last executing test programs: 17m48.273665896s ago: executing program 3 (id=5991): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)={0x30, r3, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x38}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) 17m47.050244316s ago: executing program 3 (id=5998): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000fc0)=ANY=[@ANYBLOB], 0x414}, 0x1, 0x0, 0x0, 0x44}, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x7c, 0x4) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)}], 0x2}, 0x0) 17m46.315139146s ago: executing program 3 (id=6005): r0 = io_uring_setup(0x4a86, &(0x7f0000000a00)={0x0, 0xac00, 0x40, 0x8001002, 0x112}) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000001100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x17f) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 17m43.746039063s ago: executing program 3 (id=6018): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000dfdbdf254400000008000300", @ANYRES32, @ANYBLOB="05002400b00000000a0018"], 0x38}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) 17m42.798242202s ago: executing program 3 (id=6025): socket$key(0xf, 0x3, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 17m42.238054275s ago: executing program 3 (id=6032): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, 0x0) unshare(0x6020400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000000c000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, 0x0) 17m27.073878999s ago: executing program 32 (id=6032): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, 0x0) unshare(0x6020400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000000c000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, 0x0) 5.966525059s ago: executing program 2 (id=12934): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x218}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x16, 0x301, 0x70bd24, 0xfffffffc, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000080025bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="100000008204042d2f3d5ba9c3759e006272696467650000090002800500160000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xfc, 0x16, 0x633, 0x0, 0x80000000, {{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2}, 0x6, 0x2, 0xa, 0x4, 0x18, 0x19}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xfc}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) syz_open_dev$vcsu(&(0x7f00000001c0), 0x8, 0x200d40) ioctl$TUNGETVNETLE(r6, 0xc008744c, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)) 5.582527334s ago: executing program 2 (id=12939): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) io_uring_setup(0x1b7b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x5) 4.97753938s ago: executing program 5 (id=12942): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000c80)='./file0\x00') read$FUSE(r0, &(0x7f0000004e80)={0x2020, 0x0, 0x0}, 0x2020) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) write$FUSE_GETXATTR(r0, &(0x7f0000000040)={0x18, 0x0, r1, {0x7}}, 0x18) syz_fuse_handle_req(r0, &(0x7f0000002dc0)="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", 0x2000, &(0x7f0000004dc0)={&(0x7f00000002c0)={0x8, 0xffffffffffffff8c, 0x0, {0x7, 0x2d, 0x0, 0x6438207, 0x0, 0xffff, 0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.903349736s ago: executing program 4 (id=12944): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f00000003c0)={0x2, 0x5, 0x5, 0xc6}) r3 = gettid() rt_sigqueueinfo(r3, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) ptrace$setregset(0x4205, r3, 0x202, &(0x7f0000000200)={&(0x7f0000000100)="10fd951f354f7b731dc92bb69be6bf9b4e99f982459b8b2b2662a4def335342f5665a7b28041a33a60b94cd921cc6190316c38f6ab6eed0918cd13738545", 0x3e}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r0, 0x7, 0x0, 0x30, 0x0, @in6={0x1b, 0x4e23, 0x0, @empty, 0x3}, @ib={0x1b, 0x2, 0x8000000, {"7d900600080000000900"}, 0x0, 0x0, 0x6}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000180)={0x13, 0x10, 0xfa00, {&(0x7f00000006c0), r0}}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_NAN(r4, 0x0, 0x4004009) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4001, 0x0, 0xf2b}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000005600230d000000000000000007"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r5}, 0x8) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d010300010009210500000122050009058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000207d1e2e2c0000000000010902240001000000000904005a47fefb45e554159d600000030100000021000000012200000905810300000000005eb94b96e59eba995059c2526415b5f3fdf29e5d5f1cf34f1b9d228d14246e7db0e03749925d083a1e88ed1e796cafb189633a36c53fb5150a22ea6e874f9562b7afde100d5fb1763f147b9590709b27f2212e71a84fce5124e0283422c20656d2f1f8c90a820a090559a5a2df726b13b7cae2e45a0e82e412fb7ceadb717009903f3c8fa9efbf2c99aea54c7f144f96421a3788958296461b179314"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000003c0)={0x18, &(0x7f0000000400)=ANY=[@ANYBLOB="8c729b", @ANYRES8=r6], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = socket$kcm(0x2b, 0x1, 0x0) close(r7) r8 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x9, &(0x7f0000000040), 0x4) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000600)={'dvmrp0\x00'}) 4.787432583s ago: executing program 5 (id=12945): r0 = syz_io_uring_setup(0x7672, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x40, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x40, 0x0, @fd=r4, 0x0, 0x0, 0xb82b, 0x18, 0x0, {0x0, 0x0, r5}}) io_uring_enter(r0, 0x3, 0x6a4c, 0x67, 0x0, 0x0) 4.644766268s ago: executing program 5 (id=12946): socket$inet6(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48000000e8fe55a1180015000600142603600e120900210000000401a80016000a0001", 0x37}], 0x1}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x88400) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x206, 0x3601) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x2, 0x2}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000d00)="0581e54a4d49761759914aa48e3238565c277a53d15b85d0eb43668ac074dd5d94b7095a003052865c6e1927091627707aba49f20000", 0x36, 0x0}) r5 = socket$igmp(0x2, 0x3, 0x2) sendmmsg(r5, &(0x7f0000008200)=[{{&(0x7f00000008c0)=@l2tp={0x2, 0x0, @empty}, 0x80, 0x0}}, {{&(0x7f0000000c80)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="10040000010000d91f83970a4fdac8c10300000b00000000b8ac72a007"], 0x10}}], 0x2, 0x844) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f00000001c0)={r4, 0x41, &(0x7f0000000140)=""/65}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r3}, &(0x7f0000000c00), &(0x7f0000000c40)}, 0x1c) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d40)=ANY=[@ANYBLOB="69f590d00de6e93db214fd59bce4bd715fda7cfd4583c2a771a87155bdaad18eb5285727bf0e6953eb8505276cb96daa7a919a0dcc8c83c7a46247", @ANYRES16=r7, @ANYBLOB="1709001000000000000001000000050007000000000008000c000100000008000a0000000000060002000000000014001f000000000000000000000000000000000014002000fe800000000000000000000000000039"], 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r3}, 0x8) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r9, 0x1e, &(0x7f0000000280)={r3}, 0x1) sendfile(r3, r3, 0x0, 0xe) 4.624434937s ago: executing program 2 (id=12947): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x55ce29afe10411a5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x74, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x6}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4.558312914s ago: executing program 0 (id=12948): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x10, 0xfffff00c}, {0x6, 0x0, 0x0, 0xfffffffd}]}, 0x8) r3 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r4 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x40) ioctl$MON_IOCX_MFETCH(r4, 0xc00c9207, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0], 0x2, 0x862}) r5 = socket$inet6(0x2d, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x8080, &(0x7f0000000100)={0x2d, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}, 0x1c) r6 = openat$sndtimer(0xffffff9c, &(0x7f0000000040), 0x400) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000400)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000140)={0x1, 0x0, [{0xb55cbc099b415d1, 0x34, &(0x7f00000003c0)=""/52}]}) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af04, &(0x7f0000000200)) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000000)=0x2) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r8, 0x58, &(0x7f0000000180)}, 0x7) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r3, 0x8000}, {r4, 0x1029}, {r5}, {r6, 0x400}, {r7, 0x40}, {r8, 0x6}, {r9, 0x100}], 0x7, &(0x7f0000000140)={r10, r11+10000000}, &(0x7f0000000180)={[0x80000000, 0x10]}, 0x8) r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r12) ptrace(0x10, r12) ptrace$PTRACE_GETSIGMASK(0x420a, r12, 0x0, 0x0) r13 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r13, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r13, 0x0, &(0x7f0000000940)={0x34, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg(r1, &(0x7f0000004f00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000780)="55737a5026e1", 0x7355}], 0x1}}, {{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000001040)="150ad7aa45", 0x5}, {&(0x7f0000001140)="ba3dbe6b10bba8f3cce911189025b76de4c2afe2bb22d2c4a1736760f355a61e52b917fdd0c9dcb4b65444cb21117be557c56502ed133d0b2348d3f04ac2fde19eaa41809ee1c6e260988263fabf23ea74b881a44f93e8ff7be69bfab1da7bfabde8dab9ed5d04a3373efb99f3d63c34902f4d438d2970327102df7370c11865b814fd2576996728aa3585bbaf422fe6a18496b63eaebcca0695da27b9cf3ed8c9df79604b", 0xa5}, {&(0x7f0000001200)="3d0584c4d18edb5a65347d06f923f16368c43f7d8f769516f79cafa99be4f0f13bcb0e88eb0ee70e5714084a8506f757b6bb6ecc1d6b28a9acf56ac97a864ec25cff669f831e6429bde59db0e04a5d79f3c1a58dd6c5156ca1d719300037db070dd086aa75447f0f2dfa4747da141e315d041c79f102e1d018a733d1767da3c2c983a507909e79a4bf090db0eb901f47438d788520d456a8fa66971018849047d274addbc1997ad2927b798ca739ea8a1707aa3c2e64e6e649ec98e720180f8e0eb28161456118de3af35f25a55701a4ea8e918ced8106ae0fc2d56c3be9fe853d48ad2531bfb2c85005b04b22d366", 0xef}, {&(0x7f0000001300)="acdb72561f1becfe7f2090aedee566d32483273b31f3b302e6a19ec82ee20feb8819030456eac34a93045aeedf15143ab303e0d9cd909b5a7d04bc2ee7ecc908785a86e3d117745d44f1be788b4bb9e9cb0d1ee3162451df4b2685986d93e68ed9e21b23d6e1c80e3ee43caa95f050f43d6147405e81c23c9e2e8720b24a76a64d911a48b8", 0x85}, {&(0x7f0000000200)="51d33eb0", 0x4}, {&(0x7f00000013c0)="9ce3bed5c80f63f11744944ad8e63ae137f6798fef6b8fe78f1f4fd9df852d2b299dc650e811aebc9829b05e7911002831abfdc5553f350f51e78a474f2cb673291f3b61e6d2caa8f8cf540af2dcb101751375b6ec806b9752f02fef820bb8f92f5ab39e68675e7374c4c27f79f421cd1039f7e72ea1517291854f2ce8b6c6ff6de8a79a954193d36ea3cfb378ae59cb01ced55ea336ef", 0x97}, {&(0x7f0000001480)="d3ffa36b65210b847bf04038e619108d202dca205017f3ae23c5f83f86a59880f49d245792224fc3289cb6ca739b0b14839f7a4291e0931184dd5dbbdf04cb4096db5f87aa996a53aa71f67e3b16451438072d0efdb58f71cdd7dd56551e71e639137811ed16852e39a001571077344fd7da35070d8a0569002afd71bc595ce0bf1b989b423947d67998f4192874853f0099365979eed1b7748b6655b386d6c829e83a811fd0afdb204145646c2f5799c19e66818abb8fa2113d43b7", 0xbc}, {&(0x7f0000001540)="c946d1adb5a534a67da31330903f74a503dcc00ec94e4671b47b87f41162c40a85dc470fc0c7967bebfa90620134ccec1d2c881672cdcdaaa9160c817b8a806c56c3e7c306bc0b4d631337768171e23bb3622a004855f4b39871fdf7ee47a8ef7dc90a2c4f5e99c418dfe277c08f8b55e4a2c8048b4117ce2a367ebcd1b7711b2ba4317d5fa965051739c00e516fe2ea6cdf5e09429795218456afc7e04185a9496e26e7422238689352a6a56ef2b09b76a268fa64dbf58fdfb41c7119cc6ebc260d4f6581c1f7561388e44022c39ba4826657892c82d1122af19d6ed5e137b36a7cab2e27a96d2c32ffb4eae817ef2405504a9a85f8c51e40f569faa89071812bd771f63618269e4e77d94ca7a802b671141fb8e896dc2a200c937ebf77ce94f4dcbc463bf478e437056498a3cefaeebbe3565810e9f84178b14fcf971086b376657cb5cce6f7ede50bfdde4c248250c060b6c37507311fc21a00b8e219c3d36ba2e436b841854f6636da655562bc6db1fc42fe4e1d6ed2bcff0e84c8332010a5108b7ecb8aaf0076c4ccc050a52514eadf1de0d62baa34da75dcf6fd2dfc9ebd6b82ca6f64a31a9d7596e7adfa5213c9773846375a15e78b594ae52b138b309014c7bf8d862ab9b77b6be7e4b4d7833fc58892f7615509dbf0e6a020268fdc3a5dc5df33c5ec24bd9be81baaec274beb71a9b92cdc39dff90adc0b3f0689d65e18c85c889b7df357e1f7c00a20c4c058050d7904c11e909f78754b090004e2768dadbafb21ddb3a4b800aca734fd0e948e1315bf2ac63058c36bba4c29a5c317a31ed777e198d461b9f6b43cc7671f7415ccfd40887599ff224eb4c8be014c96920d6b69a9adaec3d54a90f756bec7af2bb1ad85feb339caee2becc71a6d414af80c03c6e4985acd4d620fb8941f3e3d2d27fd4c993459178246474ad0117bd8d1a2239ce2780e4812ec5e67e068af00e76ccb2064173b8b9a6c842f56e9cfddd3a388a4d11e2ec76ed00b75b7686fd258185201a55555ef36383c9e56cf03277143e83b5d676c429bff370f0210fbbb99670877c9e7717a6c62c85d309570ba1159ecdb6544cd31a0af4afdefa2ff78c6132d387d2a5ca87352108c79dceacea86a8e3afc17311884b9970fa4a48748ce16d93ccd3408a54227d68edee7678a3fbd3bbf2d57f82f0cad54d13b4dab14623ea3cf3dffd9c9cbb49f44ad4893f7e60b02156727c411d96ff65dcb757261b54af60146d4cdbb56540a08c6ebb3a46b71eda2fde2eb3e2f87cebac2082825a0511dedbf25100c1d1cf91f3f4895a4bae3f4e443871a641460926ccd21d2db8e95182ace013a2848cace772bb3d352e51e240ca5b37e726600c2e6ebc49bcc20d2f1a513a3db2ed5f2993e96c70d7f5dd7e4ddb0a5cc19bbf688e2c36bb9e244511a13e69141e21e92fd640ba1cd673e64d76c1ae384e6115410c3b0435fe7f3589046f14dd0267c86da5e882033133f85a1b46237e1d8135a37c464fc1bb0563b62f08f05f222fe24d9bd9e81dfe40eae4a9f29f1f2a38d5ed2c2b52ad3d934f8ea18f90c51020c17ed5b5a11acc4ddbec63e4d3156bac18bbebf086ea198055f10c434f7c73d862478f661aeebff0e704617dff97986bb03fb3e05d57f41b8813117682e3aaeaae9d3f7608620cc4378c9ff859387ca03d159c1875ebdaa70b7237c5add863db3c929516d19b764e9f9ffc1d87dc51072d8c12535f363ff0392a323c0de7e6c9d52c7dc542d0e94d82399d63e6d712890e4ab2d5dd4053ba65b237e1209bd4e60034059f33e438b8568edfd8cf4d954ce7cf9ddcdbba2b5d409843b84566f1f53958467ad7f21338a7cfd61651f143ff687fb91c7f7f38b2c92864609b827181150f88d9467238cf43f76bf57fb478e223534dccd9a3c794c172513869b6c5f0656bb025825e5e53220d44f5dc63ef1b25714ddfe5a8a72d80af64368a9d9ca0cd118389cf33d4a0394990cdc650f4bf61d341d9be9f7ba16e8ad134ce79fbbad9291d9266c5fbffff3405e6f615e475cfeba0f450b9a820ae64806fe5e5d527ea21507091b56a3b673cd8aa31eef5fada926f4c6e07a6dafdffb4596a6381b647de18811e897ce71f035a006ab1dadf36b0d8ae47c53afe6f61058fc4f798e448a04ea76f278bf1f9b3f67052c6ed1aff2700d7ac51ad2219d92bcffc71c211e9df32591a10d87d3f91629ef02c8d61f157c702b484b41067c221105404de9328fc59159d5775162117037ebd6d1e30e9932bcf84e4968de0f525d5099de66201f9a407d9b027add248440f70a817db4171a6b46b70dd83ec267c59c2dedba778cb59dfd316ecaf879be597b4a82ed2544967c34b7a4938565842911ce880d70d0dbd29e7ace06686087d7043f8b2d1980544704fa4694b8e90c3a6bc0646a5f49591520f1cf7741d025953755191ede3d621e75abb35b03c63701816a5b758426a088a2b2e089def5f7da3f0f2cf41e5fbbe65d902a4f50a2089ecf4159c796c7636d1004489628aff596ec83197c609e4b8c49339de97642179a448c6a229bd943dd27322a03cc215e6b3ac4d78ffae0c32918f4a0111a761cd6086d6f6629e7f1d09e3add24649f53607f7668decdddbd23665e111eac868f8241a82431e64ff326fa3cdaced0cb0cdf512aedace31afc67fb2050d68461600897672ad513397ec7eb67eb98553b24cde4b16ce441731e7d94f1bd9b5c7fbfc811a262933e1ed22ae3584499d2fc25dc25595daa42a4aca86ddbf31a1d8d730d72719e9284d582ad6de9df78b58c396900a9b116c273265870ab64a78237148e3f112026eff675fe12b2f5b6ef9dd3136790b55293b8443b719a6cf6718c0844c2dfcbda86b039e253bd502943910177ff2d88b6c551d6a878aa86537d70b6f4f549d6981f75a554a79fd7545c44cdbbb833ec17ccc1cd0abea2a0d9e3c767f51172df3c0cdb68d412afc312014f172381251a63d13671d54df1e9c31b75f84faff905ad68d2c83415df1d30b9eced95afaf7ad424565d6eec150efb6b63880ba66e4c0b4ad73f8e0909a724cf9a8b4f0b5f3e49ea8fa9aa1037a8f115774c2a0e329a9f74070577520c421facccb6ab9ee385712d71dacb792dc122a82559767603c07dc9dde42a436f56d13fa1ce6b18f4ef53a99e41c9657ac21d3b1d51d697ee6429a378112489df755d2041918fd8c1ff456a8673a9b6b7467b1c74c6e5e2f09e25226e8be3b63fa0d456f8630d834d0ce55adbf73ddc9a52081350cb6c376398e7ff1f67f79a4822c723a205ee490e67b4d582941b005afbda1b94464f2514a9703d6c4a70bc9e2b7ecfdaa1a6053d67fd9cc8c2c6653cff13b40aede664dbedb12a34a481da96871173100ce4d3c976654cb35e1167b3c89473d087312119d215ad683484a01619da1ccacec2cf7efe46ec0d005883a91ac29aec7194bc7bc66731db6047e4ed5c0d9068d8cba17710687c322a6cd6632aefa63c4ff754c3156cc02097d50753fb91eeb405aba064b0a497c645e04b9445db339faa65d342c9028c28652c305012175960ea368704d2a59dc1f5a615467ad2dce00aa3313b553e643cb15702fb5019774151ec3f3f9ae0cacf17f8beaa5abd62ca06d67f22df90badd886427bc1207954db9cc16e9795a5b2677d7a2feefa4ff37314400693457ab4b81a6cef511ea77eea8addfdb663d2981a8bc0a29949c0ad81f6385d018eeaed5aa1684b56643a4b681ed13ed92b20201dd1d2c61e905822a04012da96195dbf10806b13e0725d9408c3f650d319ed77b72f22740f0fca283bfdf35afba0b2254e1120846bc1c11b20ff2bad7de979ea2b1ad38ceb0778389b787c5a625783a4566404bf493e3db93d1ffa7cf9839c31e8f83eb164e67f577c0ab1aed70fa7bd7554ee9f2b81575beeeb6c5118cb49235d27664d941278fa68af96921a346ada23947b25766279f938ba986b7ad83af3e072a84c31ef83fd1b8c7efffbd64beaef95a67157b995f30361ecb6e75892efba6eddee9da4d24e62351ba7a131dd26c4b01b6185b10e591c60a0600af9ede1ef5375d15702d5e3ed38b9d7e0189acb4645ffbabfeeb956ee5a2b192b573c9a51387b0d6be7a937023b950abd491d269f877654e290ca887184e0f955e3717700d0860ac1922ba1f8fb1540e7d6f0b22eb2f9152bfbfd7442ac41d9cad56d3e51b474f075a7026ff9873cea78809cc43248c43c0e024878f6d8a513b0c712c9957cdf4148906b462c5f2187ae545a1f7a32f9a04f16b31c4398f2918335c077c2fd8f804b45301e753ab318b78be90f27db763c0e7d29067722b70798a2078d80f10aadc460c63ee8be06c9b236ea447140f7d80540dad447d582b9fa3552b038e44eeadf0ae390a960961957001b19428d73ef00033ae0f1daa568c20b0dec713604731ea38f0ef34f8465c3e13db8f76f733ae2fe86fb02a13cb385ecb58c3ac2309566860b59b4464c49022705052093a44c3dd53c74d3c39a3ca0630b84a419a7655f32843d9cc19b844ed09829817dcfd7297911163cd6f8dbb4ba6f0b4def65825efc997f6a8b095368b5b2c7efb9ffcb64bff26a8ecac61605a8a0aaa6050ed2dc6624e8c919b34b2d0e863349f080cfc3a624740a22a004a19bdc014eaca708a0093eff1a36f3ee42456b1e98f371fb420c60511da0d821023166042a0b68614386a5b47ef37d295f2c565de195a043ec022a035ed32af04d5e78c33cbff25cce74a846df097459c9a1f2c81517837a7c3666d27c05b1aee490237840a8db07f1890da380886ccfad3ce53180fc5b8ae588acb7c99baaff3dfed52e2b9faba51a76fba27781a12889d1d7a521e143885f0c891ebba0fd23a19516cf63fe7231e11023aea9ff6b4b6e7d89d044bf7b3d265d9b90ae3d31968e2cc2877d074f16ea0f6cfe5ee6bed8f45f85b5513d9a1561184377d9959424ba954004006ac76bb30de6f49613d5835f22cf40221c69f16396eea67daa13192eae858713c00b5251ff481d7f2f7397db924dfac437b1d2f49d8d819b6c10beb3bf73bcc30de3f792446c69d85a8b50b19ef5985cee4776638c0fac9d24072df071e5ebdac0d6f8d457485652806ad944a77de2f6265031737190ebefd19b079f8a19b5c59497cecfac44dc1d3f2e792acd9f5b43c6e4e9752a8f74c647900571a4ba66228baa2ffbbbc79565c0556d361843567f2377a0f5e54b33780a4bab6dec92009970dc1283329d327f41ba4433bcbe695cd7dd82452bf115795f583d567c6a0b06493299e0a55c9ee02292f577cbe5b9e6f0323215710a6faf8b9a44c5b9dbb07791c300ab6c6207ce15eea65bcf9a6097a4a6f530ef72cab8305085e66ab77359d981b933f7d48b78093e51e9c6c816f4d3a724cb630584e4780b38524aad8bda39ba10cf8e1ce80ca4cf897476876366c2d958b794beeb24ae6090f952399bad6bb113dc9864c8c6407f343c76b52fec5b809a9ef8db528902851c6510a8bc9fad2ef04ab270bb22d3cfed4cfa98b2b9479fd9cb3ffd627ce55020aa90d1c956bc2828602aef0e684360ff21c802abfbd2df862215bf266890b0a2bbaeeb7006617036259e3c2a3cfc64054d60a4a7181ceb4848ea15094", 0xfa3}], 0x8}}], 0x2, 0x40c0) r14 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2d) ioctl$KVM_CHECK_EXTENSION_VM(r14, 0xae03, 0x42) 4.429764424s ago: executing program 2 (id=12949): r0 = socket(0x2b, 0x1, 0x1) close(0x4) r1 = syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) unshare(0x40080) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000040)={0x6, 0x0, r1}) syz_io_uring_setup(0x38fa, &(0x7f0000000200)={0x0, 0x9943, 0x800, 0x0, 0x359, 0x0, r3}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="2400000001040102000001800000000000000000080005400000000005000100"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) close_range(r2, r2, 0x0) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, 0x0, 0x0) 4.037869056s ago: executing program 5 (id=12951): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x10}, 0x18, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2002) ioctl$BLKBSZSET(r4, 0x40041271, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x23635de98487b93e) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x42002, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000c91000/0x2000)=nil, 0x2000, 0x16) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r7, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) syz_open_dev$media(&(0x7f0000000040), 0x5, 0x141800) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000180081064e80f782db44b9040a1d080000000000000055a10a0015400100142603600e1208009e00000004010400160040000540fec00000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef409fd2ee0125b91643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d28a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3060000000000000081ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b4337812398", 0xd8}], 0x1}, 0x0) landlock_restrict_self(r0, 0x0) socket$unix(0x1, 0x1, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000003000)=@file={0x1}, 0x6e) 3.801266897s ago: executing program 2 (id=12953): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x200}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x94}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00010000c580000008001b000000"], 0x28}}, 0x0) sendmmsg(r4, 0x0, 0x0, 0x80) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 3.724043616s ago: executing program 1 (id=12954): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.649259087s ago: executing program 2 (id=12955): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100000000004043554d000000000000010902242801f20030000904f0ff040300060009058103"], 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540), 0x0, 0x0) r0 = socket(0x2, 0x3, 0xff) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'dvmrp1\x00', {0x2, 0x0, @dev}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x2d, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x14, 0x0, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}}, 0x14}, 0x1, 0xffff000000000000}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@fallback, 0xffffffffffffffff, 0x25, 0x6fa90b6f9f48949a}, 0x20) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000280)={0x20, 0x18, 0x28, "bcce2847ed49859f18aded9e9908d612e9fb24aca886f1b1e773f070ce471d938a98ac0ce9d9f9db"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0) preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) syz_usb_connect$uac3(0x1, 0x155, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x143, 0x3, 0x1, 0x0, 0x20, 0x7, {0x8, 0xb, 0x0, 0x0, 0x1, 0x0, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x55, 0x472}, [@output_terminal={0x13, 0x24, 0x3, 0x1, 0x402, 0x1, 0x2, 0x0, 0x8, 0x5, 0x9, 0x1}, @output_terminal={0x13, 0x24, 0x3, 0x3, 0x307, 0x5, 0x2, 0x8, 0xb080, 0x4, 0x8, 0x6}, @cluster_info_segment={0x6, 0x20, 0x3, 0x1}, @source_unit={0xc, 0x24, 0xb, 0x8, 0x0, 0x9ff, 0x24, 0xc6df}, @output_terminal={0x13, 0x24, 0x3, 0x2, 0x307, 0x2, 0x1, 0x5, 0x9, 0x9, 0x1, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0xf8, 0xd1, 0x5, 0x7c}, @as_header={0x17, 0x24, 0x1, 0x8, 0x8, 0x736, 0x1001, 0xfd, 0x6, 0x3ff}, @as_header={0x17, 0x24, 0x1, 0x0, 0xffffff83, 0x5, 0x6, 0x3, 0x1, 0x3, 0x9}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x3, 0x81, 0x1, "a05a", "6fd1"}, @as_header={0x17, 0x24, 0x1, 0x81, 0x1000, 0x4, 0x2, 0x1, 0x9, 0xf0b5, 0x4}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x45, 0x4, 0x3, 0x4, "5c8a396326"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x1, 0x3, 0x86, {0xa, 0x25, 0x25, 0x2, 0x7, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xd, 0x4, 0x8, 0x9f, "e768abcd"}, @as_header={0x17, 0x24, 0x1, 0xfa, 0x71d, 0xffff, 0x4, 0xd4, 0x3, 0x4, 0x48}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x8, 0x5, 0x9, {0xa, 0x25, 0x25, 0x5, 0x0, 0x9b}}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0xf8, 0x4, 0x6, 0x0, 0x23}, 0x5c, &(0x7f0000000280)={0x5, 0xf, 0x5c, 0x4, [@generic={0x35, 0x10, 0x1, "5a647fe39ebf6779bb059ba0f97d205809f7788e60fad990bbdb43325e77f9dd0a4be71a174abb2547252d246cbad520ceda"}, @ssp_cap={0x14, 0x10, 0xa, 0x81, 0x2, 0x3, 0x0, 0xe, [0xc00f, 0xc000]}, @generic={0x3, 0x10, 0x1}, @wireless={0xb, 0x10, 0x1, 0x2, 0x21, 0x4, 0x4, 0x75c}]}, 0x3, [{0x76, &(0x7f0000000040)=@string={0x76, 0x3, "eafcfa2343da8165d76784d9f280273ab9fe2babd20e4ecb5741b776a5d2e0a33cbcd95792a888213d4dcd9e9cb27805f420b838aa4c1dd228f42fd652b4534ffc7dd8eda5678f29fc396461733070cdf8e53cca9b9e058d9c6b2bbcbc023171fdd8f69159024699e92fb4d2432ee7dcdaf2630c"}}, {0x2f, &(0x7f0000000340)=ANY=[@ANYBLOB="2f031a7952d5c01b036953a76490566b819d00718adf9470"]}, {0x1e, &(0x7f0000000380)=@string={0x1e, 0x3, "5bf13acbddcfd866765e9033fd44159d0eeecd16a5b5c312e7eb87bd"}}]}) 3.583593665s ago: executing program 1 (id=12956): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan1\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x8000) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x3007, 0x409}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) 3.365279739s ago: executing program 1 (id=12957): r0 = syz_io_uring_setup(0x7672, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x40, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x40, 0x0, @fd=r4, 0x0, 0x0, 0xb82b, 0x18, 0x0, {0x0, 0x0, r5}}) io_uring_enter(r0, 0x3, 0x6a4c, 0x67, 0x0, 0x0) 3.286464773s ago: executing program 1 (id=12958): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x599c02, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002bbd7000fbdbdf25"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40001) r2 = add_key$user(0x0, &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x800, 0x0, 0x2, 0x1, 0x2a15, 0xd}, 0x20) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x69801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2c}}, @IFLA_GRE_TTL={0x5, 0x8, 0xfe}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r4, &(0x7f0000000080)='9', 0x1, 0x2404c085, &(0x7f0000000200)={0x11, 0xc, r6, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x14) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r3}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r8 = syz_io_uring_setup(0xf04, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0x3}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)={0x18, 0x10, 0xa, 0x201, 0x70bd28, 0x25dfdbfd, {0x2, 0x0, 0x8}, [@generic="b5"]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) r12 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x502, 0x0) ioctl$SNDCTL_DSP_SPEED(r12, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r12, 0xc0045005, &(0x7f0000000080)=0x10) ioctl$SNDCTL_DSP_SETFMT(r12, 0xc0045005, &(0x7f0000000100)=0x7) syz_io_uring_modify_offsets$generic(r9, r10, 0x2c, 0x10000) io_uring_enter(r8, 0x70db, 0x1, 0x1, 0x0, 0x0) 2.858518003s ago: executing program 4 (id=12959): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r3, 0x50200}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}}, 0x0) 2.593063728s ago: executing program 0 (id=12960): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.516587576s ago: executing program 4 (id=12961): socket$inet6(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48000000e8fe55a1180015000600142603600e120900210000000401a80016000a0001", 0x37}], 0x1}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x88400) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x206, 0x3601) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x2, 0x2}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000d00)="0581e54a4d49761759914aa48e3238565c277a53d15b85d0eb43668ac074dd5d94b7095a003052865c6e1927091627707aba49f20000", 0x36, 0x0}) r5 = socket$igmp(0x2, 0x3, 0x2) sendmmsg(r5, &(0x7f0000008200)=[{{&(0x7f00000008c0)=@l2tp={0x2, 0x0, @empty}, 0x80, 0x0}}, {{&(0x7f0000000c80)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="10040000010000d91f83970a4fdac8c10300000b00000000b8ac72a007"], 0x10}}], 0x2, 0x844) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f00000001c0)={r4, 0x41, &(0x7f0000000140)=""/65}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r3}, &(0x7f0000000c00), &(0x7f0000000c40)}, 0x1c) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d40)=ANY=[@ANYBLOB="69f590d00de6e93db214fd59bce4bd715fda7cfd4583c2a771a87155bdaad18eb5285727bf0e6953eb8505276cb96daa7a919a0dcc8c83c7a46247", @ANYRES16=r7, @ANYBLOB="1709001000000000000001000000050007000000000008000c000100000008000a0000000000060002000000000014001f000000000000000000000000000000000014002000fe800000000000000000000000000039"], 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r3}, 0x8) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r9, 0x1e, &(0x7f0000000280)={r3}, 0x1) sendfile(r3, r3, 0x0, 0xe) 2.244075383s ago: executing program 0 (id=12962): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e2200000600"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 2.157200873s ago: executing program 0 (id=12963): r0 = socket(0x2b, 0x1, 0x1) close(0x4) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) unshare(0x40080) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) syz_io_uring_setup(0x38fa, &(0x7f0000000200)={0x0, 0x9943, 0x800, 0x0, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="2400000001040102000001800000000000000000080005400000000005000100"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) close_range(r1, r1, 0x0) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, 0x0, 0x0) 1.961247191s ago: executing program 1 (id=12964): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan1\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x8000) 1.753595288s ago: executing program 4 (id=12965): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x10}, 0x18, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2002) ioctl$BLKBSZSET(r4, 0x40041271, 0x0) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x23635de98487b93e) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x18}}, 0x20000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x42002, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000c91000/0x2000)=nil, 0x2000, 0x16) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r7, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) syz_open_dev$media(&(0x7f0000000040), 0x5, 0x141800) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000180081064e80f782db44b9040a1d080000000000000055a10a0015400100142603600e1208009e00000004010400160040000540fec00000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef409fd2ee0125b91643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d28a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3060000000000000081ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b4337812398", 0xd8}], 0x1}, 0x0) landlock_restrict_self(r0, 0x0) socket$unix(0x1, 0x1, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000003000)=@file={0x1}, 0x6e) 1.532130811s ago: executing program 1 (id=12966): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x10}, 0x18, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2002) ioctl$BLKBSZSET(r4, 0x40041271, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x23635de98487b93e) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0, 0x18}}, 0x20000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x42002, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000c91000/0x2000)=nil, 0x2000, 0x16) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r7, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) syz_open_dev$media(&(0x7f0000000040), 0x5, 0x141800) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000180081064e80f782db44b9040a1d080000000000000055a10a0015400100142603600e1208009e00000004010400160040000540fec00000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef409fd2ee0125b91643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d28a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3060000000000000081ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b4337812398", 0xd8}], 0x1}, 0x0) landlock_restrict_self(r0, 0x0) socket$unix(0x1, 0x1, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000003000)=@file={0x1}, 0x6e) 1.510957879s ago: executing program 0 (id=12967): ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000040)={0x1, 0x0, [{0xe, 0xfffffff4, 0x3, 0x80000001, 0x10, 0xf6, 0xdf}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40500, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000140)={0x2, 0x0, [{0x7e, 0x0, 0x2200000003}, {0x8be, 0x0, 0x6}]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f00000001c0)={0x199e, 0x7ff}) write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file0'}, 0xb) landlock_create_ruleset(&(0x7f0000000100)={0x200, 0x3}, 0x18, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) sendmsg(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="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", 0xfd}, {&(0x7f00000004c0)="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", 0x4a2}], 0x2}, 0x4040) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, 0xb, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x401}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x7fffffff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x20000800) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="05000000000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x44, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x100}, @beacon=[@NL80211_ATTR_BEACON_TAIL={0x18, 0xf, [@link_id={0x65, 0x12, {@random="2574624e9bc6", @device_a, @device_b}}]}]]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x10}]}}}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xac}}, 0x20050800) r10 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r10, 0xc02c563a, &(0x7f00000001c0)={0x7}) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000300)) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r6, 0x4024587b, &(0x7f00000003c0)={{r10, &(0x7f0000000040)='@[}r/@/', 0x80, &(0x7f0000000080)={@align=0x3, {0x6c1e, 0x2, 0x0, 0x3}}, 0x7f1, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x8001}, 0x1, &(0x7f0000000380)=[{0x2, 0x6, &(0x7f0000000180)='\'))\x00', &(0x7f00000001c0)="36abeaa7914a93a9f9ab6aca43e7bb161d22310bdaeb8789b88bb3fd30b8c8a4cb5683765949e13063b5f886b8152fddf4a30a1cb17227d84f4baa53344edc3dbe61836831f1ab72e9ed485646bd96", 0x4f, 0x20}]}) 1.217791646s ago: executing program 5 (id=12968): r0 = syz_io_uring_setup(0x7672, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) syz_io_uring_setup(0x32d9, &(0x7f0000000200)={0x0, 0x6273, 0x8, 0xffffffff, 0x3de, 0x0, 0x0}, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x400000000010, 0x3, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init() socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) pipe(&(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r0, 0x3, 0x6a4c, 0x67, 0x0, 0x0) 1.072948878s ago: executing program 0 (id=12969): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f0000000880)=[{0x8, 0x10, 0x0, 0x0}, {0xa, 0x1011, 0x0, 0x0}], 0x2}) 966.810007ms ago: executing program 5 (id=12970): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x10, 0xfffff00c}, {0x6, 0x0, 0x0, 0xfffffffd}]}, 0x8) r3 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r4 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x40) ioctl$MON_IOCX_MFETCH(r4, 0xc00c9207, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0], 0x2, 0x862}) r5 = socket$inet6(0x2d, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x8080, &(0x7f0000000100)={0x2d, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}, 0x1c) r6 = openat$sndtimer(0xffffff9c, &(0x7f0000000040), 0x400) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000400)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000140)={0x1, 0x0, [{0xb55cbc099b415d1, 0x34, &(0x7f00000003c0)=""/52}]}) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af04, &(0x7f0000000200)) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000000)=0x2) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r8, 0x58, &(0x7f0000000180)}, 0x7) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r3, 0x8000}, {r4, 0x1029}, {r5}, {r6, 0x400}, {r7, 0x40}, {r8, 0x6}, {r9, 0x100}], 0x7, &(0x7f0000000140)={r10, r11+10000000}, &(0x7f0000000180)={[0x80000000, 0x10]}, 0x8) r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r12) ptrace(0x10, r12) ptrace$PTRACE_GETSIGMASK(0x420a, r12, 0x0, 0x0) r13 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r13, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r13, 0x0, &(0x7f0000000940)={0x34, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg(r1, &(0x7f0000004f00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000780)="55737a5026e1", 0x7355}], 0x1}}, {{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000001040)="150ad7aa45", 0x5}, {&(0x7f0000001140)="ba3dbe6b10bba8f3cce911189025b76de4c2afe2bb22d2c4a1736760f355a61e52b917fdd0c9dcb4b65444cb21117be557c56502ed133d0b2348d3f04ac2fde19eaa41809ee1c6e260988263fabf23ea74b881a44f93e8ff7be69bfab1da7bfabde8dab9ed5d04a3373efb99f3d63c34902f4d438d2970327102df7370c11865b814fd2576996728aa3585bbaf422fe6a18496b63eaebcca0695da27b9cf3ed8c9df79604b", 0xa5}, {&(0x7f0000001200)="3d0584c4d18edb5a65347d06f923f16368c43f7d8f769516f79cafa99be4f0f13bcb0e88eb0ee70e5714084a8506f757b6bb6ecc1d6b28a9acf56ac97a864ec25cff669f831e6429bde59db0e04a5d79f3c1a58dd6c5156ca1d719300037db070dd086aa75447f0f2dfa4747da141e315d041c79f102e1d018a733d1767da3c2c983a507909e79a4bf090db0eb901f47438d788520d456a8fa66971018849047d274addbc1997ad2927b798ca739ea8a1707aa3c2e64e6e649ec98e720180f8e0eb28161456118de3af35f25a55701a4ea8e918ced8106ae0fc2d56c3be9fe853d48ad2531bfb2c85005b04b22d366", 0xef}, {&(0x7f0000001300)="acdb72561f1becfe7f2090aedee566d32483273b31f3b302e6a19ec82ee20feb8819030456eac34a93045aeedf15143ab303e0d9cd909b5a7d04bc2ee7ecc908785a86e3d117745d44f1be788b4bb9e9cb0d1ee3162451df4b2685986d93e68ed9e21b23d6e1c80e3ee43caa95f050f43d6147405e81c23c9e2e8720b24a76a64d911a48b8", 0x85}, {&(0x7f0000000200)="51d33eb0", 0x4}, {&(0x7f00000013c0)="9ce3bed5c80f63f11744944ad8e63ae137f6798fef6b8fe78f1f4fd9df852d2b299dc650e811aebc9829b05e7911002831abfdc5553f350f51e78a474f2cb673291f3b61e6d2caa8f8cf540af2dcb101751375b6ec806b9752f02fef820bb8f92f5ab39e68675e7374c4c27f79f421cd1039f7e72ea1517291854f2ce8b6c6ff6de8a79a954193d36ea3cfb378ae59cb01ced55ea336ef", 0x97}, {&(0x7f0000001480)="d3ffa36b65210b847bf04038e619108d202dca205017f3ae23c5f83f86a59880f49d245792224fc3289cb6ca739b0b14839f7a4291e0931184dd5dbbdf04cb4096db5f87aa996a53aa71f67e3b16451438072d0efdb58f71cdd7dd56551e71e639137811ed16852e39a001571077344fd7da35070d8a0569002afd71bc595ce0bf1b989b423947d67998f4192874853f0099365979eed1b7748b6655b386d6c829e83a811fd0afdb204145646c2f5799c19e66818abb8fa2113d43b7", 0xbc}, {&(0x7f0000001540)="c946d1adb5a534a67da31330903f74a503dcc00ec94e4671b47b87f41162c40a85dc470fc0c7967bebfa90620134ccec1d2c881672cdcdaaa9160c817b8a806c56c3e7c306bc0b4d631337768171e23bb3622a004855f4b39871fdf7ee47a8ef7dc90a2c4f5e99c418dfe277c08f8b55e4a2c8048b4117ce2a367ebcd1b7711b2ba4317d5fa965051739c00e516fe2ea6cdf5e09429795218456afc7e04185a9496e26e7422238689352a6a56ef2b09b76a268fa64dbf58fdfb41c7119cc6ebc260d4f6581c1f7561388e44022c39ba4826657892c82d1122af19d6ed5e137b36a7cab2e27a96d2c32ffb4eae817ef2405504a9a85f8c51e40f569faa89071812bd771f63618269e4e77d94ca7a802b671141fb8e896dc2a200c937ebf77ce94f4dcbc463bf478e437056498a3cefaeebbe3565810e9f84178b14fcf971086b376657cb5cce6f7ede50bfdde4c248250c060b6c37507311fc21a00b8e219c3d36ba2e436b841854f6636da655562bc6db1fc42fe4e1d6ed2bcff0e84c8332010a5108b7ecb8aaf0076c4ccc050a52514eadf1de0d62baa34da75dcf6fd2dfc9ebd6b82ca6f64a31a9d7596e7adfa5213c9773846375a15e78b594ae52b138b309014c7bf8d862ab9b77b6be7e4b4d7833fc58892f7615509dbf0e6a020268fdc3a5dc5df33c5ec24bd9be81baaec274beb71a9b92cdc39dff90adc0b3f0689d65e18c85c889b7df357e1f7c00a20c4c058050d7904c11e909f78754b090004e2768dadbafb21ddb3a4b800aca734fd0e948e1315bf2ac63058c36bba4c29a5c317a31ed777e198d461b9f6b43cc7671f7415ccfd40887599ff224eb4c8be014c96920d6b69a9adaec3d54a90f756bec7af2bb1ad85feb339caee2becc71a6d414af80c03c6e4985acd4d620fb8941f3e3d2d27fd4c993459178246474ad0117bd8d1a2239ce2780e4812ec5e67e068af00e76ccb2064173b8b9a6c842f56e9cfddd3a388a4d11e2ec76ed00b75b7686fd258185201a55555ef36383c9e56cf03277143e83b5d676c429bff370f0210fbbb99670877c9e7717a6c62c85d309570ba1159ecdb6544cd31a0af4afdefa2ff78c6132d387d2a5ca87352108c79dceacea86a8e3afc17311884b9970fa4a48748ce16d93ccd3408a54227d68edee7678a3fbd3bbf2d57f82f0cad54d13b4dab14623ea3cf3dffd9c9cbb49f44ad4893f7e60b02156727c411d96ff65dcb757261b54af60146d4cdbb56540a08c6ebb3a46b71eda2fde2eb3e2f87cebac2082825a0511dedbf25100c1d1cf91f3f4895a4bae3f4e443871a641460926ccd21d2db8e95182ace013a2848cace772bb3d352e51e240ca5b37e726600c2e6ebc49bcc20d2f1a513a3db2ed5f2993e96c70d7f5dd7e4ddb0a5cc19bbf688e2c36bb9e244511a13e69141e21e92fd640ba1cd673e64d76c1ae384e6115410c3b0435fe7f3589046f14dd0267c86da5e882033133f85a1b46237e1d8135a37c464fc1bb0563b62f08f05f222fe24d9bd9e81dfe40eae4a9f29f1f2a38d5ed2c2b52ad3d934f8ea18f90c51020c17ed5b5a11acc4ddbec63e4d3156bac18bbebf086ea198055f10c434f7c73d862478f661aeebff0e704617dff97986bb03fb3e05d57f41b8813117682e3aaeaae9d3f7608620cc4378c9ff859387ca03d159c1875ebdaa70b7237c5add863db3c929516d19b764e9f9ffc1d87dc51072d8c12535f363ff0392a323c0de7e6c9d52c7dc542d0e94d82399d63e6d712890e4ab2d5dd4053ba65b237e1209bd4e60034059f33e438b8568edfd8cf4d954ce7cf9ddcdbba2b5d409843b84566f1f53958467ad7f21338a7cfd61651f143ff687fb91c7f7f38b2c92864609b827181150f88d9467238cf43f76bf57fb478e223534dccd9a3c794c172513869b6c5f0656bb025825e5e53220d44f5dc63ef1b25714ddfe5a8a72d80af64368a9d9ca0cd118389cf33d4a0394990cdc650f4bf61d341d9be9f7ba16e8ad134ce79fbbad9291d9266c5fbffff3405e6f615e475cfeba0f450b9a820ae64806fe5e5d527ea21507091b56a3b673cd8aa31eef5fada926f4c6e07a6dafdffb4596a6381b647de18811e897ce71f035a006ab1dadf36b0d8ae47c53afe6f61058fc4f798e448a04ea76f278bf1f9b3f67052c6ed1aff2700d7ac51ad2219d92bcffc71c211e9df32591a10d87d3f91629ef02c8d61f157c702b484b41067c221105404de9328fc59159d5775162117037ebd6d1e30e9932bcf84e4968de0f525d5099de66201f9a407d9b027add248440f70a817db4171a6b46b70dd83ec267c59c2dedba778cb59dfd316ecaf879be597b4a82ed2544967c34b7a4938565842911ce880d70d0dbd29e7ace06686087d7043f8b2d1980544704fa4694b8e90c3a6bc0646a5f49591520f1cf7741d025953755191ede3d621e75abb35b03c63701816a5b758426a088a2b2e089def5f7da3f0f2cf41e5fbbe65d902a4f50a2089ecf4159c796c7636d1004489628aff596ec83197c609e4b8c49339de97642179a448c6a229bd943dd27322a03cc215e6b3ac4d78ffae0c32918f4a0111a761cd6086d6f6629e7f1d09e3add24649f53607f7668decdddbd23665e111eac868f8241a82431e64ff326fa3cdaced0cb0cdf512aedace31afc67fb2050d68461600897672ad513397ec7eb67eb98553b24cde4b16ce441731e7d94f1bd9b5c7fbfc811a262933e1ed22ae3584499d2fc25dc25595daa42a4aca86ddbf31a1d8d730d72719e9284d582ad6de9df78b58c396900a9b116c273265870ab64a78237148e3f112026eff675fe12b2f5b6ef9dd3136790b55293b8443b719a6cf6718c0844c2dfcbda86b039e253bd502943910177ff2d88b6c551d6a878aa86537d70b6f4f549d6981f75a554a79fd7545c44cdbbb833ec17ccc1cd0abea2a0d9e3c767f51172df3c0cdb68d412afc312014f172381251a63d13671d54df1e9c31b75f84faff905ad68d2c83415df1d30b9eced95afaf7ad424565d6eec150efb6b63880ba66e4c0b4ad73f8e0909a724cf9a8b4f0b5f3e49ea8fa9aa1037a8f115774c2a0e329a9f74070577520c421facccb6ab9ee385712d71dacb792dc122a82559767603c07dc9dde42a436f56d13fa1ce6b18f4ef53a99e41c9657ac21d3b1d51d697ee6429a378112489df755d2041918fd8c1ff456a8673a9b6b7467b1c74c6e5e2f09e25226e8be3b63fa0d456f8630d834d0ce55adbf73ddc9a52081350cb6c376398e7ff1f67f79a4822c723a205ee490e67b4d582941b005afbda1b94464f2514a9703d6c4a70bc9e2b7ecfdaa1a6053d67fd9cc8c2c6653cff13b40aede664dbedb12a34a481da96871173100ce4d3c976654cb35e1167b3c89473d087312119d215ad683484a01619da1ccacec2cf7efe46ec0d005883a91ac29aec7194bc7bc66731db6047e4ed5c0d9068d8cba17710687c322a6cd6632aefa63c4ff754c3156cc02097d50753fb91eeb405aba064b0a497c645e04b9445db339faa65d342c9028c28652c305012175960ea368704d2a59dc1f5a615467ad2dce00aa3313b553e643cb15702fb5019774151ec3f3f9ae0cacf17f8beaa5abd62ca06d67f22df90badd886427bc1207954db9cc16e9795a5b2677d7a2feefa4ff37314400693457ab4b81a6cef511ea77eea8addfdb663d2981a8bc0a29949c0ad81f6385d018eeaed5aa1684b56643a4b681ed13ed92b20201dd1d2c61e905822a04012da96195dbf10806b13e0725d9408c3f650d319ed77b72f22740f0fca283bfdf35afba0b2254e1120846bc1c11b20ff2bad7de979ea2b1ad38ceb0778389b787c5a625783a4566404bf493e3db93d1ffa7cf9839c31e8f83eb164e67f577c0ab1aed70fa7bd7554ee9f2b81575beeeb6c5118cb49235d27664d941278fa68af96921a346ada23947b25766279f938ba986b7ad83af3e072a84c31ef83fd1b8c7efffbd64beaef95a67157b995f30361ecb6e75892efba6eddee9da4d24e62351ba7a131dd26c4b01b6185b10e591c60a0600af9ede1ef5375d15702d5e3ed38b9d7e0189acb4645ffbabfeeb956ee5a2b192b573c9a51387b0d6be7a937023b950abd491d269f877654e290ca887184e0f955e3717700d0860ac1922ba1f8fb1540e7d6f0b22eb2f9152bfbfd7442ac41d9cad56d3e51b474f075a7026ff9873cea78809cc43248c43c0e024878f6d8a513b0c712c9957cdf4148906b462c5f2187ae545a1f7a32f9a04f16b31c4398f2918335c077c2fd8f804b45301e753ab318b78be90f27db763c0e7d29067722b70798a2078d80f10aadc460c63ee8be06c9b236ea447140f7d80540dad447d582b9fa3552b038e44eeadf0ae390a960961957001b19428d73ef00033ae0f1daa568c20b0dec713604731ea38f0ef34f8465c3e13db8f76f733ae2fe86fb02a13cb385ecb58c3ac2309566860b59b4464c49022705052093a44c3dd53c74d3c39a3ca0630b84a419a7655f32843d9cc19b844ed09829817dcfd7297911163cd6f8dbb4ba6f0b4def65825efc997f6a8b095368b5b2c7efb9ffcb64bff26a8ecac61605a8a0aaa6050ed2dc6624e8c919b34b2d0e863349f080cfc3a624740a22a004a19bdc014eaca708a0093eff1a36f3ee42456b1e98f371fb420c60511da0d821023166042a0b68614386a5b47ef37d295f2c565de195a043ec022a035ed32af04d5e78c33cbff25cce74a846df097459c9a1f2c81517837a7c3666d27c05b1aee490237840a8db07f1890da380886ccfad3ce53180fc5b8ae588acb7c99baaff3dfed52e2b9faba51a76fba27781a12889d1d7a521e143885f0c891ebba0fd23a19516cf63fe7231e11023aea9ff6b4b6e7d89d044bf7b3d265d9b90ae3d31968e2cc2877d074f16ea0f6cfe5ee6bed8f45f85b5513d9a1561184377d9959424ba954004006ac76bb30de6f49613d5835f22cf40221c69f16396eea67daa13192eae858713c00b5251ff481d7f2f7397db924dfac437b1d2f49d8d819b6c10beb3bf73bcc30de3f792446c69d85a8b50b19ef5985cee4776638c0fac9d24072df071e5ebdac0d6f8d457485652806ad944a77de2f6265031737190ebefd19b079f8a19b5c59497cecfac44dc1d3f2e792acd9f5b43c6e4e9752a8f74c647900571a4ba66228baa2ffbbbc79565c0556d361843567f2377a0f5e54b33780a4bab6dec92009970dc1283329d327f41ba4433bcbe695cd7dd82452bf115795f583d567c6a0b06493299e0a55c9ee02292f577cbe5b9e6f0323215710a6faf8b9a44c5b9dbb07791c300ab6c6207ce15eea65bcf9a6097a4a6f530ef72cab8305085e66ab77359d981b933f7d48b78093e51e9c6c816f4d3a724cb630584e4780b38524aad8bda39ba10cf8e1ce80ca4cf897476876366c2d958b794beeb24ae6090f952399bad6bb113dc9864c8c6407f343c76b52fec5b809a9ef8db528902851c6510a8bc9fad2ef04ab270bb22d3cfed4cfa98b2b9479fd9cb3ffd627ce55020aa90d1c956bc2828602aef0e684360ff21c802abfbd2df862215bf266890b0a2bbaeeb7006617036259e3c2a3cfc64054d60a4a7181ceb4848ea15094", 0xfa3}], 0x8}}], 0x2, 0x40c0) r14 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2d) ioctl$KVM_CHECK_EXTENSION_VM(r14, 0xae03, 0x42) 287.325428ms ago: executing program 4 (id=12971): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a00", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r3, 0x50200}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}}, 0x0) 0s ago: executing program 4 (id=12972): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x599c02, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002bbd7000fbdbdf25"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40001) r2 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x800, 0x0, 0x2, 0x1, 0x2a15, 0xd}, 0x20) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, 0x0, 0x0) sendto$packet(r4, &(0x7f0000000080)='9', 0x1, 0x2404c085, &(0x7f0000000200)={0x11, 0xc, r6, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x14) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r3}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r8 = syz_io_uring_setup(0xf04, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0x3}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)={0x18, 0x10, 0xa, 0x201, 0x70bd28, 0x25dfdbfd, {0x2, 0x0, 0x8}, [@generic="b5"]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) r12 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x502, 0x0) ioctl$SNDCTL_DSP_SPEED(r12, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r12, 0xc0045005, &(0x7f0000000080)=0x10) ioctl$SNDCTL_DSP_SETFMT(r12, 0xc0045005, &(0x7f0000000100)=0x7) syz_io_uring_modify_offsets$generic(r9, r10, 0x2c, 0x10000) io_uring_enter(r8, 0x70db, 0x1, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): ll pass the complete MPEG2 transport stream to the software demuxer. [ 1571.533216][T30207] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1571.565655][T30207] usb 1-1: media controller created [ 1571.615992][T30207] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1571.762154][ T7503] netlink: 'syz.4.12420': attribute type 1 has an invalid length. [ 1571.788972][T30207] DVB: Unable to find symbol mt352_attach() [ 1571.886240][T30207] DVB: Unable to find symbol nxt6000_attach() [ 1571.915059][T30207] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1571.962324][T30207] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input147 [ 1571.981292][T30207] dvb-usb: schedule remote query interval to 1000 msecs. [ 1572.004819][T30207] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1572.017283][T30207] dvb-usb: bulk message failed: -22 (7/0) [ 1572.025491][T30207] dvb-usb: bulk message failed: -22 (7/0) [ 1572.040411][T30207] usb 1-1: USB disconnect, device number 68 [ 1572.184948][T30207] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1572.826725][T30207] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1573.012267][T30207] usb 3-1: config index 0 descriptor too short (expected 10276, got 36) [ 1573.042481][T30207] usb 3-1: config 242 has an invalid interface number: 240 but max is 0 [ 1573.077144][T30207] usb 3-1: config 242 has an invalid descriptor of length 0, skipping remainder of the config [ 1573.104239][T30207] usb 3-1: config 242 has no interface number 0 [ 1573.114501][T30207] usb 3-1: config 242 interface 240 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1573.127577][ T2912] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1573.137353][T30207] usb 3-1: config 242 interface 240 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1573.154179][T30207] usb 3-1: config 242 interface 240 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1573.204511][T30207] usb 3-1: config 242 interface 240 has no altsetting 0 [ 1573.214495][T30207] usb 3-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 1573.225503][T30207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.277582][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12429'. [ 1573.309032][ T2912] usb 5-1: Using ep0 maxpacket: 16 [ 1573.317368][ T2912] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1573.343186][ T2912] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1573.392973][ T2912] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1573.408691][ T2912] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00 [ 1573.440449][ T2912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.492983][ T2912] usb 5-1: config 0 descriptor?? [ 1573.620728][T14127] usb 2-1: USB disconnect, device number 77 [ 1573.638251][T14127] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1573.727718][ T7527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1573.749474][ T7527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1573.975095][ T7533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1574.004004][ T7533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1574.023917][ T2912] hid-corsair-void 0003:1B1C:1B25.004A: unknown main item tag 0x0 [ 1574.050149][ T2912] hid-corsair-void 0003:1B1C:1B25.004A: unknown main item tag 0x0 [ 1574.106988][ T2912] hid-corsair-void 0003:1B1C:1B25.004A: unknown main item tag 0x0 [ 1574.142059][ T2912] hid-corsair-void 0003:1B1C:1B25.004A: unknown main item tag 0x0 [ 1574.168864][ T2912] hid-corsair-void 0003:1B1C:1B25.004A: unknown main item tag 0x0 [ 1574.195730][ T2912] hid-corsair-void 0003:1B1C:1B25.004A: hidraw0: USB HID v0.05 Device [HID 1b1c:1b25] on usb-dummy_hcd.4-1/input0 [ 1574.257839][ T2912] usb 5-1: USB disconnect, device number 63 [ 1574.316428][ T7539] fido_id[7539]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1574.399681][T14127] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1574.594332][T14127] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1574.607013][ T7541] syzkaller0: entered promiscuous mode [ 1574.613962][ T7541] syzkaller0: entered allmulticast mode [ 1574.633077][T14127] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1574.672081][T14127] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1574.712698][T14127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.758812][T14127] usb 1-1: Product: syz [ 1574.780493][T14127] usb 1-1: Manufacturer: syz [ 1574.810082][T14127] usb 1-1: SerialNumber: syz [ 1574.838916][T14127] usb 1-1: config 0 descriptor?? [ 1574.867897][T14127] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1575.095477][ T7550] netlink: 'syz.5.12436': attribute type 1 has an invalid length. [ 1575.199249][ T7550] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1575.210708][ T2912] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1575.268098][ T7552] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1575.329308][ T7553] bond1: (slave macvlan1): making interface the new active one [ 1575.361282][ T7553] macvlan1: entered promiscuous mode [ 1575.388519][ T7553] bond1: (slave macvlan1): Enslaving as an active interface with an up link [ 1575.423600][ T2912] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1575.453175][ T2912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.487825][ T2912] usb 5-1: Product: syz [ 1575.500369][ T2912] usb 5-1: Manufacturer: syz [ 1575.515247][ T2912] usb 5-1: SerialNumber: syz [ 1575.548232][ T2912] usb 5-1: config 0 descriptor?? [ 1575.590262][ T2912] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1575.630019][ T2912] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1575.647420][ T2912] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1575.687735][ T2912] usb 5-1: media controller created [ 1575.724143][ T2912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1575.789975][ T7557] netlink: 36 bytes leftover after parsing attributes in process `syz.5.12438'. [ 1575.845533][ T7186] usb 3-1: USB disconnect, device number 97 [ 1575.873012][T14127] gspca_sunplus: reg_r err -32 [ 1575.873866][ T7538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1575.877902][T14127] sunplus 1-1:0.0: probe with driver sunplus failed with error -32 [ 1575.898896][ T2912] DVB: Unable to find symbol mt352_attach() [ 1575.927884][ T7538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1575.996043][ T8065] usb 1-1: USB disconnect, device number 69 [ 1576.060681][ T2912] DVB: Unable to find symbol nxt6000_attach() [ 1576.071185][ T2912] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1576.098102][ T2912] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input148 [ 1576.122861][ T2912] dvb-usb: schedule remote query interval to 1000 msecs. [ 1576.154245][ T2912] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1576.169952][ T2912] dvb-usb: bulk message failed: -22 (7/0) [ 1576.301550][ T2912] dvb-usb: bulk message failed: -22 (7/0) [ 1576.322716][ T2912] usb 5-1: USB disconnect, device number 64 [ 1576.385141][ T7566] netlink: 76 bytes leftover after parsing attributes in process `syz.2.12439'. [ 1576.421653][ T7566] netlink: 84 bytes leftover after parsing attributes in process `syz.2.12439'. [ 1576.437914][ T2912] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1576.450947][ T7566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12439'. [ 1576.683974][ T7577] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12442'. [ 1578.494900][ T8065] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1578.664869][ T8065] usb 6-1: Using ep0 maxpacket: 16 [ 1578.672106][ T8065] usb 6-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1578.683857][ T8065] usb 6-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1578.694638][ T8065] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1578.701682][ T8065] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00 [ 1578.710836][ T8065] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1578.737760][ T8065] usb 6-1: config 0 descriptor?? [ 1578.962837][ T7587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1578.976146][ T7587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1579.193795][ T8065] hid-corsair-void 0003:1B1C:1B25.004B: unknown main item tag 0x0 [ 1579.209796][ T8065] hid-corsair-void 0003:1B1C:1B25.004B: unknown main item tag 0x0 [ 1579.218927][ T8065] hid-corsair-void 0003:1B1C:1B25.004B: unknown main item tag 0x0 [ 1579.237479][ T8065] hid-corsair-void 0003:1B1C:1B25.004B: unknown main item tag 0x0 [ 1579.245464][ T8065] hid-corsair-void 0003:1B1C:1B25.004B: unknown main item tag 0x0 [ 1579.266743][ T8065] hid-corsair-void 0003:1B1C:1B25.004B: hidraw0: USB HID v0.05 Device [HID 1b1c:1b25] on usb-dummy_hcd.5-1/input0 [ 1579.548703][ T7577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1579.558454][ T2912] hid-corsair-void 0003:1B1C:1B25.004B: failed to request battery (reason: -71) [ 1579.558832][ T7186] usb 6-1: USB disconnect, device number 13 [ 1579.567695][ T8065] hid-corsair-void 0003:1B1C:1B25.004B: failed to request firmware (reason: -71) [ 1579.848859][ T7596] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12450'. [ 1579.999174][ T8065] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1580.049063][ T7186] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1580.078841][ T7602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12451'. [ 1580.179296][ T8065] usb 5-1: Using ep0 maxpacket: 8 [ 1580.189169][ T8065] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 1580.202719][ T8065] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1580.214511][ T7186] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1580.236827][ T8065] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1580.265117][ T8065] usb 5-1: Product: syz [ 1580.274560][ T7186] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1580.282096][ T8065] usb 5-1: Manufacturer: syz [ 1580.299452][ T8065] usb 5-1: SerialNumber: syz [ 1580.324987][ T7186] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1580.345538][ T8065] usb 5-1: config 0 descriptor?? [ 1580.359878][ T7186] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1580.365285][ T8065] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1580.392969][ T7186] usb 3-1: Product: syz [ 1580.401646][ T7186] usb 3-1: Manufacturer: syz [ 1580.403751][ T8065] usb 5-1: setting power ON [ 1580.425205][ T7186] usb 3-1: SerialNumber: syz [ 1580.438732][ T8065] dvb-usb: bulk message failed: -22 (2/0) [ 1580.457658][ T7186] usb 3-1: config 0 descriptor?? [ 1580.477221][ T8065] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1580.493839][ T7186] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1580.536581][ T8065] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1580.587914][ T8065] usb 5-1: media controller created [ 1580.675096][ T8065] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1580.758721][ T8065] usb 5-1: selecting invalid altsetting 6 [ 1580.801524][ T8065] usb 5-1: digital interface selection failed (-22) [ 1580.837302][ T8065] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1580.907356][ T8065] usb 5-1: setting power OFF [ 1580.930756][ T8065] dvb-usb: bulk message failed: -22 (2/0) [ 1580.964702][ T8065] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1581.029123][ T8065] (NULL device *): no alternate interface [ 1581.170503][ T8065] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1581.281108][ T8065] usb 5-1: USB disconnect, device number 65 [ 1581.928001][ T7594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1581.969266][ T7594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1582.059653][ T7186] gspca_sunplus: reg_r err -110 [ 1582.064650][ T7186] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 1582.128588][ T7631] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12462'. [ 1582.209056][ T8065] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 1582.369552][T30207] usb 3-1: USB disconnect, device number 98 [ 1582.395606][ T8065] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1582.430893][ T8065] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1582.445603][ T8065] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.454939][ T8065] usb 2-1: Product: syz [ 1582.459453][ T8065] usb 2-1: Manufacturer: syz [ 1582.464159][ T8065] usb 2-1: SerialNumber: syz [ 1582.486398][ T8065] usb 2-1: config 0 descriptor?? [ 1582.514656][ T8065] usb 2-1: bad CDC descriptors [ 1582.520437][ T8065] usb 2-1: unsupported MDLM descriptors [ 1582.732614][ T7186] usb 2-1: USB disconnect, device number 78 [ 1582.999054][ T7184] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1583.160578][ T7184] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1583.171737][ T7184] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1583.181559][ T7184] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1583.199018][ T7184] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1583.208551][ T7184] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1583.249243][ T7186] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1583.260805][ T7184] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1583.419834][ T7186] usb 3-1: Using ep0 maxpacket: 8 [ 1583.433002][ T7184] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1583.459388][ T7186] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1583.489271][ T7186] usb 3-1: config 0 has no interface number 0 [ 1583.499332][ T7184] usb 1-1: USB disconnect, device number 70 [ 1583.510518][ T7186] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1583.548462][ T7186] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1583.559374][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12468'. [ 1583.585205][ T7186] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1583.618402][ T7186] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1583.689606][ T7186] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1583.730363][ T7186] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1583.775589][ T7186] usb 3-1: config 0 descriptor?? [ 1583.810741][ T7649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12469'. [ 1583.824188][ T7186] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1583.855495][ T7649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12469'. [ 1583.863993][ T7650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12469'. [ 1584.043374][ T8065] usb 3-1: USB disconnect, device number 99 [ 1584.060770][ T8065] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1584.444162][ T7655] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1585.081972][ T7661] ªªªªªª: renamed from vlan0 (while UP) [ 1585.383194][ T7669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12474'. [ 1585.997136][ T7679] kvm: user requested TSC rate below hardware speed [ 1586.540972][ T7186] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 1586.600101][ T49] macvlan1: left promiscuous mode [ 1586.730973][ T7186] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1586.801439][ T7186] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1586.847819][ T7186] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.870906][ T7186] usb 2-1: Product: syz [ 1586.879331][T30207] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1587.010498][ T7186] usb 2-1: Manufacturer: syz [ 1587.036017][ T7186] usb 2-1: SerialNumber: syz [ 1587.068470][ T7186] usb 2-1: config 0 descriptor?? [ 1587.099962][ T7186] usb 2-1: bad CDC descriptors [ 1587.101566][T30207] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1587.116933][ T7700] netlink: 76 bytes leftover after parsing attributes in process `syz.2.12482'. [ 1587.128390][T30207] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1587.160206][ T7186] usb 2-1: unsupported MDLM descriptors [ 1587.181849][ T7700] netlink: 84 bytes leftover after parsing attributes in process `syz.2.12482'. [ 1587.204696][T30207] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1587.225309][ T7700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12482'. [ 1587.261632][T30207] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1587.289112][T30207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.342976][T30207] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1587.411130][ T2912] usb 2-1: USB disconnect, device number 79 [ 1587.604192][T30207] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1587.650605][T30207] usb 5-1: USB disconnect, device number 66 [ 1589.028414][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12487'. [ 1589.043450][ T7718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12487'. [ 1589.057417][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12487'. [ 1589.189107][T30207] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 1589.377990][T30207] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1589.525893][T30207] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1589.541987][T30207] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1589.561978][T30207] usb 6-1: Product: syz [ 1589.579482][T30207] usb 6-1: Manufacturer: syz [ 1589.594487][T30207] usb 6-1: SerialNumber: syz [ 1589.630001][T30207] usb 6-1: config 0 descriptor?? [ 1589.979380][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 1589.979399][ T30] audit: type=1326 audit(1775429367.095:3771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7730 comm="syz.4.12491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1590.126581][ T30] audit: type=1326 audit(1775429367.095:3772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7730 comm="syz.4.12491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1590.167941][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12492'. [ 1590.197458][T30207] usb 6-1: bad CDC descriptors [ 1590.209682][ T7738] netlink: 'syz.4.12491': attribute type 1 has an invalid length. [ 1590.239309][T30207] usb 6-1: unsupported MDLM descriptors [ 1590.268440][ T30] audit: type=1326 audit(1775429367.145:3773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7730 comm="syz.4.12491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1590.423993][ T30] audit: type=1326 audit(1775429367.235:3774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7730 comm="syz.4.12491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1590.545121][ T30] audit: type=1326 audit(1775429367.235:3775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7730 comm="syz.4.12491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1590.690317][ T30] audit: type=1326 audit(1775429367.235:3776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7730 comm="syz.4.12491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1590.886762][ T30] audit: type=1326 audit(1775429367.285:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7730 comm="syz.4.12491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1591.012858][ T30] audit: type=1326 audit(1775429367.285:3778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7730 comm="syz.4.12491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1591.100165][ T30] audit: type=1326 audit(1775429367.295:3779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7730 comm="syz.4.12491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1591.154608][ T30] audit: type=1326 audit(1775429367.485:3780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7730 comm="syz.4.12491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1591.758985][ T7751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12497'. [ 1591.843328][T30207] usb 6-1: USB disconnect, device number 14 [ 1591.870995][ T7751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12497'. [ 1592.248242][ T7768] netlink: 84 bytes leftover after parsing attributes in process `syz.2.12499'. [ 1592.269312][ T7768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12499'. [ 1592.761541][ T7779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12504'. [ 1593.509092][ T7184] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 1593.562377][ T7792] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12508'. [ 1593.734056][ T7184] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1593.904176][ T7184] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1593.923947][ T7184] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.944653][ T7184] usb 6-1: Product: syz [ 1593.948866][ T7184] usb 6-1: Manufacturer: syz [ 1593.968033][ T7184] usb 6-1: SerialNumber: syz [ 1593.985731][ T7184] usb 6-1: config 0 descriptor?? [ 1594.010326][ T7184] usb 6-1: bad CDC descriptors [ 1594.019668][ T7184] usb 6-1: unsupported MDLM descriptors [ 1594.329746][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12512'. [ 1594.449219][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12512'. [ 1595.105441][ T7814] netlink: 84 bytes leftover after parsing attributes in process `syz.4.12515'. [ 1595.119120][ T7814] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12515'. [ 1596.176972][ T8069] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1596.194072][ T7823] kvm: user requested TSC rate below hardware speed [ 1596.380410][ T8069] usb 3-1: config index 0 descriptor too short (expected 10276, got 36) [ 1596.399059][ T8069] usb 3-1: config 242 has an invalid interface number: 240 but max is 0 [ 1596.417861][ T8069] usb 3-1: config 242 has an invalid descriptor of length 0, skipping remainder of the config [ 1596.440888][ T8069] usb 3-1: config 242 has no interface number 0 [ 1596.459748][ T8069] usb 3-1: config 242 interface 240 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1596.479189][ T8069] usb 3-1: config 242 interface 240 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1596.491502][ T8069] usb 3-1: config 242 interface 240 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1596.505822][ T8069] usb 3-1: config 242 interface 240 has no altsetting 0 [ 1596.512927][ T8069] usb 3-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 1596.522604][ T8069] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1596.651055][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12521'. [ 1596.660403][ T7829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12521'. [ 1596.669592][T30207] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1596.839381][T30207] usb 2-1: Using ep0 maxpacket: 16 [ 1596.846713][T30207] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1596.871631][T30207] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1596.901979][T30207] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1596.908650][T30207] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00 [ 1596.934306][T30207] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1596.952726][T30207] usb 2-1: config 0 descriptor?? [ 1597.004203][ T7836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1597.057347][ T7836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1597.165617][ T7825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1597.192276][ T7825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1597.221017][ T8069] usb 6-1: USB disconnect, device number 15 [ 1597.356359][ T7842] __nla_validate_parse: 1 callbacks suppressed [ 1597.356373][ T7842] netlink: 96 bytes leftover after parsing attributes in process `syz.5.12524'. [ 1597.520455][T30207] hid-corsair-void 0003:1B1C:1B25.004C: unknown main item tag 0x0 [ 1597.528341][T30207] hid-corsair-void 0003:1B1C:1B25.004C: unknown main item tag 0x0 [ 1597.577115][T30207] hid-corsair-void 0003:1B1C:1B25.004C: unknown main item tag 0x0 [ 1597.596739][T30207] hid-corsair-void 0003:1B1C:1B25.004C: unknown main item tag 0x0 [ 1597.609106][T30207] hid-corsair-void 0003:1B1C:1B25.004C: unknown main item tag 0x0 [ 1597.661813][T30207] hid-corsair-void 0003:1B1C:1B25.004C: hidraw0: USB HID v0.05 Device [HID 1b1c:1b25] on usb-dummy_hcd.1-1/input0 [ 1597.680484][ T7184] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1597.691237][ T7846] syzkaller0: entered promiscuous mode [ 1597.716108][ T7846] syzkaller0: entered allmulticast mode [ 1597.741260][T30207] usb 2-1: USB disconnect, device number 80 [ 1597.783188][ T7847] fido_id[7847]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1597.903094][ T7184] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1597.933230][ T7184] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.963399][ T7184] usb 5-1: Product: syz [ 1597.975481][ T7184] usb 5-1: Manufacturer: syz [ 1597.993840][ T7184] usb 5-1: SerialNumber: syz [ 1598.219069][ T7186] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1598.389165][ T7186] usb 6-1: Using ep0 maxpacket: 8 [ 1598.409469][ T7186] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1598.428054][ T7186] usb 6-1: config 0 has no interface number 0 [ 1598.438820][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12528'. [ 1598.448218][ T7186] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1598.448493][ T7851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12528'. [ 1598.469128][ T7186] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1598.499398][ T7186] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1598.519455][ T7186] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1598.544533][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12528'. [ 1598.549074][ T7186] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1598.579203][ T7186] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.599453][ T7186] usb 6-1: config 0 descriptor?? [ 1598.636776][ T7186] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1598.683263][ T7184] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1598.699470][ T7184] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1598.719475][ T7184] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1598.746668][ T7184] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1598.772738][ T7184] usb 5-1: USB disconnect, device number 67 [ 1598.818337][ T7854] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12529'. [ 1598.881416][ T7185] usb 6-1: USB disconnect, device number 16 [ 1598.895594][ T7185] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1599.710492][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1599.710509][ T30] audit: type=1326 audit(1775429376.825:3785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.4.12537" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1599.743600][ T7875] netlink: 'syz.4.12537': attribute type 1 has an invalid length. [ 1599.766033][ T7185] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1599.828712][ T30] audit: type=1326 audit(1775429376.825:3786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.4.12537" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1599.913283][ T30] audit: type=1326 audit(1775429376.825:3787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.4.12537" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1599.929509][ T7185] usb 6-1: Using ep0 maxpacket: 32 [ 1599.976630][ T30] audit: type=1326 audit(1775429376.825:3788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.4.12537" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1600.026541][ T7185] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1600.040125][ T30] audit: type=1326 audit(1775429376.865:3789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.4.12537" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1600.081101][ T7185] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.089395][ T30] audit: type=1326 audit(1775429376.865:3790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.4.12537" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1600.114631][ T7185] usb 6-1: config 0 descriptor?? [ 1600.159091][ T30] audit: type=1326 audit(1775429376.865:3791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.4.12537" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1600.220776][ T30] audit: type=1326 audit(1775429376.865:3792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.4.12537" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1600.303712][ T30] audit: type=1326 audit(1775429376.865:3793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.4.12537" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1600.370760][ T7185] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1600.387281][ T30] audit: type=1326 audit(1775429376.885:3794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.4.12537" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1600.440988][ T7185] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1600.462010][ T7185] dib0700: firmware download failed at 7 with -22 [ 1600.471710][ T8069] usb 3-1: USB disconnect, device number 100 [ 1600.583021][ T7185] usb 6-1: USB disconnect, device number 17 [ 1600.629810][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12539'. [ 1600.679929][ T7882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12539'. [ 1600.683169][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12539'. [ 1600.737889][ T7880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12538'. [ 1600.804794][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12540'. [ 1601.614806][ T7909] bond1: (slave macvlan1): Releasing active interface [ 1601.933370][ T7913] netlink: 'syz.4.12546': attribute type 21 has an invalid length. [ 1602.125042][ T7185] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1602.298370][ T7185] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1602.339061][ T7185] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.372894][ T7185] usb 6-1: Product: syz [ 1602.385595][ T7185] usb 6-1: Manufacturer: syz [ 1602.415036][ T7185] usb 6-1: SerialNumber: syz [ 1603.072899][ T7185] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1603.099631][ T7185] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1603.123081][ T7931] __nla_validate_parse: 5 callbacks suppressed [ 1603.123099][ T7931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12552'. [ 1603.152926][ T7185] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1603.193931][ T7185] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1603.241880][ T7185] usb 6-1: USB disconnect, device number 18 [ 1603.310161][ T7186] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1603.469084][ T7186] usb 3-1: Using ep0 maxpacket: 32 [ 1603.478448][ T7186] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1603.490949][ T7186] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.507734][ T7186] usb 3-1: config 0 descriptor?? [ 1603.739597][ T7186] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1603.763083][ T7186] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1603.812227][ T7186] dib0700: firmware download failed at 7 with -22 [ 1603.956154][ T7186] usb 3-1: USB disconnect, device number 101 [ 1604.349079][ T6551] Bluetooth: hci5: command 0x0406 tx timeout [ 1604.526361][ T7947] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12560'. [ 1604.858361][ T7954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12561'. [ 1605.619105][ T7186] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1605.789049][ T7186] usb 1-1: Using ep0 maxpacket: 16 [ 1605.842611][ T7186] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1605.874663][ T7186] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1605.959326][ T7185] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1605.978452][ T7186] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1606.071314][ T7186] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00 [ 1606.113805][ T7186] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1606.180537][ T7185] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1606.201308][ T7186] usb 1-1: config 0 descriptor?? [ 1606.208086][ T7185] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.236683][ T7185] usb 6-1: Product: syz [ 1606.249051][ T7185] usb 6-1: Manufacturer: syz [ 1606.266899][ T7185] usb 6-1: SerialNumber: syz [ 1606.427746][ T7964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1606.454693][ T7964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1606.689882][ T7186] hid-corsair-void 0003:1B1C:1B25.004D: unknown main item tag 0x0 [ 1606.708866][ T7186] hid-corsair-void 0003:1B1C:1B25.004D: unknown main item tag 0x0 [ 1606.718702][ T7186] hid-corsair-void 0003:1B1C:1B25.004D: unknown main item tag 0x0 [ 1606.748572][ T7186] hid-corsair-void 0003:1B1C:1B25.004D: unknown main item tag 0x0 [ 1606.756877][ T7186] hid-corsair-void 0003:1B1C:1B25.004D: unknown main item tag 0x0 [ 1606.770282][ T7186] hid-corsair-void 0003:1B1C:1B25.004D: hidraw0: USB HID v0.05 Device [HID 1b1c:1b25] on usb-dummy_hcd.0-1/input0 [ 1606.913151][ T7185] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1606.931121][ T8069] usb 1-1: USB disconnect, device number 71 [ 1606.931252][ T7186] hid-corsair-void 0003:1B1C:1B25.004D: failed to request firmware (reason: -71) [ 1606.946242][T14127] hid-corsair-void 0003:1B1C:1B25.004D: failed to request battery (reason: -71) [ 1606.989238][ T7185] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1607.014071][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12569'. [ 1607.024771][ T7185] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1607.052073][ T7985] netlink: 'syz.4.12570': attribute type 1 has an invalid length. [ 1607.071826][ T7185] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1607.124882][ T7185] usb 6-1: USB disconnect, device number 19 [ 1607.141472][ T7985] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1607.229190][ T7987] bond1: (slave veth3): Enslaving as an active interface with an up link [ 1607.279639][ T7988] bond1: (slave macvlan1): Enslaving as an active interface with an up link [ 1607.383245][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.392548][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.870867][ T8000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12575'. [ 1607.917018][ T8000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12575'. [ 1607.937396][ T7999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12575'. [ 1607.963960][ T68] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1608.002658][ T68] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1608.059032][ T68] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1608.098655][ T68] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1608.823799][ T8015] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12579'. [ 1608.843359][ T8017] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12580'. [ 1609.179071][T14127] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1609.351115][T14127] usb 5-1: Using ep0 maxpacket: 16 [ 1609.363667][T14127] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1609.376572][T14127] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1609.389632][T14127] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1609.409222][T14127] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00 [ 1609.429019][ T7185] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1609.438903][T14127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1609.471647][T14127] usb 5-1: config 0 descriptor?? [ 1609.623400][ T7185] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1609.645294][ T7185] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.669139][ T7185] usb 3-1: Product: syz [ 1609.673360][ T7185] usb 3-1: Manufacturer: syz [ 1609.692673][ T8020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1609.708503][ T7185] usb 3-1: SerialNumber: syz [ 1609.718737][ T8020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1609.789200][ T7186] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 1609.937321][T14127] usbhid 5-1:0.0: can't add hid device: -71 [ 1609.958686][T14127] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1609.973030][T14127] usb 5-1: USB disconnect, device number 68 [ 1609.991144][ T7186] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1610.031895][ T7186] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1610.041946][ T7186] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.050110][ T7186] usb 1-1: Product: syz [ 1610.064850][ T7186] usb 1-1: Manufacturer: syz [ 1610.079703][ T7186] usb 1-1: SerialNumber: syz [ 1610.088319][ T7186] usb 1-1: config 0 descriptor?? [ 1610.096773][ T7186] usb 1-1: bad CDC descriptors [ 1610.105255][ T7186] usb 1-1: unsupported MDLM descriptors [ 1610.149181][ T8034] netlink: 'syz.5.12584': attribute type 21 has an invalid length. [ 1610.157660][ T8034] netlink: 100 bytes leftover after parsing attributes in process `syz.5.12584'. [ 1610.313797][T14127] usb 1-1: USB disconnect, device number 72 [ 1610.359598][ T7185] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1610.380256][ T7185] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1610.390920][ T7185] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1610.423163][ T7185] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1610.438976][ T7185] usb 3-1: USB disconnect, device number 102 [ 1610.744040][ T8040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12585'. [ 1611.190580][ T8051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12587'. [ 1612.312196][ T8081] netlink: 'syz.2.12591': attribute type 21 has an invalid length. [ 1612.320363][ T8081] netlink: 100 bytes leftover after parsing attributes in process `syz.2.12591'. [ 1612.427022][ T8084] netlink: 'syz.0.12594': attribute type 21 has an invalid length. [ 1612.437698][ T8084] netlink: 100 bytes leftover after parsing attributes in process `syz.0.12594'. [ 1613.890359][ T8099] kvm: user requested TSC rate below hardware speed [ 1614.089845][ T8104] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12598'. [ 1614.396701][ T8109] bridge0: port 1(bridge_slave_0) entered disabled state [ 1614.643790][ T8109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1614.703171][ T8109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1615.148857][T30001] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1615.189187][T30001] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.219331][ T8115] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 1615.227154][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 1615.234401][T30001] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1615.249866][T30001] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.321123][T30001] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1615.349017][T30001] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.379214][ T8115] usb 1-1: device descriptor read/64, error -32 [ 1615.399105][T30001] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1615.428512][T30001] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.629340][ T8115] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 1615.719154][ T8119] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1615.835250][ T8115] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1615.907601][ T8119] usb 3-1: config index 0 descriptor too short (expected 10276, got 36) [ 1615.936886][ T8119] usb 3-1: config 242 has an invalid interface number: 240 but max is 0 [ 1615.968983][ T8119] usb 3-1: config 242 has an invalid descriptor of length 0, skipping remainder of the config [ 1615.993688][ T8119] usb 3-1: config 242 has no interface number 0 [ 1615.998308][ T8142] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12610'. [ 1616.007947][ T8119] usb 3-1: config 242 interface 240 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1616.031548][ T8115] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1616.054615][ T8119] usb 3-1: config 242 interface 240 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1616.089540][ T8115] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1616.114889][ T8119] usb 3-1: config 242 interface 240 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1616.149461][ T8115] usb 1-1: Product: syz [ 1616.153642][ T8115] usb 1-1: Manufacturer: syz [ 1616.158217][ T8115] usb 1-1: SerialNumber: syz [ 1616.183854][ T8119] usb 3-1: config 242 interface 240 has no altsetting 0 [ 1616.186343][ T8115] usb 1-1: config 0 descriptor?? [ 1616.212906][ T8119] usb 3-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 1616.266806][ T8119] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1616.311793][ T8115] usb 1-1: bad CDC descriptors [ 1616.323812][ T8115] usb 1-1: unsupported MDLM descriptors [ 1616.679798][ T7185] usb 1-1: USB disconnect, device number 74 [ 1617.843204][ T8161] netlink: 76 bytes leftover after parsing attributes in process `syz.4.12612'. [ 1617.905140][ T8161] netlink: 84 bytes leftover after parsing attributes in process `syz.4.12612'. [ 1617.929877][ T8161] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12612'. [ 1617.944572][ T8160] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12614'. [ 1618.699670][ T8119] usb 3-1: USB disconnect, device number 103 [ 1619.090174][ T8170] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12616'. [ 1619.148864][ T8170] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12616'. [ 1619.178859][ T8168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12615'. [ 1619.307924][ T8170] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12616'. [ 1619.458350][ T8174] kvm: user requested TSC rate below hardware speed [ 1620.280029][ T8192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12622'. [ 1620.659139][ T3282] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1620.809075][ T3282] usb 6-1: Using ep0 maxpacket: 16 [ 1620.817434][ T3282] usb 6-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1620.839540][ T3282] usb 6-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1620.865918][ T3282] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1620.892910][ T3282] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00 [ 1620.914337][ T3282] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1620.941647][ T3282] usb 6-1: config 0 descriptor?? [ 1621.165236][ T8195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1621.186123][ T8195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1621.444010][ T3282] hid-corsair-void 0003:1B1C:1B25.004E: unknown main item tag 0x0 [ 1621.469240][ T3282] hid-corsair-void 0003:1B1C:1B25.004E: unknown main item tag 0x0 [ 1621.489210][ T3282] hid-corsair-void 0003:1B1C:1B25.004E: unknown main item tag 0x0 [ 1621.497095][ T3282] hid-corsair-void 0003:1B1C:1B25.004E: unknown main item tag 0x0 [ 1621.526011][ T3282] hid-corsair-void 0003:1B1C:1B25.004E: unknown main item tag 0x0 [ 1621.550503][ T3282] hid-corsair-void 0003:1B1C:1B25.004E: hidraw0: USB HID v0.05 Device [HID 1b1c:1b25] on usb-dummy_hcd.5-1/input0 [ 1621.606922][ T8204] netlink: 'syz.4.12626': attribute type 1 has an invalid length. [ 1621.642600][ T8204] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1621.651297][ T8119] usb 6-1: USB disconnect, device number 20 [ 1621.686400][ T8206] bond1: (slave macvlan1): Releasing backup interface [ 1621.710776][ T8201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12624'. [ 1621.740587][ T8115] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1621.765375][ T8206] bond2: (slave macvlan1): Enslaving as an active interface with a down link [ 1621.821288][ T8207] fido_id[8207]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1621.972009][ T8115] usb 3-1: config index 0 descriptor too short (expected 10276, got 36) [ 1621.998708][ T8115] usb 3-1: config 242 has an invalid interface number: 240 but max is 0 [ 1622.045394][ T8115] usb 3-1: config 242 has an invalid descriptor of length 0, skipping remainder of the config [ 1622.080955][ T8115] usb 3-1: config 242 has no interface number 0 [ 1622.106638][ T8115] usb 3-1: config 242 interface 240 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1622.156936][ T8115] usb 3-1: config 242 interface 240 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1622.185926][ T8115] usb 3-1: config 242 interface 240 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1622.222042][ T8214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12628'. [ 1622.239994][ T8115] usb 3-1: config 242 interface 240 has no altsetting 0 [ 1622.282416][ T8115] usb 3-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 1622.322951][ T8115] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1622.649968][ T8221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12629'. [ 1622.820035][ T8227] netlink: 'syz.5.12630': attribute type 21 has an invalid length. [ 1622.828115][ T8227] netlink: 100 bytes leftover after parsing attributes in process `syz.5.12630'. [ 1622.855948][ T8228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1622.895898][ T8228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1624.711801][ T8119] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 1624.728226][ T8251] netlink: 'syz.0.12637': attribute type 1 has an invalid length. [ 1624.815042][ T8251] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1624.883423][ T8119] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1624.924993][ T8255] bond2: (slave macvlan1): Enslaving as an active interface with a down link [ 1624.948312][ T8119] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1624.963146][ T8119] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1625.014291][ T8119] usb 2-1: Product: syz [ 1625.037238][ T8119] usb 2-1: Manufacturer: syz [ 1625.045785][ T8119] usb 2-1: SerialNumber: syz [ 1625.111517][ T8119] usb 2-1: config 0 descriptor?? [ 1625.173714][ T8119] usb 2-1: bad CDC descriptors [ 1625.201712][ T8119] usb 2-1: unsupported MDLM descriptors [ 1625.339120][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1625.339137][ T30] audit: type=1326 audit(1775429402.455:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.0.12639" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2f6c code=0x7ffc0000 [ 1625.373513][ T8263] netlink: 'syz.0.12639': attribute type 1 has an invalid length. [ 1625.441793][ T30] audit: type=1326 audit(1775429402.485:3820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.0.12639" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2f6c code=0x7ffc0000 [ 1625.515200][ T30] audit: type=1326 audit(1775429402.495:3821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.0.12639" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fd2f6c code=0x7ffc0000 [ 1625.615074][ T30] audit: type=1326 audit(1775429402.495:3822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.0.12639" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2f6c code=0x7ffc0000 [ 1625.727542][ T8119] usb 3-1: USB disconnect, device number 104 [ 1625.749441][ T30] audit: type=1326 audit(1775429402.495:3823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.0.12639" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2f6c code=0x7ffc0000 [ 1625.875231][ T30] audit: type=1326 audit(1775429402.495:3824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.0.12639" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7fd2f6c code=0x7ffc0000 [ 1625.920286][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12640'. [ 1625.942191][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12640'. [ 1625.981976][ T30] audit: type=1326 audit(1775429402.495:3825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.0.12639" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2f6c code=0x7ffc0000 [ 1626.132048][ T30] audit: type=1326 audit(1775429402.495:3826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.0.12639" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2f6c code=0x7ffc0000 [ 1626.194351][ T8268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12641'. [ 1626.207961][ T30] audit: type=1326 audit(1775429402.495:3827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.0.12639" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd2f6c code=0x7ffc0000 [ 1626.258423][ T30] audit: type=1326 audit(1775429402.495:3828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.0.12639" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2f6c code=0x7ffc0000 [ 1626.294202][ T8268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12641'. [ 1626.305017][ T8269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12641'. [ 1626.465583][ T8272] netlink: 'syz.4.12642': attribute type 1 has an invalid length. [ 1626.503118][ T8272] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1626.623271][ T8272] bond3: (slave veth5): Enslaving as an active interface with an up link [ 1626.670214][ T8276] bond2: (slave macvlan1): Releasing active interface [ 1626.682710][ T8276] bond3: (slave macvlan1): Enslaving as an active interface with an up link [ 1626.977408][ T8279] tipc: Started in network mode [ 1626.988149][ T8279] tipc: Node identity f2d87173b733, cluster identity 4711 [ 1627.003713][ T8279] tipc: Enabled bearer , priority 0 [ 1627.044594][ T8279] syzkaller0: entered promiscuous mode [ 1627.059259][ T8279] syzkaller0: entered allmulticast mode [ 1627.125047][ T8279] tipc: Resetting bearer [ 1627.157092][ T8119] usb 2-1: USB disconnect, device number 81 [ 1627.193328][ T8278] tipc: Resetting bearer [ 1627.239695][ T8278] tipc: Disabling bearer [ 1627.711339][ T8295] netlink: 'syz.4.12648': attribute type 21 has an invalid length. [ 1627.729219][ T8295] netlink: 100 bytes leftover after parsing attributes in process `syz.4.12648'. [ 1627.799070][ T8119] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1628.099683][ T8119] usb 3-1: config index 0 descriptor too short (expected 10276, got 36) [ 1628.114849][ T8119] usb 3-1: config 242 has an invalid interface number: 240 but max is 0 [ 1628.135878][ T8119] usb 3-1: config 242 has an invalid descriptor of length 0, skipping remainder of the config [ 1628.155030][ T8119] usb 3-1: config 242 has no interface number 0 [ 1628.172979][ T8119] usb 3-1: config 242 interface 240 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1628.199182][ T8119] usb 3-1: config 242 interface 240 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1628.226178][ T8119] usb 3-1: config 242 interface 240 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1628.276110][ T8119] usb 3-1: config 242 interface 240 has no altsetting 0 [ 1628.305417][ T8119] usb 3-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 1628.341434][ T8119] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1628.540607][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12651'. [ 1628.569030][ T8300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12651'. [ 1628.600220][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12651'. [ 1628.928312][ T8308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1628.947706][ T8308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1629.804982][ T8318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12656'. [ 1629.949628][ T6551] Bluetooth: hci1: command 0x0406 tx timeout [ 1630.351695][ T8325] netlink: 'syz.4.12655': attribute type 21 has an invalid length. [ 1631.223373][ T8119] usb 3-1: USB disconnect, device number 105 [ 1631.369501][ T8348] __nla_validate_parse: 1 callbacks suppressed [ 1631.369515][ T8348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12665'. [ 1631.411202][ T8348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12665'. [ 1631.444338][ T8350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12665'. [ 1631.494404][ T8345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12663'. [ 1631.901979][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1631.901997][ T30] audit: type=1326 audit(1775429409.025:3836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.4.12666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1631.941019][ T8358] netlink: 'syz.4.12666': attribute type 1 has an invalid length. [ 1632.085628][ T30] audit: type=1326 audit(1775429409.025:3837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.4.12666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1632.227537][ T30] audit: type=1326 audit(1775429409.055:3838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.4.12666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1632.374800][ T30] audit: type=1326 audit(1775429409.055:3839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.4.12666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1632.480026][ T30] audit: type=1326 audit(1775429409.055:3840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.4.12666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1632.531892][ T30] audit: type=1326 audit(1775429409.055:3841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.4.12666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1632.581153][ T30] audit: type=1326 audit(1775429409.065:3842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.4.12666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1632.661057][ T30] audit: type=1326 audit(1775429409.065:3843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.4.12666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1632.713332][ T8363] netlink: 'syz.1.12667': attribute type 21 has an invalid length. [ 1632.759902][ T8363] netlink: 100 bytes leftover after parsing attributes in process `syz.1.12667'. [ 1632.789135][ T30] audit: type=1326 audit(1775429409.065:3844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.4.12666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1632.859195][ T30] audit: type=1326 audit(1775429409.065:3845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.4.12666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1633.467530][ T8370] netlink: 48 bytes leftover after parsing attributes in process `syz.5.12670'. [ 1633.520366][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12670'. [ 1633.926303][ T3282] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 1634.194042][ T3282] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1634.296543][ T3282] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1634.319336][ T3282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.332997][ T3282] usb 1-1: Product: syz [ 1634.337236][ T3282] usb 1-1: Manufacturer: syz [ 1634.344113][ T3282] usb 1-1: SerialNumber: syz [ 1634.354498][ T3282] usb 1-1: config 0 descriptor?? [ 1634.378692][ T3282] usb 1-1: bad CDC descriptors [ 1634.386184][ T3282] usb 1-1: unsupported MDLM descriptors [ 1634.813824][ T8400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12676'. [ 1635.369099][ T3282] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 1635.552520][ T3282] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1635.603371][ T3282] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1635.663154][ T3282] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.711722][ T3282] usb 2-1: Product: syz [ 1635.731593][ T3282] usb 2-1: Manufacturer: syz [ 1635.755413][ T3282] usb 2-1: SerialNumber: syz [ 1635.781483][ T8407] netlink: 'syz.2.12678': attribute type 1 has an invalid length. [ 1635.813652][ T3282] usb 2-1: config 0 descriptor?? [ 1635.835380][ T8410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12678'. [ 1635.857132][ T3282] usb 2-1: bad CDC descriptors [ 1635.879602][ T3282] usb 2-1: unsupported MDLM descriptors [ 1635.914936][ T8407] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1636.032347][ T8412] bond1: (slave macvlan1): Enslaving as an active interface with a down link [ 1636.202851][ T8415] tipc: Enabled bearer , priority 0 [ 1636.243951][ T8415] syzkaller0: entered promiscuous mode [ 1636.263697][ T8415] syzkaller0: entered allmulticast mode [ 1636.296300][ T8418] tipc: Resetting bearer [ 1636.349304][ T8414] tipc: Resetting bearer [ 1636.409974][ T8414] tipc: Disabling bearer [ 1636.429608][ T8421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12682'. [ 1636.580636][ T8422] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12681'. [ 1636.690403][ T3282] usb 1-1: USB disconnect, device number 75 [ 1636.771817][ T8427] bond1: (slave macvlan1): Releasing active interface [ 1637.105619][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 1637.105637][ T30] audit: type=1326 audit(1775429414.225:3882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8432 comm="syz.2.12686" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18f6c code=0x7ffc0000 [ 1637.144767][ T8437] netlink: 'syz.2.12686': attribute type 1 has an invalid length. [ 1637.286609][ T30] audit: type=1326 audit(1775429414.255:3883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8432 comm="syz.2.12686" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18f6c code=0x7ffc0000 [ 1637.508326][ T30] audit: type=1326 audit(1775429414.255:3884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8432 comm="syz.2.12686" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f18f6c code=0x7ffc0000 [ 1637.570787][ T7185] usb 2-1: USB disconnect, device number 82 [ 1637.666915][ T30] audit: type=1326 audit(1775429414.255:3885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8432 comm="syz.2.12686" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18f6c code=0x7ffc0000 [ 1637.725351][ T30] audit: type=1326 audit(1775429414.255:3886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8432 comm="syz.2.12686" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18f6c code=0x7ffc0000 [ 1637.749363][ T30] audit: type=1326 audit(1775429414.255:3887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8432 comm="syz.2.12686" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f18f6c code=0x7ffc0000 [ 1637.785441][ T30] audit: type=1326 audit(1775429414.255:3888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8432 comm="syz.2.12686" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18f6c code=0x7ffc0000 [ 1637.884770][ T30] audit: type=1326 audit(1775429414.255:3889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8432 comm="syz.2.12686" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f18f6c code=0x7ffc0000 [ 1637.989916][ T30] audit: type=1326 audit(1775429414.265:3890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8432 comm="syz.2.12686" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18f6c code=0x7ffc0000 [ 1638.112027][ T30] audit: type=1326 audit(1775429414.265:3891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8432 comm="syz.2.12686" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f18f6c code=0x7ffc0000 [ 1638.150833][ T8447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12689'. [ 1638.382049][T14127] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1638.546511][T14127] usb 1-1: config index 0 descriptor too short (expected 10276, got 36) [ 1638.557658][T14127] usb 1-1: config 242 has an invalid interface number: 240 but max is 0 [ 1638.606803][T14127] usb 1-1: config 242 has an invalid descriptor of length 0, skipping remainder of the config [ 1638.667092][T14127] usb 1-1: config 242 has no interface number 0 [ 1638.683756][ T8461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12695'. [ 1638.706618][T14127] usb 1-1: config 242 interface 240 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1638.744540][ T8463] netlink: 'syz.5.12696': attribute type 1 has an invalid length. [ 1638.765273][T14127] usb 1-1: config 242 interface 240 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1638.828231][T14127] usb 1-1: config 242 interface 240 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1638.875942][ T8463] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1638.881161][T14127] usb 1-1: config 242 interface 240 has no altsetting 0 [ 1638.929129][T14127] usb 1-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 1638.941521][ T8467] bond2: (slave macvlan1): making interface the new active one [ 1638.959896][T14127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.979109][ T8467] bond2: (slave macvlan1): Enslaving as an active interface with an up link [ 1639.226960][ T8476] kvm: user requested TSC rate below hardware speed [ 1639.759256][ T8491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12704'. [ 1639.816760][ T8493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12705'. [ 1639.843543][ T8493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12705'. [ 1639.870911][ T8494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12705'. [ 1639.930024][ T8480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1639.973796][ T8480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1640.183221][ T6551] Bluetooth: hci3: command 0x0406 tx timeout [ 1640.429022][ T8119] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1640.509139][ T8115] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 1640.582329][ T8119] usb 5-1: device descriptor read/64, error -71 [ 1640.676573][ T8507] netlink: 'syz.5.12708': attribute type 21 has an invalid length. [ 1640.748650][ T8507] netlink: 100 bytes leftover after parsing attributes in process `syz.5.12708'. [ 1640.839012][ T8119] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1641.013861][ T8119] usb 5-1: device descriptor read/64, error -71 [ 1641.076362][ T8115] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1641.142476][ T8119] usb usb5-port1: attempt power cycle [ 1641.174018][ T8115] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1641.243011][ T8115] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.290141][ T8115] usb 3-1: Product: syz [ 1641.314451][ T8115] usb 3-1: Manufacturer: syz [ 1641.334431][ T8115] usb 3-1: SerialNumber: syz [ 1641.378384][ T8512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12709'. [ 1641.402282][ T8115] usb 3-1: config 0 descriptor?? [ 1641.440971][ T8115] usb 3-1: bad CDC descriptors [ 1641.482857][ T8115] usb 3-1: unsupported MDLM descriptors [ 1641.489136][ T8119] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1641.529794][ T8119] usb 5-1: device descriptor read/8, error -71 [ 1641.827450][T14127] usb 1-1: USB disconnect, device number 76 [ 1641.869026][ T8119] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1641.890251][ T8119] usb 5-1: device descriptor read/8, error -71 [ 1642.009400][ T8119] usb usb5-port1: unable to enumerate USB device [ 1642.415078][ T8519] netlink: 'syz.0.12711': attribute type 21 has an invalid length. [ 1642.446304][ T8519] netlink: 100 bytes leftover after parsing attributes in process `syz.0.12711'. [ 1642.601354][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1642.601370][ T30] audit: type=1326 audit(1775429419.715:3914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.1.12712" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1642.666505][ T8524] netlink: 'syz.1.12712': attribute type 1 has an invalid length. [ 1642.678486][ T30] audit: type=1326 audit(1775429419.725:3915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.1.12712" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1642.719225][ T30] audit: type=1326 audit(1775429419.725:3916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.1.12712" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1642.742427][ T30] audit: type=1326 audit(1775429419.725:3917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.1.12712" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1642.765372][ T30] audit: type=1326 audit(1775429419.755:3918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.1.12712" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1642.818123][ T30] audit: type=1326 audit(1775429419.755:3919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.1.12712" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1642.862461][ T30] audit: type=1326 audit(1775429419.785:3920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.1.12712" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1642.934189][ T30] audit: type=1326 audit(1775429419.785:3921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.1.12712" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1642.978987][ T30] audit: type=1326 audit(1775429419.785:3922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.1.12712" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1643.024148][ T30] audit: type=1326 audit(1775429420.045:3923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.1.12712" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1643.243908][ T8527] kvm: user requested TSC rate below hardware speed [ 1643.658640][ T8532] netlink: 'syz.4.12714': attribute type 21 has an invalid length. [ 1643.687162][ T8532] netlink: 100 bytes leftover after parsing attributes in process `syz.4.12714'. [ 1643.833631][ T8536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12715'. [ 1643.843366][ T8536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12715'. [ 1643.892696][ T8537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12715'. [ 1644.173058][T14127] usb 3-1: USB disconnect, device number 106 [ 1644.810713][ T8556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12719'. [ 1645.469036][T14127] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 1645.670021][T14127] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1645.831365][ T8119] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1645.857598][T14127] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1645.992150][T14127] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.006949][ T8567] kvm: user requested TSC rate below hardware speed [ 1646.029452][ T8119] usb 2-1: Using ep0 maxpacket: 16 [ 1646.034748][T14127] usb 6-1: Product: syz [ 1646.042706][T14127] usb 6-1: Manufacturer: syz [ 1646.057794][ T8119] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1646.066530][T14127] usb 6-1: SerialNumber: syz [ 1646.077726][ T8119] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1646.104811][T14127] usb 6-1: config 0 descriptor?? [ 1646.108550][ T8119] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1646.121523][ T8119] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00 [ 1646.132878][T14127] usb 6-1: bad CDC descriptors [ 1646.148890][T14127] usb 6-1: unsupported MDLM descriptors [ 1646.149083][ T8119] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.205467][ T8119] usb 2-1: config 0 descriptor?? [ 1646.282441][ T8575] netlink: 'syz.0.12725': attribute type 21 has an invalid length. [ 1646.301985][ T8575] netlink: 100 bytes leftover after parsing attributes in process `syz.0.12725'. [ 1646.481262][ T8565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1646.493782][ T8577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12726'. [ 1646.575457][ T8565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1646.854558][ T8119] hid-corsair-void 0003:1B1C:1B25.004F: unknown main item tag 0x0 [ 1646.893410][ T8119] hid-corsair-void 0003:1B1C:1B25.004F: unknown main item tag 0x0 [ 1646.960848][ T8119] hid-corsair-void 0003:1B1C:1B25.004F: unknown main item tag 0x0 [ 1647.111276][ T8119] hid-corsair-void 0003:1B1C:1B25.004F: unknown main item tag 0x0 [ 1647.179384][ T8119] hid-corsair-void 0003:1B1C:1B25.004F: unknown main item tag 0x0 [ 1647.269484][ T8119] hid-corsair-void 0003:1B1C:1B25.004F: hidraw0: USB HID v0.05 Device [HID 1b1c:1b25] on usb-dummy_hcd.1-1/input0 [ 1647.466781][ T8581] netlink: 'syz.0.12727': attribute type 1 has an invalid length. [ 1647.476166][ T8119] usb 2-1: USB disconnect, device number 83 [ 1647.504260][ T8581] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1647.563929][ T8583] bond3: (slave veth5): Enslaving as an active interface with a down link [ 1647.848190][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1647.848206][ T30] audit: type=1326 audit(1775429424.965:3925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.12729" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18f6c code=0x7ffc0000 [ 1647.888735][ T30] audit: type=1326 audit(1775429424.995:3926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.12729" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18f6c code=0x7ffc0000 [ 1647.913704][ T30] audit: type=1326 audit(1775429425.005:3927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.12729" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f18f6c code=0x7ffc0000 [ 1647.924335][ T3282] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1647.935937][ T30] audit: type=1326 audit(1775429425.005:3928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.12729" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18f6c code=0x7ffc0000 [ 1648.006285][ T30] audit: type=1326 audit(1775429425.005:3929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.12729" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f18f6c code=0x7ffc0000 [ 1648.028832][ T30] audit: type=1326 audit(1775429425.005:3930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.12729" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18f6c code=0x7ffc0000 [ 1648.051079][ T30] audit: type=1326 audit(1775429425.005:3931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.12729" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f18f6c code=0x7ffc0000 [ 1648.110190][ T30] audit: type=1326 audit(1775429425.005:3932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.12729" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18f6c code=0x7ffc0000 [ 1648.217673][ T30] audit: type=1326 audit(1775429425.005:3933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.12729" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f18f6c code=0x7ffc0000 [ 1648.240386][ T8594] netlink: 'syz.2.12729': attribute type 1 has an invalid length. [ 1648.261532][ T8600] netlink: 'syz.1.12731': attribute type 21 has an invalid length. [ 1648.280264][ T8600] netlink: 100 bytes leftover after parsing attributes in process `syz.1.12731'. [ 1648.302492][ T3282] usb 1-1: config index 0 descriptor too short (expected 10276, got 36) [ 1648.314712][ T3282] usb 1-1: config 242 has an invalid interface number: 240 but max is 0 [ 1648.325319][ T3282] usb 1-1: config 242 has an invalid descriptor of length 0, skipping remainder of the config [ 1648.337015][ T3282] usb 1-1: config 242 has no interface number 0 [ 1648.341134][ T30] audit: type=1326 audit(1775429425.365:3934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.12729" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18f6c code=0x7ffc0000 [ 1648.396638][ T8603] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1648.405088][ T3282] usb 1-1: config 242 interface 240 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1648.416865][ T3282] usb 1-1: config 242 interface 240 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1648.517260][ T3282] usb 1-1: config 242 interface 240 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1648.591070][ T3282] usb 1-1: config 242 interface 240 has no altsetting 0 [ 1648.623301][ T3282] usb 1-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 1648.651652][ T3282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.271996][ T8617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12734'. [ 1649.302635][ T8613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1649.342197][ T8613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1649.498565][ T8622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12736'. [ 1649.513329][ T8622] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12736'. [ 1649.533111][ T8622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12736'. [ 1650.119762][ T8636] netlink: 'syz.4.12741': attribute type 1 has an invalid length. [ 1650.422609][T20775] Bluetooth: hci2: command 0x0406 tx timeout [ 1650.695785][ T8119] usb 6-1: USB disconnect, device number 21 [ 1650.769086][ T7185] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1650.941854][ T7185] usb 2-1: device descriptor read/64, error -71 [ 1651.082106][T14127] usb 1-1: USB disconnect, device number 77 [ 1651.199175][ T7185] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1651.339072][ T7185] usb 2-1: device descriptor read/64, error -71 [ 1651.479602][ T7185] usb usb2-port1: attempt power cycle [ 1651.500624][ T8659] netlink: 'syz.0.12746': attribute type 21 has an invalid length. [ 1651.508552][ T8659] netlink: 100 bytes leftover after parsing attributes in process `syz.0.12746'. [ 1651.539167][ T8119] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1651.728775][ T8119] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1651.771237][ T8119] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1651.807475][ T8119] usb 6-1: Product: syz [ 1651.822353][ T8119] usb 6-1: Manufacturer: syz [ 1651.851404][ T7185] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1651.870359][ T8119] usb 6-1: SerialNumber: syz [ 1651.960357][ T7185] usb 2-1: device descriptor read/8, error -71 [ 1652.209243][ T7185] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1652.268878][ T7185] usb 2-1: device descriptor read/8, error -71 [ 1652.309529][T14127] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 1652.379460][ T7185] usb usb2-port1: unable to enumerate USB device [ 1652.474278][T14127] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1652.497062][T14127] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1652.508060][T14127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1652.517402][T14127] usb 5-1: Product: syz [ 1652.523415][T14127] usb 5-1: Manufacturer: syz [ 1652.528570][T14127] usb 5-1: SerialNumber: syz [ 1652.537784][ T8119] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1652.581584][ T8119] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1652.583316][T14127] usb 5-1: config 0 descriptor?? [ 1652.606632][ T8119] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1652.614192][T14127] usb 5-1: bad CDC descriptors [ 1652.630682][T14127] usb 5-1: unsupported MDLM descriptors [ 1652.676453][ T8119] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1652.740056][ T8119] usb 6-1: USB disconnect, device number 22 [ 1652.861639][ T7185] usb 5-1: USB disconnect, device number 73 [ 1652.921450][ T8670] kvm: user requested TSC rate below hardware speed [ 1653.188711][ T8675] tipc: Started in network mode [ 1653.203391][ T8675] tipc: Node identity 56ed2729e23, cluster identity 4711 [ 1653.239457][ T8675] tipc: Enabled bearer , priority 0 [ 1653.262103][ T8676] syzkaller0: entered promiscuous mode [ 1653.267606][ T8676] syzkaller0: entered allmulticast mode [ 1653.288690][ T8675] tipc: Resetting bearer [ 1653.296632][ T8674] tipc: Resetting bearer [ 1653.318238][ T8674] tipc: Disabling bearer [ 1653.419977][ T8682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12752'. [ 1653.611028][ T8686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12753'. [ 1653.653495][ T8690] kvm: user requested TSC rate below hardware speed [ 1654.039032][ T7185] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1654.064452][ T8696] netlink: 'syz.1.12757': attribute type 1 has an invalid length. [ 1654.165861][ T8696] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1654.201299][ T8698] bond4: (slave macvlan1): Enslaving as an active interface with a down link [ 1654.235251][ T7185] usb 6-1: config index 0 descriptor too short (expected 10276, got 36) [ 1654.266429][ T7185] usb 6-1: config 242 has an invalid interface number: 240 but max is 0 [ 1654.291659][ T7185] usb 6-1: config 242 has an invalid descriptor of length 0, skipping remainder of the config [ 1654.331608][ T7185] usb 6-1: config 242 has no interface number 0 [ 1654.338506][ T7185] usb 6-1: config 242 interface 240 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1654.366101][ T7185] usb 6-1: config 242 interface 240 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1654.397354][ T7185] usb 6-1: config 242 interface 240 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1654.427497][ T7185] usb 6-1: config 242 interface 240 has no altsetting 0 [ 1654.459146][ T7185] usb 6-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 1654.477229][ T7185] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1655.400214][ T8709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1655.431573][ T8709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1655.704443][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12765'. [ 1655.738498][ T8721] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12765'. [ 1655.783711][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12765'. [ 1656.371588][ T8119] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1656.389873][ C0] raw-gadget.2 gadget.4: ignoring, device is not running [ 1656.409457][ T3282] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1656.450866][ T8737] netlink: 'syz.2.12769': attribute type 1 has an invalid length. [ 1656.527985][ T8737] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1656.539027][ T8119] usb 5-1: device descriptor read/64, error -32 [ 1656.604194][ T8739] bond2: (slave veth5): Enslaving as an active interface with a down link [ 1656.618642][ T3282] usb 2-1: config index 0 descriptor too short (expected 10276, got 36) [ 1656.629151][ T3282] usb 2-1: config 242 has an invalid interface number: 240 but max is 0 [ 1656.637701][ T3282] usb 2-1: config 242 has an invalid descriptor of length 0, skipping remainder of the config [ 1656.648550][ T3282] usb 2-1: config 242 has no interface number 0 [ 1656.656286][ T3282] usb 2-1: config 242 interface 240 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1656.668335][ T3282] usb 2-1: config 242 interface 240 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1656.679418][ T3282] usb 2-1: config 242 interface 240 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1656.694728][ T3282] usb 2-1: config 242 interface 240 has no altsetting 0 [ 1656.704908][ T3282] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 1656.714631][ T3282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1656.788995][ T8119] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1656.964891][T14127] usb 6-1: USB disconnect, device number 23 [ 1656.979086][ T8119] usb 5-1: device descriptor read/64, error -71 [ 1657.081332][ T8744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12770'. [ 1657.105506][ T8119] usb usb5-port1: attempt power cycle [ 1657.282217][ T8746] bridge0: port 2(bridge_slave_1) entered disabled state [ 1657.289997][ T8746] bridge0: port 1(bridge_slave_0) entered disabled state [ 1657.333403][ T8752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1657.350681][ T8752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1657.358508][ T3282] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1657.479151][ T8119] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1657.487903][ T8746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1657.507028][ T8746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1657.550663][ T8119] usb 5-1: device descriptor read/8, error -71 [ 1657.559920][ T3282] usb 1-1: config index 0 descriptor too short (expected 10276, got 36) [ 1657.612581][ T3282] usb 1-1: config 242 has an invalid interface number: 240 but max is 0 [ 1657.626892][ T3282] usb 1-1: config 242 has an invalid descriptor of length 0, skipping remainder of the config [ 1657.640020][ T3282] usb 1-1: config 242 has no interface number 0 [ 1657.646517][ T3282] usb 1-1: config 242 interface 240 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1657.659634][ T3282] usb 1-1: config 242 interface 240 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1657.695442][ T3282] usb 1-1: config 242 interface 240 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1657.758268][ T3282] usb 1-1: config 242 interface 240 has no altsetting 0 [ 1657.797915][ T3282] usb 1-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 1657.829744][ T3282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.869849][ T8119] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1657.938013][ T49] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1657.951364][ T49] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.961517][ T49] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1657.971518][ T49] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.980813][ T8119] usb 5-1: device descriptor read/8, error -71 [ 1658.000418][ T49] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1658.030843][ T49] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.099499][ T8119] usb usb5-port1: unable to enumerate USB device [ 1658.113149][ T49] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1658.134502][ T49] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.402405][ T8760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1658.447692][ T8760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1658.461921][ T8119] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 1658.963750][ T8119] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1659.050686][ T8119] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1659.070288][ T8119] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.098742][ T8119] usb 6-1: Product: syz [ 1659.113371][ T8119] usb 6-1: Manufacturer: syz [ 1659.127256][ T8119] usb 6-1: SerialNumber: syz [ 1659.170860][ T8119] usb 6-1: config 0 descriptor?? [ 1659.213265][ T8119] usb 6-1: bad CDC descriptors [ 1659.238823][ T8119] usb 6-1: unsupported MDLM descriptors [ 1659.571671][T21305] usb 6-1: USB disconnect, device number 24 [ 1660.131949][ T8785] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12782'. [ 1660.156627][ T8115] usb 2-1: USB disconnect, device number 88 [ 1660.280449][T14127] usb 1-1: USB disconnect, device number 78 [ 1660.569631][ T8802] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12788'. [ 1660.642274][ T8800] tipc: Enabled bearer , priority 0 [ 1660.649929][ T8805] syzkaller0: entered promiscuous mode [ 1660.656173][ T8805] syzkaller0: entered allmulticast mode [ 1660.761667][ T8809] loop8: detected capacity change from 0 to 7 [ 1660.781659][ T4600] Dev loop8: unable to read RDB block 7 [ 1660.787263][ T4600] loop8: unable to read partition table [ 1660.803364][ T4600] loop8: partition table beyond EOD, truncated [ 1660.811325][ T8809] Dev loop8: unable to read RDB block 7 [ 1660.820946][ T8809] loop8: unable to read partition table [ 1660.831966][ T8805] tipc: Resetting bearer [ 1660.847367][ T8798] tipc: Resetting bearer [ 1660.855402][ T8809] loop8: partition table beyond EOD, truncated [ 1660.890004][ T8810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12789'. [ 1660.899858][ T8809] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1660.923985][ T8798] tipc: Disabling bearer [ 1661.145089][ T8818] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12791'. [ 1661.484355][ T8826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12796'. [ 1661.547091][ T8826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12796'. [ 1661.726766][ T8832] bond2: (slave macvlan1): Releasing active interface [ 1662.166430][ T8852] tipc: Enabled bearer , priority 0 [ 1662.184065][ T8855] netlink: 'syz.5.12804': attribute type 1 has an invalid length. [ 1662.216626][ T8855] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1662.227746][ T8852] syzkaller0: entered promiscuous mode [ 1662.244199][ T8855] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12804'. [ 1662.259104][ T8119] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 1662.259108][ T8852] syzkaller0: entered allmulticast mode [ 1662.297189][ T8852] tipc: Resetting bearer [ 1662.349686][ T8855] bond3: (slave macvlan1): Enslaving as an active interface with a down link [ 1662.379639][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1662.379655][ T30] audit: type=1326 audit(1775429439.505:3958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.1.12805" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1662.422712][ T8851] tipc: Resetting bearer [ 1662.469235][T21305] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 1662.488804][ T30] audit: type=1326 audit(1775429439.535:3959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.1.12805" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1662.523136][ T30] audit: type=1326 audit(1775429439.535:3960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.1.12805" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1662.564436][ T30] audit: type=1326 audit(1775429439.535:3961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.1.12805" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1662.564581][ T8119] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1662.564896][ T8851] tipc: Disabling bearer [ 1662.611922][ T30] audit: type=1326 audit(1775429439.535:3962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.1.12805" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1662.657423][ T30] audit: type=1326 audit(1775429439.535:3963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.1.12805" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1662.707646][ T30] audit: type=1326 audit(1775429439.535:3964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.1.12805" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1662.758715][ T30] audit: type=1326 audit(1775429439.535:3965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.1.12805" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1662.808489][ T8861] netlink: 'syz.1.12805': attribute type 1 has an invalid length. [ 1662.839609][ T30] audit: type=1326 audit(1775429439.535:3966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.1.12805" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1662.839800][T21305] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1662.889867][ T8119] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1662.902448][ T8119] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1662.943019][ T8119] usb 1-1: Product: syz [ 1662.947221][ T8119] usb 1-1: Manufacturer: syz [ 1662.974269][ T8119] usb 1-1: SerialNumber: syz [ 1662.996641][ T8119] usb 1-1: config 0 descriptor?? [ 1663.009170][ T30] audit: type=1326 audit(1775429439.935:3967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.1.12805" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1663.026129][ T8871] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12807'. [ 1663.096735][T21305] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1663.111712][ T8119] usb 1-1: bad CDC descriptors [ 1663.121022][ T8119] usb 1-1: unsupported MDLM descriptors [ 1663.142956][T21305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.183454][T21305] usb 5-1: Product: syz [ 1663.187640][T21305] usb 5-1: Manufacturer: syz [ 1663.201426][ T8875] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12808'. [ 1663.213881][T21305] usb 5-1: SerialNumber: syz [ 1663.240204][T21305] usb 5-1: config 0 descriptor?? [ 1663.366952][T21305] usb 5-1: bad CDC descriptors [ 1663.376611][T21305] usb 5-1: unsupported MDLM descriptors [ 1663.678809][T21305] usb 5-1: USB disconnect, device number 78 [ 1664.076987][ T8884] bond4: (slave macvlan1): Releasing active interface [ 1664.247892][ T8891] netlink: 'syz.5.12814': attribute type 1 has an invalid length. [ 1664.300251][ T8893] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12814'. [ 1664.347082][ T8891] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1664.420846][ T8894] bond3: (slave macvlan1): Releasing active interface [ 1664.445865][ T8894] bond4: (slave macvlan1): Enslaving as an active interface with a down link [ 1664.774211][ T8119] usb 1-1: USB disconnect, device number 79 [ 1664.873118][ T8917] kvm: user requested TSC rate below hardware speed [ 1665.028413][ T8923] netlink: 'syz.2.12822': attribute type 1 has an invalid length. [ 1665.618103][ T8935] __nla_validate_parse: 4 callbacks suppressed [ 1665.618121][ T8935] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12829'. [ 1665.960254][T21305] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1665.976779][ T8942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12831'. [ 1666.015974][ T8944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12832'. [ 1666.156324][ T8947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12832'. [ 1666.183520][T21305] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1666.199305][T21305] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1666.213052][T21305] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1666.237668][T21305] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.271490][T21305] usb 6-1: config 0 descriptor?? [ 1666.286225][T21305] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1666.406084][ T8958] netlink: 'syz.4.12833': attribute type 21 has an invalid length. [ 1666.414864][ T8958] netlink: 100 bytes leftover after parsing attributes in process `syz.4.12833'. [ 1666.521382][T21305] usb 6-1: USB disconnect, device number 25 [ 1666.777110][ T8961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12836'. [ 1666.801384][ T8961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12836'. [ 1666.834288][ T8961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12836'. [ 1667.009693][T21305] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1667.031141][ T8965] kvm: user requested TSC rate below hardware speed [ 1667.171221][T21305] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1667.209933][T21305] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1667.260803][T21305] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1667.317540][T21305] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1667.334033][T21305] usb 6-1: config 0 descriptor?? [ 1667.350960][T21305] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1667.468120][ T8974] fuse: Bad value for 'fd' [ 1668.049235][ T8115] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1668.166144][ T8991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12844'. [ 1668.253518][ T8115] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1668.294113][ T8115] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1668.335302][ T8115] usb 5-1: Product: syz [ 1668.354870][ T8115] usb 5-1: Manufacturer: syz [ 1668.374841][ T8115] usb 5-1: SerialNumber: syz [ 1668.680829][ T8999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12846'. [ 1668.830582][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.841547][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.045817][ T8115] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1669.076751][ T8115] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1669.112028][ T8115] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1669.161393][ T8115] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1669.241325][ T8115] usb 5-1: USB disconnect, device number 79 [ 1669.364966][T21305] usb 6-1: USB disconnect, device number 26 [ 1669.855842][ T9018] fuse: Bad value for 'fd' [ 1669.896629][ T9021] loop8: detected capacity change from 0 to 7 [ 1669.923242][ T9021] Dev loop8: unable to read RDB block 7 [ 1669.949004][ T9021] loop8: unable to read partition table [ 1669.974015][ T9021] loop8: partition table beyond EOD, truncated [ 1669.993981][ T9021] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1670.179304][ T9026] netlink: 'syz.1.12853': attribute type 21 has an invalid length. [ 1670.459049][T21305] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1670.591978][T21305] usb 6-1: device descriptor read/64, error -71 [ 1670.879267][T21305] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1671.029723][T21305] usb 6-1: device descriptor read/64, error -71 [ 1671.169509][T21305] usb usb6-port1: attempt power cycle [ 1671.182614][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 1671.182632][ T30] audit: type=1326 audit(1775429448.305:4027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.4.12861" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1671.227994][ T9046] netlink: 'syz.4.12861': attribute type 1 has an invalid length. [ 1671.281870][ T30] audit: type=1326 audit(1775429448.335:4028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.4.12861" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1671.362513][ T30] audit: type=1326 audit(1775429448.345:4029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.4.12861" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1671.419058][ T30] audit: type=1326 audit(1775429448.345:4030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.4.12861" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1671.498764][ T30] audit: type=1326 audit(1775429448.345:4031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.4.12861" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1671.549791][ T30] audit: type=1326 audit(1775429448.345:4032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.4.12861" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1671.582997][ T9049] kvm: user requested TSC rate below hardware speed [ 1671.599544][T21305] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1671.614050][ T30] audit: type=1326 audit(1775429448.345:4033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.4.12861" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1671.678726][ T30] audit: type=1326 audit(1775429448.345:4034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.4.12861" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1671.750727][T21305] usb 6-1: device descriptor read/8, error -71 [ 1671.774895][ T30] audit: type=1326 audit(1775429448.345:4035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.4.12861" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1671.818290][ T9052] netlink: 'syz.0.12863': attribute type 1 has an invalid length. [ 1671.829816][ T30] audit: type=1326 audit(1775429448.345:4036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.4.12861" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1671.903657][ T9052] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1671.991581][ T9055] bond4: (slave veth7): Enslaving as an active interface with a down link [ 1672.043292][ T9056] bond2: (slave macvlan1): Releasing active interface [ 1672.059173][T21305] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1672.083495][ T9056] bond4: (slave macvlan1): Enslaving as an active interface with a down link [ 1672.100207][T21305] usb 6-1: device descriptor read/8, error -71 [ 1672.149738][ T9060] tipc: Started in network mode [ 1672.156349][ T9060] tipc: Node identity f2835e6769d, cluster identity 4711 [ 1672.165773][ T9060] tipc: Enabled bearer , priority 0 [ 1672.175760][ T9060] syzkaller0: entered promiscuous mode [ 1672.182925][ T9060] syzkaller0: entered allmulticast mode [ 1672.198361][ T9059] tipc: Resetting bearer [ 1672.222568][T21305] usb usb6-port1: unable to enumerate USB device [ 1672.249462][ T9059] tipc: Disabling bearer [ 1672.845575][ T9071] netlink: 'syz.0.12866': attribute type 21 has an invalid length. [ 1672.894318][ T9071] __nla_validate_parse: 6 callbacks suppressed [ 1672.894340][ T9071] netlink: 100 bytes leftover after parsing attributes in process `syz.0.12866'. [ 1673.022416][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12868'. [ 1673.315871][ T9082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12869'. [ 1673.988882][ T9096] kvm: user requested TSC rate below hardware speed [ 1674.030737][ T9097] bond0: (slave bond_slave_1): Releasing backup interface [ 1674.041325][ T9097] bond_slave_1: left promiscuous mode [ 1674.244823][ T9101] netlink: 'syz.5.12876': attribute type 1 has an invalid length. [ 1674.325593][ T9101] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1674.410549][ T8119] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1674.427032][ T9103] bond5: (slave veth5): Enslaving as an active interface with a down link [ 1674.477550][ T9101] bond4: (slave macvlan1): Releasing active interface [ 1674.592935][ T9101] bond5: (slave macvlan1): Enslaving as an active interface with a down link [ 1674.612758][ T8119] usb 2-1: Using ep0 maxpacket: 16 [ 1674.631002][ T8119] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1674.666983][ T9105] tipc: Enabled bearer , priority 0 [ 1674.694171][ T8119] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1674.712246][ T9105] syzkaller0: entered promiscuous mode [ 1674.728168][ T8119] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1674.737594][ T9105] syzkaller0: entered allmulticast mode [ 1674.759065][ T8119] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00 [ 1674.789341][ T9104] tipc: Resetting bearer [ 1674.789348][ T8119] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1674.791884][ T8119] usb 2-1: config 0 descriptor?? [ 1674.907668][ T9104] tipc: Disabling bearer [ 1675.052686][ T9099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1675.079561][ T9099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1675.314418][ T8119] hid-corsair-void 0003:1B1C:1B25.0050: unknown main item tag 0x0 [ 1675.337907][ T8119] hid-corsair-void 0003:1B1C:1B25.0050: unknown main item tag 0x0 [ 1675.367881][ T8119] hid-corsair-void 0003:1B1C:1B25.0050: unknown main item tag 0x0 [ 1675.388450][ T8119] hid-corsair-void 0003:1B1C:1B25.0050: unknown main item tag 0x0 [ 1675.414818][ T8119] hid-corsair-void 0003:1B1C:1B25.0050: unknown main item tag 0x0 [ 1675.447947][ T8119] hid-corsair-void 0003:1B1C:1B25.0050: hidraw0: USB HID v0.05 Device [HID 1b1c:1b25] on usb-dummy_hcd.1-1/input0 [ 1675.501565][ T9119] netlink: 'syz.2.12879': attribute type 21 has an invalid length. [ 1675.511261][ T9119] netlink: 100 bytes leftover after parsing attributes in process `syz.2.12879'. [ 1675.703492][ T8119] usb 2-1: USB disconnect, device number 89 [ 1676.048602][ T9127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12882'. [ 1676.079100][ T8115] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1676.239388][ T8115] usb 6-1: Using ep0 maxpacket: 8 [ 1676.284857][ T8115] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1676.330112][ T8115] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1676.394110][ T8115] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1676.454283][ T8115] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1676.517476][ T8115] usbtmc 6-1:16.0: bulk endpoints not found [ 1676.623723][ T9137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12885'. [ 1676.638521][ T9137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12885'. [ 1676.657035][ T9137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12885'. [ 1676.979164][ T8115] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1677.157745][ T8115] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1677.188458][ T8115] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1677.190789][ T9149] tipc: Started in network mode [ 1677.207478][ T9149] tipc: Node identity dedde96c901b, cluster identity 4711 [ 1677.217585][ T9149] tipc: Enabled bearer , priority 0 [ 1677.233019][ T8115] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1677.242572][ T8115] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1677.243096][ T9149] syzkaller0: entered promiscuous mode [ 1677.260988][ T9151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12890'. [ 1677.271426][ T9149] syzkaller0: entered allmulticast mode [ 1677.278243][ T8115] usb 2-1: config 0 descriptor?? [ 1677.302590][ T8115] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1677.328995][ T9148] tipc: Resetting bearer [ 1677.345790][ T9151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12890'. [ 1677.357790][ T9148] tipc: Disabling bearer [ 1677.503687][ T8115] usb 2-1: USB disconnect, device number 90 [ 1677.949239][ T8119] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1678.061154][ T9160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12893'. [ 1678.116657][ T8119] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1678.155464][ T8119] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1678.188310][ T8119] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1678.210211][ T8119] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1678.236630][ T8119] usb 2-1: config 0 descriptor?? [ 1678.247368][ T8119] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1678.443416][ T9166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12894'. [ 1678.851513][ T8119] usb 6-1: USB disconnect, device number 31 [ 1679.841539][ T9183] netlink: 48 bytes leftover after parsing attributes in process `syz.5.12899'. [ 1679.942632][ T9183] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12899'. [ 1680.249325][T14127] usb 2-1: USB disconnect, device number 91 [ 1680.415322][ T9190] tipc: Enabled bearer , priority 0 [ 1680.443778][ T9190] syzkaller0: entered promiscuous mode [ 1680.465213][ T9190] syzkaller0: entered allmulticast mode [ 1680.537909][ T9189] tipc: Resetting bearer [ 1680.611583][ T9189] tipc: Disabling bearer [ 1680.910474][ T9203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12904'. [ 1681.337912][ T9211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12909'. [ 1681.355475][ T9211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12909'. [ 1681.398975][ T9211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12909'. [ 1681.420505][ T8119] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1681.584341][ T9202] ªªªªªª: renamed from vlan0 [ 1681.589177][ T8119] usb 2-1: Using ep0 maxpacket: 8 [ 1681.603034][ T8119] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1681.629429][ T8119] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1681.666660][ T8119] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1681.696752][ T8119] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1681.746120][ T8119] usbtmc 2-1:16.0: bulk endpoints not found [ 1681.789416][T21305] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1681.961015][T21305] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1681.987394][T21305] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1682.035996][T21305] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1682.067848][T21305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1682.106005][T21305] usb 3-1: config 0 descriptor?? [ 1682.135687][T21305] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1682.344169][T14127] usb 3-1: USB disconnect, device number 107 [ 1682.849016][T14127] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1683.020630][T14127] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1683.045483][T14127] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1683.076047][T14127] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1683.109009][T14127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1683.137673][T14127] usb 3-1: config 0 descriptor?? [ 1683.150740][T14127] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1683.276351][ T9228] kvm: user requested TSC rate below hardware speed [ 1683.619757][T21305] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 1683.790930][T21305] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1683.805956][T21305] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1683.815647][T21305] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.823955][T21305] usb 6-1: Product: syz [ 1683.828358][T21305] usb 6-1: Manufacturer: syz [ 1683.837177][T21305] usb 6-1: SerialNumber: syz [ 1683.849611][T21305] usb 6-1: config 0 descriptor?? [ 1683.865223][T21305] usb 6-1: bad CDC descriptors [ 1683.872491][T21305] usb 6-1: unsupported MDLM descriptors [ 1684.081695][T21305] usb 6-1: USB disconnect, device number 32 [ 1684.196937][ T8119] usb 2-1: USB disconnect, device number 92 [ 1685.102422][ T8119] usb 3-1: USB disconnect, device number 108 [ 1685.440170][ T9261] netlink: 'syz.2.12925': attribute type 21 has an invalid length. [ 1685.500585][ T9261] netlink: 100 bytes leftover after parsing attributes in process `syz.2.12925'. [ 1685.612967][ T9268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12928'. [ 1685.789522][ T9268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12928'. [ 1685.836489][ T9274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12926'. [ 1686.109829][ T8119] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1686.165667][ T9268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12928'. [ 1686.312259][ T8119] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1686.321619][ T8119] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1686.333305][ T8119] usb 6-1: Product: syz [ 1686.337694][ T8119] usb 6-1: Manufacturer: syz [ 1686.347529][ T8119] usb 6-1: SerialNumber: syz [ 1686.979047][ T8119] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1687.022868][ T8119] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1687.083381][ T8119] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1687.104777][ T8119] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1687.146573][ T8119] usb 6-1: USB disconnect, device number 33 [ 1687.387357][ T9297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12934'. [ 1687.399316][ T9297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12934'. [ 1687.427596][ T9297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12934'. [ 1687.644582][ T9307] kvm: user requested TSC rate below hardware speed [ 1687.752594][ T9310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12937'. [ 1688.185914][ T9317] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12941'. [ 1688.398135][ T9321] fuse: Bad value for 'fd' [ 1688.420783][ T9319] tipc: Enabled bearer , priority 0 [ 1688.470611][ T9319] tipc: Resetting bearer [ 1688.535131][ T9318] tipc: Disabling bearer [ 1688.650671][ T8119] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1688.860649][ T8119] usb 5-1: Using ep0 maxpacket: 16 [ 1688.879854][ T8119] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1688.905554][ T8119] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1688.945962][ T8119] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1688.969052][ T8119] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00 [ 1689.003943][ T8119] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1689.042791][ T8119] usb 5-1: config 0 descriptor?? [ 1689.159252][ T8115] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1689.257390][ T9323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1689.269918][ T9323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1689.333201][ T8115] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1689.352512][ T8115] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1689.374192][ T8115] usb 1-1: Product: syz [ 1689.378415][ T8115] usb 1-1: Manufacturer: syz [ 1689.408283][ T8115] usb 1-1: SerialNumber: syz [ 1689.492886][ T8119] hid-corsair-void 0003:1B1C:1B25.0051: unknown main item tag 0x0 [ 1689.505296][ T8119] hid-corsair-void 0003:1B1C:1B25.0051: unknown main item tag 0x0 [ 1689.518482][ T8119] hid-corsair-void 0003:1B1C:1B25.0051: unknown main item tag 0x0 [ 1689.526703][ T8119] hid-corsair-void 0003:1B1C:1B25.0051: unknown main item tag 0x0 [ 1689.535206][ T8119] hid-corsair-void 0003:1B1C:1B25.0051: unknown main item tag 0x0 [ 1689.555309][ T8119] hid-corsair-void 0003:1B1C:1B25.0051: hidraw0: USB HID v0.05 Device [HID 1b1c:1b25] on usb-dummy_hcd.4-1/input0 [ 1689.696243][ T8118] hid-corsair-void 0003:1B1C:1B25.0051: failed to request battery (reason: -71) [ 1689.707883][ T3282] usb 5-1: USB disconnect, device number 80 [ 1689.716188][T21305] hid-corsair-void 0003:1B1C:1B25.0051: failed to request firmware (reason: -71) [ 1689.787658][ T9356] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1689.830709][ T9356] bond5: (slave veth3): Enslaving as an active interface with an up link [ 1689.846267][ T9356] bond5: (slave macvlan1): Enslaving as an active interface with an up link [ 1689.899048][ T8119] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1689.968063][ T9358] netlink: 'syz.5.12951': attribute type 21 has an invalid length. [ 1690.058639][ T8115] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1690.061919][ T8119] usb 3-1: config index 0 descriptor too short (expected 10276, got 36) [ 1690.088132][ T8115] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1690.098799][ T8115] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1690.143145][ T8115] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1690.188320][ T8119] usb 3-1: config 242 has an invalid interface number: 240 but max is 0 [ 1690.204407][ T8115] usb 1-1: USB disconnect, device number 80 [ 1690.261534][ T8119] usb 3-1: config 242 has an invalid descriptor of length 0, skipping remainder of the config [ 1690.318644][ T8119] usb 3-1: config 242 has no interface number 0 [ 1690.360850][ T8119] usb 3-1: config 242 interface 240 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1690.400192][ T8119] usb 3-1: config 242 interface 240 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1690.443640][ T8119] usb 3-1: config 242 interface 240 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1690.481738][ T8119] usb 3-1: config 242 interface 240 has no altsetting 0 [ 1690.503186][ T8119] usb 3-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 1690.622637][ T8119] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1690.916726][ T9371] __nla_validate_parse: 5 callbacks suppressed [ 1690.916742][ T9371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12960'. [ 1691.203866][ T9378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1691.233448][ T9378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1691.431919][ T9381] netlink: 'syz.1.12964': attribute type 1 has an invalid length. [ 1691.798671][ T9391] netlink: 'syz.4.12965': attribute type 21 has an invalid length. [ 1691.807265][ T9391] netlink: 100 bytes leftover after parsing attributes in process `syz.4.12965'. [ 1691.858594][ T9392] kvm: user requested TSC rate below hardware speed [ 1692.068859][ T9396] netlink: 'syz.1.12966': attribute type 21 has an invalid length. [ 1692.087330][ T9396] netlink: 100 bytes leftover after parsing attributes in process `syz.1.12966'. [ 1692.489297][ T8115] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1692.670932][ T8115] usb 1-1: Using ep0 maxpacket: 32 [ 1692.731086][ T8115] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1692.759002][T14127] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1692.821080][ T8115] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1692.930223][ T8115] usb 1-1: config 0 descriptor?? [ 1692.969925][T14127] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1692.980826][T14127] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.993365][T14127] usb 6-1: Product: syz [ 1693.002215][T14127] usb 6-1: Manufacturer: syz [ 1693.019143][T14127] usb 6-1: SerialNumber: syz [ 1693.071519][ T9406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12971'. [ 1693.302633][ T8115] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1693.313514][ T8115] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1693.383328][ T9411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12972'. [ 1693.399821][ T8115] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1693.437494][ T8115] usb 1-1: media controller created [ 1693.504541][ T9400] ------------[ cut here ]------------ [ 1693.510114][ T9400] usb 1-1: BOGUS control dir, pipe 80005180 doesn't match bRequestType c0 [ 1693.518635][ T9400] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1053/0x18b0, CPU#0: syz.0.12969/9400 [ 1693.524499][ T8115] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1693.529103][ T9400] Modules linked in: [ 1693.529187][ T9400] CPU: 0 UID: 0 PID: 9400 Comm: syz.0.12969 Tainted: G L syzkaller #0 PREEMPT(full) [ 1693.552589][ T9400] Tainted: [L]=SOFTLOCKUP [ 1693.556950][ T9400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1693.567115][ T9400] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 1693.572826][ T9400] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 1693.593139][ T9400] RSP: 0018:ffffc9000b9d7768 EFLAGS: 00010246 [ 1693.599249][ T9400] RAX: 0000000000000000 RBX: ffff88802a374500 RCX: 0000000080005180 [ 1693.607249][ T9400] RDX: ffff88802a97c600 RSI: ffffffff8c7f2a00 RDI: ffffffff901f15d0 [ 1693.615287][ T9400] RBP: 1ffff1100c35ac00 R08: 00000000000000c0 R09: 0000000000000000 [ 1693.623478][ T9400] R10: ffffc9000b9d7860 R11: fffff5200173af18 R12: ffff8880222b3100 [ 1693.631510][ T9400] R13: ffff888061ad6000 R14: 0000000080005180 R15: ffff88802a97c600 [ 1693.639534][ T9400] FS: 0000000000000000(0000) GS:ffff888125454000(0063) knlGS:00000000f5496b40 [ 1693.648475][ T9400] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1693.655158][ T9400] CR2: 0000000080069018 CR3: 0000000075fa2000 CR4: 00000000003526f0 [ 1693.663255][ T9400] Call Trace: [ 1693.666529][ T9400] [ 1693.669498][ T9400] ? __init_swait_queue_head+0xa9/0x150 [ 1693.675053][ T9400] usb_start_wait_urb+0x13f/0x5b0 [ 1693.680155][ T9400] ? rcu_is_watching+0x15/0xb0 [ 1693.684928][ T9400] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1693.690509][ T9400] ? trace_kmalloc+0x2a/0x110 [ 1693.695193][ T9400] usb_control_msg+0x234/0x3e0 [ 1693.700004][ T9400] dib0700_i2c_xfer+0xbb2/0xf80 [ 1693.704865][ T9400] __i2c_transfer+0x79a/0x2020 [ 1693.710303][ T9400] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1693.716117][ T9400] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1693.721984][ T9400] ? i2c_transfer+0xc8/0x2d0 [ 1693.726572][ T9400] i2c_transfer+0x1cc/0x2d0 [ 1693.731118][ T9400] i2cdev_ioctl_rdwr+0x460/0x740 [ 1693.736068][ T9400] compat_i2cdev_ioctl+0x59f/0x5c0 [ 1693.741231][ T9400] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 1693.746864][ T9400] ? __fget_files+0x3a0/0x420 [ 1693.751580][ T9400] ? __fget_files+0x2a/0x420 [ 1693.756176][ T9400] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1693.761792][ T9400] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1693.767274][ T9400] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1693.773364][ T9400] ? kmem_cache_free+0x187/0x630 [ 1693.778322][ T9400] ? __se_sys_futex_time32+0x3ab/0x440 [ 1693.784037][ T9400] ? rcu_is_watching+0x15/0xb0 [ 1693.788817][ T9400] __do_fast_syscall_32+0x20d/0x640 [ 1693.794145][ T9400] ? do_fast_syscall_32+0x33/0x70 [ 1693.799237][ T9400] ? asm_int80_emulation+0x1a/0x20 [ 1693.804358][ T9400] ? do_int80_emulation+0x274/0x4d0 [ 1693.809616][ T9400] ? trace_irq_disable+0x3b/0x150 [ 1693.814635][ T9400] do_fast_syscall_32+0x33/0x70 [ 1693.819601][ T9400] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1693.825928][ T9400] RIP: 0023:0xf7fd2f6c [ 1693.830048][ T9400] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1693.849698][ T9400] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1693.858125][ T9400] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 1693.866309][ T9400] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 1693.874390][ T9400] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1693.882439][ T9400] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1693.890460][ T9400] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1693.898465][ T9400] [ 1693.901547][ T9400] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1693.908830][ T9400] CPU: 0 UID: 0 PID: 9400 Comm: syz.0.12969 Tainted: G L syzkaller #0 PREEMPT(full) [ 1693.919758][ T9400] Tainted: [L]=SOFTLOCKUP [ 1693.924075][ T9400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1693.934134][ T9400] Call Trace: [ 1693.937417][ T9400] [ 1693.940350][ T9400] vpanic+0x56c/0xa60 [ 1693.944329][ T9400] ? __pfx__printk+0x10/0x10 [ 1693.948908][ T9400] ? __pfx_vpanic+0x10/0x10 [ 1693.953428][ T9400] ? is_bpf_text_address+0x292/0x2b0 [ 1693.958725][ T9400] ? is_bpf_text_address+0x26/0x2b0 [ 1693.963947][ T9400] panic+0xc5/0xd0 [ 1693.967677][ T9400] ? __pfx_panic+0x10/0x10 [ 1693.972210][ T9400] __warn+0x315/0x4f0 [ 1693.976196][ T9400] ? usb_submit_urb+0x1053/0x18b0 [ 1693.981218][ T9400] ? usb_submit_urb+0x1053/0x18b0 [ 1693.986246][ T9400] __report_bug+0x29a/0x540 [ 1693.990753][ T9400] ? unwind_get_return_address+0x4d/0x90 [ 1693.996386][ T9400] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1694.002555][ T9400] ? usb_submit_urb+0x1053/0x18b0 [ 1694.007577][ T9400] ? __pfx___report_bug+0x10/0x10 [ 1694.012595][ T9400] ? __pfx_stack_trace_save+0x10/0x10 [ 1694.017973][ T9400] report_bug_entry+0x19a/0x290 [ 1694.022983][ T9400] ? usb_submit_urb+0x1115/0x18b0 [ 1694.028030][ T9400] ? usb_submit_urb+0x111a/0x18b0 [ 1694.033044][ T9400] handle_bug+0xce/0x200 [ 1694.037307][ T9400] exc_invalid_op+0x1a/0x50 [ 1694.041824][ T9400] asm_exc_invalid_op+0x1a/0x20 [ 1694.046677][ T9400] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 1694.052416][ T9400] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 1694.072043][ T9400] RSP: 0018:ffffc9000b9d7768 EFLAGS: 00010246 [ 1694.078119][ T9400] RAX: 0000000000000000 RBX: ffff88802a374500 RCX: 0000000080005180 [ 1694.086096][ T9400] RDX: ffff88802a97c600 RSI: ffffffff8c7f2a00 RDI: ffffffff901f15d0 [ 1694.094094][ T9400] RBP: 1ffff1100c35ac00 R08: 00000000000000c0 R09: 0000000000000000 [ 1694.102074][ T9400] R10: ffffc9000b9d7860 R11: fffff5200173af18 R12: ffff8880222b3100 [ 1694.110042][ T9400] R13: ffff888061ad6000 R14: 0000000080005180 R15: ffff88802a97c600 [ 1694.118054][ T9400] ? usb_submit_urb+0x10a4/0x18b0 [ 1694.123175][ T9400] ? __init_swait_queue_head+0xa9/0x150 [ 1694.128722][ T9400] usb_start_wait_urb+0x13f/0x5b0 [ 1694.133745][ T9400] ? rcu_is_watching+0x15/0xb0 [ 1694.138513][ T9400] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1694.144072][ T9400] ? trace_kmalloc+0x2a/0x110 [ 1694.148765][ T9400] usb_control_msg+0x234/0x3e0 [ 1694.153525][ T9400] dib0700_i2c_xfer+0xbb2/0xf80 [ 1694.158415][ T9400] __i2c_transfer+0x79a/0x2020 [ 1694.163182][ T9400] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1694.168985][ T9400] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1694.174823][ T9400] ? i2c_transfer+0xc8/0x2d0 [ 1694.179418][ T9400] i2c_transfer+0x1cc/0x2d0 [ 1694.183935][ T9400] i2cdev_ioctl_rdwr+0x460/0x740 [ 1694.188990][ T9400] compat_i2cdev_ioctl+0x59f/0x5c0 [ 1694.194112][ T9400] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 1694.199754][ T9400] ? __fget_files+0x3a0/0x420 [ 1694.204458][ T9400] ? __fget_files+0x2a/0x420 [ 1694.209081][ T9400] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1694.214647][ T9400] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1694.220128][ T9400] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1694.226194][ T9400] ? kmem_cache_free+0x187/0x630 [ 1694.231145][ T9400] ? __se_sys_futex_time32+0x3ab/0x440 [ 1694.236618][ T9400] ? rcu_is_watching+0x15/0xb0 [ 1694.241396][ T9400] __do_fast_syscall_32+0x20d/0x640 [ 1694.246607][ T9400] ? do_fast_syscall_32+0x33/0x70 [ 1694.251635][ T9400] ? asm_int80_emulation+0x1a/0x20 [ 1694.256749][ T9400] ? do_int80_emulation+0x274/0x4d0 [ 1694.262102][ T9400] ? trace_irq_disable+0x3b/0x150 [ 1694.267316][ T9400] do_fast_syscall_32+0x33/0x70 [ 1694.272163][ T9400] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1694.278499][ T9400] RIP: 0023:0xf7fd2f6c [ 1694.282572][ T9400] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1694.302225][ T9400] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1694.310666][ T9400] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 1694.318667][ T9400] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 1694.326667][ T9400] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1694.334647][ T9400] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1694.342611][ T9400] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1694.350619][ T9400] [ 1694.353990][ T9400] Kernel Offset: disabled [ 1694.358344][ T9400] Rebooting in 86400 seconds..