last executing test programs: 1m35.486163434s ago: executing program 3 (id=65): setpriority(0x1, 0xffffffffffffffff, 0x6) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000002000000ea00"/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xe1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x1, 0x4, &(0x7f0000000f40)=ANY=[@ANYBLOB="18000000000000000000000000000000711042000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1m35.177103287s ago: executing program 3 (id=66): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'macvlan0\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'rose0\x00'}, 0x18) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = syz_io_uring_setup(0x27f2, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x26, 0x4004, @fd_index=0xa, 0x2, 0x0}) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0xffffffffffffff29, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000640)={0x0, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000000)={0x8, &(0x7f0000000180)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x20, 0xe, 0xa8, {0xa8, 0x3b, "642a0fe356c79588aa9b510beb7d92ec90d9e94f34f4721d1dd279f606543d4855666b840b278fa0a0ee6b37e19c85c68abb10e538ab956c8c561c96c2a18c4a94c148d8d8379bf04d376b320befc08d25d93646ba2f386d1260afd686efce40a6d5ed8b3e3dd4e3b8a4f197fdf13932d41ce6fab722f8ba0e62abbc8dd9daa316b0e8da6acc0f1674594c4a3dc59038cdfcb3927a7ffc157dcac63a8d129a9f1eac3e27257f"}}, &(0x7f0000000300)={0x0, 0x3, 0xea, @string={0xea, 0x3, "55f30d465c8c2891123db21cd2d0aa0954730e6976268acb0aeb59adb32572e91816454436b6930e2bc1072731ccbedc65660844ac1b46a94511282c5f18b5bad052a0a5687226c756a464a3b16215e29241ac7610e3689148eafd8d1feaa6787e6d987e143807c612b714605267ce89ec62e653d52ea67afe8d0c4ba1b980c7a1a1a7e2d35e030e57b8396dca34ffd0c88c374f99dc8c4bf54367da01fba061a148673556bf5e23d7efa08738ce5f97780a9767c0ad9f82e42ef176741af2ba012c97fbdfd625ee99c58257a11d9889551d342bc36789f7f4698b1ffbbe21f942fc1aa28b5d09c8"}}}, &(0x7f0000000500)={0x34, &(0x7f0000000680)={0x0, 0x17, 0xd2, "80fd82b7c287e535afdb1f436cd60d1e25aa0452b3275df53c2c44fc4b3173182ad01a2ab24c094a0de8fc78a8d85f170eef51deedc590c58dd6928d563fcf22fcb027d1a7dae668d8a22b9e7aeeef434cbc255aca013c7dce60f2f7d552302dbd364eab5d6240d102c6ed4bd6ed7a7f509f4d356a12410b3815bcecebf5f507abdeb9cc7235b756cdfba41c02adf02d71c91a3defa74bb0f5c79121b4e9ef891d59e570551827ef7539a0dd77512aebe18c8b4e5cb716dd5d8f67b6933b289981ce427a9f842932d31f6a82f59c83f89a97"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000780)={0x20, 0x0, 0xe5, {0xe3, "a9fac15522f88f88cf6bf1a3fbb57f786e30a0fef7ab51dab7bbe48964364da5e2a0f9fc2bb22f2f86a589ea1fc2b6b6443ce6fbf5f8965fb1a5323a16b3f41336428f880b15992ec342ee8464473410cad24dab0718acb8a48a52837b76c8f6c9bbabfcdc051fd920cf52e7779d1faf42a151a4ef64329eddb8b1158e0df08be44bdae4feaddca6b5e5051baebc554e488b5e7934107c0c1a615a3f63a00a1ca9398e17c5677e222dd332302bab9aba097ad499668314a9610b2547590b731a0f2b651c076366b097e4c1595162afe5b089d4f9ca8a0557cbe28aee620d5472d4764c"}}, &(0x7f0000000440)={0x20, 0x1, 0x1, 0x39}, &(0x7f0000000480)={0x20, 0x0, 0x1, 0x7}}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000002c0)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_clone(0x4201300, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80146, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r9, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x29]}) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x54}], 0x1555555555555457, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ptrace(0x10, r6) syz_usb_disconnect(r1) wait4(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000600)=ANY=[@ANYBLOB="40011d88211f"], 0x0, 0x0}) 1m31.522411112s ago: executing program 3 (id=80): r0 = eventfd2(0x0, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000040)="eebd73c460f8a4a8", 0x8}], 0x1) 1m31.453151709s ago: executing program 3 (id=82): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000800)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r0, &(0x7f0000002180)=[{{&(0x7f0000000600)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001cc0)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x2000c044) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0xa, 0x1, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f0000000480)={{r2}, &(0x7f0000000000), 0x0}, 0x20) r3 = syz_io_uring_setup(0xec4, &(0x7f00000004c0)={0x0, 0x2f4c, 0x400, 0x20000003, 0x26d}, &(0x7f0000000540)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0x0) unshare(0x26020280) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x4f, &(0x7f0000000780)=ANY=[@ANYBLOB="1201000075b21f408680630bf3ca0102030109023d0001000000000904540003ccc8ac00090504041806d803"], 0x0) readv(0xffffffffffffffff, &(0x7f0000000300), 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x5}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000200)={r6, 0x4, 0x20}, &(0x7f0000000240)=0xc) syz_clone3(&(0x7f0000000480)={0x285000, 0x0, 0x0, 0x0, {0x38}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = dup2(r1, r3) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000100)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x1, "cb3c11547a45b87376ebaea4e0d17c05038ed72b6f20e1951706e1825989798b", 0x2, 0xff, 0x1, 0x9f59}, 0x3c) syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}}) syz_emit_ethernet(0xd2, &(0x7f0000000640)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x9c, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @mlv2_query={0x82, 0x0, 0x0, 0x18, 0x775d, @mcast1, 0x5, 0x0, 0x8, 0x5, 0x8, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @private2, @loopback, @private0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote]}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c000000100005e5ffffff000400000000000000", @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYBLOB="65806d83cb0060f0c163fdb8bd192be7c0d18cabce6320e2e8390f5e"], 0x6c}, 0x1, 0x0, 0x0, 0x4084}, 0x0) 1m29.663528714s ago: executing program 3 (id=95): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea0009058703", @ANYRES8], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendto$packet(r0, &(0x7f00000001c0)="6ffb0de8ee9a80d1664f4f4ea505dc67f8af634021ecf6b4f0c3bb4bd0233e4265a7fb", 0x23, 0x48891, &(0x7f0000000000)={0x11, 0x9, r1, 0x1, 0x40}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x10, 0x200, 0x6, 0x0, 0x0, 0x8, 0x38d1f1c9, 0x80}, 0x0, 0x0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 1m29.374419696s ago: executing program 3 (id=97): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000140)=@in6={0x21, 0x2, 0x2, 0xfffffe39, {0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0xcb}}, 0x24) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88ad9925}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x44}}, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r3 = socket$igmp(0x2, 0x3, 0x2) syz_open_dev$usbfs(&(0x7f0000000080), 0x10, 0x4a040) r4 = syz_io_uring_setup(0x279, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x60e6, &(0x7f0000000280)={0x0, 0xfffffffd}, &(0x7f0000000300)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r4, 0x2003, 0x0, 0x0, 0x0, 0xffffffffffffffa3) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="8000e2000a000200aaaa"], 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@local, 0x80, r9}) ioctl$SIOCGETVIFCNT(r3, 0x89e0, &(0x7f0000001e00)) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) ioctl$VIDIOC_QUERYMENU(r2, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @name="5d677b55d939e4cd74907d42766bb30347af974eec31e0c04e38db1f1f0edcd5"}) 1m28.815651366s ago: executing program 32 (id=97): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000140)=@in6={0x21, 0x2, 0x2, 0xfffffe39, {0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0xcb}}, 0x24) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88ad9925}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x44}}, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r3 = socket$igmp(0x2, 0x3, 0x2) syz_open_dev$usbfs(&(0x7f0000000080), 0x10, 0x4a040) r4 = syz_io_uring_setup(0x279, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x60e6, &(0x7f0000000280)={0x0, 0xfffffffd}, &(0x7f0000000300)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r4, 0x2003, 0x0, 0x0, 0x0, 0xffffffffffffffa3) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="8000e2000a000200aaaa"], 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@local, 0x80, r9}) ioctl$SIOCGETVIFCNT(r3, 0x89e0, &(0x7f0000001e00)) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) ioctl$VIDIOC_QUERYMENU(r2, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @name="5d677b55d939e4cd74907d42766bb30347af974eec31e0c04e38db1f1f0edcd5"}) 1m9.06606156s ago: executing program 5 (id=190): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000900)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d61637365630000140002800500060001000000050007000100000008000500", @ANYBLOB='\b\x00\n'], 0x54}}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) unshare(0x2a020480) fadvise64(r3, 0x5, 0xffffffffffffffff, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = memfd_create(&(0x7f00000001c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xf7\x00d2*Nha\x97\xd5\f\xde@\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\x91\xeb\xfc_q\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1a\x81]\x01*\x1b\xfd\xbcMA\xdcq\xa1b\x17\xab\xe4\x14l\x9b$\x13\xa7\x00MO\xb8\xfdX\xaaf*Du\x02z\x89(\xbcu\x9e\xdf\xe7es\xb9\x1e\xb2\x83\xdc\x82\xed\xcf\x1e\xff\x00\x00\x00\x00g\xa2-\xb1\x94\x9b\x04\x899\xf25\xae\xbb[C\x8aH\xa0\xb1\xa4&\xfb\xe4\xae\xf9R[jQ\x92\xc6K\xe6U\xaa3\xeb\x93\x84bIn\xc9\x11e\xf6;\xce\xee\xe2\x84]\x1eF\xee\xaf\x97Md\xbb\xd1}\x91\x12`\x02\xaa\xb2\xe8F7\t\x92\xedO`\xf7jc\x00\x11|]\x13\xaa<)0\x95-\xe7\xc5\xceuB\xba\xd5\x10\x1d4\x8f@\xfd6\xed?\xe5\xb7\x9d\xb7\xc3+m\x94\xf7\x00g\xa8\xd0y\xaa\x86\f?c\x8c.\x05\n\xf1\x9dw8\xbb\xcf\x9a\xfewx\xb7\xea\xb0\xe0\xa2\xa6/u\x18\xb8\x912g\x19\xcauw\xa8\x93\x80h\xad\x04\xf9sCB?b?\x1a\x04\x11U\xac\b\x9b\xd3\x04\xd9\xdb\xa3?qny\x19f{F\xb0\xb2\xc6\xe9\x1f\x13\x14\xbb\xde\x06\x16\b\x95^q\x0f\xc6\x16\xfeG\xf9\xf3D\xe9:\x86\xc8!4\xa0+\xba\x87\xdd\xbc\xbd\x93\xbb\xef*:\x00Ld\x00'/408, 0x4) ftruncate(r6, 0x40000001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000307000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000299000/0x4000)=nil) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="3f4e55f1", 0x4) sendto$unix(r2, &(0x7f0000000440)="397ba77d4e7685128d22a3951cf348a99c5538d33587299e6e8a97c42979c3be3fd27290f404c946815a0e2b75ed671d097e287ae3f420df596a1a4d074170c1ce57e0109ac10352fadb7a1f7dc595307eb099fa7950587a8c1aed8d3ea46026e946386372c9af52ab4b2d6fb5046398e8e28c3579f26f84102499e2002c50ab2f89db276c050075a9af583db4b3cf62f660da46554dfb298405df5a2abbef7d1aa66b61f14524aeecfaefe6a3c225e8e62bfc2cd90a7a48e79cd27ce0dcaf959a579badfc577cafffb98f0ae7f3929e5f9cc8839c0c306bfa", 0xffffff9d, 0x0, 0x0, 0xfffffffffffffd8c) recvfrom(r2, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x0, 0x0, 0xffffffffffffff54) sendmmsg$unix(r2, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000001c0)=',', 0x1}], 0x1}}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r7, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r7, 0x5001, 0x0) r8 = io_uring_setup(0x586b, &(0x7f0000000200)={0x0, 0x6a5d, 0x80, 0x3, 0xd3}) io_uring_setup(0xf4b, &(0x7f00000002c0)={0x0, 0x9667, 0x80, 0x0, 0x348, 0x0, r8}) write$dsp(r7, &(0x7f0000000080)="c229", 0x2) close_range(r7, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) 1m7.847426443s ago: executing program 5 (id=192): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, 0x0, &(0x7f00000000c0)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r5, 0xc080aebe, &(0x7f0000000440)={{0x0, 0x0, 0x80}}) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_SET_IRQCHIP(r6, 0xae64, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r6, 0x80089419, &(0x7f0000000080)) close_range(r0, 0xffffffffffffffff, 0x0) 1m7.419881689s ago: executing program 5 (id=194): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(0x4) (async, rerun: 32) ioctl$KVM_CHECK_EXTENSION(r2, 0xae01, 0x1) (rerun: 32) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000862000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x40, 0x0, 0x0) (async) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0xdddd1000, 0x205000, 0x8}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x1a, 0x98, 0x90, 0x8, 0x547, 0x7303, 0x3027, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x27, 0x0, 0x0, 0x9e, 0x41, 0xb3}}]}}]}}, 0x0) 1m6.986237353s ago: executing program 5 (id=196): syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0xd, 0x20006, 0x19, 0x0, {0x1}}) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x10, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xb2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x50, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x1, 0x7, {0x9, 0x21, 0x8, 0x6, 0x1, {0x22, 0x3c3}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x54, 0xfc, 0x3}}}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x0, 0xb6, 0x1, 0x8}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x9, [{0xf, &(0x7f0000000300)=@string={0xf, 0x3, "ffb2bb21c64d7d4589920f0fef"}}, {0xba, &(0x7f0000000340)=@string={0xba, 0x3, "088f0a1db64cde35bacdf5d240ac5f946b22abe624728a1a2017e2a9a0bd9d4a5ec655df33369ca1df00f22507eb773311d194ddb5184d7ee88e9fcc09a108eafeaa570f656c4f6e7b2d13e8c7be33a22877eb31a923176318024b05eb5d0530e024313dae18850353dd17bf8584ee34a4994f1d171e45fb578c321dac990f1cf25482f343387d7a65fb7cab0d2fc1a288dcd1201f1e0358161970aea922e56fafdd08c077374af278b415c650726c0638674214fb86b6f7"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x4c12}}, {0xd4, &(0x7f0000000440)=@string={0xd4, 0x3, "7a273be79396d3891548d60ecc557df544eface2b2e85021e1fd58b043d5ea63b9de872eefb1d8ad45f455b1956744650c9cf4202307aeb8525935c1172df8933828c360dbe33ca00dedd924ab0e9c926057fce680717956f300d404a43942b0ca2148fd6e029e193d2899d52cb6f95f9e9926035d3536e9856d331c07391c6ca58387990063bfb86c0ae8d1f7676e5f91fd7998f43e3134f997af510f007fd1e17cc16dc8c6f8a99f55927aa3f2f6a5e6f473e2ca5c2bc39ee15695c03bb4a79bb6e156622aa1634c997ce705bd549dc4a0"}}, {0x67, &(0x7f0000000540)=@string={0x67, 0x3, "6c394b51b61e0598ece1ad52ff8719d4e0e1180accd75a2bacaff1a938db797c5f6bd219c09740f4cbeb28eb50c96e53c56293a27da0b0766e1054278266d4d6b4d901072f728d2476a6aed5ea4b054fed7ff045cc4922c1f40107fb05ea821589107f1349"}}, {0xc9, &(0x7f00000005c0)=@string={0xc9, 0x3, "fd2038e760c3ab53f890a0172cff26218fe9ab3ab7bb187132c20f59fd866c40a0337dd188b10d59ae79cefd2f9bd8d933d0b234c404c8e372d53fb0212c053d8538cc0310f058b0d2eb78a59a482b5c7077d0888e6c4ec389c034af2d213b54633d26f788aa54e0dfbb21dc292096b38b1c7f0b1324beff7f89c91644d2f7980bfc5e5afd6dfc587b966ee33e24424667bf835e4c284bbb5bfee937743981b1ad67cc218be266586af575cd811d9a38e799b005b7f9f9111ec72351daad08c46f762d260f1d16"}}, {0xb8, &(0x7f00000006c0)=@string={0xb8, 0x3, "939781fe08d48560e660a84855d6dafa1a1572ebbc615644085cb285fa202532cba43ee65457f8d0bab52df63f677d163c9a760ac8576e71f1bb7dcc247a99ff89cb615f5428dc7e8d9c8422bd8f4cb6c163794e5c767c410e40d06048418e65d6f3ca5ced83e66622aa930bb15fbca3e79354b66162bf630d7249bc38236aa6f58638a231a55bd4b1c842b1e59303a59e2e81541fd052b3c42f793c9cae6c434cbf8193514abd9871df9d54b4e45f5b1ed9ebb8fb88"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x3001}}]}) msgrcv(0x0, &(0x7f0000000080)={0x0, ""/171}, 0xb3, 0x0, 0x800) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f0000000040)={0x0, 0x32315659, 0x280, 0x168}) read$FUSE(r3, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f00000000c0)=0x5, 0x0, 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r7, r3) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_create1(0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000092fa1e109911a36866060000a736a5c70002f015cf00090505001000000800090582024000000000"], 0x0) 1m6.985754016s ago: executing program 4 (id=197): add_key(&(0x7f0000000440)='dns_resolver\x00', 0x0, &(0x7f00000004c0)="a079394a04954e2d1523cd274d954f18a7b1235d2023e670955c12e7265fa97c2cfb7ba5f67d4a0f06d00c089c2dbb7034ddf203c4f50b4d19d6ab0b49d345571461f3c9bc2be016252397574e61cd9b5fc6337f92b077112e9d69d5f0d761e584bd5f7a22aa334740193d174c89a6670c1c0a98533ebffcb043f72e876d30dc59b400", 0x83, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x801, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x8010) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) splice(r4, 0x0, r3, 0x0, 0x7fffeffc, 0x0) syz_usb_connect(0x6, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109021b00010000000009040000015883b2000905d2", @ANYRESHEX=r2], 0x0) 1m6.244183472s ago: executing program 4 (id=200): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = signalfd4(r0, &(0x7f0000000300)={[0x5]}, 0x8, 0x800) mkdirat(r1, &(0x7f0000000340)='./file0\x00', 0xc0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x22, 0x2, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="02130000020000000000000000000000082b62760731bc9e0fa734a766361a696efa85fbfc14d7e7b8bee3ad9df03370bef73bb9158419624149921f8c32e1fab0c43b0e7a170b3daa97e37c17308b204e93"], 0x10}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x0, r2}) ioctl$TIOCEXCL(r5, 0x540c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$kcm(0xa, 0x3, 0x87) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r9 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r8, @ANYBLOB="05"], 0x0) syz_usb_control_io$uac1(r9, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003040000002203"]}, 0x0) syz_usb_control_io$uac1(r9, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00032a0000002a03"]}, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000180)="6de822ff5d", 0x5}], 0x2, 0x0, 0x0, 0x900}, 0x60) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="94010000", @ANYRES16=r10, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="021200004200000000ecff7b05000000915165ed1b49cbd99a750997a70dbd18e2bf11ab2e88d8ca95a7a1a5a84b265659d2"], 0x10}}, 0x0) unshare(0x20000400) r11 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r11, 0x11, 0xa, &(0x7f0000000200)=0x4000000, 0x4) close_range(r3, r2, 0x0) 1m3.899291446s ago: executing program 5 (id=212): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$unix(r2, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) (async) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="140000"], 0x18}, 0x0) recvmsg(r2, &(0x7f0000000280)={&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/231, 0xe7}, {&(0x7f0000000100)=""/81, 0x51}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000500)=""/107, 0x6b}, {&(0x7f0000000580)=""/151, 0x97}], 0x6}, 0xc0) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000000000000000000400000000000003a00000000200003000a00000000000000fc010000000000000000000000000000000000000d0001007564703a73"], 0x6c}}, 0x0) 1m3.289654732s ago: executing program 5 (id=215): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) dup3(r0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) listen(0xffffffffffffffff, 0x80080400) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2c}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="a4010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1a4}}, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="04050400c80e3fccfeb40008"], 0x7) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, 0x0) syz_usbip_server_init(0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500010300000000000000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r5, 0x0, 0x42, &(0x7f00000000c0)={'icmp\x00'}, &(0x7f0000000100)=0x1e) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e21, @multicast1}}, 0x0, 0x0, 0x25, 0x0, "554abfb60d5d85091e9c2d2e92edd08fccfc4698a6663db1bdfbee7d3dbfff062c8f08daa4e60a5d690eb461ff4e01ee88f5274fa741296836285d6202272bfb8b6a953d9f6b1fd48c57c37f83b2f4aa"}, 0xd8) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000040)={0xa, 0x50, 0x7, 0xfffffffd, 0x2}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x1}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0xffffffffffff0001, 0x80) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f00000000c0)={0x80000000, 0x0, 0x10000}) 1m2.909109672s ago: executing program 33 (id=215): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) dup3(r0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) listen(0xffffffffffffffff, 0x80080400) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2c}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="a4010000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb54248010880d0000080060005000000000024000100dbffffffffffffffffffffffffffffffffffffe9ffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce851400040002000000ac1414aa000000000000000068000980b9fd0080060001000a0000001400fdffff0200000000000000000000000000010500030000000000040000801c000080060001000200000008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a00000000000000fc0000000000000000000000000000000000000004000100dbfffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff080003000000000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1a4}}, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="04050400c80e3fccfeb40008"], 0x7) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, 0x0) syz_usbip_server_init(0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500010300000000000000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r5, 0x0, 0x42, &(0x7f00000000c0)={'icmp\x00'}, &(0x7f0000000100)=0x1e) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e21, @multicast1}}, 0x0, 0x0, 0x25, 0x0, "554abfb60d5d85091e9c2d2e92edd08fccfc4698a6663db1bdfbee7d3dbfff062c8f08daa4e60a5d690eb461ff4e01ee88f5274fa741296836285d6202272bfb8b6a953d9f6b1fd48c57c37f83b2f4aa"}, 0xd8) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000040)={0xa, 0x50, 0x7, 0xfffffffd, 0x2}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x1}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0xffffffffffff0001, 0x80) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f00000000c0)={0x80000000, 0x0, 0x10000}) 1m2.88731396s ago: executing program 4 (id=219): r0 = socket(0x10, 0x6, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc491c6170000501d0000be7ba9bd"], 0x1c}}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="fd0200007d00000005fa00000000000000000000000000000000000003e800000000000000000000000000000000000000001f00046e6f6465767b6376666f7825ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde054000000000187b8200b500003b59010000004354b9fd9ef196a51cd5157adc8106b494e11200cfc2001000000000000000000000f313f6005e00f8f669fb716dcf315ecaf385409ac65b9408679d2c3b9e1d52c3d6da9bf699f88804006cde7ba4a400b4b0b4dbf6c69a69d017cec45906f174a666a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1cbe36f4fd1a2c016f6465762d6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae894806878267d5a1298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d723859dba3f93aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f399f061f75b7797ce1fe11ea919609d51a41dd3de304bd7c7ed0a456f0ae12516105c9ce887df5a6e0b6a77d596cf88ba6e5c6397c7d5021d7989528fd1739e1c2d87fff00"/559, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x23b) (async) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) (async, rerun: 32) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) getsockopt$inet6_int(r5, 0x29, 0x4e, 0x0, &(0x7f00000000c0)) (async, rerun: 32) pselect6(0x40, &(0x7f0000000300)={0x7f, 0x9, 0x8000000000000001, 0xf, 0x5, 0x0, 0x9, 0x3}, &(0x7f0000000340)={0x4, 0x6, 0x4, 0x3, 0x5, 0x0, 0x467, 0xc}, &(0x7f0000000380)={0x2, 0x9, 0x4, 0xffff, 0x7, 0x6, 0x7}, &(0x7f0000000400)={r3, r4+10000000}, &(0x7f0000000480)={&(0x7f0000000440)={[0x14]}, 0x8}) (async, rerun: 32) recvmmsg$unix(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async, rerun: 64) listxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=""/122, 0x7a) (rerun: 64) r7 = socket$inet6(0xa, 0x3, 0x2f) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x5) r11 = dup(r10) ioctl$KVM_SET_MSRS(r11, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000c501"]) (async) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) utimensat(r11, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000680)={{0x0, 0xea60}, {r12, r13/1000+10000}}, 0x40220aadf16cfa2a) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@rand_addr=0x64010101, @in6=@local, 0x4e23, 0x0, 0x4e23, 0x3, 0x2, 0x0, 0x0, 0x33}, {0x0, 0x1000000100000004, 0x7, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0xab}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@remote}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10}}, 0xe8) (async, rerun: 32) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async, rerun: 32) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000004c0)={@private1, 0x0, 0x0, 0x0, 0x0, 0x4, 0xd0}, &(0x7f0000000540)=0x20) (async, rerun: 64) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="656e633d70fadbcbe05a78d2855e9a68d70863733120686173683d62"], 0x0, 0x0) (rerun: 64) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000100), &(0x7f0000000280)=ANY=[@ANYBLOB='enc=pkcs1 hash='], 0x0, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYRESOCT=r1, @ANYRES64=r6, @ANYRES16=0x0, @ANYRES32=r6, @ANYRES16=r7, @ANYRES16=r7, @ANYRES64=r4, @ANYRES64=r0], 0x0) (async) r14 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r14, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fbdbd7001400136574683a6970365f767469300000000055f81dc605692c120a47db8581bcb6cf8091b9b6be183c2cbd05ddb41c369a04ede0742383ab23758d06b9d7fb98fb7f4ada553383ab9ca74d9a021401b301a05ac205a25646b5751ba6006c33a13d93c07959c57645648143b70e8cc1b5b080b8152db30332aa2a06ce78dc7a9feaeb26ad4177b10a8878b44cfed527057edaed7cef537d427fd90c68daac919ba6bab152104f", @ANYRESDEC, @ANYRES8=r6, @ANYBLOB="aeeb2eb5a04b829b4bbc64c49ba979055dcd338e6411c748fa5b279c6863921a7c94255bfcd680852f01a3a43885aad2ae891a61cdf1b49f26ddb5c5e4f097d3ccb4ac5af5b4bbfebd7e71d067512f0cdf4962d60684e1ec7586e7f80f32ff8d7f7732770e3a10eba4bf9945f76d1e2e1c83b0d67287343647cc09fb3fc2e40a58f0001a6798762de1b64d1d6a3298f15fb536523cdeaca3b83230dba2a4270b01b03618241d72f071288a374528dc63ed02eaf6111c3f0aad5021922ca4d1f11f7d4a05298b3c2fd07cf331220b5f1372b444b6f83c9e7166"], 0x30}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) (async, rerun: 64) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x5b7b03bef4efc5a3}, 0x20000000) (async, rerun: 64) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000001a40)={0x4e0, 0x6, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 1m2.566287496s ago: executing program 4 (id=220): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x8695c3813aa3cd9d}}, 0x50) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8, 0x2) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc0009058502", @ANYRES8=r2], 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet6_tcp_buf(r4, 0x6, 0xd, 0x0, &(0x7f0000000180)) r5 = socket$unix(0x1, 0x5, 0x0) r6 = dup2(r5, r3) close_range(r6, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0xf5) 1m1.061987889s ago: executing program 4 (id=221): prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) socket$alg(0x26, 0x5, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) sendfile(r1, r0, 0x0, 0x20000023893) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={r3, &(0x7f0000000000), 0x0}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x8, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r4 = syz_usb_connect(0x0, 0xaad, &(0x7f00000004c0)={{0x12, 0x1, 0x201, 0xc2, 0x70, 0xc, 0xff, 0x3f0, 0x2116, 0xac4c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa9b, 0x3, 0x2, 0x0, 0x0, 0xff, [{{0x9, 0x4, 0x1e, 0x8, 0xc, 0x39, 0x81, 0xa0, 0x9, [@uac_as={[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x1, 0x6, 0x0, 0x5, "d6"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x6, 0x3, 0x0, 0x7, '\v', "ccfa7a"}]}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x7, 0x3, 0x5}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x4, 0x2, 0x1, 0x68}]}], [{{0x9, 0x5, 0x9, 0x0, 0x40, 0x7, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x86, 0xf7, 0x9}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x8}}, {{0x9, 0x5, 0xa, 0x20, 0xa605e0a4638e981f, 0xff, 0x6, 0x40}}, {{0x9, 0x5, 0x7, 0x4, 0x20, 0x6, 0x5, 0x5}}, {{0x9, 0x5, 0x80, 0x4, 0x200, 0x5, 0x7, 0x3, [@generic={0xfe, 0x9, "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"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x1, 0x7f, 0x5}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0xdc, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0xac2c}]}}, {{0x9, 0x5, 0xd, 0x8, 0x40, 0x3, 0x7, 0x58, [@generic={0xa3, 0xb, "faf1c4e7bf63ed5aa429fb8ab161a33699440c0a2fccb3e55524049067cfb6d09ca20c81a480400da22a03408e6a1376e817d8796f287387265b12fb0478548359762e9b59662a70d4230ecea785f1bebb49dbd095c1a6e68e0a622e48a110ee2231e263382754deda6be97c9b245088dd4a6ff38cbf7f0b9ded70a2c6208a11e976ba5f6e546330226d827896579826f69155418afc8ccb6e5c5301f39e80f8c9"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x3ff, 0x4, 0x1, 0xf5, [@generic={0x80, 0x24, "676fb731da99e8b2c0a95d1f9244b8b800db42581ed221297cfdbabe9c95dc90a3960ca77f5796c6fa93296cff6b805df6576a7b4b1d08cd2b0f7440f9165ad7c8499df227978444bea2a9530fcf6f02379cb773d9260ad52db015c5fd026fa97faf96654c2e5d91cf7bf8bb9188b78945b9cc48351898ccdc95bd3b2ea9"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x10, 0x7, 0x4, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x6}]}}, {{0x9, 0x5, 0x0, 0x0, 0x440, 0x3, 0x7f, 0x1, [@generic={0xaa, 0x8, "726bc2305bdaafca59c1b489cd4d9f12ccf79da1ef85acc8e8fd20a924e324b45c27dd394551488198c07a51fad9e20350f48ac91e4b885402705a5f621b6f2e18d09893e4cf2cdf8a7246881a2f88fb61845fd72b9f5f2174449c981842200250e3506474c0ce9d70de5b454f9a045e5ac4a8c7f09cde454fad75acbc157b3f7b01b0c27f9f0f9597193e6332427af1041b9d264784522ee0c7606e83f00ce6d3d2e6dd74f29669"}, @generic={0xb, 0xa, "05c8aa975320ac577c"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x200, 0x2, 0x2, 0x6}}]}}, {{0x9, 0x4, 0xc, 0x2, 0x7, 0xe, 0x1, 0x0, 0xe0, [], [{{0x9, 0x5, 0x6, 0x0, 0x3ff, 0xe2, 0x5, 0x1, [@generic={0x7e, 0x22, "2ad93613993567125a47a541db65a669f76cd0af5482ec0d7eb6a4cd76156711d62f557157d546b406de4f45a4c73ce8d921430638581071da725d35546bf6efbeda3abb2315f5c5ec6fe0c61ab6067afc3fe648f5508dc117fe9cb3573b14cd7909a3aeadf875a019f7b5f47a27c93cc84151efd0ff5bc20fea81e4"}, @generic={0x44, 0x24, "25754cd841b0a6fb74d837d060f99b024380283b3c456f90b3e9a1708d810baa93dd1143766ef5a72cde0daa9c98cff6e80e20eec96abc452ef4d1d63cda529e77b6"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x8, 0xf9, 0x4, [@generic={0x77, 0x7, "966fad8df97fbf881c4e232b6c243cb9e65529b72258e673183ebec8853a25795f819ce829209aff91cbc9bcc0621e6432036c886690c1ce4630b121f8d51aad88d0b17daf79655b9c9f4ea0faacd7b70f66416bb5d3df0d816d05133218e282b8628d8cbe50cd7a4f9605da1b458a3961858822e7"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x10, 0x8}}, {{0x9, 0x5, 0x1, 0xd, 0x10, 0x18, 0x80, 0x3, [@generic={0x23, 0x8, "ab8cd395dd7970ee6a1a24d52c57ea5916d1d464d7b3c6fcfbedbbf9cb1a0e6697"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x200, 0x10, 0x6, 0x1, [@generic={0x29, 0xb, "132ac6ebad176735fff2bb87152cb2a4b1a753c0dd1a51ff3379dc2bada956541c175d761429b7"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0xcf}]}}, {{0x9, 0x5, 0x0, 0x4, 0x8, 0x2, 0xfa, 0xf3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x400}]}}, {{0x9, 0x5, 0xa, 0x8, 0x40, 0xd, 0xd, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0x7ae}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0xe}]}}]}}, {{0x9, 0x4, 0xa4, 0xcf, 0x8, 0xff, 0xff, 0xff, 0x9, [@uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xa, 0x2, 0x5, 0x4, "bc", "ed02"}, @as_header={0x7, 0x24, 0x1, 0x4}, @as_header={0x7, 0x24, 0x1, 0x7, 0x7d, 0x2}, @as_header={0x7, 0x24, 0x1, 0x6, 0x7, 0x1001}]}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "7cf026"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x28b, 0x7, 0x8001, 0x7f}, [@country_functional={0xe, 0x24, 0x7, 0x7f, 0x4, [0x5aa1, 0x3, 0x80, 0x1c2]}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0xbf, 0x1000}, @obex={0x5, 0x24, 0x15, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x800, 0x0, 0x5, 0xc, 0x3, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0xe}]}], [{{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x28, 0x80, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xf9, 0x4}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x47, 0xbf, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x24, 0x7}]}}, {{0x9, 0x5, 0x0, 0x3, 0x200, 0x2, 0xfe, 0x4, [@generic={0x12, 0x22, "15b8dc77751db937d7cbdc33a42d9aab"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x3, 0x3, 0x0, [@generic={0x86, 0x21, "9da39b14aa9896a113f1dc7eeee8930eab2a0b11b4c7121a2009c1439d608d8befc940950d9cd347b6f5cd514244d433ad9330ea20a3f37cb17d545e2a952c6723afd407e2e2c010462c07f52543530147ccd8e72f829070c3ebf1534f3a19076fa198deb44bcbbcac5e6a1d6f7f5dbf15321bb9f0084419e4e73c1f331ee1f77ab808d3"}, @generic={0xd1, 0x10, "c0031dfd6d85242f50ccc910715a2a1da5d1389c28aae26342b693cbb12b1853ab10708672373ea927589bc7f8899951ed2bc33980d7c61db479e88329fb0ab7717faa35317ad16b60dbeefbac90b7ea03cf60d107a5deafbfd8dda1d39813acd350ad749d15d371cbda0434495e10108ba945d5611fda2043ae0b28eda5f3bac8d64e2143940b01909bbf25027de36b0192dca8891bfd309179692763181ff3b95f7fa67821563855169c923aed9a783f2d5009332a324a3ce047540d77af958a58cef4172915f663d11dd7cc3af3"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x20, 0x0, 0x0, 0xb, [@generic={0xf6, 0xe, "eb0abe03bed26d33da044556a161082561a609a64a98a7481cf5d50af028a0213a677d6f349ff75d07267cc553c926a417d594c73d6d043b16d26e6191ccfd190fcffbde26e0e2e8abd5619ad188a1eb5c6d6ae2c298055456b37f0a60b1a63475bb401c4684be22ff395122ecea9c3b18e446263e6cbb9f707b7cbecf644ad79f1727d32fa444b4d312cbd50ffc29fa5fa7cb09513b9c4a4d23ad2b6aded247720f790b665aad927dfe6077b6f6e109a7958400901be9c850340396bd4d8e651f917aeb680fe3b9d045a4ed0259752c4cd5195f557ab9e2bc03131551098ef6356c98b33dc08ff97231c8a8b8e2c64b5130e80e"}, @generic={0xf6, 0x9, "50e51e10e3e6ea2649605dc1d04099c8af1c12fefa999deeedde7661af8c829ab5ccf7358c8455ddad2d7a68596222dc00156cf42382345556642187ceca126d18a3043fab87772ca5f2b9d0f7c231d87e004b5ad92402169817e8270290bc9db904a683e2d62672b595c9956764d3eaff20b5c332e341644b9750883370937b4092bcd4d7408e298a81234f6b21a795117b74ba5e124e667d57fddf7bcc9b6527fc28ed33df7f922706b585ce761fb7e3dc5d7d7da38a4a77c7359b8d2a8f1761b9c541dbaf3b62b050f3c76923cd1743919e3bd9bda74d5d33e9e7ee1aa3b5fe8d03bb02adf5f47f9829c40baaa906cf19e0dc"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x28, 0xe, 0x0, 0x4, [@generic={0x4c, 0x8, "bdb5bc0331303f24c62aa4ae6bd411fe983f259d15bab858f1b126f8e8b92781334533d65a2c9bfbfb61913bcaee937b4374f2200aa7a8c737649727c0e9054ac22b48e65dffc2290829"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x7cf, 0xf, 0xd, 0x9, [@generic={0xb8, 0xf, "f07546603fa8b4dd676dedc9e7845b9dc1412a2c5b0c384e8180688910d239bdc0d0ce35e934d4de4c7b02fef5de2521d679ce6cf06442e6e19c7c8d693d530190d6f1a1e8bdf9baefb2b227886262ceb747301ce376e8b8d513e4a26152ec918467fd625fd84d80ed65a2f5c31b3878dbdc0128e132c80e320834a86e642f304770504258473ff8f8308db61b9638218c184af20d7bc1c8d2543bbe365a33c257eb2b640b71c908ce55f88104a92299348051e309ba"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x5e, 0x2, 0xc2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xe, 0x101}]}}]}}]}}]}}, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e20}, 0x15) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x40}}, 0x4800) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000022000106"], 0x1c}], 0x1}, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x3, "76af7c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m0.786036831s ago: executing program 4 (id=222): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) 1m0.449158895s ago: executing program 34 (id=222): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) 30.286662919s ago: executing program 2 (id=337): socketpair(0xf, 0x3, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x0, @mcast1}}]}, 0x48}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB=' '], 0x20}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)={0x4}) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000240), 0x4) r4 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001340)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x118, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@uncond, 0x5002, 0xf8, 0x118, 0x52020000, {0x0, 0x6802000000000000}, [@common=@inet=@socket3={{0x28}, 0x3}, @common=@inet=@tos={{0x28}, {0x2, 0x3, 0x1}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@rand_addr=' \x01\x00', @local, [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], [0xff000000, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'veth0\x00', {0xff}, {0xff}, 0x67, 0x80, 0x4, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfffe, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000f80)={'syztnl2\x00', &(0x7f0000000e40)={'ip_vti0\x00', 0x0, 0x7800, 0x40, 0xffffffec, 0x6a, {{0x39, 0x4, 0x0, 0x39, 0xe4, 0x67, 0x0, 0x5, 0x2f, 0x0, @remote, @rand_addr=0x64010102, {[@lsrr={0x83, 0x7, 0x63, [@local]}, @ssrr={0x89, 0x7, 0xc3, [@multicast2]}, @timestamp_addr={0x44, 0x44, 0x20, 0x1, 0x6, [{@remote, 0x101}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@multicast2, 0x937}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2a}}, {@loopback, 0x3}, {@broadcast, 0x5}, {@multicast2, 0x7ff}]}, @ssrr={0x89, 0x13, 0xcb, [@loopback, @remote, @multicast2, @local]}, @timestamp_prespec={0x44, 0x2c, 0xc4, 0x3, 0x3, [{@empty, 0x8}, {@local}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x10000}]}, @timestamp_addr={0x44, 0x3c, 0x50, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x24}, 0xfff}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x9}, {@loopback, 0x4}, {@remote, 0x4}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x81}, {@broadcast, 0x800}, {@loopback, 0x1}]}]}}}}}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 30.176400442s ago: executing program 6 (id=338): capset(&(0x7f00000020c0)={0x19980330}, &(0x7f00000001c0)) (async) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) (async) r0 = syz_open_dev$sndctrl(&(0x7f00000007c0), 0x2, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) syz_clone3(&(0x7f00000006c0)={0x260300400, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0], 0x1, {r1}}, 0x58) (async) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000040)={0x14, "15d19e8cbc0b40481b342009cc943fef57f131f14901e639d21e87271710bdd8", 0x3}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc10c5541, &(0x7f0000000000)=0x2) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x7, '\x00', r6, r1, 0x5, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) (async) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "543f06fcde9e0821fad184a7cae1985949c797cb"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) (async, rerun: 32) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, 0x0, 0x90) (rerun: 32) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) (async, rerun: 64) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmsg$tipc(r8, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd4d}], 0x1}, 0x0) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x5030c0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r9, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './bus\x00'}) (async, rerun: 64) r10 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid_for_children\x00') (rerun: 64) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="f803000011000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008002ebee8b06dba7740575d7ac871d92589ede91b1aad212a2205d91410973f6596d646aacc65aa29a0ca9cfe1d1c05442da875038fdb7658ca4d9e3166a075666a1a6dd554879146ad2d1f2b8cf3ed18ba57707454808e77262a0c75ce98a4d8244ef5e9755cd625a9d803be6b58364a8334c1e0de9abc1f6f337e4519748c84e146e9d0a0d8d69ffe845ceb1f8e6f854c3c1b826975a550c718d92b30ab4192fe10bff0fd3814227ef43b8f41b95649fb58de"], 0x3f8}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000c880) (async) r12 = syz_open_procfs(0x0, &(0x7f0000000340)='sessionid\x00') read$FUSE(r12, 0x0, 0x0) (async) ioctl$KVM_RUN(r12, 0xae80, 0x0) setns(r10, 0x0) 29.203479983s ago: executing program 2 (id=342): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000c40)=ANY=[@ANYBLOB="12010002a2b8d240bb2170200b87010203010902240001a00800040904c81e010103f70909050803ff03040609022107250104"], 0x0) r1 = syz_io_uring_complete(0x0) connect$pppl2tp(r1, &(0x7f0000000a00)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x1, 0x3, 0x3, {0xa, 0x4e20, 0xb, @local, 0x1}}}, 0x32) syz_usb_connect$uac1(0x1, 0xc7, &(0x7f0000000440)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x3, 0x1, 0x60, 0x40, 0x24, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfffa, 0x7}, [@selector_unit={0xb, 0x24, 0x5, 0x2, 0x6, "e3763f615cbc"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5, 0x1, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x8, 0x2, 0x9, {0x7, 0x25, 0x1, 0x80, 0xb2, 0xffff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0xf9, 0x3}, @as_header={0x7, 0x24, 0x1, 0x3, 0x2, 0x4}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x4, 0x3, 0x6, 0x5, "7d96b7b9b39b89a9"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x0, 0x4, 0x4, 0x9, "fdec2e5add65859f"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x0, 0x1001}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x4, 0x3, 0x3, 0x5, "ed516862fa52fa"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x9, 0x6, 0x6, {0x7, 0x25, 0x1, 0x42, 0x8c, 0x8001}}}}}}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x250, 0x2c, 0x7, 0x2, 0xbf, 0x2}, 0x8, &(0x7f0000000580)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x8, [{0x35, &(0x7f00000005c0)=@string={0x35, 0x3, "f8fd8453739cbb5240a79a6cf77a754ce87c4f0e56740299570a6b559588b4ae3fee9396ee254c231acbc5df355ea09f8966d0"}}, {0x37, &(0x7f0000000600)=@string={0x37, 0x3, "0ed0585514c9a1bebaa35bf395f33ad1bc026aba099ac0c2a9382d769f68ecad94ec3b3b994952df26ffa1a71d1006f97e09484638"}}, {0xf7, &(0x7f0000000640)=@string={0xf7, 0x3, "d324905ee5bf3942a195c45ec166ba5002368668adf30589b62df1eba5f71608009777c802d050c06f229c484672e95174c038268ea0ef789772981eda4867bba34ebd628ede146178889c89b7444555452c6d66ea176848bd086c64991c46b0c7f050a04977cb4a8971be343ea6a0b511995465dbf5616963d953b0b16c51692bdd0f92881f34fcee4bb7dfc3d8d83d03209d557c08579b2da35880b9e1aacbe58ced4b95f36372297ee336dcd10917a9e8b1156c7d371ff47ba4459e2cd2f88afcee584a53e994acf3ffe1d7e36ea7f0b3e7c9a7ceaa87055d92dfb4f3cca9481fe0bc0cdaee630d1903a20e276e37d7bb39c895"}}, {0x5a, &(0x7f0000000740)=@string={0x5a, 0x3, "df64986f00d1ba17ff2e3b6ceda6c6a5f69a3d43a2bcd695ae751090dbb8f4e245c5c578639985c54d44a039cd6ec0bf4a57693cafd0bc9b21201bd80b366b7112e51de260da35bbc65aab5611956b933c0e67a2bea4b4e5"}}, {0xd2, &(0x7f00000007c0)=@string={0xd2, 0x3, "7ae7181ce0671fcf7525439ca4d8a3be62c259541e78c9abcee292a74a0b9714aa0c54c85792592a8d067afb4fb7d65bfe71cbf5f8a4f634366560936fe468454be6293f4dfa7974e27cc7ccada8fa14413473b6ebce17f0f915214d38eda4044a5a454a828c8c4017670ed9d76219285ff3d9ea247cbae6ce80a34551a2c57656117d972ae6963245258fd7b3c7b7cb1224625b0c22adf051fdbcbc9c0f4c8189d0049478eff7a3be452d303c61ed99b953a6f19412d85d9367a83c4c515637b285fb039739c7aa73cb38cc69d41e61"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x380a}}]}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x1b0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}, 0xa490f54eab606508}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) 28.854191416s ago: executing program 1 (id=344): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e22, @multicast2}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/255, 0xff}], 0x1}, 0xce}], 0x1, 0x40002002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r2, &(0x7f0000000740)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x94}]}, 0x10) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000000c0)={0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000700)={0x0, @dev, @private}, &(0x7f0000000800)=0xc) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f00000008c0)={0xc0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000008c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000940)=[0x0], &(0x7f0000000980)=[0x0], 0x0, 0xaf, &(0x7f00000009c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0x1f, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000c40)={0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000c80), &(0x7f0000000cc0)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x9, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="183b0000040000000000000000000000183100000500000000009f3de4a90ce8737388d60b530585ce000000000000c4"], &(0x7f0000000600)='syzkaller\x00', 0x1, 0x66, &(0x7f0000000640)=""/102, 0x41000, 0x5, '\x00', r7, @fallback=0x1b, r8, 0x8, &(0x7f0000000840)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x10, 0x92, 0x6}, 0x10, r9, r10, 0x0, &(0x7f0000000d40)=[r11], 0x0, 0x10, 0x58, @void, @value}, 0x94) write$binfmt_aout(r8, &(0x7f0000000ec0)=ANY=[@ANYBLOB="2c2764a44c6dd31f5f085f6c22b0f1d25bfee07e7bbc4f38f0a0aff8a900000000000000000000000000c2fec9dd9018a2234975082fbd04ad1c959cbedb1a7f01d500a3383a080787742a9e310578a161ea88aff4ffbaf13624abbb20d56e14800562b59ce37044d17a27427d6bb4e47ade5c2328b8a1572fefc4abe4bb0a91ca139e67ed124d3eb3fcd845c62305"], 0xc8) write$binfmt_aout(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$inet6(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0xa, 0x7, 0x7e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000002a8fc2f8e700000067000000000000006ab882a770fccf418e5db552f34c1b4e95e6c8dc149fbd94dddc37755cca5f938e60311d305f26b5e929d4bf9e1cd27c4f8785a97b5054ceb11637806cf6a9415814086fd5f599048f8eaccbe5a6b353a834609d1b6a8e6d71b324fdff9e3826ce6c636dd97861b4395cbb0e988bdf5f096810a98a01e3f75aa97521bd33f15004d6b269a8e5884ece81c3f4fae3507800"], 0x18}, 0x200440d0) syz_usb_connect(0x1, 0x24, &(0x7f0000000000)=ANY=[], 0x0) 28.623097682s ago: executing program 6 (id=345): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x7, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000640), 0x200, 0x822b01) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000000)=0x9) close_range(r3, r3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000580)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB='-7'], 0x9) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) timer_create(0x2, 0x0, &(0x7f00009b1ffc)) timer_delete(0x0) 27.983026602s ago: executing program 0 (id=348): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 27.83439944s ago: executing program 0 (id=350): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0xb4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x102}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xb4}}, 0x0) 27.719347413s ago: executing program 0 (id=351): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000004c0)={0x4, 0x15, 0x20, 0x0, "c3fea293681a0fa1ff856aa471fe2617dfb4eb45d73158000000568e00"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f00000000c0)="80730002dcfe0f22150f20d86635200000000f22d8dbcd66b8090000000f23d80f21f86635400000c00f23f82ed9fb660f73fb0067f30fbcc8ba2100ed"}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x100000000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000300)="baf80c66b836fc2f8266efbafc0cb051ee64650f01cabaf80c66b8e034ea8366efbafc0ced66b9180a00000f3226360f01cbb841000f00d80f01c80f00d43e65f081aab96d2bef0f01bb0800", 0x4c}], 0x1, 0x28, &(0x7f0000000040)=[@efer={0x2, 0x5400}, @cr0={0x0, 0xa0010001}], 0x2) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 27.664750354s ago: executing program 2 (id=352): setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x0}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn(#e', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r3, 0xfffffffffffffc01, 0x0) tee(r1, r3, 0x60000000000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000100)) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000080)=""/122) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f00000002c0)={{0x1, 0x5}, 0x100, './file0\x00'}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) readahead(r6, 0x9, 0x615) 27.116874048s ago: executing program 0 (id=355): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000004500)={0x0, 0x0, 0x0, 0x0, 0x0, "1241b72d7fffff5b000f000000462200"}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "5a5f0000008a3f00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCCONS(r0, 0x541d) r2 = dup(r1) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000000)={0x400, 0x1, 0x6, 0xe, 0x0, "3cb0c111c8d8f3f5"}) read$FUSE(r2, &(0x7f00000023c0)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f0000006580)={0x2020}, 0x2020) 26.718324209s ago: executing program 2 (id=357): r0 = syz_usb_connect(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa6, 0x9b, 0xbc, 0x10, 0x954f, 0x4199, 0xf76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x33, 0x2, 0x2, 0x2, 0xc, 0x7, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000140)={@broadcast, @random="6487a2bed3d6", @val={@void}, {@generic={0x88f7}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newnexthop={0x18, 0x68, 0x1, 0x70bd2a, 0x10001, {0x0, 0x0, 0x0, 0x0, 0x13}}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x8936, &(0x7f0000000000)) syz_usb_control_io$printer(r0, 0x0, 0x0) 26.166571578s ago: executing program 0 (id=360): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000001c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) close(0x3) r1 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x1) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000000)='silent\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001800dd8d000000000000000002140000000000070000000008001e00020800000c0009"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) write$binfmt_aout(r3, 0x0, 0xfce1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa00aabb0800450000380000f6ffff04904a87a644355dd40d000000008642a0f000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x0, &(0x7f0000000400)}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_names\x00') lseek(r5, 0x9, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000380), 0x0, 0x4000c000) sendto$inet6(r6, &(0x7f0000000300), 0x5a8, 0x0, 0x0, 0xfffffffffffffdfd) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000240)="c4", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0x0, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x88}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) 26.047111042s ago: executing program 7 (id=361): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0xb4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x102}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xb4}}, 0x0) 25.875451882s ago: executing program 7 (id=362): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)='z', 0x1, 0x4000000, &(0x7f0000000040)={0xa, 0x0, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 25.84182022s ago: executing program 0 (id=363): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000180)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000003700)=""/4081, 0xff1}, {&(0x7f0000004700)=""/4105, 0x1009}, {&(0x7f0000001240)=""/118, 0x76}, {&(0x7f0000001300)=""/208, 0xd0}], 0x4}, 0x40012000) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000002c0)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f00000001c0)={0x0, 0x11, 0x5e, {0x5e, 0xc, "0cb9b3b7f10b741c3716ac7dc8ef0dc6f0e110a895c0b98ac29dce717deaf2cf648191256c2779db508a1f9b7a241f248751c8c46c17b4bf4056c7f62f2282a1886d8a1c4b25bf6cbd54da7a4b7a12bfeb6e2348869ba4003ec6ac62"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x44, &(0x7f0000000300)={0x40, 0x1, 0x33, "ca33191c1f642418089723769c28bc3b9d422f31e6a375db50690a686561a6556dc3e5cbc555a32a5b7e4fa2a8aead5a1ff2f1"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0xfffd, 0x5, 0x3ff, 0xbb18, 0x6, 0x2, 0x9, 0x6, 0x9, 0x317e, 0x54, 0x4}}, &(0x7f0000000440)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000480)={0x20, 0x83, 0x2}, &(0x7f0000000500)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000000540)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000600)=ANY=[@ANYBLOB="000000800000"], 0x0, 0x0}) 25.742353153s ago: executing program 1 (id=364): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x27a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000e00)={0x2c, &(0x7f0000000100)={0x40, 0x0, 0x6c, {0x6c, 0xe, "8200279ea974005e6862566e8f356935a8dc07b11d412d2f4b5987259b3c5f03ddeff2cae0241f1ec488ad7dc8b3ffffff7fffffffffa441cf37c5697786fc10cd2545d2bd70e340c6e3f1beae5d9e0a1c4b790ff18f061e1c3997081c5262c7e7cacb8ddfed798e6000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 25.309142324s ago: executing program 6 (id=365): syz_usb_connect$uac1(0x0, 0xbe, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xac, 0x3, 0x1, 0x0, 0xb0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x13, 0x24, 0x6, 0x6, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x307}, @extension_unit={0xc, 0x24, 0x8, 0x3, 0x9, 0xf, "69eea86f84"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x307, 0x0, 0x4, 0xfc}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0x0, "fd"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x9, 0x300, 0x48, "0ee3"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x3, 0x8, 0x9, "c85ffa"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0xcd8}}}}}}}]}}, 0x0) fallocate(0xffffffffffffffff, 0x1, 0xb000, 0x2) 24.828739526s ago: executing program 7 (id=366): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002e00000037000000000000df9500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000000)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r1 = dup2(r0, r0) mmap$snddsp_control(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x2000006, 0x4000010, r1, 0x83000000) 24.730333523s ago: executing program 7 (id=367): syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000300)={0xa1, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="02cf"], 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000fc0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000010c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001080)={&(0x7f0000000180)={0x60, r2, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x3e, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_b, @from_mac, {0x1, 0x8}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @void, @val={0x2d, 0x1a, {0x8, 0x2, 0x3, 0x0, {0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x1, 0x3, 0x5}}}}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8d4}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000010c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001080)={&(0x7f0000000180)={0x60, r2, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x3e, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_b, @from_mac, {0x1, 0x8}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @void, @val={0x2d, 0x1a, {0x8, 0x2, 0x3, 0x0, {0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x1, 0x3, 0x5}}}}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8d4}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r4, 0x0, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x78}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) 24.211382407s ago: executing program 1 (id=368): syz_emit_ethernet(0xae, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 24.137974699s ago: executing program 1 (id=369): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, 0x0) 24.046307901s ago: executing program 1 (id=370): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 24.045835666s ago: executing program 1 (id=371): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x3d5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x5, '\v\tt1'}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x8, 0x35, &(0x7f0000000000)="65adbe33f6f920f27ffecbcaf6ba2b80a7f0fffa6d82b02e965d327fe73fb45d9d5266b01d6b3e39aad4b9b20e2ec31050b8240a07") 23.91194951s ago: executing program 6 (id=372): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x2, 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x58, 0x10, 0x403, 0x0, 0x3, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x4}}]}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'vlan0\x00'}]}, 0x58}}, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23.754037249s ago: executing program 6 (id=373): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) (async, rerun: 32) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="02abe492416c8746b90a417b86c54f57", @ANYRES16=r1, @ANYBLOB="000105000000fbdbdf250f000000"], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) (async, rerun: 32) r3 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) (async, rerun: 64) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f00000000c0)={@dev={0xac, 0x14, 0x14, 0x22}, @initdev={0xac, 0x1e, 0x1, 0x0}, r2}, 0xc) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x14, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x1, 0x0, 0x1, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_NMI(r6, 0xae9a) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x2ec, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) (async) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) sendmsg$inet(r8, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) (async) read$FUSE(r7, &(0x7f0000001640)={0x2020}, 0x2020) sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x2c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0xd, 0xa, "cef74e445a7a219b53"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004841}, 0x4810) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) socket$inet6(0xa, 0x3, 0xdeb9) 23.654306105s ago: executing program 6 (id=374): r0 = eventfd2(0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x50, 0x0, &(0x7f0000001880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @enter_looper], 0x0, 0x0, 0x0}) pselect6(0x40, &(0x7f0000000240)={0x1, 0x5, 0x8, 0x3, 0x3, 0xa, 0x3ff, 0x1}, 0x0, &(0x7f0000000300)={0x9, 0x2, 0x2, 0xffff, 0x0, 0xe, 0x7, 0x9}, 0x0, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0xa}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="f000000030"], 0x118}}], 0x2, 0x0) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0xffffbffc, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x1, 0xff00) r4 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, '#\r'}, @main=@item_4={0x3, 0x0, 0x8, "9fea28c8"}, @main=@item_4={0x3, 0x0, 0x9, "0600"}, @local=@item_012={0x2, 0x2, 0x2, "06c8"}, @global=@item_4={0x3, 0x1, 0x8, "0600"}, @main=@item_4={0x3, 0x0, 0x9, "d1d61e00"}, @main=@item_4={0x3, 0x0, 0xb, "0b77eae3"}, @main=@item_012={0x2, 0x0, 0x8, "c17b"}]}}, 0x0}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000040)="eebd73c460f8a4a8", 0x8}], 0x1) 23.653804201s ago: executing program 2 (id=375): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000004c0)={0x4, 0x15, 0x20, 0x0, "c3fea293681a0fa1ff856aa471fe2617dfb4eb45d73158000000568e00"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 23.491586674s ago: executing program 7 (id=376): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) creat(&(0x7f00000011c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x440, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300004802c030180090001007866726d000000001c0002800500030000000000080001400000000c08000240000000010900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000000)=0x6e) r2 = getpgrp(0x0) getpriority(0x1, r2) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0xa702) mmap(&(0x7f0000371000/0x5000)=nil, 0x5000, 0x7, 0x11, r3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000001680)) r4 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000004bc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000001b40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r4, &(0x7f0000000040)) write$FUSE_ATTR(r4, &(0x7f0000000080)={0x78, 0x0, r5, {0x18, 0xc099, 0x0, {0x3, 0x100, 0x91d, 0x7f, 0x8, 0x7fff, 0xd, 0x4, 0x0, 0x4000, 0x3, r6, r7, 0x5, 0x2}}}, 0x78) getpgrp(0xffffffffffffffff) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r11 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r11, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix={0x1ff, 0x99}}) setuid(r10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001700), &(0x7f0000001740)=0xc) socket$qrtr(0x2a, 0x2, 0x0) getpid() 23.412889859s ago: executing program 2 (id=377): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, 0x0, &(0x7f00000000c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, &(0x7f0000000440)={{0x0, 0x0, 0x80}}) close_range(r0, 0xffffffffffffffff, 0x0) 284.396985ms ago: executing program 7 (id=378): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1f}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x102}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xb0}}, 0x0) 238.305195ms ago: executing program 35 (id=363): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000180)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000003700)=""/4081, 0xff1}, {&(0x7f0000004700)=""/4105, 0x1009}, {&(0x7f0000001240)=""/118, 0x76}, {&(0x7f0000001300)=""/208, 0xd0}], 0x4}, 0x40012000) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000002c0)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f00000001c0)={0x0, 0x11, 0x5e, {0x5e, 0xc, "0cb9b3b7f10b741c3716ac7dc8ef0dc6f0e110a895c0b98ac29dce717deaf2cf648191256c2779db508a1f9b7a241f248751c8c46c17b4bf4056c7f62f2282a1886d8a1c4b25bf6cbd54da7a4b7a12bfeb6e2348869ba4003ec6ac62"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x44, &(0x7f0000000300)={0x40, 0x1, 0x33, "ca33191c1f642418089723769c28bc3b9d422f31e6a375db50690a686561a6556dc3e5cbc555a32a5b7e4fa2a8aead5a1ff2f1"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0xfffd, 0x5, 0x3ff, 0xbb18, 0x6, 0x2, 0x9, 0x6, 0x9, 0x317e, 0x54, 0x4}}, &(0x7f0000000440)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000480)={0x20, 0x83, 0x2}, &(0x7f0000000500)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000000540)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000600)=ANY=[@ANYBLOB="000000800000"], 0x0, 0x0}) 0s ago: executing program 36 (id=371): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x3d5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x5, '\v\tt1'}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x8, 0x35, &(0x7f0000000000)="65adbe33f6f920f27ffecbcaf6ba2b80a7f0fffa6d82b02e965d327fe73fb45d9d5266b01d6b3e39aad4b9b20e2ec31050b8240a07") kernel console output (not intermixed with test programs): y_hcd [ 82.020047][ T5912] usb 3-1: Using ep0 maxpacket: 8 [ 82.030009][ T5912] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 82.048588][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.056874][ T5912] usb 3-1: Product: syz [ 82.066990][ T5912] usb 3-1: Manufacturer: syz [ 82.072977][ T5912] usb 3-1: SerialNumber: syz [ 82.086147][ T5912] usb 3-1: config 0 descriptor?? [ 82.097217][ T5912] gspca_main: sq930x-2.14.0 probing 2770:930c [ 82.103649][ T5907] usb 4-1: Using ep0 maxpacket: 16 [ 82.119129][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.138492][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.148642][ T5907] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 82.159377][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.180460][ T5907] usb 4-1: config 0 descriptor?? [ 82.428812][ T5907] mcp2200 0003:04D8:00DF.0002: USB HID v0.00 Device [HID 04d8:00df] on usb-dummy_hcd.3-1/input0 [ 82.503079][ T6087] tc_dump_action: action bad kind [ 82.536603][ T5912] gspca_sq930x: ucbus_write failed -71 [ 82.567505][ T5912] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 82.585830][ T5912] usb 3-1: USB disconnect, device number 3 [ 82.601308][ T5862] udevd[5862]: setting mode of /dev/bus/usb/003/003 to 020664 failed: No such file or directory [ 82.620696][ T51] usb 4-1: USB disconnect, device number 5 [ 82.637741][ T5862] udevd[5862]: setting owner of /dev/bus/usb/003/003 to uid=0, gid=0 failed: No such file or directory [ 83.186433][ T5912] usb 2-1: USB disconnect, device number 3 [ 83.509739][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 83.654230][ T119] gspca_spca501: reg write: error -71 [ 83.662475][ T119] spca501 1-1:0.43: Reg write failed for 0x01,0x40,0x54 [ 83.669958][ T5912] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 83.679924][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.64'. [ 83.684767][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 83.719481][ T119] spca501 1-1:0.43: probe with driver spca501 failed with error -22 [ 83.759489][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 83.779731][ T9] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 83.789002][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.797928][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.809163][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 83.829620][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 83.848053][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.858318][ T9] usb 3-1: config 0 has no interface number 0 [ 83.866452][ T9] usb 3-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 83.880152][ T119] usb 1-1: USB disconnect, device number 8 [ 83.894007][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=b0c5, bcdDevice=61.c8 [ 83.903229][ T9] usb 3-1: New USB device strings: Mfr=1, Product=33, SerialNumber=3 [ 83.915583][ T9] usb 3-1: Product: syz [ 83.920315][ T9] usb 3-1: Manufacturer: syz [ 83.925022][ T9] usb 3-1: SerialNumber: syz [ 83.947347][ T9] usb 3-1: config 0 descriptor?? [ 83.969555][ T5912] usb 2-1: Using ep0 maxpacket: 16 [ 83.977174][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.988245][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.998206][ T5912] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 84.011466][ T5912] usb 2-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 84.021057][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.031284][ T5912] usb 2-1: config 0 descriptor?? [ 84.148743][ T6129] IPVS: stopping backup sync thread 6130 ... [ 84.157056][ T6130] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 84.326244][ T9] usb 3-1: USB disconnect, device number 4 [ 84.449962][ T51] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 84.519454][ T58] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 84.538448][ T29] audit: type=1326 audit(1732629211.141:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.1.63" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb56cf7e819 code=0x0 [ 84.609390][ T51] usb 4-1: Using ep0 maxpacket: 32 [ 84.641658][ T51] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 84.664668][ T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.679797][ T58] usb 1-1: Using ep0 maxpacket: 8 [ 84.694529][ T51] usb 4-1: Product: syz [ 84.701151][ T58] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 84.720476][ T51] usb 4-1: Manufacturer: syz [ 84.735360][ T58] usb 1-1: config 179 has no interface number 0 [ 84.742923][ T51] usb 4-1: SerialNumber: syz [ 84.744185][ T5912] usbhid 2-1:0.0: can't add hid device: -71 [ 84.749418][ T51] usb 4-1: config 0 descriptor?? [ 84.755044][ T5912] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 84.758725][ T58] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 84.799518][ T58] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 84.805932][ T5912] usb 2-1: USB disconnect, device number 4 [ 84.811091][ T58] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 84.869423][ T58] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 84.883345][ T58] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 84.896949][ T58] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 84.906203][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.932354][ T6134] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 84.980705][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 85.000827][ T6140] netlink: 152 bytes leftover after parsing attributes in process `syz.1.69'. [ 85.057493][ T5912] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 85.081788][ T5912] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 85.098323][ T5912] hid-generic 0000:0003:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 85.151221][ T9] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.161456][ T9] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 85.194944][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 85.207238][ T6145] kAFS: unparsable volume name [ 85.215340][ T9] usb 5-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 85.222850][ T5858] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input7 [ 85.248739][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.275559][ T9] usb 5-1: config 0 descriptor?? [ 85.359466][ T119] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 85.479369][ T5912] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 85.509573][ T119] usb 3-1: Using ep0 maxpacket: 8 [ 85.518360][ T119] usb 3-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=ab.e9 [ 85.527634][ T119] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.538235][ T119] usb 3-1: config 0 descriptor?? [ 85.603788][ T119] usb 1-1: USB disconnect, device number 9 [ 85.603835][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 85.618750][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 85.619655][ T119] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 85.643793][ T5912] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 85.663645][ T5912] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.681945][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 85.690377][ T5912] usb 2-1: SerialNumber: syz [ 85.712962][ T9] waltop 0003:172F:0501.0004: hidraw1: USB HID v0.00 Device [HID 172f:0501] on usb-dummy_hcd.4-1/input0 [ 85.797584][ T5907] usb 3-1: USB disconnect, device number 5 [ 85.900186][ T119] usb 5-1: USB disconnect, device number 6 [ 86.071810][ T51] airspy 4-1:0.0: usb_control_msg() failed -110 request 0a [ 86.079137][ T51] airspy 4-1:0.0: Could not detect board [ 86.086215][ T51] airspy 4-1:0.0: probe with driver airspy failed with error -110 [ 86.111451][ T5912] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 86.143459][ T5912] usb 2-1: USB disconnect, device number 5 [ 86.552222][ T6160] kvm: pic: non byte write [ 86.562109][ T6160] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2758444543 (5516889086 ns) > initial count (4205064 ns). Using initial count to start timer. [ 86.920580][ T29] audit: type=1326 audit(1732629213.531:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.1.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56cf7e819 code=0x7ffc0000 [ 86.950937][ T5865] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 86.955548][ T29] audit: type=1326 audit(1732629213.551:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.1.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb56cf757e7 code=0x7ffc0000 [ 86.960440][ T5865] Bluetooth: hci1: Injecting HCI hardware error event [ 86.981323][ C0] vkms_vblank_simulate: vblank timer overrun [ 86.997396][ T5865] Bluetooth: hci1: hardware error 0x00 [ 87.046118][ T29] audit: type=1326 audit(1732629213.551:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.1.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb56cf1a1a9 code=0x7ffc0000 [ 87.101191][ T29] audit: type=1326 audit(1732629213.551:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.1.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fb56cf7e819 code=0x7ffc0000 [ 87.139304][ T29] audit: type=1326 audit(1732629213.551:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.1.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56cf7e819 code=0x7ffc0000 [ 87.169907][ T29] audit: type=1326 audit(1732629213.551:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.1.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb56cf7e819 code=0x7ffc0000 [ 87.199893][ T29] audit: type=1326 audit(1732629213.551:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.1.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56cf7e819 code=0x7ffc0000 [ 87.224067][ T29] audit: type=1326 audit(1732629213.551:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.1.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb56cf7e819 code=0x7ffc0000 [ 87.253627][ T29] audit: type=1326 audit(1732629213.551:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.1.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56cf7e819 code=0x7ffc0000 [ 87.279373][ T5907] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 87.439401][ T5907] usb 1-1: Using ep0 maxpacket: 32 [ 87.463367][ T5907] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 87.481691][ T5907] usb 1-1: config 0 has no interface number 0 [ 87.497406][ T5907] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.521465][ T5907] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.548789][ T5907] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 87.558325][ T51] usb 4-1: USB disconnect, device number 6 [ 87.569516][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.608340][ T5907] usb 1-1: config 0 descriptor?? [ 87.839493][ T25] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 87.939448][ T6184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.84'. [ 88.031371][ T25] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 88.056942][ T25] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 88.099639][ T25] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 88.132746][ T25] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 88.179350][ T25] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 88.233865][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 88.259420][ T51] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 88.282375][ T25] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 88.292534][ T25] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 88.312505][ T25] usb 3-1: Product: syz [ 88.323357][ T25] usb 3-1: Manufacturer: syz [ 88.328653][ T25] usb 3-1: SerialNumber: syz [ 88.343520][ T25] usb 3-1: config 0 descriptor?? [ 88.353744][ T6175] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 88.366276][ T25] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 88.400785][ T25] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 88.441092][ T51] usb 4-1: config 0 has an invalid interface number: 84 but max is 0 [ 88.449654][ T51] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.460543][ T51] usb 4-1: config 0 has no interface number 0 [ 88.482918][ T51] usb 4-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 88.520568][ T51] usb 4-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 88.538686][ T51] usb 4-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 88.548477][ T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.579576][ T51] usb 4-1: Product: syz [ 88.586228][ T51] usb 4-1: Manufacturer: syz [ 88.609866][ T51] usb 4-1: SerialNumber: syz [ 88.620116][ T51] usb 4-1: config 0 descriptor?? [ 88.634066][ T51] ljca 4-1:0.84: bulk endpoints not found [ 89.004970][ T5912] usb 4-1: USB disconnect, device number 7 [ 89.109518][ T5865] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 89.183839][ T6216] netlink: 32 bytes leftover after parsing attributes in process `syz.4.91'. [ 89.439610][ T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 89.599485][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 89.634767][ T25] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 89.645914][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.662160][ T25] usb 5-1: Product: syz [ 89.675533][ T25] usb 5-1: Manufacturer: syz [ 89.695874][ T25] usb 5-1: SerialNumber: syz [ 89.725242][ T25] usb 5-1: config 0 descriptor?? [ 89.746259][ T25] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 89.795277][ T25] usb 5-1: Detected FT232B [ 90.008455][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.099847][ T5912] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 90.189176][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.244402][ T5907] uclogic 0003:28BD:0094.0005: failed retrieving string descriptor #100: -71 [ 90.259733][ T5912] usb 2-1: device descriptor read/64, error -71 [ 90.283634][ T5907] uclogic 0003:28BD:0094.0005: failed retrieving pen parameters: -71 [ 90.310943][ T5907] uclogic 0003:28BD:0094.0005: pen probing failed: -71 [ 90.317879][ T5907] uclogic 0003:28BD:0094.0005: failed probing parameters: -71 [ 90.334089][ T5907] uclogic 0003:28BD:0094.0005: probe with driver uclogic failed with error -71 [ 90.440118][ T5907] usb 1-1: USB disconnect, device number 10 [ 90.451512][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.499540][ T5912] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 90.603008][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.630025][ T5858] usb 3-1: USB disconnect, device number 6 [ 90.649445][ T5912] usb 2-1: device descriptor read/64, error -71 [ 90.669130][ T5858] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 90.750178][ T6231] dummy0: entered promiscuous mode [ 90.760557][ T5912] usb usb2-port1: attempt power cycle [ 90.775691][ T6231] team0: Port device macvlan2 added [ 90.795572][ T6231] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 90.935779][ T52] bridge_slave_1: left allmulticast mode [ 90.957450][ T52] bridge_slave_1: left promiscuous mode [ 90.969461][ T5907] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 90.975584][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.002053][ T5863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.012467][ T5863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.021539][ T5863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.031523][ T5863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.041412][ T5863] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 91.048804][ T5863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.080750][ T52] bridge_slave_0: left allmulticast mode [ 91.099438][ T52] bridge_slave_0: left promiscuous mode [ 91.107019][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.115765][ T5912] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 91.142017][ T5912] usb 2-1: device descriptor read/8, error -71 [ 91.149429][ T5907] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 91.179684][ T5907] usb 1-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 91.221020][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.243458][ T5907] usb 1-1: config 0 descriptor?? [ 91.419464][ T5912] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 91.461508][ T5912] usb 2-1: device descriptor read/8, error -71 [ 91.572234][ T5912] usb usb2-port1: unable to enumerate USB device [ 91.691968][ T5907] razer 0003:1532:011B.0006: unknown main item tag 0x0 [ 91.704588][ T5907] razer 0003:1532:011B.0006: unknown main item tag 0x0 [ 91.712605][ T5907] razer 0003:1532:011B.0006: unknown main item tag 0x0 [ 91.746691][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.759621][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.771955][ T52] bond0 (unregistering): Released all slaves [ 91.958642][ T5907] razer 0003:1532:011B.0006: hidraw0: USB HID v0.00 Device [HID 1532:011b] on usb-dummy_hcd.0-1/input0 [ 92.130336][ T25] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 92.150576][ T25] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 92.181953][ T25] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 92.206176][ T25] usb 5-1: USB disconnect, device number 7 [ 92.221533][ T25] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 92.231644][ T25] ftdi_sio 5-1:0.0: device disconnected [ 92.249374][ T51] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 92.295067][ T5910] usb 1-1: USB disconnect, device number 11 [ 92.421943][ T51] usb 3-1: Using ep0 maxpacket: 32 [ 92.454132][ T51] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 92.465087][ T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.484756][ T51] usb 3-1: Product: syz [ 92.486209][ T6237] chnl_net:caif_netlink_parms(): no params data found [ 92.489127][ T51] usb 3-1: Manufacturer: syz [ 92.516357][ T51] usb 3-1: SerialNumber: syz [ 92.538831][ T51] usb 3-1: config 0 descriptor?? [ 92.665573][ T52] hsr_slave_0: left promiscuous mode [ 92.672892][ T52] hsr_slave_1: left promiscuous mode [ 92.704422][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.714596][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.733420][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.745958][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.784571][ T52] veth1_macvtap: left promiscuous mode [ 92.799406][ T5912] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 92.818117][ T52] veth0_macvtap: left promiscuous mode [ 92.829566][ T52] veth1_vlan: left promiscuous mode [ 92.850410][ T52] veth0_vlan: left promiscuous mode [ 93.040286][ T51] airspy 3-1:0.0: Board ID: 00 [ 93.045148][ T51] airspy 3-1:0.0: Firmware version: [ 93.056307][ T5912] usb 5-1: config 0 has no interfaces? [ 93.110010][ T5863] Bluetooth: hci0: command tx timeout [ 93.286090][ T5912] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 93.329597][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.338073][ T5912] usb 5-1: Product: syz [ 93.342362][ T5912] usb 5-1: Manufacturer: syz [ 93.346998][ T5912] usb 5-1: SerialNumber: syz [ 93.371638][ T5912] usb 5-1: config 0 descriptor?? [ 93.720413][ T52] team0 (unregistering): Port device team_slave_1 removed [ 93.813068][ T52] team0 (unregistering): Port device team_slave_0 removed [ 94.768207][ T6237] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.779997][ T6237] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.787379][ T6237] bridge_slave_0: entered allmulticast mode [ 94.794711][ T6237] bridge_slave_0: entered promiscuous mode [ 94.814913][ T6281] netlink: 'syz.1.107': attribute type 4 has an invalid length. [ 94.822732][ T6281] netlink: 17 bytes leftover after parsing attributes in process `syz.1.107'. [ 94.860268][ T6237] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.861069][ T51] airspy 3-1:0.0: usb_control_msg() failed -71 request 10 [ 94.902186][ T51] airspy 3-1:0.0: Registered as swradio24 [ 94.929472][ T6237] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.936656][ T51] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 94.979792][ T51] usb 3-1: USB disconnect, device number 7 [ 95.049635][ T6237] bridge_slave_1: entered allmulticast mode [ 95.056701][ T6237] bridge_slave_1: entered promiscuous mode [ 95.190694][ T5863] Bluetooth: hci0: command tx timeout [ 95.337460][ T6237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.412540][ T6237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.559438][ T5935] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 95.625075][ T5910] usb 5-1: USB disconnect, device number 8 [ 95.634083][ T6237] team0: Port device team_slave_0 added [ 95.660675][ T6301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.111'. [ 95.693067][ T6237] team0: Port device team_slave_1 added [ 95.759644][ T5935] usb 1-1: Using ep0 maxpacket: 16 [ 95.773984][ T5935] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 95.827618][ T5935] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.862921][ T5935] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.891914][ T6237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.898921][ T6237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.928772][ T5935] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 95.948263][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.968583][ T5935] usb 1-1: Product: syz [ 95.994799][ T5935] usb 1-1: Manufacturer: syz [ 96.014780][ T6237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.021379][ T5935] usb 1-1: SerialNumber: syz [ 96.081144][ T6237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.088482][ T6237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.167729][ T6237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.209422][ T6323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.241264][ T6323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.269659][ T5907] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 96.278326][ T5935] usb 1-1: 0:2 : does not exist [ 96.293364][ T5935] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 96.331715][ T6237] hsr_slave_0: entered promiscuous mode [ 96.341832][ T6237] hsr_slave_1: entered promiscuous mode [ 96.359332][ T6237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.384696][ T6237] Cannot create hsr debugfs directory [ 96.420040][ T5910] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 96.429318][ T5912] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 96.437316][ T5907] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 96.451922][ T5907] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 96.479335][ T5907] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 96.509299][ T5907] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 96.539301][ T5907] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 96.580710][ T5910] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.583112][ T5907] usb 2-1: config 0 interface 0 has no altsetting 0 [ 96.607850][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 96.611182][ T5910] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.626549][ T5912] usb 3-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6 [ 96.649038][ T5910] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 96.651202][ T5907] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 96.658690][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 96.675851][ T5910] usb 5-1: SerialNumber: syz [ 96.677906][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.689734][ T5935] usb 1-1: USB disconnect, device number 12 [ 96.705130][ T5907] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 96.723565][ T5907] usb 2-1: Product: syz [ 96.728013][ T5907] usb 2-1: Manufacturer: syz [ 96.735780][ T5912] usb 3-1: config 0 descriptor?? [ 96.745638][ T5907] usb 2-1: SerialNumber: syz [ 96.755867][ T5912] usb 3-1: dvb_usb_v2: found a 'Anysee' in warm state [ 96.783949][ T5912] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 96.805177][ T5907] usb 2-1: config 0 descriptor?? [ 96.826559][ T5912] dvb_usb_anysee 3-1:0.0: probe with driver dvb_usb_anysee failed with error -22 [ 96.839696][ T6316] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 96.858974][ T5907] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 96.878679][ T5907] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 96.954341][ T5907] usb 3-1: USB disconnect, device number 8 [ 96.977622][ T6237] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 96.990606][ T6237] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 97.012482][ T6237] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 97.032294][ T6237] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 97.057121][ T5910] usb 5-1: 0:2 : does not exist [ 97.090762][ T5910] usb 5-1: unit 5: unexpected type 0x0a [ 97.131769][ T5912] usb 2-1: USB disconnect, device number 10 [ 97.138530][ T5910] usb 5-1: USB disconnect, device number 9 [ 97.143108][ T5912] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 97.231327][ T6237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.256338][ T6237] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.270302][ T5863] Bluetooth: hci0: command tx timeout [ 97.279874][ T3569] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.287031][ T3569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.329029][ T3569] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.336231][ T3569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.381677][ T5862] udevd[5862]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.404033][ T6237] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 97.423736][ T6237] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.503706][ T6237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.615068][ T6237] veth0_vlan: entered promiscuous mode [ 97.645095][ T6237] veth1_vlan: entered promiscuous mode [ 97.726803][ T6237] veth0_macvtap: entered promiscuous mode [ 97.818693][ T6237] veth1_macvtap: entered promiscuous mode [ 97.908461][ T6237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.944843][ T6237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.963180][ T6237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.987019][ T6237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.022941][ T6237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.052560][ T6237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.070883][ T6376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.124'. [ 98.077553][ T6237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.096951][ T6237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.132037][ T6237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.171634][ T6237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.198989][ T6237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.229136][ T6237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.247814][ T6237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.269628][ T6237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.283796][ T6237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.294062][ T6237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.305065][ T6237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.322723][ T6237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.370381][ T6237] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.426151][ T6237] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.455922][ T6237] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.480068][ T6237] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.489401][ T5907] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 98.500588][ T6393] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 98.639748][ T5907] usb 5-1: Using ep0 maxpacket: 8 [ 98.658459][ T5907] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 98.680654][ T5912] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 98.700082][ T5907] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 98.712810][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.726825][ T6396] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 98.738733][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.742270][ T5907] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 98.757785][ T6399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.130'. [ 98.770867][ T5907] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.801355][ T5907] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 98.811090][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.826049][ T5907] usb 5-1: Product: syz [ 98.830542][ T5907] usb 5-1: Manufacturer: syz [ 98.835176][ T5907] usb 5-1: SerialNumber: syz [ 98.865103][ T6384] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 98.880920][ T5907] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 98.890167][ T5907] usbtest 5-1:1.0: Linux user mode ISO test driver [ 98.896763][ T5907] usbtest 5-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 98.897137][ T3455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.913104][ T5912] usb 2-1: Using ep0 maxpacket: 32 [ 98.974418][ T5912] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 98.979082][ T3455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.986919][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.009571][ T5912] usb 2-1: Product: syz [ 99.014351][ T5912] usb 2-1: Manufacturer: syz [ 99.046188][ T5912] usb 2-1: SerialNumber: syz [ 99.074939][ T5912] usb 2-1: config 0 descriptor?? [ 99.096170][ T51] usb 5-1: USB disconnect, device number 10 [ 99.349884][ T5863] Bluetooth: hci0: command tx timeout [ 99.541908][ T5912] airspy 2-1:0.0: Board ID: 00 [ 99.546981][ T5912] airspy 2-1:0.0: Firmware version: [ 99.909775][ T51] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 99.991785][ T6449] syzkaller0: entered allmulticast mode [ 100.019544][ T5910] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 100.042031][ T6445] netlink: 'syz.5.139': attribute type 10 has an invalid length. [ 100.066370][ T6445] team0: Failed to send options change via netlink (err -105) [ 100.075039][ T6445] team0: Port device netdevsim0 added [ 100.080730][ T51] usb 1-1: Using ep0 maxpacket: 32 [ 100.094140][ T6445] netlink: 'syz.5.139': attribute type 10 has an invalid length. [ 100.104119][ T51] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 100.115991][ T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.140057][ T51] usb 1-1: config 0 descriptor?? [ 100.149110][ T6445] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 100.177884][ T6445] team0: Failed to send options change via netlink (err -105) [ 100.192077][ T5910] usb 5-1: Using ep0 maxpacket: 8 [ 100.201737][ T6445] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 100.217415][ T6445] team0: Port device netdevsim0 removed [ 100.230254][ T6445] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 100.249961][ T25] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 100.252518][ T6449] syzkaller0 (unregistering): left allmulticast mode [ 100.272921][ T5910] usb 5-1: unable to get BOS descriptor or descriptor too short [ 100.289997][ T5910] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 100.297725][ T5910] usb 5-1: can't read configurations, error -71 [ 100.358393][ T51] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 100.383867][ T51] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 100.401772][ T51] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 100.410831][ T51] usb 1-1: media controller created [ 100.449928][ T25] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 100.462557][ T51] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 100.475872][ T25] usb 3-1: config 1 has an invalid descriptor of length 24, skipping remainder of the config [ 100.495505][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 100.535645][ T25] usb 3-1: config 1 has no interface number 0 [ 100.565947][ T25] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 100.598551][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 100.608217][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.616820][ T25] usb 3-1: Product: syz [ 100.626956][ T25] usb 3-1: Manufacturer: syz [ 100.638877][ T25] usb 3-1: SerialNumber: syz [ 100.649550][ T25] cdc_ncm 3-1:1.1: skipping garbage [ 100.655547][ T25] cdc_ncm 3-1:1.1: invalid descriptor buffer length [ 100.665271][ T25] cdc_ncm 3-1:1.1: NCM or ECM functional descriptors missing [ 100.679995][ T25] cdc_ncm 3-1:1.1: bind() failure [ 100.684175][ T5912] airspy 2-1:0.0: usb_control_msg() failed -71 request 10 [ 100.699963][ T5912] airspy 2-1:0.0: Registered as swradio24 [ 100.705848][ T5912] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 100.755075][ T5912] usb 2-1: USB disconnect, device number 11 [ 100.768512][ T6432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.777657][ T6432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.073733][ T6483] @: renamed from vlan0 (while UP) [ 101.279006][ T5935] usb 3-1: USB disconnect, device number 9 [ 101.349465][ T5910] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 101.389572][ T58] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 101.429715][ T51] stb0899_attach: Driver disabled by Kconfig [ 101.435761][ T51] az6027: no front-end attached [ 101.435761][ T51] [ 101.452743][ T51] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 101.471047][ T51] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 101.512466][ T6505] input: syz1 as /devices/virtual/input/input9 [ 101.521469][ T5910] usb 5-1: Using ep0 maxpacket: 8 [ 101.527316][ T51] dvb-usb: schedule remote query interval to 400 msecs. [ 101.536037][ T6507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.149'. [ 101.542896][ T51] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 101.561667][ T5910] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 101.571972][ T58] usb 6-1: config 0 has an invalid interface number: 250 but max is 0 [ 101.573592][ T6507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.149'. [ 101.582898][ T58] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.608104][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.631825][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 101.631843][ T29] audit: type=1326 audit(1732629228.241:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7257e819 code=0x7ffc0000 [ 101.635611][ T5910] usb 5-1: Product: syz [ 101.638754][ T29] audit: type=1326 audit(1732629228.241:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f1d7257e819 code=0x7ffc0000 [ 101.670726][ T51] usb 1-1: USB disconnect, device number 13 [ 101.702333][ T58] usb 6-1: config 0 has no interface number 0 [ 101.713976][ T58] usb 6-1: config 0 interface 250 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 101.727609][ T58] usb 6-1: config 0 interface 250 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.743897][ T5910] usb 5-1: Manufacturer: syz [ 101.748544][ T5910] usb 5-1: SerialNumber: syz [ 101.760673][ T58] usb 6-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 101.784737][ T5910] usb 5-1: config 0 descriptor?? [ 101.804101][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.815775][ T29] audit: type=1326 audit(1732629228.301:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7257e819 code=0x7ffc0000 [ 101.853713][ T5910] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 101.862111][ T58] usb 6-1: config 0 descriptor?? [ 101.869163][ T51] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 101.887482][ T29] audit: type=1326 audit(1732629228.301:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7257e819 code=0x7ffc0000 [ 102.058076][ T58] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 102.368803][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.153'. [ 102.619401][ T51] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 102.659378][ T5907] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 102.710820][ T58] usb 6-1: device descriptor read/64, error -71 [ 102.790252][ T51] usb 1-1: Using ep0 maxpacket: 8 [ 102.829326][ T5907] usb 3-1: Using ep0 maxpacket: 16 [ 102.830408][ T5910] gspca_sonixj: reg_w1 err -71 [ 102.855654][ T5907] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 102.867300][ T51] usb 1-1: unable to get BOS descriptor or descriptor too short [ 102.880773][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.899128][ T5907] usb 3-1: Product: syz [ 102.899724][ T51] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 102.903780][ T5907] usb 3-1: Manufacturer: syz [ 102.925942][ T5907] usb 3-1: SerialNumber: syz [ 102.929506][ T5910] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 102.943516][ T5907] usb 3-1: config 0 descriptor?? [ 102.945984][ T51] usb 1-1: can't read configurations, error -71 [ 102.975322][ T58] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 102.976704][ T5907] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 102.991004][ T5910] usb 5-1: USB disconnect, device number 12 [ 103.020086][ T5907] usb 3-1: Detected FT-X [ 103.126451][ T6560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.157'. [ 103.136894][ T6560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.157'. [ 103.193825][ T6535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.219727][ T6535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.249586][ T5907] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 103.475221][ T29] audit: type=1326 audit(1732629230.081:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.4.159" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a6017e819 code=0x0 [ 103.475653][ T5907] ftdi_sio 3-1:0.0: GPIO initialisation failed: -32 [ 103.512916][ T6569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.160'. [ 103.527949][ T5907] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 103.545589][ T5907] usb 3-1: USB disconnect, device number 10 [ 103.569670][ T5910] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 103.579611][ T5907] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 103.591279][ T5907] ftdi_sio 3-1:0.0: device disconnected [ 103.729470][ T5910] usb 2-1: Using ep0 maxpacket: 16 [ 103.737216][ T5910] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 103.748368][ T5910] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 103.758482][ T5910] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 103.772946][ T5910] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 103.782426][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.790559][ T5910] usb 2-1: Product: syz [ 103.794852][ T5910] usb 2-1: Manufacturer: syz [ 103.799582][ T5910] usb 2-1: SerialNumber: syz [ 104.029811][ T5910] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 104.039406][ T51] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 104.065221][ T5910] usb 2-1: USB disconnect, device number 12 [ 104.149115][ T6579] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 104.202524][ T51] usb 1-1: config 2 has an invalid interface number: 71 but max is 0 [ 104.211059][ T51] usb 1-1: config 2 has no interface number 0 [ 104.217220][ T51] usb 1-1: config 2 interface 71 has no altsetting 0 [ 104.224306][ T51] usb 1-1: New USB device found, idVendor=13d3, idProduct=3311, bcdDevice=40.90 [ 104.233630][ T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.247457][ T51] r8712u: register rtl8712_netdev_ops to netdev_ops [ 104.254387][ T51] usb 1-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 104.291728][ T6527] udevd[6527]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.399611][ T5858] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 104.408953][ T9] usb 6-1: USB disconnect, device number 2 [ 104.447553][ T6574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.471153][ T6574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.492421][ T51] usb 1-1: r8712u: Boot from EFUSE: Autoload Failed [ 104.499073][ T51] usb 1-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 104.511286][ T51] usb 1-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 104.530679][ T51] usb 1-1: USB disconnect, device number 15 [ 104.593119][ T5858] usb 3-1: not running at top speed; connect to a high speed hub [ 104.615830][ T5858] usb 3-1: config 4 has an invalid interface number: 113 but max is 2 [ 104.628446][ T5858] usb 3-1: config 4 has an invalid interface number: 31 but max is 2 [ 104.630157][ T6586] netlink: 12 bytes leftover after parsing attributes in process `syz.1.166'. [ 104.646297][ T5907] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 104.656885][ T5858] usb 3-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 104.668352][ T5858] usb 3-1: config 4 has an invalid interface number: 144 but max is 2 [ 104.682223][ T5858] usb 3-1: config 4 has no interface number 0 [ 104.688476][ T5858] usb 3-1: config 4 has no interface number 1 [ 104.696418][ T5858] usb 3-1: config 4 has no interface number 2 [ 104.708341][ T5858] usb 3-1: config 4 interface 113 altsetting 3 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 104.720639][ T5858] usb 3-1: config 4 interface 31 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 104.732043][ T5858] usb 3-1: config 4 interface 31 altsetting 13 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 104.743436][ T5858] usb 3-1: config 4 interface 31 altsetting 13 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 104.761665][ T5858] usb 3-1: config 4 interface 31 altsetting 13 has a duplicate endpoint with address 0x3, skipping [ 104.778386][ T5858] usb 3-1: config 4 interface 31 altsetting 13 endpoint 0x1 has invalid wMaxPacketSize 0 [ 104.788803][ T5858] usb 3-1: config 4 interface 31 altsetting 13 has a duplicate endpoint with address 0x1, skipping [ 104.789337][ T5907] usb 5-1: device descriptor read/64, error -71 [ 104.806854][ T5858] usb 3-1: config 4 interface 31 altsetting 13 has a duplicate endpoint with address 0xD, skipping [ 104.818131][ T5858] usb 3-1: config 4 interface 31 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 104.830765][ T5858] usb 3-1: config 4 interface 31 altsetting 13 has a duplicate endpoint with address 0x1, skipping [ 104.841605][ T5858] usb 3-1: config 4 interface 31 altsetting 13 has a duplicate endpoint with address 0x7, skipping [ 104.852382][ T5858] usb 3-1: config 4 interface 31 altsetting 13 has a duplicate endpoint with address 0x7, skipping [ 104.863206][ T5858] usb 3-1: config 4 interface 31 altsetting 13 has a duplicate endpoint with address 0x1, skipping [ 104.877025][ T5858] usb 3-1: config 4 interface 31 altsetting 13 has a duplicate endpoint with address 0x7, skipping [ 104.900105][ T5858] usb 3-1: config 4 interface 144 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 104.914238][ T5858] usb 3-1: config 4 interface 144 altsetting 3 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 104.925209][ T5858] usb 3-1: config 4 interface 144 altsetting 3 endpoint 0x4 has invalid maxpacket 1024, setting to 1023 [ 104.936495][ T5858] usb 3-1: config 4 interface 144 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 104.939343][ T5912] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 104.947343][ T5858] usb 3-1: config 4 interface 144 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 104.967049][ T5858] usb 3-1: config 4 interface 113 has no altsetting 0 [ 104.973873][ T5858] usb 3-1: config 4 interface 31 has no altsetting 0 [ 104.980680][ T5858] usb 3-1: config 4 interface 144 has no altsetting 0 [ 104.989398][ T5858] usb 3-1: New USB device found, idVendor=249c, idProduct=9008, bcdDevice=80.ca [ 105.000668][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.008699][ T5858] usb 3-1: Product: ã° [ 105.012983][ T5858] usb 3-1: Manufacturer: â¾ê¸¯é’“影䖨ì¾èš¾à®½ïž¾Ç½ã•ã¢ºï¶˜ä“°Ê¤ä¸ã¬¦å°­ìˆ¨é—︘æ©è†¼æ‡‹æ¼©ä˜¦éŒ¬ê¼áˆ½ïŒ»ä€é•’淓튃㛓薪ჟ誄ଞᓫè´ï™å–¤ë¶· [ 105.029528][ T5858] usb 3-1: SerialNumber: â°€ [ 105.069444][ T5907] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 105.139455][ T5912] usb 2-1: Using ep0 maxpacket: 8 [ 105.146397][ T5912] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 105.156270][ T5912] usb 2-1: config 246 descriptor has 1 excess byte, ignoring [ 105.164651][ T5912] usb 2-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 105.174172][ T5912] usb 2-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 105.186695][ T5912] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 105.198783][ T5912] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 105.210442][ T5907] usb 5-1: device descriptor read/64, error -71 [ 105.217604][ T5912] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 105.229096][ T5912] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 105.238234][ T5912] usb 2-1: config 246 descriptor has 1 excess byte, ignoring [ 105.245894][ T5912] usb 2-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 105.257843][ T5912] usb 2-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 105.262516][ T5858] usb 3-1: can't set first interface for hiFace device. [ 105.271101][ T5912] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 105.284166][ T5858] snd-usb-hiface 3-1:4.113: probe with driver snd-usb-hiface failed with error -5 [ 105.298278][ T5912] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 105.304571][ T5858] usb 3-1: can't set first interface for hiFace device. [ 105.318288][ T5912] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 105.320053][ T5858] snd-usb-hiface 3-1:4.31: probe with driver snd-usb-hiface failed with error -5 [ 105.339466][ T5910] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 105.347491][ T5907] usb usb5-port1: attempt power cycle [ 105.354009][ T5858] usb 3-1: can't set first interface for hiFace device. [ 105.361402][ T5858] snd-usb-hiface 3-1:4.144: probe with driver snd-usb-hiface failed with error -5 [ 105.381473][ T5912] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 105.384087][ T5858] usb 3-1: USB disconnect, device number 11 [ 105.399303][ T5912] usb 2-1: config 246 descriptor has 1 excess byte, ignoring [ 105.429557][ T5912] usb 2-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 105.453946][ T5912] usb 2-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 105.478824][ T5912] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 105.500511][ T5910] usb 1-1: Using ep0 maxpacket: 32 [ 105.500614][ T5912] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 105.509441][ T5910] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 105.517672][ T5912] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 105.527391][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.545496][ T5910] usb 1-1: Product: syz [ 105.550427][ T5910] usb 1-1: Manufacturer: syz [ 105.555060][ T5910] usb 1-1: SerialNumber: syz [ 105.580380][ T5910] usb 1-1: config 0 descriptor?? [ 105.589203][ T5912] usb 2-1: string descriptor 0 read error: -22 [ 105.597387][ T5912] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 105.612069][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.627185][ T5912] adutux 2-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 105.689464][ T5907] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 105.712312][ T5907] usb 5-1: device descriptor read/8, error -71 [ 105.839586][ T5858] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 105.949487][ T5907] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 105.974817][ T5907] usb 5-1: device descriptor read/8, error -71 [ 105.993809][ T5910] airspy 1-1:0.0: Board ID: 00 [ 105.998751][ T5910] airspy 1-1:0.0: Firmware version: [ 106.006107][ T5858] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.023546][ T5858] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.034216][ T5858] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 106.047479][ T5858] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 106.056665][ T5858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.066533][ T5858] usb 6-1: config 0 descriptor?? [ 106.089861][ T5912] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 106.097769][ T5907] usb usb5-port1: unable to enumerate USB device [ 106.249430][ T5912] usb 3-1: Using ep0 maxpacket: 8 [ 106.314699][ T5912] usb 3-1: unable to get BOS descriptor or descriptor too short [ 106.340416][ T5912] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 106.348244][ T5912] usb 3-1: can't read configurations, error -71 [ 106.747405][ T5858] usbhid 6-1:0.0: can't add hid device: -71 [ 106.753841][ T5858] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 106.766632][ T5858] usb 6-1: USB disconnect, device number 3 [ 107.014784][ T5910] airspy 1-1:0.0: usb_control_msg() failed -71 request 10 [ 107.025450][ T5910] airspy 1-1:0.0: Registered as swradio24 [ 107.032697][ T5910] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 107.055055][ T5910] usb 1-1: USB disconnect, device number 16 [ 107.185204][ T6610] netlink: 24 bytes leftover after parsing attributes in process `syz.2.172'. [ 107.206927][ T6610] netlink: 24 bytes leftover after parsing attributes in process `syz.2.172'. [ 107.435812][ T6619] veth0_to_batadv: mtu less than device minimum [ 107.534921][ T6623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.545812][ T6623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.574599][ T5912] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 107.648641][ T5858] usb 2-1: USB disconnect, device number 13 [ 107.749926][ T5912] usb 6-1: Using ep0 maxpacket: 32 [ 107.762305][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.772180][ T5910] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 107.781060][ T5912] usb 6-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 107.795465][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.815705][ T5912] usb 6-1: config 0 descriptor?? [ 107.902024][ T5910] usb 5-1: device descriptor read/64, error -71 [ 108.169395][ T5910] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 108.189417][ T5907] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 108.234940][ T5912] usbhid 6-1:0.0: can't add hid device: -71 [ 108.249489][ T5912] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 108.267942][ T5912] usb 6-1: USB disconnect, device number 4 [ 108.309371][ T5910] usb 5-1: device descriptor read/64, error -71 [ 108.345128][ T5907] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 108.353765][ T5907] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 108.362106][ T5907] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 108.371428][ T5907] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 108.383489][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 108.393684][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 108.403552][ T5907] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 108.420866][ T5910] usb usb5-port1: attempt power cycle [ 108.427513][ T5907] usb 3-1: language id specifier not provided by device, defaulting to English [ 108.445670][ T5907] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 108.455670][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.465087][ T5907] usb 3-1: Product: å® [ 108.477235][ T5907] usb 3-1: config 0 descriptor?? [ 108.488194][ T5907] hub 3-1:0.0: bad descriptor, ignoring hub [ 108.500868][ T5907] hub 3-1:0.0: probe with driver hub failed with error -5 [ 108.511309][ T5907] input: å® as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input10 [ 108.691634][ T6637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.700563][ T6637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.712389][ T5912] usb 3-1: USB disconnect, device number 14 [ 108.779514][ T5910] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 108.801141][ T6644] netlink: 20 bytes leftover after parsing attributes in process `syz.5.183'. [ 108.811388][ T5910] usb 5-1: device descriptor read/8, error -71 [ 108.859987][ T58] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 108.919560][ T5935] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 109.039372][ T58] usb 1-1: Using ep0 maxpacket: 8 [ 109.069419][ T5910] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 109.090552][ T5935] usb 2-1: Using ep0 maxpacket: 16 [ 109.097416][ T5910] usb 5-1: device descriptor read/8, error -71 [ 109.105501][ T5935] usb 2-1: config 1 has an invalid interface number: 200 but max is 0 [ 109.114493][ T5935] usb 2-1: config 1 has no interface number 0 [ 109.121119][ T5935] usb 2-1: config 1 interface 200 has no altsetting 0 [ 109.129862][ T5935] usb 2-1: New USB device found, idVendor=0403, idProduct=da72, bcdDevice=37.35 [ 109.138972][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.147290][ T5935] usb 2-1: Product: syz [ 109.151708][ T5935] usb 2-1: Manufacturer: syz [ 109.156340][ T5935] usb 2-1: SerialNumber: syz [ 109.211533][ T5910] usb usb5-port1: unable to enumerate USB device [ 109.295660][ T6655] vlan2: entered allmulticast mode [ 109.303016][ T6655] macvlan0: entered allmulticast mode [ 109.308599][ T6655] veth1_vlan: entered allmulticast mode [ 109.320907][ T6655] macvlan0: left allmulticast mode [ 109.326204][ T6655] veth1_vlan: left allmulticast mode [ 109.371187][ T6642] warning: `syz.1.182' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 109.389740][ T6642] netlink: 80 bytes leftover after parsing attributes in process `syz.1.182'. [ 109.407444][ T5935] usb 2-1: NDI device with a latency value of 1 [ 109.418844][ T5935] ftdi_sio 2-1:1.200: FTDI USB Serial Device converter detected [ 109.433469][ T5935] ftdi_sio ttyUSB0: unknown device type: 0x3735 [ 109.444030][ T5935] usb 2-1: USB disconnect, device number 14 [ 109.457806][ T5935] ftdi_sio 2-1:1.200: device disconnected [ 109.782141][ T5910] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 109.950328][ T5910] usb 3-1: Using ep0 maxpacket: 8 [ 109.965764][ T5910] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 109.984901][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.012851][ T5910] usb 3-1: Product: syz [ 110.031957][ T5910] usb 3-1: Manufacturer: syz [ 110.044330][ T5910] usb 3-1: SerialNumber: syz [ 110.060418][ T5910] usb 3-1: config 0 descriptor?? [ 110.092201][ T5910] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 110.159007][ T6676] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 110.215093][ T6676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.188'. [ 110.216513][ T6681] netlink: 8 bytes leftover after parsing attributes in process `syz.5.190'. [ 110.253979][ T29] audit: type=1326 audit(1732629236.861:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6675 comm="syz.1.188" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb56cf7e819 code=0x7ffe0000 [ 110.919459][ T51] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 111.091342][ T51] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 111.110906][ T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.132154][ T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.144063][ T51] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 111.159291][ T51] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 111.168893][ T51] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 111.177431][ T51] usb 5-1: Manufacturer: syz [ 111.204046][ T51] usb 5-1: config 0 descriptor?? [ 111.629893][ T51] usbhid 5-1:0.0: can't add hid device: -71 [ 111.648641][ T51] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 111.682020][ T51] usb 5-1: USB disconnect, device number 21 [ 111.702151][ T58] usb 1-1: unable to get BOS descriptor or descriptor too short [ 111.722051][ T58] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 111.747695][ T58] usb 1-1: can't read configurations, error -71 [ 112.317777][ T6718] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 112.521365][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 112.598100][ T5910] usb 3-1: USB disconnect, device number 15 [ 112.720243][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 112.739351][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 84, changing to 10 [ 112.750701][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.866026][ T9] usb 6-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.40 [ 112.875483][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.883839][ T9] usb 6-1: Product: ä°’ [ 112.888048][ T9] usb 6-1: Manufacturer: 輈ᴊ䲶㗞춺틵걀鑟≫爤᪊ᜠꧢ붠äªì™žã˜³ê†œÃŸâ—²î¬‡ã·í„‘ᢵç¹è»¨ì²Ÿê„‰î¨ˆê«¾à½—æ±¥æ¹âµ»î “뻇ꈳ眨㇫⎩挗ȘՋ巫々ⓠ㴱᢮΅뼗蒅㓮馤áµá¸—﭅豗ᴲ馬á°å“²ïŽ‚㡃穽ﭥꭼâ¼ê‹âƒ‘ḟ堃ᤖ깰⊩濥쀈ã·ï‰Šë‘¸ì˜•ç‰Ù¬æœ¸á‘‚蛻 [ 112.915396][ T9] usb 6-1: SerialNumber: âºîœ»éš“觓䠕໖嗌â…ï·¡ë˜í•ƒæªâº‡ë‡¯ê·˜ï‘…녕枕敄鰌⃴ܣ뢮奒섵ⴗé¸â ¸æƒƒî›ê€¼î´â“™àº«éŠœå î›¼ç†€å™¹Ã³Ó”㦤ë‚⇊﵈ɮᦞ⠽햙똬忹馞̦ã•î¤¶æ¶…ᰳ㤇氜莥馇挀뢿੬퇨柷彮﶑项㻴ã±éŸ¹å†¯텿糡æ·ì›ˆê§¸å–Ÿçª’ꗶ峊쌫镖㯀Ꞵ뚛囡⩢採饌î¼ë´…鵔ꃄ [ 113.289319][ T6735] mmap: syz.5.196 (6735) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 113.320210][ T8] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 113.373504][ T6735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.383887][ T6735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.483601][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.506311][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 113.521816][ T8] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 113.553910][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 113.583806][ T8] usb 5-1: SerialNumber: syz [ 113.629514][ T5907] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 113.789394][ T5907] usb 3-1: Using ep0 maxpacket: 8 [ 113.805916][ T5907] usb 3-1: unable to get BOS descriptor or descriptor too short [ 113.824101][ T8] usb 5-1: 0:2 : does not exist [ 113.833627][ T5907] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 113.843862][ T8] usb 5-1: unit 5: unexpected type 0x0c [ 113.851864][ T5907] usb 3-1: can't read configurations, error -71 [ 113.999383][ T5910] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 114.179569][ T5910] usb 2-1: Using ep0 maxpacket: 16 [ 114.194381][ T5910] usb 2-1: config 1 has an invalid descriptor of length 130, skipping remainder of the config [ 114.209728][ T5910] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 114.227263][ T5910] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 114.238650][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.252160][ T5910] usb 2-1: Product: syz [ 114.256381][ T5910] usb 2-1: Manufacturer: syz [ 114.263261][ T5910] usb 2-1: SerialNumber: syz [ 114.438200][ T6769] netlink: 'syz.4.200': attribute type 1 has an invalid length. [ 114.489827][ T6772] netlink: 52 bytes leftover after parsing attributes in process `syz.2.207'. [ 114.496305][ T6754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.519392][ T6772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.207'. [ 114.527071][ T6754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.547651][ T6772] tipc: MTU too low for tipc bearer [ 114.573828][ T5910] usb 2-1: cannot find UAC_HEADER [ 114.611763][ T5910] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 114.677572][ T5910] usb 2-1: USB disconnect, device number 15 [ 114.757459][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.209'. [ 114.873905][ T6526] udevd[6526]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 115.210902][ T6792] kvm: kvm [6790]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xef00000080 [ 115.240046][ T6792] kvm: kvm [6790]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x4500000000 [ 115.321401][ T9] usbhid 6-1:1.0: can't add hid device: -71 [ 115.327663][ T9] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 115.354626][ T9] usb 6-1: USB disconnect, device number 5 [ 116.041201][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.086982][ T5935] usb 5-1: USB disconnect, device number 22 [ 116.139398][ T5910] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 116.255388][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.275962][ T5910] usb 3-1: device descriptor read/64, error -71 [ 116.435878][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.499764][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 116.540347][ T5910] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 116.603367][ T11] bond0: (slave netdevsim0): Releasing backup interface [ 116.622591][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.680056][ T5907] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 116.689380][ T5910] usb 3-1: device descriptor read/64, error -71 [ 116.708470][ T9] usb 2-1: config 0 has no interfaces? [ 116.739542][ T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 116.763889][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.812521][ T9] usb 2-1: Product: syz [ 116.816785][ T9] usb 2-1: Manufacturer: syz [ 116.827994][ T5910] usb usb3-port1: attempt power cycle [ 116.854462][ T9] usb 2-1: SerialNumber: syz [ 116.873569][ T5907] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 116.887010][ T9] usb 2-1: config 0 descriptor?? [ 116.894301][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.910795][ T11] bridge_slave_1: left allmulticast mode [ 116.919404][ T5858] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 116.927911][ T5907] usb 1-1: Product: syz [ 116.934773][ T11] bridge_slave_1: left promiscuous mode [ 116.947640][ T5907] usb 1-1: Manufacturer: syz [ 116.952641][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.966463][ T5907] usb 1-1: SerialNumber: syz [ 116.988505][ T5907] usb 1-1: config 0 descriptor?? [ 116.998019][ T11] bridge_slave_0: left allmulticast mode [ 117.015439][ T11] bridge_slave_0: left promiscuous mode [ 117.031090][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.129413][ T5858] usb 5-1: Using ep0 maxpacket: 32 [ 117.148875][ T5858] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 4 [ 117.167892][ T5858] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 117.186634][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 117.215796][ T5865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 117.229381][ T5910] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 117.247640][ T5865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 117.251205][ T5858] usb 5-1: Product: syz [ 117.259001][ T5865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 117.259111][ T5858] usb 5-1: Manufacturer: syz [ 117.272268][ T5858] usb 5-1: SerialNumber: syz [ 117.281138][ T5858] usb 5-1: config 0 descriptor?? [ 117.287547][ T5910] usb 3-1: device descriptor read/8, error -71 [ 117.296261][ T5865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 117.302758][ T6840] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 117.316749][ T5865] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 117.325433][ T5865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 117.529154][ T5935] usb 5-1: USB disconnect, device number 23 [ 117.580947][ T5910] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 117.611399][ T5910] usb 3-1: device descriptor read/8, error -71 [ 117.736400][ T5910] usb usb3-port1: unable to enumerate USB device [ 117.865828][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.882149][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.894633][ T11] bond0 (unregistering): Released all slaves [ 118.106636][ T5907] usb 1-1: non-Atmel transceiver xxxx00da [ 118.307794][ T5907] usb 1-1: Firmware version (0.0) predates our first public release. [ 118.339420][ T5907] usb 1-1: Please update to version 0.2 or newer [ 118.346344][ T5907] usb 1-1: atusb_probe: initialization failed, error = -19 [ 118.367171][ T5907] usb 1-1: USB disconnect, device number 19 [ 118.637830][ T11] hsr_slave_0: left promiscuous mode [ 118.665919][ T11] hsr_slave_1: left promiscuous mode [ 118.686158][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.721793][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.774034][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.799583][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.882425][ T11] veth1_macvtap: left promiscuous mode [ 118.910044][ T11] veth0_macvtap: left promiscuous mode [ 118.944532][ T11] veth1_vlan: left promiscuous mode [ 118.960210][ T11] veth0_vlan: left promiscuous mode [ 119.254394][ T5858] usb 2-1: USB disconnect, device number 16 [ 119.269346][ T8] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 119.322457][ T5863] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 119.350386][ T5863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 119.358668][ T5863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 119.383962][ T5863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 119.394293][ T5863] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 119.402578][ T5863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 119.430101][ T5863] Bluetooth: hci0: command tx timeout [ 119.468855][ T8] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 119.482642][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.510922][ T8] usb 1-1: Product: syz [ 119.515275][ T8] usb 1-1: Manufacturer: syz [ 119.520091][ T8] usb 1-1: SerialNumber: syz [ 119.556818][ T8] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 119.598993][ T5907] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 120.014709][ T6883] kvm: kvm [6882]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xef00000080 [ 120.023110][ T6867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'. [ 120.024312][ T6883] kvm: kvm [6882]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x4500000000 [ 120.086525][ T11] team0 (unregistering): Port device team_slave_1 removed [ 120.177788][ T11] team0 (unregistering): Port device team_slave_0 removed [ 120.629594][ T5907] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 120.661349][ T5907] ath9k_htc: Failed to initialize the device [ 120.775385][ T5907] usb 1-1: ath9k_htc: USB layer deinitialized [ 120.960372][ T6867] batadv_slave_1: entered promiscuous mode [ 120.966807][ T6848] chnl_net:caif_netlink_parms(): no params data found [ 120.986746][ T8] usb 1-1: USB disconnect, device number 20 [ 121.218389][ T6848] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.225983][ T6848] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.233685][ T6848] bridge_slave_0: entered allmulticast mode [ 121.242030][ T6848] bridge_slave_0: entered promiscuous mode [ 121.325156][ T6848] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.332630][ T6848] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.339930][ T6848] bridge_slave_1: entered allmulticast mode [ 121.347116][ T6848] bridge_slave_1: entered promiscuous mode [ 121.418611][ T6848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.441535][ T6848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.510658][ T5865] Bluetooth: hci1: command tx timeout [ 121.517193][ T5863] Bluetooth: hci0: command tx timeout [ 121.531058][ T6848] team0: Port device team_slave_0 added [ 121.562684][ T6848] team0: Port device team_slave_1 added [ 121.613690][ T6879] chnl_net:caif_netlink_parms(): no params data found [ 121.697965][ T6848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.724576][ T6848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.799540][ T6848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.854607][ T6848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.870557][ T6848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.907390][ T6848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.979431][ T5910] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 122.158296][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.179565][ T5910] usb 1-1: Using ep0 maxpacket: 16 [ 122.187084][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.208098][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.237095][ T6848] hsr_slave_0: entered promiscuous mode [ 122.244183][ T5910] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 122.249408][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.233'. [ 122.277519][ T6848] hsr_slave_1: entered promiscuous mode [ 122.300208][ T5910] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 122.315843][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.315904][ T6848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.330018][ T5910] usb 1-1: config 0 descriptor?? [ 122.339339][ T6848] Cannot create hsr debugfs directory [ 122.354712][ T6934] vlan2: entered promiscuous mode [ 122.364186][ T6934] dummy0: entered promiscuous mode [ 122.376557][ T6934] dummy0: left promiscuous mode [ 122.485982][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.664631][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.728265][ T6879] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.737345][ T6879] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.744938][ T6879] bridge_slave_0: entered allmulticast mode [ 122.755449][ T6879] bridge_slave_0: entered promiscuous mode [ 122.764100][ T6879] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.772925][ T6879] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.780322][ T5910] microsoft 0003:045E:07DA.0007: report is too long [ 122.787379][ T5910] microsoft 0003:045E:07DA.0007: item 0 4 0 8 parsing failed [ 122.798322][ T6879] bridge_slave_1: entered allmulticast mode [ 122.805457][ T5910] microsoft 0003:045E:07DA.0007: parse failed [ 122.806726][ T6879] bridge_slave_1: entered promiscuous mode [ 122.812173][ T5910] microsoft 0003:045E:07DA.0007: probe with driver microsoft failed with error -22 [ 122.893768][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.919894][ T8] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 123.048738][ T5935] usb 1-1: USB disconnect, device number 21 [ 123.061176][ T6879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.101153][ T6879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.113945][ T8] usb 3-1: config 0 has no interfaces? [ 123.147693][ T8] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 123.172307][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.204728][ T8] usb 3-1: Product: syz [ 123.208957][ T8] usb 3-1: Manufacturer: syz [ 123.232557][ T8] usb 3-1: SerialNumber: syz [ 123.260073][ T8] usb 3-1: config 0 descriptor?? [ 123.315420][ T6879] team0: Port device team_slave_0 added [ 123.375306][ T6879] team0: Port device team_slave_1 added [ 123.452267][ T11] bridge_slave_1: left allmulticast mode [ 123.457970][ T11] bridge_slave_1: left promiscuous mode [ 123.472233][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.497780][ T11] bridge_slave_0: left allmulticast mode [ 123.514006][ T11] bridge_slave_0: left promiscuous mode [ 123.525083][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.589400][ T5863] Bluetooth: hci0: command tx timeout [ 123.594935][ T5865] Bluetooth: hci1: command tx timeout [ 123.939450][ T5935] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 124.131143][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 124.152808][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 124.203752][ T5935] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=a2.bf [ 124.217127][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.256511][ T5935] usb 2-1: Product: syz [ 124.303427][ T5935] usb 2-1: Manufacturer: syz [ 124.308138][ T5935] usb 2-1: SerialNumber: syz [ 124.342798][ T5935] usb 2-1: config 0 descriptor?? [ 124.356541][ T5935] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 124.668286][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.720597][ T5935] ssu100 2-1:0.0: probe with driver ssu100 failed with error -110 [ 124.747385][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.770689][ T11] bond0 (unregistering): Released all slaves [ 125.008853][ T6879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.053066][ T6879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.145569][ T6879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.174044][ T6879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.194230][ T6879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.238330][ T6879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.624032][ T6879] hsr_slave_0: entered promiscuous mode [ 125.647456][ T6879] hsr_slave_1: entered promiscuous mode [ 125.669340][ T5863] Bluetooth: hci1: command tx timeout [ 125.679025][ T6879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.687404][ T5863] Bluetooth: hci0: command tx timeout [ 125.702456][ T6879] Cannot create hsr debugfs directory [ 125.918540][ T5910] usb 3-1: USB disconnect, device number 22 [ 126.074092][ T11] hsr_slave_0: left promiscuous mode [ 126.087111][ T11] hsr_slave_1: left promiscuous mode [ 126.107472][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.129414][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.143669][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.170142][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.245199][ T11] veth1_macvtap: left promiscuous mode [ 126.258071][ T11] veth0_macvtap: left promiscuous mode [ 126.270034][ T11] veth1_vlan: left promiscuous mode [ 126.285630][ T11] veth0_vlan: left promiscuous mode [ 126.437605][ T8] usb 2-1: USB disconnect, device number 17 [ 126.967163][ T11] team0 (unregistering): Port device team_slave_1 removed [ 127.011009][ T11] team0 (unregistering): Port device team_slave_0 removed [ 127.749818][ T5863] Bluetooth: hci1: command tx timeout [ 127.773858][ T6848] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 127.786346][ T6848] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 127.871855][ T7015] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2758444543 (5516889086 ns) > initial count (4205064 ns). Using initial count to start timer. [ 127.915671][ T7015] kvm: pic: non byte write [ 127.971433][ T6848] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 127.984804][ T6848] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 128.373193][ T6848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.420003][ T6879] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 128.452432][ T6879] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 128.518839][ T6879] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 128.540114][ T6879] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 128.582434][ T6848] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.645216][ T3519] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.652385][ T3519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.711309][ T3455] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.718470][ T3455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.759400][ T5858] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 128.799429][ T5858] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 128.853977][ T5858] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 129.005934][ T6879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.077049][ T6879] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.102415][ T7059] fuse: Bad value for 'group_id' [ 129.117077][ T7059] fuse: Bad value for 'group_id' [ 129.126062][ T3569] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.133261][ T3569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.193388][ T3569] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.200617][ T3569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.261643][ T6848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.476918][ T6848] veth0_vlan: entered promiscuous mode [ 129.542151][ T6848] veth1_vlan: entered promiscuous mode [ 129.564988][ T6879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.666343][ T6848] veth0_macvtap: entered promiscuous mode [ 129.736938][ T6848] veth1_macvtap: entered promiscuous mode [ 129.751601][ T6879] veth0_vlan: entered promiscuous mode [ 129.793172][ T6879] veth1_vlan: entered promiscuous mode [ 129.803901][ T6848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.835538][ T6848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.864663][ T6848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.893779][ T6848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.904441][ T6848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.917578][ T6848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.934434][ T6848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.998624][ T6848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.038086][ T6848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.062467][ T6848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.107121][ T6848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.149646][ T6848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.173388][ T6848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.194722][ T6848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.232131][ T6848] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.249751][ T6848] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.269491][ T6848] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.289352][ T6848] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.313607][ T7095] IPVS: set_ctl: invalid protocol: 255 0.0.0.0:20003 [ 130.392666][ T7087] sctp: failed to load transform for md5: -2 [ 130.445067][ T6879] veth0_macvtap: entered promiscuous mode [ 130.447913][ T6879] veth1_macvtap: entered promiscuous mode [ 130.652927][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.682104][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.710093][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.729393][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.751083][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.772228][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.795625][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.806920][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.820538][ T6879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.855735][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.899284][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.910335][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.921279][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.959152][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.970131][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.980041][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.990500][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.012606][ T6879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.066350][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.087369][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.103749][ T6879] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.130570][ T6879] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.139969][ T6879] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.175206][ T29] audit: type=1326 audit(1732629257.781:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7124 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56cf7e819 code=0x7ffc0000 [ 131.201618][ T29] audit: type=1326 audit(1732629257.781:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7124 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56cf7e819 code=0x7ffc0000 [ 131.224220][ T6879] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.242962][ T7125] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.263'. [ 131.254018][ T7125] openvswitch: netlink: Message has 44053 unknown bytes. [ 131.260953][ T7120] bridge_slave_0: left allmulticast mode [ 131.261207][ T29] audit: type=1326 audit(1732629257.841:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7124 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fb56cf7e819 code=0x7ffc0000 [ 131.267286][ T7120] bridge_slave_0: left promiscuous mode [ 131.302839][ T29] audit: type=1326 audit(1732629257.841:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7124 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56cf7e819 code=0x7ffc0000 [ 131.328113][ T7120] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.338663][ T29] audit: type=1326 audit(1732629257.841:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7124 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56cf7e819 code=0x7ffc0000 [ 131.382075][ T29] audit: type=1326 audit(1732629257.841:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7124 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fb56cf7e819 code=0x7ffc0000 [ 131.405190][ T7120] bridge_slave_1: left allmulticast mode [ 131.414753][ T7120] bridge_slave_1: left promiscuous mode [ 131.424718][ T7120] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.442712][ T29] audit: type=1326 audit(1732629257.841:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7124 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56cf7e819 code=0x7ffc0000 [ 131.465659][ T29] audit: type=1326 audit(1732629257.841:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7124 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56cf7e819 code=0x7ffc0000 [ 131.494781][ T29] audit: type=1326 audit(1732629257.851:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7124 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb56cf7e819 code=0x7ffc0000 [ 131.495233][ T7120] bond0: (slave bond_slave_0): Releasing backup interface [ 131.526114][ T29] audit: type=1326 audit(1732629257.851:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7124 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56cf7e819 code=0x7ffc0000 [ 131.548495][ T5910] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 131.564024][ T7120] bond0: (slave bond_slave_1): Releasing backup interface [ 131.592583][ T7120] team0: Port device team_slave_0 removed [ 131.606846][ T7120] team0: Port device team_slave_1 removed [ 131.613555][ T7120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.624263][ T7120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.633724][ T7120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.641953][ T7120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.694614][ T7122] team0: Port device wg2 added [ 131.720182][ T5910] usb 2-1: Using ep0 maxpacket: 8 [ 131.741009][ T5910] usb 2-1: config 64 has an invalid interface number: 19 but max is 0 [ 131.754318][ T5910] usb 2-1: config 64 has no interface number 0 [ 131.765445][ T5910] usb 2-1: config 64 interface 19 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 136 [ 131.785284][ T5910] usb 2-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 131.796680][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.809452][ T5858] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 131.825175][ T3569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.858215][ T7125] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 131.880568][ T3569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.908002][ T5910] usb 2-1: probing VID:PID(2201:012C) [ 131.934099][ T5910] usb 2-1: vub300 testing BULK OUT EndPoint(0) 02 [ 131.957623][ T5910] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 131.999622][ T5858] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 132.008919][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.037399][ T3455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.049860][ T5858] usb 3-1: Product: syz [ 132.055359][ T5858] usb 3-1: Manufacturer: syz [ 132.061378][ T5910] vub300 2-1:64.19: probe with driver vub300 failed with error -22 [ 132.069537][ T3455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.090167][ T5858] usb 3-1: SerialNumber: syz [ 132.117708][ T5858] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 132.172983][ T3455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.196615][ T3455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.211320][ T5910] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 132.277823][ T5935] usb 2-1: USB disconnect, device number 18 [ 132.629501][ T5899] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 132.811088][ T5899] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 132.823069][ T5899] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.835603][ T5899] usb 7-1: config 0 descriptor?? [ 132.845042][ T5899] cp210x 7-1:0.0: cp210x converter detected [ 133.120053][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.129483][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.349448][ T5910] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 133.356612][ T5910] ath9k_htc: Failed to initialize the device [ 133.372662][ T5899] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 133.381171][ T5899] cp210x 7-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 133.388846][ T5899] cp210x 7-1:0.0: GPIO initialisation failed: -71 [ 133.406163][ T5899] usb 7-1: cp210x converter now attached to ttyUSB0 [ 133.420913][ T5899] usb 7-1: USB disconnect, device number 2 [ 133.447160][ T5899] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 133.464351][ T5899] cp210x 7-1:0.0: device disconnected [ 133.486119][ T5910] usb 3-1: ath9k_htc: USB layer deinitialized [ 133.740539][ T51] usb 3-1: USB disconnect, device number 23 [ 134.185804][ T7187] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2758444543 (5516889086 ns) > initial count (4205064 ns). Using initial count to start timer. [ 134.232833][ T7187] kvm: pic: non byte write [ 134.879406][ T8] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 135.092071][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 135.126267][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 135.159355][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 135.190945][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 135.208774][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 135.232007][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.295658][ T8] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 135.305101][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.323056][ T8] usb 2-1: Product: syz [ 135.331124][ T8] usb 2-1: Manufacturer: syz [ 135.339763][ T8] usb 2-1: SerialNumber: syz [ 135.354586][ T8] usb 2-1: config 0 descriptor?? [ 135.749421][ T5935] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 135.786435][ T8] iowarrior 2-1:0.0: IOWarrior product=0x1505, serial=42424242 interface=0 now attached to iowarrior0 [ 135.820353][ T8] usb 2-1: USB disconnect, device number 19 [ 135.843225][ T8] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected [ 135.913066][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.956728][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.983000][ T5935] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.015847][ T5935] usb 3-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 136.040053][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.066831][ T5935] usb 3-1: config 0 descriptor?? [ 136.713462][ T5935] wacom 0003:056A:0094.0009: unknown main item tag 0x0 [ 136.749328][ T5935] wacom 0003:056A:0094.0009: unknown main item tag 0x0 [ 136.769318][ T5935] wacom 0003:056A:0094.0009: unknown main item tag 0x0 [ 136.779359][ T5935] wacom 0003:056A:0094.0009: unknown main item tag 0x0 [ 136.786322][ T5935] wacom 0003:056A:0094.0009: unknown main item tag 0x0 [ 136.832204][ T7260] VFS: Mount too revealing [ 136.846931][ T5935] wacom 0003:056A:0094.0009: unknown main item tag 0x0 [ 136.874700][ T5935] wacom 0003:056A:0094.0009: unknown main item tag 0x0 [ 136.882300][ T7263] VFS: Mount too revealing [ 136.912379][ T5935] wacom 0003:056A:0094.0009: Using device in hidraw-only mode [ 136.956140][ T5935] wacom 0003:056A:0094.0009: hidraw0: USB HID v0.00 Device [HID 056a:0094] on usb-dummy_hcd.2-1/input0 [ 137.019040][ T5935] usb 3-1: USB disconnect, device number 24 [ 137.209560][ T7264] erspan0: entered promiscuous mode [ 137.270823][ T8] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 137.306916][ T7264] erspan0: left promiscuous mode [ 137.369425][ T51] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 137.439306][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 137.461091][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.482424][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.495158][ T8] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 137.504565][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.523024][ T8] usb 2-1: config 0 descriptor?? [ 137.529445][ T51] usb 7-1: Using ep0 maxpacket: 32 [ 137.547837][ T51] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 137.578387][ T51] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.606373][ T51] usb 7-1: config 0 descriptor?? [ 137.615120][ T51] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 137.972531][ T8] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 137.999338][ T8] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 138.006388][ T8] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 138.044793][ T8] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 138.052124][ T8] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 138.062073][ T7289] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 138.075423][ T8] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 138.086960][ T7289] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 138.171037][ T8] cp2112 0003:10C4:EA90.000A: Part Number: 0x00 Device Version: 0x00 [ 138.470032][ T8] cp2112 0003:10C4:EA90.000A: error requesting SMBus config [ 138.480119][ T8] cp2112 0003:10C4:EA90.000A: probe with driver cp2112 failed with error -5 [ 138.537078][ T7267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.286'. [ 138.660950][ T7270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.691578][ T7270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.751104][ T7311] RDS: rds_bind could not find a transport for ::4006:20:0:0, load rds_tcp or rds_rdma? [ 138.891601][ T51] gspca_nw80x: reg_w err -71 [ 138.896905][ T51] nw80x 7-1:0.0: probe with driver nw80x failed with error -71 [ 139.248147][ T51] usb 7-1: USB disconnect, device number 3 [ 139.959655][ T8] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 140.119438][ T8] usb 3-1: device descriptor read/64, error -71 [ 140.369736][ T8] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 140.402954][ T119] usb 2-1: USB disconnect, device number 20 [ 140.540392][ T8] usb 3-1: device descriptor read/64, error -71 [ 140.671295][ T8] usb usb3-port1: attempt power cycle [ 140.825153][ T7363] fuse: Bad value for 'user_id' [ 140.830322][ T7363] fuse: Bad value for 'user_id' [ 140.951860][ T5907] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 141.034463][ T8] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 141.076095][ T8] usb 3-1: device descriptor read/8, error -71 [ 141.121337][ T5907] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.129365][ T5910] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 141.149928][ T5907] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.171918][ T5907] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.219343][ T5907] usb 7-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 141.261131][ T5907] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.290481][ T5907] usb 7-1: config 0 descriptor?? [ 141.349382][ T8] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 141.409939][ T8] usb 3-1: device descriptor read/8, error -71 [ 141.419369][ T5910] usb 8-1: Using ep0 maxpacket: 16 [ 141.520511][ T119] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 141.548991][ T8] usb usb3-port1: unable to enumerate USB device [ 141.574464][ T5910] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 141.635856][ T5910] usb 8-1: config 1 has an invalid descriptor of length 233, skipping remainder of the config [ 141.723208][ T5910] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.771368][ T5907] kye 0003:0458:5005.000B: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 141.791004][ T119] usb 2-1: config 0 has no interfaces? [ 141.816287][ T119] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 141.826952][ T5907] kye 0003:0458:5005.000B: unknown main item tag 0x0 [ 141.839482][ T5910] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 141.841086][ T119] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.848561][ T5910] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.848588][ T5910] usb 8-1: Product: syz [ 141.848603][ T5910] usb 8-1: Manufacturer: syz [ 141.848618][ T5910] usb 8-1: SerialNumber: syz [ 141.880383][ T5907] kye 0003:0458:5005.000B: unknown main item tag 0x0 [ 141.899413][ T5907] kye 0003:0458:5005.000B: unknown main item tag 0x0 [ 141.906523][ T5907] kye 0003:0458:5005.000B: unknown main item tag 0x0 [ 141.919514][ T5907] kye 0003:0458:5005.000B: unknown main item tag 0x0 [ 141.935291][ T119] usb 2-1: Product: syz [ 141.945472][ T5907] kye 0003:0458:5005.000B: unknown main item tag 0x0 [ 141.958718][ T119] usb 2-1: Manufacturer: syz [ 141.967630][ T5907] kye 0003:0458:5005.000B: unknown main item tag 0x0 [ 141.975998][ T119] usb 2-1: SerialNumber: syz [ 142.016843][ T119] usb 2-1: config 0 descriptor?? [ 142.023074][ T5907] kye 0003:0458:5005.000B: hidraw0: USB HID v0.00 Device [HID 0458:5005] on usb-dummy_hcd.6-1/input0 [ 142.068903][ T5907] kye 0003:0458:5005.000B: tablet-enabling feature report not found [ 142.175642][ T5907] kye 0003:0458:5005.000B: tablet enabling failed [ 142.259016][ T5907] usb 7-1: USB disconnect, device number 4 [ 142.455310][ T7349] binder: 7346:7349 unknown command 0 [ 142.599408][ T7349] binder: 7346:7349 ioctl c0306201 20000140 returned -22 [ 142.804852][ T5910] usb 8-1: 0:2 : does not exist [ 142.860870][ T5910] usb 8-1: 1:0: cannot get min/max values for control 4 (id 1) [ 142.932966][ T5910] usb 8-1: USB disconnect, device number 2 [ 143.129764][ T6527] udevd[6527]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.329344][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 144.529308][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 144.536108][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 144.564382][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 144.609332][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 144.679338][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 144.698888][ T5935] usb 2-1: USB disconnect, device number 21 [ 144.709327][ T119] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 144.717913][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.792654][ T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 144.812369][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.836540][ T9] usb 3-1: Product: syz [ 144.854857][ T9] usb 3-1: Manufacturer: syz [ 144.877630][ T9] usb 3-1: SerialNumber: syz [ 144.889595][ T9] usb 3-1: config 0 descriptor?? [ 144.909883][ T119] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.935082][ T119] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.960061][ T119] usb 7-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 144.989021][ T119] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.025279][ T119] usb 7-1: config 0 descriptor?? [ 145.132230][ T7436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.159893][ T7436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.191894][ T9] iowarrior 3-1:0.0: IOWarrior product=0x1505, serial= interface=0 now attached to iowarrior0 [ 145.238856][ T9] usb 3-1: USB disconnect, device number 29 [ 145.301387][ T9] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 145.612728][ T119] steelseries 0003:1038:12B6.000C: unknown main item tag 0x3 [ 145.650523][ T119] steelseries 0003:1038:12B6.000C: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.6-1/input0 [ 145.799796][ T7465] netlink: 'syz.6.312': attribute type 12 has an invalid length. [ 145.838622][ T7465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.898471][ T7465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.093744][ T7489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.318'. [ 146.118280][ T7489] geneve0: entered promiscuous mode [ 146.190132][ T7489] geneve0: left promiscuous mode [ 146.584501][ T119] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 146.771824][ T119] usb 2-1: Using ep0 maxpacket: 16 [ 146.780736][ T119] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 146.830784][ T119] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 146.844694][ T119] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.859248][ T119] usb 2-1: Product: syz [ 146.863462][ T119] usb 2-1: Manufacturer: syz [ 146.868084][ T119] usb 2-1: SerialNumber: syz [ 146.882837][ T119] usb 2-1: config 0 descriptor?? [ 146.926698][ T119] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 147.159565][ T1137] usb 2-1: Failed to submit usb control message: -71 [ 147.172695][ T1137] usb 2-1: unable to send the bmi data to the device: -71 [ 147.185209][ T119] usb 2-1: USB disconnect, device number 22 [ 147.189982][ T1137] usb 2-1: unable to get target info from device [ 147.234409][ T1137] usb 2-1: could not get target info (-71) [ 147.250948][ T1137] usb 2-1: could not probe fw (-71) [ 147.583865][ T9] usb 7-1: USB disconnect, device number 5 [ 148.279320][ T119] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 148.483845][ T7569] netlink: 16 bytes leftover after parsing attributes in process `syz.2.333'. [ 148.520026][ T119] usb 8-1: New USB device found, idVendor=055d, idProduct=9001, bcdDevice=31.44 [ 148.529139][ T119] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.549702][ T7569] netlink: 16 bytes leftover after parsing attributes in process `syz.2.333'. [ 148.597678][ T119] usb 8-1: config 0 descriptor?? [ 148.666585][ T119] pwc: Samsung MPC-C30 USB webcam detected. [ 148.982093][ T119] pwc: send_video_command error -71 [ 148.987368][ T119] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 149.013238][ T119] Philips webcam 8-1:0.0: probe with driver Philips webcam failed with error -71 [ 149.024280][ T119] usb 8-1: USB disconnect, device number 3 [ 149.129438][ T7591] capability: warning: `syz.6.338' uses 32-bit capabilities (legacy support in use) [ 149.424220][ T7601] kvm: pic: non byte write [ 149.435426][ T7601] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2758444543 (5516889086 ns) > initial count (4205064 ns). Using initial count to start timer. [ 149.485405][ T7604] FAULT_INJECTION: forcing a failure. [ 149.485405][ T7604] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 149.519449][ T7604] CPU: 1 UID: 0 PID: 7604 Comm: syz.1.339 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 149.529767][ T7604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 149.539858][ T7604] Call Trace: [ 149.543162][ T7604] [ 149.546109][ T7604] dump_stack_lvl+0x241/0x360 [ 149.550817][ T7604] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.556051][ T7604] ? __pfx__printk+0x10/0x10 [ 149.560672][ T7604] ? validate_chain+0x11e/0x5920 [ 149.565668][ T7604] ? validate_chain+0x11e/0x5920 [ 149.570631][ T7604] should_fail_ex+0x3b0/0x4e0 [ 149.575336][ T7604] prepare_alloc_pages+0x1da/0x5b0 [ 149.580494][ T7604] __alloc_pages_noprof+0x16f/0x710 [ 149.585732][ T7604] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 149.591497][ T7604] ? __pfx_lock_acquire+0x10/0x10 [ 149.596546][ T7604] alloc_pages_mpol_noprof+0x3e8/0x680 [ 149.602037][ T7604] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 149.608061][ T7604] vma_alloc_folio_noprof+0x12e/0x230 [ 149.613464][ T7604] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 149.619405][ T7604] folio_prealloc+0x2e/0x170 [ 149.624020][ T7604] handle_pte_fault+0x2518/0x68a0 [ 149.629084][ T7604] ? __pfx_handle_pte_fault+0x10/0x10 [ 149.634481][ T7604] ? __lock_acquire+0x1397/0x2100 [ 149.639527][ T7604] ? reacquire_held_locks+0x3eb/0x690 [ 149.644912][ T7604] ? lock_vma_under_rcu+0x34b/0x790 [ 149.650145][ T7604] ? __pfx_reacquire_held_locks+0x10/0x10 [ 149.655893][ T7604] handle_mm_fault+0x1106/0x1bb0 [ 149.660858][ T7604] ? __pfx_handle_mm_fault+0x10/0x10 [ 149.666155][ T7604] ? lock_vma_under_rcu+0x602/0x790 [ 149.671394][ T7604] ? lock_vma_under_rcu+0x1dd/0x790 [ 149.676612][ T7604] ? exc_page_fault+0x113/0x8c0 [ 149.681475][ T7604] exc_page_fault+0x459/0x8c0 [ 149.686158][ T7604] asm_exc_page_fault+0x26/0x30 [ 149.691015][ T7604] RIP: 0033:0x7fb56ce45e3a [ 149.695442][ T7604] Code: b2 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 57 41 bf 00 00 c0 fe 41 56 41 55 41 54 45 31 e4 55 53 48 81 ec 08 1b 00 00 <48> 89 7c 24 78 48 8d 9c 24 f0 06 00 00 48 89 74 24 70 48 89 54 24 [ 149.715053][ T7604] RSP: 002b:00007fb56dd684f0 EFLAGS: 00010206 [ 149.721130][ T7604] RAX: 00007fb56ce45e20 RBX: 00007fb56d136160 RCX: 0000000020000080 [ 149.729144][ T7604] RDX: 0000000020fe7000 RSI: 0000000000000005 RDI: ffffffffffffffff [ 149.737119][ T7604] RBP: 00007fb56dd6a090 R08: 0000000000000001 R09: 0000000000000028 [ 149.745088][ T7604] R10: ffffffffffffffff R11: 0000000020fe7000 R12: 0000000000000000 [ 149.753065][ T7604] R13: 0000000000000001 R14: 00007fb56d136160 R15: 00000000fec00000 [ 149.761050][ T7604] [ 149.787893][ T7604] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 150.249475][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.343'. [ 150.329981][ T5907] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 150.429416][ T7620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.344'. [ 150.502418][ T7620] binder: 7619:7620 ioctl c0306201 20000200 returned -22 [ 150.544271][ T5907] usb 3-1: config 160 has an invalid interface number: 200 but max is 0 [ 150.561940][ T5907] usb 3-1: config 160 has no interface number 0 [ 150.574790][ T5907] usb 3-1: config 160 interface 200 has no altsetting 0 [ 150.616476][ T5907] usb 3-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 150.632015][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.643193][ T5907] usb 3-1: Product: syz [ 150.647647][ T5907] usb 3-1: Manufacturer: syz [ 150.655904][ T5907] usb 3-1: SerialNumber: syz [ 150.769510][ T58] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 150.889438][ T7609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.918892][ T7609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.919712][ T58] usb 2-1: device descriptor read/64, error -71 [ 150.945750][ T7609] xt_socket: unknown flags 0x8 [ 150.966008][ T5907] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 150.982339][ T5907] usb 3-1: MIDIStreaming interface descriptor not found [ 151.066562][ T5907] usb 3-1: USB disconnect, device number 30 [ 151.081318][ T51] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 151.250664][ T58] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 151.331939][ T51] usb 7-1: config 0 has no interfaces? [ 151.379452][ T51] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 151.395066][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.449420][ T51] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.458550][ T51] usb 7-1: Product: syz [ 151.489354][ T58] usb 2-1: device descriptor read/64, error -71 [ 151.552681][ T51] usb 7-1: Manufacturer: syz [ 151.557347][ T51] usb 7-1: SerialNumber: syz [ 151.601611][ T51] usb 7-1: config 0 descriptor?? [ 151.691678][ T58] usb usb2-port1: attempt power cycle [ 151.838752][ T7640] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2758444543 (5516889086 ns) > initial count (4205064 ns). Using initial count to start timer. [ 152.049409][ T58] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 152.070036][ T58] usb 2-1: device descriptor read/8, error -71 [ 152.329364][ T58] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 152.374724][ T58] usb 2-1: device descriptor read/8, error -71 [ 152.501268][ T58] usb usb2-port1: unable to enumerate USB device [ 152.759727][ T5907] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 152.919537][ T5907] usb 3-1: Invalid ep0 maxpacket: 16 [ 153.062754][ T5907] usb 3-1: new low-speed USB device number 32 using dummy_hcd [ 153.165544][ T7673] netlink: 24 bytes leftover after parsing attributes in process `syz.0.360'. [ 153.183313][ T7673] devpts: called with bogus options [ 153.247289][ T7673] No such timeout policy "syz0" [ 153.252633][ T5907] usb 3-1: Invalid ep0 maxpacket: 16 [ 153.261193][ T5907] usb usb3-port1: attempt power cycle [ 153.652579][ T5907] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 153.723710][ T5907] usb 3-1: Invalid ep0 maxpacket: 16 [ 153.809500][ T58] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 153.869393][ T5907] usb 3-1: new low-speed USB device number 34 using dummy_hcd [ 153.887976][ T8] usb 7-1: USB disconnect, device number 6 [ 153.910628][ T5907] usb 3-1: Invalid ep0 maxpacket: 16 [ 153.926122][ T5907] usb usb3-port1: unable to enumerate USB device [ 153.999325][ T58] usb 2-1: Using ep0 maxpacket: 16 [ 154.007752][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.019346][ T58] usb 2-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 154.034816][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.056384][ T58] usb 2-1: config 0 descriptor?? [ 154.268784][ T58] apple 0003:05AC:027A.000D: item fetching failed at offset 4/5 [ 154.277667][ T58] apple 0003:05AC:027A.000D: parse failed [ 154.283742][ T58] apple 0003:05AC:027A.000D: probe with driver apple failed with error -22 [ 154.309417][ T8] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 154.466957][ T58] usb 2-1: USB disconnect, device number 27 [ 154.479524][ T8] usb 7-1: Using ep0 maxpacket: 16 [ 154.496198][ T8] usb 7-1: config 1 has an invalid descriptor of length 168, skipping remainder of the config [ 154.516491][ T8] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 154.528598][ T8] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 154.540981][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.550563][ T8] usb 7-1: Product: syz [ 154.554761][ T8] usb 7-1: Manufacturer: syz [ 154.559584][ T8] usb 7-1: SerialNumber: syz [ 154.739372][ T5935] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 154.782222][ T8] usb 7-1: 0:2 : does not exist [ 154.793542][ T8] usb 7-1: USB disconnect, device number 7 [ 154.899459][ T5935] usb 8-1: Using ep0 maxpacket: 16 [ 154.908937][ T5935] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 154.917584][ T5935] usb 8-1: config 0 has no interface number 0 [ 154.924096][ T5935] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 154.935451][ T5935] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 154.946837][ T5935] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 154.956094][ T5935] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 154.964256][ T5935] usb 8-1: Product: syz [ 154.968416][ T5935] usb 8-1: SerialNumber: syz [ 154.977109][ T5935] usb 8-1: config 0 descriptor?? [ 154.992480][ T5935] usbhid 8-1:0.8: couldn't find an input interrupt endpoint [ 155.004597][ T6527] udevd[6527]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 155.194575][ T5935] usb 8-1: USB disconnect, device number 4 [ 155.449327][ T58] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 155.620847][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.634313][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.647968][ T58] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 155.657367][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.680037][ T58] usb 2-1: config 0 descriptor?? [ 155.869458][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 178.921491][ C0] hrtimer: interrupt took 22966175125 ns [ 179.293367][ T58] usbhid 2-1:0.0: can't add hid device: -71 [ 179.299700][ T58] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 179.615617][ T58] usb 2-1: USB disconnect, device number 28 [ 283.969160][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 283.976267][ C1] rcu: 0-...!: (1 ticks this GP) idle=66f4/1/0x4000000000000000 softirq=24899/24899 fqs=0 [ 283.987457][ C1] rcu: (detected by 1, t=10502 jiffies, g=21461, q=1053 ncpus=2) [ 283.995310][ C1] Sending NMI from CPU 1 to CPUs 0: [ 283.995361][ C0] NMI backtrace for cpu 0 [ 283.995382][ C0] CPU: 0 UID: 0 PID: 7735 Comm: syz-executor Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 283.995402][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 283.995419][ C0] RIP: 0010:kasan_check_range+0x79/0x290 [ 283.995453][ C0] Code: 4d 89 c1 49 c1 e9 03 49 be 01 00 00 00 00 fc ff df 4f 8d 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 <4c> 89 cd 48 f7 d5 48 01 dd 41 80 3b 00 0f 85 c9 01 00 00 49 ff c3 [ 283.995467][ C0] RSP: 0018:ffffc90000007900 EFLAGS: 00000002 [ 283.995484][ C0] RAX: 0000000000000001 RBX: 1ffffffff2863f11 RCX: ffffffff817125f2 [ 283.995496][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff9431f888 [ 283.995508][ C0] RBP: 0000000000000001 R08: ffffffff9431f88f R09: 1ffffffff2863f11 [ 283.995519][ C0] R10: dffffc0000000000 R11: fffffbfff2863f11 R12: 0000000000000000 [ 283.995531][ C0] R13: ffff88807a836500 R14: dffffc0000000001 R15: fffffbfff2863f12 [ 283.995544][ C0] FS: 0000555592bdb500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 283.995559][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 283.995571][ C0] CR2: 00007f2301736038 CR3: 00000000275c4000 CR4: 00000000003526f0 [ 283.995585][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 283.995595][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 283.995606][ C0] Call Trace: [ 283.995613][ C0] [ 283.995629][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 283.995656][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 283.995675][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 283.995704][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 283.995727][ C0] ? nmi_handle+0x14f/0x5a0 [ 283.995745][ C0] ? nmi_handle+0x2a/0x5a0 [ 283.995762][ C0] ? kasan_check_range+0x79/0x290 [ 283.995781][ C0] ? default_do_nmi+0x63/0x160 [ 283.995797][ C0] ? exc_nmi+0x123/0x1f0 [ 283.995812][ C0] ? end_repeat_nmi+0xf/0x53 [ 283.995830][ C0] ? __lock_acquire+0x8a2/0x2100 [ 283.995846][ C0] ? kasan_check_range+0x79/0x290 [ 283.995866][ C0] ? kasan_check_range+0x79/0x290 [ 283.995886][ C0] ? kasan_check_range+0x79/0x290 [ 283.995905][ C0] [ 283.995911][ C0] [ 283.995918][ C0] __lock_acquire+0x8a2/0x2100 [ 283.995940][ C0] lock_acquire+0x1ed/0x550 [ 283.995956][ C0] ? debug_object_deactivate+0x158/0x390 [ 283.995980][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 283.995999][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 283.996024][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 283.996046][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 283.996066][ C0] ? debug_object_deactivate+0x158/0x390 [ 283.996086][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 283.996110][ C0] debug_object_deactivate+0x158/0x390 [ 283.996132][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 283.996154][ C0] ? timerqueue_add+0x260/0x290 [ 283.996176][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 283.996198][ C0] debug_deactivate+0x1b/0x220 [ 283.996220][ C0] __hrtimer_run_queues+0x305/0xd50 [ 283.996247][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 283.996269][ C0] ? rcu_is_watching+0x15/0xb0 [ 283.996291][ C0] hrtimer_interrupt+0x403/0xa40 [ 283.996319][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 283.996338][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 283.996359][ C0] [ 283.996364][ C0] [ 283.996369][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 283.996395][ C0] RIP: 0010:__zone_watermark_ok+0x34b/0x400 [ 283.996412][ C0] Code: a3 8e e8 f8 05 07 03 48 b9 00 00 00 00 00 fc ff df 48 8b 14 24 e9 81 fe ff ff 31 c0 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d cc cc cc cc b0 01 eb e9 f6 c3 20 75 0c 48 b9 00 00 00 00 00 fc [ 283.996425][ C0] RSP: 0018:ffffc90003f7f800 EFLAGS: 00000282 [ 283.996440][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: dffffc0000000000 [ 283.996451][ C0] RDX: ffff88813fffc3c0 RSI: 0000000000000008 RDI: ffff88813fffca90 [ 283.996463][ C0] RBP: ffff88813fffc408 R08: ffff88813fffca97 R09: 1ffff11027fff952 [ 283.996475][ C0] R10: dffffc0000000000 R11: ffffed1027fff953 R12: ffff88813fffc3c0 [ 283.996488][ C0] R13: 0000000000000000 R14: 0000000000000901 R15: 0000000000000002 [ 283.996504][ C0] zone_watermark_fast+0x170/0x240 [ 283.996522][ C0] get_page_from_freelist+0x519/0x3790 [ 283.996547][ C0] ? __pfx___might_resched+0x10/0x10 [ 283.996571][ C0] ? alloc_pages_bulk_noprof+0x70b/0xcc0 [ 283.996595][ C0] __alloc_pages_noprof+0x292/0x710 [ 283.996614][ C0] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 283.996644][ C0] alloc_pages_mpol_noprof+0x3e8/0x680 [ 283.996667][ C0] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 283.996687][ C0] ? kcov_ioctl+0x56/0x640 [ 283.996703][ C0] ? __get_vm_area_node+0x1c8/0x2d0 [ 283.996726][ C0] ? __get_vm_area_node+0x25c/0x2d0 [ 283.996749][ C0] ? alloc_pages_noprof+0xef/0x170 [ 283.996770][ C0] __vmalloc_node_range_noprof+0x9c9/0x1380 [ 283.996804][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 283.996833][ C0] vmalloc_user_noprof+0x74/0x80 [ 283.996848][ C0] ? kcov_ioctl+0x56/0x640 [ 283.996863][ C0] kcov_ioctl+0x56/0x640 [ 283.996879][ C0] ? __pfx_kcov_ioctl+0x10/0x10 [ 283.996896][ C0] __se_sys_ioctl+0xf5/0x170 [ 283.996915][ C0] do_syscall_64+0xf3/0x230 [ 283.996935][ C0] ? clear_bhb_loop+0x35/0x90 [ 283.996951][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.996975][ C0] RIP: 0033:0x7f230157e41b [ 283.996994][ C0] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 283.997007][ C0] RSP: 002b:00007fff22215620 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 283.997023][ C0] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f230157e41b [ 283.997035][ C0] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000d9 [ 283.997046][ C0] RBP: 00007f2301736118 R08: 00000000000000d8 R09: 0000000000000000 [ 283.997057][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.997067][ C0] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 283.997083][ C0] [ 283.997347][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g21461 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 284.609929][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=8397 [ 284.617742][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g21461 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 284.629120][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 284.639098][ C1] rcu: RCU grace-period kthread stack dump: [ 284.644994][ C1] task:rcu_preempt state:I stack:26072 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 284.655204][ C1] Call Trace: [ 284.658495][ C1] [ 284.661443][ C1] __schedule+0x1850/0x4c30 [ 284.665993][ C1] ? __pfx___schedule+0x10/0x10 [ 284.670866][ C1] ? __pfx_lock_release+0x10/0x10 [ 284.675919][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 284.682264][ C1] ? schedule+0x90/0x320 [ 284.686531][ C1] schedule+0x14b/0x320 [ 284.690707][ C1] schedule_timeout+0x15a/0x290 [ 284.695575][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 284.700966][ C1] ? __pfx_process_timeout+0x10/0x10 [ 284.706277][ C1] ? prepare_to_swait_event+0x330/0x350 [ 284.711856][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 284.716724][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 284.721944][ C1] ? rcu_gp_init+0x1256/0x1630 [ 284.726729][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 284.731680][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 284.737591][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 284.742891][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 284.748807][ C1] ? finish_swait+0xd4/0x1e0 [ 284.753410][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 284.758023][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 284.763233][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 284.769151][ C1] ? __kthread_parkme+0x169/0x1d0 [ 284.774199][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 284.779432][ C1] kthread+0x2f0/0x390 [ 284.783541][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 284.788781][ C1] ? __pfx_kthread+0x10/0x10 [ 284.793394][ C1] ret_from_fork+0x4b/0x80 [ 284.797821][ C1] ? __pfx_kthread+0x10/0x10 [ 284.802429][ C1] ret_from_fork_asm+0x1a/0x30 [ 284.807232][ C1]