last executing test programs: 14m47.674795646s ago: executing program 3 (id=90): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="050026bd7000000000000f00000008000300", @ANYRES32, @ANYBLOB="51000e0080000000feffffffffff08021100000008021100000000000000000000000100050307c7062d1a"], 0x90}}, 0x20000014) 14m47.456188989s ago: executing program 3 (id=91): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000080000000950000000000000018180000", @ANYRES32, @ANYBLOB="00000000000000000000000010ffffff00b15b84000000000000001812f70df20f84a8", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000030000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x2e, &(0x7f00000000c0)=""/41, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xa, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000001c0)=[{0x3, 0x1, 0x6, 0x3}, {0x2, 0x6, 0x5, 0x5}], 0x10, 0xffff}, 0x9f) 14m47.291084251s ago: executing program 3 (id=93): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 14m46.896097356s ago: executing program 3 (id=94): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={'\x00', 0xffff, 0x1, 0xaf25, 0x1000}) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) 14m46.709068898s ago: executing program 3 (id=95): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0xe82) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001680)) r3 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 14m45.559387772s ago: executing program 3 (id=103): getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000007c0)={0x0}, &(0x7f0000001800)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000001840)=@assoc_value={r0, 0x8}, &(0x7f0000001880)=0x8) r1 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, 0x0}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000000000000000fe8000"/52, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c0000000a0000000000000000000000000030c6f58b000000000001053500000200ac0003000000010000000900000000000000000000000000000000000001000004d56c0000000a000000ac1476bb000000000000000000000000053500"], 0x1ac}}, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r3, &(0x7f00000003c0)=[{{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000180)="c526da4246c86a9037cc4854e99241ddd8631ac3f33e2ba87643cc943ce4596bd61fc4864ff6fb36a11d01b7316c6d3e052d1137b48f14a24f118c60850257b665eb0308ce7c5b31613db69f3cc94f1d8036f8a4353ae23d2ab7fb", 0x5b}, {&(0x7f0000000200)="0cc1014204a2fc64b58b262bc23f3ecf686b307621eb516f09286f49093b567eb1192ee95605f21eb9c91b9c187c23f093a49df46f5e7d546636a55226b034cb192f1328fefad50548317266ee053199b4eb7b5d2e3d20bd90bf3c3a8b61cf890921e4a76f63fd1de596a6271279371b4edc82b8a52ed69792a789419dfb42eaec8dd4c8cc85ec439617ab0f18123807c17a2e49a336b7917d", 0x99}, {&(0x7f00000002c0)="63bfb1ff82f2276e20fe2bbdc31786cc69d0ec14b425f406aa0e6177c3f10f80f1a3aa8a93571dd4aae582ec50a8ffcdcb36c5e608d22953ffe80ed62a2ba0787e63b006e32e3d55e3065c18fd2b34634aa7", 0x52}, {&(0x7f0000000340)="f502", 0x2}], 0x4, 0x0, 0x0, 0x800}}], 0x1, 0x24044000) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000063018c000000000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000000), 0x4) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r4, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 14m29.515877789s ago: executing program 32 (id=103): getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000007c0)={0x0}, &(0x7f0000001800)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000001840)=@assoc_value={r0, 0x8}, &(0x7f0000001880)=0x8) r1 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, 0x0}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000000000000000fe8000"/52, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c0000000a0000000000000000000000000030c6f58b000000000001053500000200ac0003000000010000000900000000000000000000000000000000000001000004d56c0000000a000000ac1476bb000000000000000000000000053500"], 0x1ac}}, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r3, &(0x7f00000003c0)=[{{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000180)="c526da4246c86a9037cc4854e99241ddd8631ac3f33e2ba87643cc943ce4596bd61fc4864ff6fb36a11d01b7316c6d3e052d1137b48f14a24f118c60850257b665eb0308ce7c5b31613db69f3cc94f1d8036f8a4353ae23d2ab7fb", 0x5b}, {&(0x7f0000000200)="0cc1014204a2fc64b58b262bc23f3ecf686b307621eb516f09286f49093b567eb1192ee95605f21eb9c91b9c187c23f093a49df46f5e7d546636a55226b034cb192f1328fefad50548317266ee053199b4eb7b5d2e3d20bd90bf3c3a8b61cf890921e4a76f63fd1de596a6271279371b4edc82b8a52ed69792a789419dfb42eaec8dd4c8cc85ec439617ab0f18123807c17a2e49a336b7917d", 0x99}, {&(0x7f00000002c0)="63bfb1ff82f2276e20fe2bbdc31786cc69d0ec14b425f406aa0e6177c3f10f80f1a3aa8a93571dd4aae582ec50a8ffcdcb36c5e608d22953ffe80ed62a2ba0787e63b006e32e3d55e3065c18fd2b34634aa7", 0x52}, {&(0x7f0000000340)="f502", 0x2}], 0x4, 0x0, 0x0, 0x800}}], 0x1, 0x24044000) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000063018c000000000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000000), 0x4) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r4, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 11m23.711741996s ago: executing program 2 (id=829): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x200000, 0x8000, 0x0, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r1) 11m21.493710852s ago: executing program 2 (id=837): r0 = getpid() syz_pidfd_open(r0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8], 0x16, 0x2ba, &(0x7f0000000800)="$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") writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000022c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0xfffffffffffe, 0x5, 0xfffffffffffffffa}, {0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0xa, @in=@private=0xa010102, 0x3507, 0x1, 0x1, 0x0, 0x0, 0x8007c, 0xfffffffe}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0xfffffffd}, 0x1c) 11m16.827700497s ago: executing program 2 (id=853): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc141200004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 11m16.302340113s ago: executing program 2 (id=854): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r1, 0x103, 0x70bd29, 0x2, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}}, 0x800) 11m16.168274444s ago: executing program 2 (id=855): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = socket$inet_icmp(0x2, 0x2, 0x1) sendfile(r1, r0, 0x0, 0x6) 11m15.006807858s ago: executing program 2 (id=859): socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 10m59.739987177s ago: executing program 33 (id=859): socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 10m18.53899037s ago: executing program 4 (id=1007): socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10380, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'ipvlan0\x00', 0x1000}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TARGET={0x8, 0x1, 0x78}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 10m15.669448484s ago: executing program 4 (id=1017): pipe(0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x1, 0x30, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @private=0xa010100, {[@cipso={0x86, 0x6, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xfffe}}}}}}, 0x0) 10m15.445712606s ago: executing program 0 (id=1018): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) close(0xffffffffffffffff) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009b40)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x4, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x8, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x5, 0x2, 0xc, 0x8, 0x9, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x0, 0x8, 0x84}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xffd, 0xcc, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0x9}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x8000, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0xad, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0xffffff81, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0xc3, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0xffffffff}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b5}, {0xa24b, 0x947d, 0x3, 0x4, 0x80000000, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x6}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x0, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x1, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0x7, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0xb8}, {0x3, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x4, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x5}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10m15.255115219s ago: executing program 4 (id=1019): syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) pipe2(0x0, 0x4000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000600)='4', 0x1}], 0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0), 0xb) syz_io_uring_setup(0x3bd4, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000040)=0xc) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x3, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 10m14.174678611s ago: executing program 4 (id=1021): r0 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x1, 0x84) syz_io_uring_setup(0x8d2, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000000)) io_uring_setup(0x1de, 0x0) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) accept4(r0, 0x0, &(0x7f00000001c0), 0x800) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f00000000c0)=@nullb, 0x0, 0x0, 0x208000, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000040)=0x9d) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$inet6_tcp(0xa, 0x1, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) 10m12.102266236s ago: executing program 4 (id=1026): syz_emit_ethernet(0xfffffffffffffe2d, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c2000000bbbbbb96bbbb86dd6700000000183aff00000000000000000000ffffac1414aaff0200000000000000000000000000018400907800080100fc000000000000000000000000000001"], 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdaf9, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f0000000380)={&(0x7f0000000300)='wrr\x00', &(0x7f0000000080)='wrr\x00', 0x6}) unshare(0x22020600) socket$inet_icmp(0x2, 0x2, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="000429"], 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0xfca2238337819a4d) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e22, 0x3, 'lc\x00', 0x24, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xc9, 0x12d5f, 0x3}}, 0x44) socket$inet_smc(0x2b, 0x1, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$inet(0x2, 0x80001, 0x84) 10m12.046879816s ago: executing program 0 (id=1027): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x3, @dev}, 0x2}}, 0x2e) close(r0) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2, 0x4, {0xa, 0x4e20, 0x4, @loopback, 0x7}}}, 0x32) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000080)) 10m11.867020758s ago: executing program 4 (id=1030): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000240)={'\x00', 0xffff, 0x1, 0xaf25, 0x1000}) ioctl$SG_BLKTRACETEARDOWN(r3, 0x1276, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') ioctl$KVM_SET_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x23}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 10m11.791704689s ago: executing program 0 (id=1032): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}}}, 0x10) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4400000009"], 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000854) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000880)={0x10, 0x42, 0x601}, 0x10}], 0x1}, 0x0) bind$tipc(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3) r4 = syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r5) sendmsg$NLBL_CALIPSO_C_LISTALL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r6, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdb75}, 0x14}, 0x1, 0x0, 0x0, 0x4481}, 0x24004052) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r5) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f00000008c0)=[{0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x46c2}], 0x2, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x28, r4, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008881}, 0x0) 10m10.830876941s ago: executing program 0 (id=1037): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000400)=@ethtool_rxfh={0x51, 0x7}}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/mnt\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) recvmsg$unix(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000280), &(0x7f0000000140)=r2}, 0x22) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000300)=[{&(0x7f0000000000)="2f1efd0e", 0x4}, {&(0x7f0000000140)}], 0x2, 0x1) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x66, 0xf) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, r1, 0x32b, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x2400c040) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 10m9.802715782s ago: executing program 0 (id=1040): syz_emit_ethernet(0xfffffffffffffe2d, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c2000000bbbbbb96bbbb86dd6700000000183aff00000000000000000000ffffac1414aaff0200000000000000000000000000018400907800080100fc000000000000000000000000000001"], 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdaf9, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f0000000380)={&(0x7f0000000300)='wrr\x00', &(0x7f0000000080)='wrr\x00', 0x6}) unshare(0x22020600) socket$inet_icmp(0x2, 0x2, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="000429"], 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0xfca2238337819a4d) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e22, 0x3, 'lc\x00', 0x24, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xc9, 0x12d5f, 0x3}}, 0x44) socket$inet_smc(0x2b, 0x1, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$inet(0x2, 0x80001, 0x84) 10m9.450509227s ago: executing program 0 (id=1044): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) shutdown(r4, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040805}, 0xc080) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 9m56.774592935s ago: executing program 34 (id=1030): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000240)={'\x00', 0xffff, 0x1, 0xaf25, 0x1000}) ioctl$SG_BLKTRACETEARDOWN(r3, 0x1276, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') ioctl$KVM_SET_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x23}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 9m53.176921277s ago: executing program 35 (id=1044): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) shutdown(r4, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040805}, 0xc080) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 10.133312094s ago: executing program 7 (id=3334): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000001c0)={0x1, 0x5}, 0x4) pwrite64(r0, &(0x7f0000000080)='2', 0x1, 0x10) pwrite64(r0, &(0x7f0000000280)='5', 0x1, 0x3) r2 = socket$netlink(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newtaction={0x18, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 6.433830266s ago: executing program 8 (id=3347): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) splice(r3, 0x0, r2, 0x0, 0x20e69a38, 0x0) close(r3) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$cgroup_int(r4, &(0x7f0000001480)=0x2, 0x12) splice(r1, 0x0, r3, 0x0, 0x1100000000f336, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r7, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) listen(r7, 0x0) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r8, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) listen(r8, 0x0) close(0x4) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)=@newqdisc={0x154, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffffe, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0xffffffffffffffbb, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x3c}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x400, 0x80000000, 0x55, 0x9, 0x3, 0x12, 0x1}}]}}]}, 0x154}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, &(0x7f0000000280)) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000300)={{{@in=@broadcast, @in=@rand_addr=0x64010102, 0x4e20, 0x0, 0x4e22, 0x8, 0xa, 0x20, 0x0, 0x73, r6}, {0x8000000000000001, 0x8001, 0x5, 0x800, 0x8, 0x3, 0x10, 0x5f}, {0x49a7, 0x1, 0xc3, 0x3}, 0x0, 0x6e6bb8, 0x1, 0x1, 0x2}, {{@in6=@mcast2, 0x4d5, 0xff}, 0xa, @in6=@remote, 0x3503, 0x1, 0x0, 0x9, 0x40, 0x8, 0x3}}, 0xe8) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000240)=@ccm_128={{}, "add31f29b36fc94e", "a9372775930bf8139a3d94935840487e", "0312a52a", "00001200"}, 0x28) 5.843792643s ago: executing program 7 (id=3351): socket$alg(0x26, 0x5, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x1e, 0x5, 0xb) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newlink={0x4c, 0x10, 0x403, 0x58bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x20}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5.146208681s ago: executing program 8 (id=3354): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0xfffb, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x400) readv(r1, &(0x7f0000001c80)=[{&(0x7f0000000740)=""/200, 0xc8}], 0x20) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) 4.413559309s ago: executing program 6 (id=3355): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[]) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x13, 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000000)={&(0x7f0000000100)=[{0xfff2, 0xf10ac0bcbe721cb5, 0xfc, &(0x7f0000000800)="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"}, {0x0, 0x200, 0x5, &(0x7f00000001c0)="36cc74927c"}], 0x2}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000040)={[0x7df, 0x40, 0x0, 0xff, 0x10000000100006, 0x8001, 0x2, 0xb, 0x3, 0xffffffff, 0xfffffffffffffff, 0x9, 0x1, 0x20000000000fc, 0x2, 0x4], 0xb000, 0x40005}) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='auxv\x00') exit(0x1f52b4ba) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) r8 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x1) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x40000, 0x8010002}) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x3, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4.205666172s ago: executing program 7 (id=3356): sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000180)={@broadcast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "e100", 0x10, 0x11, 0x1, @local, @mcast2, {[], {0x4000, 0xe22, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x6, 0x100, @val=0x80}}}}}}}}, 0x0) 4.061591863s ago: executing program 7 (id=3357): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}}}, 0x10) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4400"], 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000854) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000880)={0x10, 0x42, 0x601}, 0x10}], 0x1}, 0x0) bind$tipc(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c40)={0x14, r4, 0x800, 0x0, 0x0, {0x2c}}, 0x14}}, 0x8841) r5 = syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r6) sendmsg$NLBL_CALIPSO_C_LISTALL(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4481}, 0x24004052) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r6) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f00000008c0)=[{0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x46c2}], 0x2, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x28, r5, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008881}, 0x0) 3.715147627s ago: executing program 6 (id=3360): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) 3.536430579s ago: executing program 6 (id=3362): syz_usb_connect(0x5, 0x48, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x8a, 0xec, 0xe2, 0x10, 0x6e0, 0xf115, 0xf956, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x2, 0x1, 0x6, 0x10, 0x1, "", [{{0x9, 0x4, 0x22, 0xd3, 0x0, 0xc3, 0x41, 0xcf, 0x9, [@uac_as]}}, {{0x9, 0x4, 0x81, 0x9, 0x3, 0x7, 0x75, 0x1b, 0xe6, [], [{{0x9, 0x5, 0xe, 0x3, 0x10, 0xff, 0x8, 0x7}}, {{0x9, 0x5, 0x9, 0x2, 0x8, 0x7, 0x1, 0x1}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x5, 0x6, 0x2}}]}}]}}]}}, &(0x7f0000001240)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x110, 0x0, 0xc, 0x5, 0x8, 0x5}, 0x0, 0x0}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x8000) keyctl$join(0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000084) 3.071655744s ago: executing program 5 (id=3363): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) write(r1, &(0x7f0000000040)="57abfb935bdcf8bb783a2ec45e59a05ff81c70", 0x13) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f40), 0x0, 0x4000004) socket(0x11, 0x800000002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0) read(r2, &(0x7f0000000640)=""/187, 0xbb) socket$nl_generic(0x10, 0x3, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f4e6ff08", 0xe) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x0, 0x9661}) r4 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) write(r4, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02", 0x15) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x19a1dc757009216e) 3.039626965s ago: executing program 7 (id=3364): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xe0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000740)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.898954457s ago: executing program 8 (id=3365): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000610a680000000000060000000000000095001b0000000000"], &(0x7f0000000080)='GPL\x00', 0xa, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB="180200000100000000000000000000008700000085000000c700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x40, 0x1, 0x7fffc, 0x4, {0x2}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x5}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) getsockopt$inet6_int(r0, 0x29, 0x49, 0x0, &(0x7f0000000780)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)={0x20, 0x19, 0x15, 0x0, 0x3, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x00\x00\x00\x00\x00\x02'}, @nested={0x4, 0x9}]}, 0x20}], 0x1, 0x0, 0x0, 0x40080}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6bcd41fd8"}}, 0x48}}, 0x410) sendmsg$can_bcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000820200"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0], 0x48}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000140)={0x4, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x50, 0x0, 0x5, 0xfffffffd}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0x36, 0x0, &(0x7f00000001c0)="c1dfb080cd21d398098ee68886ddfc30d80ce5ed88f6e9b83601f444ac505655d702cb0e4881a9fb5fbebe8f1e17d613fe24c2021a97", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.419322902s ago: executing program 8 (id=3366): mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.196401954s ago: executing program 8 (id=3367): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, 0x0, 0x6}, 0x18) 1.991063337s ago: executing program 8 (id=3368): syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000055bed40020000000000000003010902380002000000060904c700010e0101000300d009050a000000000000090400000101be2600090500000000000000080b878a"], 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, 0x0, 0x1, {0x1, 0x1, 0x4}, 0x1}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4048aecb, &(0x7f0000000080)={0x4, 0x0, [{0xdc3, 0x0, 0xfffffffffffffff9}, {0x3a4, 0x0, 0xffffffff}, {0x86d, 0x0, 0x4}, {0x35f, 0x0, 0x5}]}) sendto$inet6(r1, &(0x7f0000000280)='2', 0x1, 0x24010045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000400)='yeah', 0x4) shutdown(r1, 0x1) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x0, 0xffff, 0x6, 0x8, 0xc, 0x4, 0x4, {0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x1, 0x6, 0xf61, 0x400, 0x7fff}}, &(0x7f0000000500)=0xb0) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x403, 0xb8d8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x6, 0x10, 0x2, {0x8, 0xb, 0x1, 0x0, 0x1, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xff80, 0x7, 0x9, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xc, 0x2, 0x9, {0x8, 0x25, 0x1, 0x80, 0x31, 0xad, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0xfa, 0xbc, {0x8, 0x25, 0x1, 0x2, 0xfa4024f26d164786, 0x81, 0x9}}}}}}}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000540)=@assoc_id=r7, &(0x7f0000000580)=0x4) fsopen(&(0x7f0000000380)='nilfs2\x00', 0x1) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="000101", 0x3}], 0x1}, 0x4004) 1.529912732s ago: executing program 5 (id=3369): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) preadv(r0, &(0x7f00000010c0)=[{&(0x7f0000001600)=""/4095, 0xfff}], 0x1, 0x7, 0x401) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) memfd_create(0x0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000002c00)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x34, 0x66, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x7c56c988f0195595, 0x6071, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x9, 0x10000}]}}}}}}}, 0x0) 1.413107343s ago: executing program 5 (id=3370): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x188c1) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1}) 1.366994124s ago: executing program 6 (id=3371): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x1b, "d5ecc89b4e99b9da79b993cdaeb947f5412a6f26d5a28467b81643"}, &(0x7f0000000100)=0x23) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x205, 0x6, 0x0, 0x0, 0x10003, 0x41, 0x400200cc8, 0xffd, 0x4, 0x0, 0x3, 0x0, 0x2, 0x0, 0x6a, 0xfffffffffffffffb], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000280)={'\x00', 0xf, 0x66a, 0x9, 0x0, 0x1, 0x80a4000, 0xd000, '\x00', 0xd5ad}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.338759064s ago: executing program 5 (id=3372): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x74) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x800) 1.196030226s ago: executing program 1 (id=3373): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf0, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) 1.087069167s ago: executing program 5 (id=3374): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}}}, 0x10) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4400"], 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000854) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000880)={0x10, 0x42, 0x601}, 0x10}], 0x1}, 0x0) bind$tipc(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c40)={0x14, r4, 0x800, 0x0, 0x0, {0x2c}}, 0x14}}, 0x8841) r5 = syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r6) sendmsg$NLBL_CALIPSO_C_LISTALL(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4481}, 0x24004052) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r6) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f00000008c0)=[{0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x46c2}], 0x2, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x28, r5, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008881}, 0x0) 1.058251958s ago: executing program 1 (id=3375): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000400)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) 950.909359ms ago: executing program 1 (id=3376): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) close_range(r0, r1, 0x0) 675.169572ms ago: executing program 6 (id=3377): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000240)="800000800000210ee7decf7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 467.570394ms ago: executing program 6 (id=3378): r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d00193120e69ee517d38b0dbc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb99a2508d228c04fb0e754914", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380)='syz_tun\x00', 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_enter(0xffffffffffffffff, 0x8af, 0xc0b8, 0x0, &(0x7f0000000100)={[0x6]}, 0x8) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x7) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r3, 0x10000) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000040)="e2", 0x1}], 0x1) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000001740)={{0x2, 0x100, 0x8, 0x5, 0x7, 0x5}, 0x2cf, [0x5, 0xfd1, 0x0, 0xfffffffc, 0x3, 0x2, 0xd, 0x400000, 0x1ff, 0x6, 0xfff, 0x800, 0xa, 0x5, 0x2, 0x8, 0x7ff, 0x200, 0x8, 0x6, 0xbc10, 0x9, 0x3, 0x3, 0x1, 0x8d1, 0x4, 0x3, 0x0, 0xe9d4, 0x4, 0x0, 0x4, 0x63a, 0x2, 0xd, 0x8, 0x8a800, 0x80, 0x6, 0xa, 0x1b0, 0x0, 0x8, 0xfffff9b7, 0xff, 0x7, 0x2, 0xfa, 0x3, 0x5e2, 0xffffffc0, 0x6, 0x2, 0xfffffffc, 0x6ee0, 0xf, 0x5, 0x16c9fc0a, 0x7, 0x27d38e92, 0x5, 0x2, 0x1, 0xf2, 0x4, 0x5, 0x7, 0x9, 0x6, 0xfc1, 0xe8, 0x0, 0x1, 0x2, 0x1, 0x1, 0x9, 0x1, 0xffffc56c, 0x6, 0x63, 0x6, 0x80, 0x3, 0x152, 0x52, 0x2, 0x3, 0xcf0, 0x1, 0x5f7d7f0b, 0x3, 0x4, 0x1, 0x1, 0x3b, 0x5, 0x5, 0x0, 0x5, 0x913, 0x4805d5d9, 0x3, 0x8000000, 0x58, 0x4, 0x1ff, 0x6, 0x5, 0x2, 0x2, 0x1, 0x6, 0x5, 0x400, 0x10001, 0x800, 0x200, 0x476b, 0xfffffc00, 0x7fff, 0xee, 0x8, 0x9, 0x8, 0x1, 0x9, 0x2, 0xffff0001, 0x80000000, 0x1, 0x0, 0x3, 0x3, 0x7, 0x5, 0x3, 0xb05, 0x9, 0x7, 0x8, 0x2, 0x7fff, 0x2, 0x0, 0x2, 0x5, 0x9, 0xc5e, 0xa8, 0xb, 0x4, 0x2fd4, 0x1, 0x10001, 0x6, 0x0, 0x7fff, 0x1, 0x8001, 0x5, 0x3a, 0x5, 0x2b, 0x4, 0x1, 0x10000, 0xca7a, 0x80000000, 0xb, 0x3, 0x1, 0xcb, 0x2, 0xfb59, 0x8001, 0x7e9, 0x8, 0x0, 0x7ff, 0x0, 0xd5, 0x3, 0xffff, 0x0, 0xffffff00, 0x2, 0x7, 0x8, 0x4, 0x432, 0x7, 0x9, 0x5, 0x1, 0xd, 0x2, 0x80000001, 0x6, 0x400, 0x5, 0x1, 0x6, 0xf6d3, 0x7, 0x4f, 0x2, 0x1, 0x10000, 0x43, 0x3b, 0xb1, 0x0, 0xff, 0x385, 0x800, 0x400, 0x0, 0x2, 0xe, 0x896, 0x7d, 0xe, 0x1, 0x80000001, 0x0, 0x1, 0x6, 0xffffffff, 0xc, 0x10000, 0xfffffe28, 0xfffffff5, 0x4, 0x5, 0x8, 0x8, 0x0, 0x546b, 0x7, 0x7, 0x1, 0xcd, 0x7fffffff, 0xffffff80, 0x5, 0x18, 0x0, 0x9, 0x9, 0x8, 0xfba4, 0x6, 0xd, 0x80000000, 0x9, 0x92, 0x4, 0xf, 0x2, 0xda, 0x1, 0x3, 0x7fff, 0x0, 0x131, 0x0, 0xfffffffa, 0x1, 0x1, 0x7, 0x1, 0x3, 0x6, 0x8, 0xff, 0x7, 0x7, 0x8, 0x1a5, 0x7, 0x80000000, 0xfffffff7, 0x4, 0x8f, 0x10000, 0x100, 0x80, 0x1, 0xb42, 0x795, 0x9, 0x2, 0x5, 0x69b8, 0x3, 0x401, 0x101, 0x7, 0x8, 0x6, 0x5, 0x5f, 0x9, 0x2, 0xd62, 0x1cb800, 0xaf8, 0xc65, 0x100, 0x5, 0x200, 0x3, 0x3, 0x1, 0x6, 0x401, 0x3, 0x10001, 0x8, 0x6, 0x7, 0x2, 0x3, 0x389429be, 0x401, 0x1, 0x6, 0x4, 0x7, 0x4, 0xfff, 0xa, 0xcaaf, 0x5, 0x3, 0x8, 0x0, 0x3, 0x1, 0x8, 0x5, 0x5, 0x80000000, 0x0, 0x5, 0xa7f, 0xe, 0x7, 0x4, 0x80, 0x7, 0x3, 0x3, 0x7, 0x1ad, 0x2, 0x0, 0x5, 0x10, 0x6, 0x10, 0x4, 0xf6, 0x384, 0x9, 0x5, 0x4, 0x6, 0x10001, 0x0, 0x1ff, 0x1, 0x9, 0x200, 0x3247, 0x6, 0xfffffff9, 0x5, 0x1, 0xda5, 0x1, 0x2, 0x6, 0xd, 0x4, 0x61de, 0x8, 0x21b, 0x80000000, 0x8, 0x18a7, 0x1ff, 0x7, 0x0, 0x3, 0x400, 0x1, 0x1, 0xaa, 0xa, 0xc, 0x3, 0x5, 0x3ff, 0x6, 0xf, 0x7f, 0x8, 0x4, 0x3, 0x40, 0xfffffffd, 0x8, 0x7c, 0x9, 0x0, 0x8, 0x400, 0xee, 0xffffffff, 0x1, 0x6, 0x6, 0x0, 0x7, 0x8, 0x8, 0x6, 0x80, 0x9, 0x0, 0x2, 0x6, 0xe08, 0xa, 0x96d1, 0x5, 0x6, 0x3, 0xb, 0x3, 0x6, 0x8, 0x5, 0x7f, 0x101, 0x4b, 0xff, 0x0, 0x50f, 0x5b, 0x0, 0x6, 0x1e4, 0x2b7, 0x1, 0x0, 0x13, 0x101, 0xd, 0x8, 0x8, 0x9a, 0x8, 0x401, 0x100, 0x2, 0x9, 0x371f, 0x5, 0x1, 0x7, 0xa93, 0x1, 0x7, 0x8, 0x4, 0x6, 0x7, 0x1, 0x2, 0x3, 0x4, 0x101, 0x10001, 0x10, 0x7f, 0x9, 0x6, 0xd, 0x9, 0xb36, 0xf0, 0x5, 0x5, 0x2, 0x10, 0x8b7, 0x2, 0x9, 0x6, 0x5, 0x9, 0x2, 0x8, 0x4b, 0x4df4cf30, 0x7fffffff, 0x0, 0x5, 0xfffeffff, 0x5, 0x9, 0x591bce37, 0x0, 0x1ff00, 0x3285, 0x6, 0x4000000, 0x80000001, 0xfa7, 0xb8, 0x5f89a940, 0x20, 0xe59f, 0x46, 0x5, 0x1f, 0x1, 0x40, 0x80000000, 0x7, 0x1, 0x8, 0x3, 0xffff2cb8, 0x0, 0x0, 0x9, 0x80000000, 0x0, 0x3, 0x0, 0x6, 0x70000, 0x71e1, 0xffff, 0xc9e, 0x7fff, 0xd, 0x5, 0x1, 0x4e5, 0x7c5fdc4c, 0x5, 0x48d, 0x7, 0x4, 0xfffffffb, 0x700, 0x1, 0x4, 0xfffffffc, 0x4, 0x3, 0x9, 0x9, 0x7, 0x5, 0x7ff, 0x0, 0x7f, 0x4, 0x200, 0x4, 0xb, 0x3, 0x1, 0x4ab, 0xfff, 0x1, 0x4, 0x92dd, 0x0, 0x0, 0xffff, 0x0, 0xed60, 0x586, 0x4, 0x3000000, 0x6, 0x6, 0x1, 0x3, 0x3, 0x2e8, 0xab7a, 0x7f, 0x3, 0x8, 0xf, 0x5f, 0x6, 0x4000, 0x1, 0x9, 0x1, 0x9, 0x1, 0x80000000, 0xa, 0x0, 0x101, 0x9, 0x7, 0x400, 0x10, 0xfffffffd, 0x2, 0x8, 0x6, 0x8, 0x1, 0x6, 0x7, 0xffffc000, 0xb54, 0x0, 0x2, 0x4, 0x608, 0x3, 0x8, 0x6, 0x3a, 0x1, 0x0, 0x2, 0x4, 0x0, 0x7, 0x3f7d3e9f, 0x5bca, 0x401, 0x10, 0x8, 0x1, 0x6, 0x9, 0x7, 0x2, 0x4e, 0x1000, 0xd419, 0x5, 0xc0, 0x1, 0x9, 0x4, 0x7f, 0x7, 0x6, 0x3, 0x7, 0x0, 0x12820a69, 0xff, 0x3, 0x10, 0xffff, 0x8000800, 0x7, 0x3, 0x2, 0x9, 0x9, 0x1, 0x10000, 0x2, 0x1, 0x0, 0xfffffffd, 0x101, 0x0, 0x9, 0x7c, 0x1, 0x7, 0x80000001, 0x2, 0x5bcb810c, 0x5, 0x1d65, 0x3, 0x6, 0x2, 0x2, 0x800, 0x2, 0x8, 0x2384, 0x400, 0x1, 0x6, 0x2ae, 0x7, 0x2, 0x8, 0x4, 0x8, 0xe, 0x80, 0x10000, 0x5, 0x6, 0x5, 0x40, 0x8, 0x5, 0x2, 0x4, 0x2, 0x9, 0x4, 0x4, 0xffffff9d, 0x400, 0x2, 0xffffffff, 0x7, 0x401, 0x7, 0x40, 0x9, 0x9, 0xffffff80, 0xe, 0x9, 0x9, 0x401, 0x99e, 0x3, 0x3, 0x81, 0x101, 0x80000001, 0x0, 0x7, 0xfff, 0x5, 0x8000, 0x0, 0x7, 0x0, 0x7, 0x5, 0x1, 0x0, 0xff, 0x6, 0xd, 0x3, 0x0, 0x6, 0x2, 0x7, 0x0, 0x7, 0x3, 0x6, 0x8, 0x9, 0x8, 0x8000, 0xf, 0xfe2, 0x6, 0x26b1, 0x0, 0x7, 0x4, 0x200, 0xb, 0xc8, 0x4, 0x7fffffff, 0x5, 0x5668, 0x6, 0x8001, 0xfffff466, 0x6, 0x1, 0x0, 0xb, 0x400, 0x200, 0x10001, 0x3a8, 0x8, 0x2, 0x8, 0x3, 0x9, 0x5, 0x3, 0x7ff, 0x79, 0x2, 0x80, 0x7, 0x80, 0x6, 0x10, 0x478, 0x8, 0x3, 0x80000000, 0x6, 0x3, 0x0, 0x6, 0x7, 0x881d, 0xf8, 0xebe6, 0x7f, 0x7fff, 0x7ff, 0x4, 0x7, 0x800, 0x17, 0x0, 0x3ff, 0xffff, 0x9, 0xfff, 0x10, 0x6, 0x1, 0xffff, 0x5d15f75e, 0x9, 0xfff, 0x4, 0x2, 0xfffffffd, 0x484, 0x400, 0x3, 0x7, 0x4, 0x0, 0x9, 0x3, 0x8, 0x8, 0x2, 0x8, 0x5, 0x1, 0x3, 0x1, 0x7fffffff, 0x6, 0x9000000, 0x200, 0x2, 0x1, 0x46c8, 0x6, 0x8000, 0x1, 0xf1e, 0xb416, 0xb6b, 0x7, 0x1, 0x5, 0x3, 0x8, 0xffff, 0x7, 0x6, 0x1, 0x9ec, 0xc, 0x81, 0xc7e, 0x1, 0x2a4, 0x3, 0x8, 0x8, 0x0, 0x1, 0x9, 0x8dd6, 0x80000001, 0x0, 0xb50, 0x3, 0x200, 0x7, 0x8, 0x9, 0x1, 0x1, 0x3d, 0x9, 0x2, 0x9, 0x0, 0x4, 0x8, 0x7, 0x8, 0x2, 0x5598, 0xffff, 0xe57, 0xfffff016, 0xfff, 0x6d028a56, 0xff, 0x7, 0x6, 0x4, 0x6, 0x383e, 0x8, 0x1, 0x5, 0x7ff, 0x9, 0x1, 0xc0cd, 0x8, 0x10001, 0x4, 0x3, 0x7, 0x238, 0xf8f4, 0xd, 0x22, 0x3, 0x6, 0x400, 0x3, 0x7a4, 0x5, 0x3, 0x3, 0x4, 0x4, 0x0, 0x7b, 0x9, 0x5, 0x9, 0x8, 0x1, 0x3, 0xfff, 0x31a4, 0xfff, 0x3, 0x5, 0x7f, 0x8, 0xdf, 0x3, 0x9, 0x5, 0x79f, 0x7, 0x4, 0x4, 0xf5, 0xffffffff, 0x3, 0x0, 0x5, 0x0, 0x5, 0x200, 0x2, 0x1fc00, 0x2, 0x10001, 0xfffff800, 0xfffffffc, 0xe, 0x6, 0x101, 0x4, 0x9, 0x5, 0x8, 0x8000, 0x5, 0xc22, 0x31, 0x6, 0x5, 0x1000, 0x80000001, 0x9, 0x279, 0x6, 0x0, 0xfffffffa, 0x3, 0x0, 0x2, 0xa, 0xbab, 0x1, 0x8c16]}) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000400)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="d13bbeccc2722b9c0facc14161c7b2c89cee4c1a55a96d272ac395e09ee5a27b35aea2d7c6e985ae507fd55c9f7b"], 0x0, 0x0}) sendfile(r1, r3, 0x0, 0x7ffff004) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, 0x140f, 0x810, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040084}, 0x8000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) recvmsg$kcm(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000003940)=""/4081, 0xff1}, {&(0x7f0000000140)=""/81, 0x51}, {&(0x7f0000000c00)=""/4109, 0x100d}, {&(0x7f00000001c0)=""/50, 0x32}], 0x4}, 0x40000100) socket$nl_netfilter(0x10, 0x3, 0xc) 381.104985ms ago: executing program 7 (id=3379): syz_open_dev$video(0x0, 0x89f, 0x300) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101343) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x4}}, 0x20) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x8000000) r2 = semget$private(0x0, 0x4000, 0x0) semtimedop(r2, &(0x7f0000000540)=[{0x2, 0x42, 0x1000}, {0x4, 0xd6, 0x800}], 0x2, 0x0) unshare(0x8000000) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) 215.603977ms ago: executing program 1 (id=3380): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0xa, 0x4621, 0xfffffffc, @remote, 0xb543}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x18, 0x1, 0x24, 0x81}}], 0x18}, 0x4000001) 214.924388ms ago: executing program 5 (id=3381): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000240), 0x0) r1 = socket$inet(0x2b, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) utimensat(r1, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={{}, {0x0, 0xea60}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000100)={0x2, 'bridge0\x00', {0x3}, 0x85}) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/191, 0xbf}], 0x1, 0x55, 0xfffffffc) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[0x0], 0x0, 0x0, 0x0, 0x1}) r9 = socket$nl_rdma(0x10, 0x3, 0x14) r10 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e24, 0x401, @dev={0xfe, 0x80, '\x00', 0x14}, 0xbf}, 0x1c) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="100000000d1435010000000000100000"], 0x10}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), 0x0, &(0x7f0000000100), 0x0, 0x0, 0x7, 0x0, r8}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400) 71.166059ms ago: executing program 1 (id=3382): syz_emit_ethernet(0x2e, &(0x7f0000000240)={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x2, 0x0, @void}}}}}}}, 0x0) 0s ago: executing program 1 (id=3383): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) kernel console output (not intermixed with test programs): 0] type 2 family 0 port 6081 - 0 [ 876.603341][ T9538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.087839][ T9538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 878.233716][T14714] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2817'. [ 878.243937][ T5139] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 879.029973][T14721] netlink: 292 bytes leftover after parsing attributes in process `syz.5.2818'. [ 879.160896][ T5139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.185143][ T5139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.192783][ T9538] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 879.534443][T14732] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.2820'. [ 880.488264][T14743] netlink: 436 bytes leftover after parsing attributes in process `syz.8.2824'. [ 880.497858][T14743] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2824'. [ 881.830924][T14740] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2825'. [ 881.879682][T14740] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2825'. [ 882.045832][T14756] device syzkaller0 entered promiscuous mode [ 882.055680][T14763] device syzkaller0 entered promiscuous mode [ 882.100804][T14774] netlink: 292 bytes leftover after parsing attributes in process `syz.5.2829'. [ 882.786643][T14748] device syzkaller0 entered promiscuous mode [ 882.861021][T14775] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2830'. [ 884.521808][T14806] netlink: 436 bytes leftover after parsing attributes in process `syz.7.2837'. [ 884.531264][T14806] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2837'. [ 884.984269][T14810] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2839'. [ 884.993358][T14810] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2839'. [ 886.435637][T14804] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 887.495912][T14823] netlink: 292 bytes leftover after parsing attributes in process `syz.8.2841'. [ 888.967341][T14824] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2842'. [ 889.229887][T14829] device syzkaller0 entered promiscuous mode [ 889.707902][T14834] device syzkaller0 entered promiscuous mode [ 891.933732][T14859] netlink: 436 bytes leftover after parsing attributes in process `syz.1.2850'. [ 891.943258][T14859] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2850'. [ 892.438395][T14862] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2852'. [ 894.031443][T14869] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2854'. [ 895.033695][T14879] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2855'. [ 895.162123][T14887] netlink: 292 bytes leftover after parsing attributes in process `syz.8.2856'. [ 895.422167][T14891] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 896.105347][T14891] tipc: Enabled bearer , priority 0 [ 896.183092][T14889] tipc: Disabling bearer [ 896.268143][T14906] netlink: 436 bytes leftover after parsing attributes in process `syz.1.2864'. [ 896.277671][T14906] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2864'. [ 898.015588][T14918] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2866'. [ 900.051284][T14920] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2867'. [ 900.066268][T14921] device syzkaller0 entered promiscuous mode [ 900.297014][T14930] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2871'. [ 900.344273][T10649] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 901.277763][T14937] netlink: 292 bytes leftover after parsing attributes in process `syz.7.2872'. [ 901.604569][T10649] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 902.174297][T10649] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.213450][T10649] usb 9-1: Product: syz [ 902.258894][T10649] usb 9-1: Manufacturer: syz [ 902.264012][T10649] usb 9-1: SerialNumber: syz [ 902.294153][T14450] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 902.326117][T10649] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 902.408524][T14946] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 902.425355][T14946] tipc: Enabled bearer , priority 0 [ 902.441390][T14945] tipc: Disabling bearer [ 902.544749][T14450] usb 2-1: Using ep0 maxpacket: 32 [ 902.664578][T14450] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 902.779163][T14950] netlink: 436 bytes leftover after parsing attributes in process `syz.7.2878'. [ 902.788640][T14950] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2878'. [ 903.182371][ T4397] usb 9-1: USB disconnect, device number 9 [ 903.184650][T10649] usb 9-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 903.189050][T14450] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 903.243621][T14450] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 903.248432][ T4397] usb 9-1: ath9k_htc: USB layer deinitialized [ 903.263809][T14450] usb 2-1: Product: syz [ 903.292012][T14450] usb 2-1: Manufacturer: syz [ 903.322474][T14450] usb 2-1: SerialNumber: syz [ 903.407541][T14450] usb 2-1: config 0 descriptor?? [ 903.475272][T14939] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 903.495064][T14961] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2880'. [ 903.683564][T14958] device syzkaller0 entered promiscuous mode [ 905.066176][T14450] usb 2-1: USB disconnect, device number 8 [ 905.636845][ T4804] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 906.557781][ T4804] usb 7-1: Using ep0 maxpacket: 16 [ 906.614337][T14450] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 906.629046][T14987] netlink: 292 bytes leftover after parsing attributes in process `syz.5.2886'. [ 906.674410][ T4804] usb 7-1: config index 0 descriptor too short (expected 64548, got 36) [ 906.682831][ T4804] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 906.704148][ T4804] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 906.724131][ T4804] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 906.744165][ T4804] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 906.764230][ T4804] usb 7-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 906.773342][ T4804] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.798213][ T4804] usb 7-1: config 0 descriptor?? [ 906.895957][T14450] usb 2-1: Using ep0 maxpacket: 32 [ 906.974189][ T4397] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 907.054322][T14450] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 907.066090][T14450] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.078018][T14450] usb 2-1: config 0 descriptor?? [ 907.117573][T14450] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 907.254302][ T4397] usb 8-1: Using ep0 maxpacket: 8 [ 907.276125][ T4804] samsung 0003:0419:0600.0003: unknown main item tag 0x0 [ 907.284289][ T4804] samsung 0003:0419:0600.0003: unknown main item tag 0x0 [ 907.291399][ T4804] samsung 0003:0419:0600.0003: unknown main item tag 0x0 [ 907.299059][ T4804] samsung 0003:0419:0600.0003: unknown main item tag 0x0 [ 907.306250][ T4804] samsung 0003:0419:0600.0003: unknown main item tag 0x0 [ 907.313719][ T4804] samsung 0003:0419:0600.0003: unknown main item tag 0x0 [ 907.322074][ T4804] samsung 0003:0419:0600.0003: unknown main item tag 0x0 [ 907.330243][ T4804] samsung 0003:0419:0600.0003: unknown main item tag 0x0 [ 907.338066][ T4804] samsung 0003:0419:0600.0003: unknown main item tag 0x0 [ 907.345661][ T4804] samsung 0003:0419:0600.0003: unknown main item tag 0x0 [ 907.353401][ T4804] samsung 0003:0419:0600.0003: unknown main item tag 0x0 [ 907.361254][ T4804] samsung 0003:0419:0600.0003: unknown main item tag 0x0 [ 907.368879][ T4804] samsung 0003:0419:0600.0003: unknown main item tag 0x0 [ 907.377000][ T4804] samsung 0003:0419:0600.0003: unknown main item tag 0x0 [ 907.384611][ T4804] samsung 0003:0419:0600.0003: unknown main item tag 0x0 [ 907.391850][ T4804] samsung 0003:0419:0600.0003: item fetching failed at offset 26/41 [ 907.400730][ T4804] samsung 0003:0419:0600.0003: parse failed [ 907.407860][ T4804] samsung: probe of 0003:0419:0600.0003 failed with error -22 [ 907.438320][ T4397] usb 8-1: unable to get BOS descriptor or descriptor too short [ 907.501050][ T4804] usb 7-1: USB disconnect, device number 9 [ 907.564367][ T4397] usb 8-1: config 8 has an invalid interface number: 45 but max is 0 [ 907.572704][ T4397] usb 8-1: config 8 has no interface number 0 [ 907.587210][ T4397] usb 8-1: config 8 interface 45 has no altsetting 0 [ 907.754177][ T4398] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 907.774531][ T4397] usb 8-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=51.e7 [ 907.783737][ T4397] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.816753][ T4397] usb 8-1: Product: syz [ 907.821011][ T4397] usb 8-1: Manufacturer: syz [ 907.826510][ T4397] usb 8-1: SerialNumber: syz [ 908.177640][ T4398] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.207470][ T4397] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 908.216389][ T4398] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.244686][ T4397] gspca_sn9c2028: read1 error -71 [ 908.265084][ T4397] gspca_sn9c2028: read1 error -71 [ 908.300530][ T4397] gspca_sn9c2028: read1 error -71 [ 908.316721][ T4397] sn9c2028: probe of 8-1:8.45 failed with error -71 [ 908.327914][ T4398] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 908.348019][ T4398] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 908.381121][ T4397] usb 8-1: USB disconnect, device number 12 [ 908.394270][ T4398] usb 6-1: Manufacturer: syz [ 908.430019][ T4398] usb 6-1: config 0 descriptor?? [ 909.493959][T14450] gspca_vc032x: reg_w err -71 [ 909.510038][T14450] gspca_vc032x: I2c Bus Busy Wait 00 [ 909.530348][T14450] gspca_vc032x: I2c Bus Busy Wait 00 [ 909.537631][T14450] gspca_vc032x: I2c Bus Busy Wait 00 [ 909.554720][T14450] gspca_vc032x: I2c Bus Busy Wait 00 [ 909.560081][T14450] gspca_vc032x: I2c Bus Busy Wait 00 [ 909.574593][T14450] gspca_vc032x: I2c Bus Busy Wait 00 [ 909.580755][T14450] gspca_vc032x: I2c Bus Busy Wait 00 [ 909.586889][T14450] gspca_vc032x: I2c Bus Busy Wait 00 [ 909.592233][T14450] gspca_vc032x: I2c Bus Busy Wait 00 [ 909.598158][T14450] gspca_vc032x: I2c Bus Busy Wait 00 [ 909.603497][T14450] gspca_vc032x: I2c Bus Busy Wait 00 [ 909.621220][T14450] gspca_vc032x: I2c Bus Busy Wait 00 [ 909.628185][T14450] gspca_vc032x: I2c Bus Busy Wait 00 [ 909.633703][T14450] gspca_vc032x: I2c Bus Busy Wait 00 [ 909.645469][T14450] gspca_vc032x: I2c Bus Busy Wait 00 [ 909.650873][T14450] gspca_vc032x: I2c Bus Busy Wait 00 [ 909.658951][T14450] gspca_vc032x: I2c Bus Busy Wait 00 [ 909.666035][T14450] gspca_vc032x: I2c Bus Busy Wait 00 [ 909.671350][T14450] gspca_vc032x: Unknown sensor... [ 909.679148][T14450] vc032x: probe of 2-1:0.0 failed with error -22 [ 909.689670][T14450] usb 2-1: USB disconnect, device number 9 [ 910.127706][T15026] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2904'. [ 910.224329][ T4398] uclogic 0003:256C:006D.0004: v1 buttonpad probing failed: -71 [ 910.245286][ T4398] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 910.256825][ T4398] uclogic: probe of 0003:256C:006D.0004 failed with error -71 [ 910.305945][ T4398] usb 6-1: USB disconnect, device number 13 [ 910.322758][T15035] device syzkaller0 entered promiscuous mode [ 910.332589][T15035] tipc: Started in network mode [ 910.342537][T15035] tipc: Node identity d6d15a4e1a8c, cluster identity 4711 [ 910.352773][T15035] tipc: Enabled bearer , priority 0 [ 910.365330][T15034] tipc: Resetting bearer [ 910.424825][T15034] tipc: Disabling bearer [ 912.084277][T14450] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 912.452217][T15063] netlink: 436 bytes leftover after parsing attributes in process `syz.8.2915'. [ 912.461676][T15063] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2915'. [ 912.984852][T14450] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 912.993983][T14450] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.015905][T14450] usb 2-1: config 0 descriptor?? [ 913.372540][T15076] device syzkaller0 entered promiscuous mode [ 913.496232][T15078] device syzkaller0 entered promiscuous mode [ 913.764743][T14450] usb 2-1: Cannot set autoneg [ 913.770286][T14450] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 914.524444][T14450] usb 2-1: USB disconnect, device number 10 [ 914.716436][ T4358] udevd[4358]: setting mode of /dev/bus/usb/002/010 to 020664 failed: No such file or directory [ 915.048429][ T4358] udevd[4358]: setting owner of /dev/bus/usb/002/010 to uid=0, gid=0 failed: No such file or directory [ 915.964663][T15121] netlink: 436 bytes leftover after parsing attributes in process `syz.6.2929'. [ 915.974090][T15121] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2929'. [ 916.533213][T15130] device syzkaller0 entered promiscuous mode [ 916.946723][T15135] device syzkaller0 entered promiscuous mode [ 919.094392][ T23] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 919.314205][ T4804] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 919.494194][ T23] usb 7-1: unable to get BOS descriptor or descriptor too short [ 919.574518][ T23] usb 7-1: config 129 has an invalid interface number: 135 but max is 0 [ 919.593236][ T23] usb 7-1: config 129 has an invalid interface number: 5 but max is 0 [ 919.603741][ T23] usb 7-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 919.641283][ T23] usb 7-1: config 129 has no interface number 0 [ 919.657424][ T23] usb 7-1: config 129 has no interface number 1 [ 919.663967][ T23] usb 7-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 919.682395][ T4804] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 919.693735][ T4804] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 919.704068][ T23] usb 7-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 919.715618][ T23] usb 7-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 919.732170][ T23] usb 7-1: config 129 interface 135 has no altsetting 0 [ 919.740226][ T23] usb 7-1: config 129 interface 5 has no altsetting 0 [ 919.757196][T15170] device syzkaller0 entered promiscuous mode [ 919.794260][ T4804] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 919.803693][ T4804] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 919.812525][ T4804] usb 9-1: Manufacturer: syz [ 919.830792][ T4804] usb 9-1: config 0 descriptor?? [ 919.984251][ T23] usb 7-1: string descriptor 0 read error: -22 [ 919.990574][ T23] usb 7-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 920.000162][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.048109][ T23] usb 7-1: MIDIStreaming interface descriptor not found [ 920.272215][ T4398] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 920.795292][ T4804] uclogic 0003:256C:006D.0005: interface is invalid, ignoring [ 920.999026][ T4804] usb 9-1: USB disconnect, device number 10 [ 921.051422][T15182] device syzkaller0 entered promiscuous mode [ 921.317696][T14716] usb 7-1: USB disconnect, device number 10 [ 921.374527][ T4398] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 921.394383][ T4398] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.424160][ T4398] usb 6-1: config 0 descriptor?? [ 921.482447][T15191] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2955'. [ 921.502345][T15191] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2955'. [ 921.544247][ T4804] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 921.914128][ T4804] usb 8-1: Using ep0 maxpacket: 32 [ 922.034824][ T4804] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 922.042993][ T4804] usb 8-1: config 0 has no interface number 0 [ 922.096578][ T4804] usb 8-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 922.124213][ T4398] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 922.134161][ T4804] usb 8-1: config 0 interface 89 has no altsetting 0 [ 922.146730][ T4398] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 922.187077][ T4398] [drm:udl_init] *ERROR* Selecting channel failed [ 922.194835][T15209] device syzkaller0 entered promiscuous mode [ 922.228988][ T4398] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2 [ 922.236863][ T4398] [drm] Initialized udl on minor 2 [ 922.274304][ T4398] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 922.294369][ T4804] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 922.303661][ T4804] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.313605][ T4398] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 922.330720][ T4398] usb 6-1: USB disconnect, device number 14 [ 922.345176][ T4397] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 922.352442][ T4804] usb 8-1: Product: syz [ 922.370822][ T4397] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 922.377628][ T4804] usb 8-1: Manufacturer: syz [ 922.386413][ T4397] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 922.409415][ T4804] usb 8-1: SerialNumber: syz [ 922.470708][ T4804] usb 8-1: config 0 descriptor?? [ 922.517316][ T4804] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 922.697728][ T4804] em28xx 8-1:0.89: Video interface 89 found: [ 924.120021][T15229] device syzkaller0 entered promiscuous mode [ 924.264290][ T4804] em28xx 8-1:0.89: unknown em28xx chip ID (0) [ 924.504191][T14716] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 925.104394][T14716] usb 6-1: unable to get BOS descriptor or descriptor too short [ 925.198929][T14716] usb 6-1: config 129 has an invalid interface number: 135 but max is 0 [ 925.210186][T14716] usb 6-1: config 129 has an invalid interface number: 5 but max is 0 [ 925.219412][T14716] usb 6-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 925.234251][T14716] usb 6-1: config 129 has no interface number 0 [ 925.240660][T14716] usb 6-1: config 129 has no interface number 1 [ 925.257727][T14716] usb 6-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 925.271801][T14716] usb 6-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 925.418434][T15251] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2971'. [ 926.195634][T15253] device syzkaller0 entered promiscuous mode [ 926.212142][T15253] tipc: Enabled bearer , priority 0 [ 926.608424][ T4804] em28xx 8-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 926.828983][T14716] usb 6-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 927.266919][ T4804] em28xx 8-1:0.89: board has no eeprom [ 927.272605][T14716] usb 6-1: config 129 interface 135 has no altsetting 0 [ 927.280213][T14716] usb 6-1: config 129 interface 5 has no altsetting 0 [ 927.301586][T15252] tipc: Resetting bearer [ 927.324408][T14716] usb 6-1: string descriptor 0 read error: -71 [ 927.330875][T14716] usb 6-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 927.349819][T14716] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.374114][ T4804] em28xx 8-1:0.89: Identified as Terratec Grabby (card=67) [ 927.384338][T14716] usb 6-1: can't set config #129, error -71 [ 927.391454][ T4804] em28xx 8-1:0.89: analog set to bulk mode. [ 927.398582][T14716] usb 6-1: USB disconnect, device number 15 [ 927.421635][ T21] em28xx 8-1:0.89: Registering V4L2 extension [ 927.444196][ T4804] usb 8-1: USB disconnect, device number 13 [ 927.468238][ T4804] em28xx 8-1:0.89: Disconnecting em28xx [ 927.495380][T15252] tipc: Disabling bearer [ 927.549454][ T4249] tipc: Node number set to 3577556063 [ 927.579156][T15265] device syzkaller0 entered promiscuous mode [ 927.598039][ T21] em28xx 8-1:0.89: Config register raw data: 0xffffffed [ 927.625176][ T21] em28xx 8-1:0.89: AC97 chip type couldn't be determined [ 927.660889][ T21] em28xx 8-1:0.89: No AC97 audio processor [ 927.795869][ T21] usb 8-1: Decoder not found [ 927.815579][ T21] em28xx 8-1:0.89: failed to create media graph [ 927.842067][ T21] em28xx 8-1:0.89: V4L2 device video103 deregistered [ 927.873708][ T21] em28xx 8-1:0.89: Registering snapshot button... [ 927.903163][ T21] input: em28xx snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.89/input/input10 [ 927.974846][T15279] netlink: 436 bytes leftover after parsing attributes in process `syz.8.2978'. [ 927.984169][T15279] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2978'. [ 928.371994][ T21] em28xx 8-1:0.89: Remote control support is not available for this card. [ 928.422058][ T4804] em28xx 8-1:0.89: Closing input extension [ 928.433098][ T4804] em28xx 8-1:0.89: Deregistering snapshot button [ 928.904648][ T4804] em28xx 8-1:0.89: Freeing device [ 929.694201][ T4804] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 930.774402][ T4804] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 930.794221][ T4804] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 930.891074][T15308] device syzkaller0 entered promiscuous mode [ 930.994588][ T4804] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 931.005221][ T4804] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.014547][T15309] device syzkaller0 entered promiscuous mode [ 931.015726][ T4804] usb 8-1: Product: syz [ 931.025581][ T4804] usb 8-1: Manufacturer: syz [ 931.030509][ T4804] usb 8-1: SerialNumber: syz [ 931.089654][T15315] netlink: 436 bytes leftover after parsing attributes in process `syz.1.2990'. [ 931.099158][T15315] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2990'. [ 931.207265][T15309] tipc: Enabled bearer , priority 0 [ 931.213094][ T4804] cdc_mbim 8-1:1.0: skipping garbage [ 931.293211][T15307] tipc: Resetting bearer [ 931.355960][T15307] tipc: Disabling bearer [ 931.366916][T15294] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 931.664131][ T4398] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 931.676204][T15322] kvm: pic: level sensitive irq not supported [ 931.676460][T15322] kvm: pic: non byte read [ 931.687751][T15322] kvm: pic: level sensitive irq not supported [ 931.687828][T15322] kvm: pic: non byte read [ 931.778635][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.785050][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.812127][T15328] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2995'. [ 932.039497][T15294] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 932.094757][ T4804] cdc_mbim 8-1:1.0: setting tx_max = 16384 [ 932.139347][ T4804] cdc_mbim 8-1:1.0: cdc-wdm0: USB WDM device [ 932.537715][T15334] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 932.554126][ T4398] usb 9-1: Using ep0 maxpacket: 8 [ 933.054346][ T4398] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 933.762507][T15328] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.770110][T15328] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.782662][ T4398] usb 9-1: config 179 has no interface number 0 [ 933.789819][ T4398] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 933.800996][ T4398] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 933.812311][ T4398] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 933.823542][ T4398] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 933.835033][ T4398] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 933.848370][ T4398] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 933.857846][ T4398] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.904892][T15311] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 933.952054][ T4398] usb 9-1: USB disconnect, device number 11 [ 933.974140][ C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 934.034198][ T21] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 934.554431][ T21] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 934.563560][ T21] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.573961][ T21] usb 7-1: Product: syz [ 934.578436][ T21] usb 7-1: Manufacturer: syz [ 934.583165][ T21] usb 7-1: SerialNumber: syz [ 934.656821][T15328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 934.695056][T15328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 935.064591][ T21] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 935.200304][T15328] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.209655][T15328] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.219280][T15328] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.228621][T15328] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.368069][T15337] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2997'. [ 935.377742][ T4804] cdc_mbim 8-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.7-1, CDC MBIM, 62:f7:f2:06:71:ec [ 935.393175][T15351] device syzkaller0 entered promiscuous mode [ 935.466060][ T4804] usb 8-1: USB disconnect, device number 14 [ 935.472743][ T4804] cdc_mbim 8-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.7-1, CDC MBIM [ 936.587580][ T21] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 936.664194][ T21] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -32 [ 936.724213][ T21] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -32 [ 936.835886][T15394] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3014'. [ 937.646470][T15399] device syzkaller0 entered promiscuous mode [ 937.857967][ T21] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 937.926493][ T21] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 937.963326][ T21] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 937.995458][ T21] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -71 [ 938.020879][ T21] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 938.046148][ T21] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 938.119530][ T21] lan78xx: probe of 7-1:1.0 failed with error -71 [ 938.169551][ T21] usb 7-1: USB disconnect, device number 11 [ 938.904175][ T21] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 939.154132][ T21] usb 6-1: Using ep0 maxpacket: 32 [ 939.209440][T15440] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3028'. [ 940.484335][ T21] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 940.604724][ T21] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 940.618820][ T21] usb 6-1: config 0 interface 0 has no altsetting 0 [ 940.784337][ T21] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 940.803050][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.815430][ T21] usb 6-1: Product: syz [ 940.823325][ T21] usb 6-1: Manufacturer: syz [ 940.843624][ T21] usb 6-1: SerialNumber: syz [ 940.872069][ T21] usb 6-1: config 0 descriptor?? [ 941.244162][ T4199] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 941.484172][ T4397] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 941.496491][ T4199] usb 7-1: Using ep0 maxpacket: 16 [ 941.614121][ T21] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 941.614758][ T4199] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 941.633084][ T4199] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 941.646146][ T4199] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 941.659285][ T4199] usb 7-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 941.668618][ T4199] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.685110][ T4199] usb 7-1: config 0 descriptor?? [ 941.727234][ T4397] usb 8-1: Using ep0 maxpacket: 16 [ 941.844219][ T4397] usb 8-1: config 0 has an invalid interface number: 105 but max is 0 [ 941.852666][ T4397] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 941.863430][ T4397] usb 8-1: config 0 has no interface number 0 [ 942.004281][ T21] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 942.019546][ T21] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 942.024794][ T4397] usb 8-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 942.031012][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.037989][ T4397] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.055212][ T4397] usb 8-1: Product: syz [ 942.059516][ T4397] usb 8-1: Manufacturer: syz [ 942.064344][ T4397] usb 8-1: SerialNumber: syz [ 942.072871][ T21] usb 2-1: config 0 descriptor?? [ 942.078006][ T4397] usb 8-1: config 0 descriptor?? [ 942.146560][ T21] pwc: Askey VC010 type 2 USB webcam detected. [ 942.166044][ T4199] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 942.173391][ T4199] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 942.180816][ T4199] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 942.190600][ T4199] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 942.197861][ T4199] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 942.205237][ T4199] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 942.212430][ T4199] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 942.219756][ T4199] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 942.227002][ T4199] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 942.234360][ T4199] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 942.241543][ T4199] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 942.249389][ T4199] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 942.256716][ T4199] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 942.263993][ T4199] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 942.271323][ T4199] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 942.278682][ T4199] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 942.286103][ T4199] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 942.293350][ T4199] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 942.300687][ T4199] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 942.307925][ T4199] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 942.317320][ T4199] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 942.324608][ T4199] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 942.331802][ T4199] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 942.339300][ T4397] usb 8-1: Found UVC 0.00 device syz (046d:08d3) [ 942.349683][ T4199] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 942.357149][ T4397] usb 8-1: No valid video chain found. [ 942.377704][ T4199] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 942.385908][ T4199] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 942.393587][ T4199] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 942.401246][ T4199] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 942.424258][ T4199] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 942.431509][ T4199] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 942.439062][ T4199] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 942.446363][ T4199] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 942.454388][ T4199] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 942.461588][ T4199] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 942.468956][ T4199] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 942.483166][ T4199] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 942.492643][ T4199] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 942.500180][ T4199] zeroplus 0003:0C12:0030.0006: unknown main item tag 0x0 [ 942.508690][ T23] usb 6-1: USB disconnect, device number 16 [ 942.527556][ T4199] zeroplus 0003:0C12:0030.0006: hidraw0: USB HID v0.0a Device [HID 0c12:0030] on usb-dummy_hcd.6-1/input0 [ 942.553202][ T4199] zeroplus 0003:0C12:0030.0006: no inputs found [ 942.574417][ T21] pwc: recv_control_msg error -32 req 02 val 2b00 [ 942.601083][ T4199] usb 7-1: USB disconnect, device number 12 [ 942.634358][ T21] pwc: recv_control_msg error -32 req 02 val 2700 [ 942.636542][ T4397] usb 8-1: USB disconnect, device number 15 [ 942.674944][ T21] pwc: recv_control_msg error -32 req 02 val 2c00 [ 942.846851][T15477] fido_id[15477]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 942.969410][ T21] pwc: recv_control_msg error -71 req 04 val 1300 [ 943.012988][T15491] IPv6: NLM_F_CREATE should be specified when creating new route [ 943.024376][ T21] pwc: recv_control_msg error -71 req 04 val 1400 [ 943.054332][ T21] pwc: recv_control_msg error -71 req 02 val 2000 [ 943.094414][ T21] pwc: recv_control_msg error -71 req 02 val 2100 [ 943.115009][ T21] pwc: recv_control_msg error -71 req 04 val 1500 [ 943.134350][ T21] pwc: recv_control_msg error -71 req 02 val 2500 [ 943.158270][ T21] pwc: recv_control_msg error -71 req 02 val 2400 [ 943.189601][ T21] pwc: recv_control_msg error -71 req 02 val 2600 [ 943.226469][ T21] pwc: recv_control_msg error -71 req 02 val 2900 [ 943.264215][ T21] pwc: recv_control_msg error -71 req 02 val 2800 [ 943.279209][T15505] tipc: Enabling of bearer rejected, failed to enable media [ 943.328558][ T21] pwc: recv_control_msg error -71 req 04 val 1100 [ 943.360615][ T21] pwc: recv_control_msg error -71 req 04 val 1200 [ 943.367264][ T23] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 943.382204][ T21] pwc: Registered as video103. [ 943.395039][ T21] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 943.443051][ T21] usb 2-1: USB disconnect, device number 11 [ 943.654108][ T23] usb 7-1: Using ep0 maxpacket: 8 [ 943.758749][T15514] block device autoloading is deprecated and will be removed. [ 943.974292][ T23] usb 7-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 943.983459][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 944.004159][T14716] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 944.019063][ T23] usb 7-1: Product: syz [ 944.023297][ T23] usb 7-1: Manufacturer: syz [ 944.028906][T15536] tipc: Enabling of bearer rejected, failed to enable media [ 944.044602][ T23] usb 7-1: SerialNumber: syz [ 944.053517][ T23] usb 7-1: config 0 descriptor?? [ 944.106775][ T23] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 944.144126][ T4199] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 944.254145][T14716] usb 6-1: Using ep0 maxpacket: 8 [ 944.324259][ T23] gspca_sn9c2028: read1 error -32 [ 944.384395][T14716] usb 6-1: config index 0 descriptor too short (expected 773, got 56) [ 944.392827][T14716] usb 6-1: config 91 has too many interfaces: 87, using maximum allowed: 32 [ 944.394970][ T4199] usb 9-1: Using ep0 maxpacket: 16 [ 944.416743][T14716] usb 6-1: config 91 contains an unexpected descriptor of type 0x2, skipping [ 944.426676][T14716] usb 6-1: config 91 has an invalid descriptor of length 0, skipping remainder of the config [ 944.437956][T14716] usb 6-1: config 91 has 0 interfaces, different from the descriptor's value: 87 [ 944.628871][ T23] gspca_sn9c2028: read1 error -71 [ 944.634336][T14716] usb 6-1: New USB device found, idVendor=0710, idProduct=8001, bcdDevice=77.df [ 944.640385][T15546] loop8: detected capacity change from 0 to 7 [ 944.649256][ T23] sn9c2028: probe of 7-1:0.0 failed with error -71 [ 944.661170][T15546] Dev loop8: unable to read RDB block 7 [ 944.667284][T15546] loop8: unable to read partition table [ 944.673292][T15546] loop8: partition table beyond EOD, truncated [ 944.678561][T14716] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.681785][T15546] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 944.698111][ T4199] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 944.711606][ T4199] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 944.884494][ T4199] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 944.925424][ T4199] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.000074][ T4199] usb 9-1: Product: syz [ 945.041454][ T4199] usb 9-1: Manufacturer: syz [ 945.081625][ T4199] usb 9-1: SerialNumber: syz [ 945.307070][ T23] usb 7-1: USB disconnect, device number 13 [ 945.314115][T14716] usb 6-1: Product: syz [ 945.318683][T14716] usb 6-1: Manufacturer: syz [ 945.323327][T14716] usb 6-1: SerialNumber: syz [ 945.660669][T14716] usb 6-1: USB disconnect, device number 17 [ 945.854256][ T23] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 946.104259][ T23] usb 8-1: Using ep0 maxpacket: 32 [ 946.225528][ T23] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 946.248804][ T23] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.279515][ T23] usb 8-1: config 0 descriptor?? [ 946.326573][ T23] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 946.397711][ T4397] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 946.406239][ T4397] Bluetooth: hci0: Injecting HCI hardware error event [ 946.414615][T14430] Bluetooth: hci0: hardware error 0x00 [ 946.494241][T14716] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 946.567856][T15559] device syzkaller0 entered promiscuous mode [ 946.698183][T15563] device syzkaller0 entered promiscuous mode [ 946.778190][T14716] usb 6-1: Using ep0 maxpacket: 8 [ 946.804310][ T4199] usb 9-1: 0:2 : does not exist [ 946.828390][ T4199] usb 9-1: USB disconnect, device number 12 [ 946.841423][ T1107] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 947.080023][ T4297] udevd[4297]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 947.084845][ T1107] usb 2-1: Using ep0 maxpacket: 16 [ 947.115717][T14716] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 947.137135][T14716] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.154583][T14716] usb 6-1: Product: syz [ 947.159452][T14716] usb 6-1: Manufacturer: syz [ 947.169960][T14716] usb 6-1: SerialNumber: syz [ 947.224185][ T1107] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 947.241066][ T1107] usb 2-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 947.252223][ T1107] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 947.375490][ T1107] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= e.89 [ 947.389902][ T1107] usb 2-1: New USB device strings: Mfr=221, Product=0, SerialNumber=3 [ 947.408534][ T1107] usb 2-1: Manufacturer: syz [ 947.418936][ T1107] usb 2-1: SerialNumber: syz [ 947.443886][ T1107] usb 2-1: config 0 descriptor?? [ 947.754203][ T4199] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 947.924481][T14716] usb 6-1: clock source 0 is not valid, cannot use [ 948.144443][T14716] usb 6-1: 1:1: cannot get freq (v2/v3): err -71 [ 948.164572][T14716] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 948.184228][ T4199] usb 9-1: unable to get BOS descriptor or descriptor too short [ 948.204335][T14716] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 948.218706][T14716] usb 6-1: clock source 0 is not valid, cannot use [ 948.244220][T14716] usb 6-1: 2:1: cannot get freq (v2/v3): err -71 [ 948.274268][T14716] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 948.284378][ T4199] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 948.284497][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 948.464166][T14716] usb 6-1: USB disconnect, device number 18 [ 948.474494][ T4199] usb 9-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 948.484663][ T4199] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.493137][ T4199] usb 9-1: Product: syz [ 948.498309][ T4199] usb 9-1: Manufacturer: syz [ 948.502966][ T4199] usb 9-1: SerialNumber: syz [ 948.508320][ T1107] usb 2-1: 0:2 : does not exist [ 948.584189][ T21] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 948.717071][T15595] device syzkaller0 entered promiscuous mode [ 948.819532][ T1107] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 949.104380][ T21] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 949.113824][ T21] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.144185][ T23] gspca_vc032x: reg_w err -71 [ 949.146450][ T1107] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 949.148945][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 949.179784][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 949.190504][ T21] usb 7-1: Product: syz [ 949.203823][ T21] usb 7-1: Manufacturer: syz [ 949.219370][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 949.229544][ T21] usb 7-1: SerialNumber: syz [ 949.239710][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 949.256966][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 949.272701][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 949.289921][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 949.296870][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 949.321795][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 949.327339][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 949.342685][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 949.348540][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 949.358483][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 949.363851][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 949.390233][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 949.402028][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 949.405072][ T1107] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 949.424428][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 949.429800][ T23] gspca_vc032x: Unknown sensor... [ 949.459360][ T1107] usb 2-1: USB disconnect, device number 12 [ 949.483602][ T23] vc032x: probe of 8-1:0.0 failed with error -22 [ 949.515191][ T21] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 949.540114][ T4199] debugfs: Directory 'card3' with parent 'sound' already present! [ 949.552618][ T23] usb 8-1: USB disconnect, device number 16 [ 949.566611][ T4199] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 949.574217][ T21] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 949.624226][ T21] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 949.644313][ T4199] usb 9-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 949.687692][ T4199] usb 9-1: found format II with max.bitrate = 4, frame size=7372 [ 949.697275][ T21] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 949.755276][ T21] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 949.794310][ T21] lan78xx: probe of 7-1:1.0 failed with error -71 [ 949.811268][T15608] udevd[15608]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 949.827794][ T4199] usb 9-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 949.856996][ T4199] usb 9-1: found format II with max.bitrate = 4, frame size=7372 [ 949.874975][ T21] usb 7-1: USB disconnect, device number 14 [ 950.264442][ T4199] usb 9-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 950.294154][ T4397] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 950.365265][ T4199] usb 9-1: USB disconnect, device number 13 [ 950.569971][ T4363] udevd[4363]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 950.594262][ T4397] usb 6-1: Using ep0 maxpacket: 16 [ 950.629019][ T4358] udevd[4358]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 950.734397][ T4397] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 950.774247][ T4397] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 950.797930][ T4397] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 950.812825][ T4397] usb 6-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 950.867165][ T4397] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.902891][ T4397] usb 6-1: config 0 descriptor?? [ 950.914951][T15631] device syzkaller0 entered promiscuous mode [ 951.048138][T15634] device syzkaller0 entered promiscuous mode [ 951.259182][T15640] device syzkaller0 entered promiscuous mode [ 951.416378][ T4397] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 951.431670][ T4397] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 951.468733][ T4397] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 951.493240][ T4397] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 951.501654][ T26] audit: type=1326 audit(1778332194.823:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15643 comm="syz.6.3100" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2cf5edd9 code=0x7ffc0000 [ 951.521387][ T4397] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 951.535406][T15644] mmap: syz.6.3100 (15644) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 951.554237][ T4397] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 951.581894][ T4397] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 951.593050][ T26] audit: type=1326 audit(1778332194.823:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15643 comm="syz.6.3100" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2cf5edd9 code=0x7ffc0000 [ 951.599706][ T4397] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 951.674257][ T4397] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 951.690977][ T26] audit: type=1326 audit(1778332194.863:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15643 comm="syz.6.3100" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6c2cf5edd9 code=0x7ffc0000 [ 951.712677][ T4397] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 951.722154][ T4397] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 951.749976][ T4397] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 951.767585][ T4397] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 951.789757][ T4397] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 951.824277][ T26] audit: type=1326 audit(1778332194.863:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15643 comm="syz.6.3100" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2cf5edd9 code=0x7ffc0000 [ 951.831492][ T4397] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 951.904542][ T4397] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 951.925121][ T4397] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 951.934390][ T26] audit: type=1326 audit(1778332194.863:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15643 comm="syz.6.3100" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2cf5edd9 code=0x7ffc0000 [ 951.960868][ T4397] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 951.983111][ T4397] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 951.994187][ T26] audit: type=1326 audit(1778332194.863:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15643 comm="syz.6.3100" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f6c2cf5edd9 code=0x7ffc0000 [ 952.003823][ T4397] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 952.065490][ T4397] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 952.074435][ T26] audit: type=1326 audit(1778332194.993:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15643 comm="syz.6.3100" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2cf5edd9 code=0x7ffc0000 [ 952.097899][ T4397] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 952.140810][ T26] audit: type=1326 audit(1778332194.993:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15643 comm="syz.6.3100" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2cf5edd9 code=0x7ffc0000 [ 952.170417][ T4397] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 952.223836][ T4397] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 952.249232][ T4397] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 952.272517][ T4397] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 952.314906][ T4397] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 952.324686][ T4397] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 952.339044][ T4397] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 952.351132][ T4397] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 952.360863][ T4397] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 952.405747][ T4397] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 952.413287][ T4397] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 952.428104][ T4397] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 952.438097][ T4397] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 952.453574][ T4397] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 952.468690][ T4397] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 952.476680][ T4397] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 952.487051][ T4397] zeroplus 0003:0C12:0030.0007: hidraw0: USB HID v0.0a Device [HID 0c12:0030] on usb-dummy_hcd.5-1/input0 [ 952.499281][ T4397] zeroplus 0003:0C12:0030.0007: no inputs found [ 952.524818][ T4397] usb 6-1: USB disconnect, device number 19 [ 952.708908][T15671] device syzkaller0 entered promiscuous mode [ 952.769742][T15666] fido_id[15666]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 954.093495][ T26] audit: type=1326 audit(1778332197.413:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15667 comm="syz.7.3104" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fd4bd1c7b57 code=0x0 [ 954.246455][T15692] tipc: Enabling of bearer rejected, failed to enable media [ 954.296973][T15687] device syzkaller0 entered promiscuous mode [ 954.630259][T15705] device syzkaller0 entered promiscuous mode [ 955.648073][T15731] device syzkaller0 entered promiscuous mode [ 955.724117][ T4397] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 955.891689][T15737] device syzkaller0 entered promiscuous mode [ 955.909211][T15735] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 955.929622][T15735] device syzkaller0 entered promiscuous mode [ 955.993297][T15735] tipc: Enabled bearer , priority 0 [ 956.000187][ T4397] usb 6-1: Using ep0 maxpacket: 16 [ 956.007137][T15734] tipc: Resetting bearer [ 956.066615][T15734] tipc: Disabling bearer [ 956.134509][ T4397] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 956.354383][ T4397] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 956.371032][ T4397] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.392538][ T4397] usb 6-1: Product: syz [ 956.415131][ T4397] usb 6-1: Manufacturer: syz [ 956.419818][ T4397] usb 6-1: SerialNumber: syz [ 956.440971][ T4397] usb 6-1: config 0 descriptor?? [ 956.446753][T15749] device syzkaller0 entered promiscuous mode [ 957.724234][ T21] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 957.732470][T15767] device syzkaller0 entered promiscuous mode [ 957.852392][T15769] device syzkaller0 entered promiscuous mode [ 957.868573][T14716] usb 6-1: USB disconnect, device number 20 [ 958.003915][T15772] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 958.035152][T15772] device syzkaller0 entered promiscuous mode [ 958.058311][T15772] tipc: Enabled bearer , priority 0 [ 958.072618][T15771] tipc: Resetting bearer [ 958.084326][ T21] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 958.092536][ T21] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 958.121791][ T21] usb 7-1: config 0 interface 0 has no altsetting 0 [ 958.126730][T15771] tipc: Disabling bearer [ 958.264237][T13522] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 958.294363][ T21] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 958.303501][ T21] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 958.314514][ T4397] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 958.324100][ T21] usb 7-1: Product: syz [ 958.328338][ T21] usb 7-1: Manufacturer: syz [ 958.332979][ T21] usb 7-1: SerialNumber: syz [ 958.356713][ T21] usb 7-1: config 0 descriptor?? [ 958.394984][ T21] hub 7-1:0.0: bad descriptor, ignoring hub [ 958.400977][ T21] hub: probe of 7-1:0.0 failed with error -5 [ 958.419646][ T21] usb 7-1: selecting invalid altsetting 0 [ 958.503970][T15780] device syzkaller0 entered promiscuous mode [ 958.538697][T13522] usb 8-1: Using ep0 maxpacket: 8 [ 958.594260][ T4397] usb 2-1: Using ep0 maxpacket: 8 [ 958.819927][T13522] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 958.833296][T13522] usb 8-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 958.843079][T13522] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.859710][T13522] usb 8-1: config 0 descriptor?? [ 958.864890][ T4397] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 958.873973][ T4397] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.937183][ T23] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 958.944665][ T4397] pvrusb2: Hardware description: Terratec Grabster AV400 [ 958.951973][ T4397] pvrusb2: ********** [ 958.959251][ T4397] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 958.972145][ T4397] pvrusb2: Important functionality might not be entirely working. [ 958.982106][ T4397] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 958.994306][ T4397] pvrusb2: ********** [ 959.149431][ T2425] pvrusb2: Invalid write control endpoint [ 959.216762][ T2425] pvrusb2: Invalid write control endpoint [ 959.225709][ T2425] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 959.242384][ T2425] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 959.251179][ T2425] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 959.263560][ T2425] pvrusb2: Device being rendered inoperable [ 959.276532][ T2425] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 959.284667][ T2425] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 959.308793][ T2425] pvrusb2: Attached sub-driver cx25840 [ 959.314979][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 959.331962][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 959.350934][ T4244] usb 2-1: USB disconnect, device number 13 [ 959.360961][T13522] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 959.371519][T13522] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 959.374942][ T23] usb 9-1: unable to get BOS descriptor or descriptor too short [ 959.381041][T13522] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 959.394573][T13522] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 959.402125][T13522] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 959.410026][T13522] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 959.417507][T13522] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 959.427137][T13522] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 959.434665][T13522] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 959.446586][T13522] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 959.476703][T13522] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 959.484891][ T23] usb 9-1: config 3 has an invalid interface number: 19 but max is 0 [ 959.498609][T13522] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 959.506992][ T23] usb 9-1: config 3 has an invalid interface number: 4 but max is 0 [ 959.522819][T13522] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 959.542564][T13522] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 959.552750][ T23] usb 9-1: config 3 has 2 interfaces, different from the descriptor's value: 1 [ 959.563435][T13522] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 959.576043][ T23] usb 9-1: config 3 has no interface number 0 [ 959.581748][T13522] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 959.582182][ T23] usb 9-1: config 3 has no interface number 1 [ 959.601506][T13522] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 959.603589][ T23] usb 9-1: config 3 interface 19 altsetting 9 endpoint 0x6 has invalid maxpacket 1040, setting to 64 [ 959.621466][T13522] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 959.631083][ T23] usb 9-1: config 3 interface 19 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 959.636897][T13522] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 959.654266][ T23] usb 9-1: too many endpoints for config 3 interface 4 altsetting 131: 175, using maximum allowed: 30 [ 959.661970][T13522] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 959.676235][ T23] usb 9-1: config 3 interface 4 altsetting 131 bulk endpoint 0x8E has invalid maxpacket 32 [ 959.683393][T13522] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 959.694166][ T23] usb 9-1: config 3 interface 4 altsetting 131 endpoint 0xC has invalid wMaxPacketSize 0 [ 959.704950][T13522] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 959.715518][ T23] usb 9-1: config 3 interface 4 altsetting 131 bulk endpoint 0xC has invalid maxpacket 0 [ 959.720391][T13522] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 959.734143][ T23] usb 9-1: config 3 interface 4 altsetting 131 has 2 endpoint descriptors, different from the interface descriptor's value: 175 [ 959.743259][T13522] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 959.760400][ T23] usb 9-1: config 3 interface 19 has no altsetting 0 [ 959.760615][T13522] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 959.784379][ T23] usb 9-1: config 3 interface 4 has no altsetting 0 [ 959.785868][T13522] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 959.814101][T13522] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 959.821440][T13522] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 959.844124][T13522] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 959.851344][T13522] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 959.874184][T13522] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 959.881401][T13522] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 959.904142][T13522] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 959.911402][T13522] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 959.918625][T13522] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 959.934307][T13522] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 959.941578][T13522] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 959.954315][ T23] usb 9-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=13.f5 [ 959.962292][T13522] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 959.979910][ T23] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.984251][T13522] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 960.002217][T13522] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 960.021663][ T23] usb 9-1: Product: syz [ 960.028655][ T23] usb 9-1: Manufacturer: syz [ 960.033547][ T23] usb 9-1: SerialNumber: syz [ 960.044504][T13522] hid-led: probe of 0003:0FC5:B080.0008 failed with error -71 [ 960.071986][T13522] usb 8-1: USB disconnect, device number 17 [ 960.410286][T15783] udc-core: couldn't find an available UDC or it's busy [ 960.425763][T15783] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 960.515327][ T23] pl2303 9-1:3.19: required endpoints missing [ 960.524543][T13522] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 960.555333][ T23] pl2303 9-1:3.4: required interrupt-in endpoint missing [ 960.570907][ T23] usb 9-1: USB disconnect, device number 14 [ 961.051215][T15809] device syzkaller0 entered promiscuous mode [ 961.154248][T13522] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 961.163374][T13522] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.206537][T13522] usb 8-1: Product: syz [ 961.210785][T13522] usb 8-1: Manufacturer: syz [ 961.216983][T13522] usb 8-1: SerialNumber: syz [ 961.546845][T15822] loop9: detected capacity change from 0 to 524287936 [ 961.591128][ T4199] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 961.714316][T13522] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 961.974512][T14450] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 962.074395][ T4199] usb 2-1: unable to get BOS descriptor or descriptor too short [ 962.164252][ T4199] usb 2-1: config 129 has an invalid interface number: 135 but max is 0 [ 962.173311][ T4199] usb 2-1: config 129 has an invalid interface number: 5 but max is 0 [ 962.188445][ T4199] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 962.199608][ T4199] usb 2-1: config 129 has no interface number 0 [ 962.211798][ T4199] usb 2-1: config 129 has no interface number 1 [ 962.219390][ T4199] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 962.238922][ T4199] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 962.250638][ T4199] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 962.270212][ T4199] usb 2-1: config 129 interface 135 has no altsetting 0 [ 962.277732][ T4199] usb 2-1: config 129 interface 5 has no altsetting 0 [ 962.374313][T14450] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 962.388993][T14450] usb 6-1: config 0 has no interface number 0 [ 962.396284][T14450] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 962.413630][T14450] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 962.428188][T14450] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 962.447193][T14450] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 962.458945][T14450] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.480591][T14450] usb 6-1: config 0 descriptor?? [ 962.564347][ T4199] usb 2-1: string descriptor 0 read error: -22 [ 962.570653][ T4199] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 962.586658][ T4199] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.656683][ T4199] usb 2-1: MIDIStreaming interface descriptor not found [ 962.853719][ T4199] usb 2-1: USB disconnect, device number 14 [ 962.999911][ T21] usb 7-1: USB disconnect, device number 15 [ 963.094270][T13522] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 963.144309][T13522] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -32 [ 963.181096][T14450] input: HID 28bd:0042 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0042.0009/input/input12 [ 963.206655][T13522] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 963.264203][T13522] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 963.290306][T14450] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0042.0009/input/input13 [ 963.314205][T13522] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 963.354238][T13522] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 963.372191][T14450] uclogic 0003:28BD:0042.0009: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.5-1/input1 [ 963.423428][T13522] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 963.437668][T14450] usb 6-1: USB disconnect, device number 21 [ 963.494222][T13522] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 963.574223][T13522] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 963.626867][T13522] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 963.646789][T13522] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 963.672403][T13522] lan78xx: probe of 8-1:1.0 failed with error -71 [ 963.707669][T13522] usb 8-1: USB disconnect, device number 18 [ 963.723713][T15833] fido_id[15833]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 963.946408][T15842] tipc: Enabling of bearer rejected, failed to enable media [ 964.146422][T15847] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3161'. [ 964.404105][ T4804] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 964.924213][ T4804] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 964.924247][ T4804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.924269][ T4804] usb 6-1: Product: syz [ 964.924308][ T4804] usb 6-1: Manufacturer: syz [ 964.924324][ T4804] usb 6-1: SerialNumber: syz [ 964.925076][T15854] device syzkaller0 entered promiscuous mode [ 965.224228][ T4804] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 965.224565][ T4804] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 965.224708][ T4804] lan78xx: probe of 6-1:1.0 failed with error -71 [ 965.228820][ T4804] usb 6-1: USB disconnect, device number 22 [ 965.485257][T14450] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 965.745968][ T4804] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 965.751089][T14450] usb 2-1: Using ep0 maxpacket: 8 [ 965.916141][T15883] tipc: Enabling of bearer rejected, failed to enable media [ 966.114447][T14450] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 966.124355][T14450] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.132455][T14450] usb 2-1: Product: syz [ 966.137321][T14450] usb 2-1: Manufacturer: syz [ 966.141965][T14450] usb 2-1: SerialNumber: syz [ 966.154301][ T4804] usb 7-1: unable to get BOS descriptor or descriptor too short [ 966.234407][ T4804] usb 7-1: config 129 has an invalid interface number: 135 but max is 0 [ 966.249595][ T4804] usb 7-1: config 129 has an invalid interface number: 5 but max is 0 [ 966.258673][ T4804] usb 7-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 966.279106][ T4804] usb 7-1: config 129 has no interface number 0 [ 966.291160][ T4804] usb 7-1: config 129 has no interface number 1 [ 966.300820][ T4804] usb 7-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 966.327016][ T4804] usb 7-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 966.351945][ T4804] usb 7-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 966.377263][ T4804] usb 7-1: config 129 interface 135 has no altsetting 0 [ 966.393696][ T4804] usb 7-1: config 129 interface 5 has no altsetting 0 [ 966.634241][ T4804] usb 7-1: string descriptor 0 read error: -22 [ 966.642559][ T4804] usb 7-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 966.684649][ T4804] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.780500][ T4804] usb 7-1: MIDIStreaming interface descriptor not found [ 966.809997][T15890] device syzkaller0 entered promiscuous mode [ 967.028909][ T21] usb 7-1: USB disconnect, device number 16 [ 967.484206][ T4244] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 967.934365][ T4397] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 968.054488][T14450] usb 2-1: clock source 0 is not valid, cannot use [ 968.214141][ T4397] usb 6-1: Using ep0 maxpacket: 32 [ 968.258129][T15913] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 968.284520][T14450] usb 2-1: 1:1: cannot get freq (v2/v3): err -71 [ 968.310430][ T26] audit: type=1326 audit(1778332211.633:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15908 comm="syz.6.3179" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2cf5edd9 code=0x7ffc0000 [ 968.314884][T14450] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 968.354299][ T4244] usb 8-1: unable to get BOS descriptor or descriptor too short [ 968.378487][ T26] audit: type=1326 audit(1778332211.673:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15908 comm="syz.6.3179" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2cf5edd9 code=0x7ffc0000 [ 968.434378][ T4397] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 968.443498][ T4397] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.454292][ T4244] usb 8-1: config 3 has an invalid interface number: 19 but max is 0 [ 968.470660][ T4244] usb 8-1: config 3 has an invalid interface number: 4 but max is 0 [ 968.493098][ T26] audit: type=1326 audit(1778332211.673:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15908 comm="syz.6.3179" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6c2cf1f60e code=0x7ffc0000 [ 968.524328][T14450] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 968.529078][ T4244] usb 8-1: config 3 has 2 interfaces, different from the descriptor's value: 1 [ 968.543236][T14450] usb 2-1: clock source 0 is not valid, cannot use [ 968.563557][ T4244] usb 8-1: config 3 has no interface number 0 [ 968.573249][ T4397] usb 6-1: config 0 descriptor?? [ 968.585736][ T4244] usb 8-1: config 3 has no interface number 1 [ 968.592480][ T26] audit: type=1326 audit(1778332211.673:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15908 comm="syz.6.3179" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2cf5edd9 code=0x7ffc0000 [ 968.629943][ T4244] usb 8-1: config 3 interface 19 altsetting 9 endpoint 0x6 has invalid maxpacket 1040, setting to 64 [ 968.644904][T14450] usb 2-1: 2:1: cannot get freq (v2/v3): err -71 [ 968.667412][ T4244] usb 8-1: config 3 interface 19 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 968.688098][ T4397] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 968.701246][ T26] audit: type=1326 audit(1778332211.673:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15908 comm="syz.6.3179" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f6c2cf5edd9 code=0x7ffc0000 [ 968.704941][T14450] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 968.743663][ T4244] usb 8-1: too many endpoints for config 3 interface 4 altsetting 131: 175, using maximum allowed: 30 [ 968.759843][ T4244] usb 8-1: config 3 interface 4 altsetting 131 bulk endpoint 0x8E has invalid maxpacket 32 [ 968.770772][ T26] audit: type=1326 audit(1778332211.693:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15908 comm="syz.6.3179" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2cf5edd9 code=0x7ffc0000 [ 968.804508][ T4244] usb 8-1: config 3 interface 4 altsetting 131 endpoint 0xC has invalid wMaxPacketSize 0 [ 968.839896][ T4244] usb 8-1: config 3 interface 4 altsetting 131 bulk endpoint 0xC has invalid maxpacket 0 [ 968.911915][ T4244] usb 8-1: config 3 interface 4 altsetting 131 has 2 endpoint descriptors, different from the interface descriptor's value: 175 [ 968.925773][ T26] audit: type=1326 audit(1778332211.733:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15908 comm="syz.6.3179" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6c2cf5edd9 code=0x7ffc0000 [ 968.960694][ T4244] usb 8-1: config 3 interface 19 has no altsetting 0 [ 968.967795][ T4244] usb 8-1: config 3 interface 4 has no altsetting 0 [ 968.980088][ T26] audit: type=1326 audit(1778332211.733:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15908 comm="syz.6.3179" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2cf5edd9 code=0x7ffc0000 [ 969.007050][T14450] usb 2-1: USB disconnect, device number 15 [ 969.034130][ T26] audit: type=1326 audit(1778332211.733:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15908 comm="syz.6.3179" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6c2cf1f60e code=0x7ffc0000 [ 969.079420][ T26] audit: type=1326 audit(1778332211.733:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15908 comm="syz.6.3179" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2cf5edd9 code=0x7ffc0000 [ 969.214283][ T4244] usb 8-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=13.f5 [ 969.236200][ T4244] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.250110][ T4244] usb 8-1: Product: syz [ 969.257050][ T4244] usb 8-1: Manufacturer: syz [ 969.267183][ T4244] usb 8-1: SerialNumber: syz [ 969.464227][T14450] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 969.595694][T15924] udc-core: couldn't find an available UDC or it's busy [ 969.602726][T15924] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 969.695463][ T4244] pl2303 8-1:3.19: required endpoints missing [ 969.726459][T14450] usb 2-1: Using ep0 maxpacket: 32 [ 969.745401][ T4244] pl2303 8-1:3.4: required interrupt-in endpoint missing [ 969.756504][ T4244] usb 8-1: USB disconnect, device number 19 [ 970.004450][T14450] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 970.013812][T14450] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.022643][T14450] usb 2-1: Product: syz [ 970.027123][T14450] usb 2-1: Manufacturer: syz [ 970.031761][T14450] usb 2-1: SerialNumber: syz [ 970.039103][T14450] usb 2-1: config 0 descriptor?? [ 970.087772][T14450] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 970.189525][T15931] device syzkaller0 entered promiscuous mode [ 970.620702][T13522] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 970.654552][ T4397] gspca_vc032x: I2c Bus Busy Wait 00 [ 970.824157][ T23] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 971.074115][ T23] usb 7-1: Using ep0 maxpacket: 16 [ 971.354374][ T23] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 971.380990][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.409779][ T23] usb 7-1: Product: syz [ 971.424140][ T23] usb 7-1: Manufacturer: syz [ 971.428824][ T23] usb 7-1: SerialNumber: syz [ 971.534904][ T23] r8152-cfgselector 7-1: config 0 descriptor?? [ 972.024190][ T23] r8152-cfgselector 7-1: Unknown version 0x0000 [ 972.041169][ T23] r8152-cfgselector 7-1: bad CDC descriptors [ 972.084277][ T23] r8152-cfgselector 7-1: Unknown version 0x0000 [ 972.109316][ T23] r8152-cfgselector 7-1: USB disconnect, device number 17 [ 972.304100][ T4397] gspca_vc032x: reg_w err -71 [ 972.308867][ T4397] gspca_vc032x: I2c Bus Busy Wait 00 [ 972.314504][T14450] gspca_ov534_9: reg_w failed -71 [ 972.319663][ T4397] gspca_vc032x: I2c Bus Busy Wait 00 [ 972.325050][ T4397] gspca_vc032x: I2c Bus Busy Wait 00 [ 972.330369][ T4397] gspca_vc032x: I2c Bus Busy Wait 00 [ 972.335809][ T4397] gspca_vc032x: I2c Bus Busy Wait 00 [ 972.341125][ T4397] gspca_vc032x: I2c Bus Busy Wait 00 [ 972.398478][ T4397] gspca_vc032x: I2c Bus Busy Wait 00 [ 972.406577][T15950] netlink: 436 bytes leftover after parsing attributes in process `syz.8.3193'. [ 972.416188][T15950] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3193'. [ 972.501094][ T4397] gspca_vc032x: I2c Bus Busy Wait 00 [ 972.506521][ T4397] gspca_vc032x: I2c Bus Busy Wait 00 [ 972.511850][ T4397] gspca_vc032x: I2c Bus Busy Wait 00 [ 972.524053][ T4397] gspca_vc032x: I2c Bus Busy Wait 00 [ 972.529643][ T4397] gspca_vc032x: I2c Bus Busy Wait 00 [ 972.540233][ T4397] gspca_vc032x: I2c Bus Busy Wait 00 [ 972.673437][ T4372] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.795847][ T4372] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.870534][ T4372] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.921118][T15942] chnl_net:caif_netlink_parms(): no params data found [ 972.934279][ T4397] gspca_vc032x: I2c Bus Busy Wait 00 [ 972.939828][ T4397] gspca_vc032x: I2c Bus Busy Wait 00 [ 972.945225][ T4397] gspca_vc032x: I2c Bus Busy Wait 00 [ 972.950550][ T4397] gspca_vc032x: I2c Bus Busy Wait 00 [ 972.955991][ T4397] gspca_vc032x: Unknown sensor... [ 972.961104][ T4397] vc032x: probe of 6-1:0.0 failed with error -22 [ 973.001396][ T4397] usb 6-1: USB disconnect, device number 23 [ 973.015677][ T4372] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.091677][T15942] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.099370][T15942] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.104441][ T21] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 973.120360][T15942] device bridge_slave_0 entered promiscuous mode [ 973.127323][T13522] usb 8-1: unable to get BOS descriptor or descriptor too short [ 973.148462][T15942] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.159607][T15942] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.173031][T15942] device bridge_slave_1 entered promiscuous mode [ 973.224399][T14450] gspca_ov534_9: Unknown sensor 0000 [ 973.224465][T14450] ov534_9: probe of 2-1:0.0 failed with error -22 [ 973.236758][T13522] usb 8-1: config 129 has an invalid interface number: 135 but max is 0 [ 973.250887][T13522] usb 8-1: config 129 has an invalid interface number: 5 but max is 0 [ 973.266204][T15942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 973.277713][ T4363] udevd[4363]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 973.285627][T14450] usb 2-1: USB disconnect, device number 16 [ 973.302706][T13522] usb 8-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 973.324629][T13522] usb 8-1: config 129 has no interface number 0 [ 973.336126][T13522] usb 8-1: config 129 has no interface number 1 [ 973.354170][ T21] usb 7-1: Using ep0 maxpacket: 32 [ 973.378732][T15942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 973.392679][T13522] usb 8-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 973.438036][T13522] usb 8-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 973.464165][T13522] usb 8-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 973.486639][T15942] team0: Port device team_slave_0 added [ 973.495071][ T21] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 973.524292][ T21] usb 7-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 973.525219][T15942] team0: Port device team_slave_1 added [ 973.543656][T13522] usb 8-1: config 129 interface 135 has no altsetting 0 [ 973.553383][T13522] usb 8-1: config 129 interface 5 has no altsetting 0 [ 973.564152][ T21] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 973.632956][T13522] usb 8-1: string descriptor 0 read error: -71 [ 973.643846][T13522] usb 8-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 973.670539][T13522] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.697993][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 973.744377][T14450] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 973.744585][ T21] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 973.752355][T13522] usb 8-1: can't set config #129, error -71 [ 973.790629][T13522] usb 8-1: USB disconnect, device number 20 [ 973.802363][ T21] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.821035][ T21] usb 7-1: Product: syz [ 973.825912][ T21] usb 7-1: Manufacturer: syz [ 973.832842][ T21] usb 7-1: SerialNumber: syz [ 973.879936][ T4372] tipc: Left network mode [ 973.901413][ T21] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 973.907699][T15942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 973.916555][ T21] imon 7-1:155.0: unable to initialize intf0, err -19 [ 973.923753][ T21] imon:imon_probe: failed to initialize context! [ 973.930978][ T21] imon 7-1:155.0: unable to register, err -19 [ 973.937378][T15942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 973.994151][T15942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 974.050108][ T4372] bond2: (slave ip6gretap1): Releasing active interface [ 974.082338][T15942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 974.101079][T15942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 974.146738][T15942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 974.164270][T14450] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 974.186426][T14450] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 974.207705][T14450] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.243310][T14450] usb 2-1: config 0 descriptor?? [ 974.268514][T15989] device syzkaller0 entered promiscuous mode [ 974.281869][T15942] device hsr_slave_0 entered promiscuous mode [ 974.306473][T14450] pwc: Askey VC010 type 2 USB webcam detected. [ 974.313123][T15942] device hsr_slave_1 entered promiscuous mode [ 974.323642][T15942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 974.339322][T15942] Cannot create hsr debugfs directory [ 974.366774][T15993] tipc: Enabled bearer , priority 0 [ 974.381848][T15988] tipc: Resetting bearer [ 974.422268][T15988] tipc: Disabling bearer [ 974.754158][T14450] pwc: recv_control_msg error -32 req 02 val 2b00 [ 974.799080][T14450] pwc: recv_control_msg error -32 req 02 val 2700 [ 974.844512][T14450] pwc: recv_control_msg error -32 req 02 val 2c00 [ 974.904286][T14450] pwc: recv_control_msg error -32 req 04 val 1000 [ 974.944315][T14450] pwc: recv_control_msg error -32 req 04 val 1300 [ 975.032779][T16016] netlink: 436 bytes leftover after parsing attributes in process `syz.7.3205'. [ 975.042272][T16016] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3205'. [ 975.131176][T14450] pwc: recv_control_msg error -32 req 04 val 1400 [ 975.578420][ T4244] usb 7-1: USB disconnect, device number 18 [ 975.774170][ T4804] Bluetooth: hci4: command 0x041b tx timeout [ 976.484104][T14450] pwc: recv_control_msg error -32 req 02 val 2000 [ 976.504172][T14450] pwc: recv_control_msg error -71 req 02 val 2100 [ 976.760579][T14450] pwc: recv_control_msg error -71 req 04 val 1500 [ 976.784276][T14450] pwc: recv_control_msg error -71 req 02 val 2500 [ 976.804160][T14450] pwc: recv_control_msg error -71 req 02 val 2400 [ 976.844165][T14450] pwc: recv_control_msg error -71 req 02 val 2600 [ 976.876166][T14450] pwc: recv_control_msg error -71 req 02 val 2900 [ 976.904381][T14450] pwc: recv_control_msg error -71 req 02 val 2800 [ 976.932477][T14450] pwc: recv_control_msg error -71 req 04 val 1100 [ 976.950363][ T4372] device hsr_slave_0 left promiscuous mode [ 976.957308][T14450] pwc: recv_control_msg error -71 req 04 val 1200 [ 976.978297][ T4372] device hsr_slave_1 left promiscuous mode [ 976.987296][T14450] pwc: Registered as video103. [ 976.993154][T14450] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 977.033269][T14450] usb 2-1: USB disconnect, device number 17 [ 977.058790][ T4372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 977.083683][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 977.101327][ T4372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 977.112971][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 977.124381][T13522] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 977.145007][ T4372] device bridge_slave_1 left promiscuous mode [ 977.151253][ T4372] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.167339][ T4372] device bridge_slave_0 left promiscuous mode [ 977.173622][ T4372] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.192975][ T4372] device veth1_macvtap left promiscuous mode [ 977.203633][ T4372] device veth0_macvtap left promiscuous mode [ 977.404100][T13522] usb 7-1: Using ep0 maxpacket: 16 [ 977.436615][ T4372] bond3 (unregistering): (slave geneve2): Releasing active interface [ 977.450956][ T4372] bond3 (unregistering): Released all slaves [ 977.455895][T14450] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 977.491358][ T4372] bond2 (unregistering): Released all slaves [ 977.509314][ T4372] bond1 (unregistering): Released all slaves [ 977.524643][T13522] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 977.543962][T13522] usb 7-1: config 0 has no interface number 0 [ 977.551173][T13522] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 977.569200][T13522] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 977.581813][T13522] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 977.597471][T13522] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.624398][T13522] usb 7-1: config 0 descriptor?? [ 977.699919][ T4372] team0 (unregistering): Port device team_slave_1 removed [ 977.727484][ T4372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 977.757861][ T4372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 977.854727][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 977.911153][ T4372] bond0 (unregistering): Released all slaves [ 977.914888][T14450] usb 2-1: unable to get BOS descriptor or descriptor too short [ 978.014355][T14450] usb 2-1: config 129 has an invalid interface number: 135 but max is 0 [ 978.032058][T15942] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 978.039577][T14450] usb 2-1: config 129 has an invalid interface number: 5 but max is 0 [ 978.068013][T14450] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 978.080019][T15942] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 978.093766][T15942] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 978.105168][T15942] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 978.120957][T14450] usb 2-1: config 129 has no interface number 0 [ 978.130867][T14450] usb 2-1: config 129 has no interface number 1 [ 978.137936][T14450] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 978.151757][T14450] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 978.163928][T14450] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 978.200067][T14450] usb 2-1: config 129 interface 135 has no altsetting 0 [ 978.235943][T14450] usb 2-1: config 129 interface 5 has no altsetting 0 [ 978.330008][T15942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 978.347851][T13522] uclogic 0003:28BD:0071.000A: failed retrieving string descriptor #100: -71 [ 978.367969][T13522] uclogic 0003:28BD:0071.000A: failed retrieving pen parameters: -71 [ 978.376636][T13522] uclogic 0003:28BD:0071.000A: pen probing failed: -71 [ 978.383702][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 978.383802][T13522] uclogic 0003:28BD:0071.000A: failed probing parameters: -71 [ 978.399891][T13522] uclogic: probe of 0003:28BD:0071.000A failed with error -71 [ 978.407869][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 978.416623][T13522] usb 7-1: USB disconnect, device number 19 [ 978.457179][T15942] 8021q: adding VLAN 0 to HW filter on device team0 [ 978.506677][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 978.533464][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 978.563630][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.570916][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 978.579250][T14450] usb 2-1: string descriptor 0 read error: -22 [ 978.585820][T14450] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 978.604734][T14450] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.613629][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 978.678789][T14450] usb 2-1: MIDIStreaming interface descriptor not found [ 978.704339][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 978.722332][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 978.788829][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.796024][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 978.887102][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 978.899950][ T4398] usb 2-1: USB disconnect, device number 18 [ 978.981472][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 979.057149][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 979.125589][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 979.204904][ T4363] udevd[4363]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 979.245922][T16100] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.282057][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 979.316742][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 979.356998][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 979.405277][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 979.443483][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 979.488456][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 979.531058][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 979.680424][T15942] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 979.934245][ T4244] Bluetooth: hci4: command 0x0419 tx timeout [ 980.122420][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 980.134777][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 980.161749][T15942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 980.556952][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 980.572484][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 980.610776][ T9538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 980.630021][ T9538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 980.663472][ T9538] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 980.689883][ T9538] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 980.719615][T15942] device veth0_vlan entered promiscuous mode [ 980.757588][T15942] device veth1_vlan entered promiscuous mode [ 980.789673][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 980.800736][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 980.837265][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 980.865041][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 980.890811][T15942] device veth0_macvtap entered promiscuous mode [ 980.912793][T15942] device veth1_macvtap entered promiscuous mode [ 980.986892][T15942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 981.006874][T15942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.023603][T15942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 981.043723][T15942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.056190][T15942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 981.067502][T15942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.087115][T15942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 981.106934][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 981.124830][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 981.171209][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 981.200197][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 981.257236][T15942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 981.308131][T15942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.362604][T15942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 981.443555][T15942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.508362][T15942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 981.544422][T15942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.565435][T15942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 981.584472][ T9538] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 981.608118][ T9538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 981.652801][T15942] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.663197][T15942] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.673056][T15942] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.682517][T15942] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.888440][ T4492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 981.909635][ T4492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 981.981489][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 982.010509][T13271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 982.041139][T13271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 982.074063][ T23] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 982.082271][T13271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 982.484394][ T23] usb 7-1: unable to get BOS descriptor or descriptor too short [ 982.544279][ T4199] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 982.575047][ T23] usb 7-1: config 129 has an invalid interface number: 135 but max is 0 [ 982.593724][ T23] usb 7-1: config 129 has an invalid interface number: 5 but max is 0 [ 982.603846][ T23] usb 7-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 982.627411][ T23] usb 7-1: config 129 has no interface number 0 [ 982.641744][ T23] usb 7-1: config 129 has no interface number 1 [ 982.656058][ T23] usb 7-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 982.683852][ T23] usb 7-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 982.707496][ T23] usb 7-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 982.742791][ T23] usb 7-1: config 129 interface 135 has no altsetting 0 [ 982.763936][ T23] usb 7-1: config 129 interface 5 has no altsetting 0 [ 982.959709][ T4199] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 982.973894][ T4199] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 983.024408][ T23] usb 7-1: string descriptor 0 read error: -22 [ 983.036490][ T23] usb 7-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 983.114983][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.191838][ T23] usb 7-1: MIDIStreaming interface descriptor not found [ 983.214335][ T4199] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 983.228050][ T4199] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.251754][ T4199] usb 9-1: Product: syz [ 983.261769][ T4199] usb 9-1: Manufacturer: syz [ 983.282336][ T4199] usb 9-1: SerialNumber: syz [ 983.392543][ T4804] usb 7-1: USB disconnect, device number 20 [ 983.405417][ T4199] cdc_mbim 9-1:1.0: skipping garbage [ 983.607725][T16178] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 984.291044][T16178] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 984.314327][ T4199] cdc_mbim 9-1:1.0: setting tx_max = 16384 [ 984.344234][ T4199] cdc_mbim 9-1:1.0: cdc-wdm0: USB WDM device [ 984.431627][ T4199] cdc_mbim 9-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.8-1, CDC MBIM, 4e:bb:90:1c:0b:cb [ 984.786923][ T4199] usb 9-1: USB disconnect, device number 15 [ 984.803384][ T4199] cdc_mbim 9-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.8-1, CDC MBIM [ 986.504260][ T1107] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 986.814830][T14450] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 986.914394][ T1107] usb 6-1: unable to get BOS descriptor or descriptor too short [ 986.994589][ T1107] usb 6-1: config 129 has an invalid interface number: 135 but max is 0 [ 987.017551][ T1107] usb 6-1: config 129 has an invalid interface number: 5 but max is 0 [ 987.043112][ T1107] usb 6-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 987.082311][ T1107] usb 6-1: config 129 has no interface number 0 [ 987.134531][ T1107] usb 6-1: config 129 has no interface number 1 [ 987.171714][ T1107] usb 6-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 987.224258][T14450] usb 7-1: unable to get BOS descriptor or descriptor too short [ 987.240291][ T1107] usb 6-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 987.261512][ T1107] usb 6-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 987.281701][ T1107] usb 6-1: config 129 interface 135 has no altsetting 0 [ 987.289626][ T1107] usb 6-1: config 129 interface 5 has no altsetting 0 [ 987.315867][T14450] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 987.535176][ T1107] usb 6-1: string descriptor 0 read error: -22 [ 987.547867][T14450] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 987.563256][ T1107] usb 6-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 987.590359][T14450] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.614177][T13522] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 987.624176][ T4199] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 987.646793][ T1107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.668839][T14450] usb 7-1: Product: syz [ 987.695112][T14450] usb 7-1: Manufacturer: syz [ 987.727992][T14450] usb 7-1: SerialNumber: syz [ 987.874306][ T4199] usb 8-1: Using ep0 maxpacket: 16 [ 987.874355][T13522] usb 2-1: Using ep0 maxpacket: 16 [ 987.976256][ T1107] usb 6-1: MIDIStreaming interface descriptor not found [ 988.004721][ T4199] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 988.013809][ T4199] usb 8-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 988.069627][ T1107] usb 6-1: USB disconnect, device number 24 [ 988.083864][ T4199] usb 8-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 988.112430][ T4199] usb 8-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 988.129246][T13522] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 988.163531][ T4199] usb 8-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 988.193642][ T4199] usb 8-1: config 1 interface 0 has no altsetting 0 [ 988.209675][ T4199] usb 8-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 988.210463][T16280] tipc: Enabling of bearer rejected, failed to enable media [ 988.231608][ T4199] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.248385][T14450] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 988.275340][ T4199] ums-sddr09 8-1:1.0: USB Mass Storage device detected [ 988.305915][ T4363] udevd[4363]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 988.344469][T13522] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 988.377610][T13522] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.393414][T13522] usb 2-1: Product: syz [ 988.398591][T13522] usb 2-1: Manufacturer: syz [ 988.403238][T13522] usb 2-1: SerialNumber: syz [ 988.431515][T13522] usb 2-1: config 0 descriptor?? [ 988.454361][T14450] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 988.463543][T14450] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 988.498907][T14450] usb 7-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 988.517773][T14450] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 988.528082][T14450] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 988.543464][T14450] usb 7-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 988.543855][ T4199] ums-sddr09: probe of 8-1:1.0 failed with error -22 [ 988.565900][ T4199] usb 8-1: USB disconnect, device number 21 [ 989.084635][T16293] device syzkaller0 entered promiscuous mode [ 989.103204][T16293] tipc: Enabled bearer , priority 0 [ 989.119722][T16291] tipc: Resetting bearer [ 989.167044][T16291] tipc: Disabling bearer [ 989.374569][T14450] usb 7-1: USB disconnect, device number 21 [ 989.616853][ T4397] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 989.865074][T14450] usb 2-1: USB disconnect, device number 19 [ 989.994381][ T4397] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 990.004812][ T4397] usb 8-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 990.013955][ T4397] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.032008][ T4397] usb 8-1: config 0 descriptor?? [ 990.076392][ T4397] option 8-1:0.0: GSM modem (1-port) converter detected [ 990.283105][ T4397] usb 8-1: USB disconnect, device number 22 [ 990.297331][ T4397] option 8-1:0.0: device disconnected [ 991.920930][T16320] device syzkaller0 entered promiscuous mode [ 992.010081][T16320] tipc: Enabled bearer , priority 0 [ 992.042378][T16319] tipc: Resetting bearer [ 992.108857][T16319] tipc: Disabling bearer [ 992.234160][ T4244] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 992.292258][T16328] device syzkaller0 entered promiscuous mode [ 992.321084][T16328] tipc: Enabled bearer , priority 0 [ 992.341315][T16327] tipc: Resetting bearer [ 992.385364][T16327] tipc: Disabling bearer [ 992.445452][ T4804] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 992.614450][ T4244] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 992.640524][ T4244] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 992.693180][ T4244] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 992.740050][ T4244] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 992.844602][ T4244] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 992.865936][ T4244] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 992.906130][ T4244] usb 6-1: Manufacturer: syz [ 992.921237][ T4244] usb 6-1: config 0 descriptor?? [ 992.964438][ T4804] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 992.973580][ T4804] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.034633][ T4804] usb 7-1: Product: syz [ 993.038990][ T4804] usb 7-1: Manufacturer: syz [ 993.043633][ T4804] usb 7-1: SerialNumber: syz [ 993.217132][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.228168][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.425569][ T4244] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 993.446539][ T4244] appleir 0003:05AC:8243.000B: No inputs registered, leaving [ 993.571486][T16348] tipc: Enabled bearer , priority 0 [ 993.581990][T16348] device syzkaller0 entered promiscuous mode [ 993.585109][ T4804] net_ratelimit: 4 callbacks suppressed [ 993.585175][ T4804] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 993.613460][ T4244] appleir 0003:05AC:8243.000B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 993.649412][T14450] syzkaller0: tun_net_xmit 70 [ 993.682790][T16348] tipc: Resetting bearer [ 993.704170][ C1] syzkaller0: tun_net_xmit 90 [ 993.737552][ T4397] usb 6-1: USB disconnect, device number 25 [ 993.744366][T16348] syzkaller0: tun_net_xmit 90 [ 993.793966][T16346] tipc: Resetting bearer [ 993.805536][T16352] fido_id[16352]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 993.842537][T16346] tipc: Disabling bearer [ 994.015787][T14450] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 994.092916][T14450] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 994.579402][T16365] device syzkaller0 entered promiscuous mode [ 994.595721][T16365] tipc: Started in network mode [ 994.601055][T16365] tipc: Node identity 424e63cce7b3, cluster identity 4711 [ 994.615659][T16365] tipc: Enabled bearer , priority 0 [ 994.637274][T16364] tipc: Resetting bearer [ 994.703331][T16364] tipc: Disabling bearer [ 994.719607][T16369] device syzkaller0 entered promiscuous mode [ 994.730546][T16369] tipc: Enabled bearer , priority 0 [ 994.738582][T16368] tipc: Resetting bearer [ 994.812209][T16368] tipc: Disabling bearer [ 995.024148][ T4804] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 995.294187][ T4804] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 995.324224][ T4804] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 995.354189][ T4804] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 995.384193][ T4804] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 995.424168][ T4804] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 995.456394][ T4804] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 995.494134][ T4804] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 995.524233][ T4804] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 995.554243][ T4804] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 995.564133][ T4804] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 995.573182][ T4804] lan78xx: probe of 7-1:1.0 failed with error -71 [ 995.594729][ T4804] usb 7-1: USB disconnect, device number 22 [ 996.264171][T14450] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 996.544048][T14450] usb 9-1: Using ep0 maxpacket: 8 [ 996.734441][T14450] usb 9-1: unable to get BOS descriptor or descriptor too short [ 996.824379][T14450] usb 9-1: config 8 has an invalid interface number: 45 but max is 0 [ 996.844170][T14450] usb 9-1: config 8 has no interface number 0 [ 996.870711][T14450] usb 9-1: config 8 interface 45 has no altsetting 0 [ 997.151752][T14450] usb 9-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=51.e7 [ 997.171033][T14450] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.200953][T14450] usb 9-1: Product: syz [ 997.214488][T14450] usb 9-1: Manufacturer: syz [ 997.219186][T14450] usb 9-1: SerialNumber: syz [ 997.233780][ T4397] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 997.381205][T16398] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.3294'. [ 997.471715][T16402] device syzkaller0 entered promiscuous mode [ 997.481754][T16402] tipc: Started in network mode [ 997.486765][T16402] tipc: Node identity 1af6b59f63, cluster identity 4711 [ 997.495861][T16402] tipc: Enabled bearer , priority 0 [ 997.507226][T16401] tipc: Resetting bearer [ 997.537269][T16401] tipc: Disabling bearer [ 997.622142][T14450] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 997.664229][T14450] gspca_sn9c2028: read1 error -71 [ 997.671679][T16405] device syzkaller0 entered promiscuous mode [ 997.682364][T16405] tipc: Enabled bearer , priority 0 [ 997.689407][T14450] gspca_sn9c2028: read1 error -71 [ 997.694960][ T4397] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 997.703605][ T4397] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 997.715672][ T4397] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 997.724990][ T4397] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 997.736351][T14450] gspca_sn9c2028: read1 error -71 [ 997.741532][T14450] sn9c2028: probe of 9-1:8.45 failed with error -71 [ 997.749005][ T4397] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 997.762857][T14450] usb 9-1: USB disconnect, device number 16 [ 997.774495][T16404] tipc: Resetting bearer [ 997.804166][T16404] tipc: Disabling bearer [ 997.897251][ T4397] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 997.914363][ T4397] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 997.928914][ T4397] usb 6-1: Product: syz [ 997.933412][ T4397] usb 6-1: Manufacturer: syz [ 998.002149][ T4397] cdc_wdm 6-1:1.0: skipping garbage [ 998.009297][ T4397] cdc_wdm 6-1:1.0: skipping garbage [ 998.023501][ T4397] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 998.031572][T16409] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3298'. [ 998.047945][ T4397] cdc_wdm 6-1:1.0: Unknown control protocol [ 998.694993][ T4397] usb 6-1: USB disconnect, device number 26 [ 999.315105][T16428] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.525285][T16435] device syzkaller0 entered promiscuous mode [ 999.626015][T16436] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.3306'. [ 999.777432][T16449] binder: 16446:16449 unknown command 1074553619 [ 999.790158][T16449] binder: 16446:16449 ioctl c0306201 200000000000 returned -22 [ 999.806949][T16449] binder: 16446:16449 ioctl 8933 0 returned -22 [ 999.889450][T16454] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 999.934162][ T23] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1000.314294][ T23] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1000.338058][ T23] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1000.394250][ T23] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.405563][ T23] usb 6-1: config 220 has no interface number 2 [ 1000.413095][ T23] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1000.427397][ T23] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1000.434534][ T23] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1000.441435][ T23] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1000.614396][ T23] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1000.623530][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.771388][ T23] usb 6-1: Product: syz [ 1000.801790][ T23] usb 6-1: Manufacturer: syz [ 1000.850519][ T23] usb 6-1: SerialNumber: syz [ 1001.223274][T16467] device syzkaller0 entered promiscuous mode [ 1001.264390][ T23] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 1001.281691][ T23] usb 6-1: No valid video chain found. [ 1001.298249][ T23] usb 6-1: selecting invalid altsetting 0 [ 1001.395505][ T23] usb 6-1: selecting invalid altsetting 0 [ 1001.408465][ T23] usbtest: probe of 6-1:220.1 failed with error -22 [ 1001.477351][ T23] usb 6-1: USB disconnect, device number 27 [ 1004.282108][T16485] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.3322'. [ 1005.174919][ T4804] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1005.825235][ T4804] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1005.870035][ T4804] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1005.941787][ T4804] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1006.010596][ T4804] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.264471][T16514] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1006.561612][T16534] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.3337'. [ 1007.290218][T14450] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1007.694331][T14450] usb 8-1: config 0 has an invalid interface number: 50 but max is 0 [ 1007.702481][T14450] usb 8-1: config 0 has no interface number 0 [ 1007.739324][T14450] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1007.954387][T14450] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1007.972731][T14450] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.001545][T14450] usb 8-1: Product: syz [ 1008.023231][T14450] usb 8-1: Manufacturer: syz [ 1008.039474][T14450] usb 8-1: SerialNumber: syz [ 1008.048411][ T4804] usb 9-1: USB disconnect, device number 17 [ 1008.077007][T14450] usb 8-1: config 0 descriptor?? [ 1008.137588][T14450] yurex 8-1:0.50: USB YUREX device now attached to Yurex #0 [ 1009.000185][T16569] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3346'. [ 1009.162932][T16575] device syzkaller0 entered promiscuous mode [ 1009.245357][T16577] netlink: 292 bytes leftover after parsing attributes in process `syz.8.3347'. [ 1009.464276][ C0] usb 8-1: yurex_control_callback - control failed: -2 [ 1009.485231][T13522] usb 8-1: USB disconnect, device number 23 [ 1010.348001][T16583] netlink: 'syz.7.3351': attribute type 1 has an invalid length. [ 1010.506418][T16583] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1010.880852][T16594] bond1: (slave geneve2): making interface the new active one [ 1010.976357][T16594] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1011.034309][ T9538] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1011.288542][T13522] yurex 8-1:0.50: USB YUREX #0 now disconnected [ 1012.225215][ T4804] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1012.494120][ T4804] usb 7-1: Using ep0 maxpacket: 16 [ 1012.654565][ T4804] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1012.744284][ T4804] usb 7-1: config 1 has an invalid interface number: 34 but max is 1 [ 1012.756951][ T4804] usb 7-1: config 1 has an invalid interface number: 129 but max is 1 [ 1012.784106][ T23] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1012.807713][ T4804] usb 7-1: config 1 has no interface number 0 [ 1012.826702][ T4804] usb 7-1: config 1 has no interface number 1 [ 1012.840490][ T4804] usb 7-1: config 1 interface 129 altsetting 9 endpoint 0xE has an invalid bInterval 255, changing to 11 [ 1012.891111][ T4804] usb 7-1: config 1 interface 129 altsetting 9 bulk endpoint 0x9 has invalid maxpacket 8 [ 1012.944394][ T4804] usb 7-1: config 1 interface 34 has no altsetting 0 [ 1012.966545][ T4804] usb 7-1: config 1 interface 129 has no altsetting 0 [ 1013.134415][ T4804] usb 7-1: New USB device found, idVendor=06e0, idProduct=f115, bcdDevice=f9.56 [ 1013.154194][ T4804] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.164356][ T23] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.232448][ T23] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1013.248980][ T4804] usb 7-1: Product: syz [ 1013.257150][ T4804] usb 7-1: Manufacturer: syz [ 1013.263008][ T23] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.274104][ T4804] usb 7-1: SerialNumber: syz [ 1013.302488][ T23] usb 8-1: config 0 descriptor?? [ 1013.346496][ T23] pwc: Askey VC010 type 2 USB webcam detected. [ 1013.615457][ T4804] ti_usb_3410_5052 7-1:1.34: required endpoints missing [ 1013.675152][ T4804] ti_usb_3410_5052 7-1:1.129: TI USB 3410 1 port adapter converter detected [ 1013.734219][ T4804] usb 7-1: USB disconnect, device number 23 [ 1013.774224][ T23] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1013.814571][ T4397] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1013.834162][ T23] pwc: recv_control_msg error -32 req 02 val 2700 [ 1013.874220][ T23] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1013.914151][ T23] pwc: recv_control_msg error -32 req 04 val 1000 [ 1013.964228][ T23] pwc: recv_control_msg error -32 req 04 val 1300 [ 1014.004289][ T23] pwc: recv_control_msg error -32 req 04 val 1400 [ 1014.044242][ T23] pwc: recv_control_msg error -32 req 02 val 2000 [ 1014.104571][ T23] pwc: recv_control_msg error -32 req 02 val 2100 [ 1014.154200][ T23] pwc: recv_control_msg error -32 req 04 val 1500 [ 1014.194287][ T23] pwc: recv_control_msg error -32 req 02 val 2500 [ 1014.229612][ T4397] usb 9-1: config 0 has an invalid interface number: 199 but max is 1 [ 1014.238165][ T23] pwc: recv_control_msg error -32 req 02 val 2400 [ 1014.264122][ T4397] usb 9-1: config 0 has no interface number 1 [ 1014.276165][ T23] pwc: recv_control_msg error -32 req 02 val 2600 [ 1014.314133][ T4397] usb 9-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1014.324426][ T23] pwc: recv_control_msg error -32 req 02 val 2900 [ 1014.359369][ T4397] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1014.499499][ T4397] usb 9-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 1014.514067][ T4397] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1014.534192][ T4397] usb 9-1: SerialNumber: syz [ 1014.560783][ T4397] usb 9-1: config 0 descriptor?? [ 1014.584182][ T23] pwc: recv_control_msg error -71 req 04 val 1100 [ 1014.604157][ T23] pwc: recv_control_msg error -71 req 04 val 1200 [ 1014.611755][ T4397] usb 9-1: Found UVC 0.00 device (0002:0000) [ 1014.624303][ T23] pwc: Registered as video103. [ 1014.625287][ T4397] usb 9-1: No valid video chain found. [ 1014.643399][ T23] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input15 [ 1014.668557][ T23] usb 8-1: USB disconnect, device number 24 [ 1014.877598][T16642] udc-core: couldn't find an available UDC or it's busy [ 1014.894469][T16642] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1014.977999][ T4397] usb 9-1: USB disconnect, device number 18 [ 1015.032911][T16676] netlink: 'syz.6.3378': attribute type 29 has an invalid length. [ 1015.041564][T16676] netlink: 'syz.6.3378': attribute type 29 has an invalid length. [ 1015.374103][ T23] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1015.508220][T16688] BUG: sleeping function called from invalid context at net/core/sock.c:3291 [ 1015.518110][T16688] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 16688, name: syz.5.3381 [ 1015.527318][T16688] 7 locks held by syz.5.3381/16688: [ 1015.532552][T16688] #0: ffffffff8d446f68 (sock_diag_mutex){+.+.}-{3:3}, at: sock_diag_rcv+0x17/0x40 [ 1015.541931][T16688] #1: ffffffff8d446e28 (sock_diag_table_mutex){+.+.}-{3:3}, at: sock_diag_rcv_msg+0x14a/0x3e0 [ 1015.552358][T16688] #2: ffff8880787c3698 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{3:3}, at: __netlink_dump_start+0x11f/0x700 [ 1015.563136][T16688] #3: ffffffff8d521028 (inet_diag_table_mutex){+.+.}-{3:3}, at: __inet_diag_dump+0x181/0x380 [ 1015.573497][T16688] #4: ffffffff8c31eb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 1015.582986][T16688] #5: ffffc900018662a8 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x917/0x12b0 [ 1015.593056][T16688] #6: ffff88807bc923a0 (msk_lock-AF_INET){+.+.}-{0:0}, at: inet_sk_diag_fill+0xf5e/0x1ca0 [ 1015.603210][T16688] Preemption disabled at: [ 1015.603220][T16688] [<0000000000000000>] 0x0 [ 1015.612027][T16688] CPU: 1 PID: 16688 Comm: syz.5.3381 Not tainted syzkaller #0 [ 1015.619710][T16688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1015.629804][T16688] Call Trace: [ 1015.633130][T16688] [ 1015.636094][T16688] dump_stack_lvl+0x188/0x250 [ 1015.640818][T16688] ? show_regs_print_info+0x20/0x20 [ 1015.646036][T16688] ? load_image+0x400/0x400 [ 1015.650621][T16688] ? __local_bh_enable_ip+0x136/0x1c0 [ 1015.656042][T16688] ___might_sleep+0x493/0x610 [ 1015.660743][T16688] ? __might_sleep+0xf0/0xf0 [ 1015.665352][T16688] ? nla_put+0x130/0x1e0 [ 1015.669680][T16688] ? read_lock_is_recursive+0x10/0x10 [ 1015.675229][T16688] ? sock_diag_put_meminfo+0xc6/0x120 [ 1015.680627][T16688] ? sock_diag_save_cookie+0xc0/0xc0 [ 1015.685929][T16688] ? rcu_preempt_deferred_qs_irqrestore+0x868/0xc30 [ 1015.692583][T16688] __lock_sock_fast+0x2f/0xe0 [ 1015.697310][T16688] ? inet_sk_diag_fill+0xf5e/0x1ca0 [ 1015.702531][T16688] mptcp_diag_get_info+0x1fe/0x9e0 [ 1015.707658][T16688] inet_sk_diag_fill+0xf5e/0x1ca0 [ 1015.712716][T16688] ? inet_diag_msg_attrs_fill+0x930/0x930 [ 1015.718454][T16688] ? do_raw_spin_lock+0x128/0x2f0 [ 1015.723530][T16688] ? __rwlock_init+0x140/0x140 [ 1015.728303][T16688] ? inet_diag_bc_sk+0x18b/0x1120 [ 1015.733356][T16688] mptcp_diag_dump+0xce6/0x12b0 [ 1015.738258][T16688] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 1015.744865][T16688] __inet_diag_dump+0x1f6/0x380 [ 1015.749764][T16688] inet_diag_dump_compat+0x17e/0x220 [ 1015.755062][T16688] ? inet_diag_dump_start_compat+0x20/0x20 [ 1015.761018][T16688] ? __alloc_skb+0x473/0x750 [ 1015.765629][T16688] netlink_dump+0x694/0xcf0 [ 1015.770169][T16688] ? netlink_lookup+0x1d0/0x1d0 [ 1015.775056][T16688] ? __inet_diag_dump_start+0x805/0x970 [ 1015.780626][T16688] __netlink_dump_start+0x523/0x700 [ 1015.785855][T16688] inet_diag_rcv_msg_compat+0x207/0x420 [ 1015.791418][T16688] ? inet_diag_unregister+0xb0/0xb0 [ 1015.796840][T16688] ? __mutex_trylock_common+0x155/0x260 [ 1015.802410][T16688] ? mutex_lock_io_nested+0x60/0x60 [ 1015.807801][T16688] ? __inet_diag_dump+0x380/0x380 [ 1015.812834][T16688] ? inet_diag_dump_start_compat+0x20/0x20 [ 1015.818654][T16688] ? inet_diag_dump+0x50/0x50 [ 1015.823348][T16688] ? inet_diag_unregister+0xb0/0xb0 [ 1015.828554][T16688] sock_diag_rcv_msg+0x164/0x3e0 [ 1015.833939][T16688] netlink_rcv_skb+0x1f5/0x440 [ 1015.838735][T16688] ? sock_diag_bind+0xa0/0xa0 [ 1015.843423][T16688] ? netlink_ack+0xb50/0xb50 [ 1015.848026][T16688] ? __lock_acquire+0x7d10/0x7d10 [ 1015.853070][T16688] sock_diag_rcv+0x26/0x40 [ 1015.857494][T16688] netlink_unicast+0x774/0x920 [ 1015.862278][T16688] netlink_sendmsg+0x8ba/0xbe0 [ 1015.867057][T16688] ? netlink_getsockopt+0x570/0x570 [ 1015.872275][T16688] ? aa_sock_msg_perm+0x94/0x150 [ 1015.877258][T16688] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1015.882560][T16688] ? security_socket_sendmsg+0x7c/0xa0 [ 1015.888026][T16688] ? netlink_getsockopt+0x570/0x570 [ 1015.893228][T16688] ____sys_sendmsg+0x5b7/0x8f0 [ 1015.898016][T16688] ? __sys_sendmsg_sock+0x30/0x30 [ 1015.903069][T16688] ? import_iovec+0x6f/0xa0 [ 1015.907590][T16688] ___sys_sendmsg+0x236/0x2e0 [ 1015.912300][T16688] ? __sys_sendmsg+0x2a0/0x2a0 [ 1015.917206][T16688] ? percpu_counter_add_batch+0x13b/0x160 [ 1015.922964][T16688] __se_sys_sendmsg+0x1af/0x290 [ 1015.927831][T16688] ? __x64_sys_sendmsg+0x80/0x80 [ 1015.932781][T16688] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1015.938784][T16688] ? lockdep_hardirqs_on+0x94/0x140 [ 1015.944044][T16688] do_syscall_64+0x4c/0xa0 [ 1015.948489][T16688] ? clear_bhb_loop+0x30/0x80 [ 1015.953260][T16688] ? clear_bhb_loop+0x30/0x80 [ 1015.957947][T16688] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1015.963861][T16688] RIP: 0033:0x7fbf99312dd9 [ 1015.968293][T16688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1015.987912][T16688] RSP: 002b:00007fbf9752a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1015.996339][T16688] RAX: ffffffffffffffda RBX: 00007fbf9958c180 RCX: 00007fbf99312dd9 [ 1016.004334][T16688] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1016.012319][T16688] RBP: 00007fbf993a8d69 R08: 0000000000000000 R09: 0000000000000000 [ 1016.020300][T16688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1016.028279][T16688] R13: 00007fbf9958c218 R14: 00007fbf9958c180 R15: 00007ffcdf99dfb8 [ 1016.036276][T16688] [ 1016.039340][ C1] vkms_vblank_simulate: vblank timer overrun [ 1016.175598][ T23] usb 7-1: Using ep0 maxpacket: 8 [ 1016.344339][ T23] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1016.434361][ T23] usb 7-1: config 4 interface 0 has no altsetting 0 [ 1016.674320][ T23] usb 7-1: string descriptor 0 read error: -22 [ 1016.685433][ T23] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1016.709906][ T23] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1016.776496][ T23] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1016.815964][ T23] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1016.842654][ T23] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1016.855448][ T23] usb 7-1: media controller created [ 1016.930099][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1017.291692][T16695] netlink: 'syz.6.3378': attribute type 29 has an invalid length. [ 1018.114228][ T23] zl10353_read_register: readreg error (reg=127, ret==0) [ 1018.357757][ T23] usb 7-1: USB disconnect, device number 24