last executing test programs: 7.008090791s ago: executing program 4 (id=1314): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000dc0)={0x8, 'vlan1\x00', {'ip6_vti0\x00'}}) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x8929, &(0x7f00000010c0)={'syz_tun\x00', @ifru_addrs=@rc={0x1f, @none}}) r3 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x31, 0x0, @fd_index, 0x4, 0x0, 0x0, 0x10}) io_uring_enter(r3, 0x15f1, 0xff98, 0x69, 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x103, 0x0) write$P9_RWALK(r6, &(0x7f00000000c0)={0x71, 0x6f, 0x1, {0x8, [{0x40, 0x4, 0x6}, {0x40, 0x3, 0x2}, {0x2, 0x4, 0x6}, {0x2, 0x4, 0x6}, {0x10, 0x2, 0x7}, {0x10, 0x2, 0x5}, {0x2, 0x2, 0x2}, {0x1, 0x4, 0x1}]}}, 0x71) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12fa00b9cc2cdf40630731203fad0102030109021200015f6562700904010800ff", @ANYRESDEC=0x0], &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000dc0)={0x8, 'vlan1\x00', {'ip6_vti0\x00'}}) (async) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ifreq(r2, 0x8929, &(0x7f00000010c0)={'syz_tun\x00', @ifru_addrs=@rc={0x1f, @none}}) (async) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000280)) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x31, 0x0, @fd_index, 0x4, 0x0, 0x0, 0x10}) (async) io_uring_enter(r3, 0x15f1, 0xff98, 0x69, 0x0, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x103, 0x0) (async) write$P9_RWALK(r6, &(0x7f00000000c0)={0x71, 0x6f, 0x1, {0x8, [{0x40, 0x4, 0x6}, {0x40, 0x3, 0x2}, {0x2, 0x4, 0x6}, {0x2, 0x4, 0x6}, {0x10, 0x2, 0x7}, {0x10, 0x2, 0x5}, {0x2, 0x2, 0x2}, {0x1, 0x4, 0x1}]}}, 0x71) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12fa00b9cc2cdf40630731203fad0102030109021200015f6562700904010800ff", @ANYRESDEC=0x0], &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0}) (async) 6.075630304s ago: executing program 3 (id=1318): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e6ef1f00060000007f00000001"], 0x48) r0 = userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x361082, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000d, 0x80010, r0, 0x57c68000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x20}, 0x0) r3 = memfd_create(0x0, 0xe) ftruncate(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4205, r5, 0x1b385ad7ebfaa648, &(0x7f0000000080)={0x0}) connect$inet(r4, &(0x7f0000000280)={0x2, 0x4e26, @multicast1}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000040)='X', 0x1}], 0x1) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f0000000140)={0x4, {0x1, 0x1, 0x8, 0x4, 0x5, 0x52}}) shutdown(r4, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r7 = fsopen(&(0x7f0000000180)='hfsplus\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000400)='//\xf2/\x06\b///o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8br3, {0x1}}, './file0\x00'}) syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') syz_io_uring_setup(0x88f, &(0x7f0000000200)={0x0, 0x8c36, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000100), &(0x7f00000000c0)) (async) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000200)={0x0, 0x8c36, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x200a0, 0x0) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x200a0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) (async) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="670000002a000000760000000400000027000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$SIOCGETLINKNAME(r5, 0x89e0, &(0x7f0000006500)={0x3, 0x2}) (async) ioctl$SIOCGETLINKNAME(r5, 0x89e0, &(0x7f0000006500)={0x3, 0x2}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={0x0, 0x130}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) read$FUSE(r3, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r3, &(0x7f00000085c0)={0x60, 0xfffffffffffffff5, r10, {{0x8, 0xe, 0x2, 0x1, 0x12f1, 0x400, 0x10000, 0x6}}}, 0x60) 5.840838512s ago: executing program 2 (id=1320): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETS(r0, 0x5401, 0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080)={0x402, 0x3, 0x1, 0xa232}, 0x8) sendto$inet(r1, &(0x7f0000000040)="5348452485b9e4d2fe27143d70a92c44f26ca02ab0a1bed11ece4a1f4e2c359637e09b6d3b4b37f3a1fe81a9baefb5fa8a5bd9f7c63abbe78ba4328dd89e", 0x3e, 0x4, &(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10) 5.737774188s ago: executing program 2 (id=1321): socket$qrtr(0x2a, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000001cc0)=[{{&(0x7f00000009c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001b40)=[{&(0x7f0000000a40)="38982839b741495c24f304ba5bcc2016a8e0db7635b86fdc9b60c8e1c1768df7b04a44ff374fc3165786ea2aebdbd5b0fa8f1aec0505d08f442ccb9af94bd29f2f555d3c70b7eba481c40b38c6e84d0892bd898bb26bd48b61", 0x59}, {&(0x7f0000000ac0)="ba280a5108884a00d4e5eed6ef9b2dec6d1ef7b78db892d55d0b05171029cf675177596c5e866856a13af723a2c1c868817551994639f780307cb594ba13c69e0319e139161a333e784c20e1", 0x4c}, {&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000000200)="89dc051aaf7eda95f6", 0x9}, {&(0x7f0000004300)="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", 0x1000}, {&(0x7f0000001d00)="9ac3a710501a0003b11609f0119de58f8e965e256424e1eddcbddb19ddbeba10a3d9bd2eedce48c3c6af0266a30e4896857f5475dd721bd901ced134979e28b815e7217c551dc1eda9e8fb51613efdd7e1773f470ced14f980749c3c0800bbd76180cc6162aecee1d0ec9013e4bb4264e57289682a13a53db5962141d66671c410150be50065779fe7fbb24a6b03ebb1ea1c90faa8a5360c3908000000000000000000", 0xa3}, {&(0x7f0000001dc0)="70bb4c3074731301cc4a1074050f0c82e1479ef47a6acc1c48b7e06d288d91190904b66a1002a5b75801090947b23afb820d7f8517b309f937a051dc08551259d3d9021277124f31798f8390e2d260386a7bd6a07480b8a25373635dcd96d71abcffc8f7b8c611102a09895aa3877cbb82feb75096cccb4378c5738ecaf676f19fdf6e496b6c4a57fc7d802e6fe76d3751ed023c11c814e938e5de67bc1c288552b467", 0xa3}], 0x7, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}], 0x40, 0x40000}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) writev(r4, &(0x7f0000000940)=[{0x0}, {0x0}, {&(0x7f0000000300)="7bd9a4c05ab5ea367a275ebe0ff68bbf53", 0x11}, {0x0}, {&(0x7f0000000840)="ce827518f8c45ecf391368d20c797d3555eb1504e0cb8f13f63d8bd6289d4cbbfa123a299dcabbed4c056d60b91aaa316cf1cf69491528a188b04f5540c74fde2d6d535fcc0eb3b3714d7286473ef89e4fb8b4d6baff09259745db9663ae370064", 0x61}], 0x5) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000380)={'\x00', 0x7, 0x5, 0xfff, 0x200, 0x5, 0x0}) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f00000001c0)=0x3) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002300)="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", 0x2000, 0x0) syz_open_dev$ndb(&(0x7f0000002a40), 0x0, 0x2400) socket$inet6_udplite(0xa, 0x2, 0x88) getgroups(0x1, &(0x7f0000000000)=[r8]) sendmmsg$unix(r1, &(0x7f0000002d80)=[{{&(0x7f00000008c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140), 0x0, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {r6, 0x0, r10}}}, @cred={{0x1c, 0x1, 0x2, {r9, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x60, 0xc11}}, {{0x0, 0x0, &(0x7f0000002800), 0x0, &(0x7f0000002a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x20, 0x20000090}}, {{0x0, 0x0, &(0x7f0000002d40), 0x0, 0x0, 0x0, 0x20044894}}], 0x3, 0x4001) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r11 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r11, 0x4601, &(0x7f0000000100)={0x60, 0xa, 0x40, 0x0, 0x3e, 0x180, 0x2, 0x0, {}, {}, {}, {}, 0x0, 0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) 5.33394407s ago: executing program 1 (id=1322): pipe2(&(0x7f0000000040)={0x0, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x2000000000000098, &(0x7f0000000540)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @ringbuf_query, @exit, @tail_call]}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0xd, 0xfffffffffffffffe, 0x41000, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r2 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000005c0)="cd", 0x1, 0xffffffffffffffff) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000700)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xae9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40000000, 0x0, 0x2, 0x0, 0x7ff, 0x4374, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10], [0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x1, 0x0, 0x0, 0x9b6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x89fe, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3193, 0xffff]}, 0x45c) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0x5501, 0x0) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000008180)="91", 0x1}], 0x1) keyctl$dh_compute(0x17, &(0x7f0000000340)={r3, r1, r2}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99b573818", 0x5) request_key(&(0x7f0000000080)='logon\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)='\x00', r2) close_range(r0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) 4.964732372s ago: executing program 1 (id=1324): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f0000000080)=0xe8) setuid(r2) ioctl$int_in(r1, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0xffb) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0x1000, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x10001, 'syz1\x00', 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 4.628816896s ago: executing program 2 (id=1325): ioprio_get$pid(0x2, 0x0) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100800201020824050503"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000100)=ANY=[@ANYRESDEC]}]}) 4.541355594s ago: executing program 1 (id=1327): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000380)) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1000000, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) rmdir(0x0) (async) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) (async) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) (async, rerun: 64) openat$adsp1(0xffffffffffffff9c, &(0x7f0000002480), 0x20402, 0x0) (async, rerun: 64) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) (async) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 3.807149833s ago: executing program 4 (id=1330): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000001240)=[{{&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000780)="ecae365f645e4bfeb20814dec32d918d6a7c92849676dc032985164b1a3a47377e3bcc852c02407bec37b5ca4d376f3fb5f728fb55bd711a2fb8d0a1f382cf258afd0edff228b90181d1371681ae256c930eab55a2e6c7b60dab1ab69ef9777642785228f29f18b0e6f97ca9c12d099904365ed02491fad6578f24431c02effebed639ad73aa6d", 0x87}, {&(0x7f0000000240)="63133344331b28974f2e919b794f9099c84f70ce279061df6424532ede2031a1f4", 0x21}], 0x2, &(0x7f00000008c0)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r0, 0xffffffffffffffff, r0]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, r1, r0, r1]}}, @rights={{0x28, 0x1, 0x1, [r0, r1, 0xffffffffffffffff, r1, r1, r0]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}, @cred={{0x1c}}], 0xb0, 0x3}}, {{&(0x7f0000000ac0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000b40)="f5c64597413071c138cfff58687300f4b25f3fbd812ecf1d43eba8293ecdf405938040bf152c162fb3ff20ad639956147b979ecce4a03ff5c6feee160a7dd91141a2f4234bf836a2a840bf81fa891919f8b20c3c087971803dbb3e16f399304ee7bb8373ae", 0x65}, {&(0x7f0000000bc0)="b8f2ec7e5e5d2e7feef39ecafeeab3a7b115a0843221376e95ac76eb0684e77c854a77d1d6a1cdc5f4ca54097485745f5342c97af8d06c6d09b5c21c7369e9bbb35bc19bd81235341540dd328f334c2c4e013715d3a10f18a0ff3f5f340bcee55b042d8b70df58f1595a8f5cc9610490756ff533abb402485220bbd69cc126ad10eb7c6fa1dd6da381fbc6794ef915894c9e60e565d5feee9ec47a9fb6fc495323378d1bc28f4cf66c97a18b054573f31da334787782d3037d2d22a5c203379d62b6f764d9c7feed96351804e666b302dee95e850caf98091d907562fa762daa725982858ce681029757ed0f5d9230b4", 0xf0}, {&(0x7f0000000cc0)="ec833a040551ad7d597478b8267766b793d464b36007b75c77f67d012aedc6d1dfa6175fb05025091f79235746b65c6a436bf9d74419af6215e57dfb29f5d8726a71ee51b4be707416367d1e7996b113ed0cf3a7c3fc2ef8df1e6367a891ec0934464561bb5678531077c34e74c39e30c9b14df1a0b1694faf2e5b9c30c4c02981b94e0089934d1192fe1bb87a91b2ba88a14bb4fc5b9e48355cb01e4e13329a04e177cf6b500bc0a2647b58c84cfa226455773adb49b97eb6882cdf44d8b43fdb38d44f3a", 0xc5}, {&(0x7f0000000dc0)="60f4591da1a10fa18d747aff4ac8e0fd8d146595cb1c653928e3465e52631210c75095f0b179fc40b1ea538c42ec1c80ac25ef7819838f14765e204c76c9dcee2e40ce546884decc2e5f842fb765916bfe874395fc111f90f661c96a47e0477772a40cadb4290e743578fd2bdb48eff2eebfb9181e45a57374c0", 0x7a}, {&(0x7f0000000980)="e60ed3ae0d1b20a369b45a6cf48b084966caac7c90a7fe5c35", 0x19}], 0x5, &(0x7f0000000ec0)=[@rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [r1, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70, 0x24040040}}, {{&(0x7f0000000f40)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000011c0)=[{&(0x7f0000000fc0)="a6b798d5db0650e9e04d2a8b5ec0651f3c4f", 0x12}, {&(0x7f0000001000)}, {&(0x7f0000001040)="2b0767bb37a86f439b5010aad605aa16b80d6a68f374b3c2710bb95644b03287ade487362e01bee0f8b3088469be60b6007cf94c5dd8570f8b9e879380e41107486b", 0x42}, {&(0x7f00000010c0)="64ed638b77c82bff5b4147a270d41d30413dd0ff172fa1dda7f89159f7e32421f449cd75c3ed699d6b3a9c4946dbf79825bce840e76b5d127ef1251675b814bd745272215cf4a78d5cc22dd536b03d39d32f3fcefaeda603ee743bd264c8fe8e0335ec12bdd14939a601d2b6ecaafdd81f07eefdbfb30913b878d2015dfe3eb61324256b45fa4dc143f70641442a38470e5e87d6fb7287f9febb1a59f7a619585f7b737a45cb20e598f7731ef1b4b9134b6d8926d8519db752d6bb3aec0dccefd9192d6b36723e381cc0c48ce5861d446488b31b4f90ece2aa55e50fb687cb5c4c92546480ad47cbbfb07d50", 0xec}], 0x4, &(0x7f0000001200)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x800}}], 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'vxcan1\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000800000000000000000300800000000000", @ANYRES32, @ANYBLOB='\r\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="09000000040000000300"/28], 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x4000) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'xfrm0\x00'}) getpid() r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x5c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYRESOCT=r7, @ANYRES32=r6, @ANYBLOB="0000040200f2c8dc1b000200180001801400020000000000000000000436b00043773794795088ee743893608d74239f84a62e5b7915cd95ce1e90d05ac11a979fc5c5855d204b6be06bb5daf2498a9449089459e81d988b62dc3ccb790148cb12c05fb74376a4b707b822759f541063f44e6bbf9d00ba331645b1e984129f6c7c67eab66f7496ed093503909bf4451bdd23b6141855f5e9986db14d9ee7d499b315bd82d20dfccdc83dad3dfecd0abaafd04bef64a755345a7a2a8ac35e23422fa8ca5761ffef4f75674f9d9f063b23e4447acfe56f7709a8fa68913be0986d8dcbe6a19b3c9d414741adc8b445d5a9f674cc56b70a7e"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000480)=""/136, 0x88}], 0x2, 0x2, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000011140103400000000000000008004b0028"], 0x18}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120141014813442124040075ee690102030109021200015165b4eb0904b8070096d1ca00"], 0x0) read$FUSE(r5, &(0x7f0000005b80)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0xff08, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getitimer(0x0, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)) 3.45282915s ago: executing program 1 (id=1331): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000224000100000064090400000103000300092100000001220700090581032001000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="0009030000005e303d91419d00"], 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c4f000/0x4000)=nil, 0x4000, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x7}) syz_io_uring_setup(0x155e, &(0x7f0000000740)={0x0, 0x1c29, 0x10100, 0xfffffffe, 0x345, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) splice(r9, 0x0, r8, 0x0, 0x7ffff041, 0x1200000000000008) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f00000004c0)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r11 = accept4(r10, 0x0, 0x0, 0x0) recvmsg$can_raw(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/71, 0x47}, {&(0x7f00000002c0)=""/165, 0xa5}], 0x2}, 0x20) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x24044001}, 0x4000880) r12 = syz_open_dev$vbi(&(0x7f00000000c0), 0x3, 0x2) ioctl$VIDIOC_S_STD(r12, 0x40085618, &(0x7f0000000080)=0xff) setsockopt$MRT6_DONE(r11, 0x29, 0xc9, 0x0, 0x0) 2.943940219s ago: executing program 2 (id=1333): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001600)={0x9, {"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", 0x1000}}, 0x1006) r1 = gettid() r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000380)={@val={0x8, 0x800}, @val={0x2, 0x1, 0x9, 0x68, 0x8000, 0x9}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x28, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @local}, {0x4f20, 0x4e22, 0x14, 0x0, @gue={{0x1, 0x0, 0x3, 0x2, 0x0, @void}, "6279cb22459ff508"}}}}, 0x36) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f0000000440)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) r6 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="554472155080366281beecd9606fdf1a0c46c84280ebeaa628777706b21d36d4b3f94c55d951181f1ae8775693baf0b99e371b5ca1efffbb825ba26342778cccecaec3c2e94687c225c81940017dd3ccfc464cd76441bf7deef719b545cea5d72529", 0x62}], 0x1, 0x0, 0x0, 0x20048040}}], 0x1, 0x4000) sendmsg$NFT_MSG_GETGEN(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xb}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8811}, 0x4051) write$dsp(0xffffffffffffffff, &(0x7f00000012c0)="a5", 0x1) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0x141) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "b1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r9, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x60, 0x10}, 0x0, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r10, 0xc0404807, &(0x7f00000001c0)={0x1, "5fbaf77c49a9e363eed255a8164a43edd3fbf3f53506ab88ceae7536ba00c7498731efa3dafb0258a1a0e6dacafa3ba666a4c94f7af45941f84c2857c71600b2"}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x8000, @private0, 0x9}, {0xa, 0x0, 0xd, @mcast1}, r7}}, 0x48) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000001c0)={0x0, 0x0}) 2.553750185s ago: executing program 3 (id=1334): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4008881}, 0x40400c0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/kexec_crash_size', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1f00, 0x12) r2 = socket(0xf, 0x0, 0xa) r3 = socket$rds(0x15, 0x5, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x30000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x0, 0x80d8, 0x8}) readv(r4, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/53, 0x35}], 0x1) bind$rds(r3, &(0x7f0000000400)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r6 = fsopen(&(0x7f0000000000)='pvfs2\x00', 0x0) sendmsg$rds(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x880) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r8 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r9 = dup(r6) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = syz_io_uring_setup(0x335, &(0x7f0000000380)={0x0, 0x349, 0x20, 0xffffffff, 0xfffffffe, 0x0, r0}, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r11, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x740, 0x120, 0x2f8, 0x440, 0x510, 0x2f8, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@ipv6={@private2, @loopback, [0xff000000, 0xffffffff, 0xffffff00, 0xff000000], [0xff000000, 0xffffff00, 0x0, 0xffffff00], 'vlan1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x3, 0x3, 0x14}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x6, 0x7}}}, {{@ipv6={@remote, @local, [0x0, 0xffffffff], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x0, 0x4}, 0x0, 0x198, 0x1d8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@remote, [], @ipv6=@private1, [0xffffffff, 0xff000000, 0xffffffff], @ipv4=@multicast2, [0x0, 0xffffffff, 0xffffffff, 0xffffffff], @ipv4=@empty, [0x0, 0x0, 0xff000000, 0xff], 0x0, 0x0, 0x42, 0x4e22, 0x4e24, 0x4e20, 0x4e24, 0x0, 0x23ccf3e9fd2b5143}, 0x0, 0x80, 0x0, 0x4e20, 0x4e24, 0x4e23}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private2, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xc}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x2]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7a0) prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='\xf4\xaa\\k[sC\xae\xd6\x98\x9bY\nI}\xd8\xcc9K\xd7Z+\\\xf8\xdb\x84\xee\xa9\f>\xe4\x81\x88\x90_\xd4\r\xb83\x9e\x13B3\xfe\xcf\xccm\xfdO2\xd7\xa0DD4\x1b*\xdd\xb6\xcf\xacr\xabF\f\xb5\x11Vkp\"\xb1\xa8\xf0\x8d\x00\x18}3utO\x1bQ0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="050000000000007f0000200100", @ANYRES32, @ANYBLOB, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb08004500001cfffe000000679078ac1414bbffffffff100090786764000facc57037890f8ac76d8f3626c0"], 0x0) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) migrate_pages(r2, 0x9, &(0x7f0000000040)=0xb56, &(0x7f00000000c0)=0x5) io_setup(0x3ff, 0x0) set_mempolicy(0x6, 0x0, 0xe0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$media(0x0, 0x7, 0x88600) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r4, 0xc4fc9e906872338b, 0x24, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x8, 0x2}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x30}}, 0x0) 1.348975842s ago: executing program 0 (id=1337): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x64}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000000000000000000200", "f4bd000000801900", [0x0, 0x2000000000001]}}) 1.040361694s ago: executing program 0 (id=1338): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="01980000fbfa67dab5670499bd0280060006f737f50000"], 0x3c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101343) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x400454a4, &(0x7f00000000c0)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x3, 0x5, {0xffffffffffffffff}, {0xee01}, 0x2, 0x8ee}) r6 = gettid() r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) read(r7, &(0x7f0000000100)=""/140, 0xde) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000040)={0x197, @tick, 0x0, {}, 0xff, 0x2}) tkill(r6, 0x7) r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/time_for_children\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000500000000000000740000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f837974fd76b540a8d000000b7030010a4160000850000004b00000095"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x42}, 0x94) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x5, 0x3, {0x0}, {0xffffffffffffffff}, 0x1, 0x3}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r7, 0x80047213, &(0x7f0000000440)) syz_extract_tcp_res(&(0x7f0000000400)={0x41424344}, 0x401, 0xa) syz_emit_ethernet(0x6a, &(0x7f0000000580)={@local, @random="5afa4742a33d", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x34, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, {[], {{0x4e23, 0x0, r10, 0x41424344, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0xd, 0xf989, "91476ade3e02e1684b"}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0x0, [0x6a, 0x8]}, @nop, @timestamp={0x8, 0xa, 0x6, 0xd8c0}]}}}}}}}}, 0x0) r11 = syz_open_dev$audion(&(0x7f0000000180), 0x7b333306, 0x200300) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x190, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r11}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0x190}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 857.917826ms ago: executing program 3 (id=1339): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4090}, 0x2000000) 772.700115ms ago: executing program 3 (id=1340): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc810}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2784}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x9d44}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x4, 0x1, 0x1ca}}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000084}, 0x4804) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2784}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x9d44}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x4, 0x1, 0x1ca}}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000084}, 0x4804) 770.684024ms ago: executing program 0 (id=1341): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x4f) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r5, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40c0}, 0x4000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f00000001c0)) 669.600541ms ago: executing program 4 (id=1342): r0 = socket$inet(0x2, 0x3, 0x6) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) (async, rerun: 64) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x72, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) (async, rerun: 64) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) (async) sendto$inet(r0, &(0x7f0000000000)="9a9c94a4190e99829ee64c8477", 0xd, 0x20000800, &(0x7f0000001080)={0x2, 0x4e24, @multicast1}, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) r2 = socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYRES32=r3, @ANYRESDEC], 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) (async, rerun: 64) r5 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) (rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) io_uring_enter(r5, 0x7277, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 601.919182ms ago: executing program 3 (id=1343): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) keyctl$read(0xb, r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x4804) ioctl$sock_proto_private(r1, 0x8995, &(0x7f0000000280)="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"/299) 601.453383ms ago: executing program 0 (id=1344): mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1, 0x0, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@allocspi={0x200, 0x16, 0xe32b7fa974c0285, 0x0, 0x0, {{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2}, {@in6=@remote, 0x0, 0x32}, @in=@multicast2}, 0x0, 0x5}, [@sa={0xe4, 0x6, {{@in6=@rand_addr=' \x01\x00', @in=@remote}, {@in=@multicast2}, @in=@broadcast}}, @lifetime_val={0x24}]}, 0x200}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000480)=ANY=[@ANYBLOB="73000000000002f78004"]) syz_emit_ethernet(0x8e, &(0x7f0000001080)={@local, @link_local, @val, {@ipv4={0x8100, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x300, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x3, "7fe77f731db8aba73f3509d6e7118104224a45fe99a8fbc5252b1170535ac6fb", "c196168f72696bf9ad5b6dc51a703690", {"aa72f4bd15c2580cdc3d66fdf23cb5a3", "a02ad2bc4f0c9415f88c3599baddc6ee"}}}}}}}, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}) fcntl$lock(r1, 0x7, &(0x7f0000000280)={0x0, 0x0, 0x8009, 0xd}) fcntl$lock(r1, 0x24, &(0x7f00000000c0)={0x1, 0x0, 0x15c3, 0xffffffffffffffee}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001200)={'syztnl1\x00', &(0x7f0000001180)={'gre0\x00', 0x0, 0x700, 0x700, 0x2fa0, 0x1, {{0x17, 0x4, 0x1, 0x9, 0x5c, 0x68, 0x0, 0x2, 0x29, 0x0, @remote, @empty, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x1b, 0x72, [@multicast1, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x2d}, @loopback, @multicast1, @local]}, @generic={0x7, 0x2}, @lsrr={0x83, 0x1f, 0x16, [@local, @empty, @remote, @broadcast, @loopback, @rand_addr=0x64010101, @rand_addr=0x64010102]}, @lsrr={0x83, 0x7, 0x83, [@empty]}]}}}}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000015c0)={0xffffffffffffffff, 0xe0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001340)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x6, &(0x7f0000001380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000001400), &(0x7f0000001440), 0x8, 0x63, 0x8, 0x8, &(0x7f0000001480)}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001600)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) r9 = openat$incfs(0xffffffffffffff9c, &(0x7f00000016c0)='.pending_reads\x00', 0x879735b3453aa2b6, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x17, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x11c}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000140)='syzkaller\x00', 0xc, 0x1000, &(0x7f0000000180)=""/4096, 0x41000, 0x40, '\x00', r4, @fallback=0x9, r5, 0x8, &(0x7f0000001240)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001280)={0x4, 0x6, 0x7, 0x98}, 0x10, r6, r7, 0x8, &(0x7f0000001700)=[0x1, r8, r9, 0xffffffffffffffff], &(0x7f0000001740)=[{0x3, 0x2, 0xb, 0x8}, {0x3, 0x1, 0x2, 0x7}, {0x2, 0x2, 0xb, 0x4}, {0x5, 0x1, 0xc, 0x4}, {0x2, 0x2, 0x4, 0x4}, {0x0, 0x2, 0x9, 0x9}, {0x1, 0x4, 0x1, 0x2}, {0x4, 0x1, 0xd, 0xb}], 0x10, 0xe}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r10 = socket$inet_udplite(0x2, 0x2, 0x88) r11 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001880), 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, r11) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r13 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r12, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="3487420c"], 0x44}}, 0x20000041) rt_sigsuspend(0x0, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x7, 0x37, 0x0) mlock2(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0) 453.022908ms ago: executing program 4 (id=1345): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f0000000300)=""/90, 0x5a}, {&(0x7f0000000400)=""/100, 0x64}, {&(0x7f0000000480)=""/139, 0x8b}, {&(0x7f0000000540)=""/162, 0xa2}, {&(0x7f0000000600)=""/251, 0xfb}, {&(0x7f0000000700)=""/176, 0xb0}, {&(0x7f0000000000)=""/55, 0x37}, {&(0x7f00000007c0)=""/149, 0x95}], 0x9, &(0x7f0000000940)=""/198, 0xc6}, 0x9}], 0x1, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)=ANY=[@ANYBLOB="12010002ffd26f10cb060600eb9a010203010902240001000000000904df01020a16d10009050717"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) mkdir(&(0x7f00000003c0)='./file0\x00', 0x83) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) (async) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) (async) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x8e79f0352167ea94) (async) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) link(0x0, 0x0) 375.979704ms ago: executing program 4 (id=1346): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e22, @private=0xa010101}}, 0x8, 0x10, 0x800, 0x8, 0xf3, 0x0, 0x4f}, &(0x7f0000000180)=0x9c) (async) sendfile(r0, r0, &(0x7f00000001c0)=0x8, 0x7ff) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) (async, rerun: 64) syz_io_uring_setup(0xc1b, &(0x7f0000000200)={0x0, 0xeab1, 0x4, 0x1, 0x156, 0x0, r0}, &(0x7f0000000280), &(0x7f00000002c0)) (async, rerun: 64) socketpair(0x21, 0x4, 0x7, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0xffff, 0xec, 0x7, 0x3}, {0xfff9, 0x8, 0xc, 0xbc}, {0x3, 0xf7, 0x9, 0x1}]}, 0x10) (async) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f00000003c0)={0x2, [0x9, 0x7]}, &(0x7f0000000400)=0x8) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x74, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xffff8000, 0x6f}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x6ae}, @NL80211_ATTR_MAC={0xa, 0x6, @random="8f017da10bfa"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="3e9a0dad2fb8"}, @NL80211_ATTR_SSID={0x7, 0x34, @random='V{3'}, @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r4, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7e}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x80}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async, rerun: 32) syz_emit_ethernet(0x56, &(0x7f0000000800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @void, {@canfd={0xd, {{0x4, 0x1, 0x1, 0x1}, 0x9, 0x0, 0x0, 0x0, "a913120efe97e26994105bdcbb59ca7b41ad384eb32a66b67ca9b76354889f0c7b25763d26d747e6f75b20accd1c3b4104d4d10f0e8bf7e20ca2e3b72e30f824"}}}}, &(0x7f0000000880)={0x1, 0x3, [0xde8, 0x1e0, 0x56a, 0x497]}) (async, rerun: 32) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f00000018c0)={&(0x7f00000008c0)=[0x100, 0x8, 0x6, 0x9, 0x7fff, 0xc, 0x3, 0x9, 0x7fffffff, 0x3, 0xe, 0xcec, 0x3, 0x7, 0xa76, 0x1, 0x9, 0x6, 0x3, 0x5, 0x2, 0x7, 0xf, 0x3, 0x4, 0x8ea9, 0xf4, 0x8, 0xff, 0x957, 0xe00, 0x12000, 0x4, 0x8, 0xff, 0x10001, 0x3eb, 0x87, 0xffffff80, 0x0, 0x2, 0x7, 0x1, 0x10001, 0x68c, 0x9, 0x8, 0x6, 0x32ee, 0x80000000, 0x1, 0x1ff, 0x8, 0x6, 0x5, 0x9, 0x401, 0x7, 0x2, 0x40, 0xffffff7f, 0x10, 0x8, 0x1, 0x9, 0x9, 0x81, 0x4, 0x1, 0x9, 0x0, 0x7, 0x9, 0x7, 0x0, 0x10, 0xa1, 0x73714894, 0x7fffffff, 0x4, 0x5, 0x523a, 0x0, 0x3, 0xfffffffe, 0x4, 0x4, 0x7fff, 0x97, 0x8, 0x3, 0x2, 0x7, 0x3ff, 0x8000, 0x3, 0x5, 0x10, 0x7, 0x8, 0x0, 0x8, 0x2, 0xfffffffa, 0x10001, 0x0, 0x5, 0x8, 0x7, 0x1, 0x3, 0x8, 0xd, 0x8, 0x8000, 0xfff, 0x0, 0x8001, 0x9000, 0xffffffcf, 0xfffffffa, 0x5, 0x7ff, 0x0, 0x9, 0x1, 0x5, 0x80000000, 0x4, 0xa69, 0x200, 0x3, 0xd88, 0x4, 0x1, 0x7, 0x9, 0x3, 0x5, 0x4, 0x80000000, 0x8, 0x1, 0xfffff800, 0x20000, 0x998, 0xfffff991, 0x6, 0x2, 0x33caadd5, 0x5, 0x6, 0x3000000, 0x2, 0x8, 0x3, 0xf4e, 0x7, 0x5, 0x61, 0x555, 0x1, 0x5, 0x6, 0x3, 0x10000, 0x0, 0x0, 0xf1, 0x9, 0x4, 0x2, 0xfff, 0x9, 0x8cb, 0x3b, 0x9, 0x0, 0xab2, 0x9, 0x4, 0x0, 0x7, 0xcda, 0x401, 0x0, 0x0, 0x5, 0x7, 0x3, 0x96f, 0x7f, 0xab8, 0xaf1f, 0x0, 0x3, 0xc, 0x4, 0x2, 0x64, 0x1, 0x5, 0x0, 0x4, 0x1, 0x9, 0x5, 0x3, 0x0, 0x9, 0x0, 0x1400000, 0x1, 0x6, 0x0, 0x65c4c300, 0xe0, 0x5, 0x9, 0x0, 0xc, 0x7, 0x3091, 0x0, 0x6, 0x8, 0x5, 0xffffffff, 0xa4, 0x7, 0x2cec, 0x3, 0x3, 0x8, 0xffffffff, 0x5ec, 0x6, 0x3, 0x31fb, 0x5f, 0x9, 0x5, 0x80, 0x9, 0x0, 0xbf9, 0x800, 0xd, 0x7, 0x8, 0x1000, 0x1, 0xfffffffc, 0x0, 0x5, 0x9, 0x4, 0x749ede13, 0x1, 0xf3de, 0x9, 0x40, 0xba37, 0xfffffe01, 0x6, 0xf, 0x6, 0x9, 0x5, 0x9, 0x1248, 0x5, 0x9, 0x0, 0x2, 0x7, 0x8000, 0xd, 0x9, 0x2, 0x4, 0x7e5, 0xfff, 0xd1d, 0x1, 0xfffffffe, 0x9, 0x9, 0x8001, 0x60f, 0x7ff, 0x8, 0xdf0b852, 0x55d, 0x9, 0xffff, 0x16, 0x0, 0xffff0000, 0x1, 0x10001, 0x4, 0x5, 0xfffffff7, 0x400, 0x9, 0x7fff, 0x5, 0x3, 0x9, 0x0, 0x1, 0x6, 0x4, 0x7, 0x2, 0x80000001, 0x5, 0x5, 0x9, 0x5, 0xe, 0xffff0000, 0x983b, 0x0, 0xffff, 0x8b, 0x6, 0x2, 0x9, 0x80000001, 0x2f200000, 0x2, 0x6, 0x0, 0x0, 0x4, 0x80000001, 0xc30a, 0x5, 0x8, 0x4, 0x2, 0x8, 0x40, 0x1, 0x8001, 0x4, 0x7, 0x8, 0x3, 0x4, 0xfff, 0x7f, 0x3, 0x2, 0x5, 0x0, 0x8001, 0x0, 0x8166, 0x2, 0x7ff, 0x8, 0x1, 0x8, 0xfffffff7, 0x6, 0x48000000, 0xf6, 0x40c, 0x7, 0xc, 0x4, 0xe8, 0xa, 0x2, 0x7, 0x400, 0x9, 0x6, 0x4, 0x1, 0xfffffe00, 0x0, 0x305, 0x3, 0x3, 0x9, 0x7f, 0x20000000, 0xfffffff7, 0x0, 0x4, 0x8, 0x6, 0x2, 0xfffffff7, 0x4, 0x7, 0x2000000, 0xb1c, 0x4, 0x5, 0x5, 0x5, 0x1, 0x7b, 0xfff, 0x9, 0x5, 0x100, 0x5, 0x7, 0x100, 0x5, 0x0, 0x5, 0x8001, 0x3, 0x4326, 0x2153, 0x7, 0x400, 0x7, 0x3, 0x8001, 0xfffffff8, 0x9, 0x2, 0x100000, 0x7fffffff, 0x8, 0x4, 0x9, 0x7, 0xe, 0xa071, 0x2, 0x8, 0x200, 0x8, 0xf, 0x7, 0x1, 0x3, 0x7, 0x4, 0x9, 0x3, 0x48, 0x7, 0xffffff79, 0x7ff, 0xfffeffff, 0x2, 0xd, 0x0, 0xfffffffa, 0xfff, 0x3eb, 0x3, 0x9, 0xd7, 0xa, 0xc, 0xd74, 0x60de232d, 0x11, 0x2, 0x6a, 0x5, 0xc, 0xffffff82, 0x3, 0x6, 0x5, 0x4, 0x9, 0x1, 0x5, 0x3ff, 0x0, 0x7, 0x2, 0x4, 0x10000, 0x1, 0x5, 0xa7, 0x5, 0x101, 0x0, 0xbdc, 0x2, 0x8, 0x6, 0x248, 0x6, 0xa, 0x3, 0x8, 0x803, 0x3, 0x401, 0x100, 0x3, 0x2, 0x200, 0x0, 0x7, 0xd, 0x80000000, 0x6, 0xc, 0x10001, 0x0, 0x3d, 0xfffffff7, 0x8, 0x10, 0x2, 0x9, 0x4c, 0x3, 0x6, 0x4, 0x82d, 0x0, 0xffffff5e, 0x8, 0xe28, 0xde, 0x8, 0x2, 0x2, 0x7fff, 0x5, 0xfffffff9, 0x53b, 0x3ff, 0x5, 0x0, 0x14c, 0xfffffffb, 0x3, 0x4, 0x40, 0x3, 0x0, 0x3, 0x3ff, 0x4, 0x1, 0x7, 0xa2c, 0x800, 0x8, 0x4, 0x8, 0xfffffff7, 0xfffffcfb, 0x1, 0xe1d4, 0x8, 0x8, 0x0, 0x6, 0x2, 0xffffff81, 0xfff, 0x6, 0x7, 0x3d8191cb, 0xfffffffd, 0x362, 0x401, 0x4796855, 0x4, 0x6, 0x4, 0xa7400000, 0x6fd, 0x3ff, 0x9, 0x1, 0xa, 0x8, 0x2, 0xffff3f3d, 0xd8, 0x9, 0xb, 0x2, 0x9e8, 0x1b, 0x6, 0x68, 0x49, 0x2, 0x4, 0x7b, 0x4, 0x5, 0x2b, 0x5, 0x0, 0x4, 0xd43, 0xa, 0x8, 0x3, 0x6, 0x6, 0x6c, 0xff, 0x4, 0xfffeffff, 0x3, 0x7fff, 0xa, 0xffffffff, 0x401, 0x1, 0x1, 0x35bc, 0x18, 0xff, 0x401, 0x3, 0x8, 0x2, 0x9b, 0x100, 0x7, 0x9, 0x9, 0x80, 0xe5, 0x6, 0x2, 0x1ff, 0x6, 0x2, 0x0, 0x5, 0x7, 0x80000000, 0xb, 0x6a, 0x8001, 0x8, 0x1, 0x0, 0x7, 0x60000000, 0x1, 0x8, 0x0, 0x4d31, 0x0, 0x4, 0x6, 0xe7a, 0x8, 0x401, 0x8, 0xfff, 0x8, 0xde3, 0x8, 0x1, 0x6, 0x6, 0x8, 0x6, 0x5, 0xa, 0x10001, 0x9, 0x4, 0x2, 0x40, 0x6, 0x401, 0x2, 0x4, 0x10001, 0x9, 0x0, 0x9, 0x7f, 0x5, 0x2c, 0x330, 0x9, 0x3, 0x100, 0x4, 0x7, 0x7, 0xd6, 0xffff, 0x1, 0xffffff7f, 0xfffffff7, 0x8, 0x5, 0x3, 0x5, 0x4, 0x3, 0xb, 0x3, 0x80, 0x2, 0x0, 0x4, 0xc91, 0xfffffff6, 0x9, 0xd430, 0xc, 0x4, 0x6, 0x2, 0x81, 0x2, 0xffffffff, 0x7fff, 0x1, 0x0, 0x10000, 0x8, 0x0, 0xffffd85c, 0x80000001, 0xbe, 0x1ff, 0x5, 0xca0, 0x0, 0x1, 0x100, 0xa, 0x1000, 0x1, 0x5, 0xffffffff, 0x6, 0x0, 0xa41f, 0x292b, 0x7, 0x27b, 0x4, 0x39, 0x8001, 0x27e2, 0xffff7b3e, 0x0, 0x40, 0x4, 0x0, 0x1, 0xfffffff6, 0x9, 0x10000, 0x2, 0xc, 0x6, 0xb, 0x401, 0x8, 0x8, 0xffffffff, 0x9, 0x7, 0x8, 0x482, 0x2, 0x10000, 0x8, 0x4, 0x75e, 0xfffffff7, 0x0, 0x2, 0x673, 0x4, 0x9, 0x80, 0x2, 0x6, 0x400, 0x5, 0x7fffffff, 0x5, 0xdd, 0x1, 0x0, 0x7, 0x3, 0x2, 0x6a5a, 0x764, 0x8, 0xfffffff4, 0x4, 0x7d68541a, 0x6, 0xd81, 0x8001, 0x6, 0x2, 0xee0, 0x1, 0x8, 0xffffffff, 0x5, 0x10001, 0x5, 0xe, 0x7fffffff, 0x5, 0x0, 0xffffffff, 0x7, 0xfffffffc, 0x0, 0x1, 0xfffffffa, 0x8, 0x1000, 0xb32, 0xfffffffe, 0x7fffffff, 0xd1bd, 0x7fffffff, 0x7, 0x6, 0x7a343698, 0x4, 0x6, 0x8, 0x800, 0x6, 0x1000, 0xbf, 0x5, 0x40d, 0x8, 0x100, 0x80000000, 0x8, 0x3, 0xffffffff, 0x2, 0x1, 0x1, 0xfffffffc, 0x4, 0x10, 0x2, 0x3, 0x7, 0x2, 0x9, 0x3, 0xa2, 0x2, 0x597c5e9c, 0x1, 0xd36, 0x80, 0x3ce, 0x8, 0x6, 0xf, 0x1c2, 0x7, 0x5c7, 0x5, 0x7, 0x5, 0xfffffffe, 0x1, 0x3, 0x5, 0x8, 0x4, 0x175, 0xbe55, 0x8, 0x5, 0x2, 0x6, 0xb, 0x6, 0x1, 0x4, 0x9, 0x0, 0x0, 0x6, 0x1, 0x1000, 0x6, 0x8, 0x1, 0x2, 0x3, 0x8, 0x6, 0xff, 0x7ff, 0x7, 0x7, 0x2, 0x7, 0x40, 0x0, 0x4, 0x1, 0x120a, 0xd, 0xc, 0x3, 0x4, 0x2349, 0x2, 0x2, 0x2b99309f, 0x9, 0xfff, 0x3, 0x4, 0x3, 0x8000, 0x4, 0x0, 0x5, 0x5, 0x10001, 0x5, 0x868, 0x9, 0x5, 0x8000, 0x4c2, 0x5, 0x3, 0x1, 0x5, 0x5, 0x0, 0x1ff, 0x5, 0x40, 0x4, 0x2, 0x80000001, 0x6, 0x7fd, 0x1be09fde, 0x9, 0x45, 0xc, 0x8, 0x9, 0x7, 0xf0, 0xaf, 0xa03, 0x0, 0xfff, 0x80, 0xc, 0x6, 0x0, 0x9, 0xe8, 0xd, 0xb2, 0x4, 0x0, 0x1, 0x9, 0x2, 0x3, 0x2a17, 0x4ca, 0x40, 0x7, 0x7fff, 0x755d, 0x9, 0x7, 0xd, 0x8, 0x4, 0x8, 0x40, 0x5, 0x38b, 0x3, 0x80000000, 0xfffff001, 0x5, 0x6, 0xb4, 0x7ff, 0x3, 0x6, 0x1f04943d, 0x0, 0x10, 0x0, 0x95, 0x7, 0x2, 0x1, 0x1, 0x5], 0x2, 0x400, 0x7}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000001900), 0x100, 0x0) write$tun(r6, &(0x7f0000001940)={@val={0x0, 0xf6}, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @dev={0xac, 0x14, 0x14, 0x34}, @empty, @empty}}, 0x20) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x70, 0x1405, 0x200, 0x70bd2a, 0x25dfdbfe, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x4004000) (async) writev(r6, &(0x7f0000001d80)=[{&(0x7f0000001ac0)="94ee69e0cda23e5127d08f8fadfb19451f3d6a3b703b3bea60ed8a18547ad4ae9c1d139968e5fb5abb9e2ef3688e9b4fa8f86f2bcd71176521dfc377526f8284f38a7798252a2905e0d887630428b6044bccaf513bf3283efe7819757928da069c285e701b9568675e0ccdc134c2e0dd0fe78257458938be62a2d3129a0ce3ae22ecfcc3586fc041996526b14fd068a8d947e5f1c0617b4efc45a67b9cf465503c75ec5851dc96b3f5d4e5a94070db72744cfa52fcee63af163832a6b8a5", 0xbe}, {&(0x7f0000001b80)="a6cc39e0c47d67af85c1de1d3c1cbeb3f04410c11053a298c38467ef3ea986429103dd6efa48ac118f5fbef48d290106e441cb03cccec788ef890612f71658d3adaba28b64c2a6e32eeb06c8463b16510e541f66cfd08dfce7dc04d1181806a158628e88f3d588", 0x67}, {&(0x7f0000001c00)="b4f5ca2e4c1e0d38d0c534c97fd214355416faaff5a0ee684d022401a9d0ea5c87db1b54222bcb89fe7b36ef84d1500765c909b5e89778588f1831d2af3e577098", 0x41}, {&(0x7f0000001c80)="61ee002a30ebf779a15d08ba71c59870cc64c165b24fbf48a880604e1bb29e1e8756a6795a139d1f5d5f409c7d9aa1acc55ec5935b333f2e70a4ffefac7fba66463a6ce2e22a49f89102a2980a6ebd7ea1dc3d024da622e75ea5619fe45b14e7d4813dfbcce0666aa973e6173c329cde47f13f4099acc5c1f1c37b9e286173e4e5365dc3b5146de0b73859dc4693e8aa7f490dca0e256c401156c94a7a0354f46361dc6bb40bcab0e511bc26550d38fc4a977629040cbf37b06fc0e6e234984bebcd6b3e0661302e4dd9f65c539713bb73b950210ad85be637a6d5a7d2fd7a", 0xdf}], 0x4) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001e40)={'syztnl0\x00', &(0x7f0000001dc0)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x6, 0x1, 0x28, @empty, @private0, 0x7, 0x7800, 0x5, 0x1}}) (rerun: 32) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001e80)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, '\x00', r7, r0, 0x1}, 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002140)={0x6, 0x12, &(0x7f0000001f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffff8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001fc0)='GPL\x00', 0x1, 0x61, &(0x7f0000002000)=""/97, 0x41100, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000002080)=[r0], &(0x7f00000020c0)=[{0x1, 0x3, 0x0, 0x9}, {0x4, 0x1, 0xf, 0x5}, {0x1, 0x1, 0xe, 0x1569fccb8a2df5c1}, {0x3, 0x2, 0xd, 0x3}, {0x1, 0x3, 0x8, 0x6}, {0x3, 0x4, 0xe, 0xa}], 0x10, 0x8}, 0x94) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000002240)={'veth1_to_bridge\x00', &(0x7f0000002200)=@ethtool_sfeatures={0x3b, 0x3, [{0xc36, 0x9}, {0x23, 0x65}, {0x7, 0x2}]}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000002280)={@id={0x2, 0x0, @b}}) (async) unshare(0x10010200) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000002380)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0xc2010800}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x1c, 0x3, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002400)={&(0x7f00000023c0)='afs_call\x00', r0, 0x0, 0x3}, 0x18) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002480), r0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000002d40)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002d00)={&(0x7f0000002a80)={0x248, r8, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) 335.81486ms ago: executing program 0 (id=1347): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x64}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000041a9e50b00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 268.772497ms ago: executing program 1 (id=1348): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x64}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000000000000000000300", "f4bd000000801900", [0x0, 0x2000000000001]}}) 178.481394ms ago: executing program 4 (id=1349): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcc0) close(r1) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000001c0)={0x0, 'pim6reg\x00', {0x3}, 0xb}) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@gettaction={0xd8, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0x2b, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x4c, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'gact\x00'}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x478000}}]}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x21, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_netfilter(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x21, 0xa, 0x101, 0x0, 0x8}, 0x14}, 0x1, 0x0, 0x0, 0x8841}, 0x40804) listen(r2, 0xb) listen(r2, 0x10001) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x2) syz_emit_ethernet(0x36, &(0x7f0000000240)={@broadcast, @random, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "03136c", 0x0, 0x1, 0x1, @private1, @mcast2}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6002070000140600fe800000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xa0050000, 0xf5}]}}}}}}}}, 0x0) r6 = syz_usb_connect$uac1(0x4, 0xac, 0x0, 0x0) syz_usb_control_io$uac1(r6, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="000600e7ff0000"]}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r7 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 78.528219ms ago: executing program 2 (id=1350): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0xd, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x8, 0x86c, 0x5}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x400c000) sendmsg(r2, &(0x7f0000000180)={&(0x7f0000000380)=@caif=@util={0x25, "c576008a05f58ca973415f5c558a3665"}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000400)="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", 0xfa}, {&(0x7f0000001480)="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", 0x1000}], 0x2, &(0x7f0000002ac0)=[{0x1010, 0x1, 0x800, "efe87ccae4ffc3103f6f2af461d98ea28b17715a71d17c6359d08c93cab2a948e8f836e17f4d5d82aa87cd5f17b077074d6aa75807da7d0c3e89b231ce1e39f94cfb5a6796da763f3f9050db950eed450c873f61112ffb8931d97c2b9b0f33ade8bf8851dddd176ba03fc9810691bccf393e5c6f2338257253311ebe4697edbb3cf2c22fe97eb3ced628815cfd7625f01a2c70371d0be5caad170c01b1c849e162df41fe50566bcaab54d8320935c6a86f048f8b05acb8cb6e4f554f250f60e5451332abcb92778599c98a4ef27fab71b556ebc6ec8f8d5aff0d51ed262beae28f2602c37a9851b090f55ba9804edf2d052f664108ee1b0bf839b3b75e3e5e12778f893cf19d4692011acc4b6c1afd9efc13581049ba04e8c5bb4b9c27a59c1e1ca44420531ea6db32a95e293a71ceb3f0698d2fc42c7b775087fe232e1f023c66fe33d7f7e10eb0b98bef4d09fc9d8e6ea4c6f2dd5d5d735a3b5be362bbfaecf0333e24cb634f636b7ca689c38049baf53aaf54ae7ac7d15231a0b0219e0ca0ce42838eb524103733f89f7f8954d3972e1fe5487ad2c1066f5c5e7cfe6efd6a4d62e9f674b0dc989a739b3f5975db9ceaadbf49d58bec5d4c892104cf9048f913959b941b5333e39494a4c9cba3f888332d822c437d25cbbb5627b2d2ec7416d7df07b1d26e9e1ce8ab593e75aa6394f92229cb3d7ba3e8969190b397fa4ad77fc8c0ef2b84489f9ee4c13afcbd3363ced4d88dd0b7f083ff40f62a65d57cde7b47b1d2a7fd415a4106e3d76c71c6faabe052c1afa23f88bf5ab75a6b2d37154b31cdf38e0acaac8e567cc6f893afb7a697764bde6aee2cd66422b015d0958d76eb6faaf2a16e9ce28530bcbdf05d8604628eaff647c7a934f710713c6cc831b32b1b2ea20cfd71591f90b76198a55a0a769b8b6932314ec1e52a6e9ec34d209289867b22f0120196c038f38aecb30af18cc3fa266f390d71169e364e8c22c45c72ff9d27edf68d9c150b27968b6082387004becd41c58614b253ea60b95e347af65d6baaf64bfbf43cb22529f7dc8f42471724bdb7394b34f4ac0a07bf8bc5743a217921a8454e3c6ec49ae85ea3b9dc0f54c69be34fb7eff434e6495ca378770180a31f483d8a4c8a8ee8aa11473235660d9e613457416792f3090357545620aea4cc590053cf7d1b0437a84b5a3d44b173d5e1a915c2e6410edb0457a626462fd368e925fcf046a2af8eca136e91a0cefbb864f78934572e215762590f792a4982e2ce9c23f95292214ae30a20b89b405bdf5b1d844df95743bfd763d50b583d4d926c77e2ead9b032336b3b51bcc4597c64d97f636c3cf2a39aae85d9a43e30b18f5d75d2a58a18a062b6984718fe0bc6ad17efbe49bf3dc62cc6a32b2ec5bcfebae3dd78f97fb432dc3e34518d54603ed73e6cfdbb5853b9b193276229f22b3e8bd59950d3bfcf34067fe35b76733484f7040e0592d85e73932b3157b64f77a36f19cfc6e44b93bd008a41e5d6a5f92dc3214414f8e0733d61d51f281e123d18e00dff513fecc0d169b466eb4d794979e148fce8e9610ece9c32f222da0505a19e592a49b4a7a87b0b9937ba75fb1ebda420daa8fb303dcd156447f1e9d852a0a2b6a651ca3b3a058dc92853bb5a7d0a31850d25e3530aec8d771a1f6cea6834eaea25ca12a4751d3b52861a7ca3cf892cfc5ba4b94ffc60470300c8c8a733046f06481c46f16dae608b0c0bde07cde0a7d7241e079c9a8adccf7fcafa44193a68ba156017694ff527c56bfd36a5604767ed152b3adea922d09f8c54e317dbdc60c7516d937b9047449d473154b6b62664fa0fa7c2ea5e058393a2a7b7e972d1abe4fb9ca2a8e4860a1f8bb49027543671b0df56db979f7e1eb9e97660cc0265d7ba6d40093592996658b2af6b652962d597464b853499cbd928402b60879ac39a8a8e4b255825a8b7fad6acfee959cb3c82a9e138a9db8ec5683cb032767bc2dced5d64f586be257727ab792750e6f002d70ee7b85d2e4409e51d7f7369fe4a6332d8dca3fe574295d8d257641d5d3e159400e8b054b3512292f8ad61ab76387351f84bea5bff8b2b5a72916997a3ec69668f7d737413c510ba9b85362789afae44fa1e7199bee46de6ef38653ba0f995863e635a6fac0fcc8b9a775574f2f2b4dfd0ff05eb10dc8e0cf149183d9340b6e02bbdaa861e2bf6c977eb7084684584dacdb431da8ac0bc1bdabaa5c2b020e99ba2455bdf6f104cad4bba794c250e194f29d8d58fc97cbd520a76cac10bdaa344b728995cee442c8dbbdca197a3b4376ee7190b54699f4bbc83b69e940b91c8a98f212384ccb9d3e8528dfc768dc9e50c488e2ccb67dc19064d13562ba33fe32101564469c31ffb9650c98b6468c6fd02284ed3792f98f86fd16bf8bde2e092601bc23eb1ccf37588faac5d69befc983fddb48f58d0beea5a4d6ea880681b584ef9f47b272915ef724c5b6abb3846a30fb759b8ae7aa08e390d56e0b331bb35bb6add727c864b5b88055b22ce6f8ae3bb505108cf8de86152a5161a25fe1eee0f83894f014b58df8ed5baf14c410246fefc71af17357fb702d555f23d64101ca9f9d451cb64668f3be5d4febffd19dafefbbaaeabd497d6b8aa815fd9948dfb2e7a64b77eb29a1b49a6ee8da69d6ba1f4b14ba32aa332e274bf0f9257bd08af4615a9036a59ec32ed643b9f1166b776c34631ca070bd6d95f9de2b450adff7ac5622425cc498595027daee058907bfa50620a8bd7022a78ad46bb2fb5c63e5e434ead826d4408c0389b31f293807d6a21ab401a635a83ee4b35f996b735fb7e4220155e6be79526270a7fe424424508b6b2ee7a3a4da03d9beb73ac50ab3b1db1f670b7e7f38385acb981bfdffe95ed0d980ddbc9be1c232ddf6979800d851fe3a301a6bb21af7a5aff07c2915d716fe75b6ee54f8c76b251203e519439aa69d57c70e6c3dc463952880c7d7ced125417c76a6e0fafd24d7f744b0f9eb8939f1962562a5bbaa022712f00f651cc496ccb2e804fc85b41a60d92bf2c21e6534cccb25bd2c25599fb59602f93fb9d42e27dfb47848e2b16080ca80afe4f314f521909a211391857842419162fda5ec64ea39e37b4ef4806d8a079476feb3233bfb279fb67791b2eb83389e752d36afdad455d5a02ec0c8fc444ef3ac5fe254827fa42cfc5e61d2e6c40d8317023811b08c7d04de0c547009c743a60aa88642666090cf7573e5a48378d6577d71517a93e45ffcae9e67febf25617b23fa1bf90f508cfd6bfa8bd34a41eda3dd3387ca5c4fd98335977790b0ac8c8a8872bacb5bf69dbd7960e647ce8ffad8af98adadcb9202f351e60636a7f47a868bfaf3822cebff53ae6f55a0b5a53db96197f299c4ef06b6a25b7431cf3c8884a25f470bb59f0557e819b203acf7bc7830c6d242c52483e627207410d9cd1af536cf80bb9ecdb524c12e9f5ba52eee1a7c9fb680c4e4ed3b74de5d1ef0f2fa679f0c4675af5c90855b66689634f7f8f07ed0d57d42871fd1c250aabfda277431c3f10db1a44c3ef61c45bd93e7d297f8f4b2bb59b0c6d2b0cd7d0bdf68d09238d811d22fbe06aebf519294bdd0319231ab93b045e77c81498ce5a68d3f67d48952c9d5375ed8cf382372eef40248e880945bf1e2ab2a149ea3a1a2cac80da1870f50934fbe8e512f69e410da0331447adcdca71b46c72575512e3afa118d4725adba5c5f78eb091e71c11e4e91739c96747bd44252f66ccd103a5127e393abd54172604497ff2f112254666be76f2cf4bdb8266dfa2b45e3bcd0e11d38cf0ba191845188d01ceb924254f4d7a5f24dd2ccf590b60d1b446c15cc1bb423ac63af145828e0825b0a4fe130786f3603f2f9dcbbd0dd4262449571d11a73071e23fbb28d460a3a1dacccfde7ba4a75702a7d717dc52be973f0a74efef72e24b25337dde7c7b08b4150f3d46f027411ba7205367dfe4719f7ea1a0e46130237e7c619306ec6fc310f0c47b11ea8821067f659a68979b00bb4ae6f56e43beb48514c84d076a084524f5700ed1584899ed590b889477243cc3b833f3bce542aa146d75f23531f1d8be7969af946c2ce72e7d4c496ff34e033d8e7a7bcd9cfdd6402eeb0809074e3a2eff3d8c79c1dab79d1378908c94ccc94618254b899e5270863f9b5777883826487d8cf449318bfad23a7bb4a3f222d2ae3103d88489bacdc1078c9ddb077bd91fc6ee2db6b6cd1595155d53706f1fddf8911acab5572379bce88955913b7866c47ba3cbf23d4c77ac38664b294c00b2ecdf3d3fd71f884078065514cf22953e9ae98c1c5de4aac4d02dccfc784789ca5688cd5c2217df3770c2211018cf3ada3aa7d458066ec57fa30d834fa05dc197350e0de986bde72b994a9ba4aa44b1dfc4abacab5148823bdd05a31379bd0615b3500247df8e4ed6a210e68ca5b77205a6afae4c1d07c245c437882e2e398f68a0d3113809fd3f2364771279e7c2683b903010b1a9bcdd2265c93831c8273101db77ea77a6a66e5a91b5846d99c190b4ae590fc38c973e8585ceec6822e83da598a0d39ed8f9d3a3cf4494565968eab0823f1820ea6873d1068b6fd45b202dab40ec97f2d3c9350650526a747a75b89ecfe9a340111b159a6c8b3464d7f81a1a1b23b670da0410d96866527e9142da0281a503628e249ae8645633256edb8366f2e0aae8de1927e58b0b1f127f0750ae7bfb86e164a90b4077a05feccd25a460fe83fff16aae9e3762e2c9ac230000627201deec652a653f2e4021b380fd02481fce1f9c9bc32ace6110838290f5c5bb2ac28d483806d06a7ec3644e6c89281284484f93ae4d2b41c225ca8e1b9dfd9f59644f2322921e46a2ca117b1082c3238677257ff5687163362d17409cd06d56f64b86bbcfef3f5bb49c3e19e4befd536de14dcba9cf4153f3fac0219913c0fb1e0150670b05e002201b8d0349a86c283efcbae6bde73fb4fff19378dba95a5bab7d7811b3ad80d21ac8e3f709473effb7f5342ddf648c9cda07e3abed101e6398a81800a265ffe313e31af571b3148833847d88eb49f15cf0f1f30e2ce9b4a22de00e619fab2ebdfae85f90829ee4483f95c53b388822c72900f5f127468c69dca14ff12fb7264a6fc82ef3f924b2ed41af41b50bee6bde458454f0d6163c9d32acea7c814588fafb2d0cfbc919bf1c43f81fb060173e412c9fd37c1da66362b958a1560174cdce4e46756aebdc3532ad674ed5e10abeb7913e6ebcbfc16287cf332277c777a34e68d94090fda2e520a7f893654a1ec6e16c9a28e3d057c3a4021b2e6ad26c15058b7b29ee5b287c61cf30395a644b284579339474c6b2e4fc594fae64a39a0aa57d37235ba00dab35d395f51fb7220811889f367db899fcec58c6b9c1c41dea126ac67005932ab5b6046b46f0f97509ce27a73a745e5c6397c74ba567f15f1af7e75fc54e2e5a95f58fc4d3e12bd5b27e0f645dd9053b3db432e3d6d7574e238e535d65cde94160a88c931229f540908eb0c147bf35d32633924512d0d9a6d6cf3478a9c2cb597d2f7edd94c995a82a13061a408b0319c83a18cad984596b57b5e18c8ba1a2c10762e6b94a0b049fab30b118f2996bec3ea7348b53b4004649edf8b2f1eebac20a8156eecfbd3af245045eeb5bd185c35d10e33441cb6c1b8944a4d1e9956df96947ed52aedcb8fdadd82b5509458c59c8d6c61e545ced8292cb0f8aaea5f78ad66b737fcfa3cc14fe40d29478bf2c0d64a2805a51c50ef67dbcaec6b81b3b"}, {0x88, 0x1, 0x5, "dd0d2be809195426d4b854d352f6da772ae9b5ab841dca84a2948131624f31131ae97bd7a1f889b5417307d5878faba7cc47f35b6621433af4a96710b53be4eafd96360852dd07a5f950a494b48ff523a371cbb7b9724a5b59b810cefd19ca02c6c12787d6ac80fcaa108c3e3375c46525"}, {0x90, 0x111, 0x6302, "3281b6d77db2e72f2ae40435aa79c22be91af8df0bebbd1ed9805776415fa36b258e714da3c805f65f3c2e416b5003c2ed41326be725eb45e0a10802e5a2e3ab5cb6e4784d063cd15c23a08ea8af5086ccfc1ea1c0f521c18b763d15f33666ac3a230a7e476e665912a59e96f6971a6f62661a13257561122e0b9b"}], 0x1128}, 0x20008004) (async) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0x1, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r8, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) (async) r10 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r10, 0x40045532, &(0x7f0000000200)) r11 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) r12 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0xa2c25) (async) ioctl$SNDCTL_DSP_CHANNELS(r11, 0xc0045006, &(0x7f0000000340)=0xe) writev(r12, &(0x7f000009de80)=[{&(0x7f0000002a80)="92601b126cd916238152311e05ee79b712", 0x11}, {0x0}], 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r9) 9.028422ms ago: executing program 1 (id=1351): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002aafee08f00a5167"], 0x0) 0s ago: executing program 0 (id=1352): io_uring_setup(0x35d5, &(0x7f0000000200)={0x0, 0x449, 0x0, 0x1, 0x2a3}) (async) r0 = io_uring_setup(0x35d5, &(0x7f0000000200)={0x0, 0x449, 0x0, 0x1, 0x2a3}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x5, "4f2a1d"}]}}}}}}}}, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x80, &(0x7f0000000080), 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x80, &(0x7f0000000080), 0x0, 0x4) syz_usb_connect(0x0, 0x5e, &(0x7f0000000140)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904e7000229feac000b2402010302057ff49bfd052406000105240002000d240f0105000000090007000806241a7f000109050602ff030000000905820208"], 0x0) (async) r3 = syz_usb_connect(0x0, 0x5e, &(0x7f0000000140)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904e7000229feac000b2402010302057ff49bfd052406000105240002000d240f0105000000090007000806241a7f000109050602ff030000000905820208"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='team_slave_0\x00', 0x10) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@getnexthop={0x20, 0x76, 0xb0d, 0x70bd2c, 0x200000, {0x3}, [@NHA_ID={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040081}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) writev(r6, &(0x7f0000004040)=[{&(0x7f0000002c80)="3bcc9faf5bcc", 0x6}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r5, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r5, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10d00, 0xf) (async) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10d00, 0xf) kernel console output (not intermixed with test programs): capacity change from 0 to 7 [ 471.553635][ T5958] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 471.569431][ T9937] loop2: [ 471.605534][ T9937] loop2: partition table partially beyond EOD, truncated [ 471.755666][ T24] usb 2-1: USB disconnect, device number 92 [ 471.767671][ T5926] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 471.912815][ T9936] ipt_ECN: cannot use operation on non-tcp rule [ 471.948243][ T5926] usb 5-1: Using ep0 maxpacket: 16 [ 471.962942][ T5926] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 471.980881][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.006534][ T5926] usb 5-1: Product: syz [ 472.010932][ T5926] usb 5-1: Manufacturer: syz [ 472.042910][ T5926] usb 5-1: SerialNumber: syz [ 472.063517][ T5926] r8152-cfgselector 5-1: Unknown version 0x0000 [ 472.073914][ T5926] r8152-cfgselector 5-1: config 0 descriptor?? [ 472.289236][ T5926] r8152-cfgselector 5-1: Unknown version 0x0000 [ 472.296033][ T5926] r8152-cfgselector 5-1: bad CDC descriptors [ 472.324979][ T24] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 472.436275][ T10] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 472.491598][ T9939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.515140][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 472.528509][ T24] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.545669][ T9939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.558650][ T24] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.584567][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 472.592431][ T24] usb 4-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 472.595241][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 472.605013][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.631455][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 472.632794][ T24] usb 4-1: config 0 descriptor?? [ 472.651329][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 472.692362][ T10] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 472.707667][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.716709][ T10] usb 1-1: Product: syz [ 472.723274][ T10] usb 1-1: Manufacturer: syz [ 472.841103][ T10] usb 1-1: SerialNumber: syz [ 472.868546][ T10] usb 1-1: config 0 descriptor?? [ 472.892155][ T10] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 473.100340][ T24] macally 0003:060B:0001.0010: collection stack underflow [ 473.107985][ T24] macally 0003:060B:0001.0010: item 0 1 0 12 parsing failed [ 473.109276][ T10] snd_usb_toneport 1-1:0.0: cannot get proper max packet size [ 473.166797][ T10] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 473.179212][ T10] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 473.194982][ T5926] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 473.214404][ T24] macally 0003:060B:0001.0010: probe with driver macally failed with error -22 [ 473.303564][ T9952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.328169][ T9952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.345989][ T5958] usb 4-1: USB disconnect, device number 85 [ 473.375775][ T5926] usb 2-1: Using ep0 maxpacket: 32 [ 473.393851][ T5926] usb 2-1: config 0 has an invalid descriptor of length 54, skipping remainder of the config [ 473.404532][ T5926] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 473.436736][ T5926] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 473.446255][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.476670][ T5926] usb 2-1: config 0 descriptor?? [ 473.491112][ T5926] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 474.012182][ T9979] netlink: 676 bytes leftover after parsing attributes in process `syz.2.1023'. [ 474.062858][ T9984] loop2: detected capacity change from 0 to 7 [ 474.071418][ T5863] loop2: [ 474.074478][ T5863] loop2: partition table partially beyond EOD, truncated [ 474.087503][ T9984] loop2: [ 474.090574][ T9984] loop2: partition table partially beyond EOD, truncated [ 474.320795][ T9995] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 474.649642][ T5958] r8152-cfgselector 5-1: USB disconnect, device number 94 [ 474.745535][ T5852] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 474.773657][T10002] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1030'. [ 474.868468][T10004] netlink: 'syz.4.1030': attribute type 10 has an invalid length. [ 474.884326][T10004] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1030'. [ 475.038579][ T5852] usb 4-1: config 0 has no interfaces? [ 475.057154][ T5852] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 475.176581][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.195584][ T5852] usb 4-1: Product: syz [ 475.218871][ T5852] usb 4-1: Manufacturer: syz [ 475.250765][ T5852] usb 4-1: SerialNumber: syz [ 475.268653][ T5852] usb 4-1: config 0 descriptor?? [ 475.360392][ T5926] usb 1-1: USB disconnect, device number 76 [ 475.404937][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 475.528448][ T9999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.542891][ T9999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.835076][ T5926] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 476.025187][ T5926] usb 1-1: Using ep0 maxpacket: 16 [ 476.034048][ T5926] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 476.047658][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.210722][ T5926] usb 1-1: Product: syz [ 476.215530][ T5926] usb 1-1: Manufacturer: syz [ 476.220321][ T5926] usb 1-1: SerialNumber: syz [ 476.231312][ T5926] r8152-cfgselector 1-1: Unknown version 0x0000 [ 476.237957][ T5926] r8152-cfgselector 1-1: config 0 descriptor?? [ 476.323915][ T5958] usb 2-1: USB disconnect, device number 93 [ 476.455620][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 476.484013][ T5926] r8152-cfgselector 1-1: Needed 2 retries to read version [ 476.515047][ T5926] r8152-cfgselector 1-1: Unknown version 0x0000 [ 476.515244][ T5926] r8152-cfgselector 1-1: bad CDC descriptors [ 476.710328][ T5958] r8152-cfgselector 1-1: USB disconnect, device number 77 [ 476.835017][ T5926] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 476.871764][T10022] loop2: detected capacity change from 0 to 7 [ 476.882683][T10022] loop2: [ 476.888566][T10022] loop2: partition table partially beyond EOD, truncated [ 476.905501][ T24] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 476.998008][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.009747][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.019878][ T5926] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 477.033528][ T5926] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 477.042649][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.052971][ T5926] usb 2-1: config 0 descriptor?? [ 477.085036][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 477.099830][ T24] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 477.115345][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.135939][ T24] usb 3-1: config 0 has no interface number 0 [ 477.146766][ T24] usb 3-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 477.157793][ T24] usb 3-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 477.175214][ T24] usb 3-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 477.184602][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.192814][ T24] usb 3-1: Product: syz [ 477.197306][ T24] usb 3-1: Manufacturer: syz [ 477.202033][ T24] usb 3-1: SerialNumber: syz [ 477.219087][ T24] usb 3-1: config 0 descriptor?? [ 477.226991][T10019] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 477.246985][ T24] usb-storage 3-1:0.231: USB Mass Storage device detected [ 477.443077][ T10] usb 4-1: USB disconnect, device number 86 [ 477.443809][ T5926] usbhid 2-1:0.0: can't add hid device: -71 [ 477.497855][ T24] usb 3-1: USB disconnect, device number 94 [ 477.504355][ T5926] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 477.559553][ T5926] usb 2-1: USB disconnect, device number 94 [ 477.596483][T10042] tipc: Can't bind to reserved service type 0 [ 477.712628][T10044] syzkaller0: entered promiscuous mode [ 477.719559][T10044] syzkaller0: entered allmulticast mode [ 477.895254][ T5926] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 477.912589][T10052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1043'. [ 478.097956][ T5926] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 478.133851][ T5926] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 478.150059][ T5926] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 478.163060][ T5926] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 478.175448][ T5926] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 478.190913][ T5926] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 478.202883][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 478.211370][ T5926] usb 2-1: Product: syz [ 478.215675][ T24] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 478.227662][ T5926] usb 2-1: Manufacturer: syz [ 478.235448][ T10] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 478.256220][ T5926] cdc_wdm 2-1:1.0: skipping garbage [ 478.285049][ T5926] cdc_wdm 2-1:1.0: skipping garbage [ 478.293502][ T5926] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 478.311585][ T5926] cdc_wdm 2-1:1.0: Unknown control protocol [ 478.381799][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 478.395547][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 478.396004][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 478.409014][T10060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1046'. [ 478.409883][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 478.461632][ T24] usb 4-1: config 7 has an invalid interface number: 187 but max is 0 [ 478.482504][ T24] usb 4-1: config 7 has no interface number 0 [ 478.489119][ T24] usb 4-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 478.507694][ T24] usb 4-1: config 7 interface 187 has no altsetting 0 [ 478.508232][ T10] usb 5-1: config 129 has an invalid interface number: 249 but max is 0 [ 478.521893][ T24] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 478.533620][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.545448][ T24] usb 4-1: Product: syz [ 478.551278][ T24] usb 4-1: Manufacturer: syz [ 478.595474][ T24] usb 4-1: SerialNumber: syz [ 478.596079][ T10] usb 5-1: config 129 has no interface number 0 [ 478.621308][ T10] usb 5-1: config 129 interface 249 altsetting 247 bulk endpoint 0x81 has invalid maxpacket 32 [ 478.638492][ T10] usb 5-1: config 129 interface 249 altsetting 247 bulk endpoint 0xA has invalid maxpacket 164 [ 478.661872][ T10] usb 5-1: config 129 interface 249 has no altsetting 0 [ 478.677659][T10041] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1041'. [ 478.687731][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=9908, bcdDevice=2e.38 [ 478.691265][ T5926] usb 2-1: USB disconnect, device number 95 [ 478.743511][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.784167][ T10] usb 5-1: Product: syz [ 478.794364][ T10] usb 5-1: Manufacturer: syz [ 478.804545][ T10] usb 5-1: SerialNumber: syz [ 478.835145][ T24] usb 4-1: Limiting number of CPorts to U8_MAX [ 478.869660][T10058] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 478.889630][T10058] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 478.911562][ T24] usb 4-1: Unknown endpoint type found, address 0x07 [ 478.928789][ T24] usb 4-1: Unknown endpoint type found, address 0x03 [ 478.945171][ T24] usb 4-1: Not enough endpoints found in device, aborting! [ 479.118044][ T8648] usb 4-1: USB disconnect, device number 87 [ 479.125444][ T8565] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 479.180851][ T10] smsc95xx v2.0.0 [ 479.220359][ T10] smsc95xx 5-1:129.249 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 479.256251][ T10] smsc95xx 5-1:129.249: probe with driver smsc95xx failed with error -71 [ 479.294956][ T8565] usb 3-1: Using ep0 maxpacket: 16 [ 479.302489][ T10] usb 5-1: USB disconnect, device number 95 [ 479.310012][ T8565] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.344936][ T8565] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.370791][ T8565] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 479.384111][ T8565] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 479.412304][ T8565] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.438433][ T8565] usb 3-1: config 0 descriptor?? [ 479.858678][ T8565] microsoft 0003:045E:07DA.0011: item 0 4 0 8 parsing failed [ 479.867052][ T8565] microsoft 0003:045E:07DA.0011: parse failed [ 479.874841][ T8565] microsoft 0003:045E:07DA.0011: probe with driver microsoft failed with error -22 [ 480.067132][ T24] usb 3-1: USB disconnect, device number 95 [ 480.154992][ T8565] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 480.327810][ T8565] usb 5-1: Using ep0 maxpacket: 16 [ 480.350854][ T8565] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 480.373967][ T8565] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 480.398931][ T8565] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 480.457926][ T8565] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.470879][ T8565] usb 5-1: Product: syz [ 480.476403][ T8565] usb 5-1: Manufacturer: syz [ 480.483314][ T8565] usb 5-1: SerialNumber: syz [ 480.491970][ T8565] usb 5-1: config 0 descriptor?? [ 480.507038][ T8565] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 480.527674][ T8565] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 480.755081][ T24] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 480.915090][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 480.935040][ T24] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 480.946483][ T8648] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 480.954401][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.954428][ T24] usb 4-1: Product: syz [ 480.954510][ T24] usb 4-1: Manufacturer: syz [ 480.989830][ T24] usb 4-1: SerialNumber: syz [ 481.009052][ T24] usb 4-1: config 0 descriptor?? [ 481.017192][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 481.025501][ T24] usb 4-1: setting power ON [ 481.030118][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 481.039311][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 481.049365][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 481.058329][ T24] usb 4-1: media controller created [ 481.078891][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 481.098341][ T24] usb 4-1: selecting invalid altsetting 6 [ 481.104449][ T24] usb 4-1: digital interface selection failed (-22) [ 481.112705][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 481.121950][ T8565] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 481.127979][ T8648] usb 1-1: Using ep0 maxpacket: 32 [ 481.130025][ T8648] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 481.135705][ T24] usb 4-1: setting power OFF [ 481.147026][ T8648] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 481.147055][ T8648] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 481.147076][ T8648] usb 1-1: config 1 has no interface number 0 [ 481.147122][ T8648] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 481.147147][ T8648] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 481.147187][ T8648] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 481.147209][ T8648] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.162422][ T8648] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 481.169319][ T8565] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 481.215703][ T10] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 481.230344][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 481.236924][ T5852] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 481.241624][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 481.261323][ T24] (NULL device *): no alternate interface [ 481.291987][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 481.312685][ T24] usb 4-1: USB disconnect, device number 88 [ 481.368058][ T8648] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 481.385765][ T5852] usb 2-1: device descriptor read/64, error -71 [ 481.405385][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 481.415608][ T10] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 481.425595][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.433636][ T10] usb 3-1: Product: syz [ 481.438617][ T10] usb 3-1: Manufacturer: syz [ 481.443281][ T10] usb 3-1: SerialNumber: syz [ 481.451816][ T10] usb 3-1: config 0 descriptor?? [ 481.461651][ T10] gspca_main: sq930x-2.14.0 probing 2770:930c [ 481.627895][ T5852] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 481.649799][ T24] usb 1-1: USB disconnect, device number 78 [ 481.662847][ T24] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 481.765486][ T5852] usb 2-1: device descriptor read/64, error -71 [ 481.879271][ T5852] usb usb2-port1: attempt power cycle [ 481.884897][ T8565] em28xx 5-1:0.0: AC97 command still being executed: not handled properly! [ 481.899245][ T8565] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 482.315032][ T8565] em28xx 5-1:0.0: AC97 command still being executed: not handled properly! [ 482.323806][ T8565] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 482.357757][ T10] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 482.359148][ T8565] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 482.368326][ T5852] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 482.407401][ T5852] usb 2-1: device descriptor read/8, error -71 [ 482.438577][ T8565] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 482.515846][ T8565] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 482.523550][ T8565] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 482.543948][ T8565] usb 5-1: USB disconnect, device number 96 [ 482.586212][ T10] gspca_sq930x: Sensor ov9630 not yet treated [ 482.593880][ T10] sq930x 3-1:0.0: probe with driver sq930x failed with error -22 [ 482.700856][ T5852] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 482.738197][ T10] usb 3-1: USB disconnect, device number 96 [ 482.752628][ T5852] usb 2-1: device descriptor read/8, error -71 [ 482.876480][ T5852] usb usb2-port1: unable to enumerate USB device [ 483.043275][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 483.051769][ T30] audit: type=1326 audit(1751953042.878:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10114 comm="syz.4.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d7758e929 code=0x7ffc0000 [ 483.094519][ T30] audit: type=1326 audit(1751953042.878:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10114 comm="syz.4.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9d7752ab19 code=0x7ffc0000 [ 483.140609][ T30] audit: type=1326 audit(1751953042.878:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10114 comm="syz.4.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f9d7758e929 code=0x7ffc0000 [ 483.184106][ T30] audit: type=1326 audit(1751953042.878:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10114 comm="syz.4.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d7758e929 code=0x7ffc0000 [ 483.195396][ T10] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 483.225012][ T30] audit: type=1326 audit(1751953042.878:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10114 comm="syz.4.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9d7752ab19 code=0x7ffc0000 [ 483.280192][ T30] audit: type=1326 audit(1751953042.878:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10114 comm="syz.4.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9d7758e929 code=0x7ffc0000 [ 483.310819][ T30] audit: type=1326 audit(1751953043.018:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10114 comm="syz.4.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9d7752ab19 code=0x7ffc0000 [ 483.338221][ T30] audit: type=1326 audit(1751953043.018:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10114 comm="syz.4.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d7758e929 code=0x7ffc0000 [ 483.365179][ T30] audit: type=1326 audit(1751953043.018:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10114 comm="syz.4.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d7758e929 code=0x7ffc0000 [ 483.390120][ T30] audit: type=1326 audit(1751953043.078:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10114 comm="syz.4.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9d7752ab19 code=0x7ffc0000 [ 483.395355][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 483.427937][T10116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1063'. [ 483.437983][T10126] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1066'. [ 483.447358][T10126] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1066'. [ 483.464255][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 483.475237][ T10] usb 3-1: can't read configurations, error -61 [ 483.607819][ T10] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 483.628962][T10130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1066'. [ 484.085777][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 484.103389][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 484.118728][ T10] usb 3-1: can't read configurations, error -61 [ 484.132878][ T10] usb usb3-port1: attempt power cycle [ 484.135285][T10137] netlink: 'syz.4.1067': attribute type 4 has an invalid length. [ 484.599475][ T10] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 484.655069][ T8565] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 484.736193][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 484.769698][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 484.812546][ T10] usb 3-1: can't read configurations, error -61 [ 484.825193][ T8565] usb 2-1: Using ep0 maxpacket: 8 [ 484.834638][ T8565] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 484.850506][ T8565] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.866504][ T8565] usb 2-1: Product: syz [ 484.880310][ T8565] usb 2-1: Manufacturer: syz [ 484.892280][ T8565] usb 2-1: SerialNumber: syz [ 484.897666][T10150] netlink: 'syz.0.1071': attribute type 1 has an invalid length. [ 484.921587][ T8565] usb 2-1: config 0 descriptor?? [ 484.945813][ T8565] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 485.061039][T10154] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 485.105458][ T10] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 485.136189][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 485.150080][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 485.162133][T10150] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 485.171177][ T10] usb 3-1: can't read configurations, error -61 [ 485.181455][ T10] usb usb3-port1: unable to enumerate USB device [ 485.238439][T10150] bond1 (unregistering): Released all slaves [ 485.707486][T10163] loop2: detected capacity change from 0 to 7 [ 485.714689][T10163] Dev loop2: unable to read RDB block 7 [ 485.720855][ T10] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 485.720925][T10163] loop2: unable to read partition table [ 485.740970][T10163] loop2: partition table beyond EOD, truncated [ 485.748177][T10163] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 485.885570][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 485.907547][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 485.919518][T10168] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 485.927087][ T10] usb 1-1: config 4 interface 0 has no altsetting 0 [ 485.939085][T10168] batman_adv: batadv0: Adding interface: ip6gretap1 [ 485.945674][ T10] usb 1-1: string descriptor 0 read error: -22 [ 485.945799][ T10] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 485.945822][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.979931][T10168] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.993825][ T10] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 486.009458][ T8565] gspca_sonixj: reg_w1 err -71 [ 486.057728][T10168] batman_adv: batadv0: Interface activated: ip6gretap1 [ 486.058910][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 486.096602][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 486.103811][ T10] usb 1-1: media controller created [ 486.113741][ T5852] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 486.125304][ T8565] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 486.153636][ T8565] usb 2-1: USB disconnect, device number 100 [ 486.183261][T10159] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1074'. [ 486.189953][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 486.271739][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 486.357613][ T10] usb 1-1: USB disconnect, device number 79 [ 486.381031][T10173] netlink: 'syz.2.1079': attribute type 1 has an invalid length. [ 486.453458][T10173] bond2: entered promiscuous mode [ 486.462256][T10173] 8021q: adding VLAN 0 to HW filter on device bond2 [ 486.503893][T10177] bond2: (slave bridge1): making interface the new active one [ 486.513571][T10177] bridge1: entered promiscuous mode [ 486.520899][T10177] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 486.865535][ T10] usb 5-1: new low-speed USB device number 97 using dummy_hcd [ 486.905251][ T9] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 486.933154][T10188] libceph: resolve '400' (ret=-3): failed [ 486.971414][T10188] macvlan0: entered promiscuous mode [ 486.998353][T10188] macvlan0: entered allmulticast mode [ 487.025707][ T10] usb 5-1: Invalid ep0 maxpacket: 64 [ 487.064486][T10191] fuse: Unknown parameter 'grou€' [ 487.065427][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 487.109710][ T9] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 487.124411][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.143579][ T9] usb 2-1: Product: syz [ 487.158954][ T9] usb 2-1: Manufacturer: syz [ 487.169395][ T10] usb 5-1: new low-speed USB device number 98 using dummy_hcd [ 487.177927][ T9] usb 2-1: SerialNumber: syz [ 487.194279][ T9] usb 2-1: config 0 descriptor?? [ 487.335638][ T10] usb 5-1: Invalid ep0 maxpacket: 64 [ 487.341386][ T10] usb usb5-port1: attempt power cycle [ 487.408276][ T9] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 487.685764][ T10] usb 5-1: new low-speed USB device number 99 using dummy_hcd [ 487.715793][ T10] usb 5-1: Invalid ep0 maxpacket: 64 [ 487.856319][ T8565] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 487.865665][ T10] usb 5-1: new low-speed USB device number 100 using dummy_hcd [ 487.896718][ T10] usb 5-1: Invalid ep0 maxpacket: 64 [ 487.903271][ T10] usb usb5-port1: unable to enumerate USB device [ 488.028700][T10184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.037525][ T8565] usb 4-1: device descriptor read/64, error -71 [ 488.065918][T10184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.285052][ T8565] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 488.444959][ T8565] usb 4-1: device descriptor read/64, error -71 [ 488.565330][ T8565] usb usb4-port1: attempt power cycle [ 488.774415][ T9] gspca_sunplus: reg_w_riv err -71 [ 488.780016][ T9] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 488.837279][ T9] usb 2-1: USB disconnect, device number 101 [ 488.933602][ T8565] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 488.965807][ T8565] usb 4-1: device descriptor read/8, error -71 [ 489.204997][ T8565] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 489.226343][ T8565] usb 4-1: device descriptor read/8, error -71 [ 489.335185][ T8565] usb usb4-port1: unable to enumerate USB device [ 489.485437][ T9] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 489.665714][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 489.673654][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 489.682073][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 489.694497][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x5F, changing to 0xF [ 489.706697][ T10] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 489.717000][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 489.729010][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 489.740815][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 489.749681][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 489.765355][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x5F, changing to 0xF [ 489.778670][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 489.795564][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 489.811492][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 489.819621][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 489.831422][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x5F, changing to 0xF [ 489.843383][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 489.855543][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 489.867341][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 489.877307][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.893280][ T9] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 489.905519][ T10] usb 2-1: config 0 descriptor?? [ 489.910523][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.919389][ T9] usb 3-1: Product: syz [ 489.923639][ T9] usb 3-1: Manufacturer: syz [ 489.930612][ T10] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 489.937818][ T9] usb 3-1: SerialNumber: syz [ 490.132978][T10221] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1091'. [ 490.152912][T10210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.172608][ T10] usb 2-1: USB disconnect, device number 102 [ 490.183409][T10210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.202009][T10210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.217518][T10210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.234240][T10210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.246598][T10210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.258213][T10210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.269012][T10210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.280324][T10210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.291188][T10210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.337366][ T9] adutux 3-1:168.0: interrupt endpoints not found [ 490.353384][ T9] usb 3-1: USB disconnect, device number 101 [ 490.655304][ T10] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 490.785419][T10232] vivid-006: disconnect [ 490.790425][T10232] vivid-006: reconnect [ 490.842422][T10236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1097'. [ 490.853976][ T10] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 490.867322][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.936728][ T10] usb 2-1: config 0 descriptor?? [ 491.144669][ T10] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 491.360215][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 491.550446][ T10] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 491.622504][ T10] [drm] Initialized udl on minor 2 [ 491.646383][ T10] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 491.775026][ T8565] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 491.791706][ T10] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 491.854383][ T9] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 491.884596][ T10] usb 2-1: USB disconnect, device number 103 [ 491.901851][ T9] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 491.966033][ T8565] usb 1-1: Using ep0 maxpacket: 8 [ 491.982508][ T8565] usb 1-1: config 10 has an invalid interface number: 193 but max is 0 [ 492.006380][ T8565] usb 1-1: config 10 has no interface number 0 [ 492.053496][ T8565] usb 1-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice=be.93 [ 492.073271][ T8565] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.090007][ T8565] usb 1-1: Product: syz [ 492.094428][ T8565] usb 1-1: Manufacturer: syz [ 492.114866][ T8565] usb 1-1: SerialNumber: syz [ 492.265397][ T9] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 492.345001][ T24] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 492.418883][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.418907][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.418930][ T9] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 492.418943][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.423736][ T9] usb 5-1: config 0 descriptor?? [ 492.475588][ T10] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 492.505352][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 492.516248][ T24] usb 3-1: config 0 has an invalid interface number: 4 but max is 1 [ 492.524314][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 492.554456][ T24] usb 3-1: config 0 has no interface number 1 [ 492.564615][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 492.588073][ T24] usb 3-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 492.607055][ T8565] rtsx_usb 1-1:10.193: probe with driver rtsx_usb failed with error -22 [ 492.622219][ T24] usb 3-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 492.635514][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 492.645471][ T10] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=4b.b2 [ 492.668621][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.672872][ T8565] usb 1-1: USB disconnect, device number 80 [ 492.682816][ T10] usb 2-1: Product: syz [ 492.703285][ T24] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 492.712512][ T10] usb 2-1: Manufacturer: syz [ 492.712536][ T10] usb 2-1: SerialNumber: syz [ 492.733547][ T10] usb 2-1: config 0 descriptor?? [ 492.750494][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.761700][ T24] usb 3-1: Product: syz [ 492.766214][ T24] usb 3-1: Manufacturer: syz [ 492.770845][ T24] usb 3-1: SerialNumber: syz [ 492.786649][ T24] usb 3-1: config 0 descriptor?? [ 492.919547][T10264] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1105'. [ 492.930438][ T9] uclogic 0003:5543:0042.0012: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.4-1/input0 [ 492.994595][ T10] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 493.115459][ T9] usb 5-1: USB disconnect, device number 101 [ 493.123037][T10239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1098'. [ 493.220766][T10274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.230325][T10274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.241384][T10274] delete_channel: no stack [ 493.265087][ T8565] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 493.267077][ T10] gspca_sunplus: reg_w_riv err -71 [ 493.303102][ T10] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 493.877591][ T10] usb 2-1: USB disconnect, device number 104 [ 493.944953][ T8565] usb 4-1: Using ep0 maxpacket: 16 [ 493.955643][ T8565] usb 4-1: config 8 has an invalid interface number: 109 but max is 1 [ 493.964495][ T8565] usb 4-1: config 8 has an invalid interface number: 255 but max is 1 [ 493.989602][ T8565] usb 4-1: config 8 has no interface number 0 [ 494.010874][ T8565] usb 4-1: config 8 has no interface number 1 [ 494.122698][ T8565] usb 4-1: config 8 interface 109 altsetting 6 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 494.169731][ T8565] usb 4-1: config 8 interface 255 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 494.216487][ T24] cxacru 3-1:0.0: cxacru_bind: interface has incorrect endpoints [ 494.229059][ T8565] usb 4-1: config 8 interface 255 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 1024 [ 494.249203][ T24] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 494.282436][ T8565] usb 4-1: config 8 interface 255 altsetting 1 bulk endpoint 0xB has invalid maxpacket 1023 [ 494.311186][ T8565] usb 4-1: config 8 interface 255 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0 [ 494.350318][ T8565] usb 4-1: config 8 interface 109 has no altsetting 0 [ 494.357571][ T24] cxacru 3-1:0.4: cxacru_bind: interface has incorrect endpoints [ 494.383846][ T8565] usb 4-1: config 8 interface 255 has no altsetting 0 [ 494.395270][ T24] cxacru 3-1:0.4: usbatm_usb_probe: bind failed: -19! [ 494.445237][ T8565] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=b3.c4 [ 494.456917][ T24] usb 3-1: USB disconnect, device number 102 [ 494.474154][T10282] fuse: Bad value for 'max_read' [ 494.482129][ T8565] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.504411][ T8565] usb 4-1: Product: syz [ 494.517834][ T8565] usb 4-1: Manufacturer: syz [ 494.523508][ T8565] usb 4-1: SerialNumber: syz [ 494.705240][ T5958] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 494.745142][ T8565] ssu100 4-1:8.109: Quatech SSU-100 USB to Serial Driver converter detected [ 494.763099][ T8565] ssu100 4-1:8.109: probe with driver ssu100 failed with error -71 [ 494.794317][T10290] netlink: set zone limit has 4 unknown bytes [ 494.794559][ T8565] ssu100 4-1:8.255: Quatech SSU-100 USB to Serial Driver converter detected [ 494.845886][ T8565] ssu100 4-1:8.255: probe with driver ssu100 failed with error -71 [ 494.896841][ T5958] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 494.907805][ T5958] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 494.925386][ T8565] usb 4-1: USB disconnect, device number 94 [ 494.936675][ T5958] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 494.966594][ T5958] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 495.011724][ T5958] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 495.029449][ T5958] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 495.058270][ T5958] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 495.085506][ T5958] usb 5-1: Product: syz [ 495.093717][ T5958] usb 5-1: Manufacturer: syz [ 495.116712][ T5958] cdc_wdm 5-1:1.0: skipping garbage [ 495.130195][ T5958] cdc_wdm 5-1:1.0: skipping garbage [ 495.139546][ T5958] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 495.145785][ T5958] cdc_wdm 5-1:1.0: Unknown control protocol [ 495.394995][ T5926] usb 3-1: new low-speed USB device number 103 using dummy_hcd [ 495.505044][ T24] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 495.544961][ T5926] usb 3-1: device descriptor read/64, error -71 [ 495.595203][ T10] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 495.745756][ T24] usb 2-1: config 0 has no interfaces? [ 495.751398][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 495.767999][ T10] usb 1-1: config index 0 descriptor too short (expected 31, got 27) [ 495.780455][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 495.788262][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.804760][ T24] usb 2-1: config 0 descriptor?? [ 495.832048][ T5926] usb 3-1: new low-speed USB device number 104 using dummy_hcd [ 495.906003][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 495.985434][ T5926] usb 3-1: device descriptor read/64, error -71 [ 496.093766][T10308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.103319][T10308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.146231][T10308] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1115'. [ 496.169643][ T5926] usb usb3-port1: attempt power cycle [ 496.179716][ T10] usb 1-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 496.225995][ T10] usb 1-1: Product: syz [ 496.230266][ T10] usb 1-1: Manufacturer: syz [ 496.525080][ T5926] usb 3-1: new low-speed USB device number 105 using dummy_hcd [ 496.539545][ T10] usb 1-1: SerialNumber: syz [ 496.566209][ T5926] usb 3-1: device descriptor read/8, error -71 [ 496.804928][ T5926] usb 3-1: new low-speed USB device number 106 using dummy_hcd [ 496.825561][ T5926] usb 3-1: device descriptor read/8, error -71 [ 496.944401][ T5926] usb usb3-port1: unable to enumerate USB device [ 498.273060][ T5958] usb 2-1: USB disconnect, device number 105 [ 498.285086][ T5926] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 498.340112][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 498.341221][ T8565] usb 5-1: USB disconnect, device number 102 [ 498.346991][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 498.358903][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 498.368973][ C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 498.469767][ T5926] usb 4-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 498.500502][T10344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1125'. [ 498.518218][ T5926] usb 4-1: config 0 interface 0 has no altsetting 0 [ 498.527251][ T10] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 81 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 498.535408][ T5926] usb 4-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 498.567988][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.591482][ T10] usb 1-1: USB disconnect, device number 81 [ 498.619228][ T10] usblp0: removed [ 498.619485][ T5926] usb 4-1: config 0 descriptor?? [ 498.698757][ T8821] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 498.846095][T10351] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1128'. [ 498.858672][T10348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.890115][T10348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.075776][ T5926] ntrig 0003:1B96:0009.0013: item fetching failed at offset 5/7 [ 499.094551][ T5926] ntrig 0003:1B96:0009.0013: parse failed [ 499.105493][ T9] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 499.115058][ T5926] ntrig 0003:1B96:0009.0013: probe with driver ntrig failed with error -22 [ 499.146097][ T10] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 499.275675][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 499.289827][T10334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.311474][T10334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.342698][ T9] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 499.354372][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 499.354477][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 499.372286][ T9] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 499.382529][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 499.434069][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.444177][ T10] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 499.464244][T10334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.532480][T10334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.618922][T10365] TCP: TCP_TX_DELAY enabled [ 499.638316][ T9] usb 1-1: config 0 descriptor?? [ 499.644028][T10347] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 499.644346][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 499.694214][ T10] usb 3-1: SerialNumber: syz [ 499.826678][T10368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1130'. [ 499.882493][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 499.898275][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 499.958403][ T9] usb 1-1: USB disconnect, device number 82 [ 500.106458][ T10] usb 3-1: 0:2 : does not exist [ 500.154696][ T10] usb 3-1: USB disconnect, device number 107 [ 500.362566][ T56] usb 4-1: USB disconnect, device number 95 [ 500.395654][ T7123] udevd[7123]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 500.883622][T10377] hsr0: entered promiscuous mode [ 500.904908][ T5926] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 500.915423][T10377] hsr0: left promiscuous mode [ 501.089176][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.114162][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.141516][ T5926] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 501.167453][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.192643][T10389] netlink: 'syz.0.1137': attribute type 11 has an invalid length. [ 501.194613][ T5926] usb 3-1: config 0 descriptor?? [ 501.215946][ T56] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 501.375486][ T56] usb 4-1: Using ep0 maxpacket: 32 [ 501.377728][ T5958] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 501.383746][ T56] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 501.399422][ T56] usb 4-1: config 0 has no interface number 0 [ 501.429823][ T56] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 501.452225][T10396] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.454640][ T56] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.489329][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.497779][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.520863][ T56] usb 4-1: Product: syz [ 501.533381][ T56] usb 4-1: Manufacturer: syz [ 501.546280][ T56] usb 4-1: SerialNumber: syz [ 501.558077][ T56] usb 4-1: config 0 descriptor?? [ 501.568618][ T5958] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 501.570191][ T56] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 501.587923][ T5958] usb 2-1: config 1 has no interface number 0 [ 501.600865][ T5958] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.618347][T10371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1131'. [ 501.631687][ T5958] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 501.642516][T10371] IPv6: sit1: Disabled Multicast RS [ 501.651381][ T5958] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 501.673931][T10399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.677929][ T5958] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 501.689418][T10399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.693782][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.714021][ T5958] usb 2-1: Product: syz [ 501.735416][ T5958] usb 2-1: Manufacturer: syz [ 501.740239][ T5926] usbhid 3-1:0.0: can't add hid device: -71 [ 501.746315][ T5926] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 501.767869][ T5958] usb 2-1: SerialNumber: syz [ 501.775313][ T5926] usb 3-1: USB disconnect, device number 108 [ 501.800633][ T56] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 501.857844][ T56] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 501.884986][ T24] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 502.044989][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 502.052229][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.063570][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.073434][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 502.086563][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 502.095688][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.115824][ T24] usb 5-1: config 0 descriptor?? [ 502.426223][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 502.430810][ T5926] usb 4-1: USB disconnect, device number 96 [ 502.479654][ T5926] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 502.596241][ T5926] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 502.643779][ T5926] quatech2 4-1:0.51: device disconnected [ 502.663162][ T5958] cdc_ncm 2-1:1.1: bind() failure [ 502.710985][ T8565] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 502.862446][T10387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.877874][T10387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.952250][ T8565] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 503.085078][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 503.111002][ T8565] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 503.125212][ T5926] usb 2-1: USB disconnect, device number 106 [ 503.266116][ T8565] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 503.313170][T10427] netlink: 'syz.1.1145': attribute type 33 has an invalid length. [ 503.321737][T10427] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1145'. [ 503.333013][ T8565] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.616347][T10410] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 503.651184][ T8565] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 504.960185][ T2038] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 505.138582][ T2038] usb 2-1: Using ep0 maxpacket: 32 [ 505.187749][ T2038] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 505.196417][ T2038] usb 2-1: config 0 has no interface number 0 [ 505.203941][ T2038] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 505.329870][ T56] usb 1-1: USB disconnect, device number 83 [ 505.381228][ T2038] usb 2-1: config 0 interface 85 has no altsetting 0 [ 505.411026][ T2038] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 505.423661][ T2038] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.458884][ T2038] usb 2-1: Product: syz [ 505.473391][ T2038] usb 2-1: Manufacturer: syz [ 505.524945][ T2038] usb 2-1: SerialNumber: syz [ 505.530663][T10451] veth1_to_team: entered promiscuous mode [ 505.565077][ T2038] usb 2-1: config 0 descriptor?? [ 505.777515][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 505.783511][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 505.825398][ T24] usb 5-1: USB disconnect, device number 103 [ 506.005944][ T2038] appletouch 2-1:0.85: Failed to request geyser raw mode [ 506.026650][ T2038] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 506.086856][ T2038] usb 2-1: USB disconnect, device number 107 [ 506.285053][ T24] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 506.365544][ T56] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 506.484872][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 506.527075][ T56] usb 1-1: Using ep0 maxpacket: 16 [ 506.537061][ T56] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.549056][ T56] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.562585][ T56] usb 1-1: New USB device found, idVendor=0004, idProduct=0000, bcdDevice= 0.00 [ 506.565612][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.573025][ T56] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.582713][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.582761][ T24] usb 5-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 506.582784][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.595826][ T24] usb 5-1: config 0 descriptor?? [ 506.647817][ T56] usb 1-1: config 0 descriptor?? [ 506.894607][T10473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.924297][T10473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.964147][T10473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.994278][T10473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.035128][T10479] loop2: detected capacity change from 0 to 7 [ 507.045322][ T10] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 507.046524][T10479] Dev loop2: unable to read RDB block 7 [ 507.062105][T10479] loop2: AHDI p1 p2 p3 [ 507.068332][T10479] loop2: partition table partially beyond EOD, truncated [ 507.079628][T10479] loop2: p1 start 1601398130 is beyond EOD, truncated [ 507.088676][T10479] loop2: p2 start 1702059890 is beyond EOD, truncated [ 507.108346][T10480] loop2: detected capacity change from 7 to 15 [ 507.127851][ T24] input: HID 0458:5012 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5012.0014/input/input35 [ 507.250068][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 507.289778][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.321061][ T30] kauditd_printk_skb: 124 callbacks suppressed [ 507.321078][ T30] audit: type=1326 audit(1751953067.158:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10468 comm="syz.4.1157" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d7758e929 code=0x0 [ 507.366376][ T24] input: HID 0458:5012 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5012.0014/input/input36 [ 507.402157][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.434853][T10486] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1157'. [ 507.501005][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 507.522149][ T24] kye 0003:0458:5012.0014: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.4-1/input0 [ 507.579657][ T56] hid-generic 0003:0004:0000.0015: unbalanced delimiter at end of report description [ 507.596938][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 507.619578][ T10] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 507.630555][ T56] hid-generic 0003:0004:0000.0015: probe with driver hid-generic failed with error -22 [ 507.688893][ T10] usb 4-1: Manufacturer: syz [ 507.726777][ T10] usb 4-1: config 0 descriptor?? [ 507.843126][T10487] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1157'. [ 508.003582][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 508.010022][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 508.039068][ T10] usb 4-1: USB disconnect, device number 97 [ 508.103107][T10499] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 508.355062][ T24] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 508.382493][T10512] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.390577][ T2038] usb 5-1: reset high-speed USB device number 104 using dummy_hcd [ 508.405891][T10513] netlink: 'syz.3.1169': attribute type 16 has an invalid length. [ 508.406709][T10512] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.515207][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 508.531155][ T24] usb 2-1: config 0 has an invalid interface number: 195 but max is 0 [ 508.549864][ T24] usb 2-1: config 0 has no interface number 0 [ 508.567863][ T24] usb 2-1: New USB device found, idVendor=1199, idProduct=901b, bcdDevice=26.16 [ 508.580546][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.629471][ T24] usb 2-1: Product: syz [ 508.640235][ T24] usb 2-1: Manufacturer: syz [ 508.657727][ T24] usb 2-1: SerialNumber: syz [ 508.692034][ T24] usb 2-1: config 0 descriptor?? [ 508.995608][ T5852] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 509.165505][ T8565] usb 1-1: USB disconnect, device number 84 [ 509.180398][ T5852] usb 4-1: config 5 has an invalid interface number: 1 but max is 0 [ 509.201060][ T5852] usb 4-1: config 5 has no interface number 0 [ 509.203614][ T24] usb 2-1: USB disconnect, device number 108 [ 509.231871][ T5852] usb 4-1: config 5 interface 1 has no altsetting 0 [ 509.261368][ T5852] usb 4-1: New USB device found, idVendor=15ba, idProduct=002b, bcdDevice=d5.66 [ 509.280242][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.299352][T10529] netlink: 'syz.0.1173': attribute type 10 has an invalid length. [ 509.304357][ T5852] usb 4-1: Product: syz [ 509.320490][ T5852] usb 4-1: Manufacturer: syz [ 509.336048][ T5852] usb 4-1: SerialNumber: syz [ 509.345655][T10529] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1173'. [ 509.388884][T10529] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.418660][T10529] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.454887][T10529] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.484834][T10529] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.505876][T10529] team0: Port device geneve0 added [ 509.617906][T10529] syz.0.1173 (10529) used greatest stack depth: 20152 bytes left [ 509.654987][ T2038] usb 5-1: device descriptor read/64, error -71 [ 509.710725][T10534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.787528][T10534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.833180][ T5852] ftdi_sio 4-1:5.1: FTDI USB Serial Device converter detected [ 509.868293][ T5852] ftdi_sio ttyUSB0: unknown device type: 0xd566 [ 509.914565][ T5852] usb 4-1: USB disconnect, device number 98 [ 509.914876][ T2038] usb 5-1: reset high-speed USB device number 104 using dummy_hcd [ 509.960184][ T5852] ftdi_sio 4-1:5.1: device disconnected [ 509.997074][ T2038] usb 5-1: device reset changed ep0 maxpacket size! [ 510.028042][ T5926] usb 5-1: USB disconnect, device number 104 [ 510.185623][ T56] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 510.265045][ T5926] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 510.355524][ T56] usb 1-1: Using ep0 maxpacket: 8 [ 510.362841][ T56] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.377621][ T56] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 510.387709][ T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.407898][ T56] usb 1-1: Product: syz [ 510.437969][ T5926] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 510.447856][ T56] usb 1-1: Manufacturer: syz [ 510.459901][ T5926] usb 5-1: config 0 has no interface number 0 [ 510.466055][ T56] usb 1-1: SerialNumber: syz [ 510.475942][ T56] usb 1-1: config 0 descriptor?? [ 510.492466][ T56] streamzap 1-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 510.496668][ T5926] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 510.539346][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.550390][ T5926] usb 5-1: Product: syz [ 510.554662][ T5926] usb 5-1: Manufacturer: syz [ 510.561210][ T5926] usb 5-1: SerialNumber: syz [ 510.571454][ T5926] usb 5-1: config 0 descriptor?? [ 510.691347][ T5958] usb 1-1: USB disconnect, device number 85 [ 510.717092][ T24] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 510.784419][ T5926] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 510.801194][ T5926] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 510.814418][ T5926] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 510.823949][ T5926] usb 5-1: media controller created [ 511.014941][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 511.025365][ T24] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 511.057863][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 511.134482][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 511.433012][T10575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.439570][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 511.462310][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 511.472663][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 511.475796][T10575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.488275][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 511.514868][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.554380][ T5926] i2c i2c-2: ec100: i2c rd failed=-32 reg=33 [ 511.815241][ T5926] usb 5-1: USB disconnect, device number 105 [ 511.886719][ T24] usb 4-1: usb_control_msg returned -32 [ 511.892361][ T24] usbtmc 4-1:16.0: can't read capabilities [ 512.123466][T10589] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1183'. [ 512.365008][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 512.428103][ T5852] usb 4-1: USB disconnect, device number 99 [ 512.507677][ T56] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 512.668571][ T5926] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 512.675022][ T56] usb 3-1: Using ep0 maxpacket: 32 [ 512.697045][ T56] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.718391][ T56] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 512.739245][ T56] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 512.759843][ T56] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 512.785544][ T56] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 512.815291][ T56] usb 3-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 512.840076][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.841650][ T56] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 512.864996][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.875338][ T56] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 512.887755][ T5926] usb 1-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 512.893614][ T56] usb 3-1: Product: syz [ 512.903719][ T56] usb 3-1: Manufacturer: syz [ 512.904953][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.913825][ T56] usb 3-1: SerialNumber: syz [ 512.943452][ T5926] usb 1-1: config 0 descriptor?? [ 512.948265][ T56] usb 3-1: config 0 descriptor?? [ 512.967202][ T56] usb 3-1: no audio or video endpoints found [ 513.199237][ T56] usb 3-1: USB disconnect, device number 109 [ 513.367919][ T5926] hid_mf 0003:0079:1846.0016: unknown main item tag 0x0 [ 513.381296][ T5926] hid_mf 0003:0079:1846.0016: unknown main item tag 0x0 [ 513.394376][ T5926] hid_mf 0003:0079:1846.0016: unknown main item tag 0x0 [ 513.406823][ T5926] hid_mf 0003:0079:1846.0016: unknown main item tag 0x0 [ 513.414326][ T5926] hid_mf 0003:0079:1846.0016: unknown main item tag 0x0 [ 513.421823][ T5926] hid_mf 0003:0079:1846.0016: unknown main item tag 0x0 [ 513.429534][ T5926] hid_mf 0003:0079:1846.0016: unknown main item tag 0x0 [ 513.446045][ T5926] hid_mf 0003:0079:1846.0016: unknown main item tag 0x0 [ 513.467765][ T5926] hid_mf 0003:0079:1846.0016: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.0-1/input0 [ 513.505163][ T5926] hid_mf 0003:0079:1846.0016: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 513.572661][ T24] usb 1-1: USB disconnect, device number 86 [ 513.579176][ T2038] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 513.582312][T10624] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1193'. [ 513.588362][T10623] xt_TCPMSS: Only works on TCP SYN packets [ 513.636168][T10624] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1193'. [ 513.754969][ T2038] usb 4-1: Using ep0 maxpacket: 8 [ 513.764415][ T2038] usb 4-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 513.784268][ T2038] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 513.804718][ T2038] usb 4-1: Product: syz [ 513.833461][ T2038] usb 4-1: Manufacturer: syz [ 513.841454][ T2038] usb 4-1: SerialNumber: syz [ 513.852490][ T2038] usb 4-1: config 0 descriptor?? [ 514.137805][T10636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1197'. [ 514.149202][ T5852] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 514.203302][ T2038] usb 4-1: USB disconnect, device number 100 [ 514.263166][ T7123] udevd[7123]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 514.319263][ T5852] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 514.333429][ T5852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.344162][T10639] vivid-000: disconnect [ 514.467758][T10635] vivid-000: reconnect [ 514.502165][ T5852] usb 3-1: Product: syz [ 514.512108][ T5852] usb 3-1: Manufacturer: syz [ 514.519809][ T5852] usb 3-1: SerialNumber: syz [ 514.553462][ T5852] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 514.581887][ T9] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 514.595032][ T24] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 514.746745][ T24] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 514.761968][ T24] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 514.801618][ T24] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 514.824860][ T24] usb 1-1: config 0 has no interface number 0 [ 514.854907][ T24] usb 1-1: config 0 has no interface number 1 [ 514.872012][ T24] usb 1-1: New USB device found, idVendor=cc35, idProduct=693f, bcdDevice=e7.0f [ 514.888442][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.924905][ T24] usb 1-1: Product: syz [ 514.959845][ T24] usb 1-1: Manufacturer: syz [ 514.964494][ T24] usb 1-1: SerialNumber: syz [ 515.006575][ T24] usb 1-1: config 0 descriptor?? [ 515.020220][ T2038] usb 3-1: USB disconnect, device number 110 [ 515.056605][ T24] cdc_acm 1-1:0.51: probe with driver cdc_acm failed with error -22 [ 515.192532][T10647] kvm: kvm [10646]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0x200000000000 [ 515.292173][T10638] wg1: entered promiscuous mode [ 515.299387][T10638] wg1: entered allmulticast mode [ 515.313760][ T24] usb 1-1: USB disconnect, device number 87 [ 515.645555][ T9] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 515.653380][ T9] ath9k_htc: Failed to initialize the device [ 515.691517][ T2038] usb 3-1: ath9k_htc: USB layer deinitialized [ 515.805392][ T24] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 516.018745][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.044158][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 516.081929][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 516.154943][ T2038] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 516.163506][ T24] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 516.173810][T10673] fuse: Bad value for 'fd' [ 516.203272][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.238723][ T24] usb 5-1: config 0 descriptor?? [ 516.354944][ T2038] usb 3-1: Using ep0 maxpacket: 32 [ 516.361543][ T2038] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 516.377345][ T2038] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.401221][ T2038] usb 3-1: config 0 descriptor?? [ 516.430299][ T2038] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 516.481400][ T24] ath6kl: Failed to submit usb control message: -71 [ 516.488804][ T24] ath6kl: unable to send the bmi data to the device: -71 [ 516.500710][ T24] ath6kl: Unable to send get target info: -71 [ 516.522567][ T24] ath6kl: Failed to init ath6kl core: -71 [ 516.547614][ T24] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 516.572827][T10678] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1209'. [ 516.588233][ T24] usb 5-1: USB disconnect, device number 106 [ 517.155262][ T24] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 517.327323][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 517.337101][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 517.351903][ T24] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 517.360792][ T24] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 517.380380][ T24] usb 4-1: config 1 has no interface number 1 [ 517.394338][ T24] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 83, changing to 4 [ 517.418076][ T24] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 517.448200][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 517.458986][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.495473][ T24] usb 4-1: Product: syz [ 517.504299][ T24] usb 4-1: Manufacturer: syz [ 517.514881][ T24] usb 4-1: SerialNumber: syz [ 517.989182][T10716] CUSE: DEVNAME unspecified [ 518.108713][T10720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1221'. [ 518.425371][ T5852] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 518.565113][T10720] team0 (unregistering): Port device team_slave_0 removed [ 518.568091][ T5852] usb 1-1: device descriptor read/64, error -71 [ 518.588611][T10720] team0 (unregistering): Failed to send options change via netlink (err -105) [ 518.601881][T10720] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 518.614668][T10720] team0 (unregistering): Port device team_slave_1 removed [ 518.662615][T10720] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.676061][T10720] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.700861][T10720] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.727633][T10720] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.758196][T10720] team0 (unregistering): Failed to send options change via netlink (err -105) [ 518.771121][T10720] team0 (unregistering): Failed to send port change of device geneve0 via netlink (err -105) [ 518.783345][T10720] team0 (unregistering): Port device geneve0 removed [ 518.886047][ T5852] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 519.035486][ T5852] usb 1-1: device descriptor read/64, error -71 [ 519.306262][ T5852] usb usb1-port1: attempt power cycle [ 519.365149][ T56] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 519.432779][ T2038] gspca_vc032x: reg_r err -110 [ 519.437890][ T2038] gspca_vc032x: I2c Bus Busy Wait 00 [ 519.443205][ T2038] gspca_vc032x: I2c Bus Busy Wait 00 [ 519.645418][ T2038] gspca_vc032x: I2c Bus Busy Wait 00 [ 519.651171][ T2038] gspca_vc032x: I2c Bus Busy Wait 00 [ 519.656582][ T2038] gspca_vc032x: I2c Bus Busy Wait 00 [ 519.662087][ T2038] gspca_vc032x: I2c Bus Busy Wait 00 [ 519.667516][ T2038] gspca_vc032x: I2c Bus Busy Wait 00 [ 519.673013][ T2038] gspca_vc032x: I2c Bus Busy Wait 00 [ 519.675508][ T5852] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 519.678389][ T2038] gspca_vc032x: I2c Bus Busy Wait 00 [ 519.691518][ T2038] gspca_vc032x: I2c Bus Busy Wait 00 [ 519.696951][ T2038] gspca_vc032x: I2c Bus Busy Wait 00 [ 519.702450][ T2038] gspca_vc032x: I2c Bus Busy Wait 00 [ 519.707832][ T2038] gspca_vc032x: I2c Bus Busy Wait 00 [ 519.713324][ T2038] gspca_vc032x: I2c Bus Busy Wait 00 [ 519.718747][ T2038] gspca_vc032x: I2c Bus Busy Wait 00 [ 519.724262][ T2038] gspca_vc032x: I2c Bus Busy Wait 00 [ 519.737531][ T56] usb 2-1: too many configurations: 47, using maximum allowed: 8 [ 519.753661][ T2038] gspca_vc032x: I2c Bus Busy Wait 00 [ 519.762415][ T2038] gspca_vc032x: Unknown sensor... [ 519.770303][ T2038] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 519.824569][ T24] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 519.896311][ T24] usb 4-1: USB disconnect, device number 101 [ 519.943216][ T56] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 519.952157][ T56] usb 2-1: can't read configurations, error -61 [ 519.964145][ T5852] usb 1-1: device descriptor read/8, error -71 [ 519.972986][ T2038] usb 3-1: USB disconnect, device number 111 [ 519.994027][ T7123] udevd[7123]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 520.095164][ T56] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 520.205354][ T5852] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 520.235395][ T5852] usb 1-1: device descriptor read/8, error -71 [ 520.246594][ T56] usb 2-1: too many configurations: 47, using maximum allowed: 8 [ 520.256404][ T56] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 520.264122][ T56] usb 2-1: can't read configurations, error -61 [ 520.271400][ T56] usb usb2-port1: attempt power cycle [ 520.345610][ T5852] usb usb1-port1: unable to enumerate USB device [ 520.355031][ T24] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 520.505181][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 520.514019][ T24] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 520.525279][ T24] usb 4-1: config 0 has no interface number 0 [ 520.533144][ T24] usb 4-1: config 0 interface 184 has no altsetting 0 [ 520.543533][ T24] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 520.553419][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.573599][ T24] usb 4-1: Product: syz [ 520.577988][ T24] usb 4-1: Manufacturer: syz [ 520.582795][ T24] usb 4-1: SerialNumber: syz [ 520.598361][ T24] usb 4-1: config 0 descriptor?? [ 520.610557][ T24] smsc75xx v1.0.0 [ 520.615767][ T56] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 520.635558][T10743] loop2: detected capacity change from 0 to 7 [ 520.644665][T10743] loop2: [ 520.648269][T10743] loop2: partition table partially beyond EOD, truncated [ 520.652470][ T56] usb 2-1: too many configurations: 47, using maximum allowed: 8 [ 520.680575][ T5217] loop2: [ 520.682150][ T56] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 520.683673][ T5217] loop2: partition table partially beyond EOD, truncated [ 520.693674][ T56] usb 2-1: can't read configurations, error -61 [ 520.817721][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 520.843841][ T56] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 520.851624][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 520.851654][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 520.851929][ T24] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 520.949539][ T56] usb 2-1: too many configurations: 47, using maximum allowed: 8 [ 520.959121][ T56] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 520.967334][ T56] usb 2-1: can't read configurations, error -61 [ 520.973905][ T56] usb usb2-port1: unable to enumerate USB device [ 521.116251][ T24] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 521.296846][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 521.315042][ T24] usb 5-1: config 0 has no interface number 0 [ 521.323232][ T24] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 521.338553][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.347292][ T24] usb 5-1: Product: syz [ 521.351511][ T24] usb 5-1: Manufacturer: syz [ 521.356593][ T24] usb 5-1: SerialNumber: syz [ 521.364018][ T24] usb 5-1: config 0 descriptor?? [ 521.577662][ T24] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 521.588897][ T24] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 521.600453][ T24] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 521.608594][ T24] usb 5-1: media controller created [ 521.632766][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 521.780038][T10748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.798414][T10748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.850064][ T24] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 521.916329][ T56] usb 4-1: USB disconnect, device number 102 [ 522.099478][ T24] usb 5-1: USB disconnect, device number 107 [ 522.209641][ T30] audit: type=1326 audit(1751953082.048:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10765 comm="syz.3.1233" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fab2a98e929 code=0x0 [ 522.231379][ C1] vkms_vblank_simulate: vblank timer overrun [ 522.265426][ T9] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 522.415570][ T9] usb 3-1: device descriptor read/64, error -71 [ 522.655351][ T9] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 522.791313][T10781] random: crng reseeded on system resumption [ 522.800695][ T9] usb 3-1: device descriptor read/64, error -71 [ 522.875216][ T56] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 522.915709][ T9] usb usb3-port1: attempt power cycle [ 522.943804][T10783] loop2: detected capacity change from 0 to 7 [ 522.951769][T10783] loop2: [ 522.955322][T10783] loop2: partition table partially beyond EOD, truncated [ 523.037885][ T56] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 523.053236][ T56] usb 5-1: config 0 has no interface number 0 [ 523.062634][ T56] usb 5-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=8c.1e [ 523.082600][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.103959][ T56] usb 5-1: config 0 descriptor?? [ 523.129875][ T56] usb 5-1: selecting invalid altsetting 1 [ 523.141901][ T56] dvb_ttusb_budget: ttusb_init_controller: error [ 523.150132][ T56] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 523.250582][ T56] DVB: Unable to find symbol ves1820_attach() [ 523.257560][ T9] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 523.297536][ T9] usb 3-1: device descriptor read/8, error -71 [ 523.376152][ T56] DVB: Unable to find symbol stv0297_attach() [ 523.413030][ T56] dvb_ttusb_budget: no frontend driver found for device [0b48:1004] [ 523.448235][ T56] usb 5-1: USB disconnect, device number 108 [ 523.465838][T10798] loop2: detected capacity change from 0 to 7 [ 523.482398][T10798] Dev loop2: unable to read RDB block 7 [ 523.488206][T10798] loop2: AHDI p1 p2 p3 [ 523.501305][T10798] loop2: partition table partially beyond EOD, truncated [ 523.527103][T10798] loop2: p1 start 1601398130 is beyond EOD, truncated [ 523.545437][ T9] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 523.555544][T10798] loop2: p2 start 1702059890 is beyond EOD, truncated [ 523.575867][ T9] usb 3-1: device descriptor read/8, error -71 [ 523.696442][ T9] usb usb3-port1: unable to enumerate USB device [ 523.983957][T10808] kernel profiling enabled (shift: 17) [ 524.002165][T10808] netlink: 'syz.1.1242': attribute type 10 has an invalid length. [ 524.010228][T10808] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1242'. [ 524.022678][T10808] bridge0: port 1(dummy0) entered blocking state [ 524.029752][T10808] bridge0: port 1(dummy0) entered disabled state [ 524.037009][T10808] dummy0: entered allmulticast mode [ 524.049243][T10808] dummy0: entered promiscuous mode [ 524.057571][T10808] bridge0: port 1(dummy0) entered blocking state [ 524.064127][T10808] bridge0: port 1(dummy0) entered forwarding state [ 524.204982][ T24] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 524.409101][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 524.432335][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 524.474745][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 524.546344][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 524.604846][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 524.621984][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.648536][ T24] usb 4-1: config 0 descriptor?? [ 525.139068][ T24] plantronics 0003:047F:FFFF.0017: ignoring exceeding usage max [ 525.202565][ T24] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 525.287863][ T24] usb 4-1: USB disconnect, device number 103 [ 525.367789][T10835] xt_hashlimit: size too large, truncated to 1048576 [ 525.421772][T10834] fido_id[10834]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 525.975487][ T8648] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 526.126045][ T8648] usb 5-1: device descriptor read/64, error -71 [ 526.200210][ T30] audit: type=1326 audit(1751953086.038:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10851 comm="syz.3.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2a98e929 code=0x7ffc0000 [ 526.223152][ T30] audit: type=1326 audit(1751953086.038:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10851 comm="syz.3.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2a98e929 code=0x7ffc0000 [ 526.253648][ T30] audit: type=1326 audit(1751953086.038:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10851 comm="syz.3.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fab2a98e929 code=0x7ffc0000 [ 526.276097][ T30] audit: type=1326 audit(1751953086.038:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10851 comm="syz.3.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2a98e929 code=0x7ffc0000 [ 526.298419][ C1] vkms_vblank_simulate: vblank timer overrun [ 526.305613][ T30] audit: type=1326 audit(1751953086.038:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10851 comm="syz.3.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2a98e929 code=0x7ffc0000 [ 526.328173][ T30] audit: type=1326 audit(1751953086.038:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10851 comm="syz.3.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7fab2a98e929 code=0x7ffc0000 [ 526.350494][ C1] vkms_vblank_simulate: vblank timer overrun [ 526.358520][ T30] audit: type=1326 audit(1751953086.038:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10851 comm="syz.3.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2a98e929 code=0x7ffc0000 [ 526.380849][ C1] vkms_vblank_simulate: vblank timer overrun [ 526.415182][ T8648] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 526.485070][ T30] audit: type=1326 audit(1751953086.038:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10851 comm="syz.3.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2a98e929 code=0x7ffc0000 [ 526.569516][T10858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1258'. [ 526.585447][ T8648] usb 5-1: device descriptor read/64, error -71 [ 526.697666][ T8648] usb usb5-port1: attempt power cycle [ 526.745081][T10864] fuse: Bad value for 'user_id' [ 526.750020][T10864] fuse: Bad value for 'user_id' [ 527.033552][T10848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1254'. [ 527.043611][ T8648] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 527.065971][ T8648] usb 5-1: device descriptor read/8, error -71 [ 527.305387][ T8648] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 527.360984][ T8648] usb 5-1: device descriptor read/8, error -71 [ 527.475882][ T8648] usb usb5-port1: unable to enumerate USB device [ 527.507558][T10871] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1262'. [ 528.898629][T10844] syz.4.1253 (10844) used greatest stack depth: 19624 bytes left [ 529.334893][ T8648] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 529.515407][ T8648] usb 1-1: Using ep0 maxpacket: 8 [ 529.541175][ T8648] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 529.594290][ T8648] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 529.655229][ T8648] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.785381][ T8648] usb 1-1: Product: syz [ 529.789602][ T8648] usb 1-1: Manufacturer: syz [ 529.815377][ T8648] usb 1-1: SerialNumber: syz [ 529.881903][ T8648] usb 1-1: config 0 descriptor?? [ 529.898172][ T8648] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 530.077185][T10904] netdevsim netdevsim2: Direct firmware load for mu failed with error -2 [ 530.085900][T10904] netdevsim netdevsim2: Falling back to sysfs fallback for: mu [ 530.251499][T10899] loop2: detected capacity change from 0 to 7 [ 530.270653][ T7732] Dev loop2: unable to read RDB block 7 [ 530.278025][ T7732] loop2: AHDI p1 p2 p3 [ 530.287578][ T7732] loop2: partition table partially beyond EOD, truncated [ 530.312241][ T7732] loop2: p1 start 1601398130 is beyond EOD, truncated [ 530.348035][ T7732] loop2: p2 start 1702059890 is beyond EOD, truncated [ 530.374241][T10899] Dev loop2: unable to read RDB block 7 [ 530.381305][T10899] loop2: AHDI p1 p2 p3 [ 530.396347][T10899] loop2: partition table partially beyond EOD, truncated [ 530.404367][T10899] loop2: p1 start 1601398130 is beyond EOD, truncated [ 530.415072][T10899] loop2: p2 start 1702059890 is beyond EOD, truncated [ 530.925066][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 531.314649][T10906] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1274'. [ 531.326740][ T5926] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 531.525049][ T5926] usb 5-1: Using ep0 maxpacket: 16 [ 531.532081][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.547772][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.558066][ T5926] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 531.571465][ T5926] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 531.580787][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.596910][ T5926] usb 5-1: config 0 descriptor?? [ 531.709446][ T8648] gspca_zc3xx: reg_r err -32 [ 531.727479][ T9] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 531.895553][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 531.908729][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.924974][ T56] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 531.955757][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.976153][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 531.997110][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.026595][T10915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1276'. [ 532.027202][ T9] usb 4-1: config 0 descriptor?? [ 532.036022][T10915] 8021q: VLANs not supported on ip6_vti0 [ 532.067630][ T5926] usbhid 5-1:0.0: can't add hid device: -71 [ 532.087755][ T5926] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 532.125620][ T56] usb 3-1: Using ep0 maxpacket: 16 [ 532.136546][ T56] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.139011][ T5926] usb 5-1: USB disconnect, device number 113 [ 532.169875][ T56] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 532.213771][ T56] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 532.248285][ T56] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 532.265383][ T56] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 532.280404][ T56] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 532.290122][ T56] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 532.298604][ T8648] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 532.305437][ T8648] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 532.319371][ T56] usb 3-1: Manufacturer: syz [ 532.546333][ T8648] usb 1-1: USB disconnect, device number 92 [ 532.759448][ T56] usb 3-1: config 0 descriptor?? [ 532.911678][T10947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.927784][T10947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.125983][ T5852] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 533.186833][ T56] rc_core: IR keymap rc-hauppauge not found [ 533.196289][ T56] Registered IR keymap rc-empty [ 533.202731][ T56] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 533.224954][ T56] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 533.259476][ T56] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 533.283457][ T5852] usb 5-1: config 252 has an invalid interface number: 254 but max is 0 [ 533.292803][ T5852] usb 5-1: config 252 has no interface number 0 [ 533.304598][ T56] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input37 [ 533.317450][ T10] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 533.327862][ T5852] usb 5-1: config 252 interface 254 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 533.341662][ T5852] usb 5-1: config 252 interface 254 altsetting 1 bulk endpoint 0x6 has invalid maxpacket 0 [ 533.359077][ T56] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 533.369229][ T5852] usb 5-1: config 252 interface 254 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0 [ 533.381905][ T5852] usb 5-1: config 252 interface 254 has no altsetting 0 [ 533.393637][ T5852] usb 5-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=46.29 [ 533.403372][ T56] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 533.414622][ T5852] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.426127][ T56] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 533.433780][ T5852] usb 5-1: Product: syz [ 533.440930][ T5852] usb 5-1: Manufacturer: syz [ 533.448386][ T56] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 533.458936][ T5852] usb 5-1: SerialNumber: syz [ 533.479551][ T56] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 533.499103][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.522402][ T5852] bfusb 5-1:252.254: probe with driver bfusb failed with error -5 [ 533.533300][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 533.631692][ T56] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 533.648049][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 533.667890][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 533.668109][ T10] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 533.689278][ T56] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 533.702295][ T9] usb 4-1: USB disconnect, device number 104 [ 533.706999][ T8565] usb 5-1: USB disconnect, device number 114 [ 533.713823][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.726207][ T56] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 533.736057][ T10] usb 2-1: Product: syz [ 533.740275][ T10] usb 2-1: Manufacturer: syz [ 533.745420][ T10] usb 2-1: SerialNumber: syz [ 533.753204][ T10] usb 2-1: config 0 descriptor?? [ 533.758736][ T56] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 533.785886][ T56] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 533.802937][ T10] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 533.818365][ T56] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 533.848001][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 533.869009][ T56] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 533.890582][ T10] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 533.915580][ T56] usb 3-1: USB disconnect, device number 116 [ 533.922929][ T10] usb 2-1: media controller created [ 533.973069][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 534.123160][ T10] DVB: Unable to find symbol tda10046_attach() [ 534.138851][ T10] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 534.157473][ T10] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 534.515731][ T24] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 534.533911][T10967] loop2: detected capacity change from 0 to 7 [ 534.549668][ T7123] Dev loop2: unable to read RDB block 7 [ 534.565162][ T7123] loop2: AHDI p1 p2 p3 [ 534.569472][ T7123] loop2: partition table partially beyond EOD, truncated [ 534.577323][ T7123] loop2: p1 start 1601398130 is beyond EOD, truncated [ 534.584225][ T7123] loop2: p2 start 1702059890 is beyond EOD, truncated [ 534.594420][T10970] loop2: detected capacity change from 7 to 15 [ 534.608738][T10967] Dev loop2: unable to read RDB block 15 [ 534.618818][T10967] loop2: AHDI p1 p2 p3 [ 534.623071][T10967] loop2: partition table partially beyond EOD, truncated [ 534.632463][T10967] loop2: p1 start 1601398130 is beyond EOD, truncated [ 534.643538][T10967] loop2: p2 start 1702059890 is beyond EOD, truncated [ 534.664848][ T8565] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 534.685144][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 534.710140][ T24] usb 4-1: config 2 has an invalid interface number: 45 but max is 0 [ 534.718562][ T24] usb 4-1: config 2 has no interface number 0 [ 534.724693][ T24] usb 4-1: config 2 interface 45 has no altsetting 0 [ 534.750929][ T24] usb 4-1: New USB device found, idVendor=19d2, idProduct=ff48, bcdDevice=a3.48 [ 534.765553][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.795584][ T24] usb 4-1: Product: syz [ 534.799800][ T24] usb 4-1: Manufacturer: syz [ 534.814678][ T24] usb 4-1: SerialNumber: syz [ 534.824959][ T8565] usb 3-1: device descriptor read/64, error -71 [ 535.045176][ T9] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 535.054965][T10963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.064139][T10963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.074536][ T8565] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 535.098999][ T24] option 4-1:2.45: GSM modem (1-port) converter detected [ 535.111149][ T24] usb 4-1: USB disconnect, device number 105 [ 535.119860][ T24] option 4-1:2.45: device disconnected [ 535.145081][ T2038] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 535.198209][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 535.208452][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 535.222224][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 535.225071][ T8565] usb 3-1: device descriptor read/64, error -71 [ 535.231980][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.250134][ T9] usb 1-1: Product: syz [ 535.254361][ T9] usb 1-1: Manufacturer: syz [ 535.259536][ T9] usb 1-1: SerialNumber: syz [ 535.269409][ T9] usb 1-1: config 0 descriptor?? [ 535.330457][ T2038] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 535.339142][ T2038] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.351555][ T2038] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 535.362180][ T2038] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 535.370614][ T8565] usb usb3-port1: attempt power cycle [ 535.378392][ T2038] usb 5-1: Manufacturer: syz [ 535.385478][ T2038] usb 5-1: config 0 descriptor?? [ 535.465217][ T2038] rc_core: IR keymap rc-hauppauge not found [ 535.471173][ T2038] Registered IR keymap rc-empty [ 535.478106][ T2038] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 535.492444][ T2038] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input38 [ 535.577641][ T9] usb 1-1: USB disconnect, device number 93 [ 535.715473][ T8565] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 535.758887][ T8565] usb 3-1: device descriptor read/8, error -71 [ 535.998760][ C1] igorplugusb 5-1:0.0: receive overflow invalid: 187 [ 536.014951][ T8565] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 536.037300][ T8565] usb 3-1: device descriptor read/8, error -71 [ 536.116747][T10984] Cannot find add_set index 3 as target [ 536.143885][ T10] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 536.163490][ T8565] usb usb3-port1: unable to enumerate USB device [ 536.167116][ T10] usb 2-1: USB disconnect, device number 113 [ 536.219793][T10984] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1295'. [ 536.250192][ T8565] usb 5-1: USB disconnect, device number 115 [ 536.344508][T10988] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 536.502818][T10998] loop2: detected capacity change from 0 to 7 [ 536.513864][ T7123] Dev loop2: unable to read RDB block 7 [ 536.522580][ T7123] loop2: unable to read partition table [ 536.529519][ T7123] loop2: partition table beyond EOD, truncated [ 536.541034][T10998] Dev loop2: unable to read RDB block 7 [ 536.549055][T10998] loop2: unable to read partition table [ 536.559337][T10998] loop2: partition table beyond EOD, truncated [ 536.565414][ T10] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 536.585304][T10998] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 536.730858][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 536.897713][ T10] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 536.907131][ T10] usb 2-1: config 0 has no interface number 0 [ 536.918327][ T10] usb 2-1: New USB device found, idVendor=17e9, idProduct=0d52, bcdDevice=9b.89 [ 536.938332][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.950097][ T10] usb 2-1: Product: syz [ 537.138683][ T10] usb 2-1: Manufacturer: syz [ 537.146016][ T10] usb 2-1: SerialNumber: syz [ 537.175508][ T10] usb 2-1: config 0 descriptor?? [ 537.275771][ T2038] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 537.428479][T10986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.445351][T10986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.453229][ T24] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 537.474966][ T2038] usb 4-1: Using ep0 maxpacket: 16 [ 537.483256][ T10] udl 2-1:0.217: [drm] Unrecognized vendor firmware descriptor [ 537.486872][ T2038] usb 4-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 537.500698][ T2038] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.633023][ T2038] usb 4-1: Product: syz [ 537.643125][ T2038] usb 4-1: Manufacturer: syz [ 537.646287][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 537.653680][ T2038] usb 4-1: SerialNumber: syz [ 537.663348][ T2038] usb 4-1: config 0 descriptor?? [ 537.668288][ T10] [drm] Initialized udl 0.0.1 for 2-1:0.217 on minor 2 [ 537.668313][ T10] [drm] Initialized udl on minor 2 [ 537.670478][ T10] udl 2-1:0.217: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 537.691704][ T10] udl 2-1:0.217: [drm] Cannot find any crtc or sizes [ 537.702491][ T56] udl 2-1:0.217: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 537.715075][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 537.734475][ T10] usb 2-1: USB disconnect, device number 114 [ 537.742253][ T56] udl 2-1:0.217: [drm] Cannot find any crtc or sizes [ 537.744636][ T24] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 537.781731][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.789874][ T24] usb 5-1: Product: syz [ 537.801291][ T24] usb 5-1: Manufacturer: syz [ 537.830371][ T24] usb 5-1: SerialNumber: syz [ 537.864502][ T24] usb 5-1: config 0 descriptor?? [ 537.885911][ T24] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 538.109263][ T10] usb 5-1: USB disconnect, device number 116 [ 538.145325][ T9] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 538.318428][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 538.340866][ T9] usb 3-1: config 1 has an invalid descriptor of length 239, skipping remainder of the config [ 538.372612][ T9] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 538.433764][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 224, changing to 7 [ 538.464113][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 41488, setting to 1024 [ 538.502179][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 538.512260][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.531477][ T9] usb 3-1: Product: syz [ 538.545253][ T9] usb 3-1: Manufacturer: syz [ 538.552371][ T9] usb 3-1: SerialNumber: syz [ 538.595235][ T24] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 538.762950][ T24] usb 2-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 538.775222][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.815640][ T24] usb 2-1: config 0 descriptor?? [ 538.829754][ T24] pwc: Creative Labs Webcam 5 detected. [ 539.053635][ T24] pwc: Failed to set LED on/off time (-71) [ 539.060205][ T24] pwc: send_video_command error -71 [ 539.066531][ T24] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 539.074954][ T24] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 539.091295][ T24] usb 2-1: USB disconnect, device number 115 [ 539.525573][ T10] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 539.699035][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 539.701401][ T10] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 539.732963][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 539.732999][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 539.733046][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 539.733073][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 539.733097][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 539.733244][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 539.733270][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.840338][ T2038] usb_8dev 4-1:0.0 can0: sending command message failed [ 539.840410][ T2038] usb_8dev 4-1:0.0 can0: can't get firmware version [ 539.851784][T11043] loop2: detected capacity change from 0 to 7 [ 539.853792][ T7124] Dev loop2: unable to read RDB block 7 [ 539.853841][ T7124] loop2: unable to read partition table [ 539.854094][ T7124] loop2: partition table beyond EOD, [ 539.914927][ T24] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 539.925902][ T7124] truncated [ 539.966399][ T2038] usb_8dev 4-1:0.0: probe with driver usb_8dev failed with error -22 [ 539.976126][ T10] usb 5-1: GET_CAPABILITIES returned 0 [ 539.981933][ T10] usbtmc 5-1:16.0: can't read capabilities [ 539.983534][ T2038] usb 4-1: USB disconnect, device number 106 [ 540.026654][T11043] Dev loop2: unable to read RDB block 7 [ 540.032423][T11043] loop2: unable to read partition table [ 540.051675][T11043] loop2: partition table beyond EOD, truncated [ 540.078958][T11043] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 540.104900][ T24] usb 1-1: device descriptor read/64, error -71 [ 540.172106][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 540.184568][T11038] usbtmc 5-1:16.0: Unable to send data, error -71 [ 540.192927][ T10] usb 5-1: USB disconnect, device number 117 [ 540.365163][ T24] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 540.506179][ T24] usb 1-1: device descriptor read/64, error -71 [ 540.616370][ T24] usb usb1-port1: attempt power cycle [ 540.823728][ T9] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 540.975013][ T24] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 541.009542][ T24] usb 1-1: device descriptor read/8, error -71 [ 541.093422][ T9] usb 3-1: USB disconnect, device number 121 [ 541.254969][ T5958] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 541.262739][ T24] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 541.365605][ T24] usb 1-1: device descriptor read/8, error -71 [ 541.474919][ T5958] usb 5-1: device descriptor read/64, error -71 [ 541.500834][ T24] usb usb1-port1: unable to enumerate USB device [ 541.525328][T11059] input: syz0 as /devices/virtual/input/input39 [ 541.625121][ T8565] usb 2-1: new full-speed USB device number 116 using dummy_hcd [ 541.745533][ T5958] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 541.792027][T11062] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1316'. [ 541.802639][T11062] 8021q: VLANs not supported on vcan0 [ 541.820078][ T8565] usb 2-1: unable to get BOS descriptor or descriptor too short [ 541.841578][ T8565] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 541.850540][ T8565] usb 2-1: can't read configurations, error -71 [ 541.895142][ T5958] usb 5-1: device descriptor read/64, error -71 [ 542.008480][ T5958] usb usb5-port1: attempt power cycle [ 542.223181][T11078] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 542.235483][ T10] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 542.375511][ T5958] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 542.395497][ T5958] usb 5-1: device descriptor read/8, error -71 [ 542.439321][ T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 542.480315][ T10] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 542.510104][T11083] input: syz1 as /devices/virtual/input/input41 [ 542.552107][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 542.598639][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.619094][ T30] audit: type=1326 audit(1751953102.448:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11082 comm="syz.1.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c6b8e929 code=0x7ffc0000 [ 542.643262][ T5958] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 542.832292][ T5958] usb 5-1: device descriptor read/8, error -71 [ 542.887544][ T30] audit: type=1326 audit(1751953102.448:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11082 comm="syz.1.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c6b8e929 code=0x7ffc0000 [ 542.916869][T11072] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 542.960095][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 542.985383][ T5958] usb usb5-port1: unable to enumerate USB device [ 542.996815][T11087] loop2: detected capacity change from 0 to 7 [ 543.028894][ T30] audit: type=1326 audit(1751953102.448:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11082 comm="syz.1.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd7c6b90847 code=0x7ffc0000 [ 543.051160][ C1] vkms_vblank_simulate: vblank timer overrun [ 543.064555][T11087] Dev loop2: unable to read RDB block 7 [ 543.087845][T11087] loop2: unable to read partition table [ 543.126984][T11087] loop2: partition table beyond EOD, truncated [ 543.144596][T11087] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 543.262564][ T30] audit: type=1326 audit(1751953102.448:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11082 comm="syz.1.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd7c6b907bc code=0x7ffc0000 [ 543.284829][ C1] vkms_vblank_simulate: vblank timer overrun [ 543.362126][ T30] audit: type=1326 audit(1751953102.448:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11082 comm="syz.1.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd7c6b906f4 code=0x7ffc0000 [ 543.384385][ C1] vkms_vblank_simulate: vblank timer overrun [ 543.432568][ T30] audit: type=1326 audit(1751953102.448:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11082 comm="syz.1.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd7c6b906f4 code=0x7ffc0000 [ 543.501107][ T30] audit: type=1326 audit(1751953102.448:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11082 comm="syz.1.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd7c6b8d58a code=0x7ffc0000 [ 543.529325][ T30] audit: type=1326 audit(1751953102.448:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11082 comm="syz.1.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c6b8e929 code=0x7ffc0000 [ 543.551768][ C1] vkms_vblank_simulate: vblank timer overrun [ 543.577692][ T30] audit: type=1326 audit(1751953102.458:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11082 comm="syz.1.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c6b8e929 code=0x7ffc0000 [ 543.600070][ C1] vkms_vblank_simulate: vblank timer overrun [ 543.614881][ T24] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 543.665392][ T5958] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 543.784976][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 543.796058][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 543.808470][ T24] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 543.821373][ T24] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 543.833757][ T5958] usb 2-1: Using ep0 maxpacket: 8 [ 543.843883][ T5958] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 543.855337][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.863399][ T24] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 543.897915][ T5958] usb 2-1: Product: syz [ 543.902136][ T5958] usb 2-1: Manufacturer: syz [ 543.910045][ T24] usb 3-1: config 128 has no interface number 0 [ 543.918733][ T5958] usb 2-1: SerialNumber: syz [ 543.924555][ T24] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 543.943327][ T5958] usb 2-1: config 0 descriptor?? [ 543.948606][ T24] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 543.967172][ T24] usb 3-1: config 128 interface 127 has no altsetting 0 [ 543.982552][ T24] usb 3-1: language id specifier not provided by device, defaulting to English [ 543.994498][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 544.027356][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.049087][ T24] usb 3-1: Product: syz [ 544.063921][ T24] usb 3-1: Manufacturer: syz [ 544.074720][ T24] usb 3-1: SerialNumber: syz [ 544.081391][T11104] Set syz0 is full, maxelem 0 reached [ 544.172288][ T5958] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 544.271386][ T5958] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 544.319843][ T5958] usb 2-1: USB disconnect, device number 118 [ 544.418915][ T24] usb 3-1: USB disconnect, device number 123 [ 544.445015][ T2038] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 544.503901][ T7123] udevd[7123]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 544.605347][ T2038] usb 5-1: device descriptor read/64, error -71 [ 544.744961][ T5958] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 544.854905][ T2038] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 544.889855][ T5958] usb 2-1: device descriptor read/64, error -71 [ 544.945260][ T9] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 544.955373][T11116] syzkaller1: entered promiscuous mode [ 544.963024][T11116] syzkaller1: entered allmulticast mode [ 544.995007][ T2038] usb 5-1: device descriptor read/64, error -71 [ 545.097391][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 545.097414][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 545.097429][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 545.097441][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 545.097480][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 545.097493][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.099460][ T9] usb 1-1: config 0 descriptor?? [ 545.107887][ T2038] usb usb5-port1: attempt power cycle [ 545.145121][ T5958] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 545.188922][ T10] usb 4-1: USB disconnect, device number 107 [ 545.285239][ T5958] usb 2-1: device descriptor read/64, error -71 [ 545.286271][ T24] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 545.395177][ T5958] usb usb2-port1: attempt power cycle [ 545.454878][ T2038] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 545.500533][ T2038] usb 5-1: device descriptor read/8, error -71 [ 545.535388][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.537792][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 545.553325][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 545.569648][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.571343][ T9] usb 1-1: USB disconnect, device number 98 [ 545.595368][ T24] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 545.618506][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.632255][ T24] usb 3-1: config 0 descriptor?? [ 545.765135][ T2038] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 545.772964][ T5958] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 545.796994][ T5958] usb 2-1: device descriptor read/8, error -71 [ 545.803338][ T2038] usb 5-1: device descriptor read/8, error -71 [ 545.915918][ T2038] usb usb5-port1: unable to enumerate USB device [ 546.044911][ T5958] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 546.064132][ T24] hid-steam 0003:28DE:1142.0018: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 546.085905][ T5958] usb 2-1: device descriptor read/8, error -71 [ 546.155019][ T24] hid-steam 0003:28DE:1142.0018: Steam wireless receiver connected [ 546.210721][ T5958] usb usb2-port1: unable to enumerate USB device [ 546.218796][T11127] loop2: detected capacity change from 0 to 7 [ 546.228854][T11127] Dev loop2: unable to read RDB block 7 [ 546.240881][T11127] loop2: unable to read partition table [ 546.244398][ T24] hid-steam 0003:28DE:1142.0019: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 546.253291][T11127] loop2: partition table beyond EOD, truncated [ 546.295431][T11127] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 546.473732][T11130] loop2: detected capacity change from 0 to 7 [ 546.490266][ T7124] loop2: [ 546.493254][ T7124] loop2: partition table partially beyond EOD, truncated [ 546.520533][T11130] loop2: [ 546.525985][T11130] loop2: partition table partially beyond EOD, truncated [ 546.798057][T11132] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1338'. [ 546.987997][ T24] usb 3-1: USB disconnect, device number 124 [ 547.024378][ T24] hid-steam 0003:28DE:1142.0018: Steam wireless receiver disconnected [ 547.102812][T11138] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 547.124867][T11138] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 547.546363][T11164] loop2: detected capacity change from 0 to 7 [ 547.574993][T11165] Dev loop2: unable to read RDB block 7 [ 547.580634][T11165] loop2: unable to read partition table [ 547.587792][T11165] loop2: partition table beyond EOD, truncated [ 547.610584][T11164] Dev loop2: unable to read RDB block 7 [ 547.616566][T11164] loop2: unable to read partition table [ 547.622643][T11164] loop2: partition table beyond EOD, truncated [ 547.632743][T11164] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 547.724087][T11167] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1349'. [ 547.735004][T11167] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1349'. [ 547.744141][T11167] netlink: 'syz.4.1349': attribute type 3 has an invalid length. [ 547.800580][T11167] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1349'. [ 547.830143][T11173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.864158][T11173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.888381][T11178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.897452][T11173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.897817][T11178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.927854][T11173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.939002][T11170] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 547.951187][T11170] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 547.959588][T11170] CPU: 1 UID: 0 PID: 11170 Comm: syz.2.1350 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 547.969907][T11170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 547.979964][T11170] RIP: 0010:__list_del_entry_valid_or_report+0x25/0x190 [ 547.986913][T11170] Code: 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 41 55 41 54 53 48 89 fb 49 bd 00 00 00 00 00 fc ff df 48 83 c7 08 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 5f d3 5b fd 4c 8b 7b 08 48 89 d8 48 c1 e8 [ 548.006526][T11170] RSP: 0018:ffffc90003596f80 EFLAGS: 00010202 [ 548.012596][T11170] RAX: 000000000000000b RBX: 0000000000000050 RCX: ffff88807c00bc00 [ 548.020566][T11170] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 548.028537][T11170] RBP: dffffc0000000000 R08: ffff88807c00bc00 R09: 0000000000000002 [ 548.036511][T11170] R10: 00000000ffffffff R11: ffffffff8986fec0 R12: 0000000000000000 [ 548.044485][T11170] R13: dffffc0000000000 R14: 0000000000000050 R15: ffff88807c0b3800 [ 548.052545][T11170] FS: 00007fa270cd56c0(0000) GS:ffff888125d1d000(0000) knlGS:0000000000000000 [ 548.061475][T11170] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 548.068146][T11170] CR2: 0000200000003000 CR3: 000000004e8a6000 CR4: 00000000003526f0 [ 548.076124][T11170] Call Trace: [ 548.079399][T11170] [ 548.082331][T11170] drr_qlen_notify+0x2c/0xf0 [ 548.086930][T11170] qdisc_tree_reduce_backlog+0x29c/0x480 [ 548.092576][T11170] ? qdisc_tree_reduce_backlog+0x3c/0x480 [ 548.098306][T11170] fq_change+0x1519/0x1f50 [ 548.102753][T11170] ? __pfx_fq_change+0x10/0x10 [ 548.107538][T11170] ? __hrtimer_setup+0x187/0x210 [ 548.112488][T11170] fq_init+0x699/0x960 [ 548.116574][T11170] ? __pfx_fq_init+0x10/0x10 [ 548.121171][T11170] ? lockdep_rtnl_is_held+0x26/0x40 [ 548.126377][T11170] ? qdisc_lookup+0x36d/0x6d0 [ 548.131060][T11170] ? __pfx_fq_init+0x10/0x10 [ 548.135657][T11170] qdisc_create+0x7ac/0xea0 [ 548.140162][T11170] tc_modify_qdisc+0x1426/0x2010 [ 548.145104][T11170] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 548.150399][T11170] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 548.155682][T11170] rtnetlink_rcv_msg+0x779/0xb70 [ 548.160627][T11170] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 548.165742][T11170] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 548.171204][T11170] ? ref_tracker_free+0x63a/0x7d0 [ 548.176241][T11170] ? __copy_skb_header+0xa7/0x550 [ 548.181271][T11170] ? __pfx_ref_tracker_free+0x10/0x10 [ 548.186652][T11170] ? __skb_clone+0x63/0x7a0 [ 548.191174][T11170] netlink_rcv_skb+0x208/0x470 [ 548.196029][T11170] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 548.201505][T11170] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 548.206813][T11170] ? netlink_deliver_tap+0x2e/0x1b0 [ 548.212021][T11170] ? netlink_deliver_tap+0x2e/0x1b0 [ 548.217227][T11170] netlink_unicast+0x75b/0x8d0 [ 548.222001][T11170] netlink_sendmsg+0x805/0xb30 [ 548.226771][T11170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 548.232067][T11170] ? aa_sock_msg_perm+0x94/0x160 [ 548.237015][T11170] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 548.242308][T11170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 548.247598][T11170] __sock_sendmsg+0x21c/0x270 [ 548.252285][T11170] ____sys_sendmsg+0x505/0x830 [ 548.257064][T11170] ? __pfx_____sys_sendmsg+0x10/0x10 [ 548.262363][T11170] ? import_iovec+0x74/0xa0 [ 548.266898][T11170] ___sys_sendmsg+0x21f/0x2a0 [ 548.271582][T11170] ? __pfx____sys_sendmsg+0x10/0x10 [ 548.276798][T11170] ? __fget_files+0x2a/0x420 [ 548.281393][T11170] ? __fget_files+0x3a0/0x420 [ 548.286076][T11170] __x64_sys_sendmsg+0x19b/0x260 [ 548.291022][T11170] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 548.296491][T11170] ? rcu_is_watching+0x15/0xb0 [ 548.301287][T11170] ? do_syscall_64+0xbe/0x3b0 [ 548.305968][T11170] do_syscall_64+0xfa/0x3b0 [ 548.310472][T11170] ? lockdep_hardirqs_on+0x9c/0x150 [ 548.315681][T11170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.321752][T11170] ? clear_bhb_loop+0x60/0xb0 [ 548.326429][T11170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.332322][T11170] RIP: 0033:0x7fa26fd8e929 [ 548.336739][T11170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.356354][T11170] RSP: 002b:00007fa270cd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 548.364772][T11170] RAX: ffffffffffffffda RBX: 00007fa26ffb5fa0 RCX: 00007fa26fd8e929 [ 548.372771][T11170] RDX: 0000000004008000 RSI: 0000200000000200 RDI: 0000000000000087 [ 548.380768][T11170] RBP: 00007fa26fe10b39 R08: 0000000000000000 R09: 0000000000000000 [ 548.388746][T11170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 548.396722][T11170] R13: 0000000000000000 R14: 00007fa26ffb5fa0 R15: 00007fa2700dfa28 [ 548.404711][T11170] [ 548.407738][T11170] Modules linked in: [ 548.411765][T11170] ---[ end trace 0000000000000000 ]--- [ 548.417285][T11170] RIP: 0010:__list_del_entry_valid_or_report+0x25/0x190 [ 548.424261][T11170] Code: 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 41 55 41 54 53 48 89 fb 49 bd 00 00 00 00 00 fc ff df 48 83 c7 08 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 5f d3 5b fd 4c 8b 7b 08 48 89 d8 48 c1 e8 [ 548.443924][T11170] RSP: 0018:ffffc90003596f80 EFLAGS: 00010202 [ 548.450051][T11170] RAX: 000000000000000b RBX: 0000000000000050 RCX: ffff88807c00bc00 [ 548.458064][T11170] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 548.466086][T11170] RBP: dffffc0000000000 R08: ffff88807c00bc00 R09: 0000000000000002 [ 548.474071][T11170] R10: 00000000ffffffff R11: ffffffff8986fec0 R12: 0000000000000000 [ 548.482096][T11170] R13: dffffc0000000000 R14: 0000000000000050 R15: ffff88807c0b3800 [ 548.490130][T11170] FS: 00007fa270cd56c0(0000) GS:ffff888125d1d000(0000) knlGS:0000000000000000 [ 548.499123][T11170] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 548.505754][T11170] CR2: 0000200000003000 CR3: 000000004e8a6000 CR4: 00000000003526f0 [ 548.513747][T11170] Kernel panic - not syncing: Fatal exception in interrupt [ 548.521188][T11170] Kernel Offset: disabled [ 548.525505][T11170] Rebooting in 86400 seconds..