last executing test programs: 28.595516769s ago: executing program 2 (id=739): write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x9, 0xfffffe0000000001, 0x892, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000140)='gretap0\x00') r2 = memfd_create(0x0, 0x7) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x88, 0x2c, 0xe27, 0xfffffff9, 0x0, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {}, {0x5, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x58, 0x2, [@TCA_CGROUP_ACT={0x54, 0x1, [@m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0xfffffa3c, 0x3f, 0x4, 0x80000001}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x3f}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}}, 0x20040054) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000003, 0x11, r2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1, 0x13, r7, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_delrule={0x30, 0x21, 0x1, 0x70bd2c, 0x25dfdbfb, {0xa, 0x20, 0x0, 0x4, 0xfe, 0x0, 0x0, 0x0, 0xc}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x30}, 0x1, 0x0, 0x0, 0x851}, 0x20048000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000004000070127bd7000f6dbdf25037c00000400c2800c00018008000300", @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 26.13854056s ago: executing program 2 (id=743): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,', @ANYRESDEC=0x0]) syz_clone3(&(0x7f0000000380)={0x200, &(0x7f0000000100), &(0x7f0000000140), 0x0, {0x19}, &(0x7f0000000280)=""/215, 0xd7, &(0x7f00000001c0)=""/26, &(0x7f0000000200)=[0x0, 0x0], 0x2}, 0x58) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000400)={'\x00', 0x8, 0x3, 0x0, 0x4b, 0xd}) r3 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x8000000000000001, &(0x7f0000000480)=""/211) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x2e, 0x9, 0x70bd25, 0x25dfdbfd, {0x5}, [@typed={0xc, 0xa, 0x0, 0x0, @u64=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r6) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x5a0, 0x350, 0x280, 0x1b0, 0x280, 0x560, 0x560, 0x560, 0x560, 0x560, 0x560, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0xf8, 0x120, 0x0, {0x7a00000010000000}, [@common=@inet=@multiport={{0x50}}]}, @HL={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2a}, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x5, 0x0, 0x52}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0xfc}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) 20.750393702s ago: executing program 2 (id=753): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0x6, 0xe1, 0x0, 0x6, 0xd9, 0x40, 0x1, 0xfb, 0x8, 0xc, 0xff, 0x0, 0x40, 0x64, 0x5}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x2000000000000000, 0x20, 0x3, 0x5, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x4, 0x8, 0x0, 0x73, 0x0, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20004) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0xa) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000001500)={0x0, 0x0, 0x80}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x404c840) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x10) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000200)={0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) 19.389767583s ago: executing program 4 (id=756): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) syz_open_dev$loop(&(0x7f0000000540), 0x200000b1, 0x8a681) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x230403, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4a, 0xa4003) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r0, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x4006001) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r6, &(0x7f0000000080)=""/1, 0x1) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) sendfile(r6, r6, 0x0, 0x7ff) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_io_uring_setup(0xf01, &(0x7f0000000080)={0x0, 0x2, 0xc00, 0x1, 0x442f6}, &(0x7f0000000100), &(0x7f00000002c0), &(0x7f00000001c0)) socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffff", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0xa, 0x2) 18.844133317s ago: executing program 4 (id=757): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x101, 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x9b, 0x1, 0x0, 0x5f, 0x3, 0x20, 0xa6, 0x2, 0x5, 0x9, 0x3}, {0xfffffff9, 0xfffa, 0x0, 0x0, 0x0, 0x2, 0xce, 0x0, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0x7e, 0x4, 0x1000000000000004}], 0xcc78}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x101, 0x2, 0x0, 0x80], 0x8080000, 0x4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) lseek(0xffffffffffffffff, 0xfffd, 0x3) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="03010000ac0fce405d0501904431000000010902120009000080040904"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x80}, [@IFLA_MASTER={0x8, 0x3}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}]}, 0x40}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="b4000000", @ANYRES32=r6, @ANYRESDEC], 0xb4}, 0x1, 0x0, 0x0, 0x4090}, 0x0) 17.862688636s ago: executing program 0 (id=759): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="050000000c0000000800000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) capset(0x0, &(0x7f0000001080)={0x200000, 0x200004, 0x0, 0x0, 0x0, 0x5}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000000c0)={0x3, 'vlan0\x00', {0xc21}, 0x1}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000001300200026bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="102908e80f0b71360000000000000040d0850084e2000008001e00010000000800280026b209000000000000007468305f766972745f7769666900140014006d"], 0x58}, 0x1, 0x0, 0x0, 0x40045}, 0x4000800) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000002000/0x1000)=nil, 0x1000}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) r5 = syz_kvm_add_vcpu$x86(0x0, 0x0) ioctl$KVM_GET_XSAVE2(r5, 0x9000aecf, &(0x7f0000227000/0x3000)=nil) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0x24, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0d, &(0x7f0000000040)) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x2) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f00002f8000/0x1000)=nil) syz_open_pts(0xffffffffffffffff, 0x101000) ptrace(0x10, r7) ptrace$poke(0x4, r7, &(0x7f0000001040), 0x282d) capget(&(0x7f00000001c0)={0x20080522, r7}, &(0x7f0000000340)={0x9, 0x5, 0xec0, 0x3, 0x8, 0x9}) read$char_usb(r6, &(0x7f0000000240)=""/63, 0x3f) 17.264220113s ago: executing program 2 (id=761): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffff001, 0xff, 0xffff, 0xffffffff}, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000240)=[{0xe, 0x81, 0x0, 0xfd, @tick=0x1, {0x10, 0x49}, {0xe}, @result={0x6, 0x5}}], 0x1c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x4, 0x7fffffff, 0x36, 0x0, 0x11}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=ANY=[@ANYBLOB="5401000010000100000000000000000000000000000000000000ffff7f000001ac1414aa0000000000000000000000000000000000040000000000005c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) r8 = socket$key(0xf, 0x3, 0x2) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0x4010011, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r9, 0x0) sendmsg$key(r8, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 16.272023847s ago: executing program 1 (id=763): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x2000, 0x0, 0x71f43, 0x3424f}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d848}, 0x8080) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4048aecb, &(0x7f0000000180)={0x4, 0x0, [{0x0, 0x0, 0x0, 0x6}, {0x0, 0x6}, {0x5e2796afef1a2f31, 0xffffffff, 0x0, 0x9, 0x1, 0x80000001, 0x8}, {0x80000001, 0xffffffff, 0x7, 0x8, 0x5, 0x110, 0x3}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$inet(0x2, 0x3, 0x1) setsockopt$sock_int(r9, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000600)={'veth1_virt_wifi\x00', 0x0}) sendmsg$inet(r9, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)}], 0x1, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @empty, @broadcast}}}], 0x20}, 0x24008004) r12 = socket$inet6(0xa, 0x5, 0x84) setsockopt$sock_linger(r12, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) sendto$inet6(r12, 0x0, 0x0, 0x40, &(0x7f00000000c0)={0xa, 0x4e23, 0x5, @remote, 0x1}, 0x1c) close(r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001040)={0xffffffffffffffff}) openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) ioctl$SIOCSIFHWADDR(r13, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="1c1200"}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r8, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000485}, 0x4000) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x112, &(0x7f0000001600)={@local, @link_local, @void, {@ipv6={0x86dd, @udp={0x7, 0x6, "880404", 0xdc, 0x11, 0xfe, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[@dstopts={0x2c, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0x2b}, @jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x8}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}}, @calipso={0x7, 0x8, {0x3, 0x0, 0x2, 0x6}}]}, @routing={0x1d, 0x0, 0x0, 0x6}, @fragment={0x8, 0x0, 0x8, 0x0, 0x0, 0x4, 0x67}, @routing={0x2c, 0x0, 0x1, 0x4}, @dstopts={0x3b, 0x4, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast2}}, @ra={0x5, 0x2, 0x5}, @jumbo={0xc2, 0x4, 0xdb}]}], {0x4e26, 0x4e23, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x1, "7dcf5f8bd6d71b31e109af96e8aa224f0184a9f8f8082df24b670c7795b3a006", "4d17ad0ddebf0dc568eb8729de15b655", {"8b10ac73974b9cc7b0e4c913d5a78697", "39652ea71bce00db3dc8cf8a607b89cc"}}}}}}}}, 0x0) sendmsg$NFT_BATCH(r15, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000068000000090a01040000000000000000010000000000010073797a31000000000900020073797a32000000000900010073797a3000000000570005400000003a2c0011800b00010074617267657400001c0002800400030008000240000000000000024000000002140000001000010000"], 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x24040000) 15.770463277s ago: executing program 3 (id=764): sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000111401000000000000000000050003000000007676571a7f058b"], 0x20}}, 0x801) syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x0, 0x100000000000006, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f0000000040)={0x1, 0x0, 0x7f, 0x7}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001880)={'bond0\x00', 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22102, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r7, 0xc008aec1, &(0x7f0000000500)={0xa, 0x0, [{0x0, 0x4, 0x4, 0x7, 0x9, 0x7fff, 0x9}, {0xc0000001, 0x0, 0x0, 0x900, 0x3ff, 0xff}, {0x1, 0xa0bd, 0x1, 0x1, 0x3, 0xffffffff}, {0x80000001, 0x3, 0x1, 0x1, 0x6, 0xa0, 0x7}, {0x1, 0x4, 0x0, 0x6, 0x5, 0x4, 0x605}, {0x40000001, 0x12, 0x7, 0x5566bb86, 0x3, 0x9, 0x101}, {0x1, 0xfffff85a, 0x1, 0xff, 0x1000002, 0x5, 0x3}, {0xc0000001, 0x7, 0x0, 0x0, 0x4, 0xc, 0x9}, {0x4, 0x3, 0x4, 0x5800, 0x81, 0x6, 0x9}, {0x80000008, 0x6, 0x1, 0x200, 0xfffffff9, 0xc, 0x40}]}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r6, @ANYBLOB="0200de1d"], 0x1c}}, 0x24024080) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000380)={0x7, 0x7, 0x7e, 0x3, 0x9, "9b6ec8186d29a10e"}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80942, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x7, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) 15.53765559s ago: executing program 1 (id=765): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x2, @local, 0x81}}, 0x6, 0xe, 0x9, 0x8, 0x20, 0x6, 0x81}, 0x9c) connect$unix(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'vlan1\x00', 0x4}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f0000000600)={0x2, 'pimreg\x00', 0x1}, 0x18) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000180), &(0x7f0000000200)=[0x0], &(0x7f0000000240), &(0x7f00000002c0)=[0x0], 0x0, 0x1, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000140)={r8}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000200)="ac0c775772090000000000000061266339ab5c3d2d74627245ba39e20ad20ca53e83e21f5bc3b802a7cbb25c5cc253bede2a7c57f070af1db90d9a601c241860e0222d5f1a00ef2028b41859cd12c43095ed5949c53e3b2fad7fdd1378d7df1efe3dc710d6d279ebc6976dfa1435d22c4177f0831cb5308cd3766dcc1578f94fca9574a7be424a34e1c4b33a2d6cd263996095294f1b99d2e57120e134b41a82c1d3038f83e8ac8cbff754383ec7a50ce1bd519af6b9da20", 0xfea0}) close(r2) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000000)={'IDLETIMER\x00'}, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x80503d0a, &(0x7f0000000200)={{0xa4}, {0x0, 0x80000001}, 0x1322, 0x1}) ioctl$TCXONC(r0, 0x540a, 0x2) 14.616006008s ago: executing program 4 (id=766): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000001140), &(0x7f0000001180)=0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fd180000", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fbdbdf254f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000003100000058007a801c000200579bcf398bbbd75d32aa6077a886a74df3d0fcf02f399c3a1c00020024cf4713299967bd15bf44cad1f4d266b29e2a4135a412b21c0002007282cdb224050171ea757aea781d4160e9223cc0312d38d668007a801c0002005f3b5d542091777612684837dbc0ec47ea67acb692453dd20c0003005bd58c80a1143827140002009811fc13340000000000005ab959470014000100204183f74d05c885801d03a2488d3fd41400020032c5877eef25cfd5a4dd14ad077490051c007a800c000300b27375be034408920c00030000e2000000000000"], 0x104}}, 0x4) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c800020000000000000020010480"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x30}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=@newtfilter={0x790, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x4, 0x10}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}, @filter_kind_options=@f_fw={{0x7}, {0x754, 0x2, [@TCA_FW_ACT={0x670, 0x4, [@m_police={0x638, 0x8, 0x0, 0x0, {{0xb}, {0x4}, {0x60b, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x34, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0xb, 0x6, "093d4b88e14ab5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x8d37}, @TCA_FW_ACT={0xc0, 0x4, [@m_connmark={0x64, 0x1d, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xffff0000, 0xc24ba5996f978a81, 0x10000, 0x3}, 0x5}}]}, {0x17, 0x6, "bda5d5437d3d49903c5fe5229718e0677fa6fb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0x58, 0x8, 0x0, 0x0, {{0xd}, {0x4}, {0x26, 0x6, "82fdc54105578b90de160f075541cbf91b45474a4bf836c9297311734d725b2d77c7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xf, 0xffe0}}, @TCA_FW_MASK={0x8, 0x5, 0x100}, @TCA_FW_MASK={0x8, 0x5, 0x6}]}}]}, 0x790}, 0x1, 0x4000000}, 0x0) 14.236768735s ago: executing program 0 (id=767): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r0, 0x1f, 0x0, 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@fallback=r0, r1, 0x0, 0x2010, 0x0, @value=r0, @void, @void, @void, r2}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 12.170424337s ago: executing program 3 (id=768): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000a80)={{0x5, 0x6, 0x404, 0x7, 'syz1\x00', 0x81}, 0x1, [0x6, 0xfffffffffffffffa, 0x20000000095, 0x7f, 0xffffffff, 0xfff, 0x1, 0xf, 0x1, 0x3, 0xfffffffffffffffd, 0x64, 0xfff, 0x100000001, 0x1, 0xc8, 0x51, 0xa5, 0x0, 0xb6, 0x8000000000000000, 0x8, 0x7, 0x4, 0x6, 0xff, 0x1, 0x4f51, 0x3, 0x37c7, 0xc, 0xbb33, 0x0, 0x63, 0x4, 0x4, 0x8, 0xffffffffffff7fff, 0x6, 0xfffffffffffffff7, 0x8, 0x0, 0x8, 0x401, 0x3, 0xc1bd, 0xffffffff, 0x8000000000000001, 0x800003, 0x0, 0x7, 0x72, 0x9, 0x2, 0x6a44d0ea, 0xffffffffffffffff, 0x9, 0x5f0, 0xfffffffffffff2e2, 0x7, 0x6, 0xfffffffffffffffd, 0x7, 0xf0, 0x26e692ff, 0x5, 0x2, 0x2, 0x2, 0x1, 0x9, 0x1, 0xe0000000000000, 0xd, 0x81, 0x80000001, 0x7ffe, 0x6, 0x6, 0x3ff, 0xffffffffffffcc1c, 0x10000, 0xfffffffffffffffb, 0x6, 0x100000001, 0x1, 0xf, 0x7dd, 0xfffffffffffff000, 0x8d6, 0x0, 0x5, 0x4, 0xafae, 0x1, 0x8, 0x1, 0xb, 0x1, 0xffff, 0x7, 0xcc, 0x1ff, 0xc, 0x0, 0x7, 0x5, 0x0, 0x3, 0x3, 0xaad, 0x7, 0x1, 0x8, 0xe2, 0x6, 0x6, 0xf, 0x7, 0x0, 0xa, 0x5, 0x40, 0x52a7, 0x9, 0xf0, 0x100000000, 0x140000000]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000810000"], &(0x7f0000001500), 0x200) unshare(0x2c020400) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0xc0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2718, 0x0, &(0x7f0000000040)) mknodat(r3, &(0x7f0000000040)='./file0\x00', 0x1000, 0x800) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000002100010000000000000000000a0000010000000000000000080006000000000014000300697036746e6c3000440000000000000043dd9036ae3ac800d827be45904774dd900ec3"], 0x38}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 11.187116582s ago: executing program 0 (id=769): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a4d2ff40f3054002241b0102030109021b00010000000009040000014eaf32", @ANYRES64], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) socket(0x2c, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000200)=0x8001100) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xc4}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, 0x0, 0x80101, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 11.095428013s ago: executing program 1 (id=770): io_setup(0x239f, 0x0) r0 = syz_clone(0x20103000, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000300)="251efa6fc37a36ed2a6f763d4941564d7e3d0675d728431323c3ba85594bf9e6c540e2933cbd53e3e0f9266f29e6e204fa74e33549ea864de9a3066364e13e80158a9fd4b4e0739ae65175f59c42552b512679ecb5f7a6c98aee9961") ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x80, 0x10, 0x0, 0x3, 0x2, r0}) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000005000001090224000100000000090473de00001503000000092140000001220f000905"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, 0x0) ioctl$HIDIOCGREPORT(r3, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) r4 = getpgid(r1) sched_setattr(r4, &(0x7f0000000000)={0x38, 0x0, 0x30000008, 0x1, 0x7ff, 0x1, 0x4, 0x5, 0x6, 0x8}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r5, 0x107, 0x12, 0x0, &(0x7f0000001600)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') pread64(r6, &(0x7f0000000300)=""/4092, 0xffc, 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x1e, &(0x7f0000000240), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) writev(r7, &(0x7f0000000180)=[{&(0x7f00000003c0)="8c", 0x1}], 0x1) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 10.992650664s ago: executing program 2 (id=771): syz_open_dev$dri(0x0, 0x1ff, 0x0) syz_usb_connect(0x3, 0x3b9, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000041914140f30c75932efd010203010902a70301ab00000209046d00"], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r1) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80002, 0x0) fadvise64(0xffffffffffffffff, 0x85f5, 0x4000000005, 0x4) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) add_key(&(0x7f0000002100)='keyring\x00', 0x0, &(0x7f0000002180), 0x0, 0xfffffffffffffffb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) socket$netlink(0x10, 0x3, 0x8) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0xf1a) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_RESET(r6, 0x5000, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x10000) sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) write$UHID_INPUT(r0, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) socket(0xd719433a3b8cec6f, 0x3, 0x2) 10.895287788s ago: executing program 4 (id=772): socket$inet6(0xa, 0x800, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x7, 0x8000000000000000, 0x7fff, 0xfa11, 0xffffffff}, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000380)="2eab6d906e08a46fbdfe61aeb0de86179b9f313aa5e141e2ca00586e449dfe00000000006a00000000", 0x29}, {0x0}], 0x2) sched_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="cc0a4b38997a820dce8b3953dfb4f3e4ea94d4d97a92d94a9158702b97f2bc19313227baa13e307c3d6a3431ef9695eb90cf4047da0da0a36cb7e5764317b993d8960ad5ab12277905a971541a9389af57a4c7d2b95e8e01c701b0fb501b4079ce8f02c2ced36a1133d1119456ff1c4ca385bf8c475233de6741fb694af34617a405e87f875eca542a4d0346f05456e3be85b22f4e8780a40d2aac19c5477edd0a9114ed8c18ccdd974b654cd7830b1663a273c204020c018df8ed89197b781399747cac2e301c155b51f96da9448eb1161c"], 0xfe33) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc0009058502", @ANYRES8], 0x0) r2 = gettid() r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02017c008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}, {&(0x7f0000000600)={0x28c, 0x3b, 0x100, 0x70bd29, 0x25dfdbfe, "", [@generic="347828634233ebb33e67d7029a59387c6dc0aeabd7d59e1ab3d93c28141196f93165aa20877f28c6e15c8d2a76ba45f5688dd52e6719e9c87c6a45e7f59a6e62b9f70221399ef5d4c095696d475837cfbd1dd8f2e22d54f6088d79dbba18931d430e81fab80a046dc2c3cae5257cb3e3e797d57b0d9b6ff6cf4ff2091c7359a3f2197bc118733130fcc02889b0d260a1f85976011ccc625464838fccb0eca8a1363ac88aec6e8f9465bd7d9d1f6e9af12cb9f94d4623ba27628d41494f3deddf61c3fbe68f1050c130384f2a28837ce7928bc2d003c4ec2af641", @generic, @typed={0x8, 0x48, 0x0, 0x0, @uid}, @nested={0x9e, 0x29, 0x0, 0x1, [@generic="b27f49b2109b15dc464bf8f9028a8cc8830547ad16a2a6eaea8b89d6d6b87a3c41f7138447cbb5eac132d2c2061efeaed5594cab8cc2033a11ce71dc7965505788acd18a8403512de2e2e596de9c53816e8a923dd17f81eb4d7bd20f49fb68065589023c9875283e82b751a9084d1f2fc6f5eb9b968edcffa0f626f7e20314dc7c2343d8cd8f9951e800c3aea14f201253a9ba664e51621cf628"]}, @nested={0xe6, 0x68, 0x0, 0x1, [@nested={0x4, 0x159}, @generic="7d9a6a3da94ce99fa52fab17afa01e22fc31966e84f26b6b491c4ac25b86ffd7bb136cef41ecc09ba743bccf22f9c3eec35eebfc5aad10611ebbe9f6a9aeb79653ec4873be321dc931ebb384993f5f37aa20c636b49b66e8fb6bff4d8107878d0ac3f615556a4c86b5dd1033fd35efde0297e4c82fe72ec1ccc44cc5947b028d95fdde8d665e3a1a61e56e8af7d41ead500396ef83d425de3ccd9aa391906eb33b6e3547c6ba51e2157b1db326f297c9242fe8b1162cb353ba1da60f8c7f102237e7ac313bd39130fc3eb898f9483180f8e89c118db01f25c7680f05d8b5"]}, @typed={0x8, 0x26, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0x64, 0x0, 0x0, @pid=r2}]}, 0x28c}, {&(0x7f00000008c0)={0x128, 0x29, 0x100, 0x70bd29, 0x25dfdbfd, "", [@nested={0x3c, 0x12a, 0x0, 0x1, [@typed={0x8, 0x125, 0x0, 0x0, @fd=r1}, @typed={0x8, 0xbf, 0x0, 0x0, @u32=0x200}, @typed={0x14, 0x55, 0x0, 0x0, @ipv6=@private2}, @typed={0x14, 0x17, 0x0, 0x0, @ipv6=@mcast1}]}, @nested={0x10, 0x10c, 0x0, 0x1, [@nested={0x4, 0xd2}, @typed={0x8, 0x35, 0x0, 0x0, @fd=r1}]}, @generic="94703aba8218939d931bfa7cbe737df5dc5df8cc0006a789fdaa11056627fb355ef8683e7c5079d1939d0ed00c40f9dcc796946a0e0c2a7472ad82d881956e9c12b47053a94bf49cb752e45011a0ac1ef315a25233fc3214f4ae00e70e8f4c553e3fe94265ce9466e8c2c45bce972b7c33059c17e65d19034032f2d88bd0d90333c2960ce746ecb22f00ddfcd8fa51804ca306740a130a62609a0bf4bc2b5cc5f4", @nested={0x20, 0xd2, 0x0, 0x1, [@nested={0x4, 0xc6}, @typed={0xb, 0xbc, 0x0, 0x0, @str='},{%]\xfa\x00'}, @nested={0x4, 0x95}, @typed={0x8, 0xbf, 0x0, 0x0, @ipv4=@broadcast}]}, @typed={0x8, 0x30, 0x0, 0x0, @pid=r2}]}, 0x128}], 0x3}, 0x20040011) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r7, &(0x7f0000000000)=""/188, 0xbc) socket$nl_generic(0x10, 0x3, 0x10) read$char_usb(r7, &(0x7f0000000100)=""/67, 0x43) socket$nl_netfilter(0x10, 0x3, 0xc) 10.737822965s ago: executing program 3 (id=773): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x2, @local, 0x81}}, 0x6, 0xe, 0x9, 0x8, 0x20, 0x6, 0x81}, 0x9c) connect$unix(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604110, &(0x7f0000000600)={0x0, [[0x9, 0x0, 0x0, 0x9], [0x1000], [0x2]], '\x00', [{}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}], '\x00', 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'vlan1\x00', 0x4}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f0000000600)={0x2, 'pimreg\x00', 0x1}, 0x18) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, r8) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000180), &(0x7f0000000200)=[0x0], &(0x7f0000000240), &(0x7f00000002c0)=[0x0], 0x0, 0x1, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000140)={r9}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000200)="ac0c775772090000000000000061266339ab5c3d2d74627245ba39e20ad20ca53e83e21f5bc3b802a7cbb25c5cc253bede2a7c57f070af1db90d9a601c241860e0222d5f1a00ef2028b41859cd12c43095ed5949c53e3b2fad7fdd1378d7df1efe3dc710d6d279ebc6976dfa1435d22c4177f0831cb5308cd3766dcc1578f94fca9574a7be424a34e1c4b33a2d6cd263996095294f1b99d2e57120e134b41a82c1d3038f83e8ac8cbff754383ec7a50ce1bd519af6b9da20", 0xfea0}) close(r1) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000000)={'IDLETIMER\x00'}, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x80503d0a, &(0x7f0000000200)={{0xa4}, {0x0, 0x80000001}, 0x1322, 0x1}) 9.075922564s ago: executing program 0 (id=774): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x4010, 0xffffffffffffffff, 0x33ed0000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x49, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082104, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}}], {0x14}}, 0x3c}}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$usbmon(0x0, 0x22a7, 0x20001) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x404) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbbf9600000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000000000000000000000000000000000000000000004000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) connect$unix(0xffffffffffffffff, 0x0, 0x0) 7.842147767s ago: executing program 1 (id=775): r0 = socket$inet6(0xa, 0x80002, 0x0) close(r0) r1 = gettid() rt_sigqueueinfo(r1, 0x21, &(0x7f0000002d00)={0x36, 0x0, 0x8}) socket$inet_sctp(0x2, 0x5, 0x84) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x4000000) sendmsg$NFT_BATCH(r6, 0x0, 0x20040040) epoll_wait(r5, &(0x7f0000000340)=[{}], 0x1, 0x80000000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) 7.788552819s ago: executing program 3 (id=776): r0 = syz_open_dev$vim2m(0x0, 0xfffffffffffffff6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x0, 0x1012, 0x1, @discrete={0xfffffffe, 0x7fff}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r3, r4, 0x0, 0x8000fb00) futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0x5, 0x1, 0x0, &(0x7f0000000180)=0x2, 0x5000000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f0000000000)=0x7ff, 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000080)=0xc) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000080)=0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x80000003, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x3, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x9, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff0, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f2e, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x6, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x6, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x40, 0xb, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x3, 0x1, 0x1000000a, 0x9, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x4, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x0, 0xb54, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x7f, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0xfff, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6.899300825s ago: executing program 2 (id=777): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fsopen(0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r5, &(0x7f0000000100)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r5, &(0x7f00000001c0)=@unlock_all, 0xb) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r4, 0x0, 0x10000, 0x0, 0x1, 0x2ea473, 0x2eb80c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r4, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x1000000, 0x3f}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000003c0)='iochabset\xd9S\xdc\x85\xba\xbd\xd5\xb4B\x1b\x88$6\x85\\\xfe\x13\x1e\f\x14d\x04\x8e;\x9f\xa1/\xbe\xab\xc4\x82o\xe3c\xc5\xdd5\x1ca<\xdd\xd4\f\x14\xc2\xbd\xd2\x93H\x1a\xc3\x03\xf7\"\x16\xe2\xe6\xa5\xf7\ar\x0e\xedU\xb8!T\x13-\xef\x9fO\x1a\x03w\x99\xc5\xc3\x89\xd8\x99\xb6y\x18\x11\xb9\xf0\x17\x7fX\xfc\xb2\xc6\xc5\xbd\xde-\xdco*\xcd\xe8\xe9\x13\x04B\x9dw\xedH\xb0\xe0\x91\x04\xe6\t\xf1U\xb2Jn\x8da\xafv a\xee\xc3\xcf\x16+\xb4\xbbn \x1d<\xeeC\x1cv\'\xc8n\xd9.\xb8\xbe\xd7\xe0\xa8\xbb;\xf5\x1agV\xfcT\\\xb6\x7f\x9e|\xc5\xec6P\xd14\xfb\xe6~\xaa0\x955W6\xc8\x8d\x85\x86Q\x89\xf9\t3a\xed\xda\xb6\xc7\xf8\xa3\xcb>\x8a\xbd\x7fH\x80\x14', 0x0) syz_pidfd_open(r6, 0x0) sched_getattr(r6, &(0x7f0000000200)={0x38}, 0x38, 0x0) lsm_get_self_attr(0x65, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x0) 5.890358841s ago: executing program 0 (id=778): syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x28880) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000000c0)={0x2, 'nr0\x00', 0x4}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r5, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096}, {&(0x7f0000000440)=""/128}], 0x0, &(0x7f00000004c0)=""/193}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35}, {&(0x7f0000000680)=""/127}], 0x0, &(0x7f0000000740)=""/23}, 0x3}], 0x400000000000054, 0x40012100, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r2, 0x1, 0x70bd2b, 0xffffffff, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) unshare(0x10a3fc84767db0dc) 5.806807091s ago: executing program 1 (id=779): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009f187620ef170372362e0102030109021b00"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x45c, 0x40103) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3fe, 0xfff, 0x35315852, 0x3, 0x8, [{0x8, 0xf}, {0x8, 0xa}, {0xd, 0x8}, {0x5, 0x8}, {0x2, 0x3}, {0x7, 0x9}, {0x6, 0xc}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) io_uring_setup(0xc71, 0x0) socket$alg(0x26, 0x5, 0x0) 4.950094974s ago: executing program 3 (id=780): syz_usb_connect(0x5, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010601bc3bd020402012c651e50102030109021200017b63200909040002"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40d82, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = landlock_create_ruleset(0x0, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8282, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r5, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=r1], 0x0) r6 = dup(r5) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1c, 0x20000000000001bf, &(0x7f00000012c0)=ANY=[@ANYRES16=r5, @ANYRESDEC=r4], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0xe, 0x0, &(0x7f0000000080)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000001200)="4c4228369f88e91870041ef4c8baa41449dc6ad5553764e898ddee1dfbb587ef4e6854a6bea12aecd99ac5dd4e39745d195df155a8628b7483b791d4de8609a893ccfbe9dc5c2ed555df193d92968b81da97fe3f0f220dd48b29c98152d9ecb2bb68cbf0bfe454a10e0adf453bd021ba3b502665c757d209f1fa9daa8979aa1fc22684d52bba1cd3c5946a6ea16b40f3bf8cc0134fb55a63817f6bac437682ed4c30147c2d86997f970ba094a19b0de4904bf83ff6fc3f0e46aba38692387ce1", 0x4}, 0xffffffffffffff8f) r8 = syz_clone(0x4039080, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd86) prctl$PR_SCHED_CORE(0x3e, 0x2, r8, 0x2, 0x0) madvise(&(0x7f00009ef000/0x4000)=nil, 0x4000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x13) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001a00010028bd7000fedbdf2481808000000000000000000008000f000180000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x40048c0}, 0x884) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 4.721419968s ago: executing program 4 (id=781): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x10b}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r8 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000004a40)={0x58, 0x0, &(0x7f0000000800)=[@free_buffer={0x40086303, r8}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000880)={@fd={0x66642a85, 0x0, r6}, @flat=@handle={0x73682a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x19}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0x2020) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, 0x0, &(0x7f0000000040)) write$FUSE_INIT(r3, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000180)) umount2(&(0x7f0000000380)='./file0\x00', 0x1) 3.902053404s ago: executing program 0 (id=782): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) syz_usb_connect(0x5, 0x36, 0x0, 0x0) socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffd}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x200001, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000540)={0x8, 'bridge0\x00', {'team_slave_0\x00'}, 0x2}) r6 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x102080, &(0x7f0000000240)=ANY=[@ANYBLOB="6e9db6", @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0xee00, @ANYBLOB=',group_id=', @ANYRESDEC=0xee01, @ANYBLOB=',max_read=0x0000000000000004,max_read=0x0000000000000004,blksize=0x0000000000000800,allow_other,obj_type=\x00,\x00'], 0x0, 0x0, &(0x7f0000000340)="559066f6e41c5f966489d84a59b469e89740331327696ee8979e21cac68ef38de69ae27b53ba22fad047c43454a86a8ca9fda233ba69c0d9bbf4e289b5084d552f04d7a82e5a1f7795c10a4b6c641f4b544bdc5dbcd03b49f3215757c88aa9c1178ff01e9f278a3bb42966e9246c06d8aa493f09038053c7f2b332c5b9150dab687eff4631005c83323b610599f7bee247bf9a89d7d128d534b5af3e0c6fb85da2ddcc046cdb1469f73fa381329f4d9f72fac84548d629fdac893bf33a780f7c5b") openat(r6, &(0x7f0000000440)='./file0\x00', 0x410000, 0xc2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002e00090027bd700000001000040000000c001800"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) 1.100280734s ago: executing program 4 (id=783): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fedade2531000000200001801400020076657468305f746f5f62726964676500080001"], 0x34}, 0x1, 0x0, 0x0, 0x28000}, 0x24000894) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000000)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="5552b8dabf00000000e366e168cf15e3ca18ee94d70d920aa1a5b6b7337cab017b60862edc99e42ea37bcb2791e572c729290e26eaf801acc540a442cc361ea80821a1211b532e51eea6a1e7b86b52d794bd559f19513cf6ba0c66d5a713cffdac914b87a3c05014bcba1092de7145dd4db9b725eb06496a83de51b31828c4fca0f58a0f89df714a90a92c42183296a85839a3e2cd5e720353fe716111eb978a0d2479d1ddb9656309b3dddf6406ab0c7af753c71a2f50468193451007ffadcacff5db7e0fc778f8deaa1cd91a4d5cb681b0f33799", @ANYRES16=r2, @ANYBLOB="000225bd7000fbdbdf258300000008000300", @ANYRES32=r3, @ANYBLOB="0800118004000580"], 0x24}}, 0x40000) r4 = syz_open_dev$sg(&(0x7f0000001700), 0x0, 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12000, 0x0, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) msgctl$MSG_STAT_ANY(0x0, 0xd, 0x0) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x12, r6, 0xfffff000) fcntl$getownex(r6, 0x10, 0x0) mknod(&(0x7f0000000140)='./file0\x00', 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f00000003c0)='./file0\x00', 0x127a00, 0x3b) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000200)={&(0x7f0000000080)=[{0x4, 0x9800, 0x0, 0x0}, {0xe, 0x0, 0x0, 0x0}], 0x2}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x12, r4, 0x0) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYRES8=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r8, 0x5b01, 0x0) 4.613224ms ago: executing program 3 (id=784): ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = fanotify_init(0x200, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r2, 0x101, 0x48001051, r3, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x7a) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) writev(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}, {&(0x7f00000004c0)}], 0x2) r4 = syz_open_procfs(0x0, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000300)={0x0, @bt={0xa02, 0x870, 0x0, 0x1, 0xd59f80, 0x19f2, 0x3f, 0xb, 0x3, 0x8, 0x2800, 0x6, 0x2, 0x1000ba2, 0x5, 0x30, {0x1, 0xffffffff}, 0xd0, 0x9}}) read$FUSE(r4, &(0x7f00000051c0)={0x2020}, 0x2020) pread64(r4, 0x0, 0x0, 0xadc) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) flock(r7, 0x0) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x80045505, &(0x7f0000000000)=0x1) bind$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) 0s ago: executing program 1 (id=785): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x8b, 0x0, 0x8}]}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0xa7e, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4814) ioctl$FE_SET_FRONTEND_TUNE_MODE(r0, 0x6f51, &(0x7f00000000c0)) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000000)=0x1) getdents64(r0, &(0x7f0000001f00)=""/4093, 0xffd) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) kernel console output (not intermixed with test programs): he interface descriptor's value: 9 [ 153.761521][ T5886] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 153.780552][ T802] usb 5-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 153.793302][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.804628][ T802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.821453][ T5886] usb 3-1: config 0 descriptor?? [ 153.842342][ T802] usb 5-1: config 0 descriptor?? [ 153.849700][ T5886] gspca_main: sunplus-2.14.0 probing 041e:400b [ 154.300608][ T802] cypress 0003:04B4:DE61.0006: invalid report_size 60495 [ 154.321461][ T802] cypress 0003:04B4:DE61.0006: item 0 2 1 7 parsing failed [ 154.352265][ T802] cypress 0003:04B4:DE61.0006: parse failed [ 154.366524][ T802] cypress 0003:04B4:DE61.0006: probe with driver cypress failed with error -22 [ 154.524208][ T5836] usb 5-1: USB disconnect, device number 9 [ 154.764451][ T5886] gspca_sunplus: reg_r err -110 [ 154.786356][ T5886] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 155.613629][ T6765] macvtap1: entered promiscuous mode [ 155.642761][ T6765] macvtap1: entered allmulticast mode [ 155.669762][ T6765] dummy0: entered promiscuous mode [ 155.703276][ T6765] dummy0: entered allmulticast mode [ 155.727200][ T6765] team0: Device macvtap1 failed to register rx_handler [ 155.750625][ T6765] dummy0: left allmulticast mode [ 155.763364][ T6765] dummy0: left promiscuous mode [ 155.914448][ T5836] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 156.096923][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.155587][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.193030][ T5836] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 156.235675][ T5836] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 156.250078][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.273938][ T5836] usb 2-1: config 0 descriptor?? [ 156.813162][ T5836] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 156.974218][ T802] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 157.094601][ T5836] usb 2-1: USB disconnect, device number 8 [ 157.156780][ T802] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 157.163830][ T6787] fido_id[6787]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 157.207750][ T802] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.247666][ T802] usb 5-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00 [ 157.269351][ T5886] usb 3-1: USB disconnect, device number 12 [ 157.282639][ T802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.322435][ T802] usb 5-1: config 0 descriptor?? [ 157.364735][ T6789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.250'. [ 157.518302][ T6791] skbuff: bad partial csum: csum=65506/2 headroom=168 headlen=65526 [ 157.824092][ T802] hid_parser_main: 20 callbacks suppressed [ 157.824119][ T802] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 157.868658][ T802] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 157.892498][ T802] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 157.921469][ T802] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 157.947858][ T802] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 157.966089][ T802] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 157.991327][ T802] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 158.013468][ T802] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 158.049502][ T802] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 158.070491][ T802] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 158.092642][ T802] wacom 0003:056A:5012.0008: reserved main item tag 0xd [ 158.119640][ T802] wacom 0003:056A:5012.0008: Unknown device_type for 'HID 056a:5012'. Ignoring. [ 158.161449][ T802] usb 5-1: USB disconnect, device number 10 [ 159.000660][ T6808] No such timeout policy "syz1" [ 162.282899][ T6856] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 162.302472][ T29] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 162.478457][ T29] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 162.513361][ T5913] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 162.530399][ T29] usb 5-1: config 0 has no interface number 0 [ 162.566192][ T29] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 162.606104][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.631881][ T29] usb 5-1: Product: syz [ 162.655781][ T29] usb 5-1: Manufacturer: syz [ 162.674183][ T29] usb 5-1: SerialNumber: syz [ 162.701543][ T29] usb 5-1: config 0 descriptor?? [ 162.895012][ T5913] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 162.928115][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.287'. [ 162.965265][ T29] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 162.974103][ T5913] usb 3-1: config 1 has no interface number 0 [ 162.995304][ T5913] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 163.027721][ T29] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 163.039573][ T5913] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 163.066405][ T29] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 163.076338][ T5913] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 608 [ 163.094442][ T29] usb 5-1: media controller created [ 163.110799][ T5913] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.149311][ T6894] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.197388][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 163.211395][ T5913] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 163.285311][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.326224][ T5913] usb 3-1: Product: syz [ 163.357850][ T29] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 163.364042][ T5913] usb 3-1: Manufacturer: syz [ 163.381164][ T5913] usb 3-1: SerialNumber: syz [ 163.458910][ T6881] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 163.574728][ T6881] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 163.686818][ T5913] usb 3-1: Error in usbnet_get_endpoints (-22) [ 163.832165][ T29] usb 5-1: USB disconnect, device number 11 [ 164.479090][ T6915] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 164.936077][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.299'. [ 165.364102][ T802] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 165.567364][ T802] usb 1-1: unable to get BOS descriptor or descriptor too short [ 165.616099][ T802] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 165.678224][ T802] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 165.704773][ T802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.733574][ T802] usb 1-1: Product: syz [ 165.748550][ T802] usb 1-1: Manufacturer: syz [ 165.763955][ T802] usb 1-1: SerialNumber: syz [ 166.024636][ T802] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 166.060290][ T29] usb 3-1: USB disconnect, device number 13 [ 166.249732][ T802] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 166.270897][ T802] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 166.304958][ T802] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 166.319956][ T6948] No such timeout policy "syz1" [ 166.410612][ T802] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 166.427274][ T802] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 166.447904][ T802] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 166.694136][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 166.865291][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.927110][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.966078][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 167.009561][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 167.042572][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.079849][ T9] usb 3-1: config 0 descriptor?? [ 167.143290][ T802] usb 1-1: USB disconnect, device number 9 [ 167.226522][ T29] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 167.370497][ T5879] udevd[5879]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 167.428246][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 167.439072][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.450442][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.479715][ T29] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 167.532449][ T29] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 167.543010][ T9] hid_parser_main: 443 callbacks suppressed [ 167.543034][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 167.585577][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.608341][ T29] usb 2-1: config 0 descriptor?? [ 167.627757][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 167.656717][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 167.684383][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 167.718821][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 167.745852][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 167.762785][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 167.788500][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 167.808705][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 167.829303][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 167.924624][ T9] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 167.990344][ T9] usb 3-1: USB disconnect, device number 14 [ 168.110731][ T29] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.000A/input/input15 [ 168.182682][ T6960] fido_id[6960]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 168.267543][ T802] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 168.281282][ T29] appleir 0003:05AC:8241.000A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 168.368641][ T29] usb 2-1: USB disconnect, device number 9 [ 168.490138][ T802] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 168.512789][ T802] usb 1-1: can't read configurations, error -71 [ 168.566991][ T6961] fido_id[6961]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 168.953387][ T6969] syz.3.314 uses obsolete (PF_INET,SOCK_PACKET) [ 168.992735][ T6969] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0002:7d01 with DS=0x1 [ 169.254259][ T29] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 169.278232][ T30] audit: type=1326 audit(1776555142.116:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fcd9c819 code=0x7ffc0000 [ 169.338479][ T30] audit: type=1326 audit(1776555142.156:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7ff2fcd9c819 code=0x7ffc0000 [ 169.418407][ T30] audit: type=1326 audit(1776555142.156:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fcd9c819 code=0x7ffc0000 [ 169.495076][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 169.540090][ T29] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 169.552242][ T29] usb 3-1: config 0 has no interface number 0 [ 169.556056][ T30] audit: type=1326 audit(1776555142.156:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff2fcd9c819 code=0x7ffc0000 [ 169.562159][ T29] usb 3-1: config 0 interface 184 has no altsetting 0 [ 169.612434][ T30] audit: type=1326 audit(1776555142.156:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fcd9c819 code=0x7ffc0000 [ 169.649668][ T6990] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 169.669069][ T29] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 169.685331][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.707691][ T29] usb 3-1: Product: syz [ 169.719767][ T29] usb 3-1: Manufacturer: syz [ 169.730924][ T6991] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 169.747083][ T30] audit: type=1326 audit(1776555142.156:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff2fcd9c819 code=0x7ffc0000 [ 169.748357][ T29] usb 3-1: SerialNumber: syz [ 169.839671][ T30] audit: type=1326 audit(1776555142.156:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fcd9c819 code=0x7ffc0000 [ 169.921644][ T29] usb 3-1: config 0 descriptor?? [ 169.971162][ T30] audit: type=1326 audit(1776555142.156:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fcd9c819 code=0x7ffc0000 [ 170.067854][ T30] audit: type=1326 audit(1776555142.156:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fcd9c819 code=0x7ffc0000 [ 170.164323][ T30] audit: type=1326 audit(1776555142.156:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff2fcd9c819 code=0x7ffc0000 [ 170.464568][ T6996] netlink: 'syz.3.323': attribute type 2 has an invalid length. [ 170.716012][ T6999] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 171.148645][ T29] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 171.187952][ T29] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 171.237052][ T29] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 171.290674][ T29] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 171.326637][ T29] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 171.365205][ T29] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 171.431897][ T29] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 171.495978][ T29] usb 3-1: USB disconnect, device number 15 [ 171.904137][ T5913] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 171.981543][ T7006] No such timeout policy "syz1" [ 172.096473][ T5913] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.131998][ T5913] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 172.181211][ T5913] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 172.215660][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.244945][ T5913] usb 4-1: Product: syz [ 172.271390][ T5913] usb 4-1: Manufacturer: syz [ 172.292778][ T5913] usb 4-1: SerialNumber: syz [ 172.331198][ T5913] cdc_mbim 4-1:1.0: skipping garbage [ 172.540972][ T7007] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 172.959534][ T5913] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS [ 173.000801][ T5913] cdc_mbim 4-1:1.0: bind() failure [ 173.043204][ T5913] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 173.064165][ T5913] cdc_ncm 4-1:1.1: bind() failure [ 173.116926][ T5913] usb 4-1: USB disconnect, device number 6 [ 174.180891][ T7049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.341'. [ 174.372550][ T7049] 8021q: adding VLAN 0 to HW filter on device bond1 [ 174.599939][ T7051] bond1: (slave veth3): Enslaving as an active interface with an up link [ 175.513684][ T7063] ip6gre1: entered promiscuous mode [ 175.532828][ T7063] ip6gre1: entered allmulticast mode [ 175.593284][ T37] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 175.640189][ T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 175.653370][ T37] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 175.724502][ T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 175.824406][ T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 176.146323][ T7071] netlink: 20 bytes leftover after parsing attributes in process `syz.4.347'. [ 176.234166][ T802] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 176.438061][ T802] usb 2-1: Using ep0 maxpacket: 32 [ 176.459419][ T802] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 176.494253][ T802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.532721][ T802] usb 2-1: config 0 descriptor?? [ 176.550164][ T802] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 177.561042][ T802] gspca_vc032x: reg_w err -71 [ 177.576802][ T802] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.598079][ T802] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.614355][ T802] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.627236][ T802] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.643917][ T802] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.659710][ T802] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.673739][ T802] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.689308][ T802] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.711236][ T802] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.742415][ T802] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.753579][ T802] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.764918][ T802] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.782417][ T802] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.829544][ T802] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.845949][ T802] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.859858][ T802] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.875281][ T802] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.882777][ T7102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.359'. [ 177.899012][ T802] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.909736][ T802] gspca_vc032x: Unknown sensor... [ 177.915848][ T7102] bridge_slave_0: default FDB implementation only supports local addresses [ 177.924944][ T802] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 177.940340][ T7102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.359'. [ 177.973535][ T802] usb 2-1: USB disconnect, device number 10 [ 178.001114][ T7102] bridge_slave_0: default FDB implementation only supports local addresses [ 178.016766][ T7107] random: crng reseeded on system resumption [ 178.924745][ T802] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 179.125349][ T802] usb 2-1: Using ep0 maxpacket: 8 [ 179.136000][ T802] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 179.152067][ T802] usb 2-1: config 179 has no interface number 0 [ 179.168821][ T802] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 179.196797][ T802] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 179.256437][ T802] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 179.285472][ T802] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 179.315928][ T802] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 179.394654][ T802] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 179.428418][ T802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.474680][ T7123] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 179.705970][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 179.724287][ T5886] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 179.849943][ T802] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input16 [ 179.922607][ T5886] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 179.962339][ T5886] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 180.003510][ T5886] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.022030][ T802] usb 2-1: USB disconnect, device number 11 [ 180.028159][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 180.028216][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 180.062297][ T5886] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 180.086387][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.158802][ T5886] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 180.195002][ T5886] usb 3-1: invalid MIDI out EP 0 [ 180.344501][ T5916] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 180.525857][ T5916] usb 5-1: Using ep0 maxpacket: 32 [ 180.552541][ T5916] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 180.586320][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.636271][ T5916] usb 5-1: config 0 descriptor?? [ 180.646270][ T5886] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 180.674811][ T5916] as10x_usb: device has been detected [ 180.692682][ T5916] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 180.728681][ T5886] usb 3-1: USB disconnect, device number 16 [ 180.766812][ T5916] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 180.886661][ T7145] netlink: 36 bytes leftover after parsing attributes in process `syz.4.375'. [ 181.016579][ T5916] as10x_usb: error during firmware upload part1 [ 181.041152][ T5916] Registered device nBox DVB-T Dongle [ 181.050295][ T5916] usb 5-1: USB disconnect, device number 12 [ 181.094143][ T5913] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 181.163103][ T5916] Unregistered device nBox DVB-T Dongle [ 181.171792][ T5916] as10x_usb: device has been disconnected [ 181.326269][ T7164] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 181.355448][ T5913] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 181.367647][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 181.383772][ T5913] usb 2-1: Product: syz [ 181.418789][ T5913] usb 2-1: config 0 descriptor?? [ 181.436748][ T5913] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 181.452108][ T5913] usb 2-1: Detected FT232H [ 181.642006][ T7153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.661984][ T7153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.942213][ T5913] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 181.950252][ T5913] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 181.991266][ T5913] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 182.034455][ T5913] usb 2-1: USB disconnect, device number 12 [ 182.081981][ T5913] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 182.109991][ T7174] process 'syz.2.387' launched './file0' with NULL argv: empty string added [ 182.140964][ T5913] ftdi_sio 2-1:0.0: device disconnected [ 182.705421][ T802] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 182.854095][ T5916] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 182.889868][ T802] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.912202][ T802] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 182.927243][ T802] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.946744][ T802] usb 3-1: Product: syz [ 182.959992][ T802] usb 3-1: Manufacturer: syz [ 182.976983][ T802] usb 3-1: SerialNumber: syz [ 183.028384][ T5916] usb 5-1: unable to get BOS descriptor or descriptor too short [ 183.081544][ T5916] usb 5-1: config 1 interface 0 has no altsetting 0 [ 183.097378][ T5916] usb 5-1: string descriptor 0 read error: -22 [ 183.107835][ T5916] usb 5-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.40 [ 183.121564][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.750349][ T5916] hid_parser_main: 5 callbacks suppressed [ 183.751204][ T5916] glorious 0003:22D4:1503.000B: unknown main item tag 0x0 [ 183.774306][ T29] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 183.782607][ T5916] glorious 0003:22D4:1503.000B: unknown main item tag 0x0 [ 183.797334][ T5916] glorious 0003:22D4:1503.000B: unknown main item tag 0x0 [ 183.821483][ T5916] glorious 0003:22D4:1503.000B: unknown main item tag 0x0 [ 183.876455][ T5916] glorious 0003:22D4:1503.000B: unknown main item tag 0x0 [ 183.918456][ T5916] glorious 0003:22D4:1503.000B: unknown main item tag 0x0 [ 183.964156][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 183.973800][ T5916] glorious 0003:22D4:1503.000B: unknown main item tag 0x0 [ 183.995737][ T5916] glorious 0003:22D4:1503.000B: unknown main item tag 0x0 [ 184.012156][ T29] usb 2-1: config 0 has no interfaces? [ 184.023233][ T5916] glorious 0003:22D4:1503.000B: unknown main item tag 0x0 [ 184.041615][ T5916] glorious 0003:22D4:1503.000B: unknown main item tag 0x0 [ 184.058978][ T29] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 184.096021][ T802] cdc_ncm 3-1:1.0: bind() failure [ 184.136276][ T29] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 184.197540][ T802] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 184.208298][ T5916] glorious 0003:22D4:1503.000B: hidraw0: USB HID vff.7f Device [Glorious Model I] on usb-dummy_hcd.4-1/input0 [ 184.233920][ T802] cdc_ncm 3-1:1.1: bind() failure [ 184.282064][ T5916] usb 5-1: USB disconnect, device number 13 [ 184.368820][ T29] usb 2-1: Manufacturer: syz [ 184.417818][ T1215] usb 3-1: USB disconnect, device number 17 [ 184.512077][ T29] usb 2-1: config 0 descriptor?? [ 184.552170][ T7195] fido_id[7195]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 185.274130][ T1215] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 185.287153][ T7194] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 185.314254][ T5913] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 185.454124][ T5913] usb 5-1: device descriptor read/64, error -71 [ 185.470121][ T1215] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 185.492499][ T1215] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.525554][ T1215] usb 3-1: Product: syz [ 185.541445][ T1215] usb 3-1: Manufacturer: syz [ 185.555829][ T1215] usb 3-1: SerialNumber: syz [ 185.576378][ T1215] usb 3-1: config 0 descriptor?? [ 186.371486][ T7227] netlink: 24 bytes leftover after parsing attributes in process `syz.0.406'. [ 186.510431][ T7230] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 186.636963][ T1215] usb 3-1: non-Atmel transceiver xxxxe200 [ 186.852555][ T1215] usb 3-1: Firmware version (0.0) predates our first public release. [ 186.922578][ T1215] usb 3-1: Please update to version 0.2 or newer [ 186.951390][ T1215] usb 3-1: atusb_probe: initialization failed, error = -19 [ 186.997045][ T1215] usb 3-1: USB disconnect, device number 18 [ 187.623066][ T7241] xt_hashlimit: size too large, truncated to 1048576 [ 187.771587][ T1997] usb 2-1: USB disconnect, device number 13 [ 188.184191][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 188.680371][ T7261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.413'. [ 188.876497][ T7261] binder: 7260:7261 ioctl c0306201 0 returned -14 [ 189.419603][ T7273] netlink: 'syz.3.417': attribute type 12 has an invalid length. [ 189.787304][ T7280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.420'. [ 189.943626][ T37] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.952953][ T7280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.420'. [ 189.968766][ T37] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.990091][ T30] kauditd_printk_skb: 153 callbacks suppressed [ 189.990106][ T30] audit: type=1800 audit(1776555162.836:165): pid=7283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.422" name="file1" dev="tmpfs" ino=406 res=0 errno=0 [ 190.062010][ T37] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.091754][ T37] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.649101][ T7297] netlink: 24 bytes leftover after parsing attributes in process `syz.4.423'. [ 190.954290][ T7313] fuse: Bad value for 'fd' [ 192.713248][ T7329] netlink: 372 bytes leftover after parsing attributes in process `syz.4.430'. [ 194.632086][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.640030][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.834239][ T1215] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 195.914218][ T5886] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 196.024223][ T1215] usb 1-1: Using ep0 maxpacket: 16 [ 196.047527][ T1215] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 196.082887][ T1215] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 196.114190][ T5886] usb 2-1: Using ep0 maxpacket: 16 [ 196.128578][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.149228][ T1215] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 196.163147][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.183119][ T1215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.208260][ T5886] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 196.231929][ T1215] usb 1-1: Product: syz [ 196.236582][ T1215] usb 1-1: Manufacturer: syz [ 196.251112][ T1215] usb 1-1: SerialNumber: syz [ 196.257781][ T5886] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 196.285486][ T1215] usb 1-1: config 0 descriptor?? [ 196.296939][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.326832][ T1215] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 196.349729][ T5886] usb 2-1: config 0 descriptor?? [ 196.358249][ T1215] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 196.820900][ T5886] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.000C/input/input17 [ 196.928628][ T1215] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 196.941693][ T1215] em28xx 1-1:0.0: Config register raw data: 0xf4 [ 196.960396][ T1215] em28xx 1-1:0.0: I2S Audio (3 sample rate(s)) [ 196.975996][ T1215] em28xx 1-1:0.0: No AC97 audio processor [ 196.983939][ T5886] appleir 0003:05AC:8241.000C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 197.072690][ T5886] usb 2-1: USB disconnect, device number 14 [ 197.262462][ T7370] fido_id[7370]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 197.399848][ T7374] netlink: 68 bytes leftover after parsing attributes in process `syz.3.446'. [ 197.756402][ T1215] usb 1-1: USB disconnect, device number 12 [ 198.034234][ T5913] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 198.226098][ T5913] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 198.243701][ T5913] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.254572][ T5913] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 198.276996][ T5913] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.300096][ T5913] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 198.310922][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 198.319581][ T5913] usb 2-1: Product: syz [ 198.323937][ T5913] usb 2-1: Manufacturer: syz [ 198.329544][ T5886] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 198.371719][ T5913] cdc_wdm 2-1:1.0: skipping garbage [ 198.411628][ T5913] cdc_wdm 2-1:1.0: skipping garbage [ 198.497024][ T5913] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 198.528863][ T5913] cdc_wdm 2-1:1.0: Unknown control protocol [ 198.553539][ T5886] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 198.589159][ T5886] usb 4-1: config 1 has no interface number 0 [ 198.616360][ T5886] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 198.643810][ T5886] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 198.657727][ T5913] usb 2-1: USB disconnect, device number 15 [ 198.683699][ T5886] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 608 [ 198.712043][ T5886] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.789029][ T5886] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 198.825376][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.854286][ T5886] usb 4-1: Product: syz [ 198.872490][ T5886] usb 4-1: Manufacturer: syz [ 198.891594][ T5886] usb 4-1: SerialNumber: syz [ 199.036984][ T7392] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 199.090523][ T7392] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 199.134587][ T5886] usb 4-1: Error in usbnet_get_endpoints (-22) [ 199.701865][ T7426] bridge_slave_0: left allmulticast mode [ 199.714506][ T7426] bridge_slave_0: left promiscuous mode [ 199.737483][ T7426] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.784748][ T7426] bridge_slave_1: left allmulticast mode [ 199.793784][ T7426] bridge_slave_1: left promiscuous mode [ 199.802988][ T7426] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.846751][ T7426] bond0: (slave bond_slave_0): Releasing backup interface [ 199.920703][ T7426] bond0: (slave bond_slave_1): Releasing backup interface [ 200.039793][ T7426] team0: Port device team_slave_0 removed [ 200.118506][ T7426] team0: Port device team_slave_1 removed [ 200.149053][ T7426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.159906][ T7426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.204635][ T7426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.231139][ T7426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.271432][ T7426] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 200.428192][ T1215] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 200.597267][ T1215] usb 5-1: Using ep0 maxpacket: 16 [ 200.625301][ T1215] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 200.639291][ T1215] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.660039][ T1215] usb 5-1: Product: syz [ 200.670172][ T1215] usb 5-1: Manufacturer: syz [ 200.689069][ T1215] usb 5-1: SerialNumber: syz [ 200.702964][ T1215] usb 5-1: config 0 descriptor?? [ 200.718612][ T1215] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 201.277763][ T7443] kvm: kvm [7441]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 201.927107][ T5913] usb 4-1: USB disconnect, device number 7 [ 201.988329][ T1215] usb 5-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 202.208337][ T5913] usb 5-1: USB disconnect, device number 16 [ 202.297943][ T5913] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 202.347157][ T5913] ssu100 5-1:0.0: device disconnected [ 202.799765][ T7474] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 203.144333][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.184270][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 204.224297][ T5886] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 204.272532][ T7502] kvm_intel: kvm [7501]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x791e [ 204.326681][ T7502] kvm: kvm [7501]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x6619 [ 204.396649][ T7502] kvm: kvm [7501]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0xe881 [ 204.433820][ T5886] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 204.463013][ T5886] usb 4-1: config 1 has no interface number 0 [ 204.484288][ T5886] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 204.516183][ T5886] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 204.562967][ T5886] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 608 [ 204.616440][ T5886] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.843717][ T5886] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 204.862865][ T7507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.490'. [ 204.893571][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.912749][ T5886] usb 4-1: Product: syz [ 204.922761][ T5886] usb 4-1: Manufacturer: syz [ 204.946298][ T5886] usb 4-1: SerialNumber: syz [ 204.993294][ T7499] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 205.050898][ T7507] ipvlan2: entered allmulticast mode [ 205.053415][ T7499] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 205.090976][ T5886] usb 4-1: Error in usbnet_get_endpoints (-22) [ 205.140022][ T7507] syz_tun: entered allmulticast mode [ 206.001151][ T7523] netlink: 64 bytes leftover after parsing attributes in process `syz.2.496'. [ 206.104702][ T7528] syzkaller1: entered promiscuous mode [ 206.126238][ T7528] syzkaller1: entered allmulticast mode [ 206.147833][ T7530] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 206.454243][ T5916] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 206.604070][ T5916] usb 5-1: device descriptor read/64, error -71 [ 206.894659][ T5916] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 207.054152][ T5916] usb 5-1: device descriptor read/64, error -71 [ 207.196374][ T5916] usb usb5-port1: attempt power cycle [ 207.320997][ T5886] usb 4-1: USB disconnect, device number 8 [ 207.564680][ T5916] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 207.609612][ T5916] usb 5-1: device descriptor read/8, error -71 [ 207.874080][ T5916] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 207.942434][ T5916] usb 5-1: device descriptor read/8, error -71 [ 208.115564][ T5916] usb usb5-port1: unable to enumerate USB device [ 209.153295][ T7598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.521'. [ 209.815894][ T5916] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 209.985063][ T5916] usb 3-1: Using ep0 maxpacket: 16 [ 210.005762][ T5916] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 210.036843][ T5916] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 210.079782][ T5916] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 210.108775][ T5916] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 210.128365][ T5916] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 210.159826][ T5916] usb 3-1: config 0 has no interface number 0 [ 210.190105][ T5916] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 210.243212][ T5916] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 210.259372][ T7621] netlink: 36 bytes leftover after parsing attributes in process `syz.4.527'. [ 210.274245][ T7621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.527'. [ 210.304236][ T5916] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 210.342327][ T5916] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 210.407376][ T5916] usb 3-1: config 0 interface 125 has no altsetting 0 [ 210.440612][ T5916] usb 3-1: config 0 interface 125 has no altsetting 2 [ 210.474883][ T5916] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 210.497447][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.531598][ T5916] usb 3-1: Product: syz [ 210.555057][ T5916] usb 3-1: Manufacturer: syz [ 210.574508][ T5916] usb 3-1: SerialNumber: syz [ 210.604367][ T5916] usb 3-1: config 0 descriptor?? [ 210.634924][ T5916] usb 3-1: selecting invalid altsetting 2 [ 210.668107][ T7628] netlink: 24 bytes leftover after parsing attributes in process `syz.4.527'. [ 210.700120][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 210.836310][ T7607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.861333][ T7607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.909625][ T9] usb 4-1: config 0 has no interfaces? [ 210.927153][ T9] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 210.942109][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.963592][ T9] usb 4-1: Product: syz [ 210.978327][ T9] usb 4-1: Manufacturer: syz [ 210.994071][ T9] usb 4-1: SerialNumber: syz [ 211.032232][ T9] usb 4-1: config 0 descriptor?? [ 211.785486][ T5916] get_1284_register timeout [ 211.806946][ C0] usb 3-1: async_complete: urb error -104 [ 211.812867][ C0] usb 3-1: async_complete: urb error -104 [ 211.910386][ T24] usb 3-1: USB disconnect, device number 19 [ 212.019682][ T5916] usb 4-1: USB disconnect, device number 9 [ 212.711674][ T7654] netlink: 12 bytes leftover after parsing attributes in process `syz.4.539'. [ 213.105515][ T5916] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 213.290301][ T5916] usb 5-1: device descriptor read/64, error -71 [ 213.584526][ T5916] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 213.776158][ T5916] usb 5-1: device descriptor read/64, error -71 [ 213.925136][ T5916] usb usb5-port1: attempt power cycle [ 214.064569][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 214.234161][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 214.253413][ T24] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 214.282653][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.292994][ T5916] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 214.315283][ T24] usb 2-1: Product: syz [ 214.328158][ T24] usb 2-1: Manufacturer: syz [ 214.343679][ T24] usb 2-1: SerialNumber: syz [ 214.346555][ T5916] usb 5-1: device descriptor read/8, error -71 [ 214.595081][ T24] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 214.615014][ T5916] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 214.627111][ T24] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 214.643683][ T24] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 214.658742][ T5916] usb 5-1: device descriptor read/8, error -71 [ 214.677678][ T24] usb 2-1: media controller created [ 214.761644][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 214.795133][ T5916] usb usb5-port1: unable to enumerate USB device [ 214.843560][ T24] zl10353_read_register: readreg error (reg=127, ret==-71) [ 214.890249][ T7686] netlink: 36 bytes leftover after parsing attributes in process `syz.2.549'. [ 214.901061][ T7686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.549'. [ 215.000690][ T24] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 215.051562][ T24] usb 2-1: USB disconnect, device number 16 [ 215.078363][ T7686] netlink: 24 bytes leftover after parsing attributes in process `syz.2.549'. [ 215.266309][ T5913] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 215.449340][ T5913] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 215.462610][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.477173][ T5913] usb 4-1: Product: syz [ 215.482824][ T5913] usb 4-1: Manufacturer: syz [ 215.521724][ T5913] usb 4-1: SerialNumber: syz [ 215.966364][ T5913] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 216.082577][ T5913] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 216.954240][ T29] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 217.124282][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 217.136031][ T5913] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 217.158878][ T29] usb 1-1: config 3 has an invalid interface number: 255 but max is 0 [ 217.173804][ T5913] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 217.183672][ T29] usb 1-1: config 3 has no interface number 0 [ 217.204142][ T29] usb 1-1: config 3 interface 255 altsetting 243 bulk endpoint 0x6 has invalid maxpacket 32 [ 217.220053][ T5913] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 217.238067][ T29] usb 1-1: config 3 interface 255 has no altsetting 0 [ 217.251286][ T5913] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 217.269108][ T29] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=95.29 [ 217.288923][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.314601][ T5913] usb 4-1: USB disconnect, device number 10 [ 217.320723][ T29] usb 1-1: Product: syz [ 217.333826][ T29] usb 1-1: Manufacturer: syz [ 217.352099][ T29] usb 1-1: SerialNumber: syz [ 217.395481][ T7711] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 217.646922][ T7711] pim6reg: entered allmulticast mode [ 217.688818][ T29] usbserial_generic 1-1:3.255: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 217.703425][ T7717] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 217.725354][ T29] usbserial_generic 1-1:3.255: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 217.766316][ T29] usbserial_generic 1-1:3.255: generic converter detected [ 217.811266][ T29] usb 1-1: generic converter now attached to ttyUSB0 [ 217.837327][ T29] usb 1-1: USB disconnect, device number 13 [ 217.918789][ T29] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 217.940857][ T29] usbserial_generic 1-1:3.255: device disconnected [ 219.188599][ T802] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 219.364129][ T802] usb 4-1: Using ep0 maxpacket: 8 [ 219.385596][ T802] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 219.421214][ T802] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 219.461341][ T802] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 219.495082][ T802] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.539960][ T802] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 219.571268][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806c5f7000: rx timeout, send abort [ 219.585266][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806c5f7000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 219.604473][ T802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.833867][ T802] usb 4-1: usb_control_msg returned -32 [ 219.878211][ T802] usbtmc 4-1:16.0: can't read capabilities [ 220.444529][ T7753] kvm: pic: non byte write [ 220.761295][ T7745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.865503][ T7764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.574'. [ 220.882986][ T7764] syz_tun: entered promiscuous mode [ 220.890859][ T7764] macvtap1: entered promiscuous mode [ 220.897918][ T7764] macvtap1: entered allmulticast mode [ 220.911693][ T7764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.574'. [ 220.927597][ T7764] syz_tun: left promiscuous mode [ 221.123879][ T7769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.576'. [ 221.394916][ T5958] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 221.586607][ T5958] usb 5-1: config 0 has no interfaces? [ 221.592458][ T5958] usb 5-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice= e.76 [ 221.594378][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 221.602275][ T5958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.620477][ T5958] usb 5-1: config 0 descriptor?? [ 221.774353][ T802] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 221.783901][ T9] usb 2-1: config 0 has no interfaces? [ 221.791103][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 221.800800][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.811826][ T9] usb 2-1: config 0 descriptor?? [ 221.840159][ T5958] usb 5-1: USB disconnect, device number 25 [ 221.935769][ T802] usb 1-1: Using ep0 maxpacket: 16 [ 221.948028][ T9] usb 4-1: USB disconnect, device number 11 [ 221.971395][ T802] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 222.006780][ T802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.031740][ T802] usb 1-1: Product: syz [ 222.049006][ T802] usb 1-1: Manufacturer: syz [ 222.065423][ T802] usb 1-1: SerialNumber: syz [ 222.076529][ T5958] usb 2-1: USB disconnect, device number 17 [ 222.412285][ T7785] syzkaller0: entered promiscuous mode [ 222.418683][ T7785] syzkaller0: entered allmulticast mode [ 222.764300][ T5958] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 222.926659][ T5958] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 222.935427][ T5958] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 222.944198][ T5958] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.954875][ T5958] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 222.964126][ T5958] usb 5-1: config 1 has no interface number 0 [ 222.971721][ T5958] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 222.980988][ T5958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.011398][ T5958] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 223.273153][ T5958] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values [ 223.283113][ T5958] snd_usb_pod 5-1:1.1: invalid control EP [ 223.289407][ T5958] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 223.297186][ T5958] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 223.307389][ T5958] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 223.319250][ T7796] netlink: 104 bytes leftover after parsing attributes in process `syz.2.587'. [ 223.502684][ T5958] usb 5-1: USB disconnect, device number 26 [ 223.594338][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 223.731284][ T802] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 223.746359][ T802] usb 1-1: MIDIStreaming interface descriptor not found [ 223.784530][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 223.803273][ T9] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 223.833380][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.860003][ T9] usb 3-1: Product: syz [ 223.875734][ T9] usb 3-1: Manufacturer: syz [ 223.892428][ T9] usb 3-1: SerialNumber: syz [ 223.919857][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.591'. [ 223.920288][ T9] usb 3-1: config 0 descriptor?? [ 223.952939][ T802] usb 1-1: USB disconnect, device number 14 [ 223.978255][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 224.062209][ T6134] udevd[6134]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 224.391233][ T9] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 224.419336][ T9] se401 3-1:0.0: probe with driver se401 failed with error -71 [ 224.462204][ T9] usb 3-1: USB disconnect, device number 20 [ 224.757379][ T30] audit: type=1326 audit(1776555197.606:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.0.594" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2fcd9c819 code=0x0 [ 225.994194][ T7718] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 226.144133][ T7718] usb 3-1: Using ep0 maxpacket: 32 [ 226.151660][ T7718] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 226.165195][ T7718] usb 3-1: config 0 has no interface number 0 [ 226.192826][ T7718] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 226.223236][ T7718] usb 3-1: config 0 interface 1 has no altsetting 0 [ 226.257975][ T7718] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 226.269076][ T7718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.280885][ T7718] usb 3-1: Product: syz [ 226.285443][ T7718] usb 3-1: Manufacturer: syz [ 226.301906][ T7718] usb 3-1: SerialNumber: syz [ 226.337108][ T7718] usb 3-1: config 0 descriptor?? [ 226.573552][ T7718] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 226.612947][ T7718] cx231xx 3-1:0.1: Failed to read PCB config [ 226.631030][ T7718] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 226.665353][ T7718] usb 3-1: USB disconnect, device number 21 [ 227.125384][ T7718] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 227.291449][ T7718] usb 3-1: Using ep0 maxpacket: 32 [ 227.304830][ T7718] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 227.313295][ T7718] usb 3-1: config 0 has no interface number 0 [ 227.327782][ T7718] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 227.361459][ T7718] usb 3-1: config 0 interface 1 has no altsetting 0 [ 227.401608][ T7718] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 227.414965][ T7718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.451970][ T7718] usb 3-1: Product: syz [ 227.465368][ T7718] usb 3-1: Manufacturer: syz [ 227.479624][ T7718] usb 3-1: SerialNumber: syz [ 227.512390][ T7718] usb 3-1: config 0 descriptor?? [ 227.800106][ T7718] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 227.846391][ T7718] cx231xx 3-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 227.860430][ T9] IPVS: starting estimator thread 0... [ 227.984203][ T7852] IPVS: using max 28 ests per chain, 67200 per kthread [ 228.005748][ T7718] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 228.052931][ T7718] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 228.094567][ T7718] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 228.127691][ T7718] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 228.145465][ T7718] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 228.171532][ T7718] cx231xx 3-1:0.1: Failed to set devmode to analog: error: -71 [ 228.233779][ T7718] i2c i2c-2: Added multiplexed i2c bus 4 [ 228.257544][ T7718] i2c i2c-2: Added multiplexed i2c bus 5 [ 228.274878][ T7718] cx231xx 3-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 228.283632][ T7718] cx231xx 3-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 228.324294][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 228.397105][ T7718] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 228.431418][ T7718] usb 3-1: USB disconnect, device number 22 [ 228.560273][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 228.595713][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.640987][ T9] usb 1-1: Product: syz [ 228.704315][ T9] usb 1-1: Manufacturer: syz [ 228.714469][ T9] usb 1-1: SerialNumber: syz [ 229.233451][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 229.283698][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 230.945972][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 230.973761][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 230.986856][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 231.000365][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 231.015007][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 231.036172][ T9] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 231.076352][ T9] usb 1-1: USB disconnect, device number 15 [ 231.751540][ T7870] netlink: 28 bytes leftover after parsing attributes in process `syz.0.611'. [ 231.884101][ T5958] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 232.074135][ T5958] usb 4-1: Using ep0 maxpacket: 8 [ 232.082940][ T5958] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 232.113157][ T5958] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 232.156082][ T5958] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 232.205698][ T5958] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 232.220465][ T5958] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 232.239276][ T5958] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 232.251444][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.260266][ T5828] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 232.365887][ T7885] syzkaller0: entered promiscuous mode [ 232.372658][ T7885] syzkaller0: entered allmulticast mode [ 232.474120][ T5828] usb 5-1: Using ep0 maxpacket: 32 [ 232.483308][ T5828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.503113][ T5828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.541280][ T5828] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 232.577132][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.607235][ T5958] usb 4-1: usb_control_msg returned -32 [ 232.615737][ T5828] usb 5-1: config 0 descriptor?? [ 232.622919][ T5958] usbtmc 4-1:16.0: can't read capabilities [ 233.086824][ T5828] hid_parser_main: 4007 callbacks suppressed [ 233.086882][ T5828] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 233.139134][ T5828] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 233.263896][ T5828] ft260 0003:0403:6030.000D: chip code: 0000 0000 [ 233.470849][ T5828] ft260 0003:0403:6030.000D: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 233.672098][ T5828] ft260 0003:0403:6030.000D: failed to retrieve status: -32, no wakeup [ 233.940572][ T5828] usb 5-1: USB disconnect, device number 27 [ 234.283160][ T7895] syzkaller0: entered promiscuous mode [ 234.301914][ T7895] syzkaller0: entered allmulticast mode [ 234.566785][ T5916] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 234.757634][ T5916] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 234.775231][ T5916] usb 3-1: config 0 has no interface number 0 [ 234.793215][ T5916] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 234.815220][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.841067][ T5916] usb 3-1: Product: syz [ 234.848511][ T5916] usb 3-1: Manufacturer: syz [ 234.853325][ T5916] usb 3-1: SerialNumber: syz [ 234.878499][ T5916] usb 3-1: config 0 descriptor?? [ 234.901652][ T7901] netlink: 'syz.0.619': attribute type 12 has an invalid length. [ 234.904925][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 234.977163][ T7905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.620'. [ 234.986886][ T7905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.620'. [ 235.111363][ T5916] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 235.159080][ T5916] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 235.200873][ T5916] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 235.222392][ T5916] usb 3-1: media controller created [ 235.250967][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 235.411946][ T5916] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 235.423731][ T7912] syzkaller0: entered promiscuous mode [ 236.114265][ T7718] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 236.264122][ T7718] usb 1-1: Using ep0 maxpacket: 32 [ 236.275765][ T7718] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 236.298591][ T7718] usb 1-1: config 0 has no interface number 0 [ 236.311961][ T7718] usb 1-1: config 0 interface 184 has no altsetting 0 [ 236.328754][ T7718] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 236.340770][ T7718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.350803][ T7718] usb 1-1: Product: syz [ 236.357881][ T7718] usb 1-1: Manufacturer: syz [ 236.375444][ T7718] usb 1-1: SerialNumber: syz [ 236.387844][ T7718] usb 1-1: config 0 descriptor?? [ 236.535955][ T5916] usb 3-1: USB disconnect, device number 23 [ 237.059750][ T7718] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 237.088800][ T7718] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 237.866343][ T7866] usbtmc 4-1:16.0: usb_control_msg returned -110 [ 237.884104][ T5913] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 237.935425][ T7939] usb 4-1: USB disconnect, device number 12 [ 237.944222][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.986448][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.021803][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.050910][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.072551][ T5913] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 238.109874][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 238.152628][ T5913] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 238.196622][ T5913] usb 5-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 238.224281][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.269382][ T5913] usb 5-1: config 0 descriptor?? [ 238.287836][ T7931] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 238.543190][ T7931] netlink: 'syz.4.628': attribute type 4 has an invalid length. [ 238.602431][ T5913] usbhid 5-1:0.0: can't add hid device: -71 [ 238.614337][ T5913] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 238.669179][ T5913] usb 5-1: USB disconnect, device number 28 [ 238.948519][ T7718] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000300: -71 [ 238.998800][ T7718] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write ADDR_FILTX: -71 [ 239.040575][ T7718] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 239.091437][ T7718] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 239.123010][ T7718] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 239.168702][ T7718] usb 1-1: USB disconnect, device number 16 [ 240.081811][ T7976] syzkaller0: entered promiscuous mode [ 240.087691][ T7976] syzkaller0: entered allmulticast mode [ 240.134269][ T1215] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 240.297753][ T1215] usb 1-1: Using ep0 maxpacket: 16 [ 240.310461][ T1215] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.323340][ T1215] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.337163][ T1215] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 240.353425][ T1215] usb 1-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 240.364401][ T1215] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.377520][ T1215] usb 1-1: config 0 descriptor?? [ 240.554301][ T7718] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 240.712864][ T7718] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 240.722657][ T7718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.752729][ T7718] usb 3-1: Product: syz [ 240.764595][ T7718] usb 3-1: Manufacturer: syz [ 240.774959][ T7718] usb 3-1: SerialNumber: syz [ 241.064595][ T7938] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 241.209462][ T7718] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 241.221859][ T7718] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 241.234306][ T7938] usb 5-1: Using ep0 maxpacket: 32 [ 241.249689][ T7938] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 241.259251][ T7938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.268149][ T7938] usb 5-1: Product: syz [ 241.272826][ T7938] usb 5-1: Manufacturer: syz [ 241.279221][ T7938] usb 5-1: SerialNumber: syz [ 241.289022][ T7938] usb 5-1: config 0 descriptor?? [ 241.370969][ T1215] a4tech 0003:09DA:000A.000E: unknown main item tag 0x0 [ 241.381771][ T1215] a4tech 0003:09DA:000A.000E: unknown main item tag 0x0 [ 241.389092][ T1215] a4tech 0003:09DA:000A.000E: unknown main item tag 0x0 [ 241.399180][ T1215] a4tech 0003:09DA:000A.000E: unknown main item tag 0x0 [ 241.407138][ T1215] a4tech 0003:09DA:000A.000E: unknown main item tag 0x0 [ 241.415280][ T1215] a4tech 0003:09DA:000A.000E: unknown main item tag 0x0 [ 241.422386][ T1215] a4tech 0003:09DA:000A.000E: unknown main item tag 0x0 [ 241.430475][ T1215] a4tech 0003:09DA:000A.000E: unknown main item tag 0x0 [ 241.437730][ T1215] a4tech 0003:09DA:000A.000E: unknown main item tag 0x0 [ 241.445917][ T1215] a4tech 0003:09DA:000A.000E: unknown main item tag 0x0 [ 241.475576][ T1215] a4tech 0003:09DA:000A.000E: hidraw0: USB HID v0.00 Device [HID 09da:000a] on usb-dummy_hcd.0-1/input0 [ 241.596192][ T7938] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 029 [ 241.736979][ T5913] usb 1-1: USB disconnect, device number 17 [ 242.380368][ T7986] i2c i2c-1: failure reading status [ 242.402575][ T7944] usb 5-1: USB disconnect, device number 29 [ 242.456245][ T7718] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 242.489452][ T7997] netlink: 'syz.1.642': attribute type 4 has an invalid length. [ 242.610840][ T7997] netlink: 'syz.1.642': attribute type 4 has an invalid length. [ 242.794200][ T5913] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 242.969602][ T5913] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 242.986727][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.998953][ T5913] usb 1-1: Product: syz [ 243.005146][ T5913] usb 1-1: Manufacturer: syz [ 243.010290][ T5913] usb 1-1: SerialNumber: syz [ 243.090729][ T7718] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO [ 243.128785][ T7718] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 243.147488][ T8005] syzkaller0: entered promiscuous mode [ 243.161835][ T8005] syzkaller0: entered allmulticast mode [ 243.164862][ T7718] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 243.188611][ T7718] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 243.218361][ T7718] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 243.294148][ T7718] usb 3-1: USB disconnect, device number 24 [ 243.480083][ T5913] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 243.510663][ T5913] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 243.578998][ T8008] TC_ACT_REPEAT abuse ? [ 244.102970][ T8016] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 244.154121][ T7932] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 244.330691][ T7932] usb 3-1: config 0 has no interfaces? [ 244.349041][ T7932] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 244.390420][ T7932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.429543][ T7932] usb 3-1: config 0 descriptor?? [ 244.634298][ T7938] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 244.678692][ T7944] usb 3-1: USB disconnect, device number 25 [ 244.768939][ T5913] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 244.782451][ T5913] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 244.824504][ T7718] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 244.825038][ T7938] usb 4-1: Using ep0 maxpacket: 8 [ 244.839164][ T7938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 244.850523][ T7938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 244.860604][ T7938] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 244.872981][ T7938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 244.885448][ T7938] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 244.906245][ T7938] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 244.924053][ T7938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.942205][ T7938] usb 4-1: config 0 descriptor?? [ 244.963274][ T8014] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 244.994550][ T7718] usb 2-1: Using ep0 maxpacket: 8 [ 245.003616][ T7718] usb 2-1: unable to get BOS descriptor or descriptor too short [ 245.017538][ T7718] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 245.029896][ T7718] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 245.057722][ T7718] usb 2-1: config 4 has no interface number 0 [ 245.072684][ T7718] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 245.082624][ T7718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.093691][ T7718] usb 2-1: Product: syz [ 245.098737][ T7718] usb 2-1: Manufacturer: syz [ 245.103759][ T7718] usb 2-1: SerialNumber: syz [ 245.144437][ T7944] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 245.184618][ T7932] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 245.307596][ T7944] usb 3-1: unable to get BOS descriptor or descriptor too short [ 245.318347][ T7944] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 245.329666][ T7944] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 245.349148][ T8022] netlink: 16 bytes leftover after parsing attributes in process `syz.1.652'. [ 245.354895][ T7932] usb 5-1: Using ep0 maxpacket: 32 [ 245.364593][ T8022] netlink: 16 bytes leftover after parsing attributes in process `syz.1.652'. [ 245.376164][ T7944] usb 3-1: string descriptor 0 read error: -22 [ 245.383202][ T7944] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 245.394562][ T7944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.409144][ T8014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.444806][ T8014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.495733][ T5828] usb 4-1: USB disconnect, device number 13 [ 245.501971][ T50] Bluetooth: hci5: Opcode 0x0c03 failed: -19 [ 245.634097][ T5913] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 245.654481][ T5913] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 245.669439][ T5913] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 245.678968][ T7944] usb 3-1: Can't get UAC3 power state for id 10 [ 245.708086][ T5913] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 245.732958][ T5913] usb 1-1: USB disconnect, device number 18 [ 245.982061][ T7932] usb 5-1: unable to get BOS descriptor or descriptor too short [ 246.001516][ T7932] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 246.021166][ T7932] usb 5-1: can't read configurations, error -71 [ 246.210451][ T7718] uvcvideo 2-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 246.234915][ T7718] uvcvideo 2-1:4.147: No valid video chain found. [ 246.267570][ T7718] usb 2-1: USB disconnect, device number 18 [ 246.297253][ T7944] usb 3-1: 2:0: failed to get current value for ch 0 (-32) [ 246.343869][ T8033] tipc: Started in network mode [ 246.350055][ T8033] tipc: Node identity ba87bf9c6d65, cluster identity 4711 [ 246.359618][ T8033] tipc: Enabled bearer , priority 0 [ 246.373812][ T8033] syzkaller0: entered promiscuous mode [ 246.375650][ T7932] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 246.380878][ T8033] syzkaller0: entered allmulticast mode [ 246.421674][ T8035] syzkaller0: entered promiscuous mode [ 246.427554][ T8035] syzkaller0: entered allmulticast mode [ 246.440682][ T8033] tipc: Resetting bearer [ 246.466633][ T8032] tipc: Resetting bearer [ 246.489498][ T8032] tipc: Disabling bearer [ 246.544185][ T7932] usb 5-1: Using ep0 maxpacket: 16 [ 246.551666][ T7932] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 246.564274][ T7941] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 246.573420][ T7932] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 246.594183][ T7932] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 246.616704][ T7932] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 246.644053][ T7932] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 246.658563][ T7932] usb 5-1: config 0 has no interface number 0 [ 246.674584][ T7932] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 246.704047][ T7932] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 246.716702][ T7932] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 246.728961][ T7941] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.739187][ T7932] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 246.739258][ T7932] usb 5-1: config 0 interface 125 has no altsetting 0 [ 246.739280][ T7932] usb 5-1: config 0 interface 125 has no altsetting 2 [ 246.753335][ T7932] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 246.789999][ T7932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.791418][ T7941] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 246.802981][ T7932] usb 5-1: Product: syz [ 246.812364][ T7932] usb 5-1: Manufacturer: syz [ 246.818317][ T7932] usb 5-1: SerialNumber: syz [ 246.828198][ T7932] usb 5-1: config 0 descriptor?? [ 246.841696][ T7932] usb 5-1: selecting invalid altsetting 2 [ 246.841948][ T7941] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 246.864449][ T8037] dummy0: entered promiscuous mode [ 246.869828][ T7941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.878156][ T8037] vlan3: entered promiscuous mode [ 246.883328][ T7941] usb 4-1: Product: syz [ 246.889676][ T7941] usb 4-1: Manufacturer: syz [ 246.898158][ T7941] usb 4-1: SerialNumber: syz [ 246.932375][ T7941] usb 4-1: config 0 descriptor?? [ 246.952050][ T8040] tipc: Started in network mode [ 246.964678][ T8040] tipc: Node identity 6acf3057c20f, cluster identity 4711 [ 246.973535][ T8040] tipc: Enabled bearer , priority 0 [ 246.991302][ T8039] syzkaller0: entered promiscuous mode [ 247.005316][ T8039] syzkaller0: entered allmulticast mode [ 247.058690][ T8039] tipc: Resetting bearer [ 247.086634][ T8038] tipc: Resetting bearer [ 247.126312][ T8038] tipc: Disabling bearer [ 247.166142][ T7944] usb 3-1: 2:0: failed to get current value for ch 1 (-71) [ 247.183400][ T7944] usb 3-1: Warning! Unlikely small volume range (=63), linear volume or custom curve? [ 247.194851][ T7944] usb 3-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/63/1 [ 247.360262][ T8044] syzkaller0: entered promiscuous mode [ 247.381963][ T7944] usb 3-1: USB disconnect, device number 26 [ 247.389043][ T8044] syzkaller0: entered allmulticast mode [ 247.495098][ T8046] batadv0: entered promiscuous mode [ 247.512479][ T8046] vlan2: entered promiscuous mode [ 247.652553][ C1] usb 5-1: async_complete: urb error -32 [ 247.660674][ T7932] get_1284_register: usb error -32 [ 247.808792][ T7944] usb 5-1: USB disconnect, device number 31 [ 248.082639][ T8063] i2c i2c-0: Invalid block read size 255 [ 249.234269][ T7941] usb 4-1: USB disconnect, device number 14 [ 249.449098][ T8070] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.668'. [ 249.734075][ T30] audit: type=1326 audit(1776555222.576:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.2.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eddb9c819 code=0x7ffc0000 [ 249.810145][ T30] audit: type=1326 audit(1776555222.576:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.2.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3eddb9c819 code=0x7ffc0000 [ 249.834325][ T8076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.669'. [ 249.862663][ T8076] loop7: detected capacity change from 0 to 7 [ 249.898006][ T30] audit: type=1326 audit(1776555222.576:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.2.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eddb9c819 code=0x7ffc0000 [ 249.924889][ T30] audit: type=1326 audit(1776555222.586:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.2.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3eddb9c819 code=0x7ffc0000 [ 249.947433][ T7941] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 249.955750][ T30] audit: type=1326 audit(1776555222.586:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.2.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eddb9c819 code=0x7ffc0000 [ 249.978837][ T30] audit: type=1326 audit(1776555222.606:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.2.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3eddb9c819 code=0x7ffc0000 [ 250.001268][ T30] audit: type=1326 audit(1776555222.606:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.2.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eddb9c819 code=0x7ffc0000 [ 250.031236][ T30] audit: type=1326 audit(1776555222.616:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.2.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f3eddb5d04e code=0x7ffc0000 [ 250.095455][ T8076] Dev loop7: unable to read RDB block 7 [ 250.099779][ T30] audit: type=1326 audit(1776555222.616:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.2.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3eddb5d04e code=0x7ffc0000 [ 250.126732][ T30] audit: type=1326 audit(1776555222.616:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.2.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3eddb5d04e code=0x7ffc0000 [ 250.149925][ T7941] usb 4-1: Using ep0 maxpacket: 8 [ 250.155887][ T8076] loop7: unable to read partition table [ 250.162373][ T7941] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 250.162403][ T7941] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 250.162428][ T7941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 250.162454][ T7941] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 250.170781][ T7941] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 250.241302][ T8076] loop7: partition table beyond EOD, truncated [ 250.247923][ T7941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.270229][ T8076] loop_reread_partitions: partition scan of loop7 (њљƒхЁ™‰ќОCъjЬ–уЂP=УН?у}X‹Ка œым%ѕЋ`Щцж€љ…ˆ{эЉж˜ШЕ4FLQkнŠ) failed (rc=-5) [ 250.294842][ T7941] usb 4-1: Product: syz [ 250.302041][ T7941] usb 4-1: Manufacturer: syz [ 250.307973][ T7941] usb 4-1: SerialNumber: syz [ 250.319913][ T7941] usb 4-1: config 0 descriptor?? [ 250.343050][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 250.382555][ T7941] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input18 [ 250.761661][ T7941] imon:send_packet: packet tx failed (-71) [ 250.794082][ T7941] imon 4-1:0.0: panel buttons/knobs setup failed [ 250.885671][ T7941] rc_core: IR keymap rc-imon-pad not found [ 250.892580][ T7941] Registered IR keymap rc-empty [ 250.899474][ T7941] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 250.920886][ T7941] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 250.937433][ T7941] imon:send_packet: packet tx failed (-71) [ 250.964205][ T7941] imon 4-1:0.0: remote input dev register failed [ 250.975793][ T7941] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 251.051088][ T7941] imon 4-1:0.0: unable to initialize intf0, err 0 [ 251.062016][ T7941] imon:imon_probe: failed to initialize context! [ 251.079363][ T7941] imon 4-1:0.0: unable to register, err -19 [ 251.095603][ T7941] usb 4-1: USB disconnect, device number 15 [ 251.904155][ T7944] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 251.933158][ T8065] batman_adv: batadv0: Adding interface: dummy0 [ 251.944177][ T8065] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.991891][ T8065] batman_adv: batadv0: Interface activated: dummy0 [ 252.096601][ T8066] batadv0: mtu less than device minimum [ 252.113857][ T7944] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 252.124819][ T7944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.133152][ T7944] usb 4-1: Product: syz [ 252.137988][ T7944] usb 4-1: Manufacturer: syz [ 252.142723][ T7944] usb 4-1: SerialNumber: syz [ 252.145706][ T8066] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.160658][ T8066] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.172030][ T8066] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.183390][ T8066] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.195232][ T8066] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.208471][ T8066] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.220063][ T8066] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.231489][ T8066] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.242916][ T8066] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.267194][ T7944] usb 4-1: config 0 descriptor?? [ 252.634090][ T7718] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 252.762802][ T7944] usb 4-1: USB disconnect, device number 16 [ 252.784111][ T7718] usb 1-1: Using ep0 maxpacket: 32 [ 252.796469][ T7718] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.820683][ T7718] usb 1-1: config 0 has no interfaces? [ 252.846100][ T7718] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 252.894791][ T7718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.999453][ T7718] usb 1-1: config 0 descriptor?? [ 253.221678][ T7718] usb 1-1: language id specifier not provided by device, defaulting to English [ 253.262860][ T8109] netlink: 'syz.4.675': attribute type 303 has an invalid length. [ 253.414778][ T7932] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 253.431699][ T8091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.470326][ T8091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.505424][ T7718] usb 1-1: USB disconnect, device number 19 [ 253.632707][ T7932] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 253.681321][ T7932] usb 2-1: config 1 has no interface number 0 [ 253.701435][ T7932] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 253.736797][ T7932] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 253.768076][ T7932] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 608 [ 253.804958][ T7932] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.862266][ T7932] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 253.925451][ T7932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.972258][ T7932] usb 2-1: Product: syz [ 253.987693][ T7932] usb 2-1: Manufacturer: syz [ 254.003068][ T7932] usb 2-1: SerialNumber: syz [ 254.058222][ T8108] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 254.069082][ T8108] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 254.145911][ T7932] usb 2-1: Error in usbnet_get_endpoints (-22) [ 254.997733][ T8121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.680'. [ 255.794532][ T8130] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 255.954543][ T8130] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 256.027969][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.038739][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.354410][ T7938] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 256.560368][ T7938] usb 4-1: config 0 has an invalid interface number: 158 but max is 1 [ 256.575783][ T7938] usb 4-1: config 0 has an invalid interface number: 239 but max is 1 [ 256.608746][ T7938] usb 4-1: config 0 has no interface number 0 [ 256.638413][ T7938] usb 4-1: config 0 has no interface number 1 [ 256.669739][ T7938] usb 4-1: config 0 interface 158 has no altsetting 0 [ 256.703597][ T7941] usb 2-1: USB disconnect, device number 19 [ 256.721605][ T7938] usb 4-1: config 0 interface 239 has no altsetting 0 [ 256.782181][ T7938] usb 4-1: New USB device found, idVendor=041e, idProduct=401d, bcdDevice= 3.d9 [ 256.809243][ T7938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.851443][ T7938] usb 4-1: Product: syz [ 256.879054][ T7938] usb 4-1: Manufacturer: syz [ 256.917551][ T7938] usb 4-1: SerialNumber: syz [ 256.970203][ T7938] usb 4-1: config 0 descriptor?? [ 257.131323][ T7941] IPVS: starting estimator thread 0... [ 257.234389][ T8147] IPVS: using max 25 ests per chain, 60000 per kthread [ 257.324231][ T7932] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 257.536870][ T7932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 257.592729][ T7932] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 257.658368][ T7932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 257.721758][ T7932] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 257.740274][ T7932] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 257.754882][ T7932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.788040][ T7932] usb 3-1: config 0 descriptor?? [ 258.171252][ T7932] hdpvr 3-1:0.0: unexpected answer of status request, len 0 [ 258.210451][ T7932] hdpvr 3-1:0.0: device init failed [ 258.230601][ T7932] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 258.441774][ T8155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.687'. [ 258.473916][ T7940] usb 3-1: USB disconnect, device number 27 [ 258.633393][ T8159] binder: 8154:8159 ioctl c0306201 0 returned -14 [ 258.653032][ T8159] net_ratelimit: 11 callbacks suppressed [ 258.653048][ T8159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.719095][ T8174] netlink: 28 bytes leftover after parsing attributes in process `syz.2.691'. [ 259.832116][ T1215] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 259.901556][ T8176] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 259.930426][ T8176] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.006184][ T1215] usb 1-1: Using ep0 maxpacket: 32 [ 260.027157][ T1215] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 260.064696][ T1215] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 260.110494][ T1215] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 260.240385][ T1215] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 260.330292][ T1215] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 260.344532][ T7718] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 260.366818][ T1215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.403032][ T1215] usb 1-1: Product: syz [ 260.416734][ T1215] usb 1-1: Manufacturer: syz [ 260.438075][ T1215] usb 1-1: SerialNumber: syz [ 260.488531][ C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 260.569159][ T1215] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input20 [ 260.584374][ T7718] usb 3-1: device descriptor read/64, error -71 [ 260.626445][ T7938] rndis_host 4-1:0.239: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 260.688990][ T7938] usb 4-1: USB disconnect, device number 17 [ 260.695200][ T1215] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 260.734605][ T1215] (id 0x00) [ 260.915593][ T7718] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 260.965543][ T1215] rc_core: IR keymap rc-imon-pad not found [ 260.991919][ T1215] Registered IR keymap rc-empty [ 261.007282][ T1215] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 261.039125][ T1215] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 261.096010][ T7718] usb 3-1: device descriptor read/64, error -71 [ 261.125392][ T1215] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 261.199150][ T1215] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input21 [ 261.225062][ T7718] usb usb3-port1: attempt power cycle [ 261.234146][ T5913] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 261.346758][ T1215] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:20> initialized [ 261.440316][ T7932] hid_parser_main: 28 callbacks suppressed [ 261.442754][ T7932] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 261.581220][ T7932] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 261.609361][ T7718] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 261.638312][ T5913] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 261.681774][ T5913] usb 4-1: config 1 has no interface number 0 [ 261.693083][ T7718] usb 3-1: device descriptor read/8, error -71 [ 261.717269][ T5913] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 261.751734][ T5913] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 261.817783][ T5913] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 608 [ 261.837591][ T5913] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.869722][ T5913] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 261.896074][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.945283][ T5913] usb 4-1: Product: syz [ 261.963547][ T5913] usb 4-1: Manufacturer: syz [ 261.965525][ T8194] fido_id[8194]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 261.987181][ T7718] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 262.001531][ T5913] usb 4-1: SerialNumber: syz [ 262.041190][ T7718] usb 3-1: device descriptor read/8, error -71 [ 262.119811][ T8186] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 262.141243][ T8186] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 262.194626][ T5913] usb 4-1: Error in usbnet_get_endpoints (-22) [ 262.201416][ T7718] usb usb3-port1: unable to enumerate USB device [ 262.243282][ T7718] usb 1-1: USB disconnect, device number 20 [ 263.736130][ T8212] netlink: 20 bytes leftover after parsing attributes in process `syz.4.701'. [ 264.545980][ T7718] usb 4-1: USB disconnect, device number 18 [ 264.767456][ T8219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.702'. [ 264.969569][ T8219] binder: 8218:8219 ioctl c0306201 0 returned -14 [ 264.995337][ T8219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.383510][ T8224] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 265.668565][ T8227] tipc: Started in network mode [ 265.679651][ T8227] tipc: Node identity 32fbea4d011e, cluster identity 4711 [ 265.696148][ T8227] tipc: Enabled bearer , priority 0 [ 265.713113][ T8227] syzkaller0: entered promiscuous mode [ 265.726778][ T8227] syzkaller0: entered allmulticast mode [ 265.822813][ T8227] tipc: Resetting bearer [ 265.860275][ T8226] tipc: Resetting bearer [ 265.930264][ T8226] tipc: Disabling bearer [ 266.264542][ T7940] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 266.450517][ T8235] : renamed from bond_slave_0 (while UP) [ 266.467720][ T7940] usb 3-1: Using ep0 maxpacket: 8 [ 266.505813][ T7940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 266.591774][ T7940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 266.607492][ T7940] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 266.620540][ T7940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 266.633050][ T7940] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 266.652773][ T7940] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 266.672692][ T7940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.719672][ T7940] usb 3-1: config 0 descriptor?? [ 266.742119][ T8222] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 266.934100][ T1215] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 267.109511][ T1215] usb 1-1: Using ep0 maxpacket: 8 [ 267.131200][ T1215] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 267.162440][ T1215] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 267.199216][ T1215] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 267.248764][ T1215] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 267.284134][ T1215] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.327123][ T1215] usbtmc 1-1:16.0: bulk endpoints not found [ 267.461093][ T8222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.559779][ T8222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.578427][ T8242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.631978][ T8242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.687326][ T1215] usb 3-1: USB disconnect, device number 32 [ 267.697441][ T50] Bluetooth: hci5: Opcode 0x0c03 failed: -19 [ 267.870037][ T7718] usb 1-1: USB disconnect, device number 21 [ 268.990284][ T8250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.062732][ T8250] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.288150][ T8250] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 269.574460][ T7940] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 269.799986][ T7940] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 269.823705][ T7940] usb 2-1: config 1 has no interface number 0 [ 269.859129][ T7940] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 269.902910][ T7940] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 269.952173][ T7940] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 608 [ 269.990414][ T7940] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.064463][ T7940] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 270.089718][ T7940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.116416][ T7940] usb 2-1: Product: syz [ 270.132854][ T7940] usb 2-1: Manufacturer: syz [ 270.145098][ T7940] usb 2-1: SerialNumber: syz [ 270.210091][ T8266] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 270.222767][ T8266] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 270.283911][ T7940] usb 2-1: Error in usbnet_get_endpoints (-22) [ 270.438758][ T8257] syz.0.710 (8257): drop_caches: 2 [ 271.486636][ T8284] team_slave_0: entered promiscuous mode [ 271.493864][ T8284] team_slave_1: entered promiscuous mode [ 271.541272][ T8284] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 271.639061][ T8284] team_slave_0: left promiscuous mode [ 271.644672][ T8284] team_slave_1: left promiscuous mode [ 273.169548][ T8305] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 273.375821][ T5913] usb 2-1: USB disconnect, device number 20 [ 273.694338][ T7944] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 273.866513][ T7944] usb 4-1: Using ep0 maxpacket: 8 [ 273.898550][ T7944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 273.941400][ T7944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 273.986561][ T7944] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 274.010243][ T8315] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.018167][ T8315] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.056583][ T7944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 274.107554][ T7944] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 274.198690][ T7944] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 274.233659][ T7944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.292480][ T7944] usb 4-1: config 0 descriptor?? [ 274.315418][ T8304] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 274.528530][ T8315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.600768][ T8315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.613981][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 274.753402][ T8304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.790610][ T8304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.246146][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.329141][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.355328][ T7942] usb 4-1: USB disconnect, device number 19 [ 275.365881][ T50] Bluetooth: hci5: Opcode 0x0c03 failed: -19 [ 275.401893][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.571692][ T1158] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.190041][ T8338] netlink: 'syz.4.726': attribute type 15 has an invalid length. [ 276.274152][ T7927] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 276.414485][ T7927] usb 2-1: device descriptor read/64, error -71 [ 276.474238][ T7719] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 276.589851][ T8342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.634097][ T7719] usb 5-1: Using ep0 maxpacket: 32 [ 276.650285][ T7719] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 276.664257][ T7927] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 276.675938][ T7719] usb 5-1: config 0 has no interface number 0 [ 276.691091][ T7719] usb 5-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 276.721839][ T7719] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 276.742893][ T7719] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.762426][ T7719] usb 5-1: Product: syz [ 276.770391][ T7719] usb 5-1: Manufacturer: syz [ 276.780617][ T7719] usb 5-1: SerialNumber: syz [ 276.801275][ T7719] usb 5-1: config 0 descriptor?? [ 276.814083][ T7927] usb 2-1: device descriptor read/64, error -71 [ 276.833489][ T7719] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 276.937313][ T7927] usb usb2-port1: attempt power cycle [ 277.041825][ T7719] usb 5-1: qt2_setup_urbs - submit read urb failed -8 [ 277.053272][ T7719] quatech2 5-1:0.51: probe with driver quatech2 failed with error -8 [ 277.294505][ T7927] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 277.350496][ T7927] usb 2-1: device descriptor read/8, error -71 [ 277.548244][ T8346] syzkaller0: entered promiscuous mode [ 277.572707][ T8346] syzkaller0: entered allmulticast mode [ 277.604189][ T7927] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 277.648093][ T7927] usb 2-1: device descriptor read/8, error -71 [ 277.681169][ T8346] tc action pedit offset must be on 32 bit boundaries [ 277.797135][ T7927] usb usb2-port1: unable to enumerate USB device [ 279.357581][ T1215] usb 5-1: USB disconnect, device number 32 [ 279.425250][ T8364] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 279.458514][ T8364] PKCS7: Only support pkcs7_signedData type [ 280.044251][ T1215] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 280.249030][ T1215] usb 4-1: Using ep0 maxpacket: 32 [ 280.266579][ T1215] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 280.296421][ T1215] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.346845][ T1215] usb 4-1: config 0 descriptor?? [ 280.372347][ T1215] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 281.061718][ T8383] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 281.294444][ T1215] gspca_vc032x: reg_w err -110 [ 281.301473][ T1215] gspca_vc032x: I2c Bus Busy Wait 00 [ 281.331033][ T1215] gspca_vc032x: I2c Bus Busy Wait 00 [ 281.349662][ T1215] gspca_vc032x: I2c Bus Busy Wait 00 [ 281.362518][ T1215] gspca_vc032x: I2c Bus Busy Wait 00 [ 281.373614][ T1215] gspca_vc032x: I2c Bus Busy Wait 00 [ 281.390963][ T1215] gspca_vc032x: I2c Bus Busy Wait 00 [ 281.417562][ T1215] gspca_vc032x: I2c Bus Busy Wait 00 [ 281.437838][ T1215] gspca_vc032x: I2c Bus Busy Wait 00 [ 281.455679][ T1215] gspca_vc032x: I2c Bus Busy Wait 00 [ 281.474332][ T1215] gspca_vc032x: I2c Bus Busy Wait 00 [ 281.489895][ T1215] gspca_vc032x: I2c Bus Busy Wait 00 [ 281.499844][ T1215] gspca_vc032x: I2c Bus Busy Wait 00 [ 281.509125][ T1215] gspca_vc032x: I2c Bus Busy Wait 00 [ 281.542079][ T8390] program syz.0.737 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 281.563069][ T1215] gspca_vc032x: I2c Bus Busy Wait 00 [ 281.589683][ T8390] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 281.614077][ T1215] gspca_vc032x: I2c Bus Busy Wait 00 [ 281.641761][ T1215] gspca_vc032x: I2c Bus Busy Wait 00 [ 281.674463][ T1215] gspca_vc032x: I2c Bus Busy Wait 00 [ 281.697899][ T1215] gspca_vc032x: I2c Bus Busy Wait 00 [ 281.710677][ T1215] gspca_vc032x: Unknown sensor... [ 281.724545][ T1215] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 281.968344][ T8403] fuse: Bad value for 'fd' [ 282.289348][ T8406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.739'. [ 282.342487][ T8406] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 282.358470][ T8403] ipip0: entered promiscuous mode [ 282.365047][ T8403] ipip0: entered allmulticast mode [ 283.021004][ T1215] usb 4-1: USB disconnect, device number 20 [ 283.155433][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 283.155453][ T30] audit: type=1326 audit(1776555256.006:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm="syz.3.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd55df9c819 code=0x7ffc0000 [ 283.254929][ T30] audit: type=1326 audit(1776555256.066:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm="syz.3.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd55df9c819 code=0x7ffc0000 [ 283.304492][ T8420] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:20002 [ 283.352634][ T30] audit: type=1326 audit(1776555256.086:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm="syz.3.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd55df9c819 code=0x7ffc0000 [ 283.411026][ T30] audit: type=1326 audit(1776555256.086:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm="syz.3.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd55df9c819 code=0x7ffc0000 [ 283.479660][ T30] audit: type=1326 audit(1776555256.086:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm="syz.3.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd55df9c819 code=0x7ffc0000 [ 283.571499][ T30] audit: type=1326 audit(1776555256.096:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm="syz.3.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd55df9c819 code=0x7ffc0000 [ 283.683260][ T30] audit: type=1326 audit(1776555256.096:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm="syz.3.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd55df9c819 code=0x7ffc0000 [ 283.754186][ T30] audit: type=1326 audit(1776555256.096:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm="syz.3.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd55df9c819 code=0x7ffc0000 [ 283.812842][ T30] audit: type=1326 audit(1776555256.096:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm="syz.3.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd55df9c819 code=0x7ffc0000 [ 283.893056][ T30] audit: type=1326 audit(1776555256.096:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm="syz.3.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd55df9c819 code=0x7ffc0000 [ 284.756150][ T8434] netlink: 'syz.2.743': attribute type 10 has an invalid length. [ 285.092165][ T8445] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 285.295154][ T7719] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 285.623398][ T7719] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 285.664855][ T7719] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 285.712664][ T7719] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 285.747472][ T7719] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.784802][ T8429] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 285.833271][ T7719] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 286.101284][ T8429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.182452][ T8429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.713015][ T8456] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 287.877059][ T7719] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 288.034092][ T7719] usb 1-1: Using ep0 maxpacket: 8 [ 288.054196][ T7719] usb 1-1: config 162 has an invalid interface number: 84 but max is 2 [ 288.077207][ T7719] usb 1-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 288.119138][ T7719] usb 1-1: config 162 has 2 interfaces, different from the descriptor's value: 3 [ 288.155761][ T7719] usb 1-1: config 162 has no interface number 0 [ 288.184176][ T7719] usb 1-1: config 162 has no interface number 1 [ 288.214094][ T7719] usb 1-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 288.279007][ T7719] usb 1-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 288.334294][ T7719] usb 1-1: config 162 interface 2 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 288.408849][ T7719] usb 1-1: config 162 interface 84 has no altsetting 0 [ 288.450631][ T7719] usb 1-1: config 162 interface 2 has no altsetting 0 [ 288.482323][ T8463] SET target dimension over the limit! [ 288.491310][ T7719] usb 1-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 288.517065][ T7719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.554059][ T7719] usb 1-1: Product: syz [ 288.570265][ T7719] usb 1-1: Manufacturer: syz [ 288.590702][ T7719] usb 1-1: SerialNumber: syz [ 289.297457][ T7719] usb 1-1: USB disconnect, device number 22 [ 289.468971][ T7927] usb 3-1: USB disconnect, device number 33 [ 289.967013][ T8477] cifs: Unknown parameter 'ђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџ [ 290.587879][ T8488] netlink: 16 bytes leftover after parsing attributes in process `syz.1.755'. [ 290.743541][ T8481] netlink: 27 bytes leftover after parsing attributes in process `syz.0.754'. [ 292.804163][ T802] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 293.055713][ T7927] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 293.118775][ T802] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 293.145855][ T1215] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 293.164748][ T802] usb 5-1: New USB device found, idVendor=055d, idProduct=9001, bcdDevice=31.44 [ 293.208496][ T802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.244246][ T7927] usb 2-1: Using ep0 maxpacket: 16 [ 293.322219][ T802] usb 5-1: config 0 descriptor?? [ 293.364598][ T1215] usb 1-1: Using ep0 maxpacket: 8 [ 293.385226][ T802] pwc: Samsung MPC-C30 USB webcam detected. [ 293.401048][ T1215] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 293.418420][ T1215] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 293.515196][ T1215] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 293.529241][ T7927] usb 2-1: unable to get BOS descriptor or descriptor too short [ 293.567277][ T7927] usb 2-1: no configurations [ 293.596135][ T7927] usb 2-1: can't read configurations, error -22 [ 293.752169][ T1215] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 293.770249][ T1215] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 293.781598][ T1215] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.822734][ T8521] netlink: 20 bytes leftover after parsing attributes in process `syz.2.761'. [ 293.886750][ T8519] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 294.009117][ T1215] usb 1-1: usb_control_msg returned -32 [ 294.014939][ T1215] usbtmc 1-1:16.0: can't read capabilities [ 294.388576][ T8524] netlink: 84 bytes leftover after parsing attributes in process `syz.1.763'. [ 294.530463][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 295.503402][ T802] pwc: send_video_command error -71 [ 295.542347][ T802] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 295.558957][ T802] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 295.579605][ T802] usb 5-1: USB disconnect, device number 33 [ 295.974783][ T802] usb 1-1: USB disconnect, device number 23 [ 296.070875][ T8542] netlink: 'syz.4.766': attribute type 1 has an invalid length. [ 299.317730][ T7927] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 299.424137][ T7719] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 299.477252][ T7927] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 299.506281][ T7927] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 299.525667][ T7924] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 299.546641][ T7927] usb 1-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 299.556927][ T7927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.565491][ T7927] usb 1-1: Product: syz [ 299.570396][ T7927] usb 1-1: Manufacturer: syz [ 299.575591][ T7927] usb 1-1: SerialNumber: syz [ 299.583283][ T7719] usb 2-1: config 0 has an invalid interface number: 115 but max is 0 [ 299.592308][ T7719] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.607685][ T7927] usb 1-1: config 0 descriptor?? [ 299.613370][ T7719] usb 2-1: config 0 has no interface number 0 [ 299.622459][ T7719] usb 2-1: config 0 interface 115 has no altsetting 0 [ 299.640216][ T7719] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 299.654168][ T7719] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 299.673839][ T7719] usb 2-1: Manufacturer: syz [ 299.686105][ T7924] usb 3-1: config 171 has an invalid interface number: 109 but max is 0 [ 299.696676][ T7924] usb 3-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 299.708570][ T7719] usb 2-1: config 0 descriptor?? [ 299.721234][ T7924] usb 3-1: config 171 has no interface number 0 [ 299.731104][ T7924] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 299.750579][ T7924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.760628][ T7924] usb 3-1: Product: syz [ 299.767342][ T7924] usb 3-1: Manufacturer: syz [ 299.772555][ T7924] usb 3-1: SerialNumber: syz [ 299.820783][ T8574] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 299.868962][ T8576] IPVS: stopping backup sync thread 8574 ... [ 300.004110][ T7719] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 300.214096][ T7719] usb 5-1: Using ep0 maxpacket: 32 [ 300.397285][ T7927] powermate 1-1:0.0: probe with driver powermate failed with error -22 [ 300.437462][ T7719] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 300.451586][ T7927] usb 1-1: USB disconnect, device number 24 [ 300.824470][ T7924] ath6kl: Failed to submit usb control message: -110 [ 300.865235][ T7924] ath6kl: unable to send the bmi data to the device: -110 [ 300.911464][ T7924] ath6kl: Unable to send get target info: -110 [ 300.927615][ T8580] netlink: 'syz.2.771': attribute type 21 has an invalid length. [ 300.937493][ T8580] netlink: 156 bytes leftover after parsing attributes in process `syz.2.771'. [ 300.968877][ T8580] netlink: 'syz.2.771': attribute type 21 has an invalid length. [ 301.046034][ T8580] netlink: 156 bytes leftover after parsing attributes in process `syz.2.771'. [ 301.052305][ T8583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.052823][ T8583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.076220][ T7924] ath6kl: Failed to init ath6kl core: -110 [ 301.195808][ T7924] ath6kl_usb 3-1:171.109: probe with driver ath6kl_usb failed with error -110 [ 301.250059][ T7719] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 301.250106][ T7719] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 301.250131][ T7719] usb 5-1: Product: syz [ 301.250142][ T7719] usb 5-1: Manufacturer: syz [ 301.250155][ T7719] usb 5-1: SerialNumber: syz [ 301.408572][ T7719] usb 5-1: config 0 descriptor?? [ 302.001141][ T8570] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 302.359365][ T7719] usb 2-1: USB disconnect, device number 27 [ 303.313560][ T802] usb 3-1: USB disconnect, device number 34 [ 305.447991][ T7924] usb 5-1: USB disconnect, device number 34 [ 305.614082][ T7719] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 305.644177][ T802] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 305.784520][ T7719] usb 2-1: Using ep0 maxpacket: 32 [ 305.809841][ T7719] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.829513][ T802] usb 4-1: Using ep0 maxpacket: 32 [ 305.842676][ T7719] usb 2-1: config 0 has no interfaces? [ 305.858804][ T802] usb 4-1: config 123 interface 0 has no altsetting 0 [ 305.880127][ T7719] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 305.880816][ T802] usb 4-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 305.922898][ T8626] fuse: Bad value for 'fd' [ 305.931196][ T7719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.956538][ T802] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.971793][ T7719] usb 2-1: Product: syz [ 305.982089][ T7719] usb 2-1: Manufacturer: syz [ 305.997278][ T802] usb 4-1: Product: syz [ 306.005806][ T802] usb 4-1: Manufacturer: syz [ 306.018556][ T802] usb 4-1: SerialNumber: syz [ 306.066685][ T7719] usb 2-1: SerialNumber: syz [ 306.130569][ T7719] usb 2-1: config 0 descriptor?? [ 306.504582][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 306.829404][ T8637] netlink: 12 bytes leftover after parsing attributes in process `syz.0.782'. [ 307.003414][ T8639] netlink: 20 bytes leftover after parsing attributes in process `syz.3.780'. [ 309.755785][ T7942] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 309.927448][ T7924] usb 2-1: USB disconnect, device number 28 [ 310.019683][ T7942] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.093357][ T7942] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 310.144796][ T7942] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 310.182278][ T7942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.193841][ T802] usb 4-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 310.242354][ T802] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 310.253118][ T7942] usb 5-1: config 0 descriptor?? [ 310.294537][ T7942] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 310.306485][ T802] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 310.337162][ T7942] dvb-usb: bulk message failed: -22 (3/0) [ 310.352430][ T802] usb 4-1: media controller created [ 310.391073][ T7942] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 310.432490][ T802] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 310.496331][ T8653] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN PTI [ 310.508925][ T8653] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 310.517409][ T8653] CPU: 0 UID: 0 PID: 8653 Comm: syz.4.783 Tainted: G L syzkaller #0 PREEMPT(full) [ 310.528193][ T8653] Tainted: [L]=SOFTLOCKUP [ 310.532563][ T8653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 310.542719][ T8653] RIP: 0010:__mutex_lock+0x14e/0x1550 [ 310.548135][ T8653] Code: e0 13 4b 9a 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 3e 12 00 00 83 3d a0 79 93 0e 00 75 23 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 b6 dd 78 f6 4d 39 64 24 58 0f 85 6a 11 00 [ 310.567968][ T8653] RSP: 0018:ffffc900044f7420 EFLAGS: 00010206 [ 310.574122][ T8653] RAX: 0000000000000018 RBX: 0000000000000000 RCX: ffffffff9a4b1303 [ 310.582159][ T8653] RDX: 0000000000000000 RSI: ffffffff8e247e65 RDI: 00000000000000c0 [ 310.590154][ T8653] RBP: ffffc900044f75d8 R08: ffffc900044f7547 R09: 0000000000000000 [ 310.598149][ T8653] R10: ffffc900044f7520 R11: fffff5200089eea9 R12: 0000000000000068 [ 310.606569][ T8653] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff9200089ee9c [ 310.614664][ T8653] FS: 00007fb3d0df66c0(0000) GS:ffff888125225000(0000) knlGS:0000000000000000 [ 310.623656][ T8653] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 310.630268][ T8653] CR2: 0000200000001030 CR3: 0000000077e34000 CR4: 00000000003526f0 [ 310.638278][ T8653] Call Trace: [ 310.641605][ T8653] [ 310.644567][ T8653] ? __mutex_lock+0x319/0x1550 [ 310.649429][ T8653] ? __mutex_trylock_common+0x158/0x260 [ 310.655031][ T8653] ? dvb_usbv2_generic_write+0x26/0x60 [ 310.660530][ T8653] ? __pfx___mutex_lock+0x10/0x10 [ 310.665602][ T8653] ? __pfx___mutex_lock+0x10/0x10 [ 310.670757][ T8653] ? __mutex_lock+0x319/0x1550 [ 310.675563][ T8653] dvb_usbv2_generic_write+0x26/0x60 [ 310.680897][ T8653] mxl111sf_ctrl_msg+0x160/0x2f0 [ 310.685957][ T8653] mxl111sf_write_reg+0xa9/0x1b0 [ 310.690915][ T8653] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 310.696483][ T8653] ? __bpf_trace_contention_end+0xda/0x150 [ 310.702326][ T8653] mxl111sf_i2c_xfer+0x496/0x5100 [ 310.707480][ T8653] ? unwind_next_frame+0xa6/0x2550 [ 310.712692][ T8653] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 310.718306][ T8653] ? is_bpf_text_address+0x292/0x2b0 [ 310.723634][ T8653] ? is_bpf_text_address+0x26/0x2b0 [ 310.728889][ T8653] ? kernel_text_address+0xa5/0xe0 [ 310.734232][ T8653] ? __kernel_text_address+0xd/0x30 [ 310.739498][ T8653] ? unwind_get_return_address+0x4d/0x90 [ 310.745150][ T8653] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 310.751505][ T8653] ? arch_stack_walk+0xfb/0x150 [ 310.756398][ T8653] ? stack_trace_save+0xa9/0x100 [ 310.761389][ T8653] ? __pfx_stack_trace_save+0x10/0x10 [ 310.766788][ T8653] ? stack_depot_save_flags+0x33/0x810 [ 310.772297][ T8653] ? __pfx_stack_trace_save+0x10/0x10 [ 310.777748][ T8653] ? look_up_lock_class+0x57/0x110 [ 310.782885][ T8653] ? register_lock_class+0x31/0x2e0 [ 310.788113][ T8653] ? __lock_acquire+0x6b5/0x2cf0 [ 310.793113][ T8653] __i2c_transfer+0x79a/0x1f70 [ 310.797939][ T8653] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 310.803960][ T8653] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 310.809817][ T8653] ? i2c_transfer+0xc8/0x2d0 [ 310.814458][ T8653] i2c_transfer+0x1cc/0x2d0 [ 310.819075][ T8653] i2cdev_ioctl_rdwr+0x460/0x740 [ 310.824158][ T8653] i2cdev_ioctl+0x6a5/0x880 [ 310.828710][ T8653] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 310.833761][ T8653] ? __fget_files+0x3a0/0x420 [ 310.838487][ T8653] ? __fget_files+0x2a/0x420 [ 310.843188][ T8653] ? bpf_lsm_file_ioctl+0x9/0x20 [ 310.848425][ T8653] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 310.853486][ T8653] __se_sys_ioctl+0xfc/0x170 [ 310.858114][ T8653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.864225][ T8653] do_syscall_64+0x15f/0xf80 [ 310.868869][ T8653] ? trace_irq_disable+0x3b/0x140 [ 310.873944][ T8653] ? clear_bhb_loop+0x40/0x90 [ 310.878691][ T8653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.884706][ T8653] RIP: 0033:0x7fb3d2b9c819 [ 310.889160][ T8653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.908892][ T8653] RSP: 002b:00007fb3d0df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 310.917345][ T8653] RAX: ffffffffffffffda RBX: 00007fb3d2e15fa0 RCX: 00007fb3d2b9c819 [ 310.925475][ T8653] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000006 [ 310.933568][ T8653] RBP: 00007fb3d2c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 310.941883][ T8653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.949877][ T8653] R13: 00007fb3d2e16038 R14: 00007fb3d2e15fa0 R15: 00007fb3d2f3fa48 [ 310.957877][ T8653] [ 310.960910][ T8653] Modules linked in: [ 310.965310][ T8653] ---[ end trace 0000000000000000 ]--- [ 311.019501][ T8686] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 311.201715][ T802] set interface failed [ 311.208189][ T7942] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 311.232140][ T7942] usb 5-1: media controller created [ 311.245391][ T7942] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 311.355874][ T7942] dvb-usb: bulk message failed: -22 (6/0) [ 311.369107][ T7942] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 311.414562][ T7942] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input22 [ 311.445475][ T8687] netlink: 64 bytes leftover after parsing attributes in process `syz.3.784'. [ 311.509675][ T8689] hub 1-0:1.0: USB hub found [ 311.516818][ T8689] hub 1-0:1.0: 1 port detected [ 311.530575][ T7942] dvb-usb: schedule remote query interval to 150 msecs. [ 311.544948][ T7942] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 311.704910][ T7942] dvb-usb: bulk message failed: -22 (1/0) [ 311.713410][ T7942] dvb-usb: error while querying for an remote control event. [ 311.831520][ T8653] RIP: 0010:__mutex_lock+0x14e/0x1550 [ 311.845090][ T8653] Code: e0 13 4b 9a 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 3e 12 00 00 83 3d a0 79 93 0e 00 75 23 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 b6 dd 78 f6 4d 39 64 24 58 0f 85 6a 11 00 [ 311.904065][ T7942] dvb-usb: bulk message failed: -22 (1/0) [ 311.910087][ T7942] dvb-usb: error while querying for an remote control event. [ 311.921177][ T8653] RSP: 0018:ffffc900044f7420 EFLAGS: 00010206 [ 311.933862][ T8653] RAX: 0000000000000018 RBX: 0000000000000000 RCX: ffffffff9a4b1303 [ 311.964337][ T8653] RDX: 0000000000000000 RSI: ffffffff8e247e65 RDI: 00000000000000c0 [ 311.972773][ T8653] RBP: ffffc900044f75d8 R08: ffffc900044f7547 R09: 0000000000000000 [ 311.986160][ T8653] R10: ffffc900044f7520 R11: fffff5200089eea9 R12: 0000000000000068 [ 312.004103][ T8653] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff9200089ee9c [ 312.022824][ T8653] FS: 00007fb3d0df66c0(0000) GS:ffff888125225000(0000) knlGS:0000000000000000 [ 312.070659][ T8653] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 312.087074][ T8653] CR2: 00002000001ae030 CR3: 0000000077e34000 CR4: 00000000003526f0 [ 312.095347][ T7942] dvb-usb: bulk message failed: -22 (1/0) [ 312.101276][ T7942] dvb-usb: error while querying for an remote control event. [ 312.121365][ T8653] Kernel panic - not syncing: Fatal exception [ 312.127681][ T8653] Kernel Offset: disabled [ 312.132121][ T8653] Rebooting in 86400 seconds..