0.4639) did not claim interface 0 before use [ 1421.206659][T23278] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4639'. [ 1421.680097][T21123] usb 6-1: USB disconnect, device number 99 [ 1422.107535][T12825] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1422.173064][ T5885] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1422.347317][ T5885] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1422.359111][ T5885] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1422.373163][T12825] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1422.383505][T12825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1422.484486][ T5885] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1422.494118][T12825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1422.508461][ T5885] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1422.533231][T12825] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1422.533597][ T5885] usb 7-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1422.556773][ T5885] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1422.708123][T12825] usb 2-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1422.730426][T12825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1422.730853][ T5885] usb 7-1: config 0 descriptor?? [ 1422.745051][T12825] usb 2-1: config 0 descriptor?? [ 1422.754399][T12825] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1422.761404][T12825] usb 2-1: MIDIStreaming interface descriptor not found [ 1422.899732][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.932626][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.974132][T23286] netlink: 'syz.1.4643': attribute type 2 has an invalid length. [ 1423.056853][ T5885] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1423.088964][ T5885] usb 7-1: MIDIStreaming interface descriptor not found [ 1423.690736][T23285] netlink: 'syz.6.4642': attribute type 2 has an invalid length. [ 1423.765706][T23304] netlink: 'syz.2.4658': attribute type 15 has an invalid length. [ 1424.063991][ T5885] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1424.213950][ T5885] usb 6-1: Using ep0 maxpacket: 32 [ 1424.226929][ T5885] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1424.243305][ T5885] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1424.253553][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1424.265991][ T5885] usb 6-1: Product: syz [ 1424.270229][ T5885] usb 6-1: Manufacturer: syz [ 1424.278298][ T5885] usb 6-1: SerialNumber: syz [ 1424.289633][ T5885] usb 6-1: config 0 descriptor?? [ 1424.301430][T23306] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1424.310263][ T5885] hub 6-1:0.0: bad descriptor, ignoring hub [ 1424.321197][ T5885] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1424.589013][T23327] usb usb8: usbfs: process 23327 (syz.0.4657) did not claim interface 0 before use [ 1424.694403][T21678] usb 6-1: USB disconnect, device number 100 [ 1424.715785][ T1206] usb 2-1: USB disconnect, device number 44 [ 1424.852535][T12825] usb 7-1: USB disconnect, device number 29 [ 1425.063613][T23337] netlink: 'syz.6.4660': attribute type 15 has an invalid length. [ 1425.204852][T21678] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1425.385269][T21678] usb 6-1: Using ep0 maxpacket: 32 [ 1425.393200][T21678] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1425.417781][T21678] usb 6-1: language id specifier not provided by device, defaulting to English [ 1425.441251][T21678] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1425.450578][T21678] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1425.462984][T21678] usb 6-1: Product: syz [ 1425.472798][T21678] usb 6-1: config 0 descriptor?? [ 1425.553612][T23306] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1425.567320][T21678] hub 6-1:0.0: bad descriptor, ignoring hub [ 1425.968477][T21678] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1426.038643][T21678] usb 6-1: USB disconnect, device number 101 [ 1427.273881][ T5885] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1427.719000][ T5885] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1427.783463][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1427.798554][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1427.832662][ T5885] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1427.883896][ T5885] usb 2-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1427.958324][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1428.019095][ T5885] usb 2-1: config 0 descriptor?? [ 1428.042578][ T5885] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1428.056498][ T5885] usb 2-1: MIDIStreaming interface descriptor not found [ 1428.244463][T23362] netlink: 'syz.1.4668': attribute type 2 has an invalid length. [ 1429.158349][ T5885] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1429.296375][T23395] usb usb8: usbfs: process 23395 (syz.5.4677) did not claim interface 0 before use [ 1429.436929][ T5885] usb 7-1: Using ep0 maxpacket: 32 [ 1429.458349][ T5885] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1429.485817][ T5885] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1429.510314][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1429.579212][ T5885] usb 7-1: Product: syz [ 1429.615339][ T5885] usb 7-1: Manufacturer: syz [ 1429.685261][ T5885] usb 7-1: SerialNumber: syz [ 1429.717479][ T5885] usb 7-1: config 0 descriptor?? [ 1429.724450][T23380] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1429.740830][ T5885] hub 7-1:0.0: bad descriptor, ignoring hub [ 1429.749623][ T5885] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1430.054193][T18539] usb 2-1: USB disconnect, device number 45 [ 1430.144542][ T5885] usb 7-1: USB disconnect, device number 30 [ 1430.613855][ T5885] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1430.822120][ T5885] usb 7-1: Using ep0 maxpacket: 32 [ 1430.834200][ T5885] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1430.854126][T23413] netlink: 'syz.2.4685': attribute type 15 has an invalid length. [ 1430.865686][ T5885] usb 7-1: language id specifier not provided by device, defaulting to English [ 1430.891837][ T5885] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1430.936077][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1430.970304][ T5885] usb 7-1: Product: syz [ 1430.986904][ T5885] usb 7-1: config 0 descriptor?? [ 1430.993136][T23380] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1431.017684][ T5885] hub 7-1:0.0: bad descriptor, ignoring hub [ 1431.023627][ T5885] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1431.039993][ T1206] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1431.041951][T23419] netlink: 'syz.2.4689': attribute type 1 has an invalid length. [ 1431.121846][T23419] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1431.158295][T23419] vlan2: entered promiscuous mode [ 1431.163565][T23419] bond1: entered promiscuous mode [ 1431.169009][T23419] vlan2: entered allmulticast mode [ 1431.176728][T23419] bond1: entered allmulticast mode [ 1431.198245][T23419] bond1: (slave gretap1): making interface the new active one [ 1431.205869][T23419] gretap1: entered promiscuous mode [ 1431.208073][ T1206] usb 2-1: Using ep0 maxpacket: 16 [ 1431.211384][T23419] gretap1: entered allmulticast mode [ 1431.224412][T23419] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1431.279953][ T1206] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1431.309386][ T1206] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1431.330106][ T1206] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1431.351011][ T1206] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.351037][ T1206] usb 2-1: Product: syz [ 1431.351054][ T1206] usb 2-1: Manufacturer: syz [ 1431.351070][ T1206] usb 2-1: SerialNumber: syz [ 1431.368023][ T1206] usb 2-1: config 0 descriptor?? [ 1431.401721][ T1206] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1431.401749][ T1206] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1431.724680][T23437] netlink: 'syz.5.4694': attribute type 15 has an invalid length. [ 1431.784222][ T5885] usb 7-1: USB disconnect, device number 31 [ 1432.008206][ T1206] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1432.020392][ T1206] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1432.675578][ T1206] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 1432.684622][ T1206] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 1432.698790][ T1206] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 1432.711519][T23454] usb usb8: usbfs: process 23454 (syz.5.4699) did not claim interface 0 before use [ 1433.174101][ T1206] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 1433.226460][ T1206] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 1433.260925][ T1206] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 1433.285503][ T1206] usb 2-1: USB disconnect, device number 46 [ 1433.754410][T23445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1433.927319][T23462] netlink: 'syz.1.4701': attribute type 15 has an invalid length. [ 1434.076584][T23466] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4703'. [ 1434.144091][T23470] netlink: 'syz.1.4705': attribute type 15 has an invalid length. [ 1434.517209][T23487] netlink: 'syz.1.4710': attribute type 10 has an invalid length. [ 1434.845733][T23486] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4709'. [ 1435.173928][ T5885] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1435.845785][ T5885] usb 1-1: config 0 has no interfaces? [ 1435.903102][ T5885] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1435.930762][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.958973][ T5885] usb 1-1: Product: syz [ 1435.972170][ T5885] usb 1-1: Manufacturer: syz [ 1435.983514][ T5885] usb 1-1: SerialNumber: syz [ 1436.014843][ T5885] usb 1-1: config 0 descriptor?? [ 1436.247531][T23486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1436.257585][T23486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1436.682457][T23504] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4717'. [ 1436.694952][T23505] usb usb8: usbfs: process 23505 (syz.2.4714) did not claim interface 0 before use [ 1437.203149][ T5885] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1437.298131][ T1206] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1437.460031][ T1206] usb 6-1: Using ep0 maxpacket: 16 [ 1437.485475][ T1206] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1437.507276][ T1206] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1437.524019][ T5885] usb 7-1: Using ep0 maxpacket: 16 [ 1437.542382][ T5885] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1437.557824][ T5885] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1437.563542][ T1206] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1437.589983][ T5885] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1437.606912][ T1206] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.624432][ T1206] usb 6-1: Product: syz [ 1437.634429][ T1206] usb 6-1: Manufacturer: syz [ 1437.637688][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.650583][ T1206] usb 6-1: SerialNumber: syz [ 1437.675820][ T1206] usb 6-1: config 0 descriptor?? [ 1437.696263][ T1206] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1437.708161][ T1206] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1437.806662][T18539] usb 1-1: USB disconnect, device number 14 [ 1437.857025][ T5885] usb 7-1: Product: syz [ 1437.861230][ T5885] usb 7-1: Manufacturer: syz [ 1437.930588][ T5885] usb 7-1: SerialNumber: syz [ 1437.962132][ T5885] usb 7-1: config 0 descriptor?? [ 1437.976609][ T5885] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1437.994366][ T5885] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1438.273971][T18539] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1438.305201][ T1206] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1438.312671][ T1206] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1438.480786][T18539] usb 1-1: Using ep0 maxpacket: 32 [ 1438.497022][T18539] usb 1-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 1438.514025][T18539] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.522864][T18539] usb 1-1: Product: syz [ 1438.528837][T18539] usb 1-1: Manufacturer: syz [ 1438.533993][T18539] usb 1-1: SerialNumber: syz [ 1438.574070][ T5885] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1438.581128][ T5885] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 1438.746437][T18539] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 1438.760107][T18539] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1438.776094][T18539] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1438.848931][T23516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1438.931085][ T1206] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 1438.939152][ T1206] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 1438.952356][ T1206] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 1438.955085][T18539] usb 1-1: USB disconnect, device number 15 [ 1439.001650][T18539] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1439.041342][T18539] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1439.063643][T18539] visor 1-1:1.0: device disconnected [ 1439.214685][ T5885] em28xx 7-1:0.0: Unknown AC97 audio processor detected! [ 1439.224391][ T5885] em28xx 7-1:0.0: couldn't setup AC97 register 2 [ 1439.237444][ T5885] em28xx 7-1:0.0: couldn't setup AC97 register 4 [ 1439.249186][ T5885] em28xx 7-1:0.0: couldn't setup AC97 register 6 [ 1439.264223][ T5885] em28xx 7-1:0.0: couldn't setup AC97 register 54 [ 1439.270986][ T5885] em28xx 7-1:0.0: couldn't setup AC97 register 56 [ 1439.311900][ T5885] usb 7-1: USB disconnect, device number 32 [ 1439.374522][ T1206] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 1439.381314][ T1206] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 1439.388632][ T1206] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 1439.405697][ T1206] usb 6-1: USB disconnect, device number 102 [ 1440.027897][T23544] netlink: 'syz.6.4730': attribute type 10 has an invalid length. [ 1441.055184][T23562] usb usb8: usbfs: process 23562 (syz.5.4734) did not claim interface 0 before use [ 1450.260296][T24030] usb usb8: usbfs: process 24030 (syz.1.4954) did not claim interface 0 before use [ 1450.815029][T24022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1450.993819][ T5885] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1451.173826][T21678] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1451.193861][ T1206] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1451.341367][ T5885] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1451.371883][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1451.394299][T21678] usb 6-1: Using ep0 maxpacket: 32 [ 1451.406488][T21678] usb 6-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 1451.417838][T21678] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.428395][T21678] usb 6-1: Product: syz [ 1451.432635][T21678] usb 6-1: Manufacturer: syz [ 1451.439087][T21678] usb 6-1: SerialNumber: syz [ 1451.489577][ T1206] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1451.502180][ T1206] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1451.522414][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1451.522883][ T1206] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1451.542527][ T1206] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1451.606581][ T1206] usb 7-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1451.613772][ T5885] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1451.638830][ T1206] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1451.662976][T21678] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 1451.700730][ T5885] usb 1-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1451.711054][ T1206] usb 7-1: config 0 descriptor?? [ 1451.724264][T21678] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1451.751278][ T1206] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1451.778910][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1451.826816][ T1206] usb 7-1: MIDIStreaming interface descriptor not found [ 1451.846450][T21678] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1451.890109][ T5885] usb 1-1: config 0 descriptor?? [ 1451.977920][T24042] netlink: 'syz.6.4957': attribute type 2 has an invalid length. [ 1452.067851][T21678] usb 6-1: USB disconnect, device number 103 [ 1452.095646][ T5885] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1452.224282][ T5885] usb 1-1: MIDIStreaming interface descriptor not found [ 1452.226239][T21678] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1452.367886][T21678] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1452.462778][T21678] visor 6-1:1.0: device disconnected [ 1452.804957][T12825] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1452.944029][T21678] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1453.114525][T21678] usb 6-1: Using ep0 maxpacket: 16 [ 1453.176556][T21678] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1453.199340][T21678] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1453.216988][T12825] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1453.250844][T21678] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1453.264179][T12825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1453.277432][T21678] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.297862][T12825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1453.313243][T21678] usb 6-1: Product: syz [ 1453.325320][T21678] usb 6-1: Manufacturer: syz [ 1453.334101][T12825] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1453.349469][T21678] usb 6-1: SerialNumber: syz [ 1453.376200][T21678] usb 6-1: config 0 descriptor?? [ 1453.400062][T12825] usb 2-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1453.410895][T21678] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1453.441459][T12825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.459056][T21678] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1453.489963][T12825] usb 2-1: config 0 descriptor?? [ 1453.612747][T12825] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1453.649970][T12825] usb 2-1: MIDIStreaming interface descriptor not found [ 1453.761088][T24057] netlink: 'syz.1.4959': attribute type 2 has an invalid length. [ 1454.001439][T21678] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1454.009720][T21678] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1454.114023][ T3078] usb 1-1: USB disconnect, device number 16 [ 1454.241921][T12825] usb 7-1: USB disconnect, device number 33 [ 1454.640078][T21678] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 1454.648099][T21678] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 1454.655347][T21678] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 1454.749376][T24076] usb usb8: usbfs: process 24076 (syz.6.4966) did not claim interface 0 before use [ 1455.063657][T21678] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 1455.083631][T21678] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 1455.091788][T21678] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 1455.113690][T21678] usb 6-1: USB disconnect, device number 104 [ 1455.272685][ T5882] usb 2-1: USB disconnect, device number 47 [ 1455.649513][T24087] netlink: 'syz.5.4969': attribute type 15 has an invalid length. [ 1455.900654][ T5882] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1456.076777][ T5882] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1456.100389][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1456.121927][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1456.131963][ T5882] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1456.151155][ T5882] usb 1-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1456.171099][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.183639][ T5882] usb 1-1: config 0 descriptor?? [ 1456.237899][ T5882] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1456.245440][ T5882] usb 1-1: MIDIStreaming interface descriptor not found [ 1456.433224][T24084] netlink: 'syz.0.4977': attribute type 2 has an invalid length. [ 1456.447752][T24080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1456.460747][ T5882] usb 1-1: USB disconnect, device number 17 [ 1457.534078][ T5882] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1457.794342][ T5882] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1458.123136][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1458.139005][T24119] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4978'. [ 1458.254868][ T5885] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1458.425447][ T5885] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1458.438649][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1458.457674][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1458.468606][ T5885] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1458.481802][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1458.491583][ T5882] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1458.522588][ T5885] usb 1-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1458.552203][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.575608][ T5885] usb 1-1: config 0 descriptor?? [ 1458.599689][ T5885] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1458.616052][ T5885] usb 1-1: MIDIStreaming interface descriptor not found [ 1458.644321][ T5882] usb 6-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1458.800000][T24115] netlink: 'syz.0.4976': attribute type 2 has an invalid length. [ 1458.839921][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.863674][ T5882] usb 6-1: config 0 descriptor?? [ 1458.927542][ T5882] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1458.935737][ T5882] usb 6-1: MIDIStreaming interface descriptor not found [ 1459.394296][T12825] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1459.453958][ T5885] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1459.557422][T12825] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1459.568327][T12825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1459.595707][T12825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1459.622124][T12825] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1459.903015][ T5885] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1459.907444][T12825] usb 2-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1459.913571][ T5885] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1459.944811][T12825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.980646][T12825] usb 2-1: config 0 descriptor?? [ 1460.008359][T12825] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1460.025333][T12825] usb 2-1: MIDIStreaming interface descriptor not found [ 1460.233483][ T5885] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1460.243296][ T5885] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1460.270704][ T3078] usb 6-1: USB disconnect, device number 105 [ 1460.301683][ T5885] usb 7-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1460.328740][T24136] netlink: 'syz.1.4983': attribute type 2 has an invalid length. [ 1460.339094][ T5885] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.453309][ T5885] usb 7-1: config 0 descriptor?? [ 1460.545698][ T5885] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1460.576736][ T5885] usb 7-1: MIDIStreaming interface descriptor not found [ 1460.903921][ T3078] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1461.073900][ T3078] usb 6-1: Using ep0 maxpacket: 32 [ 1461.089332][ T3078] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1461.116344][ T3078] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1461.134136][ T3078] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1461.147092][ T3078] usb 6-1: Product: syz [ 1461.156468][ T3078] usb 6-1: Manufacturer: syz [ 1461.162433][ T5885] usb 1-1: USB disconnect, device number 18 [ 1461.188374][ T3078] usb 6-1: SerialNumber: syz [ 1461.227785][ T3078] usb 6-1: config 0 descriptor?? [ 1461.235701][T24146] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1461.247093][ T3078] hub 6-1:0.0: bad descriptor, ignoring hub [ 1461.253106][ T3078] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1461.495830][T24157] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4990'. [ 1461.584352][ T3078] usb 6-1: USB disconnect, device number 106 [ 1461.605367][ T5885] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1461.769074][ T5885] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1461.785605][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1461.800520][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1461.810746][ T5885] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1461.828983][ T5885] usb 1-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1461.838221][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.853601][ T5885] usb 1-1: config 0 descriptor?? [ 1461.872539][ T5885] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1461.927141][T21678] usb 2-1: USB disconnect, device number 48 [ 1461.938416][T12825] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1461.955363][ T5885] usb 1-1: MIDIStreaming interface descriptor not found [ 1462.075730][T24151] netlink: 'syz.0.4987': attribute type 2 has an invalid length. [ 1462.105114][T12825] usb 6-1: Using ep0 maxpacket: 32 [ 1462.126853][T12825] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1462.158775][ T5885] usb 1-1: USB disconnect, device number 19 [ 1462.180561][T12825] usb 6-1: language id specifier not provided by device, defaulting to English [ 1462.230492][T12825] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1462.256419][T12825] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1462.280949][T12825] usb 6-1: Product: syz [ 1462.289270][ T3078] usb 7-1: USB disconnect, device number 34 [ 1462.310160][T12825] usb 6-1: config 0 descriptor?? [ 1462.357077][T24146] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1462.387637][T12825] hub 6-1:0.0: bad descriptor, ignoring hub [ 1462.398154][T12825] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1462.679043][T24181] usb usb8: usbfs: process 24181 (syz.1.5004) did not claim interface 0 before use [ 1462.724982][T21678] usb 6-1: USB disconnect, device number 107 [ 1463.270940][T24183] Can't find ip_set type hash:ip,ma [ 1463.533848][ T5885] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1463.734053][T21678] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1463.747157][ T5885] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1463.862349][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1463.894215][T21678] usb 6-1: Using ep0 maxpacket: 16 [ 1463.901224][T21678] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1463.917621][T21678] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1463.939230][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1463.963475][T21678] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1463.975535][T21678] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.990248][T21678] usb 6-1: Product: syz [ 1464.000689][T21678] usb 6-1: Manufacturer: syz [ 1464.020599][ T5885] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1464.058301][ T5885] usb 1-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1464.072155][T21678] usb 6-1: SerialNumber: syz [ 1464.077059][ T5882] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1464.098293][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.115891][T21678] usb 6-1: config 0 descriptor?? [ 1464.121344][ T5885] usb 1-1: config 0 descriptor?? [ 1464.137927][T21678] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1464.160920][T21678] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1464.243995][ T5882] usb 2-1: Using ep0 maxpacket: 32 [ 1464.259432][ T5882] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1464.274312][ T5882] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1464.294293][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1464.316543][ T5882] usb 2-1: Product: syz [ 1464.336031][ T5882] usb 2-1: Manufacturer: syz [ 1464.347979][ T5882] usb 2-1: SerialNumber: syz [ 1464.371280][ T5882] usb 2-1: config 0 descriptor?? [ 1464.375638][ T5885] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1464.378586][T24193] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1464.383205][ T5885] usb 1-1: MIDIStreaming interface descriptor not found [ 1464.408716][ T5882] hub 2-1:0.0: bad descriptor, ignoring hub [ 1464.434387][ T5882] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1464.572703][T24189] netlink: 'syz.0.4997': attribute type 2 has an invalid length. [ 1464.758115][T21678] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1464.780159][T21678] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1464.921769][T24201] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5002'. [ 1465.337232][T24193] usb 2-1: reset high-speed USB device number 49 using dummy_hcd [ 1465.411177][T21678] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 1465.424800][T21678] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 1465.432956][T21678] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 1465.501680][T24193] usb 2-1: device firmware changed [ 1465.508344][ T5882] usb 2-1: USB disconnect, device number 49 [ 1465.654511][ T5882] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1465.804430][ T5882] usb 2-1: Using ep0 maxpacket: 32 [ 1465.811490][ T5882] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1465.837557][ T5882] usb 2-1: language id specifier not provided by device, defaulting to English [ 1465.847895][T21678] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 1465.854706][T21678] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 1465.891268][T21678] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 1465.925971][T21678] usb 6-1: USB disconnect, device number 108 [ 1465.951634][ T5882] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1465.967880][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1466.029963][ T5882] usb 2-1: Product: syz [ 1466.070662][ T5882] usb 2-1: config 0 descriptor?? [ 1466.089145][T24199] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1466.097594][ T5882] hub 2-1:0.0: bad descriptor, ignoring hub [ 1466.108011][ T5882] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1466.270977][ T5885] usb 1-1: USB disconnect, device number 20 [ 1466.639579][ T5882] usb 2-1: USB disconnect, device number 50 [ 1466.764788][T21678] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1466.929345][T21678] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1466.969888][T21678] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1467.015772][T21678] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1467.067933][T21678] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1467.229420][T21678] usb 7-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1467.351025][T21678] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1467.685364][T21678] usb 7-1: config 0 descriptor?? [ 1467.774086][T21678] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1467.783958][T21678] usb 7-1: MIDIStreaming interface descriptor not found [ 1467.965275][T24214] netlink: 'syz.6.5009': attribute type 2 has an invalid length. [ 1468.066360][T21678] usb 7-1: USB disconnect, device number 35 [ 1468.592523][T24225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1468.648898][T24237] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5016'. [ 1469.053956][ T5885] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1469.174033][ T5882] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1469.251026][ T5885] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1469.318728][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1469.331258][ T5882] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1469.377280][ T5882] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1469.394380][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1469.415487][ T5885] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1469.426540][ T5882] usb 7-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1469.443859][ T5885] usb 1-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1469.463433][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.476568][ T5882] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.506732][ T5882] usb 7-1: config 0 descriptor?? [ 1469.507074][ T5885] usb 1-1: config 0 descriptor?? [ 1469.552094][ T5885] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1469.567511][ T5885] usb 1-1: MIDIStreaming interface descriptor not found [ 1469.865191][T24244] fuse: Bad value for 'fd' [ 1470.054671][ T1206] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1470.114541][ T5882] steelseries 0003:1038:12B6.0047: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.6-1/input0 [ 1470.270223][ T1206] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1470.283181][ T1206] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1470.326009][ T5882] steelseries 0003:1038:12B6.0047: hid_hw_raw_request() failed with -71 [ 1470.346662][ T1206] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1470.389486][ T1206] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1470.408129][ T5882] usb 7-1: USB disconnect, device number 36 [ 1470.429929][ T1206] usb 2-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1470.468395][ T1206] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.499878][ T1206] usb 2-1: config 0 descriptor?? [ 1470.518146][ T1206] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1470.525506][ T1206] usb 2-1: MIDIStreaming interface descriptor not found [ 1470.731889][T24251] netlink: 'syz.1.5019': attribute type 2 has an invalid length. [ 1471.073860][ T5882] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1471.193880][ T1206] usb 7-1: new low-speed USB device number 37 using dummy_hcd [ 1471.223864][ T5882] usb 6-1: Using ep0 maxpacket: 16 [ 1471.231735][ T5882] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1471.247792][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1471.267527][ T5882] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1471.276933][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.285119][ T5882] usb 6-1: Product: syz [ 1471.289745][ T5882] usb 6-1: Manufacturer: syz [ 1471.294903][ T5882] usb 6-1: SerialNumber: syz [ 1471.306005][ T5882] usb 6-1: config 0 descriptor?? [ 1471.318823][ T5882] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1471.328955][ T5882] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1471.350503][ T1206] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 1471.359621][ T1206] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 1471.373470][ T1206] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1471.383081][ T1206] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 1471.394631][ T1206] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 is Bulk; changing to Interrupt [ 1471.404880][ T1206] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1471.415049][ T1206] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 1471.437044][ T1206] usb 7-1: string descriptor 0 read error: -22 [ 1471.443784][ T1206] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 1471.452958][ T1206] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.477470][ T1206] usb 7-1: config 0 descriptor?? [ 1471.490989][ T1206] hub 7-1:0.0: bad descriptor, ignoring hub [ 1471.497614][ T1206] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1471.920215][ T5882] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1471.928213][ T5882] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1472.011546][T24265] netlink: 'syz.2.5023': attribute type 10 has an invalid length. [ 1472.273513][ T1206] usb 1-1: USB disconnect, device number 21 [ 1472.533520][T21678] usb 2-1: USB disconnect, device number 51 [ 1472.552451][ T5882] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 1472.573218][ T5882] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 1472.603379][ T5882] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 1473.025582][ T5882] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 1473.034436][ T5882] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 1473.043181][ T5882] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 1473.067160][ T5882] usb 6-1: USB disconnect, device number 109 [ 1474.064943][ T5882] usb 7-1: USB disconnect, device number 37 [ 1474.141731][T21678] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1474.348159][T21678] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1474.385053][T21678] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1474.454149][T21123] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1474.480229][T24285] netlink: 'syz.1.5030': attribute type 15 has an invalid length. [ 1474.512695][T21678] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1474.601189][T21678] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1474.631091][T21123] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1474.641643][T21123] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1474.659749][T21123] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1474.670858][T21123] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1474.722848][T21123] usb 7-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1474.752861][T21123] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.778463][T21678] usb 6-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1474.779886][T21123] usb 7-1: config 0 descriptor?? [ 1474.806131][T21123] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1474.813274][T21123] usb 7-1: MIDIStreaming interface descriptor not found [ 1474.852749][T21678] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.961842][T21678] usb 6-1: config 0 descriptor?? [ 1475.067466][T24281] netlink: 'syz.6.5027': attribute type 2 has an invalid length. [ 1475.091029][T21678] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1475.142823][T21678] usb 6-1: MIDIStreaming interface descriptor not found [ 1475.302465][T24277] netlink: 'syz.5.5026': attribute type 2 has an invalid length. [ 1475.639893][T24286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1475.723986][T21678] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1476.199180][T21678] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1476.209601][T21678] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1476.223128][T21678] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1476.233139][T21678] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1476.252955][T21678] usb 2-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1476.326644][T21678] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.443154][T21678] usb 2-1: config 0 descriptor?? [ 1476.460511][T21678] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1476.473667][T21678] usb 2-1: MIDIStreaming interface descriptor not found [ 1477.033860][T21123] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1477.120958][ T5882] usb 7-1: USB disconnect, device number 38 [ 1477.204162][T21123] usb 1-1: Using ep0 maxpacket: 32 [ 1477.227372][T21123] usb 1-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 1477.246990][T21123] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.273809][T21123] usb 1-1: Product: syz [ 1477.283132][ T3078] usb 6-1: USB disconnect, device number 110 [ 1477.290488][T21123] usb 1-1: Manufacturer: syz [ 1477.322807][T21123] usb 1-1: SerialNumber: syz [ 1477.598991][T21123] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 1477.613010][T21123] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1477.651401][T21123] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1478.189840][T21123] usb 1-1: USB disconnect, device number 22 [ 1478.247474][T21123] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1478.314919][ T5885] usb 2-1: USB disconnect, device number 52 [ 1478.594273][T21123] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1478.609831][T21123] visor 1-1:1.0: device disconnected [ 1478.659043][T24331] netlink: 'syz.1.5041': attribute type 3 has an invalid length. [ 1478.666999][T24331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5041'. [ 1478.716693][T24334] usb usb8: usbfs: process 24334 (syz.6.5043) did not claim interface 0 before use [ 1479.359746][T24343] netlink: 'syz.0.5047': attribute type 15 has an invalid length. [ 1480.264402][T21123] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1480.568961][T21123] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1480.579797][T21123] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1480.593061][T21123] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1480.628549][T21123] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1480.651272][T21123] usb 1-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1480.676022][T21123] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.691398][ T3078] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1480.718594][T21123] usb 1-1: config 0 descriptor?? [ 1480.744883][T21123] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1480.752038][T24344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1480.769071][T21123] usb 1-1: MIDIStreaming interface descriptor not found [ 1480.784202][ T5885] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1480.869661][ T3078] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1480.883066][ T3078] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1480.898443][ T3078] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1480.909036][ T3078] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1480.928102][ T3078] usb 6-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1480.938767][ T3078] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.989324][T24353] netlink: 'syz.0.5048': attribute type 2 has an invalid length. [ 1480.997339][ T5882] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1481.017372][ T3078] usb 6-1: config 0 descriptor?? [ 1481.025896][ T3078] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1481.049453][ T5885] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1481.060890][ T5885] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1481.075149][ T3078] usb 6-1: MIDIStreaming interface descriptor not found [ 1481.089721][ T5885] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1481.162694][ T5885] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1481.212308][ T5885] usb 7-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1481.229487][ T5885] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1481.270954][ T5885] usb 7-1: config 0 descriptor?? [ 1481.296810][ T5882] usb 2-1: Using ep0 maxpacket: 32 [ 1481.324091][ T5882] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1481.350618][ T5882] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1481.408522][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1481.429186][ T5882] usb 2-1: Product: syz [ 1481.433481][ T5882] usb 2-1: Manufacturer: syz [ 1481.454114][ T5882] usb 2-1: SerialNumber: syz [ 1481.461790][ T5885] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1481.519826][ T5885] usb 7-1: MIDIStreaming interface descriptor not found [ 1481.531592][T24361] netlink: 'syz.6.5053': attribute type 2 has an invalid length. [ 1481.637040][ T5882] usb 2-1: config 0 descriptor?? [ 1481.661956][T24366] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1481.714683][ T5882] hub 2-1:0.0: bad descriptor, ignoring hub [ 1481.725812][ T5882] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1481.772253][ T5885] usb 7-1: USB disconnect, device number 39 [ 1482.323286][T24377] netlink: 'syz.6.5056': attribute type 27 has an invalid length. [ 1482.629349][T24366] usb 2-1: reset high-speed USB device number 53 using dummy_hcd [ 1482.789218][T24366] usb 2-1: device firmware changed [ 1482.795306][ T5882] usb 2-1: USB disconnect, device number 53 [ 1482.869405][T24382] netlink: 'syz.6.5058': attribute type 15 has an invalid length. [ 1482.935191][ T5882] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1483.107674][ T5882] usb 2-1: Using ep0 maxpacket: 32 [ 1483.121601][ T5882] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1483.152886][ T5882] usb 2-1: language id specifier not provided by device, defaulting to English [ 1483.180243][ T5882] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1483.199924][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1483.217327][ T5882] usb 2-1: Product: syz [ 1483.230616][ T5882] usb 2-1: config 0 descriptor?? [ 1483.247153][T24375] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1483.262464][ T5882] hub 2-1:0.0: bad descriptor, ignoring hub [ 1483.275578][ T5882] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1483.411946][T24384] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1483.423000][T24384] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1483.436807][T24384] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1483.446828][T24384] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1483.455132][T24384] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1483.638978][ T1206] usb 6-1: USB disconnect, device number 111 [ 1483.734406][ T5882] usb 2-1: USB disconnect, device number 54 [ 1483.740622][ T5885] usb 1-1: USB disconnect, device number 23 [ 1483.776028][T24388] FAULT_INJECTION: forcing a failure. [ 1483.776028][T24388] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1483.792557][T24388] CPU: 0 UID: 0 PID: 24388 Comm: syz.0.5061 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 1483.792582][T24388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1483.792594][T24388] Call Trace: [ 1483.792601][T24388] [ 1483.792610][T24388] dump_stack_lvl+0x189/0x250 [ 1483.792644][T24388] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1483.792670][T24388] ? __pfx__printk+0x10/0x10 [ 1483.792690][T24388] ? fs_reclaim_acquire+0x7d/0x100 [ 1483.792726][T24388] should_fail_ex+0x414/0x560 [ 1483.792750][T24388] prepare_alloc_pages+0x213/0x610 [ 1483.792784][T24388] __alloc_frozen_pages_noprof+0x123/0x370 [ 1483.792805][T24388] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1483.792832][T24388] ? policy_nodemask+0x27c/0x720 [ 1483.792855][T24388] ? __lock_acquire+0xaac/0xd20 [ 1483.792884][T24388] alloc_pages_mpol+0x232/0x4a0 [ 1483.792913][T24388] vma_alloc_folio_noprof+0xe4/0x200 [ 1483.792938][T24388] ? page_table_check_set+0x16b/0x710 [ 1483.792962][T24388] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1483.792998][T24388] folio_prealloc+0x30/0x180 [ 1483.793024][T24388] __handle_mm_fault+0x2b28/0x5380 [ 1483.793065][T24388] ? __pfx___handle_mm_fault+0x10/0x10 [ 1483.793100][T24388] ? follow_page_pte+0x888/0x13c0 [ 1483.793132][T24388] handle_mm_fault+0x3f6/0x8c0 [ 1483.793170][T24388] __get_user_pages+0x16f0/0x2a40 [ 1483.793222][T24388] ? __pfx___get_user_pages+0x10/0x10 [ 1483.793244][T24388] ? __gup_longterm_locked+0x309/0x15b0 [ 1483.793266][T24388] ? down_read_killable+0x1d1/0x350 [ 1483.793298][T24388] __gup_longterm_locked+0x3e3/0x15b0 [ 1483.793337][T24388] ? gup_fast_fallback+0x1672/0x1d60 [ 1483.793363][T24388] gup_fast_fallback+0x1843/0x1d60 [ 1483.793410][T24388] ? __phys_addr+0xba/0x170 [ 1483.793437][T24388] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1483.793459][T24388] ? rcu_is_watching+0x15/0xb0 [ 1483.793478][T24388] ? io_pin_pages+0x9a/0x1a0 [ 1483.793501][T24388] ? rcu_is_watching+0x15/0xb0 [ 1483.793516][T24388] ? io_pin_pages+0x9a/0x1a0 [ 1483.793539][T24388] ? is_valid_gup_args+0x11f/0x200 [ 1483.793563][T24388] ? pin_user_pages_fast+0x4d/0xb0 [ 1483.793587][T24388] io_pin_pages+0xb5/0x1a0 [ 1483.793614][T24388] io_sqe_buffer_register+0x16f/0x1fd0 [ 1483.793664][T24388] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 1483.793690][T24388] ? rcu_is_watching+0x15/0xb0 [ 1483.793708][T24388] ? copy_compat_iovec_from_user+0xf8/0x140 [ 1483.793738][T24388] ? iovec_from_user+0x1ba/0x250 [ 1483.793767][T24388] io_sqe_buffers_register+0x3a8/0x880 [ 1483.793805][T24388] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 1483.793832][T24388] ? __fget_files+0x3a0/0x420 [ 1483.793855][T24388] ? __fget_files+0x2a/0x420 [ 1483.793881][T24388] ? io_is_uring_fops+0xd/0x50 [ 1483.793901][T24388] __se_sys_io_uring_register+0xb85/0x11b0 [ 1483.793932][T24388] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 1483.793957][T24388] ? ksys_write+0x1f0/0x250 [ 1483.793985][T24388] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1483.794011][T24388] ? lockdep_hardirqs_on+0x9c/0x150 [ 1483.794035][T24388] __do_fast_syscall_32+0xb4/0x110 [ 1483.794060][T24388] ? lockdep_hardirqs_on+0x9c/0x150 [ 1483.794084][T24388] do_fast_syscall_32+0x34/0x80 [ 1483.794108][T24388] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1483.794129][T24388] RIP: 0023:0xf7f11539 [ 1483.794144][T24388] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1483.794167][T24388] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 00000000000001ab [ 1483.794186][T24388] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 1483.794198][T24388] RDX: 00000000800002c0 RSI: 000000000000011a RDI: 0000000000000000 [ 1483.794209][T24388] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1483.794219][T24388] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1483.794229][T24388] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1483.794255][T24388] [ 1484.176111][ C0] vkms_vblank_simulate: vblank timer overrun [ 1484.312653][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.319243][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.524462][T24399] usb usb8: usbfs: process 24399 (syz.0.5062) did not claim interface 0 before use [ 1484.601066][T19322] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.738636][T24386] chnl_net:caif_netlink_parms(): no params data found [ 1484.878699][T19322] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1485.148632][T19322] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1485.503902][ T5840] Bluetooth: hci3: command tx timeout [ 1485.545407][T19322] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1485.996504][T24386] bridge0: port 1(bridge_slave_0) entered blocking state [ 1486.009876][T24386] bridge0: port 1(bridge_slave_0) entered disabled state [ 1486.026411][T24386] bridge_slave_0: entered allmulticast mode [ 1486.036201][T24386] bridge_slave_0: entered promiscuous mode [ 1486.087389][T24386] bridge0: port 2(bridge_slave_1) entered blocking state [ 1486.098167][T24386] bridge0: port 2(bridge_slave_1) entered disabled state [ 1486.127069][T24386] bridge_slave_1: entered allmulticast mode [ 1486.186049][T24386] bridge_slave_1: entered promiscuous mode [ 1486.288907][T24423] netlink: 'syz.0.5067': attribute type 10 has an invalid length. [ 1486.758658][T24409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1487.181335][T19322] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000083: 0000 [#1] SMP KASAN PTI [ 1487.193269][T19322] KASAN: null-ptr-deref in range [0x0000000000000418-0x000000000000041f] [ 1487.201671][T19322] CPU: 0 UID: 0 PID: 19322 Comm: kworker/u8:18 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 1487.214067][T19322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1487.224116][T19322] Workqueue: netns cleanup_net SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1487.228899][T19322] RIP: 0010:inetdev_event+0x667/0x15b0 [ 1487.234369][T19322] Code: a3 df 89 e8 4b 6a c7 f7 e9 31 ff ff ff 48 8b 44 24 20 48 8d 98 18 04 00 00 48 89 d8 48 c1 e8 03 49 bd 00 00 00 00 00 fc ff df <42> 80 3c 28 00 74 08 48 89 df e8 7a 23 42 f8 48 c7 03 00 00 00 00 [ 1487.253993][T19322] RSP: 0018:ffffc9000df07720 EFLAGS: 00010202 [ 1487.260075][T19322] RAX: 0000000000000083 RBX: 0000000000000418 RCX: ffff88802f7b5a00 [ 1487.268058][T19322] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1487.276033][T19322] RBP: ffffc9000df077e8 R08: 0000000000000000 R09: 0000000000000000 [ 1487.284003][T19322] R10: 0000000000000000 R11: ffffffff89e1ae46 R12: 1ffff1100e28f880 [ 1487.291983][T19322] R13: dffffc0000000000 R14: ffff88807147c400 R15: 0000000000000000 [ 1487.299967][T19322] FS: 0000000000000000(0000) GS:ffff8881260c2000(0000) knlGS:0000000000000000 [ 1487.308910][T19322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1487.315543][T19322] CR2: 00000000800df018 CR3: 000000002f072000 CR4: 00000000003526f0 [ 1487.323593][T19322] Call Trace: [ 1487.326902][T19322] [ 1487.329867][T19322] ? __pfx_del_netdev_ips+0x10/0x10 [ 1487.335147][T19322] ? __pfx_pass_all_filter+0x10/0x10 [ 1487.340461][T19322] ? __pfx_inetdev_event+0x10/0x10 [ 1487.345610][T19322] notifier_call_chain+0x1b6/0x3e0 [ 1487.350767][T19322] unregister_netdevice_many_notify+0x15d8/0x2330 [ 1487.357212][T19322] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1487.363973][T19322] ? __pfx_call_nexthop_notifiers+0x10/0x10 [ 1487.369885][T19322] ? __pfx___might_resched+0x10/0x10 [ 1487.375165][T19322] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1487.381408][T19322] ? remove_nexthop+0x10b/0x180 [ 1487.386274][T19322] ? nexthop_net_exit_batch_rtnl+0x100/0x150 [ 1487.392278][T19322] cleanup_net+0x6a3/0xbd0 [ 1487.396701][T19322] ? __pfx_cleanup_net+0x10/0x10 [ 1487.401653][T19322] ? _raw_spin_unlock_irq+0x23/0x50 [ 1487.406845][T19322] ? process_scheduled_works+0x9ec/0x17a0 [ 1487.412559][T19322] ? process_scheduled_works+0x9ec/0x17a0 [ 1487.418286][T19322] process_scheduled_works+0xadb/0x17a0 [ 1487.423850][T19322] ? __pfx_process_scheduled_works+0x10/0x10 [ 1487.429914][T19322] worker_thread+0x8a0/0xda0 [ 1487.434538][T19322] kthread+0x70e/0x8a0 [ 1487.438612][T19322] ? __pfx_worker_thread+0x10/0x10 [ 1487.443727][T19322] ? __pfx_kthread+0x10/0x10 [ 1487.448333][T19322] ? __pfx_kthread+0x10/0x10 [ 1487.452919][T19322] ? _raw_spin_unlock_irq+0x23/0x50 [ 1487.458111][T19322] ? lockdep_hardirqs_on+0x9c/0x150 [ 1487.463305][T19322] ? __pfx_kthread+0x10/0x10 [ 1487.467891][T19322] ret_from_fork+0x4b/0x80 [ 1487.472328][T19322] ? __pfx_kthread+0x10/0x10 [ 1487.476926][T19322] ret_from_fork_asm+0x1a/0x30 [ 1487.481772][T19322] [ 1487.484796][T19322] Modules linked in: [ 1487.488770][ C0] vkms_vblank_simulate: vblank timer overrun [ 1487.495825][T19322] ---[ end trace 0000000000000000 ]--- [ 1487.583959][ T5840] Bluetooth: hci3: command tx timeout [ 1487.656782][T19322] RIP: 0010:inetdev_event+0x667/0x15b0 [ 1487.662391][T19322] Code: a3 df 89 e8 4b 6a c7 f7 e9 31 ff ff ff 48 8b 44 24 20 48 8d 98 18 04 00 00 48 89 d8 48 c1 e8 03 49 bd 00 00 00 00 00 fc ff df <42> 80 3c 28 00 74 08 48 89 df e8 7a 23 42 f8 48 c7 03 00 00 00 00 [ 1487.759492][T19322] RSP: 0018:ffffc9000df07720 EFLAGS: 00010202 [ 1487.778638][T19322] RAX: 0000000000000083 RBX: 0000000000000418 RCX: ffff88802f7b5a00 [ 1487.808824][T19322] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1487.876843][T19322] RBP: ffffc9000df077e8 R08: 0000000000000000 R09: 0000000000000000 [ 1487.886780][T19322] R10: 0000000000000000 R11: ffffffff89e1ae46 R12: 1ffff1100e28f880 [ 1487.899650][T19322] R13: dffffc0000000000 R14: ffff88807147c400 R15: 0000000000000000 [ 1487.909914][T19322] FS: 0000000000000000(0000) GS:ffff8881261c2000(0000) knlGS:0000000000000000 [ 1487.924847][T19322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1487.931539][T19322] CR2: 00007f6841069e9c CR3: 000000000dd38000 CR4: 00000000003526f0 [ 1487.974259][T19322] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1488.015365][T19322] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1488.023386][T19322] Kernel panic - not syncing: Fatal exception [ 1488.029786][T19322] Kernel Offset: disabled [ 1488.034112][T19322] Rebooting in 86400 seconds..