last executing test programs: 16.296818962s ago: executing program 1 (id=1613): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100154e108101e041840b4ed010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="db", 0x1}], 0x1}}], 0x1, 0x40040) sendmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000002c0)="cf", 0x1}], 0x1, &(0x7f00000006c0)=ANY=[], 0x10}}], 0x1, 0x4044044) syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r2], 0x20}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="200000000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14.390642877s ago: executing program 1 (id=1620): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000040)={0x19980330, 0xffffffffffffffff}, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) close_range(0xffffffffffffffff, r1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) unshare(0x62040200) syz_usb_connect(0x4, 0x4a, &(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=r0], 0x0) socket$inet6(0xa, 0x1, 0xffffffff) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3000000017531db4fea8e23bc69cebd444698f7b6572bba077c51aafbc292801834552880d849fa3028d00722e9e9d4842d2d0f88497c608f4179c22383ab85f10ee0dbae87d5354b2500c916918aefe32030726e425fb54068b8ecf5e3681039fb36599dd9b869c2fa6077079018bb6f73bc8c8416f94aed1eb9827c51a21786d4f6324643a40e473be8c77098451ea99d6dba2b98bb7de062f5d0f7bdbc0503f37ed2b837b40fd34d1d6b0a1dad2500c22a596b12095f814f2bb525d6900cedd", @ANYRES64=r6, @ANYBLOB="0100b12a541c00000000070000f10400120006000000140008000000000000000000"], 0x30}}, 0x2) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001000010028bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300000008000d000100000008001b00000088de"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000010640348335d47cc1aaf9d9dea7cf1bf", @ANYRES32=0x0, @ANYBLOB="158804000300040008001b000000000008000d0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) unshare(0x12010400) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r10, 0x0, 0x0, 0x0, 0x5, 0x2de07c, 0x334e8b}) 11.172095666s ago: executing program 1 (id=1634): r0 = syz_usb_connect(0x5, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000440)={0x14, 0x0, 0x0}, &(0x7f0000000580)={0x1c, &(0x7f0000000480)={0x0, 0x30, 0x2c, "beb67ebea589058b26dd9606e5175f311f52ca0c512f06a2a9b8032ae7c528bbad62fb21ef0692b56efec9eb"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$uac2(0x4, 0xee, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x582, 0x48, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x3, 0x1, 0x9, 0x20, 0xcf, {0x8, 0xb, 0x0, 0x0, 0x1, 0xa, 0x20, 0x81}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0x8, 0x29, 0xf}, [@input_terminal={0x10, 0x24, 0x2, 0x6, 0x405, 0x1, 0x51, 0xf, 0x3, 0x3, 0x9, 0x2}, @input_terminal={0x10, 0x24, 0x2, 0x1, 0x400, 0x6, 0x1, 0x3, 0x0, 0x7, 0xff, 0xff}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x4, 0x3, 0x0, 0x7, "5290eb9bb35a7a"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x9, 0x4, 0xfe, 0x9, "db2f8a4eae"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xff, 0x8, 0x2, 0x8, 0x4}, @as_header={0x10, 0x24, 0x1, 0x80, 0x5, 0x2, 0x1001, 0x1, 0x4000, 0x10}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0xfff9, 0x8, 0xf9}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x6, 0x1, 0xe4, 0x1b, "0316"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xe, 0x77, 0x9, {0x8, 0x25, 0x1, 0x2, 0xc, 0x1, 0xe5b6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x9b2, 0x3, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x40, 0x2, 0x3, {0x8, 0x25, 0x1, 0x2, 0x2, 0x3, 0xa}}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x2b, 0x6, 0x8, 0x10, 0x94}, 0x8, &(0x7f0000000140)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0xfe, &(0x7f0000000180)=@string={0xfe, 0x3, "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"}}]}) syz_usb_control_io$uac2(r1, &(0x7f0000000300)={0x14, &(0x7f00000002c0)={0xc0, 0x34, 0x17, {0x17, 0x2, "7b3be296665ece382ef4383b10d1820b9582c649be"}}, &(0x7f00000005c0)={0x0, 0x3, 0xfe, @string={0xfe, 0x3, "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"}}}, &(0x7f0000000840)={0x44, &(0x7f0000000700)={0x20, 0xf, 0xcf, "256bc52b2558f8efe0eb97f7d2404bc8a5aed462906a8afc416ddb29d21b7f056863588eeb1bf22f241ac56912752fa94164a8383cb44ae76fee7dc032b7816a8e3d6020a4f3d02407c4e576393426b952d4fb610de3dec8447049639d959b9713f5a981681b2b4f91fe76caf587e5c822b06bec9bef2429d9f982b2a25b8383c043f026500daf4419479e9ce6b99a89a3e5ed01952aca75ab639bce348540c218a48a119c8370b12181b306daf2b2d8577d0d75b605925ea209b45348679180a8b7eea9760a1e04bf33733596fd5a"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000003c0)={0x20, 0x81, 0x3, "ea470e"}, &(0x7f00000004c0)={0x20, 0x82, 0x3, "db6a6e"}, &(0x7f0000000500)={0x20, 0x83, 0x3, "adb376"}, &(0x7f0000000540)={0x20, 0x84, 0x2, "4816"}, &(0x7f0000000800)={0x20, 0x85, 0x3, "be5af6"}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 8.644431542s ago: executing program 1 (id=1646): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x8, 0x1, 0xfffffe0000000001, 0xfa13, 0xffffffff}, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000040)={0x2, 0x7, 0x6, 0x0, 0xb, "fcf43a4942a8ba81a17f16f6ba8a8aaf09cf04", 0x1000000, 0xffff}) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000c80)="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", 0x105}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c001}, 0x80084) socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f40), 0x0, 0x0) syz_open_procfs(0x0, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000278735188b7cebb63000100950000000000000046d7761b25ac860f0f657d14d7a263b0dcc17f5558a62ceb"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="00150000000017a6c7484a3e73d92b0e0fa4c8f90c44976d495c75a0924285a570605837e122aa6e0caf87257ca75ee092e232a9da2aacd4405b51c141fd4d74dd67e6c599e9ebc6d1df220819728ecabe5ee63925b38a7bd980be640200cb472ac1dd1356baf4f5e0aa10dc5c4226af6971e274a4bc4ecb859e58df9ba046599e0387453c3727"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r5, 0x5b01, 0x0) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000001100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="e50000000000000071100a0000000000e50000000000000095000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 6.143542167s ago: executing program 0 (id=1656): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, 0x3e, 0x107, 0xfffffffc, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) 6.141059163s ago: executing program 3 (id=1657): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000000)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000001c0)={"568139cb5050a7a31ebfc4330c2bf68f86101d9a301cbe14b15f4f23031ceb319db01a783479d6b9a1201fb1cc7235f57f425131b1d59b14c7588e103ad23d61fc6b05b60536a1611da4d3a6a06d308650343e59d307e34d8c2ec3ef05629a47f994dd2e9f8b9ce05b338ae7db5267bc4082bd43ca93b78947a7c79e82df466d4fee2b222f1ebde976d2272a4f52329796330ee917cc4f5b3ec45ac1ecdaaf3dffe03c40b7c209e44cfeb08aad00e1b48da4289228d7d82d4f6a661942ace64f115d3cc6ac80f74420c390d89e7ab2133567aa41047d775e333184cc0b468ec5eb9bc3cb0fa00516e5452bf32a9e760f07efd5a5e5eb37eaff28ef92bb59498369808bdd310a4a95a5414a8ff450411ff67d3167eec8372455a19c0c5a608adfebded6974660fd85308a07860e16f62963da37448d6e1218f2092fb3d1662804623b63a07f3e5e881df9a5ac27ce3f1519003118aa6170ff423eb292dc70147bde37963f72d0642660e7107753167886fc10e108631a9ea4d6752145b8646187ba7e152b6bcbcedd6b83fb9435d5c8e8d5d25a3f173745eab94a4a296572d459a50d622c8769dc57a7cdf7efe9f259dc36f538d1836362f1bcb2c4ebceae7e3655d5e98ba481906f284bd03716c15894eca8cbf8302dc8e2c21736b697b5f868e8af96fa8bbb1ae56571616a70ce05970d1e4142f303f7586fd2fc6f0ee3dce1db6524dd6aa28faab046e074df38430a49e8a6dde71028f16539744b7867e19c856e670e8b799d52da435bb07beea6274bf512e7d6ebb8ff8f83a52e4d13602e7d4675a798a12c898ad5b00caa34313ff8fb6c3407cf815eca9795cffd9a24959653cc816851048ebf0772bebdd3ff9b8cfbd2c65c30e41586b00a14943e4815361789158139d440c4f627edb8ed59e1ca0bb0c60106e09635fa9335677337c554db885f75b899638e8df1ea9796f8258de36636346ab768856bbdfc51843a53701423d75c1f43be24469aa03d366bbfb81218b31e5c0ad716efea52175c2fa78317cafb16ee173eb5e9428509ca4c8f9bf798adc7da1758a9c0334e44200c0578495ff805fce84456205caa70f0976a8603f84cb542d0df1416602321c587556785af525ddf5548b4f51113c52a7a17042faf6c8c02d8d1835e0f67f60ab392c20fc12188db029e45bb77cfccc423671d52ec5a92d08c2bb27a676b66f3b89ac084d99e3f516426a015268a1f3fb91b13c8baba49a0765a305c13cd1f47b3ea7a6393182759b614a08d36192a8b68abef6e5c16849452c74af3a9f854e1f2bc1c2eac2f055f8ffd8fdaa6bb04a68850c585f433c0e6b8dba1401fce5aab11d75d2323d8079891175096e31013ca0a3763511c86f2fbc31a33458c52059ebe253dcd3e837fed39765a11842028df450479dd56e1325cd8d088ff12a8f7dd23f2"}) ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1000000000000037, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffd}, {0x400000b1, 0x0, 0x8}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x0, &(0x7f00000005c0)}) iopl(0x0) close_range(r6, 0xffffffffffffffff, 0x0) 5.924141189s ago: executing program 0 (id=1659): epoll_pwait2(0xffffffffffffffff, &(0x7f0000000080)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000340)={[0x13]}, 0xfffffffffffffecc) (async) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000080)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000340)={[0x13]}, 0xfffffffffffffecc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) epoll_pwait2(r1, &(0x7f0000000200)=[{}, {}, {}], 0x3, &(0x7f0000000300)={0x77359400}, &(0x7f0000000280), 0x8) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f00000002c0)={0x2, 0x4000, @empty}, 0xffffffffffffff5f, 0x0}, 0x20000011) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) (async) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r2, r0}) (async) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r2, r0}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000001c0)={r3}) 5.435211883s ago: executing program 1 (id=1660): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000005c0)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='@\t\f'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000d80)={0x1c, &(0x7f0000000c40)={0x40, 0x5, 0x28, "3636371202e8af5faf3bfd2d42cca1d93d09666ce59710f6ad53efe4eeb621c023610b492e3d21fb"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000040)={0x20, 0x16, 0x1, '\x00'/12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.955522639s ago: executing program 0 (id=1663): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x106}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) listen(r0, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) (async) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc3000000060000000087c32be695bfd3ead0084f", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x20040045}, 0x40000) (async) socket(0xa, 0xe, 0x8001) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYRES16=r3], 0x0) 4.954695252s ago: executing program 2 (id=1664): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x100000000401, 0xe) (async) set_mempolicy(0x1, &(0x7f0000000040)=0x100000000401, 0xe) syz_clone3(&(0x7f00000001c0)={0x42323080, &(0x7f00000000c0), 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x10081004) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x10081004) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x3cc}, &(0x7f0000000040), &(0x7f0000000140)) (async) r4 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x43, 0x1, r3, &(0x7f0000000100)=0x80, &(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x0, 0x800, 0x1}) io_uring_enter(r4, 0x3514, 0x9141, 0x69, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f00000006c0)=[{0x0}], 0x1) (async) writev(r7, &(0x7f00000006c0)=[{0x0}], 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r8 = dup(r0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd86) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000f0c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000009140)}], 0x1, 0x0, 0x0, 0x80}}], 0x1, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000f0c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000009140)}], 0x1, 0x0, 0x0, 0x80}}], 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f00000002c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r10, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000002c0), 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f00000003c0)=[0xf], &(0x7f0000000340)=[r11], &(0x7f0000000180), 0x0, 0xff}) 4.540896495s ago: executing program 2 (id=1665): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x30}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0x800, 0x40, 0xa03, 0xa, 0x8001, 0xc3f]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x2, 0x1}]}]}]}]}, 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0x800, 0x40, 0xa03, 0xa, 0x8001, 0xc3f]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x2, 0x1}]}]}]}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="6800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800b000100697036746e6c00003800028014000200fe8000000000000000000000000000aa08000100", @ANYRES32, @ANYBLOB="040013001400030017"], 0x68}}, 0x0) 4.441490063s ago: executing program 2 (id=1666): ioctl$UFFDIO_POISON(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x64, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x3c, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 4.314673236s ago: executing program 2 (id=1667): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002300)=@newtfilter={0x87c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x0, 0x0, 0x1, 0x38000, {0x2, 0x0, 0x7, 0x1, 0x800, 0x101}, {0x6, 0x0, 0x8, 0x7, 0x7, 0x1ff}, 0x3, 0x6, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0xfffffffa, 0x8, 0x9, 0x3, 0x6d, 0xb, 0x6, 0x3, 0x100, 0x6, 0x7, 0xb, 0xc, 0x8, 0x6, 0x6, 0x4, 0x3, 0x3f1, 0x7, 0x0, 0x8, 0x2, 0x401, 0x0, 0xe, 0xf, 0x7, 0x3, 0x8, 0xc6b, 0x1, 0x101, 0x9, 0x4, 0xfb6, 0x8, 0x3, 0x44f1, 0x9, 0x7, 0xf, 0x45, 0x6, 0x4, 0x2bfe, 0x5, 0x0, 0x9, 0x4, 0x0, 0x4, 0x7ff, 0x7, 0x800, 0x5, 0x1, 0xfff, 0x7fffffff, 0x9, 0x4, 0xb210554, 0x9, 0x8, 0xa, 0x41206f7, 0x6, 0x2, 0xf, 0xe, 0x2, 0x5, 0x10, 0x80, 0x6e, 0x800, 0x0, 0x40000000, 0x6, 0x6, 0x1, 0xc, 0x8001, 0x3, 0x81, 0xa, 0x7ff, 0x1, 0x0, 0x10000, 0x7f, 0x30, 0x8, 0x0, 0x5f9e, 0x6, 0x80, 0x7c3, 0x5, 0x1, 0x7, 0x6, 0xaa4, 0x8, 0x8, 0x6, 0x1, 0x9, 0x0, 0xfff, 0x10001, 0x10001, 0xa, 0x8000, 0x5, 0x6, 0xdb3, 0x2, 0x7, 0x9, 0x8, 0x614, 0x0, 0x3, 0x100, 0xffffffe0, 0x8, 0x7, 0x80000001, 0x3, 0x5, 0x8, 0xfffffff9, 0xf, 0x9, 0x9, 0xfffffffb, 0x8, 0x2, 0x3bab69da, 0x2ac, 0xfffffff7, 0x2, 0x7, 0x2, 0xe, 0xe6, 0x4, 0x8, 0x7, 0x800, 0x5, 0x101, 0xcd47, 0x0, 0x8000, 0xe, 0xf611, 0x3, 0xfffffc01, 0x0, 0x9, 0x8, 0x400, 0x10001, 0x8, 0x10000, 0x4, 0xc0000000, 0x9, 0xde, 0x5, 0x2, 0x4, 0x10, 0x8000, 0x6, 0x0, 0x6f4, 0x1, 0xfe86, 0x1000, 0x1, 0x562, 0x1, 0x1, 0xfa8f, 0x40, 0x4, 0x5, 0x7ff, 0x4, 0x0, 0x9, 0x5, 0xf, 0x9, 0x1, 0x7fffffff, 0x2000, 0x8, 0x0, 0x4, 0xfffeffff, 0x4, 0x0, 0x1, 0x6, 0x6, 0x9, 0x0, 0x8, 0x6, 0x7f, 0x9, 0x7, 0x6, 0x0, 0xe5a8, 0x80000000, 0xffffffff, 0x2c, 0x10000, 0x2, 0xa, 0x10001, 0x6, 0x9, 0x4c, 0xd4, 0x40, 0x81, 0x7, 0x9, 0xe929, 0x5, 0x5, 0x2, 0x7fffffff, 0xfff, 0x3, 0x7, 0xfffff000, 0x400, 0x100000, 0x6, 0xffff, 0xd0c, 0x2, 0x10000, 0x7, 0xff, 0x101, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x778, 0xee, 0xd6, 0x4, 0x2, 0x1ff, 0x5, 0x2, 0xf, 0x2, 0x400e, 0x0, 0x1, 0x7, 0x9, 0x4, 0x6, 0x4, 0x5, 0x8, 0x10, 0x9, 0x4, 0x9, 0x4, 0xaf73, 0x8, 0x9, 0xa6a, 0x3ff, 0x401, 0x0, 0x200, 0x4, 0x0, 0x4, 0x5, 0x2, 0xfffffff5, 0x166f, 0x4800, 0x1823dd05, 0x7, 0xff, 0x6, 0x8, 0xffffff25, 0x7ff, 0x6, 0x4, 0x2, 0xd7a, 0xf4, 0x4, 0x36811742, 0x2, 0x7fffffff, 0x0, 0x101, 0x1, 0x8, 0x0, 0xfffffff7, 0x6, 0x8, 0x5, 0x4, 0x101, 0x10001, 0xc, 0x6, 0x9210, 0xffffff64, 0x101, 0xd75, 0x9, 0x6, 0x8, 0x9, 0x9, 0x0, 0x2, 0x81, 0x8, 0xfffffffe, 0x7, 0x3, 0x1000, 0x400, 0x10000, 0x6, 0x7, 0xfffffc01, 0x9, 0x2, 0x1e7c, 0x80, 0x5, 0xff, 0x430, 0x0, 0x800, 0xfffffff4, 0x5, 0x6, 0x0, 0x6, 0x4, 0x75996fa6, 0x6, 0x7fffffff, 0x5, 0x6, 0x534ecc67, 0x8, 0x5, 0x3, 0x7, 0x5, 0x6, 0x6, 0x7, 0x2, 0xd663, 0x3, 0xfffffffd, 0x4, 0x3, 0x2, 0x0, 0x80000000, 0x5, 0x400, 0x1, 0x9, 0x7, 0x6, 0x7ff, 0x2, 0x7789126b, 0x6, 0x6, 0x5, 0x4, 0x800, 0x7, 0x8, 0xe, 0xffffffff, 0x7, 0x4, 0x9, 0x1, 0x6, 0x8, 0xdd2d, 0x6, 0x3c, 0xffff, 0xffff, 0xffffffff, 0x2d62, 0x3, 0x7, 0x884, 0x45, 0x20af, 0x0, 0x9, 0x8, 0xffff4d35, 0x5, 0x9, 0x5, 0x800, 0x2, 0x1, 0x8, 0x0, 0x5, 0x8000, 0x5, 0xd, 0xfffffffc, 0x5, 0x7, 0x9, 0x9, 0x7, 0x7, 0x5, 0xcd, 0x4, 0xffffff9c, 0x301, 0xe9, 0x2, 0x8, 0x58, 0x2, 0x3, 0x4, 0x8, 0xddc, 0x7, 0xe487, 0x3, 0x3, 0x7f, 0x9, 0x38, 0xeb44, 0x3, 0xff, 0x2, 0xe6f, 0x8, 0x90, 0x2, 0xffffffff, 0x5, 0x5, 0x1, 0x7, 0x7, 0x4, 0x51b0, 0x231, 0x46a4, 0x1, 0x8, 0x2, 0x7bca, 0x4, 0xfffffff9, 0x0, 0x8, 0x2, 0x5, 0xbb2, 0x7, 0x43, 0x0, 0x9, 0x9, 0xb1b, 0x8, 0x1, 0x8, 0x1, 0x7f, 0x3, 0x0, 0x1, 0x81, 0x7ab]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 4.103073394s ago: executing program 1 (id=1668): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="a443fcd7770245fc989b50ea09817223dd9fac342f8f7c3d2cdcae3b14f82c974dc1", 0x22}], 0x1}, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xaa02, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x0, 0x1000000}, @clear_death], 0xfc, 0x1000000, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800e0001006970366772657461700000003800028014000700fe8000000000000000000000000000aa06000f00ff072000060003000100000006000e000302"], 0x6c}}, 0x44850) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$vnet(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63dd0000000009050300000000000009050cf2010002060209050f0000004000000905"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="a443fcd7770245fc989b50ea09817223dd9fac342f8f7c3d2cdcae3b14f82c974dc1", 0x22}], 0x1}, 0x6) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xaa02, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0}) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x0, 0x1000000}, @clear_death], 0xfc, 0x1000000, 0x0}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800e0001006970366772657461700000003800028014000700fe8000000000000000000000000000aa06000f00ff072000060003000100000006000e000302"], 0x6c}}, 0x44850) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) openat$vnet(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63dd0000000009050300000000000009050cf2010002060209050f0000004000000905"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 3.98832034s ago: executing program 2 (id=1669): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) r5 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000200)) recvmsg(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000440)=""/20, 0x14}, {&(0x7f0000000480)=""/26, 0x1a}, {&(0x7f00000004c0)=""/158, 0x9e}], 0x4}, 0x20012062) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r1, 0x40106e80, &(0x7f00000001c0)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) writev(r6, &(0x7f0000001440)=[{&(0x7f00000000c0)='\v', 0x1}], 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000280)=ANY=[@ANYBLOB="2a3a360003000000b6"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="038c8a39afddcbe95a89f900"], 0x0, 0x0, 0x0, 0x0}) socketpair(0x18, 0x80000, 0x0, &(0x7f0000000a40)) syz_usb_control_io(r0, 0x0, 0x0) 3.614938388s ago: executing program 0 (id=1670): r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r0, &(0x7f0000003f40)=[{{&(0x7f0000000400)=@xdp, 0x80, &(0x7f0000002a40)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000480)=""/125, 0x7d}, {&(0x7f0000000500)=""/4, 0x4}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000000540)=""/107, 0x6b}, {&(0x7f00000005c0)=""/7, 0x7}, {&(0x7f0000000600)=""/27, 0x1b}, {&(0x7f0000002940)=""/220, 0xdc}], 0x8, &(0x7f0000002ac0)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000003ac0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000003e00)=[{&(0x7f0000003b40)=""/120, 0x78}, {&(0x7f0000003bc0)=""/194, 0xc2}, {&(0x7f0000003cc0)=""/139, 0x8b}, {&(0x7f0000000640)=""/42, 0x2a}, {&(0x7f0000003d80)=""/87, 0x57}], 0x5, &(0x7f0000003e80)=""/183, 0xb7}}], 0x2, 0x2, &(0x7f0000004000)) r1 = socket$rxrpc(0x21, 0x2, 0xa) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000400)={0x0, 0x60d7, 0x8, 0x0, 0x3df}, &(0x7f00000006c0), &(0x7f0000000140)) io_uring_enter(r2, 0x47ba, 0x0, 0x28, 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, 0x0, 0x0) creat(&(0x7f0000000100)='./file0/file0\x00', 0x4) r3 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x28f}, &(0x7f00000003c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) io_uring_enter(r3, 0x7277, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001a40)={{0xffffffffffffffff, 0x0, 0x200, 0x0, 0x7ff, 0x0, 0x0}, 0x0, 0x0}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x24044084}, 0x4045) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x8400, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x28900) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r9, 0xc04064aa, &(0x7f0000000280)={0x0, 0x0}) syz_usb_connect(0x4, 0x5f, &(0x7f0000000300)=ANY=[@ANYRES8, @ANYRES16], 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0x1d, [0x4, 0x8, 0xfffffff1, 0x8, 0x0, 0x1, 0x3e7, 0x5, 0x9, 0x6, 0x5, 0x6, 0x7ff, 0x4, 0x4, 0x3ff, 0x4, 0x8, 0x2, 0x4, 0x9, 0x4, 0x8, 0x1, 0xfffffa0c, 0x7, 0x8, 0x9be, 0x3, 0x3ff, 0x6, 0x14dc, 0x147, 0x9, 0x1, 0x3, 0x1, 0x0, 0x9, 0x6, 0x7, 0x5, 0x4, 0x4, 0x80000008, 0x80000000, 0x9, 0x100, 0x5, 0x19dd, 0x7, 0x3ff, 0x588, 0x6, 0xf667, 0xfffffffc, 0x7, 0x8, 0x7f, 0x6, 0xc8, 0x6, 0x0, 0xc3, 0x4, 0x10, 0xffffffa8, 0x1, 0x9, 0x1, 0x1, 0x83, 0xe39, 0x9, 0x10, 0x401, 0x7, 0x7, 0x2a, 0x71c9, 0x1, 0x321, 0xfffffeff, 0x7f, 0x66, 0x1c24, 0xff, 0x9, 0x4, 0x2, 0x3, 0xff, 0x100, 0x126, 0x6, 0x8, 0x40000000, 0xc, 0x4, 0x8, 0xffffffc0, 0x4, 0x10001, 0x5, 0x74a000, 0x4e27, 0x3ff, 0x0, 0x8356, 0x0, 0x100006, 0x9b7, 0x1, 0x80000001, 0x7f, 0xea, 0x6, 0x80000000, 0xff, 0x7, 0x4da8e6f3, 0x5, 0x10001, 0x8, 0x69e4, 0x80000001, 0xfffffff4, 0x100]}}) socket$can_bcm(0x1d, 0x2, 0x2) 3.614652128s ago: executing program 4 (id=1671): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0145b0e, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x325000, 0x800}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0xfe, 0x0, 0x100}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x5973599c}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x20, 0xcd, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5, 0x1}, {}, {0x0, 0x0, 0xfd, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x0, 0x2}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {0x800}, {}, {0x20, 0x6}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x0, 0x4b}, {}, {}, {0x0, 0x0, 0xe2}, {0x4}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0xfc}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x2}, {0x0, 0xb}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x3, 0x0, [{0x40000100}, {0x40000072, 0x0, 0x8}, {0x648, 0x0, 0x2}]}) 3.201614763s ago: executing program 4 (id=1672): syz_usb_connect(0x5, 0xb1c, 0x0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="32032b8943bf95e2bd3b4a0b20d7039f12df0f378772179ff881b64b7dd3255ff2ce514a4030b3215a2abcd79930216d95d3"]}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r9) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$kcm(0x11, 0x3, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003f40)=@newtfilter={0x1cf4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1cc0, 0x2, [@TCA_MATCHALL_ACT={0x1cbc, 0x2, [@m_pedit={0x1cb8, 0x1, 0x0, 0x0, {{0xa}, {0x1c8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x3, 0x3}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x485, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x5, 0x2, 0xc, 0x8, 0x9, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x8, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x8, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0xfffffffd}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0x9}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x6, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x0, 0xffff8001}, {0x0, 0x6, 0x8000, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0xad, 0x2, 0xffff, 0x20000004}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x8347, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x40, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x409, 0x9, 0x1, 0x7, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0xffdfff81, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x5, 0x9}, {0x4d, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0xfffffffb, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x4, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0xca2f, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b5}, {0xa24b, 0x947d, 0x3, 0x4, 0x80000000, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x6}, {0xfff, 0x5a, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x0, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x7f, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0xffe00000, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0xa61e, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0x7, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x6, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdc7, 0x0, 0x2}, {0x6, 0x80000000, 0x5, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x6, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8a, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x4, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7c0, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x1}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x6}, {0x2}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x5}], 0x1}}, @TCA_PEDIT_PARMS={0xe68, 0x2, {{{0xe3f, 0x1ff, 0x5, 0x9, 0x2}, 0x2, 0x73, [{0xb380, 0x0, 0xf9, 0x2, 0x7, 0x8}, {0x401, 0x8, 0x7, 0x2, 0x1cb55dc3, 0x2}, {0x2, 0x8, 0x0, 0x1, 0x100, 0x1}]}, [{0x401, 0x8, 0x9, 0x0, 0x2, 0x7}, {0x64, 0x1, 0x5, 0xb, 0x4, 0x7}, {0x0, 0xe, 0x2, 0x1, 0x0, 0x8}, {0x40, 0x5, 0x10, 0xbec5, 0x8000, 0x6e3}, {0x0, 0x37, 0x9, 0x0, 0x3, 0x4}, {0x1ff, 0x1000, 0x400, 0x751f, 0x0, 0x9}, {0x7ff, 0x6, 0x80000001, 0x5, 0x0, 0x4}, {0x9, 0xe4fb, 0x9, 0x5, 0x2d65, 0x3}, {0x3, 0x9, 0x16b, 0x5, 0x5, 0xe4}, {0x68, 0x10000, 0x0, 0x4, 0x3, 0x6}, {0x7, 0x5, 0x10000, 0x3, 0x4, 0x100}, {0x3, 0x7, 0x1, 0x8, 0x7, 0x80000001}, {0x81, 0x618, 0xa, 0xff, 0x3, 0x7}, {0x3304, 0xff, 0x0, 0x1, 0x8, 0x4}, {0xfffffffa, 0xbe4a, 0xb, 0x8, 0x4, 0x81}, {0x7, 0x91, 0xfffffd4a, 0x7, 0x2, 0x3ff}, {0x4, 0x3, 0x4, 0xffffffff, 0x8, 0x74}, {0x7, 0x2, 0x2, 0x4, 0x5, 0xfffffff9}, {0x6, 0x6, 0x3, 0x5, 0x1}, {0x3, 0xfff, 0xffff, 0x200, 0x8, 0x400}, {0x2, 0x7fff, 0x10, 0x8, 0xff, 0x200}, {0x6, 0x2, 0x7, 0x7fff, 0x3195, 0x200}, {0x5, 0x3, 0x4e23e73e, 0x7f, 0xbb51, 0x3}, {0x8, 0x1, 0x6, 0x0, 0xfffffff9, 0x9}, {0x8, 0x3, 0x7f, 0x2, 0x4, 0xf3}, {0x3, 0x7, 0x1, 0x3, 0x7, 0x7fffffff}, {0xd, 0x9, 0x8, 0x8, 0x4, 0xcb3f}, {0x6, 0x6, 0x8, 0x6, 0x1ff, 0x10000}, {0x5, 0x400000, 0x8, 0x5, 0x3, 0x1396}, {0x7, 0x1000, 0x0, 0x100, 0x28, 0xc1}, {0x7, 0xfffffff9, 0x4, 0x2, 0x4b3, 0x9}, {0x80000000, 0x3, 0x3, 0x19f6fd39, 0x8001, 0x5}, {0x1, 0x2, 0x8, 0x0, 0xfffffffb, 0x7}, {0x1, 0x7, 0x4, 0x3, 0xc, 0x3}, {0x3ff, 0x1, 0x7, 0x322f, 0x40, 0x1}, {0x1f00000, 0x7b8, 0x23b, 0xfff, 0x1ff, 0x3}, {0x2, 0x2, 0xffff, 0x1, 0x2, 0x3}, {0x1, 0x7d003e7, 0xe, 0xab6, 0x0, 0x3}, {0xfa2, 0x1, 0x2864800, 0x1, 0x5, 0xd}, {0x500b, 0xb89, 0x0, 0x1d5, 0x75cbc260, 0x6}, {0x5, 0xfffffffe, 0x92, 0x6, 0x0, 0x9}, {0xffff, 0x7, 0x3e, 0xfffffff8, 0x9, 0xee6d}, {0x5, 0xfffffffd, 0x2, 0x1, 0x80, 0x6}, {0xf, 0x8, 0x3, 0x18, 0x4, 0x7}, {0x0, 0xfffff5cc, 0x0, 0x3, 0x8412, 0xf}, {0x9, 0x6, 0x80000000, 0x4, 0x101, 0xc}, {0xffffffff, 0x8, 0x4, 0x42, 0x9, 0xd}, {0x2, 0x4, 0xe, 0x3, 0x850, 0xff}, {0x2, 0x7, 0x3, 0x1, 0x44fd7363, 0x2}, {0x3ff, 0xa, 0x0, 0x7c, 0x81, 0x6}, {0x5, 0x3, 0x40, 0x80, 0x8}, {0x3, 0x8, 0x0, 0x1ff, 0x7ff, 0xd}, {0x2, 0xe, 0xa95, 0x4, 0xb4b, 0x8}, {0x6, 0x8, 0xfffffff9, 0x384, 0x10001}, {0x1ff, 0x3, 0x10, 0x8, 0x1c, 0x5}, {0x6, 0x6, 0xffffffff, 0x6, 0x9, 0x3}, {0x7, 0x2, 0x7fffffff, 0x7, 0x95, 0x7}, {0x4, 0x3880, 0x80000000, 0x1, 0x1, 0xfffffffe}, {0xfff, 0x638f, 0x7, 0x9, 0x2, 0x2}, {0x9, 0xfffffffc, 0x81, 0x81, 0x80000001, 0x1}, {0x2, 0x1, 0x7, 0x0, 0x2c, 0x3}, {0x3, 0x7fff, 0x2ac6, 0xfff, 0x9, 0x6}, {0x65, 0x10, 0x0, 0x4, 0x2, 0x2}, {0x81, 0xdca, 0x4, 0x8, 0x2812, 0x8}, {0x10000, 0xc4b, 0x50, 0xaf54, 0x2, 0x2}, {0x5, 0x6, 0x40, 0x0, 0x9, 0x2}, {0x9, 0x301, 0x4, 0x5, 0x4}, {0xc, 0x3, 0x9, 0x1, 0x1b52, 0x100}, {0x98000000, 0x49, 0xf, 0x200, 0x7f, 0xc2}, {0xc2d4, 0x6, 0x4, 0x9, 0x9, 0x6}, {0x3ff, 0x8000000, 0x7fff, 0x80000000, 0x0, 0x400}, {0x80000000, 0x3a, 0x4, 0x0, 0x2, 0xfffffffe}, {0x4, 0x6, 0xfffffff7, 0x8, 0x5, 0x9}, {0x200, 0x3, 0x2, 0x1, 0x6, 0x30000}, {0x638, 0x7, 0x9b, 0x8, 0x401, 0x3846}, {0x5, 0x9, 0x8, 0x80000001, 0xd1, 0xfffe0}, {0xc1, 0x9e54, 0x3ff, 0x901, 0x60e, 0x9}, {0x8001, 0xfffffe00, 0x2, 0x3ff, 0x3, 0x8000}, {0x6, 0x1, 0x8001, 0x401, 0x3e, 0x1}, {0x7, 0x3, 0x4, 0x40, 0xfffffffb, 0x3}, {0x3, 0x54000000, 0x1ff, 0x2, 0x9, 0x5}, {0x1, 0x9, 0x0, 0x400, 0x4}, {0x80, 0x80, 0x1, 0x2, 0x2, 0x9}, {0x81, 0x3, 0x8, 0xffff, 0x8, 0x5}, {0x10000, 0x3, 0x0, 0x8, 0x6, 0x8}, {0x8, 0x4, 0x5, 0xfffffff7, 0x2c, 0x8}, {0x9, 0xfffffffd, 0x7, 0x2, 0x0, 0x8}, {0x200000, 0xfffffffd, 0x7, 0x7, 0x7, 0x4}, {0x9, 0x4, 0x3, 0x3e, 0x1, 0x827}, {0x3, 0x3, 0x5, 0xfff, 0x4, 0x8}, {0x0, 0x19, 0x0, 0x46cc, 0x1, 0x906}, {0xfa41, 0x3, 0x8, 0xbd6, 0x3, 0x4}, {0x8, 0x2, 0x785, 0x2, 0x5, 0x6d}, {0x3, 0x6, 0x383, 0x7, 0x79, 0x816}, {0x2, 0x2, 0x5, 0x1, 0x7fffffff, 0x2}, {0x6, 0x1, 0xb, 0xb, 0x9, 0x2}, {0x7, 0x6, 0x0, 0xfffffffa, 0x7d, 0xd6c}, {0x1, 0x2, 0x3, 0x5, 0x8, 0x3}, {0x3, 0x1, 0xd, 0x3, 0x0, 0x2}, {0x4, 0x0, 0x10000, 0x9, 0x3, 0x7493bdeb}, {0x1, 0x4, 0x0, 0x377, 0x9, 0x80000001}, {0x4, 0x2, 0x0, 0x2, 0x400, 0x6}, {0x7ff, 0x9, 0x9, 0xff, 0x1, 0xffff}, {0x9, 0x7, 0x8f, 0x99d5, 0x1, 0x1ff}, {0xcad, 0x1, 0x7, 0x7, 0xa395, 0x41b2}, {0x4, 0x7, 0x3, 0x5, 0x0, 0x8}, {0x8, 0x6, 0x7, 0x9, 0xa, 0x5}, {0x4, 0x7, 0x7fff, 0x14000, 0x7, 0x3}, {0x400, 0x9, 0x2, 0x100, 0xff, 0x7ff}, {0x5, 0x2, 0x75677db6, 0xf, 0x2, 0x1ff}, {0x0, 0x97c6, 0x2, 0x4000002, 0x609d, 0x60}, {0x5, 0xe400, 0x100, 0x8, 0x3500, 0x3}, {0x40, 0x6, 0x4, 0x4, 0xcbd9, 0x1}, {0x50000, 0x9, 0x401, 0x4, 0xabf7, 0xfffffffe}, {0xffff, 0x0, 0x7, 0x2, 0xffff, 0xc}, {0x2, 0x91, 0x80000000, 0x8000, 0x4, 0xfffffff8}, {0x8, 0x6, 0x1, 0x40800, 0x8, 0x6}, {0xc, 0xb6, 0x3, 0x4, 0x3, 0x8000}, {0xfffffff7, 0x7, 0x7f, 0x6, 0x8, 0x7fffffff}, {0x0, 0x99, 0x0, 0x2, 0x0, 0x5}, {0x7, 0x7024, 0x8, 0x1, 0x80000000, 0x1}, {0x8001, 0x6, 0x3, 0x7, 0x2, 0x9}, {0x800, 0xfffffffa, 0x1000, 0x1ff, 0xfffffffe, 0x3ff}, {0xa50, 0x7, 0x38000000, 0x7fff, 0x6, 0xffffff7f}, {0x0, 0x9, 0x9, 0x1, 0x1, 0xff}, {0x1, 0x9, 0xb44acbf, 0x2, 0x4, 0x339f376c}, {0xffffffff, 0x8001, 0x6, 0xe, 0xfff, 0x9}, {0xb, 0x1, 0xf, 0xde45, 0x6, 0x3}], [{0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x2}, {0x5}, {0x710c637bfa495cf9, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x4, 0x1}, {0x1}, {0x4}, {}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {}, {0x3}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x4}, {0x3}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x6}, {0x2, 0x1}, {0x7}, {0x3, 0x1}, {0x1}, {0x1}, {0x1}, {0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0xb5fa7a85d0b5c930}, {0x2, 0x1}, {0x3}, {0x3}, {0x5}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2f4b796f9c2226cd}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x4, 0x1}, {0x1}, {0x2}, {0x5, 0x1}, {}, {0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x6, 0x1}, {0x5}, {0x5272779873374fe9, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x1cf4}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000480)) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r8, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r13 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0xfd, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xf8, 0x19, 0x7, 0x3, 0x0, 0x9d, 0x1, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa}) ioctl$KVM_SET_VAPIC_ADDR(r13, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0xea, 0x55e, 0xffffffff, 0x4, 0xfffffffffffffffd, 0x7, 0x9, 0xb, 0x5, 0x80, 0x6, 0x794, 0xa, 0x40, 0xc976, 0x6], 0x4000, 0x20200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.950869884s ago: executing program 3 (id=1673): sched_setscheduler(0x0, 0x1, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x0, 0x0) (async, rerun: 32) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec5908060001080006040002aaaaaaaaaa14ac6caf0951f48258ca1cac"], 0x0) (async, rerun: 64) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) (async, rerun: 64) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x8, 0x3, 0x588, 0x228, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4b8, 0xffffffff, 0xffffffff, 0x4b8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x1, 0x5}, 0x0, 0x208, 0x228, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x7f, 0x1}}, @common=@rt={{0x138}, {0x3, [0x40, 0x1ff], 0x9, 0x30, 0x3, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @private0, @remote, @private1, @private2, @remote, @mcast2, @empty, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @private1], 0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, [0x0, 0x0, 0xff000000], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x228, 0x290, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20, 0x80}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x7, 0x0, 0x41, 0x0, 0xb10f, 0x1000, 0x6, 0x3, 0x20}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x16, 0x7f, 0x4, 0x1, '\x00', 'syz0\x00', {0xa6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5e8) (async) listen(r0, 0x0) (async) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r5, 0x3}, 0x18) (async) sendto$inet(r4, 0x0, 0x0, 0x4000000, 0x0, 0x0) (async) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f00000000c0)=@fd={0x2, 0xd, 0x4, 0x107, 0x5, {}, {0x3, 0xc, 0x3, 0x2, 0x2, 0x5, '<3`l'}, 0xaf, 0x4, {}, 0x67a80000}) (async) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000000)) accept$inet6(r0, 0x0, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000080)=[{&(0x7f00000000c0)="bfe2cc2985c79751c5aa01a10100001500add427323b470c45b4560a067fffffff81004e2b000d00ff0028927b2d9caf759cc15a0080000efffeffe809000400ffffffffff00000000ffffffffffffffe7ee0000000000000000020000000000000000f025b17751744afffc4b0da98aec332191a413df56eb67e9bdd93cf40147783e7968e5dd4f886996a0a3d68745a5a8a58d6a4fce356ad1c1c631e2c4c8a160c221458587c33d1b745b5c3860801f56057505f5c8b5bd8e6ddd050062a56ca4e5e108c09a7bda9e0708a6629bfd4e4797c10120c801820f25f193030b4082cedc3cb2b2d820fcfd38dafe084dac", 0xf0}], 0x1) 2.779120329s ago: executing program 3 (id=1674): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) preadv2(r1, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/45, 0x2d}], 0x1, 0xfff, 0x2, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) close_range(r0, r0, 0x0) 2.696460566s ago: executing program 3 (id=1675): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000500)={0xc, 0x0, 0x2, "3bd9d3fe337649c318d3c7710fe89a0d9ec9b50e98bc0000007900", 0x51424752}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000080)={0x1, 0x0, 0x12, 0x17, 0xa4, &(0x7f0000000580)}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f00000001c0), &(0x7f0000000200)=0x8) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8101, 0x0, 0x7, 0x0, 0x3ff, 0xfa11, 0xffffffff}, 0x0) (async) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) (async) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111}}, 0x20) (async) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000000), 0x0) r8 = syz_io_uring_setup(0xbda, &(0x7f0000000340)={0x0, 0x20d206, 0x10, 0x1, 0x35d, 0x0, r7}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f00000002c0)=0xfffffffe, 0x5, 0xfffffffe, 0x0, &(0x7f0000000000)=0x2, 0x3000006) (async, rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async, rerun: 64) syz_io_uring_submit(r9, r10, 0x0) io_uring_enter(r8, 0x6e69, 0x0, 0xe, 0x0, 0x0) (async) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x42800}, 0x20000000) 2.548317509s ago: executing program 3 (id=1676): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x100) move_mount(r0, 0x0, r1, 0x0, 0x46) syz_io_uring_submit(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0xfeff, &(0x7f0000000180)=[{&(0x7f0000000b40)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a8001600050003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08021a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4803f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) unshare(0x64000600) syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee00000041090224"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007500)={0x30, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xf, 0x1, 0x0, 0x1, [@generic="6d14314965356ee88bd200"]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x33}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc040) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f00000002c0)=ANY=[@ANYBLOB='security'], &(0x7f0000000080)=0x28) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0xc) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r7, &(0x7f00000042c0)={0x2020}, 0xfffffe15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) setfsgid(0x0) sendmmsg$unix(r5, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r8 = creat(&(0x7f0000000100)='./file0\x00', 0xa7) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708008000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r8, @ANYRES64=r8], 0x0) 2.2508817s ago: executing program 4 (id=1677): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20002) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x2}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc3, 0x0, 0x0, 0x1}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000780)={'syztnl1\x00', 0x0, 0x29, 0xaa, 0x6, 0x0, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x40, 0x700, 0x800, 0x1}}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'veth1\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000001900)=@delchain={0x107c, 0x65, 0x10, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x8, 0xffff}, {0xfff6, 0xc}, {0x8, 0x5}}, [@f_rsvp={{0x9}, {0x758, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xe, 0xfffd}}, @TCA_RSVP_SRC={0x8, 0x3, @local}, @TCA_RSVP_ACT={0x73c, 0x6, [@m_ctinfo={0x12c, 0x20, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x0, 0x7, 0x6, 0x2}}]}, {0xdf, 0x6, "1532f6f8b37b140fd01f6a844784306c187376dbb83ebf6f535e860e25e9e9cf8444ce645bc01342bd12de2da4e19d6412c58cdf49cabef0d47b46ec03ee931f99d8a8013eacb03cbde6c30c6b1142ab12e0e88e644b041e03704f55eed7119e033c6fe915f8f561846d971afdaa48446aa70085aa1a8cb738d7405782f339336f760954cb0900c569ecd14c10ba5970b8f71f47aac6fb0dc8e09182e9414a3910cab7523550a9ffb2f9362d52bdc19554378710d73a42df86a2ac3b0045ea424d88d8b878af5a7d8b01de8436e4132edc037ad01732d597b32e78"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x795}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xffff8000, 0x3, 0x5, 0xfffffffb, 0x80000001}, 0x1}}]}, {0x72, 0x6, "03097345a716af8e237cb82f659c4d9178c2ef9b55df0f80dfabada08c8e3339e285fee29e1c03e254b27bffc19a762bf11203218126ab0c9d217058c7f83f122711797a1f5acf9647b8f10f8113f58b623da515c4de322c23a793175cfe4cf373f81e4209c7f41ec5537086f2ec"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0xb4, 0x8, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x5f, 0x6, "6d88ef185cd5478c07d7a4bd8a5c30485985ad1f672e6b6554b3e212275b5962d6d83de0feb9a0977f54b065caae98e12b2a882be8553c697476d1a3da09064ebe21025c066e3caade4ced95b299eb178f819b3efbd3062eeb2ec2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mirred={0x134, 0x13, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x5431, 0x10000000, 0x1ff, 0x3}, 0x3, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x4, 0x1, 0x2, 0x8}, 0x4, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x2, 0x3, 0x1, 0x4}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x6, 0xfffffffffffffff7, 0xff, 0xfffffff7}, 0x2, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x66a, 0x4, 0x8, 0x2}, 0x4, r10}}]}, {0x66, 0x6, "f8a2ba4a67f725c9ba8cb0fcdd07a93f0ff94ce61d5b95a29e6001a950d099c552f5e4c161f7a3a7225ff9806c4309cfe05b17cfbc94d1ed198f0fb25c482f537692c9dc5d6de5c4a046ede59659ca1dc0dfa40e2c56e942b3093629ffb364b04e67"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0xa8, 0xa, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x70, 0x6, "7ee152b018927eac719dedcf39cd0d4439f2b45ea905d2dc9f475cafd698a92631c1f45344b4648970103d493d4571dc28b7286d2fb25f2c204801d40cf87dff26f6ff92847af28beec97f8eae6bff88aa4ec986acf1afa9aec05394f1fa4d21a512f336bf56e7a0c24451bb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_sample={0x90, 0x19, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xb052}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfffff001, 0x6, 0x10000000, 0x73, 0xd}}]}, {0x2c, 0x6, "60df76d70d25cbc04e14cff9acb5796c8afbb8966b6a1f3b2557bc78fb6022639b91ad486eb38f41"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0xec, 0x2, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xf53}]}, {0xb8, 0x6, "51dc86272fcb861d35cccc06567022b2aec1b12fac0bf0de95c25035c4c086356d2fa26b7e6453d8646b193ef783aa4dbec6ed48b0b1016980b1c13d5bd9a0b825d57dd7c35755f5a64b7d73e45db6eda2b14234be1cf4de5cf92447c4552a810865e17417ad3841d505a9803404618fa42c0487c0f9e3b8d60f520e9f8265443230945feaac02449247b27caf3614c41557cb5e2521f13c4e0be19d319609758a71d519272476e3a4b72654e07992479d04bcba"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_tunnel_key={0x12c, 0x10, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @loopback}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x3}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, {0xd5, 0x6, "d04dfcd17c6b9946208a357cd2e1bfb97d6f12fbe25903ce12e2cd0b64752d87321606f37515b91c1c2d27d207c211ed78afa29de102979eac55ac7164973d1e7aaae04340dfd39f7b81f82e1cc0c60527693fd2c72d807117a98a9846ca948970a924620729d5806145997c430cb5a5ab21845fb1166b4aa44c66c5f2d2740d8e3be7e4121b4347e61c364e7e271894d77c601051316b785c28f84b9f5f35bfd11cc63a1b9b6ce62254bef770351f61ced591ac939e910802d7e5018c303503dab57c44699ecef9902806fd7efa74871c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xf, 0xc}}]}}, @f_rsvp={{0x9}, {0x18, 0x2, [@TCA_RSVP_POLICE={0xc, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}]}, @TCA_RSVP_DST={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}, @f_rsvp={{0x9}, {0x4}}, @f_rsvp6={{0xa}, {0x48, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @mcast1}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xe, 0xfff1}}, @TCA_RSVP_DST={0x14, 0x2, @loopback}, @TCA_RSVP_SRC={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}]}}, @f_tcindex={{0xc}, {0x860, 0x2, [@TCA_TCINDEX_MASK={0x6, 0x2, 0xfffc}, @TCA_TCINDEX_POLICE={0x414, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x80, 0x8, 0xff4, 0x1, 0x200, 0x6, 0x7, 0x7f, 0x7, 0x9, 0xc67f, 0x9, 0x5, 0x5, 0x1, 0x2, 0x92eb, 0x8, 0x8, 0x6, 0xdf0, 0xc3b7, 0xd, 0x101, 0x4, 0xb, 0x1, 0x8001, 0x9, 0x4, 0x40, 0x5, 0x0, 0xe5d9, 0xff, 0x10000, 0xfff, 0x0, 0x8, 0x4, 0x8000, 0x374, 0xffffffff, 0x800, 0x4, 0x85d, 0x101, 0x8001, 0x4, 0x6, 0x3, 0x8, 0xffffffd4, 0x401, 0x6, 0x2, 0x6, 0x80000001, 0xffffffff, 0x6, 0x7, 0xb, 0x4, 0x7, 0x8, 0x4, 0x5, 0x8, 0x9, 0x5, 0x9, 0x1000, 0x5, 0x9, 0x4, 0x1, 0x7f, 0xe000, 0x2ff8, 0x9, 0x458fd5ef, 0x0, 0x6, 0x3ff, 0xffff, 0x2, 0x81, 0x5, 0x3, 0x80000000, 0x4faa8, 0x9, 0x2, 0x0, 0x5, 0x6, 0x5be0, 0x6, 0x2, 0x2, 0x5, 0xde, 0x2, 0x3, 0x7, 0x3, 0x2, 0x7e, 0x5, 0xba07, 0xd0, 0xfffffff9, 0x2da, 0x7f, 0x7, 0x3, 0x10001, 0x1ff, 0x7f1, 0x3, 0x95f1, 0x3, 0x5, 0x0, 0x5, 0x85, 0xfffffff8, 0x1, 0x8, 0x3, 0x200, 0xe, 0x2, 0xfffff1a2, 0x4, 0x7, 0x1, 0x1000, 0x7b3, 0x2, 0x9, 0xaa2, 0x8, 0xe14, 0x4, 0x1a5, 0x2, 0x8, 0x1, 0x8, 0x9, 0xf, 0x7fffffff, 0x5, 0x5, 0x401, 0x401, 0x100, 0x2, 0x8, 0xfffffff7, 0x6, 0x6, 0x1, 0x509a, 0x3, 0x80000001, 0x6, 0x40, 0x4, 0x7fff, 0x7f, 0xb40, 0x3, 0xfffffffc, 0xa32e, 0x5a4, 0x400, 0x6, 0x7, 0x8, 0xfffff801, 0xb, 0x5, 0x7, 0x0, 0x6, 0xc, 0x2d2, 0xffffffff, 0x1, 0xf9b, 0x9, 0x9, 0x1, 0x40, 0x3, 0x7, 0xffffffff, 0x1, 0x5, 0x3, 0xffffffdc, 0x3ed, 0xe, 0x7, 0x7, 0x0, 0x6, 0x1, 0xd, 0x0, 0x3, 0x9, 0x4, 0x6, 0x1, 0x80, 0xb7, 0x4, 0x7f, 0x101, 0x80000001, 0x5, 0xa9b, 0x7, 0x200, 0xfffffffc, 0xffffffff, 0x6, 0xa1cb, 0xffff, 0x2, 0xfffffffa, 0x9, 0x26e0, 0x9, 0x6, 0x9, 0x2, 0x5a, 0xfffffffe, 0x6, 0x3, 0x6, 0x8, 0x8, 0x7, 0x5, 0x8, 0x7, 0x8, 0x80000000, 0x5, 0x9f]}]}, @TCA_TCINDEX_POLICE={0x420, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x3, 0xdaf8, 0x1, 0x5, 0x9, 0x9, 0xd, 0xffffffff, 0x4, 0x4, 0x7, 0x7, 0x5, 0xfffff9a4, 0x7, 0x4, 0x291, 0x9, 0x9, 0xfffffe00, 0xffffffff, 0xfffffff7, 0x800, 0x8, 0x5, 0x74d, 0x6, 0x0, 0x101, 0xc2, 0x180, 0x5d, 0xfff, 0x5, 0xd, 0x0, 0xff, 0x1, 0x2, 0xa3, 0x2, 0x80000001, 0x4, 0x1, 0x8, 0x1ff, 0x5, 0x9, 0x80ff, 0xd, 0xe, 0x4, 0x3ff, 0x101, 0x0, 0x3, 0x6, 0x4, 0xd5f, 0x84, 0x9, 0x80000001, 0x73, 0x4, 0xffff15b7, 0x7, 0x10001, 0x3, 0xd, 0x3, 0x3838, 0x9, 0x8, 0x858c, 0xfffffbff, 0x4, 0x2, 0x72, 0x5, 0x4, 0x0, 0x2d4364fc, 0x8000, 0x1, 0x0, 0x7a, 0x3, 0x3f, 0x800, 0xfffffff1, 0x3, 0x6, 0x7, 0xfffffff9, 0x4, 0x7fff, 0x8, 0xb2c9, 0x6, 0x7, 0x4, 0xfff, 0x200, 0x3, 0x5, 0x2, 0xfffc, 0x1, 0x3, 0x9, 0x2, 0x8001, 0x2, 0x8, 0x9, 0x6, 0xabb0, 0x0, 0x2, 0x6, 0x400, 0x7, 0xfd4, 0x3, 0x5, 0x9, 0x7, 0x6, 0x5, 0x4, 0xf4cb, 0x10, 0x101, 0x0, 0x1ca6, 0xfffff4a9, 0x80000000, 0x7ce, 0x4, 0x8, 0x401, 0x4, 0x1, 0x10000, 0xc5, 0x4, 0x6, 0x4, 0xf741, 0x4, 0x7, 0x6, 0x700, 0x3, 0x435e, 0x7fffffff, 0x80, 0x6, 0x9, 0x7, 0x8, 0x3f58e70b, 0x9, 0x3, 0x8, 0x7f, 0x3ff, 0x9, 0x5, 0x0, 0x8, 0x3, 0x6, 0x4, 0x5, 0x1, 0x1, 0x1, 0x1, 0xfffffffc, 0x9, 0x95, 0x10000, 0x6, 0xc, 0xe26, 0xa00000, 0x2c, 0x7, 0x3, 0x5c, 0x9, 0x8, 0x800, 0x5, 0x3, 0x5, 0x4, 0xe2ac, 0x3, 0xc3, 0x1, 0xd, 0xb, 0xa8e9, 0x5, 0x4, 0x4, 0x13bc, 0x6, 0x1, 0x4, 0xffffff01, 0x0, 0x0, 0x800, 0xfff, 0x0, 0x3, 0x1, 0x2, 0x3ff, 0x7, 0x7, 0x7f, 0xf5, 0x80000000, 0x9f2, 0x4, 0x9, 0x3, 0xbc50, 0xfffffffb, 0x0, 0x5, 0x6, 0x7, 0x6, 0x1, 0x5, 0x6, 0x7, 0x7, 0x220, 0x77, 0x4, 0x7, 0x1200, 0x64b7, 0x0, 0x5, 0x8, 0x7, 0xffffffff, 0x5]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}]}, @TCA_TCINDEX_POLICE={0x10, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}]}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xb188}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xf03c}]}}]}, 0x107c}, 0x1, 0x0, 0x0, 0x90}, 0x40) r11 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$usbfs(0x0, 0x205, 0x2581) add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) r12 = socket$packet(0x11, 0x3, 0x300) r13 = socket$inet_sctp(0x2, 0x1, 0x84) pselect6(0x40, &(0x7f0000004600)={0x2, 0x0, 0x8, 0x7, 0xffffffffffffffe8, 0x401, 0xffffffff, 0x40000000000000}, 0x0, &(0x7f0000004680)={0x9, 0xfff, 0x5, 0x5, 0x7, 0x3fc, 0x9, 0x3}, &(0x7f00000046c0)={0x0, 0x989680}, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=r14, @ANYBLOB="ebffffffffffffff280012800b00010065727370616e000018000280040012000500160001000000080015"], 0x48}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r13, 0x0, 0x40, &(0x7f0000000240)=@mangle={'mangle\x00', 0x1f, 0x6, 0x488, 0x320, 0x0, 0x320, 0x0, 0x0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, &(0x7f00000001c0), {[{{@ip={@remote, @private=0xa010102, 0x0, 0x0, 'virt_wifi0\x00', 'dummy0\x00', {}, {}, 0x8, 0x2, 0x28}, 0x0, 0xc0, 0xf0, 0x0, {}, [@common=@addrtype={{0x30}, {0x954, 0x2a1}}, @common=@socket0={{0x20}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xffff, 0x4, @rand_addr=0x64010101, 0x4e20}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'macvtap0\x00', 'erspan0\x00', {}, {}, 0x84, 0x2, 0x52}, 0x0, 0xa8, 0xd8, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x5, 0x6, 0xebcc, 0xfe76, 0x0, 0xb, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x5, 0x6, 0x5}}}, {{@ip={@private=0xa010100, @loopback, 0x8000007f, 0xffffff00, 'pimreg\x00', 'sit0\x00', {}, {}, 0x5c, 0x0, 0x28}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@multicast1, @empty, 0xffffffff, 0xffffffff, 'hsr0\x00', 'pim6reg0\x00', {0xff}, {}, 0x42, 0x3, 0x2}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x0, 0x3}}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'bridge_slave_0\x00', 'pimreg1\x00', {0xff}, {}, 0x62, 0x2, 0x20}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x0, 0x3, 0x0, 0x0, 0x0, 0x4], 0x5, 0x5}, {0x2, [0x0, 0x2, 0x6, 0x5], 0x0, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) 2.161069472s ago: executing program 4 (id=1678): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]}) (async) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) setrlimit(0x7, &(0x7f0000000400)={0x6, 0x80000000}) close(r1) (async) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="1400000016000b63d2767228154c473c20bcff1c", 0x14}], 0x1}, 0x0) (async) ioctl$BLKOPENZONE(r1, 0x40101286, &(0x7f0000000140)={0x3, 0x8000}) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2) (async) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x2000, 0x1000}) (async) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$TIOCNXCL(r1, 0x540d) (async) r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) ioctl$NILFS_IOCTL_RESIZE(0xffffffffffffffff, 0x40086e8b, &(0x7f0000000280)=0x8a) mmap(&(0x7f0000bde000/0x4000)=nil, 0x4000, 0x200000a, 0x12, r3, 0x703ba000) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) close(0x3) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_CAP_X2APIC_API(r5, 0x4068aea3, &(0x7f00000001c0)={0x81, 0x0, 0x2}) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5b1654539cca2d41305599d7e2207a0ed95e214033f04b7d9121fd18d315771b7bab9a8f5caa9a8f75336596c53b20fde4d75dcc45b9705e0a528135a066e5c832fedb4935d9c3179c55a60ec4d2818a56a6e8029743b32dfb23a457ce08df83ba649fe7b276032a40407f024f6be49ea5b5", 0x72}], 0x1}, 0x40000) 2.067989512s ago: executing program 4 (id=1679): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002300)=@newtfilter={0x87c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x0, 0x0, 0x1, 0x38000, {0x2, 0x0, 0x7, 0x1, 0x800, 0x101}, {0x6, 0x0, 0x8, 0x7, 0x7, 0x1ff}, 0x3, 0x6, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0xfffffffa, 0x8, 0x9, 0x3, 0x6d, 0xb, 0x6, 0x3, 0x100, 0x6, 0x7, 0xb, 0xc, 0x8, 0x6, 0x6, 0x4, 0x3, 0x3f1, 0x7, 0x0, 0x8, 0x2, 0x401, 0x0, 0xe, 0xf, 0x7, 0x3, 0x8, 0xc6b, 0x1, 0x101, 0x9, 0x4, 0xfb6, 0x8, 0x3, 0x44f1, 0x9, 0x7, 0xf, 0x45, 0x6, 0x4, 0x2bfe, 0x5, 0x0, 0x9, 0x4, 0x0, 0x4, 0x7ff, 0x7, 0x800, 0x5, 0x1, 0xfff, 0x7fffffff, 0x9, 0x4, 0xb210554, 0x9, 0x8, 0xa, 0x41206f7, 0x6, 0x2, 0xf, 0xe, 0x2, 0x5, 0x10, 0x80, 0x6e, 0x800, 0x0, 0x40000000, 0x6, 0x6, 0x1, 0xc, 0x8001, 0x3, 0x81, 0xa, 0x7ff, 0x1, 0x0, 0x10000, 0x7f, 0x30, 0x8, 0x0, 0x5f9e, 0x6, 0x80, 0x7c3, 0x5, 0x1, 0x7, 0x6, 0xaa4, 0x8, 0x8, 0x6, 0x1, 0x9, 0x0, 0xfff, 0x10001, 0x10001, 0xa, 0x8000, 0x5, 0x6, 0xdb3, 0x2, 0x7, 0x9, 0x8, 0x614, 0x0, 0x3, 0x100, 0xffffffe0, 0x8, 0x7, 0x80000001, 0x3, 0x5, 0x8, 0xfffffff9, 0xf, 0x9, 0x9, 0xfffffffb, 0x8, 0x2, 0x3bab69da, 0x2ac, 0xfffffff7, 0x2, 0x7, 0x2, 0xe, 0xe6, 0x4, 0x8, 0x7, 0x800, 0x5, 0x101, 0xcd47, 0x0, 0x8000, 0xe, 0xf611, 0x3, 0xfffffc01, 0x0, 0x9, 0x8, 0x400, 0x10001, 0x8, 0x10000, 0x4, 0xc0000000, 0x9, 0xde, 0x5, 0x2, 0x4, 0x10, 0x8000, 0x6, 0x0, 0x6f4, 0x1, 0xfe86, 0x1000, 0x1, 0x562, 0x1, 0x1, 0xfa8f, 0x40, 0x4, 0x5, 0x7ff, 0x4, 0x0, 0x9, 0x5, 0xf, 0x9, 0x1, 0x7fffffff, 0x2000, 0x8, 0x0, 0x4, 0xfffeffff, 0x4, 0x0, 0x1, 0x6, 0x6, 0x9, 0x0, 0x8, 0x6, 0x7f, 0x9, 0x7, 0x6, 0x0, 0xe5a8, 0x80000000, 0xffffffff, 0x2c, 0x10000, 0x2, 0xa, 0x10001, 0x6, 0x9, 0x4c, 0xd4, 0x40, 0x81, 0x7, 0x9, 0xe929, 0x5, 0x5, 0x2, 0x7fffffff, 0xfff, 0x3, 0x7, 0xfffff000, 0x400, 0x100000, 0x6, 0xffff, 0xd0c, 0x2, 0x10000, 0x7, 0xff, 0x101, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x778, 0xee, 0xd6, 0x4, 0x2, 0x1ff, 0x5, 0x2, 0xf, 0x2, 0x400e, 0x0, 0x1, 0x7, 0x9, 0x4, 0x6, 0x4, 0x5, 0x8, 0x10, 0x9, 0x4, 0x9, 0x4, 0xaf73, 0x8, 0x9, 0xa6a, 0x3ff, 0x401, 0x0, 0x200, 0x4, 0x0, 0x4, 0x5, 0x2, 0xfffffff5, 0x166f, 0x4800, 0x1823dd05, 0x7, 0xff, 0x6, 0x8, 0xffffff25, 0x7ff, 0x6, 0x4, 0x2, 0xd7a, 0xf4, 0x4, 0x36811742, 0x2, 0x7fffffff, 0x0, 0x101, 0x1, 0x8, 0x0, 0xfffffff7, 0x6, 0x8, 0x5, 0x4, 0x101, 0x10001, 0xc, 0x6, 0x9210, 0xffffff64, 0x101, 0xd75, 0x9, 0x6, 0x8, 0x9, 0x9, 0x0, 0x2, 0x81, 0x8, 0xfffffffe, 0x7, 0x3, 0x1000, 0x400, 0x10000, 0x6, 0x7, 0xfffffc01, 0x9, 0x2, 0x1e7c, 0x80, 0x5, 0xff, 0x430, 0x0, 0x800, 0xfffffff4, 0x5, 0x6, 0x0, 0x6, 0x4, 0x75996fa6, 0x6, 0x7fffffff, 0x5, 0x6, 0x534ecc67, 0x8, 0x5, 0x3, 0x7, 0x5, 0x6, 0x6, 0x7, 0x2, 0xd663, 0x3, 0xfffffffd, 0x4, 0x3, 0x2, 0x0, 0x80000000, 0x5, 0x400, 0x1, 0x9, 0x7, 0x6, 0x7ff, 0x2, 0x7789126b, 0x6, 0x6, 0x5, 0x4, 0x800, 0x7, 0x8, 0xe, 0xffffffff, 0x7, 0x4, 0x9, 0x1, 0x6, 0x8, 0xdd2d, 0x6, 0x3c, 0xffff, 0xffff, 0xffffffff, 0x2d62, 0x3, 0x7, 0x884, 0x45, 0x20af, 0x0, 0x9, 0x8, 0xffff4d35, 0x5, 0x9, 0x5, 0x800, 0x2, 0x1, 0x8, 0x0, 0x5, 0x8000, 0x5, 0xd, 0xfffffffc, 0x5, 0x7, 0x9, 0x9, 0x7, 0x7, 0x5, 0xcd, 0x4, 0xffffff9c, 0x301, 0xe9, 0x2, 0x8, 0x58, 0x2, 0x3, 0x4, 0x8, 0xddc, 0x7, 0xe487, 0x3, 0x3, 0x7f, 0x9, 0x38, 0xeb44, 0x3, 0xff, 0x2, 0xe6f, 0x8, 0x90, 0x2, 0xffffffff, 0x5, 0x5, 0x1, 0x7, 0x7, 0x4, 0x51b0, 0x231, 0x46a4, 0x1, 0x8, 0x2, 0x7bca, 0x4, 0xfffffff9, 0x0, 0x8, 0x2, 0x5, 0xbb2, 0x7, 0x43, 0x0, 0x9, 0x9, 0xb1b, 0x8, 0x1, 0x8, 0x1, 0x7f, 0x3, 0x0, 0x1, 0x81, 0x7ab]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000014", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 1.559985052s ago: executing program 4 (id=1680): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000010007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x600) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000200)=0xfffffffc, 0x4) r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000000) read$char_usb(r3, 0x0, 0x0) r4 = gettid() fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000000c0)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r5, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x15, &(0x7f0000000300)=ANY=[@ANYBLOB="000104"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r2, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") socket$inet_tcp(0x2, 0x1, 0x0) setfsuid(0x0) 614.585366ms ago: executing program 0 (id=1681): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f00000c8000/0x1000)=nil}) (async) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x8, 0x5, 0x0, 0x3, 0x2, 0x0, 0x1], 0x10000, 0x202}) (async, rerun: 32) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async, rerun: 32) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000100)={{0x2000, 0xdddd0000, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x8080000, 0xb, 0x4, 0x7, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfc}, {0x0, 0xfec00000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x2}, {0x80a0000, 0x4009001, 0xe, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x80, 0x1, 0x2, 0x0, 0x0, 0xff, 0x1}, {0x200000, 0xeeee0000, 0x9, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0xff, 0x8}, {0x10000, 0x6000, 0xc, 0x0, 0xce, 0x7, 0x6, 0x40, 0x26, 0x0, 0x0, 0x2}, {0xc000, 0x8cc}, {0xdddd1000, 0xffff}, 0xddf8ffdb, 0x0, 0x0, 0x110, 0xc, 0xf801, 0x0, [0x80000001, 0x0, 0xffffffffffffffff, 0xffffffffffffffff]}) (async) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000000)=@x86={0x81, 0xa, 0x9, 0x0, 0x5, 0x8, 0x3, 0x7, 0x0, 0x8, 0x25, 0x8b, 0x0, 0x2, 0x7, 0x1, 0x0, 0x4, 0x8a, '\x00', 0x8e, 0x100000001}) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async, rerun: 64) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) (async, rerun: 64) syz_usb_connect(0x5, 0x51, &(0x7f00000000c0)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63000000000009050300000000000009050cf20000020602", @ANYBLOB="cba9"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) (async) socket$kcm(0x2, 0x1000000000000002, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0xd231c4f95da94448) (async) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xc) (rerun: 32) socket$caif_seqpacket(0x25, 0x5, 0x5) (async) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f0000000140)) r4 = dup(0xffffffffffffffff) mmap$fb(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x300000b, 0x30, r3, 0xc6000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3) (rerun: 64) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c000000204d91ae1783e0f4502bd571a3ba5f9adf027e628bc1b4646cf80465de337889a6b8e46c28913601e08a74abc5d3d373714974d780bf7dcad5c9aa04f1adcd765e4bd0e20520513e61105c9791f43897bafb690e1d7ea4c0ba2c4ec893e6f268484feb67ec7cd05ce2e4d204322990d2422729b919a93b6763e0bb907e6a262b8b25bbe280c72ab219", @ANYRES16=r6, @ANYBLOB="773f2bbd7000fcdbdf250d00000018000180140002006970365f767469300000000000000000", @ANYRES16=r2], 0x2c}}, 0xc0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x480, @broadcast}}) (async) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) 521.833756ms ago: executing program 0 (id=1682): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000006200)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f00000002c0)="f6bb47ea3642b80cfe23ed00bbb265069b1386e29339280ce113567f1e66937e011d184672b6fe93847b2596812a062b5625bb01170a1248d10f2e949de8726dd88057c5a62bcd829d93d54d722eda64295f5245d37698328bb9fa1b1589f4a2a56fff492ec5de608aae74fcc09b1cc445ac2972c3f1039a067cf868affcd2203fb6bf2081701a2c4dad1f3186d82d4f", 0x90}, {&(0x7f0000001440)="ae99e54aa81feb19e4b23605b80e7a45e739f10018ce577f330cd11878cb97647f624b4a16874f7e2308065d1f1e1496ec0281b4e331c66d51f8f1c94028839b90b3dae9aadbf601a376e5689b8a587a862ced84bd488b163710b677c421776a7ab50aa7793a19b2779a9ef5358619e94a7b8942245dbca8937678844de0f7e82994950de62387cbc80f474759d76bfe1dd5e4d0edfc8b8bbd8ac0e2224de57cfd31", 0xa2}, {&(0x7f0000001500)="98b2788b6e40c6695d03a9379a08c703ccff17392fd832899e00888907d243d8d8d887367bdaac9fb96d76fab8e4e73943c6d0408d71ebfeaa7b2aa67445ec24d811bf33081da34879e78fa56e32b4e9cc78789f8f463d610af5b2e8ca1d76cfd620a4ee8dbb4e5420768623247a23f930201e785c9709e0b83d15210344cd8f3d86adf3e3108f076c99a29717ca7491e3e363c133351897", 0x98}, {&(0x7f0000000100)="06f82d5f998faf277978ba95e3573dd774612ac177072526bf8a7e2691c7da98e07622f190cac2bcd29967e4806937aa7c2c2b68c6768d99a013767e2e138f7347bb4f81e24a199d4e20f8a57646e61edfab556161e03bbb52fc3244cdd785ad6f6366a222c2da8a7ecc932db5ee9bccff2165dd36919e1c12", 0x79}, {&(0x7f00000015c0)="849da9dd0ccb5c8d29a843876f39cf682844e5ebbeccc0df42fbc5d943e9e0e148b33f4f0934e1f0c94d9a46eea621f0ec1cc2c19d5d72d8709ffea8405e0f49f96d35e8a6af807b86f9fb0c168701b415e261bb581497a01462ab6e161d671f77b472bb5999bdacafb32a3b34015139af50b88644e7e1a4573eb1836d8f00d5d5b3960b66881a647b0ddb4c12be0656574e1f0efa77125aac46afe0", 0x9c}, {&(0x7f0000001680)="0aec7cf9ec715aacd3e062210300000036340b0dc2d2d1763abfe849f6c9a4b1e0af17cdb70dc77641ef15f4b1a1a770959c42aa7c76c87032b2a9b76a9540ea39cef9e277d1ba94003d58e2df323765cdcf26510bd95de723eaaed8119a3444584e2c5816820ac9df184f4315b7b164a6229d87f358950d81ebe650d6fee7be1d49202c0f7f54d9a603c9c78ee98a3139b8b4b25c25ee04ceec54d857d0af88433ed298bf", 0xa5}, {&(0x7f0000000200)="0b7123188a16812478a6fd166c82af7783478510343beeba8b52156aebc22b577078edeae1e9f0ca07d8e42a6d733e81f6ef76836ac9a5ec50e32a7b5ffb89d3057d68fee48b8b32494fbc433b79993c", 0x50}, {&(0x7f0000001740)="857bdc58fb68604d0008d918eee230cdea9e6d68a0fa2b63031d11eb7ea503018099666f0071ef72202fc5169f067746953cdada33b94c48ba64ced73c0824d379b6e4d7bf08f68bbcb174a32709c262d031e350d6ce910bd157d9fc7b0c07627ea169b05df795a9be3282fc4e78eead6aaaaa0219c4c185d7d542ad729056a5e9e4292d2f93bab211ceafa717f0cb04839ef7f78d3464303e0cbad5b63b873e85198a1ccefe113d6121bf8b902690c6de572463dc3d32da9f97e15933879d0f3f2bfa871ea8164fda2238df3ca02b8a0c806e0b57e3cf370129b7820a996c3dc62dcbcad112ba183434a1542e4a4489bd7211", 0xf3}, {&(0x7f0000001840)="6ca6ec19bc6d6244a57b113f439bd42bb684a4eaebfa14c2fd2c009b03de0c104ac208591c71b80244db3b01bbd58818ae9d1e5cb6ce982e582e3db59ab7a9afc1a7f96516a6bbf64529c903cbdbaf086ce35420ede93cb715ff208b74ea2d17561699b72987fdd44f71437e83885ac24b8bf842b285cf5c6e296b5798f9e79203a36b9003f9360d6037a4344f5ce2c8dc8f3de49db9ee61a64b568a8b9ac3ccd6652e88971fd9ca99836e19dfe2315b2e46a710c64fd5f393691eb851f0e99d2463493a7ea7ae7bd469d8798c68bc2a6a8bf021a1ab384bd7", 0xd9}], 0xa, &(0x7f0000001b00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, r1, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r1, r0]}}, @rights={{0x30, 0x1, 0x1, [r0, 0xffffffffffffffff, r1, r0, 0xffffffffffffffff, r0, r1, r0]}}, @rights={{0x38, 0x1, 0x1, [r1, r1, r1, r1, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1]}}, @cred={{0x1c}}], 0x130, 0x20048040}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x20, 0x4, [0x2, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x2]}}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x8000, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r5, 0xda90) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) r6 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f00001bd000/0x3000)=nil, 0x3000, 0x3000002, 0x4010, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) r7 = getpid() sched_getattr(r7, &(0x7f00000001c0)={0x38}, 0x38, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @local, {[@lsrr={0x83, 0x7, 0xbf, [@private=0xa010102]}, @cipso={0x86, 0x36, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x6, 0x2}, {0x0, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x6, 0x8, "02a20948fd74"}, {0x7, 0xd, "ccf0301f78d89b5d6afffb"}]}]}}}}}}}, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x0, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x1008, 0x8722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x1ff}, 0x3, 0xed}}) 243.0126ms ago: executing program 3 (id=1683): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) get_mempolicy(0x0, &(0x7f0000000100), 0x8000, &(0x7f0000676000/0x1000)=nil, 0x2) syz_usb_connect$midi(0x3, 0x59, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000208205560140000102030109024700010102400709040000020103004a09240300ffab3b080907240106000700062402000153090506207a65f640c00425010009050a06ff0305dd0e09"], &(0x7f0000003500)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x0, 0x5d, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4b, 0x1, 0x1, 0x2, 0x60, 0x2, "", [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x5}, {0x5, 0x24, 0x0, 0xc000}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x7, 0x6, 0x58}, [@dmm={0x7, 0x24, 0x14, 0x7ae, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x40, 0x5, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xff, 0x3, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x1, 0x3, 0xb2}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x2, 0x1, 0x7, 0x68, 0xba}, 0x14f, &(0x7f0000000140)={0x5, 0xf, 0x14f, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x5, 0x5, 0x8}, @generic={0xfe, 0x10, 0x3, "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"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "bb786dc7525bf81dcb176a0c3f39137c"}, @ssp_cap={0x1c, 0x10, 0xa, 0xf2, 0x4, 0x7fffffb, 0xf, 0xffff, [0x3f00, 0xff3f60, 0xf, 0x30]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x22, 0x0, 0x9, 0x7f, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x43, 0x9, 0x1}]}, 0x5, [{0x91, &(0x7f00000002c0)=@string={0x91, 0x3, "c30f388abe433227c874d3a566ea0bdb36673948f9fa32e37c98c361f39f2f46adc5627916d1951a5fb7806f91a738618e568f9a1bcdeb368b456dc8ecaab392426a9f5b3b5e09f7e27c5b4fe8d8f33fa368ff787db2872d81a46f2366c48a384b28a77d7a8095fffd0e64f0bf64edb92795e0212f59f78063bc7147f34d71f6a7e23f3e66fa720f116ebbc3e47524"}}, {0x41, &(0x7f0000000380)=@string={0x41, 0x3, "38f0fc746a05cdb0061ec41090d00fd0eb0578f05066e095d60ff2b2573094520d7a6178910f87d86845760f799819919bf3af70fda3da4ecd18e38287f649"}}, {0xb4, &(0x7f0000000400)=@string={0xb4, 0x3, "2f96e5a33c7d579acad1c0a50d29987323e2a9a6008b20a6f670e8c3a86435b7db72398e0d464fc16a626161ee28ef9e11202394dd1132a598d3e73eb20aaa581bd0d0b8bc4d32ac6f44c060d2fb20428381e020fcec0d8c0a39f65f20574145390a3de376c0e18208e0a67bbad31066d278fac20794cd6431edffbecdae029be735531e451f2661dfbb9bc5f24d8141504fd26d5db516b4781c687aba303b5a9e94c48474bb976f189f7d9a15beea1d3ccd"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc1a}}]}) 0s ago: executing program 2 (id=1684): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a0f50000", @ANYBLOB="946bd974c6ed2fce2f332a81432494c6eeaf15339a18200cb269a96f31dda8c6c974ca38d659bcd72d8bb1ed3223a7fd8f944d7c44bdd93eb4a4679894485d51a8723c6e6ed47a2487fb6e035534d562474f0d55aba913f3cfa55d2caf9de16ef35d1f7b2fecb1f56fb0df437126e08a45358f934a2e0e9c2cb6f3e54b521fcf1da94ec2011c2e70f6ed643e36ca5641fcce27fa", @ANYRESOCT], 0x6a0}, 0x1, 0x0, 0x0, 0x50}, 0x4041) (async, rerun: 64) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) (rerun: 64) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r2, &(0x7f0000000280)=[{&(0x7f0000000140)='15', 0x2}, {&(0x7f0000000400)="04", 0x1}], 0x2) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) (async, rerun: 32) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0x8, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, 0xf, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0xffffffffffffffb1, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x2040001) (async, rerun: 32) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000040)=ANY=[]) kernel console output (not intermixed with test programs): [ 617.797645][ T29] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 617.815537][ T29] usb 4-1: can't read configurations, error -22 [ 617.965784][ T29] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 618.024957][T11047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1299'. [ 618.128796][ T29] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 618.147139][ T29] usb 4-1: can't read configurations, error -22 [ 618.165801][ T29] usb usb4-port1: attempt power cycle [ 618.538076][ T29] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 618.600530][ T29] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 618.608589][ T29] usb 4-1: can't read configurations, error -22 [ 618.748669][ T29] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 618.826319][ T29] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 618.834268][ T29] usb 4-1: can't read configurations, error -22 [ 618.840989][ T29] usb usb4-port1: unable to enumerate USB device [ 619.789210][T11068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1305'. [ 619.914745][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 619.914762][ T30] audit: type=1326 audit(1773512435.910:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11072 comm="syz.1.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5424d9c799 code=0x7ffc0000 [ 619.971113][T11075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1307'. [ 619.986349][ T30] audit: type=1326 audit(1773512435.910:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11072 comm="syz.1.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5424d9c799 code=0x7ffc0000 [ 620.020706][ T30] audit: type=1326 audit(1773512435.910:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11072 comm="syz.1.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5424d9c799 code=0x7ffc0000 [ 620.078280][ T30] audit: type=1326 audit(1773512435.910:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11072 comm="syz.1.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f5424d9c799 code=0x7ffc0000 [ 620.115710][ T5940] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 620.116600][ T30] audit: type=1326 audit(1773512435.960:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11072 comm="syz.1.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5424d9c799 code=0x7ffc0000 [ 620.154935][ T30] audit: type=1326 audit(1773512435.970:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11072 comm="syz.1.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5424d5cfce code=0x7ffc0000 [ 620.179619][ T30] audit: type=1326 audit(1773512435.970:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11072 comm="syz.1.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5424d5cfce code=0x7ffc0000 [ 620.204896][ T30] audit: type=1326 audit(1773512435.980:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11072 comm="syz.1.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5424d5cfce code=0x7ffc0000 [ 620.229232][ T30] audit: type=1326 audit(1773512435.980:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11072 comm="syz.1.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5424d5cfce code=0x7ffc0000 [ 620.253855][ T30] audit: type=1326 audit(1773512435.980:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11072 comm="syz.1.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5424d5cfce code=0x7ffc0000 [ 620.318927][ T5940] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 620.331276][ T5940] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 620.365161][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 620.370500][T11083] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 620.415628][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 620.436326][T11083] macsec1: entered allmulticast mode [ 620.446496][T11083] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 620.451912][ T5940] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 620.467583][T11083] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 620.474736][T11083] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 620.524077][ T5940] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 620.533518][ T5942] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 620.557611][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 620.594503][ T5940] usb 5-1: Product: syz [ 620.766545][ T5940] usb 5-1: Manufacturer: syz [ 620.795523][ T5942] usb 3-1: Using ep0 maxpacket: 16 [ 620.801107][ T5940] usb 5-1: SerialNumber: syz [ 620.822310][ T5942] usb 3-1: too many configurations: 112, using maximum allowed: 8 [ 620.851011][ T5942] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 620.860477][ T5942] usb 3-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 620.875978][ T5940] usb 5-1: config 0 descriptor?? [ 620.906978][T11088] netlink: 'syz.3.1311': attribute type 5 has an invalid length. [ 620.917906][ T5942] usb 3-1: Product: syz [ 620.970681][ T5942] usb 3-1: Manufacturer: syz [ 621.003982][ T5942] r8152-cfgselector 3-1: Unknown version 0x0000 [ 621.010383][ T5942] r8152-cfgselector 3-1: config 0 descriptor?? [ 621.020680][ T5942] cdc_acm 3-1:0.0: Zero length descriptor references [ 621.037475][ T5942] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 621.184417][ T5940] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 621.192218][ T5940] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 621.296555][T11080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.366847][T11080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.562071][ T5972] r8152-cfgselector 3-1: USB disconnect, device number 79 [ 621.638443][ T5940] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 621.651499][ T5940] radio-si470x 5-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 621.701877][ T5940] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 621.722298][ T5940] usb 5-1: USB disconnect, device number 77 [ 621.965556][ T797] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 621.973478][ T5972] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 622.135555][ T797] usb 4-1: Using ep0 maxpacket: 32 [ 622.140772][ T5972] usb 2-1: Using ep0 maxpacket: 8 [ 622.149606][ T797] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 622.159231][ T797] usb 4-1: config 0 has no interface number 0 [ 622.166000][ T5972] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 622.175916][ T5972] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 622.184158][ T5972] usb 2-1: Product: syz [ 622.188710][ T797] usb 4-1: config 0 interface 184 has no altsetting 0 [ 622.195891][ T5972] usb 2-1: Manufacturer: syz [ 622.200637][ T5972] usb 2-1: SerialNumber: syz [ 622.206928][ T797] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 622.217556][ T797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.226758][ T5972] usb 2-1: config 0 descriptor?? [ 622.231920][ T797] usb 4-1: Product: syz [ 622.236564][ T797] usb 4-1: Manufacturer: syz [ 622.242798][ T5972] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 622.249393][ T797] usb 4-1: SerialNumber: syz [ 622.267545][ T797] usb 4-1: config 0 descriptor?? [ 622.335653][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 622.343771][ T5940] usb 3-1: new low-speed USB device number 80 using dummy_hcd [ 622.518334][ T797] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 622.534058][ T797] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 622.548407][ T5940] usb 3-1: Invalid ep0 maxpacket: 64 [ 622.654992][ T797] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 622.678569][ T797] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 622.689081][ T797] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 622.700034][ T797] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 622.725523][ T5940] usb 3-1: new low-speed USB device number 81 using dummy_hcd [ 622.726074][ T797] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 622.753894][ T797] usb 4-1: USB disconnect, device number 92 [ 622.852261][ T5972] input: gspca_zc3xx as /devices/platform/dummy_hcd.1/usb2/2-1/input/input32 [ 622.885746][ T5940] usb 3-1: Invalid ep0 maxpacket: 64 [ 622.896763][ T5940] usb usb3-port1: attempt power cycle [ 623.066112][ T797] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 623.092276][ T5942] usb 2-1: USB disconnect, device number 105 [ 623.239373][ T797] usb 4-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51 [ 623.248714][ T797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.255630][ T5940] usb 3-1: new low-speed USB device number 82 using dummy_hcd [ 623.256755][ T797] usb 4-1: Product: syz [ 623.268602][ T797] usb 4-1: Manufacturer: syz [ 623.273208][ T797] usb 4-1: SerialNumber: syz [ 623.280001][ T797] usb 4-1: config 0 descriptor?? [ 623.287231][ T5940] usb 3-1: Invalid ep0 maxpacket: 64 [ 623.290698][ T797] rndis_host 4-1:0.0: More than one union descriptor, skipping ... [ 623.300985][ T797] usb 4-1: bad CDC descriptors [ 623.306688][ T797] cdc_acm 4-1:0.0: More than one union descriptor, skipping ... [ 623.415747][ T5845] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 623.424059][ T5940] usb 3-1: new low-speed USB device number 83 using dummy_hcd [ 623.446217][ T5940] usb 3-1: Invalid ep0 maxpacket: 64 [ 623.452031][ T5940] usb usb3-port1: unable to enumerate USB device [ 623.496796][ T797] usb 4-1: USB disconnect, device number 93 [ 623.575596][ T5845] usb 5-1: Using ep0 maxpacket: 16 [ 623.582076][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.593245][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.603102][ T5845] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 623.616527][ T5845] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 623.625708][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.635674][ T5845] usb 5-1: config 0 descriptor?? [ 623.832385][T11136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1323'. [ 623.841797][T11136] bridge_slave_0: default FDB implementation only supports local addresses [ 624.103239][T11141] netlink: 'syz.3.1324': attribute type 29 has an invalid length. [ 624.249591][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.256112][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.425593][ T5940] usb 4-1: new low-speed USB device number 94 using dummy_hcd [ 624.510370][ T5845] usbhid 5-1:0.0: can't add hid device: -71 [ 624.516905][ T5845] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 624.563969][ T5940] usb 4-1: device descriptor read/64, error -71 [ 624.576074][ T5845] usb 5-1: USB disconnect, device number 78 [ 624.805569][ T5940] usb 4-1: new low-speed USB device number 95 using dummy_hcd [ 624.945566][ T5940] usb 4-1: device descriptor read/64, error -71 [ 625.055826][ T5940] usb usb4-port1: attempt power cycle [ 625.295575][ T5845] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 625.395583][ T5940] usb 4-1: new low-speed USB device number 96 using dummy_hcd [ 625.416176][ T5940] usb 4-1: device descriptor read/8, error -71 [ 625.425516][ T5845] usb 1-1: device descriptor read/64, error -71 [ 625.505515][ T5972] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 625.655527][ T5940] usb 4-1: new low-speed USB device number 97 using dummy_hcd [ 625.671715][ T5845] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 625.702972][ T5972] usb 3-1: Using ep0 maxpacket: 8 [ 625.716034][ T5940] usb 4-1: device descriptor read/8, error -71 [ 625.723674][ T5972] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 625.749658][ T5972] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 625.768495][ T5972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.786752][ T5972] usb 3-1: Product: syz [ 625.797115][ T5972] usb 3-1: Manufacturer: syz [ 625.809687][ T5972] usb 3-1: SerialNumber: syz [ 625.825732][ T5940] usb usb4-port1: unable to enumerate USB device [ 625.835519][ T5845] usb 1-1: device descriptor read/64, error -71 [ 625.859749][ T5972] usb 3-1: config 0 descriptor?? [ 625.872261][ T5972] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 625.887703][ T5972] usb 3-1: setting power ON [ 625.895796][ T5972] dvb-usb: bulk message failed: -22 (2/0) [ 625.917533][ T5972] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 625.933828][ T5972] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 625.950871][ T5972] usb 3-1: media controller created [ 625.955954][ T5845] usb usb1-port1: attempt power cycle [ 625.982552][ T5972] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 626.087986][ T5972] usb 3-1: selecting invalid altsetting 6 [ 626.093851][ T5972] usb 3-1: digital interface selection failed (-22) [ 626.103980][ T5972] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 626.115079][ T5972] usb 3-1: setting power OFF [ 626.120089][ T5972] dvb-usb: bulk message failed: -22 (2/0) [ 626.127430][ T5972] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 626.145123][ T5972] (NULL device *): no alternate interface [ 626.260157][ T5972] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 626.310669][ T5972] usb 3-1: USB disconnect, device number 84 [ 626.315531][ T5845] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 626.358057][ T5845] usb 1-1: device descriptor read/8, error -71 [ 626.624618][ T5845] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 626.738716][ T5845] usb 1-1: device descriptor read/8, error -71 [ 626.764744][T11185] program syz.2.1337 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 626.764743][ T5867] Bluetooth: hci1: unexpected event for opcode 0x0413 [ 626.855804][ T5845] usb usb1-port1: unable to enumerate USB device [ 627.595538][ T5940] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 627.755522][ T5845] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 627.784399][ T5940] usb 3-1: config 0 has an invalid interface number: 33 but max is 0 [ 627.795007][ T5940] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.805563][ T5940] usb 3-1: config 0 has no interface number 0 [ 627.811701][ T5940] usb 3-1: config 0 interface 33 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 627.824514][ T5940] usb 3-1: config 0 interface 33 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 627.840175][ T5940] usb 3-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=68.64 [ 627.851748][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.860084][ T5940] usb 3-1: Product: syz [ 627.875854][ T5940] usb 3-1: Manufacturer: syz [ 627.884424][ T5940] usb 3-1: SerialNumber: syz [ 627.891809][ T5940] usb 3-1: config 0 descriptor?? [ 627.896904][ T5845] usb 4-1: device descriptor read/64, error -71 [ 627.911517][T11196] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 627.923197][ T5940] hdpvr 3-1:0.33: Could not find bulk-in endpoint [ 627.930791][ T5940] hdpvr 3-1:0.33: probe with driver hdpvr failed with error -12 [ 627.976155][T11206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1343'. [ 628.055670][ T5942] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 628.145762][ T5845] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 628.209066][ T5942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.225571][ T5942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.266007][ T5942] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 628.275599][ T5845] usb 4-1: device descriptor read/64, error -71 [ 628.295580][ T5942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.322255][ T5942] usb 5-1: config 0 descriptor?? [ 628.408016][ T5845] usb usb4-port1: attempt power cycle [ 628.655479][ T5940] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 628.738008][ T5942] hid-led 0003:1D34:000A.0022: unknown main item tag 0x0 [ 628.749797][ T5942] hid-led 0003:1D34:000A.0022: unknown main item tag 0x0 [ 628.760080][ T796] usb 3-1: USB disconnect, device number 85 [ 628.780136][ T5942] hid-led 0003:1D34:000A.0022: unknown main item tag 0x0 [ 628.806389][ T5845] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 628.828704][ T5940] usb 2-1: Using ep0 maxpacket: 32 [ 628.836914][ T5845] usb 4-1: device descriptor read/8, error -71 [ 628.848012][ T5940] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 628.861002][ T5940] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 628.875532][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.893343][ T5940] usb 2-1: config 0 descriptor?? [ 628.920070][ T5940] gspca_main: spca501-2.14.0 probing 0000:0000 [ 628.940767][ T5942] hid-led 0003:1D34:000A.0022: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.4-1/input0 [ 629.050014][ T5942] hid-led 0003:1D34:000A.0022: Dream Cheeky Webmail Notifier initialized [ 629.105580][ T5845] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 629.141783][T11202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1341'. [ 629.154745][ T5845] usb 4-1: device descriptor read/8, error -71 [ 629.179652][ T5942] usb 5-1: USB disconnect, device number 79 [ 629.267504][ T5845] usb usb4-port1: unable to enumerate USB device [ 629.315597][ T5972] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 629.327633][ T5940] gspca_spca501: reg write: error -71 [ 629.352891][ T5940] spca501 2-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 629.361200][ T5940] spca501 2-1:0.0: probe with driver spca501 failed with error -22 [ 629.387014][ T5940] usb 2-1: USB disconnect, device number 106 [ 630.279672][ T5972] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 630.295853][ T5972] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 630.314335][ T5972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.427568][ T5972] usb 3-1: config 0 descriptor?? [ 630.480692][ T5972] pwc: Askey VC010 type 2 USB webcam detected. [ 630.777408][ T5972] pwc: send_video_command error -71 [ 630.782644][ T5972] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 630.829610][ T5972] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 630.853615][ T5972] usb 3-1: USB disconnect, device number 86 [ 631.173497][T11261] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 631.210703][T11261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.250533][T11261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.334961][ T5972] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 631.477858][ T5845] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 631.526957][ T5972] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 631.537246][ T5972] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 631.555659][ T5972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.632305][ T5972] usb 3-1: config 0 descriptor?? [ 631.637706][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.649965][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.683276][ T5845] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 631.704927][ T5845] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 631.707509][ T5972] pwc: Askey VC010 type 2 USB webcam detected. [ 631.717711][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.101185][ T5845] usb 5-1: config 0 descriptor?? [ 632.137847][ T5972] pwc: recv_control_msg error -71 req 02 val 2b00 [ 632.145205][ T5972] pwc: recv_control_msg error -71 req 02 val 2700 [ 632.155805][ T5972] pwc: recv_control_msg error -71 req 02 val 2c00 [ 632.163147][ T5972] pwc: recv_control_msg error -71 req 04 val 1000 [ 632.200569][ T5972] pwc: recv_control_msg error -71 req 04 val 1300 [ 632.215183][ T5972] pwc: recv_control_msg error -71 req 04 val 1400 [ 632.229618][ T5972] pwc: recv_control_msg error -71 req 02 val 2000 [ 632.247494][ T5972] pwc: recv_control_msg error -71 req 02 val 2100 [ 632.264815][ T5972] pwc: recv_control_msg error -71 req 04 val 1500 [ 632.284316][ T5972] pwc: recv_control_msg error -71 req 02 val 2500 [ 632.311847][ T5972] pwc: recv_control_msg error -71 req 02 val 2400 [ 632.327096][ T5845] usbhid 5-1:0.0: can't add hid device: -71 [ 632.335844][ T5845] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 632.355363][ T5845] usb 5-1: USB disconnect, device number 80 [ 632.365912][ T5972] pwc: recv_control_msg error -71 req 02 val 2600 [ 632.379934][ T5972] pwc: recv_control_msg error -71 req 02 val 2900 [ 632.397456][ T5972] pwc: recv_control_msg error -71 req 02 val 2800 [ 632.412302][ T5972] pwc: recv_control_msg error -71 req 04 val 1100 [ 632.423786][ T5972] pwc: recv_control_msg error -71 req 04 val 1200 [ 632.465165][ T5972] pwc: Registered as video103. [ 632.481845][ T5972] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input33 [ 632.525764][ T5940] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 632.545710][ T5972] usb 3-1: USB disconnect, device number 87 [ 632.697576][ T5940] usb 4-1: Using ep0 maxpacket: 32 [ 632.728903][ T5940] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 632.755643][ T5940] usb 4-1: too many endpoints for config 0 interface 0 altsetting 11: 36, using maximum allowed: 30 [ 632.767317][ T5940] usb 4-1: config 0 interface 0 altsetting 11 bulk endpoint 0x6 has invalid maxpacket 255 [ 632.779317][ T5940] usb 4-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 36 [ 632.802851][ T5940] usb 4-1: config 0 interface 0 has no altsetting 0 [ 632.839455][T11288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1362'. [ 632.914803][ T5845] usb 1-1: new low-speed USB device number 87 using dummy_hcd [ 632.930866][ T5940] usb 4-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 632.986134][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.994988][ T5940] usb 4-1: Product: syz [ 633.050372][ T29] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 633.067330][ T5845] usb 1-1: Invalid ep0 maxpacket: 64 [ 633.098337][ T5940] usb 4-1: Manufacturer: syz [ 633.105708][ T5940] usb 4-1: SerialNumber: syz [ 633.119474][ T5940] usb 4-1: config 0 descriptor?? [ 633.132402][T11279] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 633.205678][ T5845] usb 1-1: new low-speed USB device number 88 using dummy_hcd [ 633.225540][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 633.232584][ T29] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 633.244985][ T29] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 633.255222][ T29] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 633.268634][ T29] usb 2-1: config 0 interface 0 has no altsetting 0 [ 633.286480][ T29] usb 2-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 633.295932][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.343638][ T5940] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 633.355501][ T5845] usb 1-1: Invalid ep0 maxpacket: 64 [ 633.361461][ T5845] usb usb1-port1: attempt power cycle [ 633.396703][ T29] usb 2-1: config 0 descriptor?? [ 633.425092][ T5940] usb 4-1: USB disconnect, device number 102 [ 633.476944][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 633.705568][ T5845] usb 1-1: new low-speed USB device number 89 using dummy_hcd [ 633.726020][ T5845] usb 1-1: Invalid ep0 maxpacket: 64 [ 633.817444][T11286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.826323][T11286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.839654][ T29] lenovo 0003:17EF:60FE.0023: unknown main item tag 0x0 [ 633.847622][ T29] lenovo 0003:17EF:60FE.0023: unknown main item tag 0x0 [ 633.854629][ T29] lenovo 0003:17EF:60FE.0023: unknown main item tag 0x0 [ 633.865971][ T29] lenovo 0003:17EF:60FE.0023: unknown main item tag 0x0 [ 633.866008][ T5845] usb 1-1: new low-speed USB device number 90 using dummy_hcd [ 633.872958][ T29] lenovo 0003:17EF:60FE.0023: unknown main item tag 0x0 [ 633.872989][ T29] lenovo 0003:17EF:60FE.0023: unknown main item tag 0x0 [ 633.873010][ T29] lenovo 0003:17EF:60FE.0023: unexpected long global item [ 633.906472][ T5845] usb 1-1: Invalid ep0 maxpacket: 64 [ 633.909324][ T29] lenovo 0003:17EF:60FE.0023: hid_parse failed [ 633.918485][ T5845] usb usb1-port1: unable to enumerate USB device [ 633.922757][ T5972] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 633.943044][ T29] lenovo 0003:17EF:60FE.0023: probe with driver lenovo failed with error -22 [ 634.041378][ T29] usb 2-1: USB disconnect, device number 107 [ 634.075667][ T5972] usb 3-1: device descriptor read/64, error -71 [ 634.084327][T11301] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1368'. [ 634.185605][ T5845] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 634.315647][ T5972] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 634.335527][ T797] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 634.335565][ T5845] usb 4-1: Using ep0 maxpacket: 8 [ 634.350594][ T5845] usb 4-1: unable to get BOS descriptor or descriptor too short [ 634.359609][ T5845] usb 4-1: config 1 has an invalid descriptor of length 156, skipping remainder of the config [ 634.370144][ T5845] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 634.379146][ T5845] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 634.394376][ T5845] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 634.403850][ T5845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.412118][ T5845] usb 4-1: Product: syz [ 634.416474][ T5845] usb 4-1: Manufacturer: syz [ 634.421202][ T5845] usb 4-1: SerialNumber: syz [ 634.445517][ T5972] usb 3-1: device descriptor read/64, error -71 [ 634.508915][ T797] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 634.519261][ T797] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 634.530222][ T797] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 634.539335][ T797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 634.547415][ T797] usb 5-1: SerialNumber: syz [ 634.560957][ T5972] usb usb3-port1: attempt power cycle [ 634.633474][T11298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.645979][T11298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.724462][ T5845] cdc_ncm 4-1:1.0: skipping garbage [ 634.730633][ T5845] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 634.745284][ T5845] cdc_ncm 4-1:1.0: bind() failure [ 634.755604][ T5845] usb 4-1: USB disconnect, device number 103 [ 634.895721][ T5940] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 634.935523][ T5972] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 634.957385][ T5972] usb 3-1: device descriptor read/8, error -71 [ 635.045607][ T5940] usb 2-1: Using ep0 maxpacket: 32 [ 635.052689][ T5940] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 635.063249][ T5940] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.074973][ T5940] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 635.085325][ T5940] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 635.098394][ T5940] usb 2-1: config 0 interface 0 has no altsetting 0 [ 635.105148][ T5940] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 635.114534][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.126043][ T5940] usb 2-1: config 0 descriptor?? [ 635.195642][ T5972] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 635.226195][ T5972] usb 3-1: device descriptor read/8, error -71 [ 635.345801][ T5972] usb usb3-port1: unable to enumerate USB device [ 635.515618][ T5972] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 635.536133][T11305] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1370'. [ 635.590975][T11313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.608978][T11313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.675638][ T5972] usb 4-1: Using ep0 maxpacket: 16 [ 635.683317][ T5972] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 635.691445][ T5972] usb 4-1: can't read configurations, error -61 [ 635.835767][ T5972] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 635.965661][ T29] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 635.985588][ T5972] usb 4-1: Using ep0 maxpacket: 16 [ 635.993188][ T5972] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 636.001368][ T5972] usb 4-1: can't read configurations, error -61 [ 636.008091][ T5972] usb usb4-port1: attempt power cycle [ 636.135500][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 636.142235][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.153736][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.163876][ T29] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 636.177897][ T29] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 636.189077][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.200274][ T29] usb 1-1: config 0 descriptor?? [ 636.345554][ T5972] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 636.366160][ T5972] usb 4-1: Using ep0 maxpacket: 16 [ 636.373989][ T5972] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 636.381801][ T5972] usb 4-1: can't read configurations, error -61 [ 636.525686][ T5972] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 636.546148][ T5972] usb 4-1: Using ep0 maxpacket: 16 [ 636.553548][ T5972] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 636.562260][ T5972] usb 4-1: can't read configurations, error -61 [ 636.573073][ T5972] usb usb4-port1: unable to enumerate USB device [ 636.620619][ T29] waterforce 0003:1044:7A4D.0024: unknown main item tag 0x0 [ 636.628215][ T29] waterforce 0003:1044:7A4D.0024: unknown main item tag 0x0 [ 636.635643][ T29] waterforce 0003:1044:7A4D.0024: unknown main item tag 0x0 [ 636.643022][ T29] waterforce 0003:1044:7A4D.0024: unknown main item tag 0x0 [ 636.654020][ T29] waterforce 0003:1044:7A4D.0024: hidraw0: USB HID v1.00 Device [HID 1044:7a4d] on usb-dummy_hcd.0-1/input0 [ 636.730689][ T29] waterforce 0003:1044:7A4D.0024: fw version request failed with -38 [ 637.049648][ T797] usb 5-1: 0:2 : does not exist [ 637.067600][ T797] usb 5-1: unit 5: unexpected type 0x0b [ 637.115562][ T29] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 637.137331][ T797] usb 5-1: USB disconnect, device number 81 [ 637.285735][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 637.293038][ T29] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.306309][ T29] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.316687][ T29] usb 3-1: config 0 interface 0 has no altsetting 0 [ 637.323433][ T29] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 637.332826][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.343821][ T29] usb 3-1: config 0 descriptor?? [ 637.569680][ T29] nzxt-smart2 0003:1E71:2009.0025: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 637.673687][ T29] usb 3-1: USB disconnect, device number 92 [ 637.711165][ T5940] usbhid 2-1:0.0: can't add hid device: -71 [ 637.737429][ T5940] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 637.747595][T11330] fido_id[11330]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 637.766686][ T5940] usb 2-1: USB disconnect, device number 108 [ 637.779166][ T5845] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 637.864648][T11336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1378'. [ 637.957390][ T5845] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 637.966736][ T5845] usb 5-1: config 0 has no interface number 0 [ 637.972832][ T5845] usb 5-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 637.985943][ T5845] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 637.997496][ T5845] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 638.007614][ T5845] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 638.017015][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.025586][ T29] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 638.035062][ T5845] usb 5-1: config 0 descriptor?? [ 638.046206][ T5845] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input34 [ 638.187011][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.198050][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.208337][ T29] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 638.223928][ T29] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 638.233160][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.251168][ T29] usb 3-1: config 0 descriptor?? [ 638.262742][ T5845] usb 5-1: USB disconnect, device number 82 [ 638.473826][ T29] usbhid 3-1:0.0: can't add hid device: -71 [ 638.480901][ T29] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 638.498568][ T29] usb 3-1: USB disconnect, device number 93 [ 638.715511][ T797] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 638.745756][ T5972] usb 1-1: reset high-speed USB device number 91 using dummy_hcd [ 638.757382][ T5972] usb 1-1: device reset changed ep0 maxpacket size! [ 638.766549][ T796] usb 1-1: USB disconnect, device number 91 [ 638.885502][ T797] usb 4-1: Using ep0 maxpacket: 16 [ 638.896661][ T797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.915457][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 638.915475][ T30] audit: type=1326 audit(1773512454.910:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11355 comm="syz.1.1385" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5424d9c799 code=0x0 [ 638.916357][ T796] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 638.945476][ T797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.975665][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 638.984820][ T797] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 639.003873][T11361] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1384'. [ 639.005798][ T797] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 639.032205][ T797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.043900][ T797] usb 4-1: config 0 descriptor?? [ 639.095637][ T796] usb 1-1: Using ep0 maxpacket: 32 [ 639.106706][ T796] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 639.114812][ T796] usb 1-1: config 2 has no interface number 0 [ 639.135525][ T796] usb 1-1: config 2 interface 88 has no altsetting 0 [ 639.157054][ T796] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 639.176350][ T796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.184373][ T796] usb 1-1: Product: syz [ 639.195508][ T796] usb 1-1: Manufacturer: syz [ 639.200240][ T796] usb 1-1: SerialNumber: syz [ 639.306051][ T5845] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 639.472587][ T797] hid_parser_main: 39 callbacks suppressed [ 639.472608][ T797] shield 0003:0955:7214.0026: unknown main item tag 0x0 [ 639.473908][ T5845] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 639.521803][ T797] shield 0003:0955:7214.0026: unknown main item tag 0x0 [ 639.522359][ T5845] usb 5-1: config 0 has no interface number 0 [ 639.542327][ T797] shield 0003:0955:7214.0026: unknown main item tag 0x0 [ 639.562528][ T797] shield 0003:0955:7214.0026: unknown main item tag 0x0 [ 639.565581][ T5845] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 639.592960][ T797] shield 0003:0955:7214.0026: unknown main item tag 0x0 [ 639.599307][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.656282][ T797] input: HID 0955:7214 Haptics as /devices/virtual/input/input35 [ 639.657794][ T5845] usb 5-1: config 0 descriptor?? [ 639.664482][T11344] random: crng reseeded on system resumption [ 639.737954][ T797] shield 0003:0955:7214.0026: Registered Thunderstrike controller [ 639.748309][ T5845] usb 5-1: selecting invalid altsetting 1 [ 639.753940][ T797] shield 0003:0955:7214.0026: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 639.783815][ T5845] dvb_ttusb_budget: ttusb_init_controller: error [ 639.805521][ T5845] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 639.837432][ T5972] shield 0003:0955:7214.0026: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 639.862745][ T797] usb 4-1: USB disconnect, device number 108 [ 639.894336][ T796] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 639.898462][ T5972] shield 0003:0955:7214.0026: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 639.916404][ T796] asix 1-1:2.88: probe with driver asix failed with error -71 [ 639.944456][T11363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.953325][T11363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.958073][ T5972] shield 0003:0955:7214.0026: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 640.095767][ T796] usb 1-1: USB disconnect, device number 92 [ 640.118560][T11383] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1391'. [ 640.210891][T11382] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 640.218243][T11382] IPv6: NLM_F_CREATE should be set when creating new route [ 640.225556][T11382] IPv6: NLM_F_CREATE should be set when creating new route [ 640.232902][T11382] IPv6: NLM_F_CREATE should be set when creating new route [ 640.282008][ T5972] shield 0003:0955:7214.0026: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 640.288149][ T5845] DVB: Unable to find symbol cx22700_attach() [ 640.404519][ T5845] DVB: Unable to find symbol tda10046_attach() [ 640.427230][ T5845] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 640.476889][ T5845] usb 5-1: USB disconnect, device number 83 [ 640.796401][T11390] binder: 11389:11390 ioctl 540a 3 returned -22 [ 641.075774][ T5845] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 641.279953][ T5845] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 641.301635][T11405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1398'. [ 641.310984][ T796] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 641.320090][ T5845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 641.347808][ T5845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 641.365338][ T5845] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 641.379818][ T5845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.402714][ T5845] usb 4-1: Product: syz [ 641.418404][ T5845] usb 4-1: Manufacturer: syz [ 641.436735][ T5845] usb 4-1: SerialNumber: syz [ 641.465565][ T796] usb 5-1: device descriptor read/64, error -71 [ 641.473000][ T5845] usb 4-1: config 0 descriptor?? [ 641.720720][ T796] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 641.875603][ T796] usb 5-1: device descriptor read/64, error -71 [ 641.985890][ T796] usb usb5-port1: attempt power cycle [ 642.054870][T11425] Context (ID=0x1) not attached to queue pair (handle=0xffffffff:0x2) [ 642.361123][ T796] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 642.403886][ T796] usb 5-1: device descriptor read/8, error -71 [ 642.675588][ T796] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 642.683326][ T5942] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 642.706294][ T796] usb 5-1: device descriptor read/8, error -71 [ 642.846211][ T796] usb usb5-port1: unable to enumerate USB device [ 642.868102][ T5942] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 642.876678][ T5942] usb 1-1: can't read configurations, error -22 [ 643.005472][ T5942] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 643.188142][ T5942] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 643.196568][ T5942] usb 1-1: can't read configurations, error -22 [ 643.213250][ T5942] usb usb1-port1: attempt power cycle [ 643.575557][ T5942] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 643.598949][ T5942] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 643.608882][ T5942] usb 1-1: can't read configurations, error -22 [ 643.617435][ T5845] usb 4-1: 0:0 : invalid sync pipe. is_playback 1, ep 0b, bSynchAddress ff [ 643.765779][ T5942] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 643.792409][ T5845] usb 4-1: USB disconnect, device number 109 [ 643.813394][ T5942] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 643.826058][ T5942] usb 1-1: can't read configurations, error -22 [ 643.839160][ T5942] usb usb1-port1: unable to enumerate USB device [ 644.395603][ T5845] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 644.575551][ T5845] usb 4-1: Using ep0 maxpacket: 32 [ 644.586998][ T5845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.601827][T11462] netlink: 'syz.4.1412': attribute type 8 has an invalid length. [ 644.610080][ T796] usb 3-1: new low-speed USB device number 94 using dummy_hcd [ 644.655657][ T5845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 644.675625][ T5845] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 644.695516][ T5845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.705173][ T5845] usb 4-1: config 0 descriptor?? [ 644.731379][ T5845] hub 4-1:0.0: USB hub found [ 644.867596][ T796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 644.880037][ T796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 73, setting to 8 [ 644.905628][ T796] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 644.919310][ T5845] hub 4-1:0.0: 1 port detected [ 644.938660][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.963183][ T796] usb 3-1: config 0 descriptor?? [ 644.976019][T11460] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 645.187444][ T796] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 645.215938][ T5942] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 645.234313][ T796] usb 3-1: USB disconnect, device number 94 [ 645.385768][ T5942] usb 2-1: Using ep0 maxpacket: 16 [ 645.400051][ T5942] usb 2-1: descriptor type invalid, skip [ 645.435557][ T5942] usb 2-1: config 0 has no interfaces? [ 645.454162][ T5942] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 645.464151][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.472607][ T5942] usb 2-1: Product: syz [ 645.494698][ T5942] usb 2-1: Manufacturer: syz [ 645.502503][ T5942] usb 2-1: SerialNumber: syz [ 645.524144][ T5942] usb 2-1: config 0 descriptor?? [ 645.537099][ T5845] usb 4-1: USB disconnect, device number 110 [ 645.544056][ T796] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 645.762643][ T5972] usb 2-1: USB disconnect, device number 109 [ 645.827547][T11496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1419'. [ 645.838708][T11496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1419'. [ 645.848005][T11496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1419'. [ 645.859131][T11496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1419'. [ 645.886652][T11496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1419'. [ 646.363320][ T30] audit: type=1326 audit(1773512462.360:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11506 comm="syz.0.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7f79c799 code=0x7ffc0000 [ 646.398849][ T30] audit: type=1326 audit(1773512462.390:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11506 comm="syz.0.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f2f7f79c799 code=0x7ffc0000 [ 646.456722][ T796] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 646.533152][ T30] audit: type=1326 audit(1773512462.390:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11506 comm="syz.0.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7f79c799 code=0x7ffc0000 [ 646.557072][ T30] audit: type=1326 audit(1773512462.390:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11506 comm="syz.0.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2f7f79c799 code=0x7ffc0000 [ 646.582283][T11514] delete_channel: no stack [ 646.665494][ T796] usb 3-1: Using ep0 maxpacket: 16 [ 646.672380][ T796] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.689381][ T796] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.704534][ T30] audit: type=1326 audit(1773512462.390:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11506 comm="syz.0.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7f79c799 code=0x7ffc0000 [ 646.760077][ T796] usb 3-1: config 0 interface 0 has no altsetting 0 [ 646.784450][ T796] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 646.793796][ T5845] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 646.842386][ T30] audit: type=1326 audit(1773512462.390:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11506 comm="syz.0.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2f7f79c799 code=0x7ffc0000 [ 646.869983][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.881538][ T30] audit: type=1326 audit(1773512462.390:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11506 comm="syz.0.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7f79c799 code=0x7ffc0000 [ 646.909289][ T796] usb 3-1: config 0 descriptor?? [ 646.921529][ T30] audit: type=1326 audit(1773512462.390:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11506 comm="syz.0.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2f7f79c799 code=0x7ffc0000 [ 646.954631][ T30] audit: type=1326 audit(1773512462.390:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11506 comm="syz.0.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7f79c799 code=0x7ffc0000 [ 646.970519][T11527] syzkaller0: entered promiscuous mode [ 646.984190][ T30] audit: type=1326 audit(1773512462.390:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11506 comm="syz.0.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2f7f79c799 code=0x7ffc0000 [ 647.006660][ T5845] usb 2-1: Using ep0 maxpacket: 32 [ 647.016259][ T5845] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 647.016613][T11527] syzkaller0: entered allmulticast mode [ 647.033733][ T5845] usb 2-1: too many endpoints for config 0 interface 0 altsetting 11: 36, using maximum allowed: 30 [ 647.099512][ T5845] usb 2-1: config 0 interface 0 altsetting 11 bulk endpoint 0x6 has invalid maxpacket 255 [ 647.126746][T11509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.235965][T11509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.497165][ T5845] usb 2-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 36 [ 647.537757][ T5845] usb 2-1: config 0 interface 0 has no altsetting 0 [ 647.558688][ T5845] usb 2-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 647.575515][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.594683][ T5845] usb 2-1: Product: syz [ 647.604391][ T5845] usb 2-1: Manufacturer: syz [ 647.617601][ T5845] usb 2-1: SerialNumber: syz [ 647.641047][ T5845] usb 2-1: config 0 descriptor?? [ 647.655317][T11517] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 647.920614][ T5940] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 648.096614][T11535] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 648.125574][ T5940] usb 4-1: Using ep0 maxpacket: 32 [ 648.132413][ T5940] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 648.140725][ T5940] usb 4-1: config 0 has no interface number 0 [ 648.252048][ T5940] usb 4-1: config 0 interface 184 has no altsetting 0 [ 648.279152][ T5940] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 648.295547][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.307069][ T5940] usb 4-1: Product: syz [ 648.314034][ T5940] usb 4-1: Manufacturer: syz [ 648.328772][ T5940] usb 4-1: SerialNumber: syz [ 648.356285][ T5940] usb 4-1: config 0 descriptor?? [ 648.594495][ T5940] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 648.606122][ T5940] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 648.628745][ T5940] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 648.644404][ T5940] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 648.755549][ T5942] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 648.905747][ T5942] usb 1-1: Using ep0 maxpacket: 32 [ 648.912696][ T5942] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 648.922823][ T5942] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 648.932827][ T5942] usb 1-1: config 0 interface 0 has no altsetting 0 [ 648.942442][ T5942] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 648.963364][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.972549][ T5940] usb 4-1: USB disconnect, device number 111 [ 648.986368][ T5942] usb 1-1: Product: syz [ 648.995116][ T5942] usb 1-1: Manufacturer: syz [ 649.007062][ T5942] usb 1-1: SerialNumber: syz [ 649.026050][ T5942] usb 1-1: config 0 descriptor?? [ 649.085931][ T5972] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 649.434877][ T796] usbhid 3-1:0.0: can't add hid device: -71 [ 649.477673][ T796] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 649.564284][ T5972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.571210][ T796] usb 3-1: USB disconnect, device number 95 [ 649.591239][ T5972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 649.609622][ T5845] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 649.638212][ T5972] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 649.654718][ T5942] gs_usb 1-1:0.0: Couldn't get device config: (err=-121) [ 649.658070][ T5972] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 649.679178][ T5972] usb 5-1: Manufacturer: syz [ 649.694096][ T5942] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121 [ 649.704427][ T5972] usb 5-1: config 0 descriptor?? [ 649.787512][T11556] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1436'. [ 649.830142][ T5845] usb 2-1: USB disconnect, device number 110 [ 649.883698][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 650.121486][ T5972] usbhid 5-1:0.0: can't add hid device: -71 [ 650.127632][ T5972] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 650.155782][ T5972] usb 5-1: USB disconnect, device number 88 [ 650.174822][T11561] loop2: detected capacity change from 0 to 7 [ 650.182454][T11561] Dev loop2: unable to read RDB block 7 [ 650.188782][T11561] loop2: AHDI p1 p2 p3 [ 650.193113][T11561] loop2: partition table partially beyond EOD, truncated [ 650.200640][T11561] loop2: p1 start 1818582900 is beyond EOD, truncated [ 650.208114][ T5845] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 650.217611][T11561] loop2: p3 start 335544320 is beyond EOD, truncated [ 650.225593][ T5942] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 650.302183][T11564] syzkaller0: entered promiscuous mode [ 650.308231][T11564] syzkaller0: entered allmulticast mode [ 650.365614][ T5845] usb 2-1: Using ep0 maxpacket: 16 [ 650.373211][ T5845] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 650.382388][ T5845] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 650.394028][ T5845] usb 2-1: config 0 has no interface number 0 [ 650.400360][ T5845] usb 2-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 650.409878][ T5942] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 650.421114][ T5942] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 650.431098][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.440198][ T5942] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 650.456687][ T5845] usb 2-1: config 0 descriptor?? [ 650.462372][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.476284][ T5845] uvcvideo 2-1:0.64: probe with driver uvcvideo failed with error -22 [ 650.512835][T11559] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 650.532182][ T5942] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 650.567654][T11567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.603258][T11567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.672029][ T5972] usb 2-1: USB disconnect, device number 111 [ 650.733749][ T797] usb 3-1: USB disconnect, device number 96 [ 651.035538][ T5942] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 651.187039][ T5942] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 651.196384][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.208403][ T5942] usb 4-1: config 0 descriptor?? [ 651.631304][ T5942] usb 4-1: Cannot read MAC address [ 651.645949][ T5942] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 651.657578][ T5927] usb 1-1: USB disconnect, device number 97 [ 651.825607][ T5942] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 651.989646][ T5942] usb 5-1: unable to get BOS descriptor or descriptor too short [ 651.999321][ T5942] usb 5-1: not running at top speed; connect to a high speed hub [ 652.021753][ T5942] usb 5-1: config 5 has an invalid interface number: 206 but max is 0 [ 652.034753][ T5942] usb 5-1: config 5 has no interface number 0 [ 652.046190][ T5942] usb 5-1: config 5 interface 206 has no altsetting 0 [ 652.062690][ T5942] usb 5-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=87.b4 [ 652.079628][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.093353][ T5942] usb 5-1: Product: syz [ 652.100737][ T5942] usb 5-1: Manufacturer: syz [ 652.110668][ T5942] usb 5-1: SerialNumber: syz [ 652.412806][T11599] syzkaller0: entered promiscuous mode [ 652.418905][ T5942] rtsx_usb 5-1:5.206: probe with driver rtsx_usb failed with error -22 [ 652.419314][T11599] syzkaller0: entered allmulticast mode [ 652.444986][ T5942] usb 5-1: USB disconnect, device number 89 [ 652.651026][T11609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1453'. [ 652.714613][T11611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1453'. [ 653.369525][ T5942] usb 2-1: new low-speed USB device number 112 using dummy_hcd [ 653.410550][T11646] usb usb8: usbfs: process 11646 (syz.2.1464) did not claim interface 0 before use [ 653.525561][ T5942] usb 2-1: device descriptor read/64, error -71 [ 653.605672][ T797] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 653.675501][ T5940] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 653.766116][ T5942] usb 2-1: new low-speed USB device number 113 using dummy_hcd [ 653.775595][ T797] usb 1-1: Using ep0 maxpacket: 16 [ 653.783685][ T797] usb 1-1: config 1 has an invalid interface number: 228 but max is 0 [ 653.795542][ T5845] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 653.805475][ T5940] usb 3-1: device descriptor read/64, error -71 [ 653.813204][ T797] usb 1-1: config 1 has no interface number 0 [ 653.824869][ T797] usb 1-1: config 1 interface 228 has no altsetting 0 [ 653.839830][ T797] usb 1-1: New USB device found, idVendor=0a5c, idProduct=396e, bcdDevice=21.b9 [ 653.849208][ T797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.857265][ T797] usb 1-1: Product: syz [ 653.861445][ T797] usb 1-1: Manufacturer: syz [ 653.866172][ T797] usb 1-1: SerialNumber: syz [ 653.895532][ T5942] usb 2-1: device descriptor read/64, error -71 [ 653.957324][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.968493][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.978334][ T5845] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 653.992115][ T5845] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 654.001262][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.009717][ T5942] usb usb2-port1: attempt power cycle [ 654.019352][ T5845] usb 5-1: config 0 descriptor?? [ 654.045543][ T5940] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 654.121162][ T796] usb 4-1: USB disconnect, device number 112 [ 654.159693][T11641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.177159][ T5940] usb 3-1: device descriptor read/64, error -71 [ 654.194178][T11641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.323648][ T5940] usb usb3-port1: attempt power cycle [ 654.355530][ T5942] usb 2-1: new low-speed USB device number 114 using dummy_hcd [ 654.388208][ T5942] usb 2-1: device descriptor read/8, error -71 [ 654.445930][ T5845] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 654.638706][ T5942] usb 2-1: new low-speed USB device number 115 using dummy_hcd [ 654.680978][ T5940] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 654.691350][ T5942] usb 2-1: device descriptor read/8, error -71 [ 654.716425][ T5940] usb 3-1: device descriptor read/8, error -71 [ 654.816543][ T5942] usb usb2-port1: unable to enumerate USB device [ 654.965562][ T5940] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 654.996367][ T5940] usb 3-1: device descriptor read/8, error -71 [ 655.194052][ T5940] usb usb3-port1: unable to enumerate USB device [ 655.745647][ T5927] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 655.875551][ T29] usb 5-1: reset high-speed USB device number 90 using dummy_hcd [ 655.895495][ T5927] usb 4-1: device descriptor read/64, error -71 [ 656.147470][ T5927] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 656.167123][ T797] usb 1-1: USB disconnect, device number 98 [ 656.290887][T11676] batadv_slave_0: entered promiscuous mode [ 656.316245][ T5927] usb 4-1: device descriptor read/64, error -71 [ 656.427057][ T5927] usb usb4-port1: attempt power cycle [ 656.795540][ T5927] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 656.816126][ T5927] usb 4-1: device descriptor read/8, error -71 [ 656.942212][T11693] tipc: Enabling of bearer rejected, failed to enable media [ 657.038127][T11670] batadv_slave_0: left promiscuous mode [ 657.075943][ T5927] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 657.106364][ T5927] usb 4-1: device descriptor read/8, error -71 [ 657.137665][T11696] kvm: user requested TSC rate below hardware speed [ 657.195602][ T29] usb 5-1: device descriptor read/64, error -71 [ 657.216338][ T5927] usb usb4-port1: unable to enumerate USB device [ 657.435575][ T29] usb 5-1: reset high-speed USB device number 90 using dummy_hcd [ 657.444638][ T29] usb 5-1: device reset changed ep0 maxpacket size! [ 657.453236][ T5972] usb 5-1: USB disconnect, device number 90 [ 657.595486][ T5972] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 657.744636][T11705] blktrace: Concurrent blktraces are not allowed on nullb0 [ 657.757172][ T5972] usb 5-1: Using ep0 maxpacket: 8 [ 657.778324][ T5972] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 657.789080][ T5972] usb 5-1: config 179 has no interface number 0 [ 657.805475][ T5972] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 657.825466][ T5972] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 657.836971][ T5972] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 657.850275][ T5972] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 657.864349][ T5972] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 657.878985][ T5972] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 657.888269][ T5972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.906786][T11684] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 658.227240][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 658.227257][ T30] audit: type=1326 audit(1773512474.230:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11719 comm="syz.2.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1f9d9c799 code=0x7ffc0000 [ 658.339828][ T5972] usb 5-1: USB disconnect, device number 91 [ 658.345853][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 658.345887][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 658.363275][ T30] audit: type=1326 audit(1773512474.230:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11719 comm="syz.2.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff1f9d5cfce code=0x7ffc0000 [ 658.375598][ T5940] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 658.390417][T11727] binder: BINDER_SET_CONTEXT_MGR already set [ 658.400817][T11727] binder: 11724:11727 ioctl 4018620d 2000000002c0 returned -16 [ 658.466557][ T30] audit: type=1326 audit(1773512474.230:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11719 comm="syz.2.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1f9d9c799 code=0x7ffc0000 [ 658.492701][ T30] audit: type=1326 audit(1773512474.230:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11719 comm="syz.2.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff1f9d9c799 code=0x7ffc0000 [ 658.493331][T11726] openvswitch: netlink: Invalid VLAN frame [ 658.515678][ T30] audit: type=1326 audit(1773512474.230:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11719 comm="syz.2.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1f9d9c799 code=0x7ffc0000 [ 658.647092][ T30] audit: type=1326 audit(1773512474.230:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11719 comm="syz.2.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff1f9d9c799 code=0x7ffc0000 [ 658.673555][ T30] audit: type=1326 audit(1773512474.230:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11719 comm="syz.2.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1f9d9c799 code=0x7ffc0000 [ 658.708491][ T30] audit: type=1326 audit(1773512474.240:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11719 comm="syz.2.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7ff1f9d9c799 code=0x7ffc0000 [ 658.734375][ T30] audit: type=1326 audit(1773512474.240:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11719 comm="syz.2.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1f9d9c799 code=0x7ffc0000 [ 658.765791][ T5940] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 658.776677][ T5940] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 658.785909][ T30] audit: type=1326 audit(1773512474.260:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11719 comm="syz.2.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff1f9d9e007 code=0x7ffc0000 [ 658.826796][ T5940] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 658.835989][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 658.846945][ T5940] usb 1-1: SerialNumber: syz [ 659.026214][ T5942] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 659.045652][ T5845] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 659.073001][ T5940] usb 1-1: 0:2 : does not exist [ 659.083066][ T5940] usb 1-1: unit 255 not found! [ 659.125215][ T5940] usb 1-1: USB disconnect, device number 99 [ 659.155935][ T796] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 659.179023][ T5996] udevd[5996]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 659.187191][ T5942] usb 4-1: config 0 has no interfaces? [ 659.202524][ T5845] usb 2-1: Using ep0 maxpacket: 32 [ 659.210917][ T5942] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 659.220446][ T5845] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 659.229942][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.238982][ T5845] usb 2-1: config 0 has no interface number 0 [ 659.239453][T11736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1489'. [ 659.247955][ T5845] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 659.265318][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.274071][ T5845] usb 2-1: Product: syz [ 659.279582][ T5942] usb 4-1: config 0 descriptor?? [ 659.287816][ T5845] usb 2-1: Manufacturer: syz [ 659.292528][ T5845] usb 2-1: SerialNumber: syz [ 659.297279][ T796] usb 5-1: device descriptor read/64, error -71 [ 659.307972][ T5845] usb 2-1: config 0 descriptor?? [ 659.318253][ T5845] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 659.416218][T11739] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1490'. [ 659.495684][T11729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.508164][T11729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.517918][ T5972] usb 4-1: USB disconnect, device number 117 [ 659.537645][ T796] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 659.548364][ T5845] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 659.560614][ T5845] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 659.682176][T11744] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1491'. [ 659.691654][ T796] usb 5-1: device descriptor read/64, error -71 [ 659.806037][ T796] usb usb5-port1: attempt power cycle [ 659.985856][ T5845] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 660.006560][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 660.016279][ T5927] usb 2-1: USB disconnect, device number 116 [ 660.043654][ T5927] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 660.086714][ T5927] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 660.129172][ T5927] quatech2 2-1:0.51: device disconnected [ 660.156520][ T5845] usb 4-1: Using ep0 maxpacket: 16 [ 660.161841][ T796] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 660.175523][ T5845] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 660.197934][ T5845] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 660.208196][ T796] usb 5-1: device descriptor read/8, error -71 [ 660.235837][ T5845] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 660.252835][ T5845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.275253][ T5845] usb 4-1: Product: syz [ 660.281256][ T5845] usb 4-1: Manufacturer: syz [ 660.291695][ T5845] usb 4-1: SerialNumber: syz [ 660.455523][ T796] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 660.496402][ T796] usb 5-1: device descriptor read/8, error -71 [ 660.504008][T11775] program syz.0.1499 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 660.616800][ T796] usb usb5-port1: unable to enumerate USB device [ 660.739989][ T5845] usb 4-1: 0:2 : does not exist [ 660.762857][ T5867] Bluetooth: hci0: unexpected event for opcode 0x0c03 [ 660.786420][T11789] syzkaller0: entered promiscuous mode [ 660.794078][T11789] syzkaller0: entered allmulticast mode [ 660.820446][T11794] input: syz0 as /devices/virtual/input/input36 [ 661.145080][ T5940] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 661.317814][ T5940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.344239][ T5940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.399119][ T5940] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 661.424043][ T5940] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 661.442170][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.473291][ T5940] usb 2-1: config 0 descriptor?? [ 661.792250][T11729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.804688][T11729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.874335][ T5845] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 661.900763][ T5940] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 662.337879][ T5845] usb 4-1: USB disconnect, device number 118 [ 662.589477][T11833] netlink: 'syz.0.1516': attribute type 8 has an invalid length. [ 662.777903][T11842] xt_cluster: you have exceeded the maximum number of cluster nodes (2359328 > 32) [ 663.005503][ T5927] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 663.296735][ T5927] usb 5-1: Using ep0 maxpacket: 16 [ 663.307691][ T5927] usb 5-1: config 0 has no interfaces? [ 663.316972][ T5927] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 663.337529][ T5927] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 663.345894][ T5927] usb 5-1: Manufacturer: syz [ 663.360470][ T5927] usb 5-1: config 0 descriptor?? [ 663.555783][ T5927] usb 2-1: reset high-speed USB device number 117 using dummy_hcd [ 663.627428][T11839] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 664.137724][T11860] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1524'. [ 664.158413][T11860] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1524'. [ 664.349344][T11873] geneve2: entered promiscuous mode [ 664.521811][T11878] syzkaller0: entered promiscuous mode [ 664.564346][T11878] syzkaller0: entered allmulticast mode [ 664.724881][T11886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1532'. [ 664.740344][T11886] ip6tnl1: entered allmulticast mode [ 664.755472][ T5927] usb 2-1: device descriptor read/64, error -71 [ 664.767161][T11886] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1532'. [ 664.990536][T11892] syzkaller0: entered promiscuous mode [ 664.996344][T11892] syzkaller0: entered allmulticast mode [ 665.015525][ T5927] usb 2-1: reset high-speed USB device number 117 using dummy_hcd [ 665.026743][ T5927] usb 2-1: device reset changed ep0 maxpacket size! [ 665.038696][ T5972] usb 2-1: USB disconnect, device number 117 [ 665.308846][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 665.308863][ T30] audit: type=1326 audit(1773512481.310:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11897 comm="syz.2.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1f9d9c799 code=0x7ffc0000 [ 665.337659][ T5972] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 665.665517][ T5972] usb 2-1: Using ep0 maxpacket: 8 [ 665.685955][ T5927] usb 5-1: USB disconnect, device number 96 [ 665.697737][ T5972] usb 2-1: unable to get BOS descriptor or descriptor too short [ 665.729211][ T5972] usb 2-1: config 9 has an invalid interface number: 66 but max is 0 [ 665.746904][ T5972] usb 2-1: config 9 has no interface number 0 [ 665.768767][ T5972] usb 2-1: New USB device found, idVendor=22b8, idProduct=2d95, bcdDevice=a2.a6 [ 665.779020][ T5972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.791768][ T5972] usb 2-1: Product: syz [ 665.800182][ T5972] usb 2-1: Manufacturer: syz [ 665.812279][ T5972] usb 2-1: SerialNumber: syz [ 666.056925][ T5972] usb 2-1: USB disconnect, device number 118 [ 666.141147][T11925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1543'. [ 666.153315][T11925] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 666.357381][T11933] fuse: Bad value for 'group_id' [ 666.409498][T11933] fuse: Bad value for 'group_id' [ 666.637388][T11941] tipc: Enabled bearer , priority 0 [ 666.698401][T11938] tipc: Disabling bearer [ 666.755628][ T5972] usb 5-1: new full-speed USB device number 97 using dummy_hcd [ 666.924801][T11950] trusted_key: encrypted_key: insufficient parameters specified [ 666.937380][ T5972] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 666.945981][ T5972] usb 5-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 666.963941][ T5972] usb 5-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 666.978997][ T5972] usb 5-1: config 150 has no interface number 0 [ 666.987109][ T5972] usb 5-1: config 150 interface 204 has no altsetting 0 [ 666.997428][ T5972] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 667.069951][ T5972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.084947][T11955] IPv6: Can't replace route, no match found [ 667.090062][ T5972] usb 5-1: Product: syz [ 667.098356][ T5972] usb 5-1: Manufacturer: syz [ 667.104251][ T5972] usb 5-1: SerialNumber: syz [ 667.191635][T11958] syzkaller0: entered promiscuous mode [ 667.198511][T11958] syzkaller0: entered allmulticast mode [ 667.340311][ T5972] usb 5-1: USB disconnect, device number 97 [ 667.850871][T11973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.863697][T11973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.905661][ T5972] usb 4-1: new low-speed USB device number 119 using dummy_hcd [ 668.035463][ T5972] usb 4-1: device descriptor read/64, error -71 [ 668.085884][ T5940] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 668.275571][ T5972] usb 4-1: new low-speed USB device number 120 using dummy_hcd [ 668.297372][ T5940] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 668.306534][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.325119][ T5940] usb 2-1: config 0 descriptor?? [ 668.342722][ T5940] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 668.442150][ T5972] usb 4-1: device descriptor read/64, error -71 [ 668.485662][ T5927] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 668.541817][ T5940] gspca_cpia1: usb_control_msg 05, error -71 [ 668.549112][ T5940] gspca_cpia1: usb_control_msg 01, error -71 [ 668.555160][ T5940] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 668.565712][ T5940] usb 2-1: USB disconnect, device number 119 [ 668.568017][ T5972] usb usb4-port1: attempt power cycle [ 668.634535][T11985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1561'. [ 668.643842][T11985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1561'. [ 668.654145][T11985] netlink: 'syz.2.1561': attribute type 12 has an invalid length. [ 668.663240][T11985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1561'. [ 668.672743][T11985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1561'. [ 668.682107][T11985] netlink: 'syz.2.1561': attribute type 12 has an invalid length. [ 668.687169][ T5927] usb 1-1: Using ep0 maxpacket: 32 [ 668.697369][ T5927] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 668.706199][ T5927] usb 1-1: config 0 has no interface number 0 [ 668.712391][ T5927] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 668.724149][ T5927] usb 1-1: config 0 interface 85 has no altsetting 0 [ 668.735337][ T5927] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 668.751372][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.772963][T11987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1562'. [ 668.775530][ T5927] usb 1-1: Product: syz [ 668.797059][ T5927] usb 1-1: Manufacturer: syz [ 668.815847][ T5927] usb 1-1: SerialNumber: syz [ 668.829038][ T5927] usb 1-1: config 0 descriptor?? [ 668.945893][ T5972] usb 4-1: new low-speed USB device number 121 using dummy_hcd [ 668.969120][T11991] syzkaller0: entered promiscuous mode [ 668.974647][T11991] syzkaller0: entered allmulticast mode [ 668.996179][ T5972] usb 4-1: device descriptor read/8, error -71 [ 669.267173][T12002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1566'. [ 669.286549][ T5972] usb 4-1: new low-speed USB device number 122 using dummy_hcd [ 669.316216][ T5972] usb 4-1: device descriptor read/8, error -71 [ 669.428386][ T5972] usb usb4-port1: unable to enumerate USB device [ 669.533434][ T5927] appletouch 1-1:0.85: Geyser mode initialized. [ 669.544620][ T5927] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input39 [ 670.214797][T12018] netlink: 'syz.1.1571': attribute type 2 has an invalid length. [ 670.222772][T12018] netlink: 'syz.1.1571': attribute type 11 has an invalid length. [ 670.231740][T12016] netlink: 'syz.2.1570': attribute type 2 has an invalid length. [ 670.258509][T12018] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1571'. [ 670.291006][T12019] Cannot find del_set index 4 as target [ 670.300082][T12019] netlink: 'syz.2.1570': attribute type 2 has an invalid length. [ 670.542845][T12023] 8021q: adding VLAN 0 to HW filter on device bond3 [ 670.552025][T12023] bond2: (slave bond3): Enslaving as an active interface with an up link [ 670.669522][T12028] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 670.699309][T12030] delete_channel: no stack [ 671.292618][ T5972] usb 1-1: USB disconnect, device number 100 [ 671.321884][ T5972] appletouch 1-1:0.85: input: appletouch disconnected [ 671.378324][ T5940] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 671.385590][ T5845] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 671.470490][T12026] delete_channel: no stack [ 671.525713][ T5940] usb 4-1: Using ep0 maxpacket: 8 [ 671.543053][ T5940] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 671.553871][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.569533][ T5845] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 671.578297][ T5845] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 671.587682][ T5940] usb 4-1: Product: syz [ 671.595511][ T5940] usb 4-1: Manufacturer: syz [ 671.600132][ T5940] usb 4-1: SerialNumber: syz [ 671.604909][ T5845] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 671.629007][ T5845] usb 2-1: config 220 has no interface number 2 [ 671.635666][ T5845] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 671.656734][ T5940] usb 4-1: config 0 descriptor?? [ 671.664256][ T5940] gspca_main: se401-2.14.0 probing 047d:5003 [ 671.682500][ T5845] usb 2-1: config 220 interface 0 has no altsetting 0 [ 671.702472][ T5845] usb 2-1: config 220 interface 76 has no altsetting 0 [ 671.711447][ T5845] usb 2-1: config 220 interface 1 has no altsetting 0 [ 671.723385][ T5845] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 671.735369][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.746286][ T5845] usb 2-1: Product: syz [ 671.750507][ T5845] usb 2-1: Manufacturer: syz [ 671.755135][ T5845] usb 2-1: SerialNumber: syz [ 671.882165][T12059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1583'. [ 672.069051][ T5845] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 672.083575][ T5845] uvcvideo 2-1:220.0: No valid video chain found. [ 672.093305][ T5845] usb 2-1: selecting invalid altsetting 0 [ 672.106562][ T5845] usb 2-1: selecting invalid altsetting 0 [ 672.112518][ T5845] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 672.132200][ T5845] usb 2-1: USB disconnect, device number 120 [ 672.182803][T12067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1585'. [ 672.551001][ T5940] gspca_se401: read req failed req 0x06 error -19 [ 672.564194][ T5940] usb 4-1: USB disconnect, device number 123 [ 672.573504][T12070] binder: 12069:12070 ioctl c0c89425 200000000440 returned -22 [ 672.593069][T12070] binder: 12069:12070 ioctl 5000943f 200000000680 returned -22 [ 672.751405][ T5940] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 672.805142][T12079] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1588'. [ 672.834809][T12079] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1588'. [ 672.895622][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 672.917367][T12081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1589'. [ 672.947577][ T5940] usb 4-1: string descriptor 0 read error: -22 [ 672.953863][ T5940] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 672.965573][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.014461][ T5940] usb 4-1: config 0 descriptor?? [ 673.143913][ T5940] gspca_main: se401-2.14.0 probing 047d:5003 [ 673.236478][T12088] loop5: detected capacity change from 0 to 7 [ 673.248924][T12088] loop5: [ 673.251928][T12088] loop5: partition table partially beyond EOD, truncated [ 673.392712][T12036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.417511][T12036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.496419][T12092] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 673.615652][ T797] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 673.770143][ T797] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 673.780102][ T5972] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 673.804654][ T797] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 673.835530][ T5927] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 673.860095][ T797] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 673.896786][ T797] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 673.907421][ T797] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 673.946538][ T797] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 673.986663][ T797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.997000][ T5972] usb 5-1: Using ep0 maxpacket: 8 [ 674.050376][ T5972] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.065742][ T797] usb 1-1: config 0 descriptor?? [ 674.090854][ T5972] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 674.116172][ T5927] usb 2-1: config index 0 descriptor too short (expected 100, got 36) [ 674.124922][ T5927] usb 2-1: config 0 has an invalid descriptor of length 189, skipping remainder of the config [ 674.138928][ T5927] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 674.165293][ T5927] usb 2-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 674.183547][ T5972] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 674.194209][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.211598][ T5972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.225562][ T5927] usb 2-1: config 0 descriptor?? [ 674.248459][ T5972] usb 5-1: Product: syz [ 674.256303][ T5927] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 674.267169][ T5972] usb 5-1: Manufacturer: syz [ 674.284164][ T5972] usb 5-1: SerialNumber: syz [ 674.299545][ T797] plantronics 0003:047F:FFFF.0029: reserved main item tag 0xd [ 674.314139][ T5972] usb 5-1: config 0 descriptor?? [ 674.356754][ T797] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 674.535342][ T5940] gspca_se401: read req failed req 0x06 error -19 [ 674.544034][ T5940] usb 4-1: USB disconnect, device number 124 [ 674.555285][ T5845] usb 1-1: USB disconnect, device number 101 [ 674.604326][T12092] netlink: 'syz.4.1593': attribute type 4 has an invalid length. [ 674.695588][ T5940] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 674.857475][ T5940] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.869351][ T5940] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 674.881733][ T5940] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 674.891079][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.899271][ T5940] usb 4-1: Product: syz [ 674.903645][ T5940] usb 4-1: Manufacturer: syz [ 674.908573][ T5940] usb 4-1: SerialNumber: syz [ 674.978009][ T5940] cdc_mbim 4-1:1.0: skipping garbage [ 675.126991][T12102] tipc: Enabled bearer , priority 0 [ 675.142616][T12115] fuse: Bad value for 'group_id' [ 675.150987][T12115] fuse: Bad value for 'group_id' [ 675.191233][T12117] syzkaller0: entered promiscuous mode [ 675.202405][T12117] syzkaller0: entered allmulticast mode [ 675.271840][T12102] tipc: Resetting bearer [ 675.290409][T12102] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 675.509613][T12126] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 675.902646][T12102] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 675.912247][ T5940] cdc_mbim 4-1:1.0: setting tx_max = 184 [ 675.931942][ T5940] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 675.954497][ T5940] wwan wwan0: port wwan0mbim0 attached [ 675.995165][ T5940] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 22:a9:37:c0:3d:49 [ 676.122421][T12101] tipc: Resetting bearer [ 676.156698][T12101] tipc: Disabling bearer [ 676.175298][ T5940] tipc: Node number set to 572484598 [ 676.208876][ T5940] usb 4-1: USB disconnect, device number 125 [ 676.215754][ T5940] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 676.314313][ T5940] wwan wwan0: port wwan0mbim0 disconnected [ 676.505157][ T5845] usb 2-1: USB disconnect, device number 121 [ 676.603931][ T5940] usb 5-1: USB disconnect, device number 98 [ 676.810417][ T5867] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 676.887479][T12164] syz.3.1608 (12164): /proc/12162/oom_adj is deprecated, please use /proc/12162/oom_score_adj instead. [ 677.055531][ T5845] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 677.065598][ T5940] usb 5-1: new low-speed USB device number 99 using dummy_hcd [ 677.157372][ T5942] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 677.225494][ T5940] usb 5-1: device descriptor read/64, error -71 [ 677.232735][ T5845] usb 2-1: Using ep0 maxpacket: 32 [ 677.251243][ T5845] usb 2-1: unable to get BOS descriptor or descriptor too short [ 677.272106][ T5845] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 677.295320][ T5845] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 677.315547][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.337462][ T5942] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 677.353037][ T5845] usb 2-1: Product: syz [ 677.362996][ T5845] usb 2-1: Manufacturer: syz [ 677.370753][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 677.384721][ T5845] usb 2-1: SerialNumber: syz [ 677.407438][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 677.431853][ T5942] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 677.455593][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.475518][ T5940] usb 5-1: new low-speed USB device number 100 using dummy_hcd [ 677.492273][ T5942] usb 3-1: config 0 descriptor?? [ 677.604206][T12160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.613690][T12160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.637930][ T5940] usb 5-1: device descriptor read/64, error -71 [ 677.655117][ T5845] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 677.668433][ T5845] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 677.683929][ T5845] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 677.760024][ T5845] usb 2-1: USB disconnect, device number 122 [ 677.768986][ T5940] usb usb5-port1: attempt power cycle [ 678.122587][T12188] input: syz0 as /devices/virtual/input/input41 [ 678.166564][ T5940] usb 5-1: new low-speed USB device number 101 using dummy_hcd [ 678.206460][ T5940] usb 5-1: device descriptor read/8, error -71 [ 678.668467][ T5940] usb 5-1: new low-speed USB device number 102 using dummy_hcd [ 678.846302][ T5940] usb 5-1: device descriptor read/8, error -71 [ 678.956305][ T5940] usb usb5-port1: unable to enumerate USB device [ 679.278310][T12201] xfrm1: entered allmulticast mode [ 679.395981][ T5940] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 679.485737][ T5942] usbhid 3-1:0.0: can't add hid device: -71 [ 679.493746][ T5942] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 679.503480][ T5942] usb 3-1: USB disconnect, device number 101 [ 679.586976][ T5972] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 679.635487][ T5940] usb 2-1: Using ep0 maxpacket: 16 [ 679.664759][ T5940] usb 2-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 679.674811][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.684600][ T5940] usb 2-1: Product: syz [ 679.692084][ T5940] usb 2-1: Manufacturer: syz [ 679.704678][ T5940] usb 2-1: SerialNumber: syz [ 679.723515][ T5940] usb 2-1: config 0 descriptor?? [ 679.753237][ T5940] gspca_main: spca508-2.14.0 probing 041e:4018 [ 679.768131][ T5972] usb 1-1: Using ep0 maxpacket: 16 [ 679.855772][ T5972] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 679.881153][ T5972] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 679.914632][ T5972] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 679.985950][ T5972] usb 1-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 680.040145][ T5972] usb 1-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0 [ 680.048387][ T5940] gspca_spca508: reg_read err -32 [ 680.048763][ T5972] usb 1-1: Manufacturer: syz [ 680.071659][ T5940] gspca_spca508: reg_read err -32 [ 680.086866][ T5940] gspca_spca508: reg_read err -32 [ 680.133538][ T5972] usb 1-1: config 0 descriptor?? [ 680.146235][ T5940] gspca_spca508: reg_read err -32 [ 680.332639][T12206] netlink: 'syz.3.1616': attribute type 5 has an invalid length. [ 680.370156][ T5940] gspca_spca508: reg write: error -71 [ 680.375997][ T5940] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 680.406627][ T5940] usb 2-1: USB disconnect, device number 123 [ 680.565258][ T5972] sony 0003:1345:3008.002A: unknown main item tag 0x0 [ 680.574222][ T5972] sony 0003:1345:3008.002A: unknown main item tag 0x0 [ 680.584944][ T5972] sony 0003:1345:3008.002A: unknown main item tag 0x0 [ 680.599687][ T5972] sony 0003:1345:3008.002A: unknown main item tag 0x0 [ 680.623690][ T5972] sony 0003:1345:3008.002A: unknown main item tag 0x0 [ 680.642393][ T5972] sony 0003:1345:3008.002A: unknown main item tag 0x0 [ 680.661954][ T5972] sony 0003:1345:3008.002A: report_id 51781 is invalid [ 680.694684][ T5972] sony 0003:1345:3008.002A: item 0 2 1 8 parsing failed [ 680.713044][ T5972] sony 0003:1345:3008.002A: parse failed [ 680.732489][ T5972] sony 0003:1345:3008.002A: probe with driver sony failed with error -22 [ 680.793426][T12221] kvm: MONITOR instruction emulated as NOP! [ 680.875521][ T5942] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 681.035614][ T5942] usb 3-1: Using ep0 maxpacket: 32 [ 681.044388][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.055802][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 681.074503][ T5942] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 681.165549][ T5972] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 681.178579][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.216698][ T5942] usb 3-1: config 0 descriptor?? [ 681.430053][ T5972] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 681.439658][ T5972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.454562][ T5972] usb 4-1: Product: syz [ 681.465444][ T5972] usb 4-1: Manufacturer: syz [ 681.482879][ T5972] usb 4-1: SerialNumber: syz [ 681.600352][T12232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.650473][ T5942] savu 0003:1E7D:2D5A.002B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 681.677048][T12232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.824124][ T5972] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 681.835518][ T5927] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 681.875245][ T5972] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 681.915025][ T29] usb 3-1: USB disconnect, device number 102 [ 682.051681][ T5972] usb 4-1: USB disconnect, device number 126 [ 682.778210][T12248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1625'. [ 682.787500][ T5972] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 682.947019][ T5972] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 682.957323][ T5972] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 682.969889][ T5972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 682.986598][ T5972] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 683.021087][ T5972] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 683.032977][ T797] usb 1-1: USB disconnect, device number 102 [ 683.074976][ T5972] usb 3-1: Product: syz [ 683.084902][ T5972] usb 3-1: Manufacturer: syz [ 683.099980][ T5972] usb 3-1: SerialNumber: syz [ 683.111499][ T5972] usb 3-1: config 0 descriptor?? [ 683.126912][ T5972] imon_raw 3-1:0.0: IR endpoint missing [ 683.331042][ T797] usb 3-1: USB disconnect, device number 103 [ 683.380886][T12262] netlink: 'syz.3.1629': attribute type 5 has an invalid length. [ 683.485281][T12268] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 683.776499][ T5927] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 684.050041][ T5927] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 684.065572][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 684.081206][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 684.093477][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 684.112900][ T5927] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 684.175761][ T797] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 684.202968][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.211247][ T5927] usb 5-1: Product: syz [ 684.215699][ T5927] usb 5-1: Manufacturer: syz [ 684.220676][ T5927] usb 5-1: SerialNumber: syz [ 684.249615][ T5927] usb 5-1: config 0 descriptor?? [ 684.261753][ T5927] iguanair 5-1:0.0: probe with driver iguanair failed with error -12 [ 684.359826][ T797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.381209][ T797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.436980][ T797] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 684.459203][ T797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.480942][ T5942] usb 5-1: USB disconnect, device number 104 [ 684.492287][ T797] usb 3-1: config 0 descriptor?? [ 684.585522][ T5927] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 684.747285][ T5927] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 684.759080][ T5927] usb 2-1: config 0 interface 0 has no altsetting 0 [ 684.771113][ T5927] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 684.781549][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.791353][ T5927] usb 2-1: Product: syz [ 684.797568][ T5927] usb 2-1: Manufacturer: syz [ 684.803104][ T5927] usb 2-1: SerialNumber: syz [ 684.817301][ T5927] usb 2-1: config 0 descriptor?? [ 684.828105][ T5927] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 684.841659][ T5927] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 684.854861][ T5927] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 684.867747][ T5927] usb 2-1: media controller created [ 684.894190][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 684.933920][T12279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.944282][T12279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.959513][ T5927] DVB: Unable to find symbol tda10046_attach() [ 684.969547][ T5927] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 684.998093][ T797] playstation 0003:054C:0DF2.002C: unknown main item tag 0x0 [ 685.015054][ T5927] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 685.039142][ T797] playstation 0003:054C:0DF2.002C: unknown main item tag 0x0 [ 685.057916][ T797] playstation 0003:054C:0DF2.002C: unknown main item tag 0x0 [ 685.082972][ T797] playstation 0003:054C:0DF2.002C: unknown main item tag 0x0 [ 685.124266][ T797] playstation 0003:054C:0DF2.002C: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 685.530421][T12307] netlink: 'syz.0.1641': attribute type 5 has an invalid length. [ 685.664572][ T797] playstation 0003:054C:0DF2.002C: Failed to retrieve feature with reportID 5: -71 [ 685.692489][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.698995][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.724311][ T797] playstation 0003:054C:0DF2.002C: Failed to retrieve DualSense calibration info: -71 [ 685.799017][ T797] playstation 0003:054C:0DF2.002C: Failed to get calibration data from DualSense [ 685.826727][ T797] playstation 0003:054C:0DF2.002C: Failed to create dualsense. [ 685.879562][ T797] playstation 0003:054C:0DF2.002C: probe with driver playstation failed with error -71 [ 685.942931][ T797] usb 3-1: USB disconnect, device number 104 [ 685.973808][T12313] syzkaller0: entered promiscuous mode [ 685.994638][T12313] syzkaller0: entered allmulticast mode [ 686.065796][ T5940] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 686.132634][ T5927] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 686.176034][ T5927] usb 2-1: USB disconnect, device number 124 [ 686.226256][ T5940] usb 5-1: Using ep0 maxpacket: 8 [ 686.233880][ T5940] usb 5-1: unable to get BOS descriptor or descriptor too short [ 686.244137][ T5940] usb 5-1: config 6 has an invalid interface number: 96 but max is 1 [ 686.271549][ T5940] usb 5-1: config 6 has an invalid interface number: 225 but max is 1 [ 686.285938][ T5940] usb 5-1: config 6 has no interface number 0 [ 686.316548][ T5940] usb 5-1: config 6 has no interface number 1 [ 686.328549][ T5940] usb 5-1: config 6 interface 96 has no altsetting 0 [ 686.338752][ T5940] usb 5-1: config 6 interface 225 has no altsetting 0 [ 686.415084][ T5940] usb 5-1: New USB device found, idVendor=05e3, idProduct=0503, bcdDevice=72.cc [ 686.441578][T12318] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 686.475110][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.487696][T12321] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1645'. [ 686.497378][ T5940] usb 5-1: Product: syz [ 686.501677][ T5940] usb 5-1: Manufacturer: syz [ 686.521666][ T5940] usb 5-1: SerialNumber: syz [ 686.705514][ T796] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 686.739433][T12310] netlink: 'syz.4.1640': attribute type 1 has an invalid length. [ 686.755498][ T5942] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 686.839447][T12328] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 686.885674][ T796] usb 1-1: Using ep0 maxpacket: 32 [ 686.896166][ T796] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.906633][ T796] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 686.930868][ T796] usb 1-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=a9.9b [ 686.946189][ T5942] usb 4-1: Using ep0 maxpacket: 16 [ 686.955002][ T5942] usb 4-1: unable to get BOS descriptor or descriptor too short [ 686.964544][ T5942] usb 4-1: config 8 has an invalid interface number: 208 but max is 0 [ 686.973347][ T5942] usb 4-1: config 8 has no interface number 0 [ 686.982886][ T5942] usb 4-1: config 8 interface 208 has no altsetting 0 [ 686.990516][ T796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.003054][ T5942] usb 4-1: New USB device found, idVendor=07ca, idProduct=a867, bcdDevice=24.4f [ 687.012856][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.028679][ T5942] usb 4-1: Product: syz [ 687.039149][ T5942] usb 4-1: Manufacturer: syz [ 687.069374][ T796] usb 1-1: config 0 descriptor?? [ 687.075011][ T5942] usb 4-1: SerialNumber: syz [ 687.116414][ T5845] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 687.294603][ T796] usb 1-1: string descriptor 0 read error: -71 [ 687.301083][ T5845] usb 2-1: Using ep0 maxpacket: 8 [ 687.338066][ T5942] usb 4-1: USB disconnect, device number 127 [ 687.348769][ T796] usb 1-1: USB disconnect, device number 103 [ 687.440599][ T5845] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 687.460533][ T5845] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 687.476678][ T5845] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 687.499448][ T5845] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 235 [ 687.537707][ T5845] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 687.569932][ T5845] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 687.596524][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.860305][ T5845] usb 2-1: usb_control_msg returned -32 [ 687.869531][ T5845] usbtmc 2-1:16.0: can't read capabilities [ 688.203264][T12327] usbtmc 2-1:16.0: INDICATOR_PULSE returned 0 [ 688.410147][ T5940] usb 5-1: USB disconnect, device number 105 [ 688.416278][ T5845] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 688.535777][ T5942] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 688.597309][ T5845] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 688.616484][ T5845] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 688.627406][ T5845] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 688.641962][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 688.650830][ T5845] usb 3-1: SerialNumber: syz [ 688.874331][T12359] syzkaller0: entered promiscuous mode [ 688.875485][ T5845] usb 3-1: 0:2 : does not exist [ 688.880927][T12359] syzkaller0: entered allmulticast mode [ 689.020793][ T5845] usb 3-1: USB disconnect, device number 105 [ 689.118707][ T5996] udevd[5996]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 689.240149][T12364] netlink: 'syz.0.1656': attribute type 10 has an invalid length. [ 689.268248][T12364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.290977][T12364] .`: (slave batadv0): Enslaving as an active interface with an up link [ 689.303677][T12364] netlink: 'syz.0.1656': attribute type 10 has an invalid length. [ 689.312593][T12364] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1656'. [ 689.333627][T12364] batadv0: entered promiscuous mode [ 689.345496][T12364] batadv0: entered allmulticast mode [ 689.351752][T12364] .`: (slave batadv0): Releasing backup interface [ 689.372195][T12364] bridge0: port 3(batadv0) entered blocking state [ 689.379206][T12364] bridge0: port 3(batadv0) entered disabled state [ 689.535494][ T5927] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 689.687626][ T5927] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 689.698619][ T5927] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 689.716146][ T5927] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 689.738051][ T5927] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 689.756837][ T5927] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 689.776017][ T5927] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 689.835789][ T6517] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 689.845595][ T6517] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 689.889365][ T797] usb 2-1: USB disconnect, device number 125 [ 689.901168][T12328] [U] J"—E:ÀÆ" [ 689.933725][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 689.951266][ T5927] usb 4-1: Product: syz [ 689.961869][ T5927] usb 4-1: Manufacturer: syz [ 689.986747][T12377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.001503][ T5927] cdc_wdm 4-1:1.0: skipping garbage [ 690.013304][ T5927] cdc_wdm 4-1:1.0: skipping garbage [ 690.021096][T12377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.031535][ T5927] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 690.041143][ T5927] cdc_wdm 4-1:1.0: Unknown control protocol [ 690.295785][ T797] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 690.455968][ T797] usb 2-1: Using ep0 maxpacket: 32 [ 690.464683][ T797] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 690.480384][ T797] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 690.490425][ T797] usb 2-1: config 0 interface 0 has no altsetting 0 [ 690.504127][ T797] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 690.514513][ T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.526802][ T797] usb 2-1: Product: syz [ 690.531169][ T797] usb 2-1: Manufacturer: syz [ 690.536152][ T797] usb 2-1: SerialNumber: syz [ 690.545105][ T797] usb 2-1: config 0 descriptor?? [ 690.715673][ T5942] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 690.754111][ T797] gs_usb 2-1:0.0: Couldn't send data format (err=-71) [ 690.762179][ T797] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 690.780365][ T797] usb 2-1: USB disconnect, device number 126 [ 690.867337][ T5942] usb 1-1: Using ep0 maxpacket: 16 [ 690.883845][ T5942] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 690.911093][ T5942] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 690.914828][T12393] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1665'. [ 690.932913][ T5942] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 690.945529][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.962136][ T5942] usb 1-1: Product: syz [ 690.971096][ T5942] usb 1-1: Manufacturer: syz [ 690.980596][ T5942] usb 1-1: SerialNumber: syz [ 691.119272][T12399] syzkaller0: entered promiscuous mode [ 691.133270][T12399] syzkaller0: entered allmulticast mode [ 691.199222][ T5942] usb 1-1: 0:2 : does not exist [ 691.216147][ T5942] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 691.296194][ T5942] usb 1-1: USB disconnect, device number 105 [ 691.361128][ T5996] udevd[5996]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 691.447082][T12404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1668'. [ 691.676039][ T5845] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 691.735501][ T5942] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 691.825676][ T5845] usb 3-1: Using ep0 maxpacket: 32 [ 691.837502][ T5845] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 691.849558][ T5845] usb 3-1: config 0 has no interface number 0 [ 691.859592][ T5845] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 691.876703][ T5845] usb 3-1: config 0 interface 89 has no altsetting 0 [ 691.890422][ T5845] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 691.900948][ T5942] usb 2-1: Using ep0 maxpacket: 8 [ 691.906623][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.916703][ T5845] usb 3-1: Product: syz [ 691.921330][ T5845] usb 3-1: Manufacturer: syz [ 691.926262][ T5942] usb 2-1: unable to get BOS descriptor or descriptor too short [ 691.934142][ T5845] usb 3-1: SerialNumber: syz [ 691.939943][ T5942] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 691.953242][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 691.965681][ T5845] usb 3-1: config 0 descriptor?? [ 691.989901][ T5845] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 692.004908][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 692.015801][ T5845] em28xx 3-1:0.89: Video interface 89 found: [ 692.022003][ T5942] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 692.032405][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 692.043255][ T5942] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x2D, changing to 0xD [ 692.055612][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 29797, setting to 1024 [ 692.067398][ T5942] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1024 [ 692.087114][ T5942] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 692.096613][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.105200][ T5942] usb 2-1: Product: syz [ 692.110529][ T5942] usb 2-1: Manufacturer: syz [ 692.115209][ T5942] usb 2-1: SerialNumber: syz [ 692.131647][ T5942] usb 2-1: config 0 descriptor?? [ 692.138678][T12404] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 692.150791][T12404] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 692.167597][ T5942] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 692.319452][T12415] syzkaller0: entered promiscuous mode [ 692.325169][T12415] syzkaller0: entered allmulticast mode [ 692.351751][ T5940] usb 4-1: USB disconnect, device number 2 [ 692.353695][T12415] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 692.642229][T12428] vivid-002: disconnect [ 692.649567][T12427] vivid-002: reconnect [ 692.685220][ T5845] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 692.900704][T12435] netlink: 'syz.3.1676': attribute type 4 has an invalid length. [ 692.933310][T12435] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1676'. [ 692.988697][T12435] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 693.260142][ T30] audit: type=1326 audit(1773512509.260:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12440 comm="syz.4.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295fb9c799 code=0x7ffc0000 [ 693.323845][ T30] audit: type=1326 audit(1773512509.260:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12440 comm="syz.4.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295fb9c799 code=0x7ffc0000 [ 693.367456][ T797] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 693.394945][ T30] audit: type=1326 audit(1773512509.300:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12440 comm="syz.4.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f295fb9c799 code=0x7ffc0000 [ 693.423905][T12446] syzkaller0: entered promiscuous mode [ 693.429735][T12446] syzkaller0: entered allmulticast mode [ 693.473629][ T30] audit: type=1326 audit(1773512509.300:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12440 comm="syz.4.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295fb9c799 code=0x7ffc0000 [ 693.516714][ T30] audit: type=1326 audit(1773512509.300:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12440 comm="syz.4.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295fb9c799 code=0x7ffc0000 [ 693.546156][ T797] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 693.566176][ T797] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.576666][ T797] usb 4-1: config 0 has no interfaces? [ 693.583974][ T30] audit: type=1326 audit(1773512509.310:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12440 comm="syz.4.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f295fb9c799 code=0x7ffc0000 [ 693.620175][ T797] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.630471][ T797] usb 4-1: config 0 has no interfaces? [ 693.642983][ T797] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.653516][ T30] audit: type=1326 audit(1773512509.310:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12440 comm="syz.4.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295fb9c799 code=0x7ffc0000 [ 693.685460][ T797] usb 4-1: config 0 has no interfaces? [ 693.705536][ T797] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.727775][ T30] audit: type=1326 audit(1773512509.310:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12440 comm="syz.4.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295fb9c799 code=0x7ffc0000 [ 693.755460][ T797] usb 4-1: config 0 has no interfaces? [ 693.788630][ T797] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.800919][ T797] usb 4-1: config 0 has no interfaces? [ 693.808722][ T30] audit: type=1326 audit(1773512509.310:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12440 comm="syz.4.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f295fb9c799 code=0x7ffc0000 [ 693.852334][ T797] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.864667][ T797] usb 4-1: config 0 has no interfaces? [ 693.877301][ T30] audit: type=1326 audit(1773512509.310:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12440 comm="syz.4.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295fb9c799 code=0x7ffc0000 [ 693.922991][ T797] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.936722][ T797] usb 4-1: config 0 has no interfaces? [ 693.949257][ T797] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.969604][ T797] usb 4-1: config 0 has no interfaces? [ 693.983954][ T797] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 694.004435][ T797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.021428][ T797] usb 4-1: config 0 descriptor?? [ 694.115536][ T5940] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 694.267924][T12435] m1Ie5nè‹Ò: entered promiscuous mode [ 694.280141][ T5940] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 694.300661][ T5940] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 694.324965][ T5940] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 694.354287][ T5940] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 694.358376][T12436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.377219][ T5940] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 694.408432][ T5940] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 694.418262][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 694.447103][T12436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.458172][ T5940] usb 5-1: Product: syz [ 694.462558][ T5940] usb 5-1: Manufacturer: syz [ 694.482301][ T5940] cdc_wdm 5-1:1.0: skipping garbage [ 694.488226][ T5940] cdc_wdm 5-1:1.0: skipping garbage [ 694.496739][ T5940] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 694.502966][ T5940] cdc_wdm 5-1:1.0: Unknown control protocol [ 694.521153][ T797] usb 4-1: USB disconnect, device number 3 [ 694.982545][ T5845] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 694.993129][ T5845] em28xx 3-1:0.89: board has no eeprom [ 695.055705][ T5845] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 695.067980][ T5845] em28xx 3-1:0.89: analog set to bulk mode. [ 695.074236][ T5940] em28xx 3-1:0.89: Registering V4L2 extension [ 695.236300][ T5940] em28xx 3-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 695.285880][ T5940] em28xx 3-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 695.305937][ T5940] em28xx 3-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 695.330862][ T5940] em28xx 3-1:0.89: reading from i2c device at 0x40 failed (error=-5) [ 695.356085][ T5927] usb 3-1: USB disconnect, device number 106 [ 695.363456][ T5927] em28xx 3-1:0.89: Disconnecting em28xx [ 695.363967][ T5940] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 695.402528][ T797] usb 5-1: USB disconnect, device number 106 [ 695.413025][ T5940] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 695.440590][ T5940] em28xx 3-1:0.89: No AC97 audio processor [ 695.560658][ T5940] usb 3-1: Decoder not found [ 695.571421][ T5940] em28xx 3-1:0.89: failed to create media graph [ 695.587150][ T5940] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 695.608032][ T5940] em28xx 3-1:0.89: Registering snapshot button... [ 695.615139][T12467] ================================================================== [ 695.623241][T12467] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 695.630743][T12467] Read of size 8 at addr ffff88807df00748 by task v4l_id/12467 [ 695.638267][T12467] [ 695.640594][T12467] CPU: 0 UID: 0 PID: 12467 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 695.640622][T12467] Tainted: [L]=SOFTLOCKUP [ 695.640627][T12467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 695.640635][T12467] Call Trace: [ 695.640643][T12467] [ 695.640650][T12467] dump_stack_lvl+0xe8/0x150 [ 695.640673][T12467] print_report+0xba/0x230 [ 695.640701][T12467] ? v4l2_fh_open+0xac/0x420 [ 695.640717][T12467] kasan_report+0x117/0x150 [ 695.640734][T12467] ? v4l2_fh_open+0xac/0x420 [ 695.640750][T12467] v4l2_fh_open+0xac/0x420 [ 695.640764][T12467] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 695.640782][T12467] em28xx_v4l2_open+0x157/0x9a0 [ 695.640855][T12467] ? do_raw_spin_lock+0x12b/0x2f0 [ 695.640879][T12467] v4l2_open+0x1bf/0x3a0 [ 695.640920][T12467] chrdev_open+0x4cd/0x5e0 [ 695.640941][T12467] ? __pfx_chrdev_open+0x10/0x10 [ 695.640954][T12467] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 695.640973][T12467] ? __pfx_chrdev_open+0x10/0x10 [ 695.640986][T12467] do_dentry_open+0x785/0x14e0 [ 695.641005][T12467] vfs_open+0x3b/0x340 [ 695.641019][T12467] ? path_openat+0x2df0/0x3860 [ 695.641033][T12467] path_openat+0x2e08/0x3860 [ 695.641049][T12467] ? __pfx_stack_trace_save+0x10/0x10 [ 695.641062][T12467] ? stack_depot_save_flags+0x33/0x810 [ 695.641111][T12467] ? __pfx_path_openat+0x10/0x10 [ 695.641122][T12467] ? __x64_sys_openat+0x138/0x170 [ 695.641137][T12467] ? do_syscall_64+0x14d/0xf80 [ 695.641150][T12467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.641165][T12467] ? __lock_acquire+0x6b5/0x2cf0 [ 695.641188][T12467] do_file_open+0x23e/0x4a0 [ 695.641202][T12467] ? __pfx_do_file_open+0x10/0x10 [ 695.641220][T12467] ? _raw_spin_unlock+0x28/0x50 [ 695.641259][T12467] ? alloc_fd+0x64b/0x6c0 [ 695.641277][T12467] do_sys_openat2+0x113/0x200 [ 695.641294][T12467] ? __pfx_do_sys_openat2+0x10/0x10 [ 695.641309][T12467] ? exc_page_fault+0x6a/0xc0 [ 695.641322][T12467] ? do_user_addr_fault+0xc6f/0x1340 [ 695.641339][T12467] __x64_sys_openat+0x138/0x170 [ 695.641356][T12467] do_syscall_64+0x14d/0xf80 [ 695.641368][T12467] ? trace_irq_disable+0x3b/0x150 [ 695.641385][T12467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.641397][T12467] ? clear_bhb_loop+0x40/0x90 [ 695.641410][T12467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.641422][T12467] RIP: 0033:0x7fbb754a7407 [ 695.641434][T12467] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 695.641446][T12467] RSP: 002b:00007fffc8388a70 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 695.641460][T12467] RAX: ffffffffffffffda RBX: 00007fbb75bab880 RCX: 00007fbb754a7407 [ 695.641469][T12467] RDX: 0000000000000000 RSI: 00007fffc8388f1c RDI: ffffffffffffff9c [ 695.641478][T12467] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 695.641485][T12467] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 695.641493][T12467] R13: 00007fffc8388cc0 R14: 00007fbb75d12000 R15: 000055c4f56db4d8 [ 695.641506][T12467] [ 695.641511][T12467] [ 695.941755][T12467] Allocated by task 5940: [ 695.946067][T12467] kasan_save_track+0x3e/0x80 [ 695.950732][T12467] __kasan_kmalloc+0x93/0xb0 [ 695.955305][T12467] __kmalloc_cache_noprof+0x31c/0x660 [ 695.960660][T12467] em28xx_v4l2_init+0x10b/0x2e70 [ 695.965666][T12467] em28xx_init_extension+0x120/0x1c0 [ 695.970971][T12467] process_scheduled_works+0xb6e/0x18c0 [ 695.976505][T12467] worker_thread+0xa53/0xfc0 [ 695.981084][T12467] kthread+0x388/0x470 [ 695.985164][T12467] ret_from_fork+0x51e/0xb90 [ 695.989748][T12467] ret_from_fork_asm+0x1a/0x30 [ 695.994515][T12467] [ 695.996823][T12467] Freed by task 5940: [ 696.000780][T12467] kasan_save_track+0x3e/0x80 [ 696.005439][T12467] kasan_save_free_info+0x46/0x50 [ 696.010453][T12467] __kasan_slab_free+0x5c/0x80 [ 696.015199][T12467] kfree+0x1c1/0x630 [ 696.019072][T12467] em28xx_v4l2_init+0x1683/0x2e70 [ 696.024112][T12467] em28xx_init_extension+0x120/0x1c0 [ 696.029553][T12467] process_scheduled_works+0xb6e/0x18c0 [ 696.035083][T12467] worker_thread+0xa53/0xfc0 [ 696.039750][T12467] kthread+0x388/0x470 [ 696.043799][T12467] ret_from_fork+0x51e/0xb90 [ 696.048375][T12467] ret_from_fork_asm+0x1a/0x30 [ 696.053152][T12467] [ 696.055462][T12467] The buggy address belongs to the object at ffff88807df00000 [ 696.055462][T12467] which belongs to the cache kmalloc-8k of size 8192 [ 696.069503][T12467] The buggy address is located 1864 bytes inside of [ 696.069503][T12467] freed 8192-byte region [ffff88807df00000, ffff88807df02000) [ 696.083819][T12467] [ 696.086142][T12467] The buggy address belongs to the physical page: [ 696.092799][T12467] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7df00 [ 696.101551][T12467] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 696.110116][T12467] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 696.117651][T12467] page_type: f5(slab) [ 696.121613][T12467] raw: 00fff00000000040 ffff88813fea6280 dead000000000100 dead000000000122 [ 696.130268][T12467] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 696.138831][T12467] head: 00fff00000000040 ffff88813fea6280 dead000000000100 dead000000000122 [ 696.147483][T12467] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 696.156150][T12467] head: 00fff00000000003 ffffea0001f7c001 00000000ffffffff 00000000ffffffff [ 696.164899][T12467] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 696.173562][T12467] page dumped because: kasan: bad access detected [ 696.180072][T12467] page_owner tracks the page as allocated [ 696.185771][T12467] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10562, tgid 10561 (syz.2.1170), ts 588965186977, free_ts 588776353607 [ 696.207308][T12467] post_alloc_hook+0x231/0x280 [ 696.212095][T12467] get_page_from_freelist+0x24dc/0x2580 [ 696.217631][T12467] __alloc_frozen_pages_noprof+0x18d/0x380 [ 696.223424][T12467] allocate_slab+0x77/0x660 [ 696.227913][T12467] refill_objects+0x331/0x3c0 [ 696.232571][T12467] __pcs_replace_empty_main+0x2e6/0x730 [ 696.238101][T12467] __kmalloc_noprof+0x474/0x760 [ 696.242934][T12467] ops_init+0x7b/0x5c0 [ 696.247065][T12467] setup_net+0x118/0x340 [ 696.251294][T12467] copy_net_ns+0x50e/0x730 [ 696.255782][T12467] create_new_namespaces+0x3e7/0x6a0 [ 696.261073][T12467] unshare_nsproxy_namespaces+0x11a/0x160 [ 696.266778][T12467] ksys_unshare+0x51d/0x930 [ 696.271298][T12467] __x64_sys_unshare+0x38/0x50 [ 696.276047][T12467] do_syscall_64+0x14d/0xf80 [ 696.280621][T12467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.286496][T12467] page last free pid 5972 tgid 5972 stack trace: [ 696.292808][T12467] __free_frozen_pages+0xc2b/0xdb0 [ 696.297905][T12467] __slab_free+0x263/0x2b0 [ 696.302304][T12467] qlist_free_all+0x97/0x100 [ 696.306875][T12467] kasan_quarantine_reduce+0x148/0x160 [ 696.312325][T12467] __kasan_slab_alloc+0x22/0x80 [ 696.317163][T12467] __kmalloc_cache_noprof+0x2ba/0x660 [ 696.322534][T12467] usb_control_msg+0x73/0x3e0 [ 696.327297][T12467] hub_ext_port_status+0x116/0x820 [ 696.332471][T12467] hub_port_debounce+0x220/0x330 [ 696.337404][T12467] hub_event+0x1d4e/0x4f30 [ 696.341806][T12467] process_scheduled_works+0xb6e/0x18c0 [ 696.347335][T12467] worker_thread+0xa53/0xfc0 [ 696.351906][T12467] kthread+0x388/0x470 [ 696.356055][T12467] ret_from_fork+0x51e/0xb90 [ 696.360631][T12467] ret_from_fork_asm+0x1a/0x30 [ 696.365385][T12467] [ 696.367693][T12467] Memory state around the buggy address: [ 696.373302][T12467] ffff88807df00600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 696.381428][T12467] ffff88807df00680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 696.389470][T12467] >ffff88807df00700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 696.397591][T12467] ^ [ 696.404070][T12467] ffff88807df00780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 696.412205][T12467] ffff88807df00800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 696.420251][T12467] ================================================================== [ 696.434989][ T5940] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input43 [ 696.457004][ T5940] em28xx 3-1:0.89: Remote control support is not available for this card. [ 696.466125][T12467] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 696.473350][T12467] CPU: 0 UID: 0 PID: 12467 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 696.483932][T12467] Tainted: [L]=SOFTLOCKUP [ 696.488677][T12467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 696.498724][T12467] Call Trace: [ 696.501995][T12467] [ 696.504916][T12467] vpanic+0x56c/0xa60 [ 696.508893][T12467] ? __pfx_vpanic+0x10/0x10 [ 696.513385][T12467] panic+0xc5/0xd0 [ 696.517101][T12467] ? __pfx_panic+0x10/0x10 [ 696.521521][T12467] ? preempt_schedule_thunk+0x16/0x30 [ 696.526972][T12467] ? preempt_schedule_thunk+0x16/0x30 [ 696.532328][T12467] ? v4l2_fh_open+0xac/0x420 [ 696.536902][T12467] check_panic_on_warn+0x89/0xb0 [ 696.541876][T12467] ? v4l2_fh_open+0xac/0x420 [ 696.546647][T12467] end_report+0x73/0x180 [ 696.550889][T12467] ? v4l2_fh_open+0xac/0x420 [ 696.555557][T12467] kasan_report+0x128/0x150 [ 696.560154][T12467] ? v4l2_fh_open+0xac/0x420 [ 696.564749][T12467] v4l2_fh_open+0xac/0x420 [ 696.569159][T12467] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 696.575740][T12467] em28xx_v4l2_open+0x157/0x9a0 [ 696.580577][T12467] ? do_raw_spin_lock+0x12b/0x2f0 [ 696.585598][T12467] v4l2_open+0x1bf/0x3a0 [ 696.589849][T12467] chrdev_open+0x4cd/0x5e0 [ 696.594366][T12467] ? __pfx_chrdev_open+0x10/0x10 [ 696.599291][T12467] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 696.605603][T12467] ? __pfx_chrdev_open+0x10/0x10 [ 696.610625][T12467] do_dentry_open+0x785/0x14e0 [ 696.615383][T12467] vfs_open+0x3b/0x340 [ 696.619447][T12467] ? path_openat+0x2df0/0x3860 [ 696.624195][T12467] path_openat+0x2e08/0x3860 [ 696.628770][T12467] ? __pfx_stack_trace_save+0x10/0x10 [ 696.634131][T12467] ? stack_depot_save_flags+0x33/0x810 [ 696.639586][T12467] ? __pfx_path_openat+0x10/0x10 [ 696.644507][T12467] ? __x64_sys_openat+0x138/0x170 [ 696.649524][T12467] ? do_syscall_64+0x14d/0xf80 [ 696.654274][T12467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.660327][T12467] ? __lock_acquire+0x6b5/0x2cf0 [ 696.665249][T12467] do_file_open+0x23e/0x4a0 [ 696.669736][T12467] ? __pfx_do_file_open+0x10/0x10 [ 696.674748][T12467] ? _raw_spin_unlock+0x28/0x50 [ 696.679587][T12467] ? alloc_fd+0x64b/0x6c0 [ 696.683915][T12467] do_sys_openat2+0x113/0x200 [ 696.688589][T12467] ? __pfx_do_sys_openat2+0x10/0x10 [ 696.693777][T12467] ? exc_page_fault+0x6a/0xc0 [ 696.698455][T12467] ? do_user_addr_fault+0xc6f/0x1340 [ 696.703723][T12467] __x64_sys_openat+0x138/0x170 [ 696.708560][T12467] do_syscall_64+0x14d/0xf80 [ 696.713140][T12467] ? trace_irq_disable+0x3b/0x150 [ 696.718234][T12467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.724286][T12467] ? clear_bhb_loop+0x40/0x90 [ 696.728952][T12467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.734831][T12467] RIP: 0033:0x7fbb754a7407 [ 696.739230][T12467] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 696.759004][T12467] RSP: 002b:00007fffc8388a70 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 696.767405][T12467] RAX: ffffffffffffffda RBX: 00007fbb75bab880 RCX: 00007fbb754a7407 [ 696.775420][T12467] RDX: 0000000000000000 RSI: 00007fffc8388f1c RDI: ffffffffffffff9c [ 696.783395][T12467] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 696.791356][T12467] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 696.799309][T12467] R13: 00007fffc8388cc0 R14: 00007fbb75d12000 R15: 000055c4f56db4d8 [ 696.807295][T12467] [ 696.810573][T12467] Kernel Offset: disabled [ 696.814883][T12467] Rebooting in 86400 seconds..