last executing test programs: 12.877827074s ago: executing program 1 (id=2390): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x8, 0x3a, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x1, 0x8}}}}}}, 0x0) 12.695099557s ago: executing program 1 (id=2392): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xb3a4, 0x8000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) lgetxattr(0x0, &(0x7f00000000c0)=@known='system.posix_acl_default\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value, &(0x7f0000000180)=0x8) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0x8dcacfa1c6c2afd6, 0xc9100120, 0x0, 0xfffffffffffffd25) 12.465235523s ago: executing program 1 (id=2393): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0xfd, 0x7fffffff}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000002c0)='source\x00\xb5\x838\x8d\xbd\xdf\x10\x9a\xf2Rm\xb6\xe0\xf9\xac\xa2\x06n\xcb\xd5\xa7\t\x00\x00\x00\x00\x00\x00\x00\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00bF\xec\x10\x89M\xd7Nd\xfeP\x00\x00\x00\x00', &(0x7f0000003100)='.\n#)|:\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKz\xe1vBU\xf1\\@\x10\xf0\x7f\xdfU\xe3\x9b\xd1Aq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x06M\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n=//\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x00\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcd\x86jBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xf8`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6\x98#\xf4C\x94\b\xe9\xdc_\xe6g\x00\xc1]\xe1g\x9b\xa6\xf5\x14\xbb{\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997A0J=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c\x00%-{\xe2\xb2f\xa6\xcf\x92A\x82#}\xc9:\xbeW\x90\x06\x8e0\xf84\x94\x80\xa2[Y(\xbe\v\xd0\x00\x89\xceP\x9fs\xbb\xc8rX\x03\xa2\xad\xb8\xb63\xfc\xcb\xf3\x95\xa9\x89L\xcf\x10\xef\xfcZ\xff\xceX-\xbeu.\xd4z\xccW\x95\xc1\xf1\xf5_\x93\xb6\x16\xe1\x86\f8\x9b\x89\x84)^\x99j\xbc\xbe\xc9o\xe4\x99\xfaP\xba@u\xc2\xe0\r\x0e\x06-\xab\xe3\xe4\xe3^#\xc5P^\xae\x8a\x1aW8\xf9\xbd\xc5\xce\"\xa2\x90\xd7+rvpY\x8c\xc6\x14#\xb8>}?7\xe9\xaa\x9a\v\xbf\x89\xa9\xde\x00\xa3\n\xc1\xff\xdf\xc4/L\xd8{\x1a\x04\xee\'+\x8e\xa3\x12\vGp:\x9d\xf0\x98\xfdo\xf3\x9cW\xedB\x9a\x80\xb2\x85\xf3QduT\x8bfJcv\x19<\x84\xcb\x19\x86\x9e\xeb\xd2\xb0\x14\xbe\n{\xd80\x12x\x1a\xc1\x8d]\xa3\x19\xc8\xfdR\x0f\xd1\x19W\xdeNR\xf9\xb9\x97\xf5\x00\x1c\xaa\x8c\xafU*\x061\'wD\xf8\x9f\xbd\xd75\x02f\x04\r\'\xae\tI#\xa8\xe2\xd4\xe2\xc6\x0e\xfa\x81\xaa\xf3%\x90\x9c\xcd\xb7\xe2\xcbX\xa9\x11}!\"\xed%\xec)s\xd0p\x16Z\x82@wQ3i\xb1Q=}\xfc\xb6\x00\xcb\x8dvB\xd2i\xd3up\xa3\x84X\x11\x8d_5\xcdHm\xd6\xc9\xe1\x9e@\xd91\xdb~\xbd\x11\x0e|f\xff\xa4)l\x86\xdb`s\xc7&B\xbb\xeaZ\xdd\xa4m\xab\x80\xfb\rh.\xeca\x04}\f\xdfSu\x11\x80\xa1\xccutgk[\x1f/\xe0\xaf\x03\fC\xa5\xca\xfeQ\x9b\xf3\xa1{q\xbc\xa6F\xad\x7f\x1bn\xf0\xc9x\xff', 0x0) read(r2, &(0x7f00000000c0)=""/173, 0xad) close(r2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) r3 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xb496, 0x8000, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000009500000052573abcbbb080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) socket$netlink(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) mkdir(0x0, 0x0) 12.328783226s ago: executing program 4 (id=2394): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000740)={0x8, 0x0, [{0x2, 0x4, 0x1, 0x0, @adapter={0x87e, 0x10, 0x1, 0xfffff6df}}, {0x2, 0x2, 0x0, 0x0, @sint={0x6, 0x2}}, {0x80, 0x3, 0x1, 0x0, @irqchip={0x80, 0x6}}, {0x0, 0x1, 0x0, 0x0, @irqchip={0x10000, 0x59f0}}, {0x2, 0x3, 0x0, 0x0, @sint={0xd60, 0xa6}}, {0x2596d635, 0x4, 0x0, 0x0, @sint={0x71, 0x5}}, {0x0, 0x1, 0x0, 0x0, @msi={0x2, 0x4fc, 0x0, 0xfffffffa}}, {0xfffffff1, 0x2, 0x1, 0x0, @sint={0x0, 0xfffffffa}}]}) close(r1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = userfaultfd(0x801) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x2}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000080)={0x0, 0x0, 0x8, "fa0fffffffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f00000005c0)={0x40, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x4, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50) openat$pfkey(0xffffff9c, &(0x7f0000000040), 0x8040, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x2, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x12, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0x4000022}, @call={0x85, 0x0, 0x0, 0x25}, @generic={0x9, 0x6, 0x8, 0x0, 0x56}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x8, 0x8, &(0x7f00000002c0)="b8000001003e0000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 10.268846952s ago: executing program 0 (id=2407): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001c00)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00', 0x5}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000200)="8fbef043174943d6cc450f996c53cea57426a592de07277de92809730a6cec67a9c37317195b830750b3602ca76166874ade6273f1a71082", 0x38}, {&(0x7f0000000240)="24cff2d1aa0bb31e76e0386317d65093489f837e910e4f02632b907eceafbc41c63009deb5c4ebdff25eefadc0d6612c1f63accd1fe92705d9aef19dbbd6b4ae733b7f62607f424c1f925d95c1156443847d04ac1470155f0f14d4193f228805f05c7b21a2fd8c8db99545ef17576ceda9c8f69add0069488a82cb1565299c89f91b2eb6989f3e1de720c91108b95628ed0cd691dbc7ac8ce6bf145bfd1b609aa1fc1483bc4551d5", 0xa8}], 0x2}}, {{&(0x7f0000000340)={0xa, 0x4e22, 0xffffff8f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000380)="b56e", 0x2}, {&(0x7f00000003c0)="f9f0cf3426e558c7f8cc1e4e6d53ea9059c72d451c514c5ae09270c7b3a8f8a547c9d4bd9e53871a2339643872e41ae670dd102c4fd5c1506e5fba9a0651184a5b02846c95870c55dd8d820b81", 0x4d}, {&(0x7f0000000440)="4b7c7d97991cd28277e63fb21b5574d99e04f3c63c869186ca86938534babdafbb5cd37afbf20defee5186adcf38e9310f65bc98939ea38bbca9f0e07221831a1c1acfa74cd86f614f8f9784ece80a1e1e41339891d06e3b4204af9c69458c7389d6c46cdc9212a0abe6fb6dc300c81874767c742fd960bba13f087f6b9698a33118551982135aad6ad4689b3e40b6c54a0a54bc63d9c05ec49c5a4e12e3d8db987b36fa6426909728be71adc6acf2ad7b35309257ea0ea10f", 0xb9}, {&(0x7f0000000500)="8c81fe7fa82d79", 0x7}, {&(0x7f0000000540)="c3838036beb22693434dc67cc00bbe5c8bca32bebf4ed48100c0dcb01a87df6a22b4d794ee01a558b74813a8a864412de4ea7623739d5114c293c9cefd58b56056735085b2ba9b3f05a6d195bf5463df2b6cefcbb4e42642fa06b8a62b71af649005903672fb2ff72dd4c917e0dbcbae533a964fb80ef7ae9b5d22b6763ff41c47c75aaf7b9b", 0x86}, {&(0x7f0000000600)="fafb547ee77e9c6bb801d30d28933beb6e4aafbf02484d11356c4be3646054257ed2798485433dbe320457b31b56eb05a1c76613384ae488d4f721a169feade2", 0x40}, {&(0x7f0000000640)="ad172ee656df2b6e817c0b539fc5d91e2394dfecdfb0ba40bdfd4b9f709171dd6b4e51d11439601e584eae30f57d2f464b95bbf37408bc3eea62a6cb9fe5a0713e81777aaeb09057c89979d320290ddad8be261ef72dc647417c9426561a6a0d53ae4665744c7fd47ee72294f0f5dc6cb0e79729b8142979d9e1d19361bb839902233e0e274e406ed3200d86d05f", 0x8e}], 0x7, &(0x7f0000000740)=[@hopopts={{0x3c, 0x29, 0x36, {0xe, 0x5, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfffffff7}]}}}], 0x3c}}, {{&(0x7f0000000780)={0xa, 0x4e21, 0x0, @empty, 0x2}, 0x1c, &(0x7f0000000bc0)=[{&(0x7f00000007c0)="8c7679eb1803501fe39e4085297e07158a723e75fc89dad3dcbb00d1171e1e04e0dba5f48077512dac848a058353401c140783ffa6d7ee6f447de701148b82c8fed20435f9ef9e48a66ec2f36d651671be070cb7b4654d2721b569dc2742d713fa68364a47e16471bf205c8b1c4f764869f4acba7a6f1caf1547c5bd55f83e6ed0fdf58ac094d1271884f8f206d92f986a3462973b97e77cbcc9219554606c02ee95a107b8d5d7fd9c0af182449415416b2a0cff07d2a6cbc748f4806663d0130ae8fc5726a90191a885fe21f9b451d496db2e0a9938317a6dcabeae68ea8d", 0xdf}, {&(0x7f00000008c0)="ea144333e7eb56482df6143c9792f1465a3f855c947775e50eed3ad321a3c2c55cffd86b1d75c2a90797563cb5f5b12136cd4ff72fbd0fae5325ac6b780dcd319eaf256019df64122dfb000f4bf3cdf8bc80bf2eca8cc4fc3d98fc31ef9d3fcb7dc3f3c31eb6caf3f882ed3acb7cc35250ecb4965a564a797ceb87a95184bc6dc60f00027683946d98cd3d7b6756e573ecbb8e859f977517d478e207541810d007e4055ef7f0a637e92ebb02dbf6a45eab0db9a7ebb052870675fd5979f5718957f77627769837fc871ee1f3d0fe73cc01ef5989ea105ebb633f3075899371b276a2bafb46ae88053256273102b6b37b277e", 0xf2}, {&(0x7f00000009c0)="b122ff4d979acdd47be171b4ed31b8305e40b50b3b438e41a84ad145995aa9a7336b2bc61518a82d8d6e5ef642d6af14a9a1eebef0bfce35dc265bc8803ee7926bb5307c27a5dd0c1463affc1173ff323bbc6f41bcb2cb", 0x57}, {&(0x7f0000000a40)="5a9567735ce0cc1e598112db4bede9a5a73ceb304c2e8c2615e5fcf80d2ae6fde6ed8889f534420ba6aef5323c1957f23d3e68ef04b63df58affa5698ebedbf7fae2c398dad6523e943fafeb5b7f48328b676d33dfb24c1c001c57cc2324691f94cfadbbf4cd3c6d8e39fdb93dcad9c9a894a5fc57f0911e157b74da13cb37fc7e400c5cc44f984da0d9ae61b906cb66a91748d1befaa931bb47808fa7bef3871d6df011d7aa5cf64dc3874f66a0d3b4a906e813a0c770361af15370ca653faf4408f0851835ec28614a5f9baf90303eecd9fd6f31a7443e5cae0ba92eea", 0xde}, {&(0x7f0000000b40)="5dfe147c7bdcf1956e245390e23fc523b3ee293f793bf1b35176dbf6b1a2f092b9954aa579a0067b1eaaa63fab17acc86ed99b5a4836144b4f964e72ddde30ffe6c248c5c3a371340320d019b0ecac59e6c6f4a76af6ec123e0531e831ca78280a8d601ec2c5ec48b0ac11e29c8b0d95a90723b1ba3a656c8f40be", 0x7b}], 0x5, &(0x7f0000000c00)=[@flowinfo={{0x10, 0x29, 0xb, 0x8}}, @tclass={{0x10, 0x29, 0x43, 0x2}}, @rthdr={{0x54, 0x29, 0x39, {0x0, 0x8, 0x2, 0x1a, 0x0, [@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @dev={0xfe, 0x80, '\x00', 0x29}]}}}, @hoplimit_2292={{0x10, 0x29, 0x8, 0x7f}}, @hoplimit={{0x10}}], 0x94}}, {{&(0x7f0000000cc0)={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xe}, 0x1c, &(0x7f0000000ec0)=[{&(0x7f0000000d00)='s', 0x1}, {&(0x7f0000000d40)="5193e07c7e8a2a5c44315fb6c08ffe5019f83d8fefaceac0d7c8073b7e18fbb16ce8af802b536bae04fc3fdc3287594206ffa19cde8033c15b4b2e1d18f95b2b03e224ec9655564695bbeca1828e81f19b3a3e4aec43b0729313a57fea4e7a03b95511b66139e7e7f6e8f262c983438eb462db60683e7b004b3c2741bd715d6f65922f24c2ee05f6d74874da24ad86121f27693ae4e23efd957a753a7e8c935a7f342e046278659c7be6a2fd1d64047ed893e67e6b8bab21f3f57cda3b73ca8b928c2e569027b3", 0xc7}, {&(0x7f0000000e40)="2225e1b8a51cb53edf5c446351dcaccc6a82844df195a3c50b406992db078f818786251ce425867745955971a9104277a6c0998580bd7170de5c004cac4ddf62933cbd671c4635e0ccdd", 0x4a}], 0x3, &(0x7f0000000f00)=[@hoplimit_2292={{0x10, 0x29, 0x8, 0x8}}, @rthdr_2292={{0x44, 0x29, 0x39, {0x33, 0x6, 0x0, 0xbe, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast2}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local]}}}, @hopopts_2292={{0x3c, 0x29, 0x36, {0x1, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0x80}, @jumbo, @jumbo={0xc2, 0x4, 0xbd51}, @jumbo={0xc2, 0x4, 0x800}, @pad1, @ra={0x5, 0x2, 0xfff1}, @jumbo={0xc2, 0x4, 0x2020000}, @pad1, @pad1]}}}], 0x90}}, {{&(0x7f0000000fc0)={0xa, 0x4e24, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000001400)=[{&(0x7f0000001000)="bcfafb62036426c104d379df16db94e1ee28340b8523053360fb53d8aba2247c4844557c9878ad3b9324e37ccdde688a51f3db3e2201376dfcc6904e26aad79f4e1730e9", 0x44}, {&(0x7f0000001080)="9c09c87de58e2c951c55d5d6f8e3a310b782ec75b7514b2e6714242b8faad7d61f8bf3", 0x23}, {&(0x7f00000010c0)="91c0f7513282cd5c97f1f806cb09f7e6bb0d10827cb956ad9711b4769cf1f315ba76e43040820f400bc6ba9b0a2f77ce959bffc680e34b216a8a4b9ae57ad888aaf446756813ba551e46f2c479f570a90f450c", 0x53}, {0x0}, {&(0x7f00000011c0)="c7793599b07f709cff2cea533d2ba1afe7c2f15596a09b43c4720261c8cc2a2a97ca10548476fd8febb0f0d730b7e8aa4db72248f3ae55afb271727211ffb2b4ecce0cbe412623838534229a1e995dca5aa5a19a0f53b4c7f356f83657679723b09bc2075d32a16a7fa64a9909a99c2b804d070967069011c3e07ad44a32bb37be1c29ac40d6dcb863a2d5f5bd555d246f7f1437938a7eecd618df02e08c6a7f282260a99ae542e29f5f16ae1eb6c733d6c23c", 0xb3}, {&(0x7f0000001340)="03a7c80c2fc078941f4a15834844f639abe28b8ebb2233f0bd8f713b8763ec83ecf88793a5aa6de92356f55e9ce53810b050acdcb2e03d251b05ca66ce650a290c6941ea854432cfe3846c9abcb1ca65e0a028d5c2cfa53ff588c80cf5bd56709bbfab31a1b561a0ddedced6e444bab58db4ba0d5e146960309977eac228a5666a3d8fe4438b2becf4", 0x89}], 0x6}}, {{&(0x7f0000001440)={0xa, 0x4e20, 0x8, @remote, 0x7}, 0x1c, &(0x7f0000001800)=[{0x0}, {&(0x7f0000001580)="4c34f4e3dc2487663c241967e3509701ddfa", 0x12}, {&(0x7f00000015c0)="cf8db0d8fdca4591cd680fc6f5f36b04754f46ddc945f656c1f96b62c947c62432d4", 0x22}, {&(0x7f0000001600)="438cc9c869f5a4c8b65a26e70229019dd50a4cb6d2fb126232dc68d78173b683a6bfce98889f2bcb28d31c308695005ef18cf687b60ec04296f983b3d4a70e0cfcf2255bb340ba76d8b36dc0980edb5cf99a7635ace7c38fe7c5a9b21c68355b6902ac95cc970ecfe4444f0493c899e3bf5c8df282aa0f5f01a56ae68d9e54a3c60587145ce346e287fed0019b2db5714b1fc06e7cb78ef1571c66dee7a6c0a54187ff699bef4bb08ebb774c14fee6190641fba48608624fe04172a8ca275dfcbd792215e2d44d189f9136e2b76ea4b28abf80ee77e1b13e1ef0466671eb8056e84a68bd32bd8fc4f6277f", 0xeb}, {&(0x7f0000001700)="807e3dc0ce5ad95dcc1d668e2aafa7f0fb3f6922e32598deaf1c7fd47bdf4032cff44c732640b22b1d492f2097b5cb46b52d8ac93534f30de4cd158356e11cf4bf0f3d5b48db7ef12817a67cc3b8736a", 0x50}, {&(0x7f0000001780)}, {&(0x7f00000017c0)="97c92adc3bb334b6e2dc97d368b4fef9a54209c6dba56de83f59292df7c84e", 0x1f}], 0x7}}, {{&(0x7f0000001840)={0xa, 0x4e22, 0xd367, @private0={0xfc, 0x0, '\x00', 0x1}, 0x355}, 0x1c, &(0x7f0000001a00)=[{&(0x7f0000001880)="cdc37c74d276184f2640bd1fa799433fa556f1bad5d334d25c633255af294b2c3a5aa490bb718d768a5def67fbf87b84e34305f9934d69e170271afbfdf9a8d787d0da9f624df72ceeafc9fe33cbbd669d98e70c3c630ec4eb129e5ab6adc10e8b6603ea700b50593cba219787c5ac6235c4510b89a61b8d786c9002b5b037a2b697736f70853a8ce620002654a7fdf1f05f1c11da613612ed9d2bac3753e492f5f18a55cf29b1ea44e71b82aaf112fe5133de0b6c15691e2c93d41ab539654feb9799", 0xc3}, {&(0x7f0000001980)}], 0x2, &(0x7f0000001a40)=[@tclass={{0x10, 0x29, 0x43, 0xfffffdd9}}, @rthdr_2292={{0x74, 0x29, 0x39, {0x73, 0xc, 0x2, 0x4, 0x0, [@empty, @remote, @local, @remote, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @rthdr_2292={{0x94, 0x29, 0x39, {0x35, 0x10, 0x2, 0xf9, 0x0, [@remote, @private0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x23}, @mcast1]}}}, @flowinfo={{0x10, 0x29, 0xb, 0x2}}, @dontfrag={{0x10, 0x29, 0x3e, 0x7}}, @dontfrag={{0x10, 0x29, 0x3e, 0x4}}, @rthdr_2292={{0x44, 0x29, 0x39, {0x2f, 0x6, 0x2, 0x6, 0x0, [@mcast2, @mcast2, @dev={0xfe, 0x80, '\x00', 0x1f}]}}}, @pktinfo={{0x20, 0x29, 0x32, {@empty}}}, @tclass={{0x10, 0x29, 0x43, 0x4}}], 0x1bc}}], 0x7, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x1, 0x1ff, 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14) r2 = inotify_init1(0x80000) statx(0xffffffffffffffff, &(0x7f0000001d00)='./file0\x00', 0x4000, 0x100, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, r3, &(0x7f0000001e40)={0x6, 0x1000, 0x80000001, 0x5, 0x287, 0x5, 0xb, 0x400, 0x8}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x40000000000}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) mkdirat(r4, &(0x7f0000000000)='./file0\x00', 0x45) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007292bd404020305582a80000000109021b0001000000000904000001df7fa9000905", @ANYBLOB="868f54"], 0x0) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r5}, 0x18) 10.039723598s ago: executing program 1 (id=2398): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, r1, 0x401, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0xffffffff, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, &(0x7f0000000040)={0xc, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000900), r0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, r3, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xd5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x8]}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x2, 0xa, 0xffff, 0xe1]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x80) syz_usb_connect$cdc_ncm(0x5, 0x71, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x2, 0x1, 0xe, 0xc0, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "3ab565"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x6de, 0x30f5, 0x2}, {0x6, 0x24, 0x1a, 0x17f, 0x33}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xfe, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x6, 0x7e}}, {{0x9, 0x5, 0x3, 0x2, 0x24, 0x4, 0x75, 0x7f}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x9, 0xb, 0x6, 0x58, 0x81}, 0xc6, &(0x7f0000000340)={0x5, 0xf, 0xc6, 0x6, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "36c786b5260eccb73cfa9af77f617a0e"}, @ssp_cap={0x18, 0x10, 0xa, 0x72, 0x3, 0x3, 0xf, 0x3b86, [0xff0000, 0xff00ff, 0xf]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "ae92a1db073e1eb76804a37b57a0e828"}, @generic={0x7b, 0x10, 0x1, "0a11c3cee768f6504c4bc7846027a2cc66f09d70af7b2c35075c86cafed46c6c27ed902b6e8f23af80d72aca892f869148b6cf0c565c3b47ce7eeeae1af135a1a67b45bfce4c12be39fd2be0c6001f730a52770080b238a80511a1ed1617291bf9e893270af5eb0cc21127d337c8bad0d52a72a53234a340"}]}, 0x9, [{0x4, &(0x7f0000000200)=@lang_id={0x3, 0x3, 0x415}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x445}}, {0x98, &(0x7f0000000500)=@string={0x98, 0x3, "1896006e3d30164f423d1fbbbb6eb24a2971adafcdda487c350fab127322a1832319d3e0dd89ff686975fb8b3d19eea4b87808bc4b33f2142bf941b7904de82ae86b9e6c2b5a59d92c15b4b049a0709be5d2ed77df359a87b0a190ba40e9ee7eaba4dbddd2f9139731f48c0caa3b059937511c984a617c9f0caa0aa66d1664c44010e9370d3f6acfcd374ee40bef74ded35654463d97"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x480a}}, {0xbf, &(0x7f00000005c0)=@string={0xbf, 0x3, "f644e0491b09b6ef980c1e2c8e322b1e05ba4ef9cdbe396cd7addf9c838c766635647a548a8556ddb9ea55b40b02f914866de3f16d2d1372d5a478c72cd40972f8459aded4a44334b6303459f88e35fd836126877562ab4e228f55cbcc756f4d8cdd539f8e2e4b1e7f673ac59bce0dbd924797084f8c3abc3c88f059b15087d9831780aedac15a5960d40cd1b175b275a021d2d583b348c912ac1373d1f0264242b534a47b8479b92feb5581cad253e219a9326a69d91837138d53321a"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x410}}, {0xe4, &(0x7f0000000800)=@string={0xe4, 0x3, "4b980f1bbaf71619b1947d2b469542a687606a39ad1f5ee3749171a877bfde9728cab58d64fc64988b6a02c3cc6107984386457d6203a66579d3ebc1893cb51901fd076643539ed5bd89e5bc515a276e589daf9a832f1b536e783be4590d820476e870ad83ec82c6b2812bffb4b2282244a987c663862e2f1ce2f3aef042998099c335a435bbf8b9f2d0706568032ad47c6cff41b054c97ccc0150d4a266984cf49ed4149a19872d868a0833668e4dbf29d2de3b464e07b6c2a4e8851e67b655b6241b1764a73b939b953f54e5a27b2a2f8b46b203e619f2ef56f7fb8e7ed87e681b"}}]}) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10208, 0x100}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0x3, r7}]}, 0x40}}, 0x24000840) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r8, 0x5b02, 0x0) 9.626865629s ago: executing program 4 (id=2401): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)="fc", 0x7}]) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x6a040000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000080)=0xeeee0000) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x9, 0x8000) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r7, 0xc1205531, &(0x7f00000001c0)={0x883, 0x6, 0x5, 0x1, '\x00', '\x00', '\x00', 0x8, 0xc6a, 0x2, 0x1, "e7f84a22fc299e2801d120a475c2ee6b"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 8.310109776s ago: executing program 4 (id=2402): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x8, 0x3a, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x1, 0x8}}}}}}, 0x0) 8.257763371s ago: executing program 2 (id=2403): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0x5000) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.179479591s ago: executing program 4 (id=2404): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) ppoll(&(0x7f0000000080)=[{r0, 0x800}], 0x1, &(0x7f0000000180)={0x0, 0x3938700}, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) futex(&(0x7f000000cffc)=0xfffffffd, 0x6, 0x1, 0x0, 0x0, 0x43) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x24ffffff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x2cf1389d, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x8, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0x5, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x7, 0x1, 0x407, 0x5, 0xfffffff7, 0x8, 0x4006, 0x6, 0x7, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x6, 0x9, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012b, 0x8004, 0x5, 0x6, 0x129432e2, 0x1, 0xf9, 0xe, 0x10, 0x6c7, 0x9, 0xfffffffc, 0x80000003, 0x203, 0x0, 0x5, 0x2c, 0xe, 0x312, 0xd, 0xea4, 0xa1, 0x4, 0x40000007, 0x7fff, 0x5a7c, 0x7ff, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x401, 0x101, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfdffffff, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x250, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x404, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x8000, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x2, 0x3, 0x8, 0xffff, 0x3, 0x5, 0x6, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x400004, 0x2950bfaf, 0xdfe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x6, 0x40, 0x0, 0x7ff, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x0, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x938, 0x7, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0xfffffff9, 0xc8, 0x9, 0xfffff000, 0x7, 0x3, 0x7e, 0x100, 0x9602, 0x1ff, 0xaf, 0xfffffff9, 0x6, 0x226, 0x5, 0x7, 0x8, 0x30b1d693, 0xa21, 0x1000f40, 0x5, 0x1, 0x6c1b, 0x0, 0x4, 0xffef, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x40fff]}, 0x45c) unshare(0x2040400) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000000)={0xf00001, 0x9, @value=0x7fffffff}) mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffd000/0x2000)=nil) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) getpid() syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x103000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000000740)={0x400, 0x0, 'client0\x00', 0x4, "c3210168c8e2c278", "d91a305eae448287378215b7cf699cb216be93fa3647ddb9731f25bfe8a536cb", 0x1000}) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x6083, 0x3) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x68, &(0x7f0000000080)=ANY=[@ANYBLOB="6400004ee4642b88de9302ec0ffd568d576081b228ad5e0241ee675199f6e4e1f89eeefa164c788b2661ca8f5d759341586ba8690f2f13617309039ed02d4afbc11e0e1beb6c58852c3bfed1d976fcfe558e999dc70b211d3681b5fc84ddea150000fe9b8368ccea"]) r4 = syz_open_procfs(0x0, &(0x7f0000002080)='pagemap\x00') lseek(r4, 0xfffffffffffffffd, 0x1) fcntl$lock(r4, 0x6, &(0x7f0000003980)={0x0, 0x1, 0x9, 0x4}) r5 = syz_io_uring_setup(0x237, &(0x7f0000000100)={0x0, 0x0, 0x10100, 0x0, 0x1eb}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r5, 0x80003, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x18, 0x0, r4, 0x0, &(0x7f0000000280)='./file0\x00', 0x20, 0x3, 0x23456, {0x0, r8}}) 7.68501737s ago: executing program 3 (id=2405): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x57e, 0x2019, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) close_range(r1, r1, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x18, &(0x7f00000016c0)=ANY=[@ANYBLOB="00050538760243895e6e44"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x1d8, 0x3, 0x2}, 0x18, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x10000000000040}}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x404d3, 0x2b}, 0x0, @in6=@mcast1}}, 0xe4) r3 = socket$netlink(0x10, 0x3, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) writev(r4, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000340)="a377", 0xfe00}], 0x2) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 6.469613298s ago: executing program 0 (id=2406): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0x3, 0x280) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x4c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2e5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000043}, 0x90) 6.35230022s ago: executing program 2 (id=2408): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'dummy0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010000104000000010000000000000000", @ANYRES32=0x0, @ANYBLOB="c14d0000000000002000128008000100687372001400028008000100", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000cc0)=@newtfilter={0x264, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x230, 0x2, [@TCA_U32_SEL={0x204, 0x5, {0x9, 0x7f, 0x3, 0x200, 0x8, 0x0, 0x3, 0x8, [{0x4, 0x400000, 0x0, 0x2}, {0x4800, 0x1, 0x9, 0x3}, {0x1a8f, 0x9, 0xfffff801, 0x7}, {0x73, 0x1400, 0x57e76c05, 0x7fff}, {0x7, 0x5, 0x0, 0x81}, {0x7f, 0x1, 0x1, 0x4}, {0x7fffffff, 0x0, 0x9, 0x7}, {0x2, 0x8, 0x2}, {0x7, 0x8, 0xff, 0x6}, {0x401, 0xffffffff, 0x7, 0x7}, {0x2, 0x0, 0x100, 0x6}, {0x6, 0x8, 0x1, 0x9}, {0xe, 0x4, 0x2, 0x4}, {0x4, 0x5b61, 0x0, 0xe37}, {0x1, 0x6, 0x6, 0x3ff}, {0x7, 0x1, 0x401, 0x9}, {0x4, 0x6, 0x5, 0x8001}, {0xfffffffb, 0xd, 0x7f, 0x7f}, {0x2, 0x81, 0x80000000, 0x8}, {0x80000001, 0x20000007, 0x6, 0xe0}, {0x0, 0x9, 0x4, 0xb76}, {0x0, 0x8, 0x4, 0x36c2}, {0x6, 0x0, 0xb, 0x7}, {0x1, 0x5, 0x5, 0x4}, {0x7, 0x200, 0x8, 0x400}, {0xd, 0x6, 0x2, 0x8}, {0x8, 0xffffffff, 0x80, 0x200}, {0x7, 0x7ff, 0x6, 0x401}, {0x400, 0xaef2, 0xffff, 0x1}, {0x10001, 0xfffffffb, 0xfffffffa, 0x1ad}, {0x2, 0x4, 0x800, 0x5}]}}, @TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}, @TCA_U32_SEL={0x14, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x2, 0x100}}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x4}}]}, 0x264}}, 0x24040084) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x700, 0x7, 0x2, 0x4, {{0x2b, 0x4, 0x2, 0x38, 0xac, 0x67, 0x0, 0x7, 0x29, 0x0, @broadcast, @rand_addr=0x64010102, {[@generic={0x88, 0x11, "d671ab16238a1c2846dad610fbf45d"}, @cipso={0x86, 0x14, 0x3, [{0x7, 0xe, "ff2d6ee39bd8aee2465f7088"}]}, @generic={0x88, 0xb, "e6cdbb512bfce2c27b"}, @timestamp_prespec={0x44, 0x34, 0x76, 0x3, 0x0, [{@private=0xa010102}, {@local, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@multicast2, 0x81}, {@remote, 0xffff}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x402}]}, @end, @lsrr={0x83, 0x17, 0x89, [@local, @multicast2, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x27}, @broadcast]}, @noop, @lsrr={0x83, 0x1b, 0xe1, [@empty, @private=0xa010101, @local, @remote, @multicast1, @remote]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2f, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4b, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e65766500002000028005000c0001000000140007000000000000000000000000000000000108000a00", @ANYRES32=r9], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r10}) getsockname$packet(r11, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x17c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_AF_SPEC={0x15c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x28, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x0, 0x2000}, {0x8}]}}, @AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @empty}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8, 0x1c}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x88, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_MPLS={0x4}, @AF_INET={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x0, 0x1, [{0x0, 0x19, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x0, 0x0, 0xb}, {0x0, 0x1a, 0x0, 0x0, 0x6}, {0x0, 0x7, 0x0, 0x0, 0x6}, {0x0, 0x3, 0x0, 0x0, 0xd672}, {0x0, 0x9, 0x0, 0x0, 0x292}, {0x0, 0x8, 0x0, 0x0, 0x10000}, {0x0, 0x9, 0x0, 0x0, 0x3}]}}]}]}, 0x17c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'tunl0\x00'}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}]}, 0x58}}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 6.265709152s ago: executing program 0 (id=2409): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x5) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r3, &(0x7f0000000780)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = socket$kcm(0xa, 0x922000000003, 0x11) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 6.085379777s ago: executing program 2 (id=2410): connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x6, @mcast2={0xff, 0x3}}, 0x1c) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socket$inet(0x2, 0x2, 0x7d) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000640)={0xc, 0x0, &(0x7f0000000600)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="00103900000097e2582c923b710c2949ce2677dafbd48274a055e8b267b42edd25791ee26c7a0500000000000000c6837e96fb561bd76f00f6f8069393f674"], &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x5}, 0x0, &(0x7f0000000780)={0x20, 0x85, 0x4, 0xffffff7f}, &(0x7f00000007c0)={0x20, 0x83, 0x2}, &(0x7f0000000800)={0x20, 0x87, 0x2, 0x40}, &(0x7f0000000840)={0x20, 0x89, 0x2}}) connect$unix(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x500) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_80211_join_ibss(&(0x7f0000000080)='wlan0\x00', &(0x7f0000000280)=@default_ap_ssid, 0x6, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f17, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x3, 0x40, 0x40, 0x0, 0x10001, 0x2004cc, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x2, 0x0, 0x3, 0x6, 0x1], 0x200000, 0x200650}) ioctl$KVM_RUN(r2, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x4, &(0x7f00000002c0)=[{0x6, 0x4, 0x3, 0x7fff0000}, {0x9, 0x8, 0x9, 0x3}, {0x7, 0x3, 0xf, 0x2}, {0x3, 0x79, 0x4, 0x2}]}) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="826bb66fdd076e80", 0x8, 0x0, 0x0, 0x0) 5.412996525s ago: executing program 4 (id=2411): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r3 = getpgid(0x0) move_pages(r3, 0x6, &(0x7f0000000000)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000024000/0x4000)=nil, &(0x7f0000153000/0x2000)=nil, &(0x7f00000ef000/0x3000)=nil, &(0x7f00000a9000/0x4000)=nil, &(0x7f00000f6000/0x3000)=nil], &(0x7f0000000200)=[0xeda, 0x1f6, 0xf, 0x5, 0x6, 0x5], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000060c0)="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", 0x2000, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f000000c0c0)="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", 0x2000, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x200042, 0x0, 0x3}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x3, 0x3}, 0x10) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f00000050c0)={{{@in6=@remote, @in=@private=0xa010101, 0x4e22, 0x8, 0x4e20, 0xe, 0x2, 0x20, 0xa0, 0x84}, {0xc, 0x100, 0x3, 0x9, 0x3c6e, 0x6, 0x5, 0x8}, {0x3, 0x5, 0x5, 0x2}, 0xf7c, 0x6e6bb5, 0x0, 0x1, 0x1, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x4d4, 0x6c}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3, 0x1, 0x3, 0x0, 0x5b4, 0xb}}, 0xe4) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f00000003c0)=@req3={0x8, 0xd7, 0x1, 0x8, 0x200, 0x3000, 0x50b1}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x18000000000002a0, 0x13, 0x0, &(0x7f00000003c0)="b9e403c6631eb9d84a29394d5aa05dd7cf5c0a", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) preadv(r9, &(0x7f0000000b40)=[{&(0x7f0000000400)=""/22, 0x16}, {0x0}], 0x2, 0xc0, 0x2) 4.606832651s ago: executing program 0 (id=2412): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0xfd, 0x7fffffff}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000002c0)='source\x00\xb5\x838\x8d\xbd\xdf\x10\x9a\xf2Rm\xb6\xe0\xf9\xac\xa2\x06n\xcb\xd5\xa7\t\x00\x00\x00\x00\x00\x00\x00\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00bF\xec\x10\x89M\xd7Nd\xfeP\x00\x00\x00\x00', &(0x7f0000003100)='.\n#)|:\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKz\xe1vBU\xf1\\@\x10\xf0\x7f\xdfU\xe3\x9b\xd1Aq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x06M\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n=//\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x00\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcd\x86jBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xf8`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6\x98#\xf4C\x94\b\xe9\xdc_\xe6g\x00\xc1]\xe1g\x9b\xa6\xf5\x14\xbb{\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997A0J=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c\x00%-{\xe2\xb2f\xa6\xcf\x92A\x82#}\xc9:\xbeW\x90\x06\x8e0\xf84\x94\x80\xa2[Y(\xbe\v\xd0\x00\x89\xceP\x9fs\xbb\xc8rX\x03\xa2\xad\xb8\xb63\xfc\xcb\xf3\x95\xa9\x89L\xcf\x10\xef\xfcZ\xff\xceX-\xbeu.\xd4z\xccW\x95\xc1\xf1\xf5_\x93\xb6\x16\xe1\x86\f8\x9b\x89\x84)^\x99j\xbc\xbe\xc9o\xe4\x99\xfaP\xba@u\xc2\xe0\r\x0e\x06-\xab\xe3\xe4\xe3^#\xc5P^\xae\x8a\x1aW8\xf9\xbd\xc5\xce\"\xa2\x90\xd7+rvpY\x8c\xc6\x14#\xb8>}?7\xe9\xaa\x9a\v\xbf\x89\xa9\xde\x00\xa3\n\xc1\xff\xdf\xc4/L\xd8{\x1a\x04\xee\'+\x8e\xa3\x12\vGp:\x9d\xf0\x98\xfdo\xf3\x9cW\xedB\x9a\x80\xb2\x85\xf3QduT\x8bfJcv\x19<\x84\xcb\x19\x86\x9e\xeb\xd2\xb0\x14\xbe\n{\xd80\x12x\x1a\xc1\x8d]\xa3\x19\xc8\xfdR\x0f\xd1\x19W\xdeNR\xf9\xb9\x97\xf5\x00\x1c\xaa\x8c\xafU*\x061\'wD\xf8\x9f\xbd\xd75\x02f\x04\r\'\xae\tI#\xa8\xe2\xd4\xe2\xc6\x0e\xfa\x81\xaa\xf3%\x90\x9c\xcd\xb7\xe2\xcbX\xa9\x11}!\"\xed%\xec)s\xd0p\x16Z\x82@wQ3i\xb1Q=}\xfc\xb6\x00\xcb\x8dvB\xd2i\xd3up\xa3\x84X\x11\x8d_5\xcdHm\xd6\xc9\xe1\x9e@\xd91\xdb~\xbd\x11\x0e|f\xff\xa4)l\x86\xdb`s\xc7&B\xbb\xeaZ\xdd\xa4m\xab\x80\xfb\rh.\xeca\x04}\f\xdfSu\x11\x80\xa1\xccutgk[\x1f/\xe0\xaf\x03\fC\xa5\xca\xfeQ\x9b\xf3\xa1{q\xbc\xa6F\xad\x7f\x1bn\xf0\xc9x\xff', 0x0) read(r2, &(0x7f00000000c0)=""/173, 0xad) close(r2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) r3 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xb496, 0x8000, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000009500000052573abcbbb080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) socket$netlink(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) mkdir(0x0, 0x0) 4.24151529s ago: executing program 3 (id=2413): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)="fc", 0x7}]) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000440)={"db4c1421593cb4d3f8fe6094dc821bbbe06520701fc6de7b0349f34b0f8c556a9e9aff1355aab8d6da26d74608530f150f127f9e3f0a2f1fff0be9774c95d6c007c91903f78616596487bf50017c56b15385ab264cba5b168c62d971e67e6f3e73d60b5a8adbaaf2af8610c6a91c0a116f619adce4aa91d5a68faf8ee98693d32d8d8244381b5720ef596600e39491d216c22d0725904bab7d90fa8afb8fa04b707410aa300ef098609b4fa6dd77b1b7c321b1fc6356564ce3f90826be3a9a5be186ffc48eb13824e9dae77ed212a0f802074ff4f1725c4ad88cf5bbd36e3406bc59d96e82047631d8be9462ee7e54e5b2897c3fff38eabf67e1e160c2b5e18be06457844d89c9a606b7d25fbde713f4759da0bee1fabe3f71dcca63540f113a2b5edc4b327d1f9610377b97265d4aa875b4bc3c44bf8110d5df1beb1fe54794a0aa52dfc80df1caf7d812b4f1cdba1a6836b45ea2180d08439d411ce8e0755868cc839eaeac73e5d28f9f1990584038cf5fa6bee0c4095a27cc8c7b59519bf2a9bf1fedf54cc2dc6aea6c42c32de40c291e5f422f5c7792a08926af160fb379576dd81bac746232fb246817fc3248097914b75e83cc5eb518ce8fb643b34ca69c3b61f0d94e7db62dd480198d41e0862f1ec4429ab637569884a5ba446a0b09edfd986a2b3e15ee35bbd18610dad6271681ed240b0ffab9199b541013c0aadc36484da57511896c14776a41602aa1426edfbb828897d9c218b7936a0572840ebbc796e888a439b24e640324b511deb6ed0b2ce2f7567447826944b4f34101e492e8d20a2deda950e96e78f86d6d4c976f0c99041c94944309e6ce08d84a7c96677d570d9a57ec0506a4321d9e049b55be883ca3648c27772fc5dbaea5e6c2ded2ce72fb68989ae381fe1394cf6966ab04285d5ff8256bc2e85462b8d89aeeebd5432157c945b5dc1960d9282c6cc007fe029325d6078aef94d4954f956c71bcdf846f41392ebe0d3b289438d24ec4bc073617459a6b232445dd636a9f21140e14b162fd5ef1d626b0ff84884fd63d22cc1b05befb77ea937f3045cc15b125479b262c1e32fca75a5468423288c5776efee744b1fccb5e6d661d9d287cfa8582c96ea34a33c1bbc29c0035657da66a87150bbb885be5ee123e431fd793ea179a0fc77aaee66d874c0616cb32324826b36d0e27d14217ad1131cace3bae4ef82dfbc790e78de53a9bfbdb468bf0eb3ff134073b380858965de2d108862daf3fc6b49ad46f20832238aeaa5d010cf08e37938f0bb7bbeaa970c39ce9327a16fe07565708266ce9ef639bfa08538693b456228aa1c370d64ef9795b7cc208a2c528d381a042d149ed5c7f34ed26a7d5a4401b86434f054389e5dac7a4ee896e406d7b27240d925d478e0eb2202797832d3e2c74f4925ad58377b0d6ae9b97034f94"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000080)=0xeeee0000) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x9, 0x8000) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r7, 0xc1205531, &(0x7f00000001c0)={0x883, 0x6, 0x5, 0x1, '\x00', '\x00', '\x00', 0x8, 0xc6a, 0x2, 0x1, "e7f84a22fc299e2801d120a475c2ee6b"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.215367872s ago: executing program 2 (id=2414): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x2}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sendmsg(r2, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x80000001) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f00000002c0)=r4) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x10000000}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000004c0)=""/182, 0x0, 0x80a0000}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000340)=0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0xa1a) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x200396, @empty}, 0x1c) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x101403, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r6, 0x80044d03, &(0x7f0000000000)) r7 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r7, 0xc008551b, &(0x7f0000000240)=ANY=[]) openat$procfs(0xffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) pipe(&(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 2.898150851s ago: executing program 1 (id=2415): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x8, 0x3a, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x1, 0x8}}}}}}, 0x0) 2.641764348s ago: executing program 3 (id=2416): r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$RTC_IRQP_SET(r0, 0x4004700c, 0x17b8) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x80) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@generic={&(0x7f0000000040)='./file0\x00', r1}, 0x14) bind(r0, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x3, @remote}}, 0x80) setxattr$trusted_overlay_origin(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240), 0x2, 0x0) ioctl$KVM_CAP_STEAL_TIME(r0, 0x4068aea3, &(0x7f0000000280)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x1, 0x7, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7ff}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xf7}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r0, 0x4068aea3, &(0x7f0000000400)={0xc1, 0x0, 0x7}) read$FUSE(r0, &(0x7f0000000480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000024c0)={0x50, 0x0, r2, {0x7, 0x2b, 0x5e, 0x41a01500, 0x7, 0x4, 0x6, 0x2, 0x0, 0x0, 0x40}}, 0x50) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002580)=@filter={'filter\x00', 0xe, 0x4, 0x4c4, 0xffffffff, 0x1fc, 0xc8, 0x0, 0xffffffff, 0xffffffff, 0x3fc, 0x3fc, 0x3fc, 0xffffffff, 0x4, &(0x7f0000002540), {[{{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x110, 0x134, 0x0, {}, [@common=@eui64={{0x24}}, @common=@hbh={{0x48}, {0xfffffc44, 0x0, 0x1, [0x3, 0x6, 0x9db, 0x0, 0x3, 0xff00, 0x1, 0x0, 0xc, 0x4, 0x5, 0x7f, 0x6, 0x7, 0x16, 0xe], 0x6}}]}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x1dc, 0x200, 0x0, {}, [@common=@rt={{0x138}, {0xf1ab, [0x95, 0x5], 0x101, 0x20, 0x0, [@private1, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @mcast1, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @dev={0xfe, 0x80, '\x00', 0x41}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @remote, @dev={0xfe, 0x80, '\x00', 0x2e}, @private2={0xfc, 0x2, '\x00', 0x1}], 0xb}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x520) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000002ac0)={0x80}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000002b40)={'syztnl1\x00', &(0x7f0000002b00)={'sit0\x00', 0x0, 0x700, 0x1, 0x1000, 0x9, {{0x5, 0x4, 0x1, 0x22, 0x14, 0x68, 0x0, 0xfe, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000002b80)={0x2, @sliced={0xff38, [0x3, 0xf5f9, 0x9, 0x3, 0x0, 0xb458, 0x0, 0x7, 0x74c0, 0x9, 0x401, 0x4, 0x5, 0xa8c, 0x4, 0xdba, 0xa, 0x6, 0x8, 0x30, 0x6, 0x326e, 0xfff, 0x1, 0x100, 0x3, 0x1ff, 0x7, 0x1, 0x4, 0xff, 0x8001, 0xff, 0x9, 0x1, 0x8, 0x4, 0x5, 0x4, 0x8000, 0x8, 0x4, 0x81, 0x7a0, 0xf8, 0x0, 0x400, 0xa2], 0x400}}) r4 = socket$caif_stream(0x25, 0x1, 0x4) getpeername(r4, &(0x7f0000002c80)=@llc, &(0x7f0000002d00)=0x80) syz_usb_connect$cdc_ncm(0x3, 0x76, &(0x7f0000002d40)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x80, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "92"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x3, 0x0, 0x10}, {0x6, 0x24, 0x1a, 0x2b40, 0xa}, [@network_terminal={0x7, 0x24, 0xa, 0x3, 0x9, 0x40, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0x9, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xfd, 0xff, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x8, 0x4, 0x10}}}}}}}]}}, &(0x7f0000003140)={0xa, &(0x7f0000002dc0)={0xa, 0x6, 0x150, 0x6, 0x1, 0x4, 0x20, 0x6}, 0x6c, &(0x7f0000002e00)={0x5, 0xf, 0x6c, 0x3, [@generic={0x12, 0x10, 0xa, "ccb1cd153802389ab2bb67ec2c418a"}, @generic={0x4e, 0x10, 0xf, "8a7f5a7f3b5544956d70b56b40d759ddd48ed303fc60fd971bd2721df6bcb78c86241959050dbe0ed74fa63ae031636e1f12a713011a1cb9a171beba12fc775aefaa49ce9f6787500daf2d"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0x6, 0x6}]}, 0x5, [{0x94, &(0x7f0000002e80)=@string={0x94, 0x3, "60b49a1cd4ccf0578f022626d46689051b640a006cadfe73b2e6a8dfa6cd64e8653d133a52467d8dcb204e5a4e082530d3e0b7c39417b9c613e6679414e7ccf017ffe0ef92d47dcec4679fce3489c2f4ab40e39cb969ea7d365de51a3a51d53d7108eb8f8e63985c416886671773bf0c0471ddda44d11c7f851e4a2f4a1bc2fba60c9e0223337dee67ecb455ced7bcb0327f"}}, {0x70, &(0x7f0000002f40)=@string={0x70, 0x3, "876dd3e02159ad87fb398e860763685ecae65d8ebf4cf9b6f116a959ced26ddbc27efcb2e6fe670b8e931fe8e44528ae0dd4d5dfc81552e69426d4847ce1353509c79bb2e5cb7ce2a95c41db863c51fb9bf41e60031a8dae6c7b1ac00613c00f272f6be2faa2190169e79a49334a"}}, {0x61, &(0x7f0000002fc0)=@string={0x61, 0x3, "1cc4379aba4cb0bafaa95dfcae1fc5fae4d29b4a3fb5400af666329c289772851afd5863668efbbbaf4153e5ec951a1aca4e8131324046e1d56a6de5f1af02c95e3574571a596804f41478ac634e66934c343bcaaa68c866045e8267d87d5c"}}, {0x4, &(0x7f0000003040)=@lang_id={0x4, 0x3, 0x412}}, {0xa6, &(0x7f0000003080)=@string={0xa6, 0x3, "f00b143de1f96dd6b330b18ee75b47b4979c8d19d5978f326793793d658281723220651b2ed952fc7b4b65db033a5a7529e54b57cffd06b86c107bfa4b0ef733097b02ae47954ae7a5269c09911987357e674d7feaf0ee55c3234e9535b3472628ccf487865a43ac79e2681e965f6e37374821614b527028563702d2662a9f3fdc3eb1980b3952eb82740de9c1c0b02d77c82b50ff8948b788751cfdc9e5316505bcc2e6"}}]}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000004480)={&(0x7f0000004440)=[{0x9, 0x200, 0xe0, &(0x7f0000003180)="09a8a13206f6830cbcf08125d01e8f09be9114adaa7d5bc391bece25e8faa6ed799a67d87a0e0221c9e16903f3508dba219ac4cfc6ccd267710b80da8a6405673d22d427228f36f723536d98df5e3053bcdfd860846f9f1fdbcb5163a0003d2ba4193384903d46721447b0ef2983cda786853e40101ce6d614df136282b4b417410a414ded03369d8597a1d84416cefd615b6533a17a6ef3cb069be7d29e34203971861ef5a2d4b56b5aa5ba5c733aaf128335939a9d015d0648cecf8f342b73c9d5de333b60ec3103a83b0997f69af99fe4396624921a8e829b538aaa4cb26f"}, {0x3, 0x2000, 0x97, &(0x7f0000003280)="bce4197af5cfe51a94deeaaa072e0dfe2b030f3580c6ecba82aae400e9d28c4a58f3edfa97560dae20b68a1f7c00a9553b0189acd7927d9544c78f0d37ae16bec0176a241354b3883508ac7ec59088c9ed355f566bda7910d0c338990d33184d107e02c0a0896223dd3e774b093f03b3fa287ed4ee1218a76545098dc1bd01656a5e72a0fb338dec94315bebc0aaff55bdd002e25130a7"}, {0x9, 0x8800, 0x1000, &(0x7f0000003340)="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"}, {0x96b, 0x0, 0xe5, &(0x7f0000004340)="6439c71e6894ad26367cf24887299c8b7348e38cd9ece920fabc8a966f3f4b8c9bd7ea31dcb936ed292196d49befc2c6d542277dd05056d5814b3c317528714d297b3036ca16b27e5f509a44a756de82a01d6f6405b2abb4c82e109ace039f05c7374c032b7f254d6adfcf80af8c1bf49f1284ef5e23a8736e9c63c0dc4073e861526b9a6d54f1ff2d0c32ef86e57d0451157c772ffa61c7d7d68389169e703081a63fb206aa143f609e1eabe6b2c530dbe3bfbc5320509a91c82dd61f555bd8d9b4375d516a3b2d766c8f59417a6be9aa702b9bbd02f682cba46730886831f6eda08e9a73"}], 0x4}) r5 = syz_open_dev$dmmidi(&(0x7f00000044c0), 0xfffffff7, 0x200000) ioctl$AUTOFS_IOC_ASKUMOUNT(r5, 0x80049370, &(0x7f0000004500)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000004540)={0x6, 'bridge_slave_1\x00', {0x8}, 0x6}) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r6, 0x4008ae48, &(0x7f0000004580)=0x8000000) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000045c0)={0xffffffffffffffff, 0x1, 0x2, r3, 0x5c9}, 0xc) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0205710, &(0x7f0000004600)={0x0, 0x1000, 0x8, 0x0, 0x80000001}) fcntl$setpipe(r0, 0x407, 0x2) ioctl$KVM_CAP_STEAL_TIME(r0, 0x4068aea3, &(0x7f0000004640)) 2.546450481s ago: executing program 1 (id=2417): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001e00)={0x24, 0x2d, 0x1, 0x70bd2d, 0x25dfdbff, "", [@typed={0x8, 0x144, 0x0, 0x0, @u32=0xffffffff}, @generic='\x00\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x24}], 0x1, 0x0, 0x0, 0x20000000}, 0xc000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x34, 0x2c, 0x73f, 0x600, 0x25dfcbfb, {0x0, 0x0, 0x0, r6, {}, {0xfff2, 0xffff}, {0xffff, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) socket$can_j1939(0x1d, 0x2, 0x7) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000040c41090ea0000000000010902240001000000000904000001030000000921000000012207000905810300000000002cdd97c32f9940203ed6cf3532602872a8b04856cdfc6ddf0b3cc3551d401cecf53192c75e2a9e099259"], 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000180)={0x18, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x4, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r7, 0x0, 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r9, 0x720, &(0x7f00000001c0)={0x0, 0xb2, 0x1, 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x7}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xd4}, 0x0) 2.545378087s ago: executing program 2 (id=2418): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001c00)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00', 0x5}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000200)="8fbef043174943d6cc450f996c53cea57426a592de07277de92809730a6cec67a9c37317195b830750b3602ca76166874ade6273f1a71082", 0x38}, {&(0x7f0000000240)="24cff2d1aa0bb31e76e0386317d65093489f837e910e4f02632b907eceafbc41c63009deb5c4ebdff25eefadc0d6612c1f63accd1fe92705d9aef19dbbd6b4ae733b7f62607f424c1f925d95c1156443847d04ac1470155f0f14d4193f228805f05c7b21a2fd8c8db99545ef17576ceda9c8f69add0069488a82cb1565299c89f91b2eb6989f3e1de720c91108b95628ed0cd691dbc7ac8ce6bf145bfd1b609aa1fc1483bc4551d5", 0xa8}], 0x2}}, {{&(0x7f0000000340)={0xa, 0x4e22, 0xffffff8f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000380)="b56e", 0x2}, {&(0x7f00000003c0)="f9f0cf3426e558c7f8cc1e4e6d53ea9059c72d451c514c5ae09270c7b3a8f8a547c9d4bd9e53871a2339643872e41ae670dd102c4fd5c1506e5fba9a0651184a5b02846c95870c55dd8d820b81", 0x4d}, {&(0x7f0000000440)="4b7c7d97991cd28277e63fb21b5574d99e04f3c63c869186ca86938534babdafbb5cd37afbf20defee5186adcf38e9310f65bc98939ea38bbca9f0e07221831a1c1acfa74cd86f614f8f9784ece80a1e1e41339891d06e3b4204af9c69458c7389d6c46cdc9212a0abe6fb6dc300c81874767c742fd960bba13f087f6b9698a33118551982135aad6ad4689b3e40b6c54a0a54bc63d9c05ec49c5a4e12e3d8db987b36fa6426909728be71adc6acf2ad7b35309257ea0ea10f", 0xb9}, {&(0x7f0000000500)="8c81fe7fa82d79", 0x7}, {&(0x7f0000000540)="c3838036beb22693434dc67cc00bbe5c8bca32bebf4ed48100c0dcb01a87df6a22b4d794ee01a558b74813a8a864412de4ea7623739d5114c293c9cefd58b56056735085b2ba9b3f05a6d195bf5463df2b6cefcbb4e42642fa06b8a62b71af649005903672fb2ff72dd4c917e0dbcbae533a964fb80ef7ae9b5d22b6763ff41c47c75aaf7b9b", 0x86}, {&(0x7f0000000600)="fafb547ee77e9c6bb801d30d28933beb6e4aafbf02484d11356c4be3646054257ed2798485433dbe320457b31b56eb05a1c76613384ae488d4f721a169feade2", 0x40}, {&(0x7f0000000640)="ad172ee656df2b6e817c0b539fc5d91e2394dfecdfb0ba40bdfd4b9f709171dd6b4e51d11439601e584eae30f57d2f464b95bbf37408bc3eea62a6cb9fe5a0713e81777aaeb09057c89979d320290ddad8be261ef72dc647417c9426561a6a0d53ae4665744c7fd47ee72294f0f5dc6cb0e79729b8142979d9e1d19361bb839902233e0e274e406ed3200d86d05f", 0x8e}], 0x7, &(0x7f0000000740)=[@hopopts={{0x3c, 0x29, 0x36, {0xe, 0x5, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfffffff7}]}}}], 0x3c}}, {{&(0x7f0000000780)={0xa, 0x4e21, 0x0, @empty, 0x2}, 0x1c, &(0x7f0000000bc0)=[{&(0x7f00000007c0)="8c7679eb1803501fe39e4085297e07158a723e75fc89dad3dcbb00d1171e1e04e0dba5f48077512dac848a058353401c140783ffa6d7ee6f447de701148b82c8fed20435f9ef9e48a66ec2f36d651671be070cb7b4654d2721b569dc2742d713fa68364a47e16471bf205c8b1c4f764869f4acba7a6f1caf1547c5bd55f83e6ed0fdf58ac094d1271884f8f206d92f986a3462973b97e77cbcc9219554606c02ee95a107b8d5d7fd9c0af182449415416b2a0cff07d2a6cbc748f4806663d0130ae8fc5726a90191a885fe21f9b451d496db2e0a9938317a6dcabeae68ea8d", 0xdf}, {&(0x7f00000008c0)="ea144333e7eb56482df6143c9792f1465a3f855c947775e50eed3ad321a3c2c55cffd86b1d75c2a90797563cb5f5b12136cd4ff72fbd0fae5325ac6b780dcd319eaf256019df64122dfb000f4bf3cdf8bc80bf2eca8cc4fc3d98fc31ef9d3fcb7dc3f3c31eb6caf3f882ed3acb7cc35250ecb4965a564a797ceb87a95184bc6dc60f00027683946d98cd3d7b6756e573ecbb8e859f977517d478e207541810d007e4055ef7f0a637e92ebb02dbf6a45eab0db9a7ebb052870675fd5979f5718957f77627769837fc871ee1f3d0fe73cc01ef5989ea105ebb633f3075899371b276a2bafb46ae88053256273102b6b37b277e", 0xf2}, {&(0x7f00000009c0)="b122ff4d979acdd47be171b4ed31b8305e40b50b3b438e41a84ad145995aa9a7336b2bc61518a82d8d6e5ef642d6af14a9a1eebef0bfce35dc265bc8803ee7926bb5307c27a5dd0c1463affc1173ff323bbc6f41bcb2cb", 0x57}, {&(0x7f0000000a40)="5a9567735ce0cc1e598112db4bede9a5a73ceb304c2e8c2615e5fcf80d2ae6fde6ed8889f534420ba6aef5323c1957f23d3e68ef04b63df58affa5698ebedbf7fae2c398dad6523e943fafeb5b7f48328b676d33dfb24c1c001c57cc2324691f94cfadbbf4cd3c6d8e39fdb93dcad9c9a894a5fc57f0911e157b74da13cb37fc7e400c5cc44f984da0d9ae61b906cb66a91748d1befaa931bb47808fa7bef3871d6df011d7aa5cf64dc3874f66a0d3b4a906e813a0c770361af15370ca653faf4408f0851835ec28614a5f9baf90303eecd9fd6f31a7443e5cae0ba92eea", 0xde}, {&(0x7f0000000b40)="5dfe147c7bdcf1956e245390e23fc523b3ee293f793bf1b35176dbf6b1a2f092b9954aa579a0067b1eaaa63fab17acc86ed99b5a4836144b4f964e72ddde30ffe6c248c5c3a371340320d019b0ecac59e6c6f4a76af6ec123e0531e831ca78280a8d601ec2c5ec48b0ac11e29c8b0d95a90723b1ba3a656c8f40be", 0x7b}], 0x5, &(0x7f0000000c00)=[@flowinfo={{0x10, 0x29, 0xb, 0x8}}, @tclass={{0x10, 0x29, 0x43, 0x2}}, @rthdr={{0x54, 0x29, 0x39, {0x0, 0x8, 0x2, 0x1a, 0x0, [@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @dev={0xfe, 0x80, '\x00', 0x29}]}}}, @hoplimit_2292={{0x10, 0x29, 0x8, 0x7f}}, @hoplimit={{0x10}}], 0x94}}, {{&(0x7f0000000cc0)={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xe}, 0x1c, &(0x7f0000000ec0)=[{&(0x7f0000000d00)='s', 0x1}, {&(0x7f0000000d40)="5193e07c7e8a2a5c44315fb6c08ffe5019f83d8fefaceac0d7c8073b7e18fbb16ce8af802b536bae04fc3fdc3287594206ffa19cde8033c15b4b2e1d18f95b2b03e224ec9655564695bbeca1828e81f19b3a3e4aec43b0729313a57fea4e7a03b95511b66139e7e7f6e8f262c983438eb462db60683e7b004b3c2741bd715d6f65922f24c2ee05f6d74874da24ad86121f27693ae4e23efd957a753a7e8c935a7f342e046278659c7be6a2fd1d64047ed893e67e6b8bab21f3f57cda3b73ca8b928c2e569027b3", 0xc7}, {&(0x7f0000000e40)="2225e1b8a51cb53edf5c446351dcaccc6a82844df195a3c50b406992db078f818786251ce425867745955971a9104277a6c0998580bd7170de5c004cac4ddf62933cbd671c4635e0ccdd", 0x4a}], 0x3, &(0x7f0000000f00)=[@hoplimit_2292={{0x10, 0x29, 0x8, 0x8}}, @rthdr_2292={{0x44, 0x29, 0x39, {0x33, 0x6, 0x0, 0xbe, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast2}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local]}}}, @hopopts_2292={{0x3c, 0x29, 0x36, {0x1, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0x80}, @jumbo, @jumbo={0xc2, 0x4, 0xbd51}, @jumbo={0xc2, 0x4, 0x800}, @pad1, @ra={0x5, 0x2, 0xfff1}, @jumbo={0xc2, 0x4, 0x2020000}, @pad1, @pad1]}}}], 0x90}}, {{&(0x7f0000000fc0)={0xa, 0x4e24, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000001400)=[{&(0x7f0000001000)="bcfafb62036426c104d379df16db94e1ee28340b8523053360fb53d8aba2247c4844557c9878ad3b9324e37ccdde688a51f3db3e2201376dfcc6904e26aad79f4e1730e9", 0x44}, {&(0x7f0000001080)="9c09c87de58e2c951c55d5d6f8e3a310b782ec75b7514b2e6714242b8faad7d61f8bf3", 0x23}, {&(0x7f00000010c0)="91c0f7513282cd5c97f1f806cb09f7e6bb0d10827cb956ad9711b4769cf1f315ba76e43040820f400bc6ba9b0a2f77ce959bffc680e34b216a8a4b9ae57ad888aaf446756813ba551e46f2c479f570a90f450c", 0x53}, {0x0}, {&(0x7f00000011c0)="c7793599b07f709cff2cea533d2ba1afe7c2f15596a09b43c4720261c8cc2a2a97ca10548476fd8febb0f0d730b7e8aa4db72248f3ae55afb271727211ffb2b4ecce0cbe412623838534229a1e995dca5aa5a19a0f53b4c7f356f83657679723b09bc2075d32a16a7fa64a9909a99c2b804d070967069011c3e07ad44a32bb37be1c29ac40d6dcb863a2d5f5bd555d246f7f1437938a7eecd618df02e08c6a7f282260a99ae542e29f5f16ae1eb6c733d6c23c", 0xb3}, {&(0x7f0000001340)="03a7c80c2fc078941f4a15834844f639abe28b8ebb2233f0bd8f713b8763ec83ecf88793a5aa6de92356f55e9ce53810b050acdcb2e03d251b05ca66ce650a290c6941ea854432cfe3846c9abcb1ca65e0a028d5c2cfa53ff588c80cf5bd56709bbfab31a1b561a0ddedced6e444bab58db4ba0d5e146960309977eac228a5666a3d8fe4438b2becf4", 0x89}], 0x6}}, {{&(0x7f0000001440)={0xa, 0x4e20, 0x8, @remote, 0x7}, 0x1c, &(0x7f0000001800)=[{0x0}, {&(0x7f0000001580)="4c34f4e3dc2487663c241967e3509701ddfa", 0x12}, {&(0x7f00000015c0)="cf8db0d8fdca4591cd680fc6f5f36b04754f46ddc945f656c1f96b62c947c62432d4", 0x22}, {&(0x7f0000001600)="438cc9c869f5a4c8b65a26e70229019dd50a4cb6d2fb126232dc68d78173b683a6bfce98889f2bcb28d31c308695005ef18cf687b60ec04296f983b3d4a70e0cfcf2255bb340ba76d8b36dc0980edb5cf99a7635ace7c38fe7c5a9b21c68355b6902ac95cc970ecfe4444f0493c899e3bf5c8df282aa0f5f01a56ae68d9e54a3c60587145ce346e287fed0019b2db5714b1fc06e7cb78ef1571c66dee7a6c0a54187ff699bef4bb08ebb774c14fee6190641fba48608624fe04172a8ca275dfcbd792215e2d44d189f9136e2b76ea4b28abf80ee77e1b13e1ef0466671eb8056e84a68bd32bd8fc4f6277f", 0xeb}, {&(0x7f0000001700)="807e3dc0ce5ad95dcc1d668e2aafa7f0fb3f6922e32598deaf1c7fd47bdf4032cff44c732640b22b1d492f2097b5cb46b52d8ac93534f30de4cd158356e11cf4bf0f3d5b48db7ef12817a67cc3b8736a", 0x50}, {&(0x7f0000001780)}, {&(0x7f00000017c0)="97c92adc3bb334b6e2dc97d368b4fef9a54209c6dba56de83f59292df7c84e", 0x1f}], 0x7}}, {{&(0x7f0000001840)={0xa, 0x4e22, 0xd367, @private0={0xfc, 0x0, '\x00', 0x1}, 0x355}, 0x1c, &(0x7f0000001a00)=[{&(0x7f0000001880)="cdc37c74d276184f2640bd1fa799433fa556f1bad5d334d25c633255af294b2c3a5aa490bb718d768a5def67fbf87b84e34305f9934d69e170271afbfdf9a8d787d0da9f624df72ceeafc9fe33cbbd669d98e70c3c630ec4eb129e5ab6adc10e8b6603ea700b50593cba219787c5ac6235c4510b89a61b8d786c9002b5b037a2b697736f70853a8ce620002654a7fdf1f05f1c11da613612ed9d2bac3753e492f5f18a55cf29b1ea44e71b82aaf112fe5133de0b6c15691e2c93d41ab539654feb9799", 0xc3}, {&(0x7f0000001980)}], 0x2, &(0x7f0000001a40)=[@tclass={{0x10, 0x29, 0x43, 0xfffffdd9}}, @rthdr_2292={{0x74, 0x29, 0x39, {0x73, 0xc, 0x2, 0x4, 0x0, [@empty, @remote, @local, @remote, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @rthdr_2292={{0x94, 0x29, 0x39, {0x35, 0x10, 0x2, 0xf9, 0x0, [@remote, @private0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x23}, @mcast1]}}}, @flowinfo={{0x10, 0x29, 0xb, 0x2}}, @dontfrag={{0x10, 0x29, 0x3e, 0x7}}, @dontfrag={{0x10, 0x29, 0x3e, 0x4}}, @rthdr_2292={{0x44, 0x29, 0x39, {0x2f, 0x6, 0x2, 0x6, 0x0, [@mcast2, @mcast2, @dev={0xfe, 0x80, '\x00', 0x1f}]}}}, @pktinfo={{0x20, 0x29, 0x32, {@empty}}}, @tclass={{0x10, 0x29, 0x43, 0x4}}], 0x1bc}}], 0x7, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x1, 0x1ff, 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14) r2 = inotify_init1(0x80000) statx(0xffffffffffffffff, &(0x7f0000001d00)='./file0\x00', 0x4000, 0x100, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, r3, &(0x7f0000001e40)={0x6, 0x1000, 0x80000001, 0x5, 0x287, 0x5, 0xb, 0x400, 0x8}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x40000000000}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) mkdirat(r4, &(0x7f0000000000)='./file0\x00', 0x45) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007292bd404020305582a80000000109021b0001000000000904000001df7fa9000905", @ANYBLOB="868f54"], 0x0) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r5}, 0x18) 2.517415545s ago: executing program 0 (id=2419): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0x5000) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.990660675s ago: executing program 4 (id=2420): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x8, 0x3, 0x494, 0x0, 0xffffffff, 0xffffffff, 0x2c0, 0xffffffff, 0x3cc, 0xffffffff, 0xffffffff, 0x3cc, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff000000, 0xff000000, 0xffffffff], [0xff, 0x7f00007f, 0xffffff00, 0xffffff00], 'nr0\x00', 'netpci0\x00', {0xff}, {0xff}, 0xff, 0x10, 0x3, 0x3c}, 0x0, 0x198, 0x2c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf4}, {0x9, 0x2, 0x24, 0x0, 'syz0\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x4, 'system_u:object_r:console_device_t:s0\x00'}}}, {{@uncond, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x5, 0x8, 0x9, 'syz1\x00', 'syz0\x00', {0xde34}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4f0) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x72, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x38, 0x3a, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @remote}, [@hopopts={0x3a}]}}}}}}}, 0x0) r3 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=@newtfilter={0x190, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x160, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x0, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x0, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x0, 0x1, 0x3}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x49}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x11c, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x1, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3000000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc00}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5ac}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0xfffffffffffffd8a, 0x1, 0x19d}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x46}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x44, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x81}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x11a8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xf5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xb5}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}]}}]}, 0x190}, 0x1, 0x0, 0x0, 0x80}, 0x800) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r8, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8411, 0x22, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c"}], 0x1}) ftruncate(r0, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="04ac0f0001ac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 669.75293ms ago: executing program 3 (id=2421): r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xb3a4, 0x8000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) lgetxattr(0x0, &(0x7f00000000c0)=@known='system.posix_acl_default\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value, &(0x7f0000000180)=0x8) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0x8dcacfa1c6c2afd6, 0xc9100120, 0x0, 0xfffffffffffffd25) 257.296165ms ago: executing program 2 (id=2422): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sendmsg(r1, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0xa1a) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x91, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) r2 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f0000000000)=ANY=[@ANYBLOB="050076cb08ecffff7effffff0101c000"]) pipe(&(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 126.229292ms ago: executing program 3 (id=2423): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x40, 0xad, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x1b, 0x800000000004}, &(0x7f0000bbdffc)) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89f0, &(0x7f0000000900)={'ip6tnl0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_tos={0x0, r3, 0x0, 0x0, 0x4000}}, 0x20) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x35, 0x0, 0x0) unshare(0x13060100) syz_emit_ethernet(0xb2, &(0x7f0000000000)={@multicast, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0xa4, 0x65, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0xa, 0x72, 0x3, 0x8, [{@rand_addr=0x64010100, 0x1}]}]}}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x80, 0x0, {0x1d, 0x4, 0x0, 0x5, 0x3, 0x68, 0x1, 0x7f, 0x0, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@lsrr={0x83, 0x1f, 0xa6, [@multicast1, @empty, @remote, @dev={0xac, 0x14, 0x14, 0xd}, @private=0xa010100, @rand_addr=0x64010102, @broadcast]}, @cipso={0x86, 0x2e, 0x3, [{0x5, 0x7, "ecc1573488"}, {0x1, 0x11, "3d67f47f2718c557d68e506975b5b4"}, {0x0, 0x4, "e1e7"}, {0x2, 0x4, "cacc"}, {0x5, 0x8, "c32e7fa27896"}]}, @generic={0x88, 0x4, "1d03"}, @generic={0x83, 0xf, "e3999e4322d18e559004230877"}]}}, "17deba919bfcd0a9"}}}}}, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e21, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, {0xa, 0x4e21, 0x81, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x0, {[0xffff, 0x4, 0xff, 0x8349, 0x21, 0x8000, 0x8b, 0x7]}}, 0x5c) r5 = mq_open(0x0, 0x42, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(r5, 0x50009402, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x2000c011) recvmsg$unix(0xffffffffffffffff, 0x0, 0x10002) open(&(0x7f0000000100)='./file0\x00', 0x125000, 0xa9) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010106, 0x4e22, 0x3, 'rr\x00', 0x1, 0x5, 0x73}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000200)={{0x84, @multicast1, 0x4e21, 0x3, 'lc\x00', 0xc, 0x9, 0x64}, {@remote, 0x4623, 0x4, 0x100000cd, 0x12d5f, 0x3}}, 0x44) sendmmsg$sock(r6, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x1, 0x20000000) 110.736463ms ago: executing program 0 (id=2424): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000740)={0x8, 0x0, [{0x2, 0x4, 0x1, 0x0, @adapter={0x87e, 0x10, 0x1, 0xfffff6df}}, {0x2, 0x2, 0x0, 0x0, @sint={0x6, 0x2}}, {0x80, 0x3, 0x1, 0x0, @irqchip={0x80, 0x6}}, {0x0, 0x1, 0x0, 0x0, @irqchip={0x10000, 0x59f0}}, {0x2, 0x3, 0x0, 0x0, @sint={0xd60, 0xa6}}, {0x2596d635, 0x4, 0x0, 0x0, @sint={0x71, 0x5}}, {0x0, 0x1, 0x0, 0x0, @msi={0x2, 0x4fc, 0x0, 0xfffffffa}}, {0xfffffff1, 0x2, 0x1, 0x0, @sint={0x0, 0xfffffffa}}]}) close(r1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = userfaultfd(0x801) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x2}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000080)={0x0, 0x0, 0x8, "fa0fffffffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f00000005c0)={0x40, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x4, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50) openat$pfkey(0xffffff9c, &(0x7f0000000040), 0x8040, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x2, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x12, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0x4000022}, @call={0x85, 0x0, 0x0, 0x25}, @generic={0x9, 0x6, 0x8, 0x0, 0x56}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x8, 0x8, &(0x7f00000002c0)="b8000001003e0000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 0s ago: executing program 3 (id=2425): connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x6, @mcast2={0xff, 0x3}}, 0x1c) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socket$inet(0x2, 0x2, 0x7d) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000640)={0xc, 0x0, &(0x7f0000000600)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="00103900000097e2582c923b710c2949ce2677dafbd48274a055e8b267b42edd25791ee26c7a0500000000000000c6837e96fb561bd76f00f6f8069393f674"], &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x7}, 0x0, &(0x7f0000000740)={0x20, 0x80, 0x1c, {0x8, 0x7, 0x83f, 0xe, 0x3, 0x3, 0x8, 0x7f, 0x4, 0x400, 0x0, 0x9}}, &(0x7f0000000780)={0x20, 0x85, 0x4, 0xffffff7f}, &(0x7f00000007c0)={0x20, 0x83, 0x2}, &(0x7f0000000800)={0x20, 0x87, 0x2, 0x40}, &(0x7f0000000840)={0x20, 0x89, 0x2}}) connect$unix(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x500) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_80211_join_ibss(&(0x7f0000000080)='wlan0\x00', &(0x7f0000000280)=@default_ap_ssid, 0x6, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f17, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x3, 0x40, 0x40, 0x0, 0x10001, 0x2004cc, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x2, 0x0, 0x3, 0x6, 0x1], 0x200000, 0x200650}) ioctl$KVM_RUN(r2, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x4, &(0x7f00000002c0)=[{0x6, 0x4, 0x3, 0x7fff0000}, {0x9, 0x8, 0x9, 0x3}, {0x7, 0x3, 0xf, 0x2}, {0x3, 0x79, 0x4, 0x2}]}) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="826bb66fdd076e80", 0x8, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): .562042][ T5968] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 609.575132][ T5968] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 609.585422][ T5968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.599722][ T5968] usb 5-1: config 0 descriptor?? [ 609.621473][ T5968] smsusb:smsusb_probe: board id=8, interface number 0 [ 609.630139][ T5968] smsusb:smsusb_probe: Device initialized with return code -19 [ 610.271799][ T5968] usb 5-1: USB disconnect, device number 83 [ 610.444799][ T5909] ath6kl: mismatched byte count 0 vs. expected 12 [ 610.452531][ T5909] ath6kl: Failed to init ath6kl core: -22 [ 610.499855][ T5909] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 610.667510][ T5909] usb 2-1: USB disconnect, device number 74 [ 610.862365][T13325] netlink: 'syz.3.1832': attribute type 12 has an invalid length. [ 610.983917][T13331] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1829'. [ 611.168894][ T5909] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 611.348709][ T5909] usb 4-1: Using ep0 maxpacket: 8 [ 611.356961][ T5909] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 611.401655][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 611.423781][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 611.449712][ T5909] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 611.459255][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.489348][ T5909] usb 4-1: Product: syz [ 611.580001][ T5909] usb 4-1: Manufacturer: syz [ 611.584916][ T5909] usb 4-1: SerialNumber: syz [ 611.601224][ T5909] usb 4-1: config 0 descriptor?? [ 611.621985][ T5909] streamzap 4-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 611.878303][ T5968] usb 4-1: USB disconnect, device number 74 [ 611.887670][T13334] can: request_module (can-proto-3) failed. [ 612.147779][T13344] netlink: 'syz.0.1834': attribute type 1 has an invalid length. [ 613.372172][T13353] can: request_module (can-proto-3) failed. [ 613.869795][T13376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1840'. [ 614.674870][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 614.674901][ T30] audit: type=1326 audit(1767088870.790:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13385 comm="syz.0.1841" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700d539 code=0x0 [ 614.964089][T13397] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1845'. [ 615.007024][T13397] netlink: 'syz.3.1845': attribute type 10 has an invalid length. [ 615.224605][T13399] dummy0: entered promiscuous mode [ 615.251374][T13399] bond_slave_0: entered promiscuous mode [ 615.266503][T13399] bond_slave_0: left promiscuous mode [ 615.283310][T13399] dummy0: left promiscuous mode [ 615.292253][T13401] netlink: 'syz.3.1846': attribute type 1 has an invalid length. [ 615.922877][T13413] can: request_module (can-proto-3) failed. [ 616.635698][T13436] netlink: 'syz.4.1853': attribute type 1 has an invalid length. [ 616.645779][T13435] dummy0: entered promiscuous mode [ 616.653590][T13435] bond_slave_0: entered promiscuous mode [ 616.670346][T13435] bond_slave_0: left promiscuous mode [ 616.676851][T13435] dummy0: left promiscuous mode [ 618.048806][ T5918] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 618.065305][T13459] dummy0: entered promiscuous mode [ 618.113443][T13459] bond_slave_0: entered promiscuous mode [ 618.120910][T13463] netlink: 'syz.3.1860': attribute type 1 has an invalid length. [ 618.165756][T13459] bond_slave_0: left promiscuous mode [ 618.185079][T13459] dummy0: left promiscuous mode [ 618.223196][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 618.243482][ T5918] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 618.253431][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.417551][ T5918] usb 5-1: config 0 descriptor?? [ 618.435494][ T5918] smsusb:smsusb_probe: board id=8, interface number 0 [ 618.447174][ T5918] smsusb:smsusb_probe: Device initialized with return code -19 [ 618.639405][ T5918] usb 5-1: USB disconnect, device number 84 [ 619.139056][ T5919] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 619.300608][ T5919] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 619.310153][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.326020][ T5919] usb 2-1: config 0 descriptor?? [ 620.258553][ T5919] ath6kl: mismatched byte count 0 vs. expected 12 [ 620.269805][ T5919] ath6kl: Failed to init ath6kl core: -22 [ 620.276378][ T5919] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 620.289080][ T5918] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 620.476437][ T5919] usb 2-1: USB disconnect, device number 75 [ 620.513536][ T5918] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 620.524625][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.732786][ T5918] usb 4-1: config 0 descriptor?? [ 621.239184][ T131] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 621.261917][T13505] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1871'. [ 621.289702][ T131] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 621.295206][T13505] netlink: 'syz.4.1871': attribute type 10 has an invalid length. [ 621.514847][ T5918] ath6kl: mismatched byte count 0 vs. expected 12 [ 621.532740][ T5918] ath6kl: Failed to init ath6kl core: -22 [ 621.549407][ T5918] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 621.720416][ T5918] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 621.761353][ T5918] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 621.776770][ T131] usb 4-1: USB disconnect, device number 75 [ 622.031682][T13517] fido_id[13517]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 623.406541][T13539] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 624.299060][ T5918] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 624.475941][ T5918] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 624.485441][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.520263][ T5918] usb 3-1: config 0 descriptor?? [ 625.384520][T13559] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1883'. [ 625.403279][T13559] netlink: 'syz.1.1883': attribute type 10 has an invalid length. [ 625.534484][ T5918] ath6kl: mismatched byte count 0 vs. expected 12 [ 625.556748][ T5918] ath6kl: Failed to init ath6kl core: -22 [ 625.574098][ T5918] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 625.770508][ T5919] usb 3-1: USB disconnect, device number 60 [ 626.101974][T13566] dummy0: entered promiscuous mode [ 626.128684][T13566] bond_slave_0: entered promiscuous mode [ 626.134714][T13566] bond_slave_0: left promiscuous mode [ 626.147995][T13566] dummy0: left promiscuous mode [ 626.159487][T13567] netlink: 'syz.3.1887': attribute type 1 has an invalid length. [ 626.777357][T13578] netlink: 'syz.4.1889': attribute type 11 has an invalid length. [ 627.176884][T13572] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 627.349248][T13572] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 627.357349][T13572] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 627.668965][ T5919] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 627.868916][ T5919] usb 5-1: Using ep0 maxpacket: 8 [ 627.977500][ T5919] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 628.080097][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 628.201051][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 628.303380][ T5919] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 628.338921][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.353640][ T5919] usb 5-1: Product: syz [ 628.373434][ T5919] usb 5-1: Manufacturer: syz [ 628.382856][ T5919] usb 5-1: SerialNumber: syz [ 628.395315][T13598] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 628.416736][ T5919] usb 5-1: config 0 descriptor?? [ 628.477995][ T5919] streamzap 5-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 628.660922][ T5918] usb 5-1: USB disconnect, device number 85 [ 628.755276][T13197] Bluetooth: hci1: command 0x0c1a tx timeout [ 629.379909][T13608] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1896'. [ 629.391251][T13197] Bluetooth: hci3: command 0x0c1a tx timeout [ 629.391594][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 629.407536][ T5918] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 629.426510][T13608] netlink: 'syz.0.1896': attribute type 10 has an invalid length. [ 629.471678][T13610] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1897'. [ 629.592771][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 629.608904][ T5918] usb 2-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 629.646422][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.653901][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.689473][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.710331][ T5918] usb 2-1: config 0 descriptor?? [ 629.743253][ T5918] smsusb:smsusb_probe: board id=8, interface number 0 [ 629.878829][ T5918] smsusb:smsusb_probe: Device initialized with return code -19 [ 630.141743][ T5909] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 630.186279][ T5909] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 630.277962][ T5918] usb 2-1: USB disconnect, device number 76 [ 630.580168][ T5968] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 630.780533][ T5968] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 630.796201][ T5968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.832656][ T5968] usb 4-1: config 0 descriptor?? [ 630.974818][ T5918] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 630.994854][ T5918] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 631.442035][T13635] fido_id[13635]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 631.713487][T13644] netlink: 'syz.4.1908': attribute type 11 has an invalid length. [ 631.908488][ T5968] ath6kl: mismatched byte count 0 vs. expected 12 [ 631.948071][ T5968] ath6kl: Failed to init ath6kl core: -22 [ 631.973293][ T5968] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 631.979156][ T5918] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 632.158768][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 632.167421][ T5909] usb 4-1: USB disconnect, device number 76 [ 632.180465][ T5918] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 632.214600][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 632.248453][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 632.264056][ T5918] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 632.276807][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.287086][ T5918] usb 5-1: Product: syz [ 632.294593][ T5918] usb 5-1: Manufacturer: syz [ 632.300714][ T5918] usb 5-1: SerialNumber: syz [ 632.324634][ T5918] usb 5-1: config 0 descriptor?? [ 632.343494][ T5918] streamzap 5-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 632.546153][ T5884] usb 5-1: USB disconnect, device number 86 [ 632.592188][T13653] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1910'. [ 632.618548][T13653] netlink: 'syz.1.1910': attribute type 10 has an invalid length. [ 633.475169][T13669] dummy0: entered promiscuous mode [ 633.499654][T13669] bond_slave_0: entered promiscuous mode [ 633.523987][T13669] bond_slave_0: left promiscuous mode [ 633.555973][T13670] netlink: 'syz.4.1913': attribute type 1 has an invalid length. [ 633.608688][T13669] dummy0: left promiscuous mode [ 634.171081][T13665] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 634.232440][T13665] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 634.241555][T13665] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 634.992278][ T5909] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 635.009748][ T5909] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 635.484086][T13197] Bluetooth: hci1: command 0x0c1a tx timeout [ 635.618725][ T5968] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 635.677625][T13685] fido_id[13685]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 636.278827][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 636.292453][T13197] Bluetooth: hci4: command 0x0406 tx timeout [ 636.339726][ T5968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 636.359000][ T5968] usb 2-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 636.499157][ T5968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.613086][ T5968] usb 2-1: config 0 descriptor?? [ 636.627001][ T5968] smsusb:smsusb_probe: board id=8, interface number 0 [ 636.669561][ T5968] smsusb:smsusb_probe: Device initialized with return code -19 [ 636.831404][ T5909] usb 2-1: USB disconnect, device number 77 [ 638.028856][ T5909] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 638.279420][ T5909] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 638.300800][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.418812][ T5909] usb 4-1: config 0 descriptor?? [ 639.458660][ T5909] ath6kl: Failed to read usb control message: -71 [ 639.465290][ T5909] ath6kl: Unable to read the bmi data from the device: -71 [ 639.560618][ T5909] ath6kl: Unable to recv target info: -71 [ 639.577056][ T5909] ath6kl: Failed to init ath6kl core: -71 [ 639.601154][ T5909] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 639.613205][ T5918] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 639.645231][ T5918] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 639.677312][ T5909] usb 4-1: USB disconnect, device number 77 [ 640.307716][T13759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1932'. [ 640.560842][T13755] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 640.578700][T13755] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 640.599662][T13755] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 640.814640][T13766] netlink: 'syz.3.1933': attribute type 10 has an invalid length. [ 641.087137][T13771] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1937'. [ 641.100000][ T6312] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 641.279087][ T6312] usb 2-1: Using ep0 maxpacket: 16 [ 641.290128][ T6312] usb 2-1: unable to get BOS descriptor or descriptor too short [ 641.304317][ T6312] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 641.318628][ T6312] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 641.350372][ T6312] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 641.368690][ T6312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.395661][ T6312] usb 2-1: Product: syz [ 641.400798][ T6312] usb 2-1: Manufacturer: syz [ 641.413396][ T6312] usb 2-1: SerialNumber: syz [ 641.685989][ T6312] usb 2-1: 0:2 : does not exist [ 641.707915][ T6312] usb 2-1: unit 0 not found! [ 641.723250][ T5919] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 641.764446][ T6312] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 641.869871][ T5919] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 641.903655][ T6312] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 641.955060][ T6312] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 641.986100][ T6312] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 642.014115][ T6312] usb 2-1: USB disconnect, device number 78 [ 642.086503][ T5991] udevd[5991]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 642.497212][T13792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1945'. [ 642.520779][T13791] fuse: Bad value for 'user_id' [ 642.525943][T13791] fuse: Bad value for 'user_id' [ 642.617522][T13794] netlink: 'syz.1.1946': attribute type 11 has an invalid length. [ 642.668884][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 642.675239][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 642.688676][T13197] Bluetooth: hci3: command 0x0c1a tx timeout [ 642.696196][T13791] sock: sock_set_timeout: `syz.3.1944' (pid 13791) tries to set negative timeout [ 642.827762][T13796] netlink: 'syz.4.1947': attribute type 10 has an invalid length. [ 642.869245][ T6312] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 643.028998][ T6312] usb 2-1: Using ep0 maxpacket: 8 [ 643.036877][ T6312] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 643.060003][ T6312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 643.091919][ T6312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 643.150892][ T6312] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 643.192960][ T6312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.229618][ T6312] usb 2-1: Product: syz [ 643.234034][ T6312] usb 2-1: Manufacturer: syz [ 643.259537][ T6312] usb 2-1: SerialNumber: syz [ 643.293214][ T6312] usb 2-1: config 0 descriptor?? [ 643.322034][ T6312] streamzap 2-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 643.519003][ T6312] usb 2-1: USB disconnect, device number 79 [ 643.970734][ T5919] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 644.129462][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 644.137026][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.156092][T13826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1957'. [ 644.171087][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 644.184642][ T5919] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 644.200304][ T5919] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 644.212504][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.241945][ T5919] usb 3-1: config 0 descriptor?? [ 644.345911][T13828] netlink: 'syz.4.1958': attribute type 10 has an invalid length. [ 644.843230][ T5919] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 644.857749][ T5919] microsoft 0003:045E:07DA.001E: ignoring exceeding usage max [ 645.046949][ T5919] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 645.065487][ T5919] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 645.075806][ T5919] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 645.098726][ T5919] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 645.125705][ T5919] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 645.142846][ T5919] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 645.174900][ T5919] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 645.437692][T13845] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 645.454730][T13845] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 645.462463][T13845] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 645.519046][ T5919] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 645.522490][T13815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.613851][ T5919] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.001E/input/input138 [ 645.659257][T13815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.762807][ T5919] microsoft 0003:045E:07DA.001E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 645.823913][ T5919] usb 3-1: USB disconnect, device number 61 [ 646.049461][T13849] fido_id[13849]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 646.919322][T13861] netlink: 'syz.4.1968': attribute type 11 has an invalid length. [ 646.988777][T13197] Bluetooth: hci1: command 0x0c1a tx timeout [ 647.179058][ T5919] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 647.338698][ T5919] usb 5-1: Using ep0 maxpacket: 8 [ 647.346977][ T5919] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 647.359648][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 647.387209][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 647.477691][ T5919] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 647.491887][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.525298][ T5919] usb 5-1: Product: syz [ 647.533601][ T5919] usb 5-1: Manufacturer: syz [ 647.547737][ T5919] usb 5-1: SerialNumber: syz [ 647.552761][T13197] Bluetooth: hci4: command 0x0406 tx timeout [ 647.552802][T13197] Bluetooth: hci3: command 0x0c1a tx timeout [ 647.608993][ T5919] usb 5-1: config 0 descriptor?? [ 647.623151][ T5919] streamzap 5-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 647.831609][ T5919] usb 5-1: USB disconnect, device number 87 [ 649.151302][T13898] gtp0: entered promiscuous mode [ 649.156763][T13898] gtp0: entered allmulticast mode [ 650.000292][T13902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1977'. [ 650.348781][ T5919] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 650.505948][T13912] netlink: 'syz.0.1980': attribute type 1 has an invalid length. [ 650.764509][ T5919] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 650.798495][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.832078][ T5919] usb 2-1: config 0 descriptor?? [ 651.111074][ T5827] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 651.336229][ T5827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 651.369127][ T5827] usb 4-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 651.384653][T13926] netlink: 'syz.2.1984': attribute type 11 has an invalid length. [ 651.388774][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.442636][ T5827] usb 4-1: config 0 descriptor?? [ 651.476780][ T5827] smsusb:smsusb_probe: board id=8, interface number 0 [ 651.495191][ T5827] smsusb:smsusb_probe: Device initialized with return code -19 [ 651.663234][ T24] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 651.765657][ T5827] usb 4-1: USB disconnect, device number 78 [ 651.836461][ T5919] ath6kl: Failed to read usb control message: -71 [ 651.854628][ T5919] ath6kl: Unable to read the bmi data from the device: -71 [ 651.869467][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 651.879378][ T5919] ath6kl: Unable to recv target info: -71 [ 651.887445][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 651.918338][ T5919] ath6kl: Failed to init ath6kl core: -71 [ 651.930406][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 651.956577][ T5919] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 652.003096][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 652.021445][ T5919] usb 2-1: USB disconnect, device number 80 [ 652.033623][ T24] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 652.065934][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.084981][ T24] usb 3-1: Product: syz [ 652.091523][ T24] usb 3-1: Manufacturer: syz [ 652.098194][ T24] usb 3-1: SerialNumber: syz [ 652.115840][ T24] usb 3-1: config 0 descriptor?? [ 652.140266][ T24] streamzap 3-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 652.354858][ T5919] usb 3-1: USB disconnect, device number 62 [ 652.713357][ T5918] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 652.735040][ T5918] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 653.587132][T13960] dummy0: entered promiscuous mode [ 653.702252][T13963] netlink: 'syz.4.1993': attribute type 1 has an invalid length. [ 653.744368][T13960] bond_slave_0: entered promiscuous mode [ 653.829007][T13960] bond_slave_0: left promiscuous mode [ 654.369864][T13960] dummy0: left promiscuous mode [ 654.908308][T13978] netlink: 'syz.0.1998': attribute type 10 has an invalid length. [ 655.395460][T13994] netlink: 'syz.0.2002': attribute type 11 has an invalid length. [ 655.437754][ T5918] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 655.484300][ T5918] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 655.608718][ T5827] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 655.633355][T14004] Cannot find map_set index 256 as target [ 655.644470][T14001] fido_id[14001]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 655.771798][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 655.788283][ T5827] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 655.820481][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.834473][ T5827] usb 5-1: config 0 descriptor?? [ 655.843675][T14010] FAULT_INJECTION: forcing a failure. [ 655.843675][T14010] name failslab, interval 1, probability 0, space 0, times 0 [ 655.879089][ T5827] smsusb:smsusb_probe: board id=8, interface number 0 [ 655.892213][T14010] CPU: 1 UID: 0 PID: 14010 Comm: syz.2.2017 Tainted: G L syzkaller #0 PREEMPT(full) [ 655.892251][T14010] Tainted: [L]=SOFTLOCKUP [ 655.892258][T14010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 655.892271][T14010] Call Trace: [ 655.892281][T14010] [ 655.892291][T14010] dump_stack_lvl+0xe8/0x150 [ 655.892322][T14010] should_fail_ex+0x414/0x560 [ 655.892356][T14010] should_failslab+0xa8/0x100 [ 655.892380][T14010] kmem_cache_alloc_noprof+0x88/0x710 [ 655.892410][T14010] ? skb_clone+0x212/0x3a0 [ 655.892439][T14010] skb_clone+0x212/0x3a0 [ 655.892465][T14010] __netlink_deliver_tap+0x404/0x850 [ 655.892501][T14010] ? netlink_deliver_tap+0x2e/0x1b0 [ 655.892525][T14010] netlink_deliver_tap+0x19c/0x1b0 [ 655.892549][T14010] netlink_sendskb+0x68/0x140 [ 655.892572][T14010] netlink_unicast+0x397/0x9e0 [ 655.892591][T14010] ? __asan_memcpy+0x40/0x70 [ 655.892614][T14010] ? __pfx_netlink_unicast+0x10/0x10 [ 655.892643][T14010] netlink_rcv_skb+0x28c/0x470 [ 655.892667][T14010] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 655.892688][T14010] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 655.892721][T14010] ? netlink_deliver_tap+0x2e/0x1b0 [ 655.892751][T14010] netlink_unicast+0x82f/0x9e0 [ 655.892779][T14010] ? __pfx_netlink_unicast+0x10/0x10 [ 655.892798][T14010] ? __alloc_skb+0x198/0x3a0 [ 655.892817][T14010] ? netlink_sendmsg+0x642/0xb30 [ 655.892838][T14010] ? skb_put+0x11b/0x210 [ 655.892861][T14010] netlink_sendmsg+0x805/0xb30 [ 655.892893][T14010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 655.892919][T14010] ? __import_iovec+0x5d4/0x7f0 [ 655.892939][T14010] ? aa_sock_msg_perm+0xf1/0x1b0 [ 655.892964][T14010] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 655.892981][T14010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 655.893005][T14010] __sock_sendmsg+0x21c/0x270 [ 655.893035][T14010] ____sys_sendmsg+0x505/0x820 [ 655.893062][T14010] ? __pfx_____sys_sendmsg+0x10/0x10 [ 655.893088][T14010] ? kstrtouint+0x6e/0xe0 [ 655.893122][T14010] ___sys_sendmsg+0x21f/0x2a0 [ 655.893146][T14010] ? __pfx____sys_sendmsg+0x10/0x10 [ 655.893177][T14010] ? get_pid_task+0x20/0x1f0 [ 655.893201][T14010] ? get_pid_task+0x20/0x1f0 [ 655.893221][T14010] ? get_pid_task+0x20/0x1f0 [ 655.893270][T14010] ? __fget_files+0x2a/0x420 [ 655.893293][T14010] ? __fget_files+0x3a0/0x420 [ 655.893325][T14010] __sys_sendmsg+0x164/0x220 [ 655.893348][T14010] ? __pfx___sys_sendmsg+0x10/0x10 [ 655.893378][T14010] ? __pfx_ksys_write+0x10/0x10 [ 655.893408][T14010] __do_fast_syscall_32+0x1dc/0x560 [ 655.893430][T14010] ? lockdep_hardirqs_on+0x7b/0x110 [ 655.893447][T14010] ? do_fast_syscall_32+0x34/0x80 [ 655.893466][T14010] ? irqentry_exit+0x10f/0x660 [ 655.893487][T14010] do_fast_syscall_32+0x34/0x80 [ 655.893507][T14010] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 655.893530][T14010] RIP: 0023:0xf7f63539 [ 655.893548][T14010] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 655.893564][T14010] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 655.893585][T14010] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 655.893598][T14010] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 655.893609][T14010] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 655.893620][T14010] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 655.893631][T14010] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 655.893664][T14010] [ 655.903947][ T5827] smsusb:smsusb_probe: Device initialized with return code -19 [ 656.382491][ T5827] usb 5-1: USB disconnect, device number 88 [ 656.430046][T14017] netlink: 'syz.3.2010': attribute type 10 has an invalid length. [ 656.552952][T14021] netlink: 'syz.1.2022': attribute type 10 has an invalid length. [ 656.925298][T14031] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2013'. [ 657.030502][ T5827] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 657.197994][ T5827] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 659.443549][T14068] netlink: 'syz.0.2024': attribute type 10 has an invalid length. [ 659.718774][T14074] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2028'. [ 660.250258][T14084] dummy0: entered promiscuous mode [ 660.267909][T14087] netlink: 'syz.4.2030': attribute type 1 has an invalid length. [ 660.277200][T14084] bond_slave_0: entered promiscuous mode [ 660.418972][ T6312] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 660.438745][T14084] bond_slave_0: left promiscuous mode [ 660.457959][T14084] dummy0: left promiscuous mode [ 660.470842][ T6312] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 660.549236][ T5827] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 660.743271][ T5827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 660.808023][ T5827] usb 4-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 660.843912][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.899210][ T5827] usb 4-1: config 0 descriptor?? [ 660.907165][T14064] syz.1.2021 (14064): drop_caches: 2 [ 660.943130][ T5827] smsusb:smsusb_probe: board id=8, interface number 0 [ 660.993462][ T5827] smsusb:smsusb_probe: Device initialized with return code -19 [ 661.188404][ T5827] usb 4-1: USB disconnect, device number 79 [ 661.284546][T14100] netlink: 'syz.1.2034': attribute type 11 has an invalid length. [ 661.395161][T14107] netlink: 'syz.0.2038': attribute type 10 has an invalid length. [ 661.489663][ T6312] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 661.548700][T13928] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 661.641485][ T6312] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 661.641836][ T5827] usb 5-1: new low-speed USB device number 89 using dummy_hcd [ 661.740458][T13928] usb 2-1: Using ep0 maxpacket: 8 [ 661.763292][T13928] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 661.786133][ T6312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.798956][T13928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 661.832169][ T6312] usb 3-1: config 0 descriptor?? [ 661.865026][T13928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 661.869127][ T5827] usb 5-1: device descriptor read/64, error -71 [ 661.932340][T13928] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 661.962499][T13928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.004913][T13928] usb 2-1: Product: syz [ 662.021657][T13928] usb 2-1: Manufacturer: syz [ 662.040389][T13928] usb 2-1: SerialNumber: syz [ 662.053599][T13928] usb 2-1: config 0 descriptor?? [ 662.077346][T13928] streamzap 2-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 662.138775][ T5827] usb 5-1: new low-speed USB device number 90 using dummy_hcd [ 662.340601][ T5827] usb 5-1: device descriptor read/64, error -71 [ 662.361932][ T5919] usb 2-1: USB disconnect, device number 81 [ 662.476346][ T5827] usb usb5-port1: attempt power cycle [ 662.999041][ T5827] usb 5-1: new low-speed USB device number 91 using dummy_hcd [ 663.019694][ T5827] usb 5-1: device descriptor read/8, error -71 [ 663.287096][T14121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2041'. [ 663.378824][ T5827] usb 5-1: new low-speed USB device number 92 using dummy_hcd [ 663.399382][ T5827] usb 5-1: device descriptor read/8, error -71 [ 663.509283][ T5827] usb usb5-port1: unable to enumerate USB device [ 663.587520][ T6312] ath6kl: Failed to read usb control message: -71 [ 663.594470][ T6312] ath6kl: Unable to read the bmi data from the device: -71 [ 663.620651][ T6312] ath6kl: Unable to recv target info: -71 [ 663.650280][ T6312] ath6kl: Failed to init ath6kl core: -71 [ 663.656599][ T6312] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 663.709044][ T6312] usb 3-1: USB disconnect, device number 63 [ 663.841483][T14128] netlink: 'syz.0.2043': attribute type 1 has an invalid length. [ 664.068648][ T5827] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 664.532492][ T5827] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 664.579989][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.631513][ T5827] usb 4-1: config 0 descriptor?? [ 665.405499][T14139] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 665.412928][T14139] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 665.420462][T14139] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 666.888159][ T5827] ath6kl: Failed to read usb control message: -71 [ 666.895397][ T5827] ath6kl: Unable to read the bmi data from the device: -71 [ 666.914753][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 666.964839][ T5827] ath6kl: Unable to recv target info: -71 [ 667.056708][ T5827] ath6kl: Failed to init ath6kl core: -71 [ 667.092118][ T5827] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 667.137780][ T5827] usb 4-1: USB disconnect, device number 80 [ 667.192261][ T5968] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 667.209958][ T5968] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 667.242936][T14163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2052'. [ 667.329448][T13928] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 667.469267][T13197] Bluetooth: hci3: command 0x0c1a tx timeout [ 667.475593][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 667.490619][T13928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 667.510307][T13928] usb 3-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 667.520602][T13928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.533101][T14164] fido_id[14164]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 667.549778][T13928] usb 3-1: config 0 descriptor?? [ 667.566789][T13928] smsusb:smsusb_probe: board id=8, interface number 0 [ 667.579273][T13928] smsusb:smsusb_probe: Device initialized with return code -19 [ 667.695942][ T30] audit: type=1326 audit(1767088923.820:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.0.2054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 667.727129][ T30] audit: type=1326 audit(1767088923.850:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.0.2054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 667.767067][ T30] audit: type=1326 audit(1767088923.850:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.0.2054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 667.791609][ T30] audit: type=1326 audit(1767088923.850:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.0.2054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=230 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 667.825784][T13928] usb 3-1: USB disconnect, device number 64 [ 667.839158][ T30] audit: type=1326 audit(1767088923.850:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.0.2054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 667.867996][ T30] audit: type=1326 audit(1767088923.850:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.0.2054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 667.869495][ T5827] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 667.903713][ T30] audit: type=1326 audit(1767088923.850:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.0.2054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 667.928781][ T30] audit: type=1326 audit(1767088923.850:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.0.2054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 667.989514][ T30] audit: type=1326 audit(1767088923.850:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.0.2054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 668.035872][ T30] audit: type=1326 audit(1767088923.850:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.0.2054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 668.155830][ T5827] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 668.169826][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.193435][ T5827] usb 2-1: config 0 descriptor?? [ 668.879864][ T5827] ath6kl: Failed to read usb control message: -71 [ 668.891803][ T5827] ath6kl: Unable to read the bmi data from the device: -71 [ 668.900828][ T5827] ath6kl: Unable to recv target info: -71 [ 668.915215][ T5827] ath6kl: Failed to init ath6kl core: -71 [ 668.921895][ T5827] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 669.113598][ T5827] usb 2-1: USB disconnect, device number 82 [ 669.917240][T14206] netlink: 'syz.2.2063': attribute type 10 has an invalid length. [ 670.296714][T14196] syz.4.2059 (14196): drop_caches: 2 [ 671.153383][T14191] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 671.158927][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 671.375901][T14191] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 671.382384][T14191] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 671.748729][ T5827] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 671.908802][ T5827] usb 5-1: Using ep0 maxpacket: 8 [ 671.921255][ T5827] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 672.119396][ T5827] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 672.145585][ T5827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.166118][ T5827] usb 5-1: Product: syz [ 672.180777][ T5827] usb 5-1: Manufacturer: syz [ 672.187156][ T5827] usb 5-1: SerialNumber: syz [ 672.228532][ T5827] usb 5-1: config 0 descriptor?? [ 672.254959][ T5827] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 672.267026][ T5827] usb 5-1: setting power ON [ 672.280888][ T5827] dvb-usb: bulk message failed: -22 (2/0) [ 672.309907][ T5827] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 672.350159][ T5827] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 672.379913][ T5827] usb 5-1: media controller created [ 672.405540][ T5827] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 672.415449][ T5918] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 672.467593][T14215] cxusb: i2c rd: len=80 is too big! [ 672.467593][T14215] [ 672.481816][ T5827] usb 5-1: selecting invalid altsetting 6 [ 672.494618][ T5827] usb 5-1: digital interface selection failed (-22) [ 672.515049][ T5827] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 672.525924][ T5827] usb 5-1: setting power OFF [ 672.530912][ T5827] dvb-usb: bulk message failed: -22 (2/0) [ 672.539609][ T5827] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 672.549644][ T5827] (NULL device *): no alternate interface [ 672.592002][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 672.670652][ T5918] usb 4-1: config 0 interface 0 altsetting 65 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.692093][ T5918] usb 4-1: config 0 interface 0 altsetting 65 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 672.706891][ T5918] usb 4-1: config 0 interface 0 has no altsetting 0 [ 672.713766][ T5918] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 672.724271][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.759253][ T5918] usb 4-1: config 0 descriptor?? [ 672.952723][T14244] netlink: 'syz.0.2076': attribute type 10 has an invalid length. [ 673.045187][ T5827] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 673.059627][ T6312] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 673.082276][ T5968] usb 5-1: USB disconnect, device number 93 [ 673.169438][T14236] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 673.232470][ T6312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 673.265137][ T6312] usb 3-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 673.277831][ T6312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.308690][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 673.314362][ T6312] usb 3-1: config 0 descriptor?? [ 673.326350][ T6312] smsusb:smsusb_probe: board id=8, interface number 0 [ 673.334585][ T6312] smsusb:smsusb_probe: Device initialized with return code -19 [ 673.336230][ T5918] aquacomputer_d5next 0003:0C70:F0B6.0024: unknown main item tag 0x0 [ 673.364066][ T5918] aquacomputer_d5next 0003:0C70:F0B6.0024: unknown main item tag 0x0 [ 673.374994][ T5918] aquacomputer_d5next 0003:0C70:F0B6.0024: unknown main item tag 0x0 [ 673.388525][ T5918] aquacomputer_d5next 0003:0C70:F0B6.0024: unknown main item tag 0x0 [ 673.398828][ T5918] aquacomputer_d5next 0003:0C70:F0B6.0024: unknown main item tag 0x0 [ 673.413946][ T5918] aquacomputer_d5next 0003:0C70:F0B6.0024: hidraw0: USB HID v0.05 Device [HID 0c70:f0b6] on usb-dummy_hcd.3-1/input0 [ 673.455325][T14249] netlink: 'syz.0.2077': attribute type 1 has an invalid length. [ 673.570407][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 673.833329][ T6312] usb 3-1: USB disconnect, device number 65 [ 673.875005][ T5918] usb 4-1: USB disconnect, device number 81 [ 674.493313][T14271] netlink: 'syz.1.2082': attribute type 11 has an invalid length. [ 675.495431][T14278] syz.3.2081 (14278): drop_caches: 2 [ 675.962426][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 676.124849][T14261] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 676.283133][T14261] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 676.292025][T14261] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 676.641889][ T5884] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 676.869051][ T5884] usb 2-1: Using ep0 maxpacket: 8 [ 676.878158][ T5884] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 676.908800][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 676.968772][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 676.968794][ T30] audit: type=1326 audit(1767088933.070:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14289 comm="syz.3.2085" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 677.006499][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 677.028992][ T30] audit: type=1326 audit(1767088933.070:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14289 comm="syz.3.2085" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 677.053907][ T30] audit: type=1326 audit(1767088933.070:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14289 comm="syz.3.2085" exe="/root/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 677.078292][ T30] audit: type=1326 audit(1767088933.070:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14289 comm="syz.3.2085" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 677.103563][ T5884] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 677.112764][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.122014][ T5884] usb 2-1: Product: syz [ 677.126282][ T5884] usb 2-1: Manufacturer: syz [ 677.133740][ T5884] usb 2-1: SerialNumber: syz [ 677.145264][ T5884] usb 2-1: config 0 descriptor?? [ 677.150799][ T30] audit: type=1326 audit(1767088933.070:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14289 comm="syz.3.2085" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 677.216124][ T5884] streamzap 2-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 677.258268][ T30] audit: type=1326 audit(1767088933.070:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14289 comm="syz.3.2085" exe="/root/syz-executor" sig=0 arch=40000003 syscall=230 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 677.327360][ T30] audit: type=1326 audit(1767088933.070:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14289 comm="syz.3.2085" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 677.395872][ T30] audit: type=1326 audit(1767088933.070:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14289 comm="syz.3.2085" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 677.422822][T14295] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2087'. [ 677.463008][T14295] netlink: 'syz.4.2087': attribute type 10 has an invalid length. [ 677.483071][ T5884] usb 2-1: USB disconnect, device number 83 [ 677.490265][ T30] audit: type=1326 audit(1767088933.090:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14289 comm="syz.3.2085" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 677.564205][ T30] audit: type=1326 audit(1767088933.090:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14289 comm="syz.3.2085" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 677.796417][ T5827] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 677.833196][ T5827] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 677.965597][T14306] dummy0: entered promiscuous mode [ 677.973214][T14306] bond_slave_0: entered promiscuous mode [ 678.041676][T14306] bond_slave_0: left promiscuous mode [ 678.085374][T14305] fido_id[14305]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 678.109603][T14306] dummy0: left promiscuous mode [ 678.150456][T14307] netlink: 'syz.4.2091': attribute type 1 has an invalid length. [ 678.358953][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 678.358994][T13197] Bluetooth: hci4: command 0x0406 tx timeout [ 678.638258][T14316] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 680.460005][T14339] dummy0: entered promiscuous mode [ 680.466311][T14339] bond_slave_0: entered promiscuous mode [ 680.472703][T14339] bond_slave_0: left promiscuous mode [ 680.489675][T14335] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 680.520578][T14335] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 680.536634][T14335] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 680.568520][T14341] netlink: 'syz.3.2098': attribute type 1 has an invalid length. [ 680.644488][T14344] netlink: 'syz.1.2099': attribute type 11 has an invalid length. [ 680.721483][T14339] dummy0: left promiscuous mode [ 681.191732][ T24] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 681.428863][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 681.732169][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 681.766122][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 681.795086][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 681.848181][ T24] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 681.885995][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.915669][ T24] usb 2-1: Product: syz [ 681.926862][ T24] usb 2-1: Manufacturer: syz [ 681.950454][ T24] usb 2-1: SerialNumber: syz [ 681.976786][ T24] usb 2-1: config 0 descriptor?? [ 681.990897][T14353] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2101'. [ 682.002072][T14353] netlink: 'syz.0.2101': attribute type 10 has an invalid length. [ 682.050670][ T24] streamzap 2-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 682.382897][T14355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2102'. [ 682.406169][T13928] usb 2-1: USB disconnect, device number 84 [ 682.514660][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 682.588747][T13197] Bluetooth: hci3: command 0x0c1a tx timeout [ 682.595023][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 682.601904][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 682.601919][ T30] audit: type=1326 audit(1767088938.710:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14356 comm="syz.4.2103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 682.789795][ T30] audit: type=1326 audit(1767088938.710:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14356 comm="syz.4.2103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 682.823645][ T30] audit: type=1326 audit(1767088938.710:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14356 comm="syz.4.2103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 683.052942][ T30] audit: type=1326 audit(1767088938.710:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14356 comm="syz.4.2103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=230 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 683.100413][ T30] audit: type=1326 audit(1767088938.710:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14356 comm="syz.4.2103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 683.168336][ T30] audit: type=1326 audit(1767088938.710:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14356 comm="syz.4.2103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 683.238919][ T30] audit: type=1326 audit(1767088938.710:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14356 comm="syz.4.2103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 683.286768][ T30] audit: type=1326 audit(1767088938.710:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14356 comm="syz.4.2103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 683.374028][ T30] audit: type=1326 audit(1767088938.710:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14356 comm="syz.4.2103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 683.459910][ T30] audit: type=1326 audit(1767088938.720:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14356 comm="syz.4.2103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 683.577213][T13928] IPVS: starting estimator thread 0... [ 683.679522][ T24] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 683.687326][T14375] IPVS: using max 29 ests per chain, 69600 per kthread [ 683.745140][T14380] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 683.851772][ T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 683.885627][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.945662][ T24] usb 3-1: config 0 descriptor?? [ 684.899587][ T24] ath6kl: mismatched byte count 0 vs. expected 12 [ 684.911895][ T24] ath6kl: Failed to init ath6kl core: -22 [ 684.918300][ T24] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 684.934612][T14394] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2112'. [ 684.944706][T14394] netlink: 'syz.4.2112': attribute type 10 has an invalid length. [ 685.190601][T14402] netlink: 'syz.1.2116': attribute type 11 has an invalid length. [ 685.240577][ T5918] usb 3-1: USB disconnect, device number 66 [ 685.388658][ T5827] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 685.438716][ T24] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 685.529040][ T5827] usb 5-1: device descriptor read/64, error -71 [ 685.598736][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 685.611402][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 685.698347][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 685.710266][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 685.744090][ T24] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 685.765053][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.793410][ T5827] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 685.794029][ T24] usb 2-1: Product: syz [ 685.911626][ T24] usb 2-1: Manufacturer: syz [ 685.916708][ T24] usb 2-1: SerialNumber: syz [ 685.937321][ T24] usb 2-1: config 0 descriptor?? [ 685.954831][ T24] streamzap 2-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 686.049025][ T5827] usb 5-1: device descriptor read/64, error -71 [ 686.196812][T14407] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 686.223185][T14407] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 686.238831][T14407] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 686.365191][ T5827] usb usb5-port1: attempt power cycle [ 686.375288][ T24] usb 2-1: USB disconnect, device number 85 [ 686.765758][ T5827] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 686.812843][ T5827] usb 5-1: device descriptor read/8, error -71 [ 687.098683][ T5827] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 687.123583][ T5827] usb 5-1: device descriptor read/8, error -71 [ 687.220934][T13928] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 687.273444][ T5827] usb usb5-port1: unable to enumerate USB device [ 687.342810][T14423] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 687.543721][T13928] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 687.554247][T13928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 687.575367][T13928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 687.600053][T13928] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 687.788719][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 687.879087][T13928] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 687.898778][T13928] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 687.909273][T13928] usb 3-1: Manufacturer: syz [ 687.998014][T13928] usb 3-1: config 0 descriptor?? [ 688.270849][T13197] Bluetooth: hci4: command 0x0406 tx timeout [ 688.277011][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 688.317183][T14437] netlink: 'syz.0.2123': attribute type 1 has an invalid length. [ 688.428802][T13928] rc_core: IR keymap rc-hauppauge not found [ 688.448372][T13928] Registered IR keymap rc-empty [ 688.455766][T13928] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 688.484957][T13928] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 688.515928][T13928] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 688.547061][T13928] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input139 [ 688.577919][T13928] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 688.609856][T13928] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 688.653968][T13928] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 688.679323][T13928] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 688.699934][T13928] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 688.730483][T13928] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 688.739292][T14443] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2126'. [ 688.778472][T13928] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 688.790008][T14443] netlink: 'syz.0.2126': attribute type 10 has an invalid length. [ 688.819169][T13928] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 688.849172][T13928] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 688.880915][T13928] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 688.903271][T13928] mceusb 3-1:0.0: Registered ࠖ with mce emulator interface version 1 [ 688.914482][T13928] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 688.932721][T13928] usb 3-1: USB disconnect, device number 67 [ 690.029621][ T6312] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 690.408652][ T6312] usb 4-1: Using ep0 maxpacket: 8 [ 690.447394][ T6312] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 690.468335][ T6312] usb 4-1: config 179 has no interface number 0 [ 690.488413][ T6312] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 690.507901][ T6312] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 690.535721][ T6312] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 690.561065][ T6312] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 690.585959][ T6312] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 690.615810][ T6312] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 690.642252][ T6312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.674710][T14459] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 691.092226][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.098744][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.277257][T13928] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input140 [ 691.472563][T14459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2132'. [ 691.483812][T14483] netlink: 'syz.2.2137': attribute type 1 has an invalid length. [ 691.619153][ T5918] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 691.774100][ T5918] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 691.787204][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.808026][ T5918] usb 5-1: config 0 descriptor?? [ 691.998675][ T5827] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 692.167625][ T5827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 692.183337][ T5827] usb 2-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 692.197949][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.219825][ T5827] usb 2-1: config 0 descriptor?? [ 692.235970][ T5827] smsusb:smsusb_probe: board id=8, interface number 0 [ 692.249519][ T5918] ath6kl: Failed to read usb control message: -71 [ 692.256311][ T5918] ath6kl: Unable to read the bmi data from the device: -71 [ 692.281868][ T5827] smsusb:smsusb_probe: Device initialized with return code -19 [ 692.309838][ T5918] ath6kl: Unable to recv target info: -71 [ 692.330628][ T5918] ath6kl: Failed to init ath6kl core: -71 [ 692.354153][ T5918] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 692.386195][ T5918] usb 5-1: USB disconnect, device number 98 [ 692.399251][T14499] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2141'. [ 692.440796][ T5827] usb 2-1: USB disconnect, device number 86 [ 692.503425][T14499] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2141'. [ 692.716430][T13928] usb 4-1: USB disconnect, device number 82 [ 692.716496][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 692.716550][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 693.400279][T14504] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 693.412278][T14504] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 693.418805][T14504] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 693.657364][T14517] FAULT_INJECTION: forcing a failure. [ 693.657364][T14517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 693.725736][T14517] CPU: 1 UID: 0 PID: 14517 Comm: syz.4.2148 Tainted: G L syzkaller #0 PREEMPT(full) [ 693.725774][T14517] Tainted: [L]=SOFTLOCKUP [ 693.725782][T14517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 693.725796][T14517] Call Trace: [ 693.725806][T14517] [ 693.725816][T14517] dump_stack_lvl+0xe8/0x150 [ 693.725855][T14517] should_fail_ex+0x414/0x560 [ 693.725897][T14517] _copy_to_user+0x31/0xb0 [ 693.725927][T14517] simple_read_from_buffer+0xe1/0x170 [ 693.725962][T14517] proc_fail_nth_read+0x1b3/0x220 [ 693.725991][T14517] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 693.726019][T14517] ? rw_verify_area+0x2a6/0x4d0 [ 693.726040][T14517] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 693.726065][T14517] vfs_read+0x200/0xa30 [ 693.726085][T14517] ? fdget_pos+0x247/0x320 [ 693.726119][T14517] ? __pfx___mutex_lock+0x10/0x10 [ 693.726144][T14517] ? __pfx_vfs_read+0x10/0x10 [ 693.726167][T14517] ? __fget_files+0x2a/0x420 [ 693.726200][T14517] ? __fget_files+0x3a0/0x420 [ 693.726228][T14517] ? __fget_files+0x2a/0x420 [ 693.726265][T14517] ksys_read+0x145/0x250 [ 693.726290][T14517] ? __pfx_ksys_read+0x10/0x10 [ 693.726323][T14517] __do_fast_syscall_32+0x1dc/0x560 [ 693.726347][T14517] ? lockdep_hardirqs_on+0x7b/0x110 [ 693.726368][T14517] ? do_fast_syscall_32+0x34/0x80 [ 693.726392][T14517] ? irqentry_exit+0x10f/0x660 [ 693.726418][T14517] do_fast_syscall_32+0x34/0x80 [ 693.726443][T14517] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 693.726471][T14517] RIP: 0023:0xf7f92539 [ 693.726490][T14517] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 693.726510][T14517] RSP: 002b:00000000f5486590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 693.726533][T14517] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5486620 [ 693.726549][T14517] RDX: 000000000000000f RSI: 00000000f7426ff4 RDI: 0000000000000000 [ 693.726563][T14517] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 693.726576][T14517] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 693.726589][T14517] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 693.726622][T14517] [ 694.671501][T13928] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 694.861211][T13928] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 694.870814][T13928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.888216][T13928] usb 5-1: config 0 descriptor?? [ 695.151025][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 695.469559][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 695.475739][T13197] Bluetooth: hci4: command 0x0406 tx timeout [ 695.753933][T13928] ath6kl: mismatched byte count 0 vs. expected 12 [ 695.767742][T13928] ath6kl: Failed to init ath6kl core: -22 [ 695.815285][T13928] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 695.908954][ T5918] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 695.991175][T14546] netlink: 'syz.2.2153': attribute type 1 has an invalid length. [ 696.085344][ T5918] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 696.105954][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.131293][ T5918] usb 4-1: config 0 descriptor?? [ 696.222512][ T5827] usb 5-1: USB disconnect, device number 99 [ 696.639995][ T5918] ath6kl: Failed to read usb control message: -71 [ 696.647025][ T5918] ath6kl: Unable to read the bmi data from the device: -71 [ 696.657307][ T5918] ath6kl: Unable to recv target info: -71 [ 696.664851][ T5918] ath6kl: Failed to init ath6kl core: -71 [ 696.673226][ T5918] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 696.686996][ T5918] usb 4-1: USB disconnect, device number 83 [ 696.779104][T13928] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 696.934262][T13928] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 696.944576][T13928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.956311][T13928] usb 3-1: config 0 descriptor?? [ 697.010279][T14569] netlink: 'syz.4.2161': attribute type 11 has an invalid length. [ 697.259030][ T24] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 697.376271][T13928] ath6kl: Failed to read usb control message: -71 [ 697.391700][T13928] ath6kl: Unable to read the bmi data from the device: -71 [ 697.399653][T13928] ath6kl: Unable to recv target info: -71 [ 697.416051][T13928] ath6kl: Failed to init ath6kl core: -71 [ 697.424028][T13928] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 697.441933][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 697.449649][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 697.464382][T13928] usb 3-1: USB disconnect, device number 68 [ 697.474025][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 697.489964][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 697.503761][ T24] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 697.516379][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.530959][ T24] usb 5-1: Product: syz [ 697.536864][ T24] usb 5-1: Manufacturer: syz [ 697.544232][ T24] usb 5-1: SerialNumber: syz [ 697.553991][ T24] usb 5-1: config 0 descriptor?? [ 697.572966][ T24] streamzap 5-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 697.778481][T13928] usb 5-1: USB disconnect, device number 100 [ 698.947801][T14587] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 698.956439][T14587] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 698.966392][T14587] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 700.109541][ T5884] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 700.149560][ T108] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 700.290727][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.301427][ T5884] usb 4-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00 [ 700.311565][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.321747][ T108] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 700.331315][ T108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.366236][ T5884] usb 4-1: config 0 descriptor?? [ 700.375666][ T108] usb 5-1: config 0 descriptor?? [ 700.748817][T13197] Bluetooth: hci1: command 0x0c1a tx timeout [ 700.880815][ T108] ath6kl: Failed to read usb control message: -71 [ 700.899154][ T108] ath6kl: Unable to read the bmi data from the device: -71 [ 700.912619][ T108] ath6kl: Unable to recv target info: -71 [ 700.935682][ T108] ath6kl: Failed to init ath6kl core: -71 [ 700.947831][ T108] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 700.975141][ T108] usb 5-1: USB disconnect, device number 101 [ 700.988747][T13197] Bluetooth: hci4: command 0x0406 tx timeout [ 700.989417][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 701.005922][T14612] xt_CT: You must specify a L4 protocol and not use inversions on it [ 701.308804][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 701.308906][ T5827] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 701.480332][ T5827] usb 2-1: Using ep0 maxpacket: 8 [ 701.505333][ T5827] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 701.525473][ T5827] usb 2-1: config 179 has no interface number 0 [ 701.544212][ T5827] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 701.573028][ T5827] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 701.591831][ T5827] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 701.608309][ T5827] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 701.626633][ T5827] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 701.640621][ T5827] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 701.650053][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.754076][T14625] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 701.930301][T14632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2177'. [ 702.075665][ T5827] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input141 [ 702.218970][ T108] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 702.274902][T14625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2175'. [ 702.382417][ T108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 702.394342][ T108] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 702.403714][ T108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.430445][ T108] usb 5-1: config 0 descriptor?? [ 702.485760][ T5827] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 702.528328][ T108] smsusb:smsusb_probe: board id=8, interface number 0 [ 702.559456][ T108] smsusb:smsusb_probe: Device initialized with return code -19 [ 702.674932][T14641] netlink: 'syz.0.2180': attribute type 1 has an invalid length. [ 702.693940][ T5827] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 702.704075][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.730005][ T5827] usb 3-1: config 0 descriptor?? [ 702.749075][ T108] usb 5-1: USB disconnect, device number 102 [ 702.868299][ T5884] usbhid 4-1:0.0: can't add hid device: -71 [ 702.881019][ T5884] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 702.902128][ T5884] usb 4-1: USB disconnect, device number 84 [ 703.538101][ T5827] ath6kl: mismatched byte count 0 vs. expected 12 [ 703.591598][ T5827] ath6kl: Failed to init ath6kl core: -22 [ 703.641817][ T5827] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 703.938415][ T5827] usb 2-1: USB disconnect, device number 87 [ 703.938478][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 703.952854][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 704.617684][ T5884] usb 3-1: USB disconnect, device number 69 [ 704.795123][T14672] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2188'. [ 705.033793][T14676] netlink: 'syz.3.2190': attribute type 11 has an invalid length. [ 705.636618][T14683] netlink: 'syz.2.2193': attribute type 1 has an invalid length. [ 705.970143][T14690] netlink: 'syz.0.2191': attribute type 9 has an invalid length. [ 705.999960][T14690] netlink: 'syz.0.2191': attribute type 11 has an invalid length. [ 706.035335][T14690] netlink: 'syz.0.2191': attribute type 12 has an invalid length. [ 706.072810][T14690] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.2191'. [ 706.109872][T14690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2191'. [ 706.282873][T14693] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2196'. [ 706.433381][T14693] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2196'. [ 706.671438][T14669] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 706.679018][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 707.211408][T14669] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 707.285414][T14669] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 707.548951][ T24] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 707.561003][ T5827] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 707.720691][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 707.731091][ T24] usb 5-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00 [ 707.739100][ T5827] usb 4-1: Using ep0 maxpacket: 8 [ 707.754240][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.763557][ T5827] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 707.778764][ T5827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 707.791542][ T5827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 707.797051][ T24] usb 5-1: config 0 descriptor?? [ 707.817466][ T5827] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 707.841909][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.852030][ T5827] usb 4-1: Product: syz [ 707.857356][ T5827] usb 4-1: Manufacturer: syz [ 707.879160][ T5827] usb 4-1: SerialNumber: syz [ 707.887021][ T5827] usb 4-1: config 0 descriptor?? [ 707.903288][ T5827] streamzap 4-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 708.033819][ T5827] usb 4-1: USB disconnect, device number 85 [ 708.096678][T14708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2200'. [ 708.238926][ T5909] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 708.399273][ T5909] usb 3-1: device descriptor read/64, error -71 [ 708.432154][T14681] xt_CT: You must specify a L4 protocol and not use inversions on it [ 708.520002][T14718] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 708.555685][ T5827] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 708.600102][ T5827] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 708.638681][ T5909] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 708.829696][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 708.835944][ T5909] usb 3-1: device descriptor read/64, error -71 [ 708.959252][ T5909] usb usb3-port1: attempt power cycle [ 708.977330][T14727] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 709.275601][T14733] netlink: 'syz.0.2205': attribute type 1 has an invalid length. [ 709.318911][ T5909] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 709.326839][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 709.359631][ T5909] usb 3-1: device descriptor read/8, error -71 [ 709.577833][T14737] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2207'. [ 709.618693][ T5909] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 709.659849][ T5909] usb 3-1: device descriptor read/8, error -71 [ 710.355507][ T5909] usb usb3-port1: unable to enumerate USB device [ 710.612176][T14751] netlink: 'syz.3.2210': attribute type 11 has an invalid length. [ 710.786418][T14745] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 710.793785][T14745] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 710.801225][T14745] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 710.877155][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 710.885153][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 710.903122][ T24] usb 5-1: USB disconnect, device number 103 [ 711.037400][T14753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2211'. [ 711.082597][ T108] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 711.289491][ T108] usb 4-1: Using ep0 maxpacket: 8 [ 711.301885][ T108] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 711.322810][ T108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 711.350786][ T108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 711.400170][ T108] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 711.423422][ T108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.447323][ T108] usb 4-1: Product: syz [ 711.456530][ T108] usb 4-1: Manufacturer: syz [ 711.473100][ T108] usb 4-1: SerialNumber: syz [ 711.496204][ T108] usb 4-1: config 0 descriptor?? [ 711.527805][ T108] streamzap 4-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 711.687055][ T108] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 711.710357][ T108] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz1] on syz0 [ 711.726769][ T5918] usb 4-1: USB disconnect, device number 86 [ 712.065054][T14764] fido_id[14764]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 712.102702][T14773] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 712.604112][T14786] netlink: 'syz.3.2219': attribute type 4 has an invalid length. [ 712.655590][T14787] netlink: 'syz.3.2219': attribute type 4 has an invalid length. [ 712.713249][T14777] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 712.828858][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 712.835007][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 712.841358][T13197] Bluetooth: hci3: command 0x0c1a tx timeout [ 713.339958][T14800] dummy0: entered promiscuous mode [ 713.381648][T14800] bond_slave_0: entered promiscuous mode [ 713.411583][T14802] netlink: 'syz.1.2222': attribute type 1 has an invalid length. [ 713.449877][T14800] bond_slave_0: left promiscuous mode [ 713.474587][T14800] dummy0: left promiscuous mode [ 714.483703][T14815] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2225'. [ 714.892498][ T6312] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 714.920439][ T6312] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 715.239151][ T108] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 715.603331][ T108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 715.616322][ T108] usb 2-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00 [ 715.626529][ T108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.649122][ T108] usb 2-1: config 0 descriptor?? [ 715.675167][T14828] fido_id[14828]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 716.268292][T14822] xt_CT: You must specify a L4 protocol and not use inversions on it [ 716.843188][T14849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2233'. [ 717.148604][T14840] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 717.167313][T14840] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 717.196696][T14840] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 717.496620][T14855] netlink: 'syz.2.2235': attribute type 1 has an invalid length. [ 717.702777][ T108] usbhid 2-1:0.0: can't add hid device: -71 [ 717.720214][ T108] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 717.804413][ T108] usb 2-1: USB disconnect, device number 88 [ 718.158488][ T5919] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 718.220061][ T5919] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz1] on syz0 [ 718.356049][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 719.228931][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 719.239613][T13197] Bluetooth: hci4: command 0x0406 tx timeout [ 719.487318][T14877] netlink: 'syz.1.2238': attribute type 9 has an invalid length. [ 719.511877][T14877] netlink: 'syz.1.2238': attribute type 11 has an invalid length. [ 719.592343][T14877] netlink: 'syz.1.2238': attribute type 12 has an invalid length. [ 719.602141][T14877] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.2238'. [ 719.624856][T14877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2238'. [ 719.645686][T14884] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2244'. [ 720.071300][ T5968] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 720.111533][T14888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2245'. [ 720.253032][ T5968] usb 2-1: config 160 has an invalid interface number: 200 but max is 0 [ 720.270092][ T5968] usb 2-1: config 160 has no interface number 0 [ 720.276507][ T5968] usb 2-1: config 160 interface 200 has no altsetting 0 [ 720.295261][ T5968] usb 2-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 720.305055][ T5968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.317522][ T5968] usb 2-1: Product: syz [ 720.327673][ T5968] usb 2-1: Manufacturer: syz [ 720.339197][ T5968] usb 2-1: SerialNumber: syz [ 721.074005][T14902] dummy0: entered promiscuous mode [ 721.090887][T14902] bond_slave_0: entered promiscuous mode [ 721.101248][T14902] bond_slave_0: left promiscuous mode [ 721.118733][T14905] netlink: 'syz.4.2248': attribute type 1 has an invalid length. [ 721.120366][T14904] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2247'. [ 721.172910][T14896] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 721.239258][T14902] dummy0: left promiscuous mode [ 722.080115][ T5884] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 722.131961][ T5884] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 722.320522][T14923] fido_id[14923]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 722.389722][ T5968] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 722.396950][ T5968] usb 2-1: MIDIStreaming interface descriptor not found [ 722.509205][ T5968] usb 2-1: USB disconnect, device number 89 [ 722.583487][ T9280] udevd[9280]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 722.838441][T14937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2257'. [ 722.929273][ T5884] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 723.144022][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 723.161772][ T5884] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 723.171675][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.221638][ T5884] usb 5-1: config 0 descriptor?? [ 723.245343][ T5884] smsusb:smsusb_probe: board id=8, interface number 0 [ 723.255698][ T5884] smsusb:smsusb_probe: Device initialized with return code -19 [ 723.445497][T14850] usb 5-1: USB disconnect, device number 104 [ 725.309047][T14946] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 725.315371][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 725.632082][T14946] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 725.641268][T14946] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 725.899198][ T24] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 725.960080][ T5884] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 725.979997][ T5884] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 726.017305][T14973] dummy0: entered promiscuous mode [ 726.047060][T14973] bond_slave_0: entered promiscuous mode [ 726.054452][T14975] netlink: 'syz.3.2266': attribute type 1 has an invalid length. [ 726.063214][T14973] bond_slave_0: left promiscuous mode [ 726.074479][T14973] dummy0: left promiscuous mode [ 726.079785][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 726.096903][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 726.128922][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 726.175872][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 726.311539][ T24] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 726.321181][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.341438][T14974] fido_id[14974]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 726.355832][ T24] usb 3-1: Product: syz [ 726.365920][ T24] usb 3-1: Manufacturer: syz [ 726.371632][ T24] usb 3-1: SerialNumber: syz [ 726.393261][ T24] usb 3-1: config 0 descriptor?? [ 726.415985][ T24] streamzap 3-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 726.510788][T14982] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2269'. [ 726.634788][ T24] usb 3-1: USB disconnect, device number 74 [ 726.958816][ T5884] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 727.126442][ T5884] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 727.136827][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.151113][ T5884] usb 2-1: config 0 descriptor?? [ 727.389523][T13197] Bluetooth: hci3: command 0x0c1a tx timeout [ 727.708943][T13197] Bluetooth: hci4: command 0x0406 tx timeout [ 728.118015][ T5884] ath6kl: mismatched byte count 0 vs. expected 12 [ 728.192396][ T5884] ath6kl: Failed to init ath6kl core: -22 [ 728.307594][ T5884] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 728.407309][ T6672] usb 2-1: USB disconnect, device number 90 [ 728.595490][T15008] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 728.612585][T15008] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 728.624132][T15008] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 729.391917][T15018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2277'. [ 729.461207][T15015] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 729.572842][ T5919] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 729.597613][ T5919] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 730.399656][T13197] Bluetooth: hci1: command 0x0c1a tx timeout [ 730.674007][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 730.704568][T13197] Bluetooth: hci3: command 0x0c1a tx timeout [ 731.728796][ T6672] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 731.900773][ T6672] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 731.925045][ T6672] usb 4-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 731.948716][ T6672] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.983055][ T6672] usb 4-1: config 0 descriptor?? [ 732.009394][ T6672] smsusb:smsusb_probe: board id=8, interface number 0 [ 732.052220][ T6672] smsusb:smsusb_probe: Device initialized with return code -19 [ 732.201530][ T5919] usb 4-1: USB disconnect, device number 87 [ 732.716020][T15047] syz.1.2285 (15047): drop_caches: 2 [ 732.723726][T15047] syz.1.2285 (15047): drop_caches: 2 [ 734.434008][T15069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2290'. [ 734.468817][T14850] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 734.535555][T15071] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2291'. [ 734.629813][T14850] usb 2-1: Using ep0 maxpacket: 16 [ 734.638393][T14850] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 734.661611][T14850] usb 2-1: config 0 interface 0 has no altsetting 0 [ 734.680593][T14850] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 734.691752][T15071] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2291'. [ 734.709097][T14850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.761168][T14850] usb 2-1: config 0 descriptor?? [ 735.060558][T15071] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2291'. [ 735.210294][T14850] nzxt-smart2 0003:1E71:2009.002D: unknown main item tag 0x0 [ 735.253490][T14850] nzxt-smart2 0003:1E71:2009.002D: unknown main item tag 0x0 [ 735.308959][T14850] nzxt-smart2 0003:1E71:2009.002D: unknown main item tag 0x0 [ 735.329057][T14850] nzxt-smart2 0003:1E71:2009.002D: unknown main item tag 0x0 [ 735.398459][T14850] nzxt-smart2 0003:1E71:2009.002D: unknown main item tag 0x0 [ 735.490699][T14850] nzxt-smart2 0003:1E71:2009.002D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 735.677262][T15084] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 735.684368][T15084] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 735.691311][T15084] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 735.854173][T15097] syz.4.2295 (15097): drop_caches: 2 [ 735.861467][ T24] usb 2-1: USB disconnect, device number 91 [ 736.056664][T15094] fido_id[15094]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 736.738963][T14850] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 736.898787][T14850] usb 2-1: Using ep0 maxpacket: 16 [ 736.909661][T14850] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 736.918664][T14850] usb 2-1: config 1 has no interface number 0 [ 736.925611][T14850] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 736.950164][T14850] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 736.976487][T14850] usb 2-1: config 1 interface 105 has no altsetting 0 [ 736.989223][T13197] Bluetooth: hci1: command 0x0c1a tx timeout [ 736.998420][T14850] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 737.014458][T14850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.071287][T14850] usb 2-1: Product: syz [ 737.082977][T14850] usb 2-1: Manufacturer: syz [ 737.097256][T14850] usb 2-1: SerialNumber: syz [ 737.118319][T15102] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 737.128825][T15102] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 737.288737][ T108] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 737.460834][ T108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 737.473566][ T108] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 737.483126][ T108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.507125][ T108] usb 5-1: config 0 descriptor?? [ 737.540382][ T108] smsusb:smsusb_probe: board id=8, interface number 0 [ 737.542497][T15102] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 737.583626][ T108] smsusb:smsusb_probe: Device initialized with return code -19 [ 737.595232][T15102] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 737.708792][T13197] Bluetooth: hci3: command 0x0c1a tx timeout [ 737.738104][ T108] usb 5-1: USB disconnect, device number 105 [ 737.788843][T13197] Bluetooth: hci4: command 0x0406 tx timeout [ 737.810666][T14850] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 737.842321][T14850] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71 [ 737.890158][T14850] usb 2-1: USB disconnect, device number 92 [ 738.550537][T15110] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2300'. [ 738.892346][T15121] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2303'. [ 740.489863][T15146] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 740.605337][T15149] dummy0: entered promiscuous mode [ 740.620791][T15149] bond_slave_0: entered promiscuous mode [ 740.636118][T15149] bond_slave_0: left promiscuous mode [ 740.653335][T15149] dummy0: left promiscuous mode [ 740.667071][T15151] netlink: 'syz.4.2311': attribute type 1 has an invalid length. [ 741.491144][T15157] syz.4.2313 (15157): drop_caches: 2 [ 741.498011][T15157] syz.4.2313 (15157): drop_caches: 2 [ 741.589053][ T6312] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 741.753073][ T6312] usb 3-1: Using ep0 maxpacket: 32 [ 741.763780][ T6312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 741.777759][ T6312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 741.825551][ T6312] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 741.857195][ T6312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.030975][ T6312] usb 3-1: config 0 descriptor?? [ 742.258815][ T24] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 742.530318][ T24] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 742.554024][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.578146][ T6312] savu 0003:1E7D:2D5A.002E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 742.612964][ T24] usb 4-1: config 0 descriptor?? [ 742.784486][ T6672] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 742.810007][ T6672] hid-generic 0000:0000:0000.002F: hidraw1: HID v0.00 Device [syz1] on syz0 [ 743.076212][ T6312] usb 3-1: USB disconnect, device number 75 [ 743.761840][ T24] ath6kl: mismatched byte count 0 vs. expected 12 [ 743.775962][ T24] ath6kl: Failed to init ath6kl core: -22 [ 743.794574][T15181] fido_id[15181]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 743.819761][ T24] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 744.126766][ T6672] usb 4-1: USB disconnect, device number 88 [ 744.349404][T14850] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 744.527550][T14850] usb 2-1: too many configurations: 12, using maximum allowed: 8 [ 744.587142][T14850] usb 2-1: config index 0 descriptor too short (expected 7212, got 137) [ 744.597713][T14850] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 744.613915][T14850] usb 2-1: config index 1 descriptor too short (expected 7212, got 137) [ 744.697535][T14850] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 744.727287][T14850] usb 2-1: config index 2 descriptor too short (expected 7212, got 137) [ 744.749293][T14850] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 744.775456][T14850] usb 2-1: config index 3 descriptor too short (expected 7212, got 137) [ 744.784296][T14850] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 744.808397][T14850] usb 2-1: config index 4 descriptor too short (expected 7212, got 137) [ 744.822885][T14850] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 744.981552][T14850] usb 2-1: config index 5 descriptor too short (expected 7212, got 137) [ 744.993290][T14850] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 745.022944][T14850] usb 2-1: config index 6 descriptor too short (expected 7212, got 137) [ 745.278719][T14850] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 745.301794][T14850] usb 2-1: config index 7 descriptor too short (expected 7212, got 137) [ 745.332105][T14850] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 745.373036][T14850] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 745.423889][T14850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.491125][T14850] usb 2-1: Product: syz [ 745.512873][T14850] usb 2-1: Manufacturer: syz [ 745.560792][T14850] usb 2-1: SerialNumber: syz [ 745.731780][T14850] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 745.801426][ T6672] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 746.908698][ T6672] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 747.009269][ T6672] ath9k_htc: Failed to initialize the device [ 747.142846][ T6672] usb 2-1: ath9k_htc: USB layer deinitialized [ 747.547814][T14850] usb 2-1: USB disconnect, device number 93 [ 748.281219][T14850] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 748.443927][T14850] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 748.460492][T14850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.492535][T15253] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 748.571047][T14850] usb 4-1: Product: syz [ 748.578424][T14850] usb 4-1: Manufacturer: syz [ 748.587518][T14850] usb 4-1: SerialNumber: syz [ 748.599155][T14850] usb 4-1: config 0 descriptor?? [ 748.830311][T14850] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 749.414761][T14850] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 749.432001][T14850] usb 4-1: USB disconnect, device number 89 [ 749.811404][ T108] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 749.831715][ T108] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz1] on syz0 [ 750.097666][T15263] fido_id[15263]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 750.468762][ T24] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 750.518676][T15174] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 750.619347][ T6312] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 750.628500][ T24] usb 4-1: too many configurations: 241, using maximum allowed: 8 [ 750.654672][ T24] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 750.666131][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.674863][ T24] usb 4-1: Product: syz [ 750.680409][ T24] usb 4-1: Manufacturer: syz [ 750.685447][ T24] usb 4-1: SerialNumber: syz [ 750.691972][T15174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 750.710097][T15174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 750.722393][T15174] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 750.733507][ T24] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 750.761744][ T5919] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 750.776761][ T6312] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 750.789606][T15174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.805897][ T6312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.827424][T15174] usb 2-1: config 0 descriptor?? [ 750.833246][ T6312] usb 5-1: Product: syz [ 750.837785][ T6312] usb 5-1: Manufacturer: syz [ 750.843680][ T6312] usb 5-1: SerialNumber: syz [ 751.006267][T15267] sit0: entered promiscuous mode [ 751.019016][T15267] sit0: entered allmulticast mode [ 751.077026][T15268] loop6: detected capacity change from 0 to 524287999 [ 751.105639][T15268] xt_CT: You must specify a L4 protocol and not use inversions on it [ 751.155834][T15174] usbhid 2-1:0.0: can't add hid device: -71 [ 751.179176][T15174] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 751.235682][T15174] usb 2-1: USB disconnect, device number 94 [ 751.292886][ T6312] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 751.322117][ T6312] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 751.889138][ T5919] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 751.922617][ T5919] ath9k_htc: Failed to initialize the device [ 752.026859][ T5919] usb 4-1: ath9k_htc: USB layer deinitialized [ 752.513933][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.520679][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.558738][T15174] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 752.572661][ T6312] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 752.597290][ T6312] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 752.708735][T15174] usb 3-1: Using ep0 maxpacket: 8 [ 752.719496][T15174] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 752.747845][T15174] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 752.761747][T15174] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 752.775748][T15174] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 752.794753][T15174] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 752.810433][T15174] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 752.823532][T15271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.840329][T15174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.853033][T15271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.881146][ T6312] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000118. ret = -EPROTO [ 752.912489][ T6312] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 752.934780][ T6312] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 752.952283][ T6312] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 752.992401][ T6312] usb 5-1: USB disconnect, device number 106 [ 753.075920][T15174] usb 3-1: usb_control_msg returned -32 [ 753.083311][T15174] usbtmc 3-1:16.0: can't read capabilities [ 753.206909][ T108] usb 4-1: USB disconnect, device number 90 [ 753.267869][T14850] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 753.279897][T14850] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz1] on syz0 [ 753.352880][T15301] fido_id[15301]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 754.000979][T15320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.037399][T15320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.356300][T15329] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 755.998729][T15339] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2364'. [ 756.231549][T14850] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 756.266031][T14850] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [syz1] on syz0 [ 756.467996][T15346] fido_id[15346]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 756.689013][T14850] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 756.829702][T15359] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 756.872700][T14850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 756.884422][T14850] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 756.895123][T14850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.911747][T14850] usb 5-1: config 0 descriptor?? [ 756.923143][T14850] smsusb:smsusb_probe: board id=8, interface number 0 [ 756.936210][T14850] smsusb:smsusb_probe: Device initialized with return code -19 [ 757.126285][T15174] usb 5-1: USB disconnect, device number 107 [ 757.633487][T15368] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 759.118812][T15377] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 759.126877][T15377] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 759.134816][T15377] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 759.230647][T15320] usbtmc 3-1:16.0: usb_control_msg returned -110 [ 759.258115][ T5919] usb 3-1: USB disconnect, device number 76 [ 759.889286][ T5919] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 760.049112][ T5919] usb 2-1: Using ep0 maxpacket: 32 [ 760.057392][ T5919] usb 2-1: config 0 has an invalid interface number: 247 but max is 0 [ 760.068256][ T5919] usb 2-1: config 0 has no interface number 0 [ 760.079723][ T5919] usb 2-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 760.093620][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 760.370505][T15389] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 760.475774][ T5919] usb 2-1: Product: syz [ 760.534245][ T5919] usb 2-1: Manufacturer: syz [ 760.636387][ T5919] usb 2-1: config 0 descriptor?? [ 760.888276][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 761.178870][T13197] Bluetooth: hci3: command 0x0c1a tx timeout [ 761.180671][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 762.127804][T14850] usb 2-1: USB disconnect, device number 95 [ 762.392699][T14850] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 762.423802][T14850] hid-generic 0000:0000:0000.0033: hidraw0: HID v0.00 Device [syz1] on syz0 [ 762.621057][T15409] fido_id[15409]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 762.725615][T15419] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2383'. [ 762.737638][T15419] netlink: 'syz.3.2383': attribute type 10 has an invalid length. [ 763.198665][T14850] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 763.350702][T14850] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 763.362653][T14850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.373621][T14850] usb 4-1: config 0 descriptor?? [ 763.718701][ T6672] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 763.819681][T15425] tipc: Enabling of bearer rejected, failed to enable media [ 763.848047][T15425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2385'. [ 763.891474][ T6672] usb 2-1: Using ep0 maxpacket: 8 [ 764.015306][ T6672] usb 2-1: unable to get BOS descriptor or descriptor too short [ 764.059799][ T6672] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 764.094457][ T6672] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 764.117630][ T6672] usb 2-1: config 4 has no interface number 0 [ 764.200711][T14850] pegasus 4-1:0.0: probe with driver pegasus failed with error -71 [ 764.263765][T14850] usb 4-1: USB disconnect, device number 91 [ 764.346976][ T6672] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 764.357545][ T6672] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.368062][ T6672] usb 2-1: Product: syz [ 764.373413][ T6672] usb 2-1: Manufacturer: syz [ 764.391065][ T6672] usb 2-1: SerialNumber: syz [ 764.657938][T15434] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2387'. [ 765.445013][T15445] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 766.459518][ T6672] uvcvideo 2-1:4.147: probe with driver uvcvideo failed with error -22 [ 766.484305][ T6672] usb 2-1: USB disconnect, device number 96 [ 767.059198][ T6312] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 767.221938][ T6312] usb 4-1: Using ep0 maxpacket: 32 [ 767.248565][ T6312] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 767.258052][ T6312] usb 4-1: config 0 has no interface number 0 [ 767.286188][ T6312] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 767.306633][ T6312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.317180][ T6312] usb 4-1: Product: syz [ 767.325079][ T6312] usb 4-1: Manufacturer: syz [ 767.332748][ T6312] usb 4-1: SerialNumber: syz [ 767.350691][ T6312] usb 4-1: config 0 descriptor?? [ 767.375627][ T6312] smsc95xx v2.0.0 [ 767.418751][ T5919] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 767.591670][ T5919] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 767.601464][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.633328][ T5919] usb 5-1: config 0 descriptor?? [ 768.103832][T15458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.239534][T15458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.282165][T15458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.379157][T15458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.431997][ T6312] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 768.463621][ T6312] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 768.488339][ T6312] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 768.506162][ T6312] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 768.525726][ T6312] usb 4-1: USB disconnect, device number 92 [ 768.788644][T15471] netlink: 'syz.2.2395': attribute type 1 has an invalid length. [ 768.847281][ T5919] ath6kl: mismatched byte count 0 vs. expected 12 [ 768.864956][ T5919] ath6kl: Failed to init ath6kl core: -22 [ 768.872744][ T5919] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 769.123105][ T5919] usb 5-1: USB disconnect, device number 108 [ 769.688879][ T6672] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 769.888652][ T6672] usb 2-1: Using ep0 maxpacket: 8 [ 769.897276][ T6672] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 769.928903][ T6672] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 769.943136][ T6672] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 769.970303][ T6672] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 769.986033][ T6672] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 770.010538][ T6672] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 770.031143][ T6672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.112151][T15497] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 770.151322][ T5919] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 770.279318][ T6672] usb 2-1: usb_control_msg returned -32 [ 770.285699][ T6672] usbtmc 2-1:16.0: can't read capabilities [ 770.368958][ T5919] usb 4-1: Using ep0 maxpacket: 32 [ 770.381796][ T5919] usb 4-1: config 0 has an invalid interface number: 247 but max is 0 [ 770.390702][ T5919] usb 4-1: config 0 has no interface number 0 [ 770.403621][ T5919] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 770.413965][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 770.484477][ T5919] usb 4-1: Product: syz [ 770.501411][ T5919] usb 4-1: Manufacturer: syz [ 770.575410][ T5919] usb 4-1: config 0 descriptor?? [ 770.934778][T15478] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -90 [ 770.980067][ T5919] usb 4-1: USB disconnect, device number 93 [ 771.039393][T15501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.053993][T15501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.449237][T15511] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 771.608798][ T6672] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 771.768889][ T6672] usb 5-1: Using ep0 maxpacket: 32 [ 771.811745][ T6672] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 771.828265][ T6672] usb 5-1: config 0 has no interface number 0 [ 771.840429][ T6672] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 771.850447][ T6672] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.859018][ T6672] usb 5-1: Product: syz [ 771.868237][ T6672] usb 5-1: Manufacturer: syz [ 771.874782][ T6672] usb 5-1: SerialNumber: syz [ 771.886940][ T6672] usb 5-1: config 0 descriptor?? [ 771.903134][ T6672] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 772.048723][T14850] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 772.521100][ T6672] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 772.554996][ T6672] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 772.719396][T14850] usb 4-1: Using ep0 maxpacket: 16 [ 772.728237][T14850] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.743578][T14850] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 772.818706][T14850] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 772.861915][T14850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.912103][T14850] usb 4-1: config 0 descriptor?? [ 773.152606][T15520] netlink: 'syz.2.2408': attribute type 1 has an invalid length. [ 773.522728][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 773.525267][ T5919] usb 5-1: USB disconnect, device number 109 [ 773.649661][ T5919] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 773.927528][ T5919] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 773.984791][ T5919] quatech2 5-1:0.51: device disconnected [ 774.257826][T15514] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 774.311065][T15514] bond2 (unregistering): Released all slaves [ 774.585848][T14850] usbhid 4-1:0.0: can't add hid device: -71 [ 774.596162][T14850] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 774.615702][T14850] usb 4-1: USB disconnect, device number 94 [ 774.668966][ T5919] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 774.828706][ T5919] usb 5-1: Using ep0 maxpacket: 32 [ 774.837626][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 774.850221][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 774.861464][ T5919] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 774.872193][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.884945][ T5919] usb 5-1: config 0 descriptor?? [ 775.347441][ T5919] savu 0003:1E7D:2D5A.0034: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 775.411542][T15545] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 776.189971][T15501] usbtmc 2-1:16.0: usb_control_msg returned -110 [ 776.441862][ T5899] usb 2-1: USB disconnect, device number 97 [ 776.947385][T15557] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2417'. [ 777.279949][T14850] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 777.298732][ T5827] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 777.354010][ T24] usb 5-1: USB disconnect, device number 110 [ 777.450788][T15568] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 777.498807][T14850] usb 4-1: Using ep0 maxpacket: 8 [ 777.517653][ T5827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.545139][T14850] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 777.558238][ T5827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 777.570262][T14850] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 777.581750][T15571] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 777.590881][ T5827] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 777.614936][T14850] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 777.640355][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.651484][T14850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.720778][T14850] usb 4-1: Product: 쐜騷䲺몰ꧺﱝᾮ鉶틤䪛딿ੀ曶鰲霨蕲ﴚ捘蹦믻䆯闬ᨚ今ㆁ䀲櫕꿱줂㕞坴多Ѩᓴ걸乣鍦㑌쨻梪曈帄枂緘 [ 777.739189][ T5827] usb 2-1: config 0 descriptor?? [ 777.768859][ T6672] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 777.792301][T14850] usb 4-1: Manufacturer: 涇夡螭㧻蚎指幨蹝䲿뛹ᛱ妩틎绂닼ﻦ୧鎎䗤긨퐍ᗈ⚔蓔㔵윉늛쯥岩㲆ﭑ怞ᨃ꺍筬쀚ጆ࿀⼧ꋺę䦚䨳 [ 777.824952][T14850] usb 4-1: SerialNumber: В [ 777.943985][ T6672] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 777.949674][ T24] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 777.956151][ T6672] usb 3-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 777.988447][ T6672] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.000016][T15557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.015062][ T6672] usb 3-1: config 0 descriptor?? [ 778.035765][ T6672] smsusb:smsusb_probe: board id=8, interface number 0 [ 778.042834][T15557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.067459][T14850] cdc_ncm 4-1:1.0: bind() failure [ 778.080090][T14850] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 778.087737][ T6672] smsusb:smsusb_probe: Device initialized with return code -19 [ 778.098456][T14850] cdc_ncm 4-1:1.1: bind() failure [ 778.118688][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 778.141333][ T24] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 778.152906][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.184831][T14850] usb 4-1: USB disconnect, device number 95 [ 778.242196][ T24] usb 5-1: Product: syz [ 778.264011][ T5827] cp2112 0003:10C4:EA90.0035: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 778.279130][ T24] usb 5-1: Manufacturer: syz [ 778.311288][ T24] usb 5-1: SerialNumber: syz [ 778.340977][ T24] usb 5-1: config 0 descriptor?? [ 778.344519][ T6672] usb 3-1: USB disconnect, device number 77 [ 778.532623][ T5827] cp2112 0003:10C4:EA90.0035: Part Number: 0x82 Device Version: 0xFE [ 778.735474][ T5827] cp2112 0003:10C4:EA90.0035: error requesting SMBus config [ 778.763740][ T5827] cp2112 0003:10C4:EA90.0035: probe with driver cp2112 failed with error -5 [ 778.773359][ T24] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 778.784825][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 778.799642][ T24] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 778.825059][ T24] usb 5-1: media controller created [ 778.882113][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 779.328226][T15580] IPVS: rr: FWM 3 0x00000003 - no destination available [ 779.460394][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 779.469786][ T24] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 779.489114][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 779.519036][T15559] ------------[ cut here ]------------ [ 779.522298][ T24] usb 5-1: USB disconnect, device number 111 [ 779.524776][T15559] usb 5-1: BOGUS control dir, pipe 80006f80 doesn't match bRequestType c0 [ 779.542427][T15559] WARNING: drivers/usb/core/urb.c:414 at usb_submit_urb+0x105c/0x18d0, CPU#0: syz.1.2417/15559 [ 779.554321][T15559] Modules linked in: [ 779.558726][T15559] CPU: 0 UID: 0 PID: 15559 Comm: syz.1.2417 Tainted: G L syzkaller #0 PREEMPT(full) [ 779.572093][T15559] Tainted: [L]=SOFTLOCKUP [ 779.577691][T15559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 779.590373][T15559] RIP: 0010:usb_submit_urb+0x111c/0x18d0 [ 779.597382][T15559] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b7 f2 ff ff 89 e9 [ 779.619912][T15559] RSP: 0018:ffffc900034374a0 EFLAGS: 00010246 [ 779.627252][T15559] RAX: 0000000000000000 RBX: ffff888075a98f00 RCX: 0000000080006f80 [ 779.638791][T15559] RDX: ffff888077856300 RSI: ffffffff8c140a00 RDI: ffffffff8f8ee380 [ 779.648644][T15559] RBP: 1ffff11008b5b430 R08: 00000000000000c0 R09: 0000000000000000 [ 779.658481][T15559] R10: ffffc900034375a0 R11: fffff52000686ec0 R12: ffff88801ff36100 [ 779.669772][T15559] R13: ffff888045ada180 R14: 0000000080006f80 R15: ffff888077856300 [ 779.679053][T15559] FS: 0000000000000000(0000) GS:ffff888125e21000(0063) knlGS:00000000f5465b40 [ 779.690307][T15559] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 779.698075][T15559] CR2: 000000000c33dc5e CR3: 0000000075dd0000 CR4: 00000000003526f0 [ 779.706185][T15559] Call Trace: [ 779.709769][T15559] [ 779.712723][T15559] ? __init_swait_queue_head+0xa9/0x150 [ 779.718408][T15559] usb_start_wait_urb+0x115/0x4f0 [ 779.723648][T15559] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 779.729373][T15559] usb_control_msg+0x232/0x3e0 [ 779.734715][T15559] dtv5100_i2c_msg+0x231/0x2f0 [ 779.740276][T15559] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 779.746524][T15559] __i2c_transfer+0x79a/0x1f00 [ 779.753249][T15559] __i2c_smbus_xfer+0xf5d/0x1e20 [ 779.759260][T15559] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 779.764570][T15559] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 779.770500][T15559] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 779.776142][T15559] ? rt_mutex_lock_nested+0x172/0x1e0 [ 779.781666][T15559] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 779.787759][T15559] i2c_smbus_xfer+0x1f4/0x310 [ 779.793012][T15559] i2cdev_ioctl_smbus+0x1cd/0x750 [ 779.798317][T15559] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 779.804099][T15559] compat_i2cdev_ioctl+0x299/0x5c0 [ 779.809786][T15559] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 779.815518][T15559] ? __fget_files+0x3a0/0x420 [ 779.820337][T15559] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 779.826024][T15559] __ia32_compat_sys_ioctl+0x543/0x840 [ 779.831598][T15559] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 779.837624][T15559] ? __se_sys_futex_time32+0x360/0x3e0 [ 779.843247][T15559] ? __pfx_do_sys_openat2+0x10/0x10 [ 779.849868][T15559] ? rcu_is_watching+0x15/0xb0 [ 779.854813][T15559] __do_fast_syscall_32+0x1dc/0x560 [ 779.860673][T15559] ? do_fast_syscall_32+0x34/0x80 [ 779.866661][T15559] do_fast_syscall_32+0x34/0x80 [ 779.872461][T15559] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 779.879135][T15559] RIP: 0023:0xf7f95539 [ 779.883284][T15559] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 779.903273][T15559] RSP: 002b:00000000f546555c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 779.911866][T15559] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000000000720 [ 779.920044][T15559] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 779.928085][T15559] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 779.936198][T15559] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 779.944626][T15559] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 779.955800][T15559] [ 779.959916][T15559] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 779.967441][T15559] CPU: 0 UID: 0 PID: 15559 Comm: syz.1.2417 Tainted: G L syzkaller #0 PREEMPT(full) [ 779.979149][T15559] Tainted: [L]=SOFTLOCKUP [ 779.983787][T15559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 779.994497][T15559] Call Trace: [ 779.997812][T15559] [ 780.000836][T15559] vpanic+0x1e0/0x670 [ 780.005088][T15559] panic+0xb9/0xc0 [ 780.009019][T15559] ? __pfx_panic+0x10/0x10 [ 780.013688][T15559] __warn+0x317/0x4b0 [ 780.017956][T15559] ? usb_submit_urb+0x105c/0x18d0 [ 780.023112][T15559] ? usb_submit_urb+0x105c/0x18d0 [ 780.028328][T15559] __report_bug+0x288/0x500 [ 780.032956][T15559] ? usb_submit_urb+0x105c/0x18d0 [ 780.038078][T15559] ? __pfx___report_bug+0x10/0x10 [ 780.043145][T15559] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 780.049560][T15559] ? lockdep_hardirqs_on+0x7b/0x110 [ 780.054812][T15559] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 780.061308][T15559] ? stack_depot_save_flags+0x3f3/0x810 [ 780.067007][T15559] report_bug_entry+0x19a/0x290 [ 780.071980][T15559] ? usb_submit_urb+0x111c/0x18d0 [ 780.077049][T15559] ? usb_submit_urb+0x1121/0x18d0 [ 780.082101][T15559] handle_bug+0xca/0x200 [ 780.086572][T15559] exc_invalid_op+0x1a/0x50 [ 780.091332][T15559] asm_exc_invalid_op+0x1a/0x20 [ 780.096334][T15559] RIP: 0010:usb_submit_urb+0x111c/0x18d0 [ 780.102584][T15559] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b7 f2 ff ff 89 e9 [ 780.123796][T15559] RSP: 0018:ffffc900034374a0 EFLAGS: 00010246 [ 780.129905][T15559] RAX: 0000000000000000 RBX: ffff888075a98f00 RCX: 0000000080006f80 [ 780.138282][T15559] RDX: ffff888077856300 RSI: ffffffff8c140a00 RDI: ffffffff8f8ee380 [ 780.148182][T15559] RBP: 1ffff11008b5b430 R08: 00000000000000c0 R09: 0000000000000000 [ 780.156364][T15559] R10: ffffc900034375a0 R11: fffff52000686ec0 R12: ffff88801ff36100 [ 780.164558][T15559] R13: ffff888045ada180 R14: 0000000080006f80 R15: ffff888077856300 [ 780.173022][T15559] ? __init_swait_queue_head+0xa9/0x150 [ 780.179064][T15559] usb_start_wait_urb+0x115/0x4f0 [ 780.184153][T15559] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 780.189835][T15559] usb_control_msg+0x232/0x3e0 [ 780.195628][T15559] dtv5100_i2c_msg+0x231/0x2f0 [ 780.200441][T15559] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 780.205363][T15559] __i2c_transfer+0x79a/0x1f00 [ 780.210698][T15559] __i2c_smbus_xfer+0xf5d/0x1e20 [ 780.215867][T15559] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 780.221133][T15559] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 780.226628][T15559] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 780.232933][T15559] ? rt_mutex_lock_nested+0x172/0x1e0 [ 780.238438][T15559] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 780.244189][T15559] i2c_smbus_xfer+0x1f4/0x310 [ 780.249174][T15559] i2cdev_ioctl_smbus+0x1cd/0x750 [ 780.254825][T15559] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 780.260500][T15559] compat_i2cdev_ioctl+0x299/0x5c0 [ 780.266098][T15559] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 780.271780][T15559] ? __fget_files+0x3a0/0x420 [ 780.277025][T15559] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 780.282606][T15559] __ia32_compat_sys_ioctl+0x543/0x840 [ 780.288145][T15559] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 780.295516][T15559] ? __se_sys_futex_time32+0x360/0x3e0 [ 780.301102][T15559] ? __pfx_do_sys_openat2+0x10/0x10 [ 780.306380][T15559] ? rcu_is_watching+0x15/0xb0 [ 780.311626][T15559] __do_fast_syscall_32+0x1dc/0x560 [ 780.317046][T15559] ? do_fast_syscall_32+0x34/0x80 [ 780.322309][T15559] do_fast_syscall_32+0x34/0x80 [ 780.327633][T15559] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 780.334260][T15559] RIP: 0023:0xf7f95539 [ 780.338345][T15559] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 780.358757][T15559] RSP: 002b:00000000f546555c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 780.367863][T15559] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000000000720 [ 780.376053][T15559] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 780.384493][T15559] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 780.393005][T15559] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 780.401876][T15559] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 780.410332][T15559] [ 780.414320][T15559] Kernel Offset: disabled [ 780.418874][T15559] Rebooting in 86400 seconds..