last executing test programs: 27m4.052084875s ago: executing program 32 (id=255): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r5, 0x0, r7, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r6, 0x407, 0x100004) write$eventfd(r6, &(0x7f0000000240), 0xffffff14) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) read(0xffffffffffffffff, &(0x7f00000000c0)=""/154, 0x9a) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) 25m40.367601294s ago: executing program 1 (id=522): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf253400000008000300", @ANYRES32=r2, @ANYBLOB="03000000020000000180000014df3a070fcecf"], 0x3c}, 0x1, 0x0, 0x0, 0x20050004}, 0x20040000) 25m40.020550009s ago: executing program 1 (id=526): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8b, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_getlink={0x20, 0x12, 0x301, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x8a6b, 0x11530}}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) 25m39.364973407s ago: executing program 1 (id=533): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB="0a000100bb"], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) 25m36.654086474s ago: executing program 1 (id=539): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r3, r4, 0x2c, 0x10000) io_uring_enter(r2, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) 25m31.812362064s ago: executing program 6 (id=547): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x2000000000000390, &(0x7f0000001300)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(0xffffffffffffffff, &(0x7f0000004d80)={0x2020}, 0x2020) 25m31.797787908s ago: executing program 1 (id=548): r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe, 0x1000000}) 25m31.499259074s ago: executing program 1 (id=549): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x1010000, &(0x7f0000000280)={[{@utf8no}, {@shortname_winnt}, {@uni_xlate}, {@shortname_lower}, {@fat=@nfs_nostale_ro}, {@utf8no}, {@shortname_lower}, {@shortname_win95}, {@shortname_win95}, {@uni_xlateno}, {@utf8no}, {@uni_xlate}, {@utf8no}, {@utf8no}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]}, 0x1, 0x384, &(0x7f0000000540)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 25m31.433018102s ago: executing program 6 (id=550): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='scalable', 0x8) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000100)=""/24, 0xfffffffffffffd5b, 0xc9100120, 0x0, 0xfffffffffffffd25) 25m29.946933204s ago: executing program 6 (id=555): r0 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 25m27.965393131s ago: executing program 6 (id=559): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB="0a000100bb"], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) 25m27.513759667s ago: executing program 6 (id=561): socket$packet(0x11, 0xa, 0x300) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x27, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) dup(r0) dup(r0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r1], 0x7) 25m26.064025493s ago: executing program 6 (id=564): syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000008260001080006040003000000000000ac1414bbbbbbbbbbbbbbac14"], 0x0) r0 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_int(r0, 0x1, 0xf, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$PIO_SCRNMAP(r5, 0x4b41, &(0x7f0000000100)) 25m20.06633473s ago: executing program 33 (id=540): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1d) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, 0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 25m16.449261432s ago: executing program 34 (id=549): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x1010000, &(0x7f0000000280)={[{@utf8no}, {@shortname_winnt}, {@uni_xlate}, {@shortname_lower}, {@fat=@nfs_nostale_ro}, {@utf8no}, {@shortname_lower}, {@shortname_win95}, {@shortname_win95}, {@uni_xlateno}, {@utf8no}, {@uni_xlate}, {@utf8no}, {@utf8no}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]}, 0x1, 0x384, &(0x7f0000000540)="$eJzs3U1o2+UfAPBv+stLN/5/25tMEKI3Qce2m17ckA6GvagEXw5iYJ1KUoUWy7bDsnpQPAoe9eRNRQ8exJsiKOLBm3hzgkzFg+42cPhIfi9JmmTdGK5S/Hxok2+fl+/z/J6kya8hefrc8eidbsSZK1cux+JiLerHHzkeV2uxHFlULsas5pwyAGB/uJpS/JEK03WL+deM2t7MDAC4XfLn/+cjoh3LRcmrX+7WPnn2B4B9r/z7/8Bubea9CJB7+bZMCQC4zWZe/793R3Uz/65XP9Yn3hUAAOxXTzz9zKMnViMeb7cXI9Zf3+psdeKhcf2JM/Fi9GMtjsRSXIsoThSGF7X88uSp1ZUj7XZ7ED8vRyciFsqOneJM4USW91+Ko7EUy2X/8mwjpZSd/Hh15Wg7FxEXB/n4sV7b6jTiYDn+DwdjbXziUSXJryJOra4ca5cJOutV/0HE9viNCv1Ya5RhlSal6h2MqysXjlaTHvff6rTi9GgVrvsKCAAAAAAAAAAAAAAAAAAAAAAA3JLD7ZHl0f45aXhd7JRz+PCc+nx/nKJ/uT/QdrE/UGqlSOn3sw903shix/5A0/vzbNlIEAAAAAAAAAAAAAAAAAAAAEY2zzWj2++vbWyeO9+bDAYbm+cWImJY8tLXH35xIGbbzAZn/1ekzUvqRdyKGA3RLoc93+umrOqVsojZhNkwTVXy3id5t8WIHdNojY5i7nxa16/q9/9/z09vn+8d+qzIcHdWZf5r3CaL+UeaTUzj4anM63cUCW+wUPODY5MlrdnRL6WUJkpem+x+4dk8+DYmFjNqEfWbuuGmgoW4fps0DL66/MKhavW7n6fCffcvPXnprXd/7XX7w5HzO0K/ubF5LfW6tarxTYxepkv5TVAczvcfRNSiaFOlyhvXd0u4vbOkm33321N3vfnNDRahXLE0WfXK8P481TgrDuej6TzNIhhOc6rqwLh7I6rflMacO/+Nglu4Te9859P3U/rxl5seYmxh5mGj9k889gAAAAAAAAAAAAAAAAAAADuNP/Qb5YeuB0VFY7deDz62R9MDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD0x/v//E8H2xRgGS3Oqdgn+HMRsVWttYzOi+W8fJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/3F/BwAA//+BfF1W") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 25m10.731926715s ago: executing program 35 (id=564): syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000008260001080006040003000000000000ac1414bbbbbbbbbbbbbbac14"], 0x0) r0 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_int(r0, 0x1, 0xf, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$PIO_SCRNMAP(r5, 0x4b41, &(0x7f0000000100)) 16m57.247652627s ago: executing program 5 (id=2264): r0 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "00005865000204000000000b000b0b00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 16m56.537063583s ago: executing program 5 (id=2265): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x8040480) socket$unix(0x1, 0x1, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r3 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r4, 0x5) sendmmsg(r4, &(0x7f0000000f80)=[{{&(0x7f00000000c0)=@generic={0x1a, "8ead12f3204136ed89addf0299a1050227009ece8cc8f5e2e19b6ef3a37cabe92c41950febc335afefd0de5a26050a1d446f3d7a3f355eb7081fd2d27a338eb244db33d3125f6855e6eb1cc3300fcc45237210665f52077cede3f765bcda4456af2ca71496cb87d016453db08df170efd2a6c3a9430398204fcc9e3bb355"}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000240)="e25d910aea9cec3fe4a734f6ebd76570eba1cc870361fedc2c2307482d9790e29a576565d6ea72175da6a945dec9f0230a074f34db0108c4acbc19ff3f00e84e8d05ae72f2f97df685ea65c5a611f98848acbc28f65a2bfe66126b669a2c9d60c73e00"/119, 0x1}], 0x100000000000002a}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="880000000000000084000000420000000b00000018a6ed2a697af1301b7252f96eac068ecfeacd2c8f07d625d6b5966e74e6e8188c726fb0eb5f7a719193b10667bc7e4a5486d7632298e05b7e0c365c4ab182db4b74af3bf8fa451f886b9cbb8273a9fdba7b2f396da71195393b2795010000000000595604cf43000000000000000000000c"], 0x88}}], 0x2, 0xc8844) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x1}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) 16m54.672136915s ago: executing program 5 (id=2271): syz_usb_connect(0x5, 0xf4, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x0) 16m51.412241783s ago: executing program 5 (id=2291): r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x80000015}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r3}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r3], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r5, r4, r4], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 16m51.144884289s ago: executing program 5 (id=2294): socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0) 16m49.68567488s ago: executing program 5 (id=2299): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000380)={0x0, 0x6}, 0x8) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x60000, 0x4, 0x10000, 0x7}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r3, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = accept4(r3, 0x0, 0x0, 0x0) sendto(r6, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r5, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) 16m34.272405403s ago: executing program 36 (id=2299): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000380)={0x0, 0x6}, 0x8) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x60000, 0x4, 0x10000, 0x7}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r3, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = accept4(r3, 0x0, 0x0, 0x0) sendto(r6, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r5, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) 7m28.620357171s ago: executing program 8 (id=4425): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 7m26.89005978s ago: executing program 8 (id=4431): syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x105, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x80) 7m22.600999303s ago: executing program 8 (id=4444): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = epoll_create1(0x80000) ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000000)=0x10) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000400)={0xa000001c}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x20000020) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4c}}, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000001c0)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x20}, {@in=@local, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}}, 0xf0}}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)=0x2) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100)=0x10001) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) 7m20.476517894s ago: executing program 8 (id=4449): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, 0x0, 0x8, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x48080) 7m20.079688863s ago: executing program 8 (id=4450): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x22f0}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x4, 0x100}}}}}}}}, 0x3e) 7m19.554166086s ago: executing program 8 (id=4453): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) kcmp(r0, r0, 0x4, r2, 0xffffffffffffffff) socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) 7m3.619221196s ago: executing program 37 (id=4453): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) kcmp(r0, r0, 0x4, r2, 0xffffffffffffffff) socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) 1m54.53921544s ago: executing program 3 (id=5876): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x20004010}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c000480280001800e000100636f6e6e6c696d697400000014000280080001400000000908000240100000010900010073797a30000000000900020073797a32"], 0x80}}, 0x0) 1m54.3882587s ago: executing program 3 (id=5878): syz_usb_connect(0x2, 0x9c2, &(0x7f00000025c0)={{0x12, 0x1, 0x201, 0x9, 0x4a, 0x68, 0x8, 0x6cd, 0x10b, 0x7e2f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b0, 0x4, 0x6, 0x2, 0xa0, 0xf3, "", [{{0x9, 0x4, 0xd9, 0x9, 0x1, 0xb7, 0xfa, 0x97, 0x4, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "b4368ec1"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xff, 0x101, 0x7ff, 0x8}, [@mdlm_detail={0x5d, 0x24, 0x13, 0x6, "3579317b979b30400540cc633d1bcd137283f0dbbe9ba97899d978f060575c9db103efadfdec33148161e9597dd6dd000783f7686ac824826b150b5b5361a74e50211aa767e2cc09f7ad408f92b5396fe6a096004c94d5130b"}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0xcc, 0x1, 0x4}, @ncm={0x6, 0x24, 0x1a, 0x7, 0x2}, @obex={0x5, 0x24, 0x15, 0x1}, @country_functional={0xa, 0x24, 0x7, 0xfb, 0x44e, [0x19, 0x0]}]}], [{{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x5, 0x4}}]}}, {{0x9, 0x4, 0x98, 0x1, 0x4, 0x85, 0x8a, 0x1f, 0x2, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "95726a0b2930"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0x1, 0x3da, 0x9}, {0x6, 0x24, 0x1a, 0xfffe, 0xa}, [@mdlm_detail={0xd5, 0x24, 0x13, 0x1, "dec4526a5e23762e6a8130af2722965c80bc450afc022b9840f350f127bd600e5e3a15d4ba34dec5a7d7faaf9f34c3a4760860654058f567c38565a82db11ab0601fc41c9858015b60e0782da0f3926b4835f3531b83566eaa6b488d0e41dbf322bb10ed6f27136ee832193fac2b3cb3430a7507a76d4ed66f6c793c087141b4d637acc3551349d535696f2086377edd3dbc4c4beda78b246e06c36e4a325b2e58bc0ec93d50172f95ec0adcfc8721754b02909eb4535e18bcfc6cc342814217053c98d82388b85977eb106258d6bba7c1"}, @mbim={0xc, 0x24, 0x1b, 0x4, 0xffff, 0xe, 0x6, 0x6, 0x5}, @obex={0x5, 0x24, 0x15, 0xfffd}, @country_functional={0x6, 0x24, 0x7, 0xe5, 0x1e48}, @country_functional={0x6, 0x24, 0x7, 0x7, 0x8001}]}], [{{0x9, 0x5, 0xa, 0x4, 0x3ff, 0xb, 0x0, 0x6d}}, {{0x9, 0x5, 0x0, 0x1, 0x10, 0x10, 0xaf, 0x9, [@generic={0x99, 0x23, "a40da871d589b85f5e797c7021cbb83532d2abee598636123e088e8bb9f03309a54cb4ca6d0071cca1efb9e21e3bc9101a82ded8dd833b5008a25d649b8a0794808816dd8dcf4303c29519df8e2b77e0bf607fbde4cdcd1ffbd27996ba73ed46cedc8edd2fc58ac1c34eebed749157c2e6af9b2a5f92ecfbc676b32315bbe062a550dcd1eb6ea36809240e41dd1a683257cff1b2a47ff7"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x8, 0xc6, 0xc, 0x3, [@generic={0xba, 0x21, "6689fb6d24b6d972e54e92e357898cf422daddfb4f7eadb17a13ee09066174ee73169e951bac8561c9c43324fd00cd9a709a63f70314d609a761dec410fc6b05757b67a68e51ecd3f954a418de98f60ac34c5bf893ef301f412b82731e615a4aea6b41928fef8682a7141c9aa4eea391b07c35b810d03e50336fa632ed97048dbc773c810b91497cee832fca3e20feb9833e6546b7a9cc89c2d949e315d76bc0751263ca87198cb8f6eea83e0d463e732d622da1ae01b505"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x6, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x8}]}}]}}, {{0x9, 0x4, 0xed, 0x3a, 0x8, 0xed, 0x6c, 0xda, 0xbf, [], [{{0x9, 0x5, 0x4, 0x1, 0x20, 0x9, 0x4, 0x9, [@generic={0x4e, 0x11, "3725e212b74550c9fcc22035c238b4df630824659ac1b38d846a3715646e27b211dda2f4b541c1fd13e2f138a1667b5edbfb66f4a349ab732b8d8922a82aadce14cd45f11784cfbaa4d60c03"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x5}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x84, 0x8, 0x7}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x3, 0xc8, 0xff}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x9, 0x30, 0x8a, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x7}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x8, 0x0, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x8f9}]}}, {{0x9, 0x5, 0x4, 0x1, 0x200, 0x2, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x6}]}}, {{0x9, 0x5, 0x2, 0xc, 0x40, 0xcd, 0x1, 0x3}}, {{0x9, 0x5, 0xf, 0x2, 0x3ff, 0xc4, 0xa4, 0x22, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xd, 0x3}]}}]}}, {{0x9, 0x4, 0xa7, 0xe9, 0xc, 0x63, 0x7d, 0x16, 0x5, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x1, 0x10, 0x1}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x9f, 0x1, 0x5f, 0x80}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x1, 0x79, 0x8, "", "ad7bf0"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x101, 0x8c, 0x2}, @as_header={0x7, 0x24, 0x1, 0x1, 0x67, 0x1001}]}, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, 'V'}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xe, 0x4, 0x0, 0x7}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0xfd}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x4}]}], [{{0x9, 0x5, 0xc, 0x8, 0x40, 0x3, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x40}, @generic={0xac, 0xe, "ccc149bbb8f744bfd5396506b785253dad1c7600c3a83c833ea531637c8fff6c38bb08827882b343fc86023587faae5f5f869e5331d4b1dff8aeba05ab119c62a4cf580cdc0e847fad3900c160cd68fd40f300bdc621b88260330c0694230aa917603cfdb355a9798af6d06c0f12d2775f8ef95585f3254f433c18dd401531f5b66963a52a7cb155b2dfef5b4b25dd74cf2fe2e55cbd3381281b82b2140d8191d5838c2fabc41ffda54d"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x210, 0x80, 0x6, 0x5}}, {{0x9, 0x5, 0x4, 0x8, 0xb861e034151044e9, 0x6, 0x1, 0x7, [@generic={0x51, 0x4, "0b1717462cc8cfece60114b1bf4c951de2714b0826c459f32d394984429fd3aa06e3bcd44967103bf0112ca21849177852e3bcf64474a256c90d6a2bdb6d3c5e07120fa7d89ae63ac7fb4fe36e2074"}, @generic={0x6, 0xa, "4d45015d"}]}}, {{0x9, 0x5, 0x6583255207bf9a2f, 0x10, 0x20, 0x0, 0x6, 0x5}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x25, 0x6, 0xe3}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x6, 0xd, 0x4, [@generic={0xfc, 0x22, "d98897360aec40c71092e36dfa453bb5b7e6696719ac4c2b32a37067abd6fbc4474ac97fc924e7b8d680a9d536954638f577592874cfe4d2ac77a1971b3feaa63919fa6a98f627c8c2c57ceced5f33d4dba7c91b90fc9eb3d36f353bf5fa72141354e7d99d2cb60e9eff5c54667c8b36bc4dec6e9a9f57efe8e6d251f0eb06e0679a9d931584e29cdd1a5702569b9bc193016ac9c3fb670525824467bc5351cd1108881920c1ba0ef27303d69dabd39700ba550c11588877d21cb2a9a63f646bb27d43aaa89e23e002190a2eef604224236e39e89377816c5c6782622b8c20bc4e09aea6a850e38e75229c0eecfcf7cc1036a9037db411f2800b"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x20, 0xb4, 0x3, 0x7f, [@generic={0xb9, 0x24, "3cd98fb65ce8640972b9a15c613f5e6a72c77bd57b03d71322a6874a05c5291e52358caa9dea6785c0852328f1c377d5e5dd1a673d44d3ae59f63998d1034ef051c7610b2de6a5ec03935d48b635e9efd053924250ebb41f78dd3e72a895b31389cc6ec8f46677c069daab0b698942ad1e4a1451abdccbba1d6a033e33434df44e3fd2e7f1077f1c6baf0d36a83953e1c2c7d5ae3ea42c59fa9ac73090d90de185fcf5dfbc5e6b33a7661ab9e12f759755958dc220f007"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x9, 0x81, 0x7}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x7, 0xf8, 0x5d, [@generic={0xed, 0xe, "bfca7b9be2a6dc583b1abac299e8ecd24f0354ac0fff0631c48acb5eef7cfb10c8d16699f9e970ce53c739aed28656fd2fa183862a60551489309ac996b3c4476818649d006d1ce807a805556592c7f07fd487ba355ab8e00d575819495c6a3f34447a7c34b9501cb62a08c135c94d13d4b9e18a2b6db2403dadc712ee6201f6eaf610c35ba788e20a78739f913709586272081ff5be6ad0ce85a5dbee52a7a508a8bc4da7c99c6501644c422bb54e0143bbc7965acdf3969437ab475205f95705c0c1971034e8ab11a4bdce22f4fbb4196c08bd52f9190da28cf7a416c06afb709a336624944a9890d65b"}, @generic={0x35, 0x23, "42b27fe59a85da065393d1ad1a998892fcd33653551f9b16e1e71761e5db01ee9f091c8e6fd0bc86172a1b4a185f70c0a2b5bd"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x3ff, 0xfb, 0xf, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xd, 0x8}]}}, {{0x9, 0x5, 0xc, 0xc, 0x40, 0x3, 0x4, 0x40}}, {{0x9, 0x5, 0xc, 0x4, 0x8, 0x8, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x7}, @generic={0xea, 0x0, "c0f870bc1f75fdb42b91de82b0f05b3d92ac1efa5cdeb5ec196cba09f4c1a9d86fdb20263cbc8bfbae6cb12cb104c08f026eb55a483a57ed7077eb8cf83ae85dbafc0c91cb00feaa0c1310c5cea1a4aaed1528ec69f9d63402b5332f6c6b5b0001b2c8af75c556e4463afaf9eb67fbc9fd295169c3157610a3b2db4595322b05527dee53c2b3615050021a6938937eb48cccd42c8cc1fcc8c7bba5ad06ab224fb8c85059ce407d03dbd8be2ef486afde20eb67bbcdd3113287d0d13364ab3d9da9277c0637eae637ac532161dd98b09eff1891fd40adfa0854aade8713c699070d9bcf5fc988edd1"}]}}]}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x807}}, {0x6d, &(0x7f00000000c0)=@string={0x6d, 0x3, "292c1668a7746cc22aabca529f11e20c5a30cf3542085e0f4c6c052d912609521bc6439dca189b519b0d348acc4cd32da1a65a1abdfb4a3861be506796d244560c6b2c5de5d187fd12d9efb47d654544ffa92b0606bed758f86f6940a8fff8f0943d16e162f9a88c1ccfee"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x40c}}, {0xd, &(0x7f0000000180)=@string={0xd, 0x3, "ca4ec8804a52638c734d6b"}}]}) 1m53.825820098s ago: executing program 9 (id=5883): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 1m53.813307255s ago: executing program 0 (id=5884): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x31008003, 0xfffe}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r4, 0x0) 1m53.423094615s ago: executing program 0 (id=5886): syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587"], 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kexec_load(0x0, 0x0, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) bind$xdp(r3, &(0x7f0000000100), 0x10) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000019440)=[{0x0}], 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x5}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x2000000000000, 0x3, 0xfffffffffffffffd, 0x544}, {0x8}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) 1m52.520534111s ago: executing program 9 (id=5888): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x36}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xe, 0x0, &(0x7f00000001c0)="0101000871a7832e6b7303c3cd59", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 1m52.280639869s ago: executing program 9 (id=5889): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000008c0)="be", 0x1}, {0x0}], 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002"], 0x20, 0x6054}, 0x4008092) 1m52.251456144s ago: executing program 7 (id=5890): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 1m50.90907852s ago: executing program 7 (id=5893): r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) socket$inet_sctp(0x2, 0x1, 0x84) clock_gettime(0x6, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') read$FUSE(r2, &(0x7f0000002840)={0x2020}, 0x2020) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000000)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x9, 0x34f081) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) 1m50.808603915s ago: executing program 3 (id=5894): bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="b70000000000000007000000000000009500000000000000a9171809f8dcf159569d5475991f7de1a0d0c119cfcf6b98741c23fb7f8d3002ec85db75af955427e91496087a51a0a78f269a9e216a0d0177c4fe3552396a180330807a5b6e8c79aa92038c78d1f16c1323f0e0c8d45c641a21757847cb22230e4321cc3581e40c62c4defee8cffe359cfeef7f58fffdb48647d28ae810f6d22d20271e9e88e94aa6982bf48356652b08e2fbd404e41e0058aae0478fbe542b648421d1b4486a542a7d478fbe6b5e000000293853f9c68e235184b7ad5b6c4fe70ec8320500db0db7fda3da6171a05509ffecef2cb9802d4f36c9a1ce46d3b355fec188ccfc2f0fc89e164561fb06ee9a0153981a47b5de9edd3536d5534f9a699f73b2c9341d2d05043748ce1f4577ed76cdf5b3c697089daa4abda69a8c0c992404610a6be9e103c972459065dec0488e85a6a0418fc87dd8019ef7bb4ef4fa6ee08d81797570578f2e8198e687012f25a69a90e7515e35f8abbddfa96c3f0485f01f0e9e144a2bd31c1b594c50de7c9efd826f1e19b7bd89ca4052b1985287bd13957a48467e0eeddf564d175bf4340885b63976df609806c3b2a3667539dfd66a7400000000003be6026e60205f761ce85cdf75cdb95ca5d32b5bf87eed4184d49f8f48181ef2419efe82ebb18ee55772d562b3b49551714e805a5211a3f4e8e703c03e23b2074bc573dbb66d59e269b722637c4a2efb5241cae2f14774609ad91d66724c438455dc4fcf0b4c8fc235f6c190b4c82bb2556d1fbcd4468369e98e900c743162ce2c7e60610acf0c8e4ba94a7e7127c7de0e6c35acecee1b8434fdca4579f9ebc6a515f7d910b466eb583fb0a7e65fbecb2b8ee0e9da33afb88aa5da8da3a5e0e58fcb48de6f165826b046a8951a47e040bd419d0efa"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) epoll_create(0x455f) r2 = epoll_create1(0x0) epoll_create(0x7) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000200)={0x4, 0x8, 0x3, 0x2, 0x19, "60f71115a7d64b4f572b6a3bc0b3f373f91ab6"}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x80000000}) 1m50.788374718s ago: executing program 9 (id=5895): madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x10, 0x803, 0x0) r2 = socket(0x840000000002, 0x3, 0x100) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10100, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r2, 0x0, 0x0, 0xfffe) 1m49.633186714s ago: executing program 3 (id=5897): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) pwritev(r0, &(0x7f0000000500), 0x0, 0x5, 0xfffffff9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r1, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x800) recvmmsg$unix(r4, &(0x7f0000002380), 0x0, 0x26022, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000001380)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f00000012c0)={r9, 0x8002, 0x7fff, 0x0, 0x0, [], [0x2], [0x0, 0x4, 0xfffffffe, 0x5e8]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000300)) 1m47.781221459s ago: executing program 7 (id=5901): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}}, 0x0) 1m47.664071791s ago: executing program 4 (id=5902): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a310000000014000380"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1m47.357225862s ago: executing program 7 (id=5904): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1e94c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) io_uring_setup(0xa71, &(0x7f0000000240)={0x0, 0x86a1, 0x1, 0x3, 0x276}) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x7ff, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201ab00c4b20710200e01015a7a0102030109021b00010000000009040000012e6d0a000905"], 0x0) add_key(&(0x7f00000000c0)='blacklist\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0xdb) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) r5 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) setsockopt$inet6_int(r6, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x28}, 0x11}, 0x1c) r7 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000200)={&(0x7f0000000240)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x2404c851) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 1m46.971881043s ago: executing program 4 (id=5905): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}, @multicast1}, {0x22, 0x81, 0x0, @empty}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 1m46.839330554s ago: executing program 0 (id=5906): syz_usb_connect(0x2, 0x9c2, &(0x7f00000025c0)={{0x12, 0x1, 0x201, 0x9, 0x4a, 0x68, 0x8, 0x6cd, 0x10b, 0x7e2f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b0, 0x4, 0x6, 0x2, 0xa0, 0xf3, "", [{{0x9, 0x4, 0xd9, 0x9, 0x1, 0xb7, 0xfa, 0x97, 0x4, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "b4368ec1"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xff, 0x101, 0x7ff, 0x8}, [@mdlm_detail={0x5d, 0x24, 0x13, 0x6, "3579317b979b30400540cc633d1bcd137283f0dbbe9ba97899d978f060575c9db103efadfdec33148161e9597dd6dd000783f7686ac824826b150b5b5361a74e50211aa767e2cc09f7ad408f92b5396fe6a096004c94d5130b"}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0xcc, 0x1, 0x4}, @ncm={0x6, 0x24, 0x1a, 0x7, 0x2}, @obex={0x5, 0x24, 0x15, 0x1}, @country_functional={0xa, 0x24, 0x7, 0xfb, 0x44e, [0x19, 0x0]}]}], [{{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x5, 0x4}}]}}, {{0x9, 0x4, 0x98, 0x1, 0x4, 0x85, 0x8a, 0x1f, 0x2, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "95726a0b2930"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0x1, 0x3da, 0x9}, {0x6, 0x24, 0x1a, 0xfffe, 0xa}, [@mdlm_detail={0xd5, 0x24, 0x13, 0x1, "dec4526a5e23762e6a8130af2722965c80bc450afc022b9840f350f127bd600e5e3a15d4ba34dec5a7d7faaf9f34c3a4760860654058f567c38565a82db11ab0601fc41c9858015b60e0782da0f3926b4835f3531b83566eaa6b488d0e41dbf322bb10ed6f27136ee832193fac2b3cb3430a7507a76d4ed66f6c793c087141b4d637acc3551349d535696f2086377edd3dbc4c4beda78b246e06c36e4a325b2e58bc0ec93d50172f95ec0adcfc8721754b02909eb4535e18bcfc6cc342814217053c98d82388b85977eb106258d6bba7c1"}, @mbim={0xc, 0x24, 0x1b, 0x4, 0xffff, 0xe, 0x6, 0x6, 0x5}, @obex={0x5, 0x24, 0x15, 0xfffd}, @country_functional={0x6, 0x24, 0x7, 0xe5, 0x1e48}, @country_functional={0x6, 0x24, 0x7, 0x7, 0x8001}]}], [{{0x9, 0x5, 0xa, 0x4, 0x3ff, 0xb, 0x0, 0x6d}}, {{0x9, 0x5, 0x0, 0x1, 0x10, 0x10, 0xaf, 0x9, [@generic={0x99, 0x23, "a40da871d589b85f5e797c7021cbb83532d2abee598636123e088e8bb9f03309a54cb4ca6d0071cca1efb9e21e3bc9101a82ded8dd833b5008a25d649b8a0794808816dd8dcf4303c29519df8e2b77e0bf607fbde4cdcd1ffbd27996ba73ed46cedc8edd2fc58ac1c34eebed749157c2e6af9b2a5f92ecfbc676b32315bbe062a550dcd1eb6ea36809240e41dd1a683257cff1b2a47ff7"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x8, 0xc6, 0xc, 0x3, [@generic={0xba, 0x21, "6689fb6d24b6d972e54e92e357898cf422daddfb4f7eadb17a13ee09066174ee73169e951bac8561c9c43324fd00cd9a709a63f70314d609a761dec410fc6b05757b67a68e51ecd3f954a418de98f60ac34c5bf893ef301f412b82731e615a4aea6b41928fef8682a7141c9aa4eea391b07c35b810d03e50336fa632ed97048dbc773c810b91497cee832fca3e20feb9833e6546b7a9cc89c2d949e315d76bc0751263ca87198cb8f6eea83e0d463e732d622da1ae01b505"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x6, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x8}]}}]}}, {{0x9, 0x4, 0xed, 0x3a, 0x8, 0xed, 0x6c, 0xda, 0xbf, [], [{{0x9, 0x5, 0x4, 0x1, 0x20, 0x9, 0x4, 0x9, [@generic={0x4e, 0x11, "3725e212b74550c9fcc22035c238b4df630824659ac1b38d846a3715646e27b211dda2f4b541c1fd13e2f138a1667b5edbfb66f4a349ab732b8d8922a82aadce14cd45f11784cfbaa4d60c03"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x5}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x84, 0x8, 0x7}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x3, 0xc8, 0xff}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x9, 0x30, 0x8a, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x7}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x8, 0x0, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x8f9}]}}, {{0x9, 0x5, 0x4, 0x1, 0x200, 0x2, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x6}]}}, {{0x9, 0x5, 0x2, 0xc, 0x40, 0xcd, 0x1, 0x3}}, {{0x9, 0x5, 0xf, 0x2, 0x3ff, 0xc4, 0xa4, 0x22, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xd, 0x3}]}}]}}, {{0x9, 0x4, 0xa7, 0xe9, 0xc, 0x63, 0x7d, 0x16, 0x5, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x1, 0x10, 0x1}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x9f, 0x1, 0x5f, 0x80}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x1, 0x79, 0x8, "", "ad7bf0"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x101, 0x8c, 0x2}, @as_header={0x7, 0x24, 0x1, 0x1, 0x67, 0x1001}]}, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, 'V'}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xe, 0x4, 0x0, 0x7}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0xfd}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x4}]}], [{{0x9, 0x5, 0xc, 0x8, 0x40, 0x3, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x40}, @generic={0xac, 0xe, "ccc149bbb8f744bfd5396506b785253dad1c7600c3a83c833ea531637c8fff6c38bb08827882b343fc86023587faae5f5f869e5331d4b1dff8aeba05ab119c62a4cf580cdc0e847fad3900c160cd68fd40f300bdc621b88260330c0694230aa917603cfdb355a9798af6d06c0f12d2775f8ef95585f3254f433c18dd401531f5b66963a52a7cb155b2dfef5b4b25dd74cf2fe2e55cbd3381281b82b2140d8191d5838c2fabc41ffda54d"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x210, 0x80, 0x6, 0x5}}, {{0x9, 0x5, 0x4, 0x8, 0xb861e034151044e9, 0x6, 0x1, 0x7, [@generic={0x51, 0x4, "0b1717462cc8cfece60114b1bf4c951de2714b0826c459f32d394984429fd3aa06e3bcd44967103bf0112ca21849177852e3bcf64474a256c90d6a2bdb6d3c5e07120fa7d89ae63ac7fb4fe36e2074"}, @generic={0x6, 0xa, "4d45015d"}]}}, {{0x9, 0x5, 0x6583255207bf9a2f, 0x10, 0x20, 0x0, 0x6, 0x5}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x25, 0x6, 0xe3}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x6, 0xd, 0x4, [@generic={0xfc, 0x22, "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"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x20, 0xb4, 0x3, 0x7f, [@generic={0xb9, 0x24, "3cd98fb65ce8640972b9a15c613f5e6a72c77bd57b03d71322a6874a05c5291e52358caa9dea6785c0852328f1c377d5e5dd1a673d44d3ae59f63998d1034ef051c7610b2de6a5ec03935d48b635e9efd053924250ebb41f78dd3e72a895b31389cc6ec8f46677c069daab0b698942ad1e4a1451abdccbba1d6a033e33434df44e3fd2e7f1077f1c6baf0d36a83953e1c2c7d5ae3ea42c59fa9ac73090d90de185fcf5dfbc5e6b33a7661ab9e12f759755958dc220f007"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x9, 0x81, 0x7}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x7, 0xf8, 0x5d, [@generic={0xed, 0xe, "bfca7b9be2a6dc583b1abac299e8ecd24f0354ac0fff0631c48acb5eef7cfb10c8d16699f9e970ce53c739aed28656fd2fa183862a60551489309ac996b3c4476818649d006d1ce807a805556592c7f07fd487ba355ab8e00d575819495c6a3f34447a7c34b9501cb62a08c135c94d13d4b9e18a2b6db2403dadc712ee6201f6eaf610c35ba788e20a78739f913709586272081ff5be6ad0ce85a5dbee52a7a508a8bc4da7c99c6501644c422bb54e0143bbc7965acdf3969437ab475205f95705c0c1971034e8ab11a4bdce22f4fbb4196c08bd52f9190da28cf7a416c06afb709a336624944a9890d65b"}, @generic={0x35, 0x23, "42b27fe59a85da065393d1ad1a998892fcd33653551f9b16e1e71761e5db01ee9f091c8e6fd0bc86172a1b4a185f70c0a2b5bd"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x3ff, 0xfb, 0xf, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xd, 0x8}]}}, {{0x9, 0x5, 0xc, 0xc, 0x40, 0x3, 0x4, 0x40}}, {{0x9, 0x5, 0xc, 0x4, 0x8, 0x8, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x7}, @generic={0xea, 0x0, "c0f870bc1f75fdb42b91de82b0f05b3d92ac1efa5cdeb5ec196cba09f4c1a9d86fdb20263cbc8bfbae6cb12cb104c08f026eb55a483a57ed7077eb8cf83ae85dbafc0c91cb00feaa0c1310c5cea1a4aaed1528ec69f9d63402b5332f6c6b5b0001b2c8af75c556e4463afaf9eb67fbc9fd295169c3157610a3b2db4595322b05527dee53c2b3615050021a6938937eb48cccd42c8cc1fcc8c7bba5ad06ab224fb8c85059ce407d03dbd8be2ef486afde20eb67bbcdd3113287d0d13364ab3d9da9277c0637eae637ac532161dd98b09eff1891fd40adfa0854aade8713c699070d9bcf5fc988edd1"}]}}]}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x807}}, {0x6d, &(0x7f00000000c0)=@string={0x6d, 0x3, "292c1668a7746cc22aabca529f11e20c5a30cf3542085e0f4c6c052d912609521bc6439dca189b519b0d348acc4cd32da1a65a1abdfb4a3861be506796d244560c6b2c5de5d187fd12d9efb47d654544ffa92b0606bed758f86f6940a8fff8f0943d16e162f9a88c1ccfee"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x40c}}, {0xd, &(0x7f0000000180)=@string={0xd, 0x3, "ca4ec8804a52638c734d6b"}}]}) 1m46.596319382s ago: executing program 4 (id=5907): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001080)=@deltfilter={0x196c, 0x2d, 0x400, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xd, 0xe}, {0x6, 0x5}}, [@filter_kind_options=@f_route={{0xa}, {0x193c, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x1930, 0x6, [@m_police={0x192c, 0x11, 0x0, 0x0, {{0xb}, {0x1900, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x97, 0x4, 0x5, 0x3, 0xb, 0x3e46, 0x0, 0xe, 0x8, 0x401, 0x187, 0xf, 0x2, 0x7, 0x3, 0x200, 0x5, 0xffff, 0x3, 0x9, 0xe2, 0x4, 0x4, 0x5, 0x1bb3b155, 0x40, 0x400, 0x2, 0x3, 0xd, 0x7f, 0x7bb7, 0x2, 0x5, 0x6, 0x8, 0x1d585271, 0x3, 0x0, 0xfe, 0x8, 0x9, 0x8, 0xffff, 0x9, 0x0, 0x46c3, 0xb, 0x80, 0x6, 0x0, 0x0, 0x0, 0x2, 0x9, 0x0, 0x4, 0x1, 0x9, 0x1ff, 0x9, 0x80000001, 0x10000, 0x4, 0x1, 0x8, 0x7, 0x7, 0xee, 0xd13, 0x413fb2f0, 0x80000000, 0x8, 0x5, 0x13b, 0x301, 0x7f4b44ea, 0x57d33072, 0x7, 0x4, 0x80000000, 0xd, 0x1144, 0x6, 0x2f, 0x1, 0xfffffffb, 0x6, 0x761c, 0x1000, 0x401, 0x8, 0xcd6f, 0x8, 0x601686f1, 0x7, 0x6, 0xa, 0x9, 0xfffffff4, 0x1, 0xfffffffd, 0xfffffff7, 0xff, 0x6, 0x8, 0x0, 0x5ad, 0x2d45, 0x6, 0x6, 0x7, 0x7fffffff, 0x4, 0x7, 0x4, 0x1, 0xa9, 0x1, 0x6, 0xfffffff1, 0x3, 0x6, 0x9, 0x60000000, 0x9, 0x81, 0x0, 0x9, 0xa, 0x0, 0x1, 0x80, 0x8, 0x0, 0xfffffffe, 0xfffffffb, 0x0, 0x7f, 0x0, 0x890, 0x0, 0x8, 0x63, 0x4, 0x8ea, 0x5, 0x9, 0x1, 0x0, 0x34, 0x1, 0x3, 0x7, 0x9, 0xfffff001, 0x1, 0x1, 0xd84, 0x6, 0x4, 0x400, 0xf, 0x9a1, 0x3, 0x20, 0x8, 0x1, 0x4, 0x7, 0x0, 0x9b07, 0x672, 0xd5e, 0x8, 0x7, 0x38, 0x2797fa20, 0x80000000, 0x6, 0x189, 0x1, 0x5, 0x5, 0x401, 0x0, 0x3, 0x368b, 0x7, 0x8, 0x8, 0x9, 0x7, 0x1, 0x81, 0x100, 0x0, 0xa1, 0x3, 0x9, 0xaac, 0x2, 0x5, 0x80, 0x7, 0x3, 0x6, 0x4, 0x10001, 0x3, 0x80, 0x7, 0x200, 0x0, 0x1, 0xa9, 0xa47, 0x9, 0x7, 0x8, 0xfffffff2, 0x2, 0x7, 0x2, 0xce0b, 0x3, 0x5, 0xff, 0x6, 0x100, 0x81, 0x6, 0x40, 0x4, 0x8001, 0x3, 0xe, 0xfffffffb, 0x4e56, 0x2, 0x0, 0x6, 0x81, 0x3, 0x0, 0x84, 0x8, 0x3, 0x0, 0x6, 0x6, 0x3, 0xfffeffff, 0x400, 0x4, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x7, 0x9, 0x8, 0xd28, {0xff, 0x1, 0x397e, 0x952, 0xf0c0, 0x10000}, {0xdd, 0x1, 0x3, 0x9, 0x6af, 0x6}, 0x401, 0xb07634a9, 0x9}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc, 0x3, 0x20002000, 0x1000, 0x4, 0x5, 0x8, 0x732, 0x8000, 0x9, 0xfffffffc, 0xe41, 0xf, 0x417c, 0x1, 0xfffffffe, 0x2000000, 0x8001, 0x8001, 0x0, 0xfffffff8, 0x100, 0x3, 0xb7, 0x0, 0x3, 0x34b0, 0x2, 0x8, 0x80000001, 0x3, 0x63, 0x6, 0xfffff000, 0x0, 0x6, 0x1, 0x3, 0x8, 0x727, 0x7, 0x200, 0x6, 0xfffffbff, 0x2, 0x1000, 0x9, 0xedb, 0x400, 0x4, 0x8000, 0x10, 0x0, 0x1, 0x9, 0x5, 0x0, 0x5, 0x7ff, 0xfffffffb, 0x9, 0xd, 0x4, 0x1, 0xc5dd, 0x3, 0x2, 0x5, 0x6, 0x8, 0x832, 0x1, 0x6, 0xfffffffd, 0x10001, 0xb, 0xcb5, 0xfffff000, 0x5, 0x3e, 0x3, 0x6996, 0x1, 0x8, 0x3, 0x429, 0xf85, 0x8, 0x400, 0x3, 0x1, 0x8, 0x4, 0x8, 0x1, 0x76, 0x4, 0x4, 0x10001, 0x0, 0xffff7fff, 0x1fe, 0x4b, 0x9, 0x7f, 0x1b7637a7, 0xb9af, 0x2, 0x5, 0x1, 0x2, 0x44, 0x0, 0x4, 0x0, 0x6, 0x7, 0x400, 0x1, 0xc, 0x80, 0x6, 0xfffffc00, 0xa8, 0x10000, 0x4, 0xffffffff, 0x5, 0x6, 0x3, 0x6, 0xe82, 0x3, 0x8000, 0xe, 0xa9c, 0x6, 0x1, 0x7, 0x3ff, 0x2, 0xff, 0x10, 0x5ac7, 0x4, 0x2, 0x1, 0x7, 0x1, 0xfa, 0x7, 0x3, 0x7, 0x401, 0xd0b, 0x101, 0x1, 0x400, 0x9, 0x10, 0x9, 0x3, 0x3d4, 0x7f, 0x9, 0xd, 0x7, 0x0, 0xfffffbff, 0x8, 0x7, 0x1, 0x1, 0x7, 0x37000000, 0x8, 0xffffffff, 0x3, 0x3, 0x6, 0x8001, 0x7f, 0x2, 0xffff, 0x8, 0x8, 0x2, 0xd, 0x501, 0x5, 0x2, 0x2, 0xfffffffc, 0x8000, 0x9e8, 0x9bd, 0x2, 0x4, 0xffff, 0x474200, 0x6, 0x39d, 0x9, 0x4, 0x0, 0x3, 0x7, 0x0, 0x6, 0x6, 0x3, 0x9, 0x10001, 0x10, 0x8, 0x9, 0x4, 0x3, 0x2, 0xfffffffc, 0x3c2, 0x6, 0x6, 0x7, 0x1000, 0x5, 0x0, 0x5, 0x5, 0x7a56, 0x8, 0x9, 0x0, 0x1000, 0x40, 0x2, 0x4, 0xa, 0x0, 0x4, 0x4, 0xeb8, 0x7e, 0x2, 0x2, 0x1, 0x100, 0x80, 0x200040, 0x5e8b, 0x1b53, 0x5, 0x6, 0x4, 0x2]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x8, 0x7fff, 0xfd0, 0x4, {0xfc, 0x2, 0x3, 0xc24, 0x2, 0x80000000}, {0xe9, 0x1, 0x8, 0x4, 0x3ff, 0x7ff}, 0xc, 0x8, 0x81}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2c00c000, 0x3ff, 0x10000, 0x800, 0x2, 0xfffffa16, 0x9, 0x6, 0x6, 0x40, 0x5, 0x2, 0x8, 0x2, 0x10001, 0x2, 0x71de, 0x7f, 0x0, 0x7, 0x5, 0xfffffffd, 0x8, 0x6, 0x9, 0x2, 0x1, 0x3, 0x3, 0xffff, 0xfffffff7, 0x100, 0x8, 0x8, 0x7b, 0x7, 0xa, 0x1e, 0x29b6, 0xc1, 0x8, 0x0, 0xfffffffe, 0xa01, 0x6, 0x3, 0x9f, 0x0, 0x6, 0x9, 0x7, 0x5, 0x1, 0x38000000, 0x9, 0x6, 0xfffffffa, 0xe, 0x6, 0x10000, 0x4, 0xf, 0x7fff, 0x3, 0x0, 0x0, 0x6, 0xb1, 0x58af2aba, 0x200, 0x3, 0xbca1, 0x2, 0xffff, 0xffffbbd2, 0x2, 0x80, 0xcd4, 0x401, 0x1, 0x7, 0x8e8d, 0x7f, 0x1, 0x3, 0xec, 0x7ff, 0xfffffffb, 0x4, 0x4, 0x8, 0x1000, 0x5, 0xef34, 0x9, 0x8, 0x638d3ac1, 0x226, 0x6e0, 0x2, 0x4, 0x8, 0x5ea, 0x9, 0x100, 0x4, 0x6a6, 0x0, 0x2, 0x7, 0x7, 0x4, 0xb, 0x4, 0xfffffffe, 0x3, 0x6, 0x5, 0x81, 0x588a, 0x7a29, 0x9, 0xfff, 0x310c, 0x2, 0x2, 0x4, 0x1, 0x88, 0x0, 0x9, 0x3, 0x0, 0x0, 0x800, 0x8, 0x2, 0x7, 0xcb0c, 0x3, 0xfff, 0x34, 0x2, 0x8, 0x65e, 0x10001, 0x7fffffff, 0x9, 0x0, 0xf3, 0x38, 0xffff1531, 0x80000001, 0x1000, 0x400, 0xfffffff8, 0x7fffffff, 0x4, 0x4, 0x8, 0xfff, 0x4000000, 0x6, 0xfffffffc, 0x7b, 0x0, 0x66, 0x8, 0x7ff, 0x4, 0x1, 0xf8, 0x6, 0xa9, 0x0, 0x3, 0x10001, 0x6, 0x3, 0x0, 0x5, 0x2, 0x7fffffff, 0x0, 0x1, 0x4, 0x4, 0xdc, 0x240000, 0x8, 0x5, 0x1, 0xc7b, 0x3d4d, 0x8, 0x7, 0x70c, 0x1ff, 0x8, 0x52caf1cb, 0x0, 0x7, 0x1, 0x3, 0x5, 0x8, 0x3, 0x6, 0x3, 0xd, 0x3, 0xa, 0x8000, 0x9, 0x9, 0xc, 0x1, 0x224fa605, 0xfe, 0x8001, 0xbbdc, 0xc, 0x6, 0xffff, 0x3, 0x6, 0x0, 0x2, 0x5, 0x5, 0x630, 0x3, 0x8, 0xdc, 0xed41, 0x6, 0xff, 0x1000, 0x5, 0x2, 0x800, 0x9, 0xfffffffc, 0x9af, 0x4, 0x9, 0x80000000, 0xbe, 0x81, 0xaf85, 0x9, 0x7fffffff, 0x9, 0x7, 0x9]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x67d3d9cf}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xa5}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x10000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xfff, 0x7, 0x0, 0x400, 0x5, 0x7, 0x5, 0x7, 0xfffffff8, 0x8, 0x0, 0x5, 0x4, 0x217f1640, 0x6, 0x3, 0x6, 0x1, 0x7fff, 0xd534, 0x7fffffff, 0x3, 0x800, 0x622, 0x0, 0x6, 0x3, 0x7ff, 0x9, 0x0, 0xfffffffb, 0x3, 0xfffffffc, 0x4, 0x7, 0x2, 0x0, 0x0, 0x3, 0x1ff, 0x8, 0x5, 0xffff0001, 0x3, 0x23aa, 0x3, 0x4, 0x4, 0x8, 0x2, 0x0, 0x5, 0x4, 0xfffffffe, 0x81, 0x89, 0xa6, 0x8, 0x0, 0x5, 0x8, 0xf6a76a8, 0x2, 0x4, 0x4, 0x1, 0x1, 0x2f, 0x0, 0x1, 0x722000, 0x5, 0x5, 0x3, 0x5a9, 0x0, 0x5, 0x7f, 0x3, 0x80000000, 0x7f, 0xa, 0x7fff, 0x5, 0x4, 0x2, 0x8, 0x4, 0x7, 0x6, 0x9, 0xa, 0x4, 0x3, 0x8001, 0xff, 0x9, 0xfffffffa, 0x7ff8, 0x5, 0xe4, 0x400, 0x8c, 0x4, 0xffffffe4, 0xe9, 0x6, 0x0, 0x4, 0x4, 0x4, 0x2, 0x2, 0x7, 0x3760cf21, 0x5, 0xfe, 0x0, 0xb, 0x400, 0xc, 0x1dc, 0xf, 0x3, 0x5, 0x1, 0x921, 0x3, 0x8c, 0x222, 0x5, 0x7c7, 0x7a09d9d7, 0x4, 0x1a4, 0x4, 0x0, 0x9, 0x5, 0x1, 0x4, 0x7, 0x6, 0x10, 0x1, 0x0, 0xd, 0xd7, 0x0, 0x4, 0x99, 0x2c, 0x2, 0x7238, 0x9, 0x3, 0x80000001, 0x1, 0xfffffffa, 0x80000000, 0xffffb456, 0x6, 0x9b, 0x8, 0x1, 0x40, 0xd03, 0x3, 0x6934efc8, 0xfffff001, 0x6, 0x7bd, 0xffffffff, 0x1000, 0x9, 0x5, 0x0, 0x8, 0x6, 0x8, 0x5, 0x8, 0x3, 0x4, 0x7, 0x419d, 0x100, 0x2, 0x9, 0x6, 0x5, 0x7, 0x7, 0x2, 0x7, 0x5, 0x7, 0x5, 0x6, 0x0, 0x5, 0x4, 0x4a, 0x4, 0x2, 0x400, 0x1000, 0xff, 0xc, 0x8, 0x2, 0xa24e, 0x2, 0x7, 0x9, 0x9, 0x400, 0x3, 0x8, 0xc13, 0xf, 0x1, 0x1, 0x6, 0x3, 0xffff, 0x1, 0x0, 0x7, 0x4, 0xad, 0x400, 0x10000, 0x6, 0x401, 0x419, 0x3, 0x8, 0x1ff, 0x9, 0x9, 0x9, 0x8000, 0x370d, 0x13b4, 0x8, 0x7, 0xa, 0x3, 0x80000000, 0x0, 0x0, 0x5, 0x6, 0x8f0]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3ff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x80000001}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2c}, @TCA_POLICE_RESULT={0x8, 0x5, 0xb}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x2, 0x6, 0xf, 0x81, 0x80, 0xffffff00, 0x1, 0xfffffffb, 0x1, 0x2, 0x6, 0x0, 0x1, 0x6, 0x9, 0x1000, 0x3, 0x5, 0x8000, 0x0, 0x0, 0x1000, 0x2, 0x1c0000, 0x9, 0x5, 0x9, 0xb174, 0x7, 0x3, 0x9, 0x6, 0x2, 0x80, 0x7, 0x667, 0x5, 0xffff, 0x6, 0x13b, 0x0, 0x3e54, 0x7, 0x2, 0x3, 0x4, 0x7, 0xfff, 0x200, 0x8001, 0x0, 0x7, 0x6, 0x8, 0x0, 0x7fffffff, 0x800, 0x8, 0x80000000, 0x47, 0x5, 0x4, 0x5, 0xfff, 0x9, 0xe0, 0x7, 0x10, 0x7fffffff, 0x7f, 0x7fffffff, 0x9, 0x7fffffff, 0x7, 0x4, 0x4, 0x9b, 0xc, 0xc37e, 0x8001, 0x1000, 0xffff7fff, 0x7, 0x5, 0x7ff, 0x8a, 0x4, 0x8c9c, 0x6, 0x0, 0x800000, 0x7, 0xb, 0x1, 0x8000, 0x5, 0xfffffffd, 0x4, 0x0, 0x129, 0xdf, 0x0, 0x5, 0xb1f9, 0x0, 0xffff, 0x2, 0x9, 0x3, 0x5, 0x3, 0x0, 0x2, 0x1, 0x8, 0x2, 0x729a, 0x5, 0x9c6, 0x9, 0x1, 0x8, 0x3, 0x200, 0x9, 0x1, 0xfffff97b, 0x6, 0x800000, 0xc11f, 0x2, 0x4, 0xfff, 0x81, 0x3ab, 0xf660, 0x1, 0xfffffff7, 0x6, 0x48, 0x4de, 0xf, 0xdd9, 0x5, 0x7b21, 0x6, 0x0, 0x80000000, 0x6, 0x7f, 0xc, 0xd68, 0x0, 0xfffff870, 0xd, 0xb89, 0xfffffffe, 0x9, 0x2, 0xb3, 0x80000001, 0x9, 0x4, 0x3, 0x3, 0x2, 0x7, 0x2, 0x5, 0x7, 0x80000000, 0x8, 0x9c70, 0xe, 0x2, 0x800, 0x1, 0x7, 0x8, 0x1, 0xfffffffc, 0x7, 0x6, 0x17b, 0x6, 0x8, 0x7fffffff, 0x81, 0x5, 0x9, 0x7, 0xfff, 0x0, 0x5, 0x9, 0xb, 0x7ff, 0x4, 0x0, 0x2, 0x0, 0x6, 0x800, 0xc4c, 0xe5, 0x7f, 0x93a, 0x6, 0x3, 0x1, 0xc4f5, 0x1, 0x5, 0x10, 0x26, 0xdc3e, 0x3, 0x7fffffff, 0x1c, 0x1, 0xaf, 0x4, 0xd, 0x101, 0x4, 0x9, 0x9, 0xfb, 0x2, 0x7, 0x7fff, 0xd6a, 0x8969, 0x101, 0x53b80b9d, 0x5, 0x1ff, 0x200, 0x9, 0x1000, 0x19, 0x5, 0xc281, 0x10, 0x1, 0x400, 0xaeb, 0x55e, 0xe, 0x4, 0x6, 0x5, 0x5, 0x3, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x5, 0x1, 0x6, 0x800, 0x9c, 0x2, 0x8, 0xfffffffd, 0x8, 0x0, 0xe6, 0x1, 0x7, 0x3, 0x5, 0x401, 0xf, 0x1, 0xfffffffd, 0x6, 0x807, 0x5, 0x8, 0x101, 0x401, 0x7, 0x711a, 0x4, 0x7, 0xfffffff7, 0x2, 0x2, 0x2, 0x3, 0x1, 0x4, 0x3, 0x2576, 0x3, 0x6, 0x10, 0x7ef3f15e, 0x5, 0x1, 0xf4c, 0x6, 0x2, 0x7, 0x1000, 0x1e6, 0x9, 0x8, 0x5, 0x7, 0x3, 0x1, 0x1ff, 0x4b, 0x10, 0x3, 0x1, 0x2, 0x4, 0x65, 0xb92c, 0x200, 0x3c, 0x6, 0x1000, 0x68ad3f3a, 0xfffffff2, 0x1d4, 0x7, 0xfff, 0x4, 0xff, 0xd890, 0x1, 0x7, 0x200, 0x74, 0x9, 0xffffffff, 0x1, 0x0, 0x829e, 0x1, 0x8, 0xa, 0x9, 0xd73, 0x6, 0x531f, 0x4, 0x6, 0x5, 0x4, 0x3df05d5e, 0x3, 0x5, 0x5, 0x6, 0x1, 0x17, 0x8, 0xfe1, 0x7ff, 0x41, 0xe, 0x8, 0x3, 0x0, 0x6, 0xff, 0x0, 0x80000000, 0x5, 0x5a, 0xc64, 0x4, 0x7, 0x6, 0x101, 0x1ff, 0x3, 0x0, 0xbac, 0x2, 0x100, 0x0, 0xfffffff8, 0x3, 0xfffffff8, 0xe54d, 0x40, 0x7fff, 0x0, 0x2, 0xffffff7f, 0x7ff, 0xe, 0x8, 0x2, 0x5, 0x41, 0xfff, 0x0, 0x7f, 0x9, 0x0, 0x100, 0x0, 0xff, 0xe7000, 0xe0, 0x6, 0x1, 0x1, 0x5, 0x1, 0xafa, 0xc, 0x8, 0x5, 0x0, 0xce4, 0x9, 0xfff, 0x0, 0x6, 0x4, 0xfffffffb, 0x1, 0x80000000, 0x2, 0xfffffeff, 0xffffffff, 0x6, 0x8, 0x100, 0x9, 0x0, 0x8, 0xfffff1b7, 0x12, 0x80000001, 0x6, 0x9, 0x8, 0x7, 0x6, 0x8000, 0x7, 0xff, 0x3, 0x5, 0x8, 0x1000, 0xe130, 0x6, 0x9, 0x6fe, 0xffffffff, 0x92, 0x1, 0xf1, 0xd, 0x0, 0x3a000, 0x7, 0x0, 0x7, 0x4, 0x8, 0x1, 0x23, 0x7f, 0x6, 0x0, 0x8001, 0x7, 0x8, 0x0, 0x4, 0x2, 0x9, 0x7fff, 0xfffffff7, 0x1, 0x1, 0x53f, 0x80000001, 0x5, 0x6, 0xd, 0x7, 0x7f, 0x0, 0x8, 0xfffffffc, 0x8, 0x4, 0xbc2b, 0x9, 0x7, 0x2, 0x3ff, 0x5, 0x2, 0xfffff24b, 0x8, 0xe, 0x4f88, 0x322a, 0x1]}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x196c}, 0x1, 0x0, 0x0, 0x4040005}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cf1, 0x1c080, 0xa, 0xc1}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m46.136461649s ago: executing program 4 (id=5909): bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) epoll_create(0x455f) r2 = epoll_create1(0x0) epoll_create(0x7) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000200)={0x4, 0x8, 0x3, 0x2, 0x19, "60f71115a7d64b4f572b6a3bc0b3f373f91ab6"}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x80000000}) 1m45.664340754s ago: executing program 2 (id=5910): r0 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) rt_tgsigqueueinfo(r1, r1, 0x2a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(&(0x7f0000002740), 0x80080) r4 = fsopen(&(0x7f0000000040)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) mount(0x0, 0x0, &(0x7f0000000180)='tmpfs\x00', 0x2204c96, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000001c0)='\x00', 0x0, r6) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r7, 0xfffd, 0x0) socket$inet6(0xa, 0x2, 0x0) r8 = socket(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x3}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x5a}, 0x20) write(r8, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00"/72]}, 0xc0) 1m45.444333188s ago: executing program 4 (id=5911): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x31008003, 0xfffe}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r4, 0x0) 1m44.386248286s ago: executing program 2 (id=5912): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x4, 0x0) connect$unix(r1, &(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) r3 = creat(0x0, 0x6b) lsetxattr$security_capability(0x0, &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r3, &(0x7f0000000240)=ANY=[], 0x58) close(r3) execve(0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="111e00000000feffffff05"], 0x21}}, 0xa000000) 1m44.054775942s ago: executing program 4 (id=5913): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406a05005000000000000109022400010000e80b090400000103f302000921fd7f000122c1"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x83, 0x1, "d2"}, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xc, {[@main=@item_4={0x3, 0x0, 0xb, "24fe6b66"}, @global=@item_012={0x1, 0x1, 0x8, "f5"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m43.138917146s ago: executing program 2 (id=5914): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/85, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) 1m42.910796786s ago: executing program 0 (id=5915): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 1m42.909324261s ago: executing program 3 (id=5916): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}}, 0x0) 1m42.444419459s ago: executing program 9 (id=5917): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a310000000014000380"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1m41.922547144s ago: executing program 3 (id=5918): syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587"], 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kexec_load(0x0, 0x0, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) bind$xdp(r3, &(0x7f0000000100), 0x10) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000019440)=[{0x0}], 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x5}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x2000000000000, 0x3, 0xfffffffffffffffd, 0x544}, {0x8}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) 1m41.853436264s ago: executing program 0 (id=5919): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x22008001, &(0x7f0000000080)={0x11, 0x88a8, 0x0, 0x1, 0xda, 0x6, @multicast}, 0x14) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea4, 0x20000, @local, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x952b, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1m41.633120186s ago: executing program 7 (id=5920): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x400000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = fanotify_init(0x2, 0x1) add_key$fscrypt_v1(0x0, &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x61, 0x34, 0x63, 0x63, 0x0, 0x61, 0x0, 0x31, 0x61]}, 0x0, 0x0, 0xfffffffffffffffe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, 0x0, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="34010000170001000000008000000000fc000000000000000000000000000000000000006c000000fe8000000000000000000000000000bbfe8000000000000000000000000000bbac1e000100"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000fd7f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000000000000000000020000000700000004000000000010000000000000000000000000000000000000000000000000000000000073669b0851e1a4f400000000fdffffff000000000000000000000000800000000000000000000000000000000c0008000800080001050000"], 0x134}}, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) pipe2$watch_queue(&(0x7f00000001c0), 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r1]) bind$rds(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4, @loopback}, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/14], 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x24}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 1m41.631276533s ago: executing program 9 (id=5921): syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x2, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00'}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0xfffffffd, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) 1m41.508485558s ago: executing program 2 (id=5922): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f40)=ANY=[@ANYBLOB], 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) 1m40.754918009s ago: executing program 2 (id=5923): bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) epoll_create(0x455f) r2 = epoll_create1(0x0) epoll_create(0x7) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000200)={0x4, 0x8, 0x3, 0x2, 0x19, "60f71115a7d64b4f572b6a3bc0b3f373f91ab6"}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x80000000}) 1m40.735030182s ago: executing program 7 (id=5924): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGUCODE(r0, 0xc018480d, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) gettid() r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {0x0, 0x1}}, 0x18) socket$netlink(0x10, 0x3, 0x10) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe46, 0x4001071) 1m40.711249312s ago: executing program 0 (id=5925): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x31008003, 0xfffe}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r4, 0x0) 1m40.488334773s ago: executing program 2 (id=5926): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x4, 0x0) connect$unix(r1, &(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, 0x0) r3 = creat(0x0, 0x6b) lsetxattr$security_capability(0x0, &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r3, &(0x7f0000000240)=ANY=[], 0x58) close(r3) execve(0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="111e00000000feffffff05"], 0x21}}, 0xa000000) 0s ago: executing program 38 (id=5925): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x31008003, 0xfffe}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r4, 0x0) kernel console output (not intermixed with test programs): 8.641146][T25173] do_sock_setsockopt+0x17c/0x1b0 [ 1618.641185][T25173] __x64_sys_setsockopt+0x13d/0x1b0 [ 1618.641227][T25173] do_syscall_64+0x14d/0xf80 [ 1618.641262][T25173] ? trace_irq_disable+0x3b/0x150 [ 1618.641292][T25173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1618.641326][T25173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1618.641353][T25173] RIP: 0033:0x7f71a079c819 [ 1618.641376][T25173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1618.641399][T25173] RSP: 002b:00007f71a15b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1618.641426][T25173] RAX: ffffffffffffffda RBX: 00007f71a0a15fa0 RCX: 00007f71a079c819 [ 1618.641446][T25173] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 1618.641462][T25173] RBP: 00007f71a0832c91 R08: 0000000000000004 R09: 0000000000000000 [ 1618.641480][T25173] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1618.641497][T25173] R13: 00007f71a0a16038 R14: 00007f71a0a15fa0 R15: 00007ffdb77e7c98 [ 1618.641538][T25173] [ 1618.641748][T25173] Mem-Info: [ 1618.962547][T18581] usb 8-1: new high-speed USB device number 79 using dummy_hcd [ 1618.993966][T25173] active_anon:9886 inactive_anon:0 isolated_anon:0 [ 1618.993966][T25173] active_file:22228 inactive_file:40901 isolated_file:0 [ 1618.993966][T25173] unevictable:1846 dirty:73 writeback:0 [ 1618.993966][T25173] slab_reclaimable:12539 slab_unreclaimable:117220 [ 1618.993966][T25173] mapped:53177 shmem:1410 pagetables:1791 [ 1618.993966][T25173] sec_pagetables:0 bounce:0 [ 1618.993966][T25173] kernel_misc_reclaimable:0 [ 1618.993966][T25173] free:1245445 free_pcp:8405 free_cma:0 [ 1619.092689][T18581] usb 8-1: device descriptor read/64, error -71 [ 1619.102759][T25173] Node 0 active_anon:43844kB inactive_anon:0kB active_file:88912kB inactive_file:163400kB unevictable:1648kB isolated(anon):0kB isolated(file):0kB mapped:212808kB dirty:292kB writeback:0kB shmem:4104kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15292kB pagetables:7208kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1619.203111][T18581] usb usb8-port1: attempt power cycle [ 1619.306414][T25176] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5352'. [ 1619.364017][T25173] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1619.482954][T25173] Node 0 DMA free:15344kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1619.592589][T25173] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1619.608941][T18581] usb 8-1: new high-speed USB device number 80 using dummy_hcd [ 1619.618342][T25173] Node 0 DMA32 free:1030320kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35848kB inactive_anon:0kB active_file:88912kB inactive_file:163400kB unevictable:1560kB writepending:376kB zspages:0kB present:3129332kB managed:2552584kB mlocked:24kB bounce:0kB free_pcp:40308kB local_pcp:19304kB free_cma:0kB [ 1619.692563][T18581] usb 8-1: device descriptor read/8, error -71 [ 1619.717653][T25173] lowmem_reserve[]: 0 0 0 0 0 [ 1619.724341][T25197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5352'. [ 1619.758807][T25173] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 1619.819794][T25197] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5352'. [ 1619.835098][T25173] lowmem_reserve[]: 0 0 0 0 0 [ 1619.840616][T25173] Node 1 Normal free:3937452kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1619.917449][T25173] lowmem_reserve[]: 0 0 0 0 0 [ 1619.922315][T25173] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 1620.540147][T18581] usb 8-1: new high-speed USB device number 81 using dummy_hcd [ 1620.548805][T25173] Node 0 DMA32: 4934*4kB (UME) 6492*8kB (UME) 4177*16kB (UME) 721*32kB (UME) 486*64kB (UME) 756*128kB (UME) 579*256kB (UME) 382*512kB (UME) 150*1024kB (UM) 20*2048kB (UM) 49*4096kB (M) = 1028520kB [ 1620.626524][T18581] usb 8-1: device descriptor read/8, error -71 [ 1620.679371][T25173] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1620.702807][T25198] veth1_macvtap: renamed from veth0_vlan [ 1620.732219][T25173] Node 1 Normal: 1*4kB (U) 9*8kB (UM) 12*16kB (UM) 5*32kB (UM) 6*64kB (UM) 3*128kB (UM) 4*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 959*4096kB (UM) = 3937452kB [ 1620.770171][T25173] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1620.770649][T18581] usb usb8-port1: unable to enumerate USB device [ 1620.797010][T25173] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1620.819336][T25173] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1620.847061][T25207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5356'. [ 1620.863886][T25173] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1620.884869][T25207] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 1620.896495][T25173] 64529 total pagecache pages [ 1620.901181][T25173] 0 pages in swap cache [ 1620.957560][T25173] Free swap = 124996kB [ 1620.961962][T25173] Total swap = 124996kB [ 1620.962796][T25211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1620.978593][T25173] 2097051 pages RAM [ 1621.091593][T25173] 0 pages HighMem/MovableOnly [ 1621.148944][T25173] 427071 pages reserved [ 1621.179486][T25173] 0 pages cma reserved [ 1621.685499][T25230] binder: 25228:25230 ioctl c0306201 0 returned -14 [ 1621.913161][T24418] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1622.165138][T24418] usb 5-1: Using ep0 maxpacket: 32 [ 1622.203415][T24418] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1622.242127][T24418] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1622.274472][T24418] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1622.327490][T24418] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1622.384827][T24418] usb 5-1: config 0 descriptor?? [ 1623.699554][T24418] corsair-cpro 0003:1B1C:0C10.0051: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 1624.117765][T24418] corsair-cpro 0003:1B1C:0C10.0051: probe with driver corsair-cpro failed with error -71 [ 1624.181449][T24418] usb 5-1: USB disconnect, device number 28 [ 1624.464540][T25266] fido_id[25266]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1624.651718][T22443] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 1624.665526][T22443] CPU: 0 UID: 0 PID: 22443 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1624.665566][T22443] Tainted: [L]=SOFTLOCKUP [ 1624.665577][T22443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1624.665595][T22443] Workqueue: hci5 hci_rx_work [ 1624.665636][T22443] Call Trace: [ 1624.665646][T22443] [ 1624.665657][T22443] dump_stack_lvl+0xe8/0x150 [ 1624.665698][T22443] sysfs_create_dir_ns+0x271/0x2a0 [ 1624.665741][T22443] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1624.665777][T22443] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1624.665821][T22443] ? do_raw_spin_unlock+0xf5/0x210 [ 1624.665857][T22443] kobject_add_internal+0x62b/0xd00 [ 1624.665912][T22443] kobject_add+0x163/0x240 [ 1624.665953][T22443] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1624.665991][T22443] ? __pfx_kobject_add+0x10/0x10 [ 1624.666033][T22443] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1624.666065][T22443] ? _raw_spin_unlock+0x28/0x50 [ 1624.666096][T22443] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1624.666133][T22443] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1624.666165][T22443] ? get_device_parent+0x366/0x3a0 [ 1624.666215][T22443] device_add+0x408/0xb70 [ 1624.666259][T22443] hci_conn_add_sysfs+0xd5/0x210 [ 1624.666308][T22443] le_conn_complete_evt+0x10e6/0x16b0 [ 1624.666338][T22443] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1624.666381][T22443] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1624.666409][T22443] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1624.666450][T22443] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1624.666489][T22443] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1624.666521][T22443] ? skb_pull_data+0xfb/0x200 [ 1624.666569][T22443] hci_le_conn_complete_evt+0x187/0x470 [ 1624.666625][T22443] hci_event_packet+0x659/0xef0 [ 1624.666673][T22443] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1624.666715][T22443] ? __pfx_hci_event_packet+0x10/0x10 [ 1624.666758][T22443] ? kcov_remote_start+0x49a/0x7a0 [ 1624.666802][T22443] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1624.666834][T22443] ? hci_send_to_monitor+0xe2/0x590 [ 1624.666869][T22443] hci_rx_work+0x3ee/0x1030 [ 1624.666910][T22443] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1624.666948][T22443] ? process_scheduled_works+0xa8d/0x18c0 [ 1624.666988][T22443] process_scheduled_works+0xb6e/0x18c0 [ 1624.667061][T22443] ? __pfx_process_scheduled_works+0x10/0x10 [ 1624.667106][T22443] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1624.667138][T22443] ? assign_work+0x3d5/0x5e0 [ 1624.667180][T22443] worker_thread+0xa53/0xfc0 [ 1624.667220][T22443] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1624.667279][T22443] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1624.667322][T22443] kthread+0x388/0x470 [ 1624.667350][T22443] ? __pfx_worker_thread+0x10/0x10 [ 1624.667383][T22443] ? __pfx_kthread+0x10/0x10 [ 1624.667409][T22443] ret_from_fork+0x51e/0xb90 [ 1624.667450][T22443] ? __pfx_ret_from_fork+0x10/0x10 [ 1624.667483][T22443] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1624.667515][T22443] ? __switch_to+0xc7d/0x1450 [ 1624.667551][T22443] ? __pfx_kthread+0x10/0x10 [ 1624.667580][T22443] ret_from_fork_asm+0x1a/0x30 [ 1624.667642][T22443] [ 1624.667751][T22443] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1624.992691][T22443] Bluetooth: hci5: failed to register connection device [ 1625.064651][T25281] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5373'. [ 1625.386286][ T5480] veth1_macvtap: left promiscuous mode [ 1625.502093][ T5480] veth1_macvtap: entered promiscuous mode [ 1626.433741][T25313] binder: BINDER_SET_CONTEXT_MGR already set [ 1626.469533][T25313] binder: 25309:25313 ioctl 4018620d 200000004a80 returned -16 [ 1627.897003][T25336] fuse: Unknown parameter 'group_id00000000000000000000' [ 1627.961245][ T31] audit: type=1800 audit(1775818913.194:1429): pid=25336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5388" name="file1" dev="tmpfs" ino=691 res=0 errno=0 [ 1628.098213][T25342] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5391'. [ 1628.236599][ T2148] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1628.414676][ T2148] usb 4-1: Using ep0 maxpacket: 32 [ 1628.450825][ T2148] usb 4-1: config 1 has an invalid interface number: 236 but max is 0 [ 1628.484586][ T2148] usb 4-1: config 1 has no interface number 0 [ 1628.509977][ T2148] usb 4-1: config 1 interface 236 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1628.552104][ T2148] usb 4-1: config 1 interface 236 altsetting 9 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1628.577078][ T2148] usb 4-1: config 1 interface 236 altsetting 9 endpoint 0xE has invalid maxpacket 8621, setting to 1024 [ 1628.725034][ T2148] usb 4-1: config 1 interface 236 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1628.758272][ T2148] usb 4-1: config 1 interface 236 has no altsetting 0 [ 1628.831440][ T2148] usb 4-1: New USB device found, idVendor=15b8, idProduct=6001, bcdDevice=96.95 [ 1628.920328][ T2148] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.562261][ T2148] usb 4-1: Product: syz [ 1629.577917][ T2148] usb 4-1: Manufacturer: syz [ 1629.617274][ T2148] usb 4-1: SerialNumber: syz [ 1629.881754][ T2148] gspca_main: vc032x-2.14.0 probing 15b8:6001 [ 1629.931406][ T2148] gspca_vc032x: reg_r err -71 [ 1629.942868][ T2148] gspca_vc032x: I2c Bus Busy Wait 00 [ 1629.948166][ T2148] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.001520][T25382] netlink: 'syz.7.5405': attribute type 1 has an invalid length. [ 1630.003085][ T2148] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.050536][ T2148] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.070477][ T2148] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.076311][T25382] netlink: 280 bytes leftover after parsing attributes in process `syz.7.5405'. [ 1630.088680][T25382] netlink: 204 bytes leftover after parsing attributes in process `syz.7.5405'. [ 1630.162185][ T2148] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.178133][ T2148] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.192945][ T2148] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.198245][ T2148] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.246273][ T2148] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.284173][ T2148] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.290397][ T2148] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.295850][T11675] usb 10-1: new high-speed USB device number 106 using dummy_hcd [ 1630.323500][ T2148] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.346384][ T2148] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.394691][ T2148] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.400012][ T2148] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.406057][T25392] binder: 25391:25392 ioctl c0306201 0 returned -14 [ 1630.439936][ T2148] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.476156][T11675] usb 10-1: Using ep0 maxpacket: 8 [ 1630.486610][ T2148] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.491905][ T2148] gspca_vc032x: I2c Bus Busy Wait 00 [ 1630.508935][T11675] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1630.523279][T11675] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1630.534758][ T2148] gspca_vc032x: Unknown sensor... [ 1630.539903][ T2148] vc032x 4-1:1.236: probe with driver vc032x failed with error -22 [ 1630.550786][T11675] usb 10-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1630.566306][T11675] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1630.575228][ T2148] usb 4-1: USB disconnect, device number 62 [ 1630.590845][T25400] tipc: Can't bind to reserved service type 1 [ 1630.693687][T11675] usb 10-1: config 0 descriptor?? [ 1632.153867][T25430] netlink: 'syz.0.5423': attribute type 1 has an invalid length. [ 1632.172597][T25430] netlink: 280 bytes leftover after parsing attributes in process `syz.0.5423'. [ 1632.212992][T25430] netlink: 204 bytes leftover after parsing attributes in process `syz.0.5423'. [ 1632.527960][T25400] infiniband syz1: set active [ 1632.554861][T25443] binder: 25442:25443 ioctl c0306201 0 returned -14 [ 1632.562872][T25400] infiniband syz1: added team_slave_1 [ 1632.585978][T25400] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1632.594976][T25400] infiniband syz1: Couldn't open port 1 [ 1632.704330][T25400] RDS/IB: syz1: added [ 1632.724071][T25400] smc: adding ib device syz1 with port count 1 [ 1632.767878][T25400] smc: ib device syz1 port 1 has no pnetid [ 1632.842604][T24418] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1633.003978][T24418] usb 5-1: Using ep0 maxpacket: 32 [ 1633.023960][T24418] usb 5-1: config 1 has an invalid interface number: 236 but max is 0 [ 1633.037993][T24418] usb 5-1: config 1 has no interface number 0 [ 1633.053929][T24418] usb 5-1: config 1 interface 236 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1633.080716][T24418] usb 5-1: config 1 interface 236 altsetting 9 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1633.105808][T24418] usb 5-1: config 1 interface 236 altsetting 9 endpoint 0xE has invalid maxpacket 8621, setting to 1024 [ 1633.290626][T24418] usb 5-1: config 1 interface 236 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1633.366639][T25458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5432'. [ 1633.476630][T25459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5432'. [ 1633.914623][T24418] usb 5-1: config 1 interface 236 has no altsetting 0 [ 1633.935695][T24418] usb 5-1: New USB device found, idVendor=15b8, idProduct=6001, bcdDevice=96.95 [ 1633.964747][T24418] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1633.979062][ T29] usb 10-1: USB disconnect, device number 106 [ 1634.044240][T24418] usb 5-1: Product: syz [ 1634.094789][T24418] usb 5-1: Manufacturer: syz [ 1634.099448][T24418] usb 5-1: SerialNumber: syz [ 1634.388252][T24418] gspca_main: vc032x-2.14.0 probing 15b8:6001 [ 1634.413469][T24418] gspca_vc032x: reg_r err -71 [ 1634.419579][T24418] gspca_vc032x: I2c Bus Busy Wait 00 [ 1634.429700][T24418] gspca_vc032x: I2c Bus Busy Wait 00 [ 1634.449723][T24418] gspca_vc032x: I2c Bus Busy Wait 00 [ 1634.462916][T24418] gspca_vc032x: I2c Bus Busy Wait 00 [ 1634.468215][T24418] gspca_vc032x: I2c Bus Busy Wait 00 [ 1634.493947][T24418] gspca_vc032x: I2c Bus Busy Wait 00 [ 1634.499274][T24418] gspca_vc032x: I2c Bus Busy Wait 00 [ 1634.514898][T24418] gspca_vc032x: I2c Bus Busy Wait 00 [ 1634.524772][T24418] gspca_vc032x: I2c Bus Busy Wait 00 [ 1634.530095][T24418] gspca_vc032x: I2c Bus Busy Wait 00 [ 1634.546569][T24418] gspca_vc032x: I2c Bus Busy Wait 00 [ 1634.551899][T24418] gspca_vc032x: I2c Bus Busy Wait 00 [ 1634.566671][T24418] gspca_vc032x: I2c Bus Busy Wait 00 [ 1634.572989][T24418] gspca_vc032x: I2c Bus Busy Wait 00 [ 1634.578586][T24418] gspca_vc032x: I2c Bus Busy Wait 00 [ 1634.584568][T24418] gspca_vc032x: I2c Bus Busy Wait 00 [ 1634.608169][T24418] gspca_vc032x: I2c Bus Busy Wait 00 [ 1634.613951][T24418] gspca_vc032x: I2c Bus Busy Wait 00 [ 1634.619279][T24418] gspca_vc032x: I2c Bus Busy Wait 00 [ 1634.628339][T24418] gspca_vc032x: Unknown sensor... [ 1634.634568][T24418] vc032x 5-1:1.236: probe with driver vc032x failed with error -22 [ 1634.666312][T24418] usb 5-1: USB disconnect, device number 29 [ 1634.713325][ T2148] usb 10-1: new high-speed USB device number 107 using dummy_hcd [ 1634.883704][ T2148] usb 10-1: no configurations [ 1634.888431][ T2148] usb 10-1: can't read configurations, error -22 [ 1635.043283][ T2148] usb 10-1: new high-speed USB device number 108 using dummy_hcd [ 1635.082893][T22793] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 1635.215111][ T2148] usb 10-1: no configurations [ 1635.219866][ T2148] usb 10-1: can't read configurations, error -22 [ 1635.249052][ T2148] usb usb10-port1: attempt power cycle [ 1635.263024][T22793] usb 1-1: config 0 has an invalid interface number: 175 but max is 0 [ 1635.271265][T22793] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1635.302082][T22793] usb 1-1: config 0 has no interface number 0 [ 1635.316258][T22793] usb 1-1: config 0 interface 175 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 1635.356756][T22793] usb 1-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 1635.397358][T22793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.409133][T22793] usb 1-1: Product: syz [ 1635.425713][T22793] usb 1-1: Manufacturer: syz [ 1635.443565][T22793] usb 1-1: SerialNumber: syz [ 1635.467802][T22793] usb 1-1: config 0 descriptor?? [ 1635.503954][T25488] binder: 25485:25488 ioctl c0306201 0 returned -14 [ 1635.543369][T22793] symbolserial 1-1:0.175: required endpoints missing [ 1635.642973][ T2148] usb 10-1: new high-speed USB device number 109 using dummy_hcd [ 1635.674523][ T2148] usb 10-1: no configurations [ 1635.679234][ T2148] usb 10-1: can't read configurations, error -22 [ 1635.747168][T22793] usb 1-1: USB disconnect, device number 92 [ 1635.832872][ T2148] usb 10-1: new high-speed USB device number 110 using dummy_hcd [ 1635.864385][ T2148] usb 10-1: no configurations [ 1635.869350][ T2148] usb 10-1: can't read configurations, error -22 [ 1635.882927][ T2148] usb usb10-port1: unable to enumerate USB device [ 1635.902543][T11675] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1636.102844][T11675] usb 4-1: Using ep0 maxpacket: 16 [ 1636.110257][T11675] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1636.199523][T25501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5446'. [ 1636.375440][T25502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5446'. [ 1636.729139][T11675] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 1636.872564][T11675] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 1636.882830][T11675] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1636.897267][T11675] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1636.906670][T11675] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1636.915353][T11675] usb 4-1: SerialNumber: syz [ 1636.961828][T25505] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5448'. [ 1636.974147][T25492] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1636.981599][T25492] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1637.023010][T11675] hub 4-1:1.0: bad descriptor, ignoring hub [ 1637.041714][T11675] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1637.288944][T11675] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 1637.346478][T11675] usb 4-1: USB disconnect, device number 63 [ 1637.552849][T24418] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1637.722582][T24418] usb 5-1: Using ep0 maxpacket: 32 [ 1637.736310][T24418] usb 5-1: config 1 has an invalid interface number: 236 but max is 0 [ 1637.752648][T11675] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 1637.772704][T24418] usb 5-1: config 1 has no interface number 0 [ 1637.778817][T24418] usb 5-1: config 1 interface 236 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1637.823758][T24418] usb 5-1: config 1 interface 236 altsetting 9 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1637.852551][T24418] usb 5-1: config 1 interface 236 altsetting 9 endpoint 0xE has invalid maxpacket 8621, setting to 1024 [ 1637.889359][T24418] usb 5-1: config 1 interface 236 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1637.921087][T25526] netlink: 'syz.0.5455': attribute type 1 has an invalid length. [ 1637.929001][T24418] usb 5-1: config 1 interface 236 has no altsetting 0 [ 1637.936661][T25526] netlink: 280 bytes leftover after parsing attributes in process `syz.0.5455'. [ 1637.944083][T25528] binder: 25527:25528 ioctl c0306201 0 returned -14 [ 1637.962363][T25529] netlink: 204 bytes leftover after parsing attributes in process `syz.0.5455'. [ 1637.993672][T24418] usb 5-1: New USB device found, idVendor=15b8, idProduct=6001, bcdDevice=96.95 [ 1638.011891][T11675] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1638.012562][T24418] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.036231][T11675] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1638.062586][T24418] usb 5-1: Product: syz [ 1638.066902][T24418] usb 5-1: Manufacturer: syz [ 1638.071564][T11675] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1638.071598][T11675] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.071625][T11675] usb 4-1: Product: syz [ 1638.071645][T11675] usb 4-1: Manufacturer: syz [ 1638.071665][T11675] usb 4-1: SerialNumber: syz [ 1638.078514][T25492] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1638.173079][T24418] usb 5-1: SerialNumber: syz [ 1638.350666][T25492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1638.375055][T25492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1638.404372][T11675] cdc_ncm 4-1:1.0: bind() failure [ 1638.424480][T24418] gspca_main: vc032x-2.14.0 probing 15b8:6001 [ 1638.432214][T11675] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1638.453308][T24418] gspca_vc032x: reg_r err -71 [ 1638.468377][T24418] gspca_vc032x: I2c Bus Busy Wait 00 [ 1638.479003][T11675] cdc_ncm 4-1:1.1: bind() failure [ 1638.490738][T24418] gspca_vc032x: I2c Bus Busy Wait 00 [ 1638.508549][T24418] gspca_vc032x: I2c Bus Busy Wait 00 [ 1638.531403][T24418] gspca_vc032x: I2c Bus Busy Wait 00 [ 1638.542098][T11675] usb 4-1: USB disconnect, device number 64 [ 1638.583599][T24418] gspca_vc032x: I2c Bus Busy Wait 00 [ 1638.588947][T24418] gspca_vc032x: I2c Bus Busy Wait 00 [ 1638.635198][T24418] gspca_vc032x: I2c Bus Busy Wait 00 [ 1638.641118][T24418] gspca_vc032x: I2c Bus Busy Wait 00 [ 1638.662333][T24418] gspca_vc032x: I2c Bus Busy Wait 00 [ 1638.680793][T24418] gspca_vc032x: I2c Bus Busy Wait 00 [ 1638.702881][T24418] gspca_vc032x: I2c Bus Busy Wait 00 [ 1638.708674][T24418] gspca_vc032x: I2c Bus Busy Wait 00 [ 1638.729092][T24418] gspca_vc032x: I2c Bus Busy Wait 00 [ 1638.745953][T24418] gspca_vc032x: I2c Bus Busy Wait 00 [ 1638.754850][T24418] gspca_vc032x: I2c Bus Busy Wait 00 [ 1638.760146][T24418] gspca_vc032x: I2c Bus Busy Wait 00 [ 1638.995670][T24418] gspca_vc032x: I2c Bus Busy Wait 00 [ 1639.001663][T24418] gspca_vc032x: I2c Bus Busy Wait 00 [ 1639.007289][T24418] gspca_vc032x: I2c Bus Busy Wait 00 [ 1639.013330][T24418] gspca_vc032x: Unknown sensor... [ 1639.018507][T24418] vc032x 5-1:1.236: probe with driver vc032x failed with error -22 [ 1639.134742][T25548] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5461'. [ 1639.285813][T24418] usb 5-1: USB disconnect, device number 30 [ 1639.664919][T25549] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5461'. [ 1640.301361][T25570] binder: 25569:25570 ioctl c0306201 0 returned -14 [ 1640.346157][T24418] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1640.521664][T24418] usb 5-1: no configurations [ 1640.526719][T24418] usb 5-1: can't read configurations, error -22 [ 1640.681519][T24418] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1640.695909][T25580] xt_hashlimit: size too large, truncated to 1048576 [ 1640.849174][T24418] usb 5-1: no configurations [ 1640.864761][T24418] usb 5-1: can't read configurations, error -22 [ 1640.894161][T24418] usb usb5-port1: attempt power cycle [ 1641.312555][T25594] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5477'. [ 1641.395902][T25595] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5477'. [ 1641.853214][T24418] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1641.888720][T25598] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5479'. [ 1641.990078][ T5916] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1642.014186][T24418] usb 5-1: no configurations [ 1642.018889][T24418] usb 5-1: can't read configurations, error -22 [ 1642.152921][ T5916] usb 3-1: Using ep0 maxpacket: 32 [ 1642.163135][T24418] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1642.202115][ T5916] usb 3-1: config 1 has an invalid interface number: 236 but max is 0 [ 1642.233040][ T5916] usb 3-1: config 1 has no interface number 0 [ 1642.243718][T24418] usb 5-1: no configurations [ 1642.248341][T24418] usb 5-1: can't read configurations, error -22 [ 1642.265884][ T5916] usb 3-1: config 1 interface 236 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1642.290049][T24418] usb usb5-port1: unable to enumerate USB device [ 1642.308222][ T5916] usb 3-1: config 1 interface 236 altsetting 9 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1642.333177][ T5916] usb 3-1: config 1 interface 236 altsetting 9 endpoint 0xE has invalid maxpacket 8621, setting to 1024 [ 1642.796609][ T5916] usb 3-1: config 1 interface 236 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1642.872581][ T5916] usb 3-1: config 1 interface 236 has no altsetting 0 [ 1642.904929][ T5916] usb 3-1: New USB device found, idVendor=15b8, idProduct=6001, bcdDevice=96.95 [ 1642.947120][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.972513][ T5916] usb 3-1: Product: syz [ 1642.976720][ T5916] usb 3-1: Manufacturer: syz [ 1642.981316][ T5916] usb 3-1: SerialNumber: syz [ 1643.305505][ T5916] gspca_main: vc032x-2.14.0 probing 15b8:6001 [ 1643.329725][ T5916] gspca_vc032x: reg_r err -71 [ 1643.340415][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 1643.382648][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 1643.387980][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 1643.396358][T25625] binder: 25622:25625 ioctl c0306201 0 returned -14 [ 1643.422543][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 1643.438041][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 1643.472580][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 1643.477888][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 1643.517191][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 1643.542554][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 1643.555595][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 1643.571145][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 1643.588866][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 1643.612592][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 1643.628331][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 1643.658937][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 1643.682581][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 1643.687946][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 1643.722641][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 1643.727966][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 1643.745036][ T5916] gspca_vc032x: Unknown sensor... [ 1643.750147][ T5916] vc032x 3-1:1.236: probe with driver vc032x failed with error -22 [ 1643.781624][ T5916] usb 3-1: USB disconnect, device number 91 [ 1643.893406][T11675] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1644.072328][T25643] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5490'. [ 1644.075514][T25641] xt_hashlimit: size too large, truncated to 1048576 [ 1644.081607][T11675] usb 4-1: device descriptor read/64, error -71 [ 1644.125298][T25646] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5492'. [ 1644.153640][T25646] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5492'. [ 1644.393850][T11675] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1644.572536][T11675] usb 4-1: device descriptor read/64, error -71 [ 1644.693262][T11675] usb usb4-port1: attempt power cycle [ 1644.862613][ T10] usb 8-1: new high-speed USB device number 82 using dummy_hcd [ 1644.872662][T18581] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1645.054618][T22793] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1645.062927][T11675] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1645.071346][T18581] usb 1-1: no configurations [ 1645.084327][T18581] usb 1-1: can't read configurations, error -22 [ 1645.084782][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1645.110383][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1645.121181][ T10] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1645.131090][T11675] usb 4-1: device descriptor read/8, error -71 [ 1645.138868][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1645.147594][ T10] usb 8-1: SerialNumber: syz [ 1645.246024][T18581] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1645.414013][T22793] usb 3-1: device descriptor read/64, error -71 [ 1645.425646][ T10] usb 8-1: 0:2 : does not exist [ 1645.431085][ T10] usb 8-1: unit 5 not found! [ 1645.464665][ T10] usb 8-1: USB disconnect, device number 82 [ 1645.489870][T18581] usb 1-1: no configurations [ 1645.507078][T22473] udevd[22473]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1645.523761][T18581] usb 1-1: can't read configurations, error -22 [ 1645.535431][T18581] usb usb1-port1: attempt power cycle [ 1645.548035][ T5916] usb 10-1: new high-speed USB device number 111 using dummy_hcd [ 1645.552557][T11675] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1645.604786][T11675] usb 4-1: device descriptor read/8, error -71 [ 1645.662532][T22793] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1645.722563][ T5916] usb 10-1: Using ep0 maxpacket: 32 [ 1645.722965][T11675] usb usb4-port1: unable to enumerate USB device [ 1645.738330][ T5916] usb 10-1: config 1 has an invalid interface number: 236 but max is 0 [ 1645.751370][ T5916] usb 10-1: config 1 has no interface number 0 [ 1645.762559][ T5916] usb 10-1: config 1 interface 236 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1645.773822][ T5916] usb 10-1: config 1 interface 236 altsetting 9 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1645.785426][ T5916] usb 10-1: config 1 interface 236 altsetting 9 endpoint 0xE has invalid maxpacket 8621, setting to 1024 [ 1645.797787][ T5916] usb 10-1: config 1 interface 236 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1645.808873][ T5916] usb 10-1: config 1 interface 236 has no altsetting 0 [ 1645.813198][T22793] usb 3-1: device descriptor read/64, error -71 [ 1645.820592][ T5916] usb 10-1: New USB device found, idVendor=15b8, idProduct=6001, bcdDevice=96.95 [ 1645.842955][ T5916] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.851209][ T5916] usb 10-1: Product: syz [ 1645.872813][ T5916] usb 10-1: Manufacturer: syz [ 1645.877576][ T5916] usb 10-1: SerialNumber: syz [ 1645.908117][T18581] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1645.923092][T22793] usb usb3-port1: attempt power cycle [ 1645.944150][T18581] usb 1-1: no configurations [ 1645.948876][T18581] usb 1-1: can't read configurations, error -22 [ 1646.092753][T18581] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1646.120947][ T5916] gspca_main: vc032x-2.14.0 probing 15b8:6001 [ 1646.129305][ T5916] gspca_vc032x: reg_r err -71 [ 1646.134745][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 1646.141392][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 1646.148882][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 1646.156221][T18581] usb 1-1: no configurations [ 1646.163644][T18581] usb 1-1: can't read configurations, error -22 [ 1646.172009][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 1646.178194][T18581] usb usb1-port1: unable to enumerate USB device [ 1646.184754][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 1646.203947][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 1646.209403][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 1646.215009][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 1646.222153][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 1646.231612][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 1646.237260][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 1646.245879][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 1646.252166][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 1646.257931][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 1646.268580][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 1646.300751][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 1646.307296][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 1646.313022][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 1646.319581][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 1646.325266][ T5916] gspca_vc032x: Unknown sensor... [ 1646.330517][ T5916] vc032x 10-1:1.236: probe with driver vc032x failed with error -22 [ 1646.353057][T22793] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1646.373574][ T5916] usb 10-1: USB disconnect, device number 111 [ 1646.393378][T22793] usb 3-1: device descriptor read/8, error -71 [ 1646.617056][T25697] binder: 25696:25697 ioctl c0306201 0 returned -14 [ 1646.663360][T22793] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1646.703630][T22793] usb 3-1: device descriptor read/8, error -71 [ 1646.833018][T22793] usb usb3-port1: unable to enumerate USB device [ 1646.950794][T25709] netlink: 136 bytes leftover after parsing attributes in process `syz.3.5510'. [ 1647.072966][ T5916] usb 10-1: new high-speed USB device number 112 using dummy_hcd [ 1647.107789][T25714] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5512'. [ 1647.298047][ T5916] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1647.325736][ T5916] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1647.335210][ T5916] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1647.395787][ T5916] usb 10-1: config 0 descriptor?? [ 1647.465713][ T5916] pwc: Askey VC010 type 2 USB webcam detected. [ 1647.627836][T25725] netlink: 'syz.4.5515': attribute type 1 has an invalid length. [ 1647.732792][T25725] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1647.782120][T25728] gretap1: entered promiscuous mode [ 1647.839825][ T5916] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1647.854562][ T5916] pwc: recv_control_msg error -32 req 02 val 2700 [ 1647.873071][ T5916] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1647.881413][ T5916] pwc: recv_control_msg error -32 req 04 val 1000 [ 1647.898960][ T5916] pwc: recv_control_msg error -32 req 04 val 1300 [ 1647.929246][ T5916] pwc: recv_control_msg error -32 req 04 val 1400 [ 1647.952039][ T5916] pwc: recv_control_msg error -32 req 02 val 2000 [ 1647.966091][ T5916] pwc: recv_control_msg error -32 req 02 val 2100 [ 1647.995051][ T5916] pwc: recv_control_msg error -32 req 04 val 1500 [ 1648.012367][ T5916] pwc: recv_control_msg error -32 req 02 val 2500 [ 1648.029736][ T5916] pwc: recv_control_msg error -32 req 02 val 2400 [ 1648.043224][ T5916] pwc: recv_control_msg error -32 req 02 val 2600 [ 1648.060874][ T5916] pwc: recv_control_msg error -32 req 02 val 2900 [ 1648.081970][ T5916] pwc: recv_control_msg error -32 req 02 val 2800 [ 1648.122594][T18581] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1648.212572][ T29] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1648.272809][T18581] usb 1-1: Using ep0 maxpacket: 32 [ 1648.282239][T18581] usb 1-1: config 1 has an invalid interface number: 236 but max is 0 [ 1648.298086][T18581] usb 1-1: config 1 has no interface number 0 [ 1648.329616][T18581] usb 1-1: config 1 interface 236 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1648.349006][ T5916] pwc: recv_control_msg error -71 req 04 val 1200 [ 1648.373246][ T29] usb 3-1: device descriptor read/64, error -71 [ 1648.431553][ T5916] pwc: Registered as video103. [ 1648.444968][T18581] usb 1-1: config 1 interface 236 altsetting 9 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1648.663882][ T29] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1648.696580][ T5916] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input53 [ 1648.712301][T18581] usb 1-1: config 1 interface 236 altsetting 9 endpoint 0xE has invalid maxpacket 8621, setting to 1024 [ 1649.015207][ T10] usb 8-1: new high-speed USB device number 83 using dummy_hcd [ 1649.048902][T18581] usb 1-1: config 1 interface 236 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1649.061375][ T29] usb 3-1: device descriptor read/64, error -71 [ 1649.126579][T18581] usb 1-1: config 1 interface 236 has no altsetting 0 [ 1649.168973][ T5916] usb 10-1: USB disconnect, device number 112 [ 1649.214031][ T29] usb usb3-port1: attempt power cycle [ 1649.223888][T18581] usb 1-1: New USB device found, idVendor=15b8, idProduct=6001, bcdDevice=96.95 [ 1649.273022][T18581] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1649.301552][T18581] usb 1-1: Product: syz [ 1649.307144][T18581] usb 1-1: Manufacturer: syz [ 1649.320249][T18581] usb 1-1: SerialNumber: syz [ 1649.326967][ T10] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1649.361578][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1649.387176][T25753] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5525'. [ 1649.392496][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1649.416846][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1649.466722][ T10] usb 8-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1649.483197][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1649.505881][T25755] binder: 25754:25755 ioctl c0306201 0 returned -14 [ 1649.517096][ T10] usb 8-1: Product: syz [ 1649.521282][ T10] usb 8-1: Manufacturer: syz [ 1649.530276][ T10] usb 8-1: SerialNumber: syz [ 1649.549671][ T10] usb 8-1: config 0 descriptor?? [ 1649.569695][T18581] gspca_main: vc032x-2.14.0 probing 15b8:6001 [ 1649.571310][ T10] iguanair 8-1:0.0: failed to submit urb: -90 [ 1649.584363][T18581] gspca_vc032x: reg_r err -71 [ 1649.587273][ T10] iguanair 8-1:0.0: probe with driver iguanair failed with error -90 [ 1649.594235][ T29] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1649.607496][T18581] gspca_vc032x: I2c Bus Busy Wait 00 [ 1649.657565][T18581] gspca_vc032x: I2c Bus Busy Wait 00 [ 1649.696357][ T29] usb 3-1: device descriptor read/8, error -71 [ 1649.703046][T18581] gspca_vc032x: I2c Bus Busy Wait 00 [ 1649.708404][T18581] gspca_vc032x: I2c Bus Busy Wait 00 [ 1649.714471][T18581] gspca_vc032x: I2c Bus Busy Wait 00 [ 1649.719819][T18581] gspca_vc032x: I2c Bus Busy Wait 00 [ 1649.725566][T18581] gspca_vc032x: I2c Bus Busy Wait 00 [ 1649.730954][T18581] gspca_vc032x: I2c Bus Busy Wait 00 [ 1649.736548][T18581] gspca_vc032x: I2c Bus Busy Wait 00 [ 1649.741912][T18581] gspca_vc032x: I2c Bus Busy Wait 00 [ 1649.790630][T18581] gspca_vc032x: I2c Bus Busy Wait 00 [ 1649.818793][T18581] gspca_vc032x: I2c Bus Busy Wait 00 [ 1649.847572][ T10] usb 8-1: USB disconnect, device number 83 [ 1649.852564][T18581] gspca_vc032x: I2c Bus Busy Wait 00 [ 1649.913931][T18581] gspca_vc032x: I2c Bus Busy Wait 00 [ 1649.937966][T18581] gspca_vc032x: I2c Bus Busy Wait 00 [ 1649.953811][ T29] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1649.963922][T18581] gspca_vc032x: I2c Bus Busy Wait 00 [ 1649.969348][T18581] gspca_vc032x: I2c Bus Busy Wait 00 [ 1649.984139][T18581] gspca_vc032x: I2c Bus Busy Wait 00 [ 1649.989983][T18581] gspca_vc032x: I2c Bus Busy Wait 00 [ 1649.997585][T18581] gspca_vc032x: Unknown sensor... [ 1650.013602][ T29] usb 3-1: device descriptor read/8, error -71 [ 1650.020767][T18581] vc032x 1-1:1.236: probe with driver vc032x failed with error -22 [ 1650.124608][ T29] usb usb3-port1: unable to enumerate USB device [ 1650.141811][T18581] usb 1-1: USB disconnect, device number 97 [ 1650.552347][T25770] netlink: 165240 bytes leftover after parsing attributes in process `syz.7.5533'. [ 1650.822572][ T10] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1650.971953][T25789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5540'. [ 1651.112675][ T10] usb 1-1: device descriptor read/64, error -71 [ 1651.593193][T11675] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1652.047658][ T10] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1652.198016][ T10] usb 1-1: device descriptor read/64, error -71 [ 1652.217493][T11675] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1652.251225][T11675] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1652.260055][T25803] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5544'. [ 1652.266574][T11675] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1652.310113][T11675] usb 4-1: config 0 descriptor?? [ 1652.341511][T11675] pwc: Askey VC010 type 2 USB webcam detected. [ 1652.350133][ T10] usb usb1-port1: attempt power cycle [ 1652.712578][ T10] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1652.796982][ T10] usb 1-1: device descriptor read/8, error -71 [ 1652.800489][T25814] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5548'. [ 1652.832270][T11675] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1652.841946][T11675] pwc: recv_control_msg error -32 req 02 val 2700 [ 1652.849573][T11675] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1652.862126][T11675] pwc: recv_control_msg error -32 req 04 val 1000 [ 1652.873573][T11675] pwc: recv_control_msg error -32 req 04 val 1300 [ 1652.882022][T11675] pwc: recv_control_msg error -32 req 04 val 1400 [ 1652.898420][T11675] pwc: recv_control_msg error -32 req 02 val 2000 [ 1652.903139][ T5916] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1652.906926][T11675] pwc: recv_control_msg error -32 req 02 val 2100 [ 1652.941694][T11675] pwc: recv_control_msg error -32 req 04 val 1500 [ 1652.958712][T11675] pwc: recv_control_msg error -32 req 02 val 2500 [ 1652.970325][T11675] pwc: recv_control_msg error -32 req 02 val 2400 [ 1652.984282][T11675] pwc: recv_control_msg error -32 req 02 val 2600 [ 1653.001513][T11675] pwc: recv_control_msg error -32 req 02 val 2900 [ 1653.011944][T11675] pwc: recv_control_msg error -32 req 02 val 2800 [ 1653.055429][ T10] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1653.086107][ T5916] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1653.103764][ T10] usb 1-1: device descriptor read/8, error -71 [ 1653.118350][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1653.172609][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1653.182391][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1653.214848][ T5916] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1653.231462][T25827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5553'. [ 1653.232577][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.241222][ T10] usb usb1-port1: unable to enumerate USB device [ 1653.264481][T11675] pwc: recv_control_msg error -71 req 04 val 1200 [ 1653.291271][ T5916] usb 5-1: Product: syz [ 1653.295791][ T5916] usb 5-1: Manufacturer: syz [ 1653.300586][ T5916] usb 5-1: SerialNumber: syz [ 1653.302254][T11675] pwc: Registered as video103. [ 1653.320782][ T5916] usb 5-1: config 0 descriptor?? [ 1653.340693][ T5916] iguanair 5-1:0.0: failed to submit urb: -90 [ 1653.362842][T11675] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input55 [ 1653.390026][ T5916] iguanair 5-1:0.0: probe with driver iguanair failed with error -90 [ 1653.443440][T11675] usb 4-1: USB disconnect, device number 69 [ 1653.552380][ T5916] usb 5-1: USB disconnect, device number 35 [ 1654.230816][T25839] netlink: 172 bytes leftover after parsing attributes in process `syz.7.5557'. [ 1654.289265][T25839] fuse: Unknown parameter '0x0000000000000005' [ 1654.570237][T25844] netlink: 'syz.2.5559': attribute type 9 has an invalid length. [ 1654.578604][T25844] netlink: 'syz.2.5559': attribute type 11 has an invalid length. [ 1654.613586][T25844] netlink: 'syz.2.5559': attribute type 12 has an invalid length. [ 1654.626193][T25844] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.5559'. [ 1654.649313][T25844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5559'. [ 1654.787959][T25853] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5563'. [ 1654.837989][T25853] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1655.023791][T18581] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 1655.186010][T25873] netlink: 172 bytes leftover after parsing attributes in process `syz.9.5573'. [ 1655.214212][T25873] fuse: Unknown parameter '0x0000000000000005' [ 1655.417943][T18581] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1655.428504][T18581] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1655.452543][T18581] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1655.461609][T18581] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1656.156373][T18581] usb 5-1: config 0 descriptor?? [ 1656.290820][T25884] syz.3.5577: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1656.359348][T25884] CPU: 0 UID: 0 PID: 25884 Comm: syz.3.5577 Tainted: G L syzkaller #0 PREEMPT(full) [ 1656.359390][T25884] Tainted: [L]=SOFTLOCKUP [ 1656.359401][T25884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1656.359417][T25884] Call Trace: [ 1656.359427][T25884] [ 1656.359438][T25884] dump_stack_lvl+0xe8/0x150 [ 1656.359482][T25884] warn_alloc+0x249/0x340 [ 1656.359516][T25884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1656.359558][T25884] ? stack_trace_save+0xa9/0x100 [ 1656.359591][T25884] ? __pfx_warn_alloc+0x10/0x10 [ 1656.359620][T25884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1656.359660][T25884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1656.359691][T25884] ? kasan_save_track+0x4f/0x80 [ 1656.359720][T25884] ? kasan_save_track+0x3e/0x80 [ 1656.359748][T25884] ? __kasan_kmalloc+0x93/0xb0 [ 1656.359779][T25884] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1656.359809][T25884] ? xskq_create+0x56/0x170 [ 1656.359840][T25884] ? xsk_setsockopt+0x54c/0x990 [ 1656.359869][T25884] ? do_sock_setsockopt+0x17c/0x1b0 [ 1656.359902][T25884] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1656.359935][T25884] ? do_syscall_64+0x14d/0xf80 [ 1656.359977][T25884] __vmalloc_node_range_noprof+0x132/0x1730 [ 1656.360047][T25884] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1656.360086][T25884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1656.360118][T25884] ? __kasan_kmalloc+0x93/0xb0 [ 1656.360151][T25884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1656.360187][T25884] vmalloc_user_noprof+0xad/0xe0 [ 1656.360218][T25884] ? xskq_create+0xbf/0x170 [ 1656.360250][T25884] xskq_create+0xbf/0x170 [ 1656.360286][T25884] xsk_init_queue+0x8a/0xe0 [ 1656.360319][T25884] xsk_setsockopt+0x54c/0x990 [ 1656.360352][T25884] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1656.360383][T25884] ? __pfx_aa_sk_perm+0x10/0x10 [ 1656.360425][T25884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1656.360459][T25884] ? aa_sock_opt_perm+0xff/0x1a0 [ 1656.360489][T25884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1656.360520][T25884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1656.360562][T25884] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1656.360595][T25884] do_sock_setsockopt+0x17c/0x1b0 [ 1656.360636][T25884] __x64_sys_setsockopt+0x13d/0x1b0 [ 1656.360677][T25884] do_syscall_64+0x14d/0xf80 [ 1656.360713][T25884] ? trace_irq_disable+0x3b/0x150 [ 1656.360737][T25884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1656.360771][T25884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1656.360799][T25884] RIP: 0033:0x7f7abf39c819 [ 1656.360822][T25884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1656.360846][T25884] RSP: 002b:00007f7ac0340028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1656.360874][T25884] RAX: ffffffffffffffda RBX: 00007f7abf615fa0 RCX: 00007f7abf39c819 [ 1656.360894][T25884] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1656.360911][T25884] RBP: 00007f7abf432c91 R08: 0000000000000004 R09: 0000000000000000 [ 1656.360928][T25884] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1656.360946][T25884] R13: 00007f7abf616038 R14: 00007f7abf615fa0 R15: 00007ffe723da098 [ 1656.360986][T25884] [ 1656.360997][T25884] Mem-Info: [ 1656.497544][T25892] netlink: 763 bytes leftover after parsing attributes in process `syz.7.5581'. [ 1656.515600][T25884] active_anon:8994 inactive_anon:0 isolated_anon:0 [ 1656.515600][T25884] active_file:22228 inactive_file:40915 isolated_file:0 [ 1656.515600][T25884] unevictable:768 dirty:113 writeback:0 [ 1656.515600][T25884] slab_reclaimable:12563 slab_unreclaimable:120061 [ 1656.515600][T25884] mapped:51106 shmem:1393 pagetables:1806 [ 1656.515600][T25884] sec_pagetables:0 bounce:0 [ 1656.515600][T25884] kernel_misc_reclaimable:0 [ 1656.515600][T25884] free:1242983 free_pcp:9716 free_cma:0 [ 1656.742592][ T10] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1656.813200][T25884] Node 0 active_anon:39376kB inactive_anon:0kB active_file:88912kB inactive_file:163656kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:207724kB dirty:452kB writeback:0kB shmem:7336kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15076kB pagetables:7268kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1656.863626][T25899] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5584'. [ 1656.901256][T25884] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1656.909566][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1656.963489][T25884] Node 0 DMA free:15344kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1657.022705][T25884] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1657.030017][T25884] Node 0 DMA32 free:1016824kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:47576kB inactive_anon:0kB active_file:88912kB inactive_file:163956kB unevictable:1536kB writepending:452kB zspages:0kB present:3129332kB managed:2552584kB mlocked:0kB bounce:0kB free_pcp:28444kB local_pcp:7976kB free_cma:0kB [ 1657.036045][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1657.068155][T25884] lowmem_reserve[]: 0 0 0 0 0 [ 1657.080436][T25884] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 1657.111151][T25884] lowmem_reserve[]: 0 0 0 0 0 [ 1657.599619][T25884] Node 1 Normal free:3937452kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1657.727092][T25884] lowmem_reserve[]: 0 0 0 0 0 [ 1657.740855][T25884] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 1657.748759][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1657.765800][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1657.785459][ T10] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1657.808068][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1657.821726][ T10] usb 1-1: Product: syz [ 1657.826465][T25884] Node 0 DMA32: 6217*4kB (UM) 6979*8kB (UME) 4581*16kB (UME) 682*32kB (UM) 483*64kB (UME) 766*128kB (UME) 574*256kB (UME) 389*512kB (UME) 156*1024kB (UM) 17*2048kB (UM) 46*4096kB (UM) = 1033868kB [ 1657.855773][ T5888] usb 5-1: USB disconnect, device number 36 [ 1657.868542][ T10] usb 1-1: Manufacturer: syz [ 1657.905127][ T10] usb 1-1: SerialNumber: syz [ 1657.921829][T25884] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1657.934591][ T10] usb 1-1: config 0 descriptor?? [ 1657.973109][ T10] iguanair 1-1:0.0: failed to submit urb: -90 [ 1657.979507][ T10] iguanair 1-1:0.0: probe with driver iguanair failed with error -90 [ 1657.990040][T25884] Node 1 Normal: 1*4kB (U) 9*8kB (UM) 12*16kB (UM) 5*32kB (UM) 6*64kB (UM) 3*128kB (UM) 4*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 959*4096kB (UM) = 3937452kB [ 1658.053941][T25884] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1658.104886][T25884] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1658.131226][T25884] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1658.152696][T25884] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1658.166395][T25884] 65155 total pagecache pages [ 1658.196387][T25884] 0 pages in swap cache [ 1658.201489][T25884] Free swap = 124996kB [ 1658.232711][T25884] Total swap = 124996kB [ 1658.240345][ T29] usb 1-1: USB disconnect, device number 102 [ 1658.258055][T25884] 2097051 pages RAM [ 1658.272659][T25884] 0 pages HighMem/MovableOnly [ 1658.287181][T25884] 427071 pages reserved [ 1658.303735][T25884] 0 pages cma reserved [ 1659.176799][T25930] xt_hashlimit: size too large, truncated to 1048576 [ 1659.497064][ T29] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1660.477649][ T29] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1660.502577][ T29] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1660.522393][T25942] overlayfs: missing 'lowerdir' [ 1660.533914][ T29] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1660.544757][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1660.554557][ T29] usb 1-1: SerialNumber: syz [ 1660.802120][T25960] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5606'. [ 1660.805351][ T29] usb 1-1: 0:2 : does not exist [ 1660.835851][ T29] usb 1-1: unit 5 not found! [ 1660.960156][ T29] usb 1-1: USB disconnect, device number 103 [ 1660.982804][ T5916] usb 10-1: new full-speed USB device number 113 using dummy_hcd [ 1661.186072][T22473] udevd[22473]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1661.993304][ T5916] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1662.005441][ T5916] usb 10-1: not running at top speed; connect to a high speed hub [ 1662.051474][ T5916] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1662.090959][ T5916] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1662.127153][ T5916] usb 10-1: New USB device found, idVendor=1235, idProduct=821c, bcdDevice= 0.40 [ 1662.155048][ T5916] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1662.172538][T25976] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5612'. [ 1662.185443][ T5916] usb 10-1: Product: syz [ 1662.197103][ T5916] usb 10-1: Manufacturer: syz [ 1662.212089][ T5916] usb 10-1: SerialNumber: syz [ 1662.599576][ T5916] usb 10-1: skipping empty audio interface (v1) [ 1663.515750][ T5916] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1663.529160][ T5916] usb 10-1: USB disconnect, device number 113 [ 1663.605657][T22473] udevd[22473]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1663.784525][T25995] netlink: 'syz.3.5620': attribute type 29 has an invalid length. [ 1663.843946][T25999] netlink: 'syz.3.5620': attribute type 29 has an invalid length. [ 1665.374897][T26022] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5630'. [ 1665.393281][T26022] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5630'. [ 1665.475979][ T9343] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1665.476079][T26022] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5630'. [ 1665.522698][ T9343] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1665.534389][ T9343] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1665.543451][T26022] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5630'. [ 1665.563408][ T2148] usb 10-1: new full-speed USB device number 114 using dummy_hcd [ 1665.602670][ T9343] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1665.934549][ T2148] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1665.939571][T26040] netlink: 'syz.0.5639': attribute type 1 has an invalid length. [ 1665.943693][ T2148] usb 10-1: not running at top speed; connect to a high speed hub [ 1665.951420][ T5916] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1665.968406][ T2148] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1666.161175][T26040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5639'. [ 1666.344880][ T5916] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1666.562780][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1666.610910][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1666.662545][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1666.669951][ T2148] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1666.691072][ T2148] usb 10-1: New USB device found, idVendor=1235, idProduct=821c, bcdDevice= 0.40 [ 1666.708820][ T2148] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1666.722484][ T2148] usb 10-1: Product: syz [ 1666.726833][ T2148] usb 10-1: Manufacturer: syz [ 1666.731520][ T2148] usb 10-1: SerialNumber: syz [ 1666.751647][ T5916] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1666.782671][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1666.809912][ T5916] usb 3-1: Product: syz [ 1666.823458][ T5916] usb 3-1: Manufacturer: syz [ 1666.840285][ T5916] usb 3-1: SerialNumber: syz [ 1666.861374][T26050] syzkaller1: entered promiscuous mode [ 1666.878923][T26050] syzkaller1: entered allmulticast mode [ 1666.898751][ T5916] usb 3-1: config 0 descriptor?? [ 1666.909443][ T5916] iguanair 3-1:0.0: failed to submit urb: -90 [ 1666.927348][ T5916] iguanair 3-1:0.0: probe with driver iguanair failed with error -90 [ 1666.993025][ T2148] usb 10-1: skipping empty audio interface (v1) [ 1667.041087][T26056] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5646'. [ 1667.115580][ T2148] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1667.116903][T26058] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.5648'. [ 1667.161616][ T2148] usb 10-1: USB disconnect, device number 114 [ 1667.173221][ T9495] usb 3-1: USB disconnect, device number 100 [ 1667.277382][T22473] udevd[22473]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1667.712950][ T29] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1667.912601][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 1668.038783][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1668.132971][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.139640][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.226794][ T29] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1668.277513][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1668.344557][ T29] usb 4-1: Product: syz [ 1668.348791][ T29] usb 4-1: Manufacturer: syz [ 1668.368251][ T29] usb 4-1: SerialNumber: syz [ 1668.404414][ T29] usb 4-1: config 0 descriptor?? [ 1668.489891][T24991] bridge_slave_1: left allmulticast mode [ 1668.507929][T24991] bridge_slave_1: left promiscuous mode [ 1668.530089][T24991] bridge0: port 2(bridge_slave_1) entered disabled state [ 1668.530134][T26083] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.5657'. [ 1668.599850][T24991] bridge_slave_0: left allmulticast mode [ 1668.638310][T24991] bridge_slave_0: left promiscuous mode [ 1668.651532][T24991] bridge0: port 1(bridge_slave_0) entered disabled state [ 1668.681756][T26090] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5661'. [ 1668.833965][ T5888] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1668.986014][ T5888] usb 1-1: device descriptor read/64, error -71 [ 1669.117427][T24991] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1669.209528][T24991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1669.222250][T24991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1669.233749][T24991] bond0 (unregistering): Released all slaves [ 1669.249629][T24991] bond1 (unregistering): Released all slaves [ 1669.256151][ T5888] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1669.278784][T24991] bond2 (unregistering): Released all slaves [ 1669.301666][T26095] syzkaller1: entered promiscuous mode [ 1669.309192][T26095] syzkaller1: entered allmulticast mode [ 1669.360604][ T10] usb 8-1: new full-speed USB device number 84 using dummy_hcd [ 1669.396260][ T5888] usb 1-1: device descriptor read/64, error -71 [ 1669.522935][T24991] tipc: Disabling bearer [ 1669.523565][ T5888] usb usb1-port1: attempt power cycle [ 1669.538751][T24991] tipc: Left network mode [ 1669.586750][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1669.596635][ T10] usb 8-1: not running at top speed; connect to a high speed hub [ 1669.605781][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1669.618122][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1669.648709][T26114] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5668'. [ 1669.689253][T26114] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5668'. [ 1669.708802][ T10] usb 8-1: New USB device found, idVendor=1235, idProduct=821c, bcdDevice= 0.40 [ 1669.720481][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1669.747138][ T10] usb 8-1: Product: syz [ 1669.751366][ T10] usb 8-1: Manufacturer: syz [ 1669.775378][ T10] usb 8-1: SerialNumber: syz [ 1669.893005][ T2148] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1669.917131][ T5888] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1669.954176][ T5888] usb 1-1: device descriptor read/8, error -71 [ 1670.053894][ T10] usb 8-1: skipping empty audio interface (v1) [ 1670.086782][ T2148] usb 3-1: Using ep0 maxpacket: 8 [ 1670.094154][ T2148] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1670.105059][ T2148] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1670.117051][ T2148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1670.214195][ T2148] usb 3-1: config 0 descriptor?? [ 1670.228634][ T5888] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1670.307796][ T2148] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1670.350768][ T5888] usb 1-1: device descriptor read/8, error -71 [ 1670.498437][ T5888] usb usb1-port1: unable to enumerate USB device [ 1670.528328][ T2148] gspca_vc032x: reg_r err -32 [ 1670.539892][ T10] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1670.574604][ T2148] vc032x 3-1:0.0: probe with driver vc032x failed with error -32 [ 1670.640270][ T10] usb 8-1: USB disconnect, device number 84 [ 1670.659683][ T29] usb 4-1: USB disconnect, device number 70 [ 1670.732267][T22473] udevd[22473]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1670.910221][T26136] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5675'. [ 1670.953698][T26139] binder: 26138:26139 ioctl c0306201 0 returned -14 [ 1671.264628][T24991] hsr_slave_0: left promiscuous mode [ 1671.272237][T24991] hsr_slave_1: left promiscuous mode [ 1671.284800][T24991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1671.294598][T24991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1671.346035][T26143] netlink: 'syz.7.5677': attribute type 9 has an invalid length. [ 1671.356534][T24991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1671.365505][T24991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1671.374000][T26143] netlink: 'syz.7.5677': attribute type 11 has an invalid length. [ 1671.382565][T26143] netlink: 'syz.7.5677': attribute type 12 has an invalid length. [ 1671.390931][T26143] netlink: 210020 bytes leftover after parsing attributes in process `syz.7.5677'. [ 1671.413666][T26143] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5677'. [ 1671.445337][T24991] veth1_macvtap: left promiscuous mode [ 1671.452157][T24991] veth0_macvtap: left promiscuous mode [ 1672.497015][T24991] team0 (unregistering): Port device team_slave_1 removed [ 1672.539914][T24991] team0 (unregistering): Port device team_slave_0 removed [ 1672.676467][ T2148] usb 3-1: USB disconnect, device number 101 [ 1672.798433][T24991] team0 (unregistering): Port device dummy0 removed [ 1672.840128][T26159] veth0_macvtap: left promiscuous mode [ 1672.903089][ T5916] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1673.029544][T26173] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5689'. [ 1673.064873][ T2148] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 1673.093803][ T5916] usb 1-1: Using ep0 maxpacket: 16 [ 1673.113773][ T5916] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1673.142143][ T5916] usb 1-1: config 1 has an invalid interface number: 237 but max is 0 [ 1673.181917][ T5916] usb 1-1: config 1 has no interface number 0 [ 1673.196464][ T5916] usb 1-1: config 1 interface 237 has no altsetting 0 [ 1673.239018][ T5916] usb 1-1: New USB device found, idVendor=045e, idProduct=0445, bcdDevice=87.ed [ 1673.252481][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1673.299391][ T5916] usb 1-1: Product: syz [ 1673.313517][ T2148] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1673.319667][ T5916] usb 1-1: Manufacturer: syz [ 1673.332684][T26180] netlink: 'syz.4.5693': attribute type 9 has an invalid length. [ 1673.345117][ T2148] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1673.351798][ T5916] usb 1-1: SerialNumber: syz [ 1673.359108][T26180] netlink: 'syz.4.5693': attribute type 11 has an invalid length. [ 1673.378163][ T2148] usb 3-1: can't read configurations, error -71 [ 1673.399333][T26184] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5695'. [ 1673.416156][T26180] netlink: 'syz.4.5693': attribute type 12 has an invalid length. [ 1673.431847][T26180] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.5693'. [ 1673.439653][T26184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1673.442028][T26180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5693'. [ 1673.492172][T26184] bridge_slave_0 (unregistering): left allmulticast mode [ 1673.526014][T26184] bridge_slave_0 (unregistering): left promiscuous mode [ 1673.546939][T26184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1673.632890][ T5888] usb 8-1: new high-speed USB device number 85 using dummy_hcd [ 1673.641996][ T5916] ipaq 1-1:1.237: PocketPC PDA converter detected [ 1673.659922][ T5916] ipaq 1-1:1.237: probe with driver ipaq failed with error -71 [ 1673.679841][ T5916] usb 1-1: USB disconnect, device number 108 [ 1673.798514][ T5888] usb 8-1: Using ep0 maxpacket: 32 [ 1673.819444][ T5888] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1673.841833][ T5888] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1673.871410][ T5888] usb 8-1: can't read configurations, error -71 [ 1674.332619][ T29] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1674.496243][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 1674.523254][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1674.561463][T26219] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5706'. [ 1674.562635][ T29] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1674.613701][T26222] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5707'. [ 1674.624638][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1674.643822][ T29] usb 5-1: config 0 descriptor?? [ 1674.660674][ T29] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1674.702194][T26227] netlink: 'syz.3.5709': attribute type 9 has an invalid length. [ 1674.735379][T26227] netlink: 'syz.3.5709': attribute type 11 has an invalid length. [ 1674.772571][T26227] netlink: 'syz.3.5709': attribute type 12 has an invalid length. [ 1674.780444][T26227] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.5709'. [ 1674.821548][ T5480] veth0_macvtap: entered promiscuous mode [ 1674.839520][T26227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5709'. [ 1674.863045][ T29] gspca_vc032x: reg_r err -32 [ 1674.867848][ T29] vc032x 5-1:0.0: probe with driver vc032x failed with error -32 [ 1675.401896][T26253] netlink: 'syz.2.5718': attribute type 3 has an invalid length. [ 1675.657612][T26261] xt_hashlimit: size too large, truncated to 1048576 [ 1676.543207][T11675] usb 10-1: new high-speed USB device number 115 using dummy_hcd [ 1676.595322][ T5888] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1676.716658][T11675] usb 10-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1676.734594][T11675] usb 10-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1676.739926][T26302] overlayfs: missing 'lowerdir' [ 1676.745313][T11675] usb 10-1: Product: syz [ 1676.752183][T11675] usb 10-1: SerialNumber: syz [ 1676.762085][ T5888] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1676.778767][T11675] usb 10-1: config 0 descriptor?? [ 1676.787813][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1676.812839][ T5888] usb 1-1: Product: syz [ 1676.823832][ T5888] usb 1-1: Manufacturer: syz [ 1676.828510][ T5888] usb 1-1: SerialNumber: syz [ 1676.859353][ T5888] usb 1-1: config 0 descriptor?? [ 1676.883343][ T10] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1677.028823][T11675] hso 10-1:0.0: Failed to find BULK IN ep [ 1677.042790][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1677.050065][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1677.061055][ T10] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1677.075770][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1677.088954][ T10] usb 3-1: config 0 descriptor?? [ 1677.094711][ T5916] usb 8-1: new high-speed USB device number 87 using dummy_hcd [ 1677.130847][T24418] usb 5-1: USB disconnect, device number 37 [ 1677.217438][T26306] xt_hashlimit: size too large, truncated to 1048576 [ 1677.235904][ T29] usb 10-1: USB disconnect, device number 115 [ 1677.242905][ T5916] usb 8-1: device descriptor read/64, error -71 [ 1677.475185][T26314] __nla_validate_parse: 5 callbacks suppressed [ 1677.475207][T26314] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5739'. [ 1677.482725][ T5916] usb 8-1: new high-speed USB device number 88 using dummy_hcd [ 1677.510895][T26314] x_tables: ip_tables: udp match: only valid for protocol 17 [ 1677.642734][ T5916] usb 8-1: device descriptor read/64, error -71 [ 1677.752997][ T5916] usb usb8-port1: attempt power cycle [ 1677.852852][ T10] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 1678.001693][T26333] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5747'. [ 1678.026621][ T10] usb 4-1: config 0 has an invalid interface number: 175 but max is 0 [ 1678.035291][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1678.055699][ T10] usb 4-1: config 0 has no interface number 0 [ 1678.071468][ T10] usb 4-1: config 0 interface 175 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 1678.089733][ T10] usb 4-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 1678.095461][ T5916] usb 8-1: new high-speed USB device number 89 using dummy_hcd [ 1678.099701][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.122139][ T10] usb 4-1: Product: syz [ 1678.135744][ T5916] usb 8-1: device descriptor read/8, error -71 [ 1678.142839][ T10] usb 4-1: Manufacturer: syz [ 1678.142869][ T10] usb 4-1: SerialNumber: syz [ 1678.151370][ T10] usb 4-1: config 0 descriptor?? [ 1678.243038][ T10] symbolserial 4-1:0.175: required endpoints missing [ 1678.413405][ T9495] usb 10-1: new high-speed USB device number 116 using dummy_hcd [ 1678.453596][ T10] usb 4-1: USB disconnect, device number 71 [ 1678.576579][ T9495] usb 10-1: Using ep0 maxpacket: 8 [ 1678.590109][ T9495] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1678.612608][ T5916] usb 8-1: new high-speed USB device number 90 using dummy_hcd [ 1678.623159][ T9495] usb 10-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1678.634121][ T9495] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1678.646146][ T9495] usb 10-1: config 0 descriptor?? [ 1678.655908][ T9495] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1678.663359][ T5916] usb 8-1: device descriptor read/8, error -71 [ 1678.773143][ T5916] usb usb8-port1: unable to enumerate USB device [ 1678.860535][ T9495] gspca_vc032x: reg_r err -32 [ 1678.871822][ T9495] vc032x 10-1:0.0: probe with driver vc032x failed with error -32 [ 1679.264004][T26343] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5750'. [ 1679.273553][T26343] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1679.386383][ T9495] usb 1-1: USB disconnect, device number 109 [ 1679.672806][ T5916] usb 3-1: USB disconnect, device number 104 [ 1680.520715][T26369] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5761'. [ 1680.533111][ T5916] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1680.775608][ T5916] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1680.800240][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1680.832799][ T5916] usb 3-1: Product: syz [ 1680.843189][ T5916] usb 3-1: SerialNumber: syz [ 1680.861230][ T5916] usb 3-1: config 0 descriptor?? [ 1681.090787][ T5916] hso 3-1:0.0: Failed to find BULK IN ep [ 1681.238236][ T5916] usb 10-1: USB disconnect, device number 116 [ 1681.322804][ T5888] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1681.352517][ T9495] usb 3-1: USB disconnect, device number 105 [ 1681.502622][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 1681.523372][ T5888] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1681.552687][ T10] usb 8-1: new high-speed USB device number 91 using dummy_hcd [ 1681.564580][ T5888] usb 1-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1681.579775][ T5888] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1681.586658][ T5888] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1681.603982][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1681.615897][T26401] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5775'. [ 1681.628927][ T5888] usb 1-1: config 0 descriptor?? [ 1681.656717][ T5888] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1681.733876][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1681.762490][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1681.806428][ T10] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1681.836630][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1681.858209][ T10] usb 8-1: SerialNumber: syz [ 1681.998665][T22381] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1682.011140][T26410] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5779'. [ 1682.011978][T22381] CPU: 0 UID: 0 PID: 22381 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1682.012014][T22381] Tainted: [L]=SOFTLOCKUP [ 1682.012024][T22381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1682.012042][T22381] Workqueue: hci4 hci_rx_work [ 1682.012083][T22381] Call Trace: [ 1682.012094][T22381] [ 1682.012105][T22381] dump_stack_lvl+0xe8/0x150 [ 1682.012146][T22381] sysfs_create_dir_ns+0x271/0x2a0 [ 1682.012187][T22381] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1682.012222][T22381] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1682.012263][T22381] ? do_raw_spin_unlock+0xf5/0x210 [ 1682.012299][T22381] kobject_add_internal+0x62b/0xd00 [ 1682.012353][T22381] kobject_add+0x163/0x240 [ 1682.012392][T22381] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1682.012430][T22381] ? __pfx_kobject_add+0x10/0x10 [ 1682.012471][T22381] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1682.012502][T22381] ? _raw_spin_unlock+0x28/0x50 [ 1682.012532][T22381] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1682.012568][T22381] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1682.012605][T22381] ? get_device_parent+0x366/0x3a0 [ 1682.012648][T22381] device_add+0x408/0xb70 [ 1682.012691][T22381] hci_conn_add_sysfs+0xd5/0x210 [ 1682.012731][T22381] le_conn_complete_evt+0x10e6/0x16b0 [ 1682.012760][T22381] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1682.012802][T22381] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1682.012828][T22381] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1682.012867][T22381] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1682.012905][T22381] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1682.012936][T22381] ? skb_pull_data+0xfb/0x200 [ 1682.012982][T22381] hci_le_conn_complete_evt+0x187/0x470 [ 1682.013035][T22381] hci_event_packet+0x659/0xef0 [ 1682.013082][T22381] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1682.013122][T22381] ? __pfx_hci_event_packet+0x10/0x10 [ 1682.013165][T22381] ? kcov_remote_start+0x49a/0x7a0 [ 1682.013209][T22381] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1682.013240][T22381] ? hci_send_to_monitor+0xe2/0x590 [ 1682.013274][T22381] hci_rx_work+0x3ee/0x1030 [ 1682.013313][T22381] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1682.013349][T22381] ? process_scheduled_works+0xa8d/0x18c0 [ 1682.013388][T22381] process_scheduled_works+0xb6e/0x18c0 [ 1682.013462][T22381] ? __pfx_process_scheduled_works+0x10/0x10 [ 1682.013505][T22381] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1682.013536][T22381] ? assign_work+0x3d5/0x5e0 [ 1682.013578][T22381] worker_thread+0xa53/0xfc0 [ 1682.013622][T22381] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1682.013671][T22381] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1682.013713][T22381] kthread+0x388/0x470 [ 1682.013741][T22381] ? __pfx_worker_thread+0x10/0x10 [ 1682.013775][T22381] ? __pfx_kthread+0x10/0x10 [ 1682.013804][T22381] ret_from_fork+0x51e/0xb90 [ 1682.013841][T22381] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1682.013874][T22381] ? __pfx_ret_from_fork+0x10/0x10 [ 1682.013907][T22381] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1682.013938][T22381] ? __switch_to+0xc7d/0x1450 [ 1682.013974][T22381] ? __pfx_kthread+0x10/0x10 [ 1682.014002][T22381] ret_from_fork_asm+0x1a/0x30 [ 1682.014063][T22381] [ 1682.016959][T22381] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1682.031612][T26410] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5779'. [ 1682.046249][T22381] Bluetooth: hci4: failed to register connection device [ 1682.433748][ T10] usb 8-1: 0:2 : does not exist [ 1682.456267][ T10] usb 8-1: unit 5 not found! [ 1682.509305][T24991] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1682.509497][T26410] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5779'. [ 1682.535573][ T13] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1682.665545][T26410] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5779'. [ 1682.693927][ T13] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1682.718771][ T13] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1682.744009][ T10] usb 8-1: USB disconnect, device number 91 [ 1682.885241][T22473] udevd[22473]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1683.712738][ T10] usb 8-1: new high-speed USB device number 92 using dummy_hcd [ 1683.996842][ T10] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1684.033489][ T10] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1684.095159][ T10] usb 8-1: Product: syz [ 1684.114464][ T10] usb 8-1: SerialNumber: syz [ 1684.157034][T11675] usb 1-1: USB disconnect, device number 110 [ 1684.368132][ T10] usb 8-1: config 0 descriptor?? [ 1684.384936][T26458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5796'. [ 1684.415543][T26458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5796'. [ 1684.717438][T22443] Bluetooth: hci6: Ignoring HCI_Connection_Complete for existing connection [ 1684.788401][T26458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5796'. [ 1684.798246][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1684.835128][ T10] hso 8-1:0.0: Failed to find BULK IN ep [ 1684.859371][T26458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5796'. [ 1685.056448][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1685.107743][ T10] usb 8-1: USB disconnect, device number 92 [ 1685.149399][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1685.223631][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1685.731545][T26481] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5802'. [ 1685.923257][T26481] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5802'. [ 1686.752917][T18581] usb 8-1: new high-speed USB device number 93 using dummy_hcd [ 1686.943198][T18581] usb 8-1: Using ep0 maxpacket: 32 [ 1686.958838][T18581] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1686.990755][T18581] usb 8-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1687.046290][T18581] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1687.081614][T18581] usb 8-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1687.134703][T18581] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1687.194676][T18581] usb 8-1: config 0 descriptor?? [ 1687.231700][T18581] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1688.792836][ T2148] usb 10-1: new high-speed USB device number 117 using dummy_hcd [ 1688.965893][ T2148] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1688.980100][ T2148] usb 10-1: config 0 has no interface number 0 [ 1689.001472][ T2148] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1689.028937][ T2148] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1689.052309][ T2148] usb 10-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1689.102038][ T2148] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1689.165356][ T2148] usb 10-1: config 0 descriptor?? [ 1689.513913][T22443] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1689.564667][ T9495] usb 8-1: USB disconnect, device number 93 [ 1689.800090][ T2148] usbhid 10-1:0.1: can't add hid device: -71 [ 1689.813366][ T2148] usbhid 10-1:0.1: probe with driver usbhid failed with error -71 [ 1689.874893][ T2148] usb 10-1: USB disconnect, device number 117 [ 1690.148552][T26559] syz.0.5823: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1690.219029][T26559] CPU: 1 UID: 0 PID: 26559 Comm: syz.0.5823 Tainted: G L syzkaller #0 PREEMPT(full) [ 1690.219070][T26559] Tainted: [L]=SOFTLOCKUP [ 1690.219081][T26559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1690.219100][T26559] Call Trace: [ 1690.219112][T26559] [ 1690.219123][T26559] dump_stack_lvl+0xe8/0x150 [ 1690.219165][T26559] warn_alloc+0x249/0x340 [ 1690.219199][T26559] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1690.219231][T26559] ? stack_trace_save+0xa9/0x100 [ 1690.219264][T26559] ? __pfx_warn_alloc+0x10/0x10 [ 1690.219293][T26559] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1690.219342][T26559] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1690.219374][T26559] ? kasan_save_track+0x4f/0x80 [ 1690.219403][T26559] ? kasan_save_track+0x3e/0x80 [ 1690.219431][T26559] ? __kasan_kmalloc+0x93/0xb0 [ 1690.219462][T26559] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1690.219491][T26559] ? xskq_create+0x56/0x170 [ 1690.219523][T26559] ? xsk_setsockopt+0x54c/0x990 [ 1690.219549][T26559] ? do_sock_setsockopt+0x17c/0x1b0 [ 1690.219581][T26559] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1690.219614][T26559] ? do_syscall_64+0x14d/0xf80 [ 1690.219656][T26559] __vmalloc_node_range_noprof+0x132/0x1730 [ 1690.219724][T26559] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1690.219761][T26559] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1690.219790][T26559] ? __kasan_kmalloc+0x93/0xb0 [ 1690.219823][T26559] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1690.219859][T26559] vmalloc_user_noprof+0xad/0xe0 [ 1690.219888][T26559] ? xskq_create+0xbf/0x170 [ 1690.219921][T26559] xskq_create+0xbf/0x170 [ 1690.219958][T26559] xsk_init_queue+0x8a/0xe0 [ 1690.219993][T26559] xsk_setsockopt+0x54c/0x990 [ 1690.220029][T26559] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1690.220061][T26559] ? __pfx_aa_sk_perm+0x10/0x10 [ 1690.220099][T26559] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1690.220127][T26559] ? aa_sock_opt_perm+0xff/0x1a0 [ 1690.220149][T26559] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1690.220171][T26559] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1690.220194][T26559] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1690.220218][T26559] do_sock_setsockopt+0x17c/0x1b0 [ 1690.220249][T26559] __x64_sys_setsockopt+0x13d/0x1b0 [ 1690.220279][T26559] do_syscall_64+0x14d/0xf80 [ 1690.220306][T26559] ? trace_irq_disable+0x3b/0x150 [ 1690.220331][T26559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1690.220357][T26559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1690.220377][T26559] RIP: 0033:0x7f803e19c819 [ 1690.220396][T26559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1690.220413][T26559] RSP: 002b:00007f803f11b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1690.220434][T26559] RAX: ffffffffffffffda RBX: 00007f803e415fa0 RCX: 00007f803e19c819 [ 1690.220449][T26559] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 1690.220461][T26559] RBP: 00007f803e232c91 R08: 0000000000000004 R09: 0000000000000000 [ 1690.220474][T26559] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1690.220486][T26559] R13: 00007f803e416038 R14: 00007f803e415fa0 R15: 00007ffe6df40768 [ 1690.220517][T26559] [ 1690.547735][T26559] Mem-Info: [ 1690.553194][T26559] active_anon:9254 inactive_anon:0 isolated_anon:0 [ 1690.553194][T26559] active_file:22228 inactive_file:40929 isolated_file:0 [ 1690.553194][T26559] unevictable:768 dirty:131 writeback:0 [ 1690.553194][T26559] slab_reclaimable:12583 slab_unreclaimable:118390 [ 1690.553194][T26559] mapped:51166 shmem:1398 pagetables:1827 [ 1690.553194][T26559] sec_pagetables:0 bounce:0 [ 1690.553194][T26559] kernel_misc_reclaimable:0 [ 1690.553194][T26559] free:1244429 free_pcp:9687 free_cma:0 [ 1690.863365][T26559] Node 0 active_anon:37516kB inactive_anon:0kB active_file:88912kB inactive_file:163512kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:204664kB dirty:424kB writeback:0kB shmem:4056kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14660kB pagetables:7152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1690.913206][T26559] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1690.998756][T26559] Node 0 DMA free:15344kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1691.275675][T26559] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1691.349096][T26559] Node 0 DMA32 free:1024632kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38476kB inactive_anon:0kB active_file:88912kB inactive_file:163512kB unevictable:1536kB writepending:444kB zspages:0kB present:3129332kB managed:2552584kB mlocked:0kB bounce:0kB free_pcp:36792kB local_pcp:19760kB free_cma:0kB [ 1691.464125][T26559] lowmem_reserve[]: 0 0 0 0 0 [ 1691.498537][T26559] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 1691.601627][T26559] lowmem_reserve[]: 0 0 0 0 0 [ 1691.654060][T26559] Node 1 Normal free:3937452kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1691.766520][T26559] lowmem_reserve[]: 0 0 0 0 0 [ 1691.795558][T26559] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 1691.877262][T26559] Node 0 DMA32: 5942*4kB (UME) 6526*8kB (UME) 4203*16kB (UME) 696*32kB (UME) 446*64kB (UME) 777*128kB (UME) 578*256kB (UME) 395*512kB (UME) 158*1024kB (UM) 15*2048kB (UM) 46*4096kB (UM) = 1024632kB [ 1691.905183][T26580] fuse: Unknown parameter 'user_id00000000000000000000' [ 1691.937222][ T31] audit: type=1800 audit(1775818977.174:1430): pid=26580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5830" name="file1" dev="tmpfs" ino=999 res=0 errno=0 [ 1692.018862][T26559] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1692.168294][T26559] Node 1 Normal: 1*4kB (U) 9*8kB (UM) 12*16kB (UM) 5*32kB (UM) 6*64kB (UM) 3*128kB (UM) 4*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 959*4096kB (UM) = 3937452kB [ 1692.335170][T26559] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1692.447646][T26559] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1692.686878][T26559] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1692.703056][T26559] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1692.712626][T26559] 67395 total pagecache pages [ 1692.747466][T26559] 0 pages in swap cache [ 1692.769748][T26559] Free swap = 124996kB [ 1692.804323][T26559] Total swap = 124996kB [ 1692.855640][T26559] 2097051 pages RAM [ 1692.877134][T26559] 0 pages HighMem/MovableOnly [ 1692.916527][T26559] 427071 pages reserved [ 1692.922703][T26559] 0 pages cma reserved [ 1693.302857][ T2148] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1693.512568][ T2148] usb 5-1: Using ep0 maxpacket: 32 [ 1693.519805][ T2148] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1693.593557][ T2148] usb 5-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1693.623055][ T2148] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1693.629898][ T2148] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1693.644184][ T2148] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1693.738232][ T2148] usb 5-1: config 0 descriptor?? [ 1693.767261][ T2148] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1693.851112][T22381] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1694.296395][T26613] validate_nla: 3 callbacks suppressed [ 1694.296419][T26613] netlink: 'syz.2.5843': attribute type 9 has an invalid length. [ 1694.333611][T26613] netlink: 'syz.2.5843': attribute type 11 has an invalid length. [ 1694.361349][T26613] netlink: 'syz.2.5843': attribute type 12 has an invalid length. [ 1694.377457][T26621] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5845'. [ 1694.383305][T26613] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.5843'. [ 1694.707276][T26633] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5846'. [ 1695.752876][T18581] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1695.904376][T18581] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1695.916431][T18581] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1695.931798][T18581] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1695.947444][T18581] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1695.960897][T18581] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1695.971508][T18581] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1695.979970][T18581] usb 4-1: Product: syz [ 1695.984485][T18581] usb 4-1: Manufacturer: syz [ 1695.990377][T18581] usb 4-1: SerialNumber: syz [ 1695.992555][ T2148] usb 10-1: new full-speed USB device number 118 using dummy_hcd [ 1696.030555][T18581] usb 4-1: config 0 descriptor?? [ 1696.055134][T18581] iguanair 4-1:0.0: probe with driver iguanair failed with error -12 [ 1696.177948][ T2148] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1696.187178][ T2148] usb 10-1: not running at top speed; connect to a high speed hub [ 1696.205827][ T2148] usb 10-1: config 6 has an invalid interface number: 217 but max is 3 [ 1696.220990][T26649] fuse: Bad value for 'fd' [ 1696.225996][ T2148] usb 10-1: config 6 has an invalid interface number: 152 but max is 3 [ 1696.259562][T18581] usb 4-1: USB disconnect, device number 72 [ 1696.341754][ T2148] usb 10-1: config 6 has an invalid interface number: 237 but max is 3 [ 1696.351097][ T2148] usb 10-1: config 6 has an invalid interface number: 167 but max is 3 [ 1696.360288][ T2148] usb 10-1: config 6 has an invalid interface number: 11 but max is 3 [ 1696.368979][ T2148] usb 10-1: config 6 has 5 interfaces, different from the descriptor's value: 4 [ 1696.378650][ T2148] usb 10-1: config 6 has no interface number 0 [ 1696.385566][ T2148] usb 10-1: config 6 has no interface number 1 [ 1696.391819][ T2148] usb 10-1: config 6 has no interface number 2 [ 1696.399511][ T2148] usb 10-1: config 6 has no interface number 3 [ 1696.406242][ T2148] usb 10-1: config 6 has no interface number 4 [ 1696.441965][ T2148] usb 10-1: config 6 interface 217 altsetting 9 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1696.481482][ T2148] usb 10-1: config 6 interface 152 altsetting 1 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1696.504628][ T2148] usb 10-1: config 6 interface 152 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1696.551943][ T2148] usb 10-1: config 6 interface 152 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 1696.574284][ T2148] usb 10-1: config 6 interface 152 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1696.586300][ T2148] usb 10-1: config 6 interface 237 altsetting 58 has a duplicate endpoint with address 0xF, skipping [ 1696.606242][ T2148] usb 10-1: config 6 interface 237 altsetting 58 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1696.609969][T18581] usb 5-1: USB disconnect, device number 38 [ 1696.692389][ T2148] usb 10-1: config 6 interface 237 altsetting 58 has an invalid descriptor for endpoint zero, skipping [ 1696.737660][ T2148] usb 10-1: config 6 interface 237 altsetting 58 has a duplicate endpoint with address 0x4, skipping [ 1696.892322][T22443] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1696.930864][ T2148] usb 10-1: config 6 interface 237 altsetting 58 has a duplicate endpoint with address 0xF, skipping [ 1696.962639][ T2148] usb 10-1: config 6 interface 167 altsetting 233 has a duplicate endpoint with address 0xA, skipping [ 1696.973770][ T2148] usb 10-1: config 6 interface 167 altsetting 233 has a duplicate endpoint with address 0x4, skipping [ 1696.985287][ T2148] usb 10-1: config 6 interface 167 altsetting 233 has 3 endpoint descriptors, different from the interface descriptor's value: 12 [ 1697.009617][ T2148] usb 10-1: config 6 interface 11 altsetting 23 has an endpoint descriptor with address 0x2F, changing to 0xF [ 1697.186453][T26663] netlink: 152116 bytes leftover after parsing attributes in process `syz.3.5858'. [ 1697.214107][ T2148] usb 10-1: config 6 interface 11 altsetting 23 has a duplicate endpoint with address 0xF, skipping [ 1697.261770][ T2148] usb 10-1: config 6 interface 11 altsetting 23 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1697.289971][ T2148] usb 10-1: config 6 interface 11 altsetting 23 has a duplicate endpoint with address 0xF, skipping [ 1697.315766][ T2148] usb 10-1: config 6 interface 11 altsetting 23 has a duplicate endpoint with address 0xA, skipping [ 1697.398688][ T2148] usb 10-1: config 6 interface 11 altsetting 23 has a duplicate endpoint with address 0xC, skipping [ 1697.429658][ T2148] usb 10-1: config 6 interface 11 altsetting 23 has a duplicate endpoint with address 0xC, skipping [ 1697.485592][ T2148] usb 10-1: config 6 interface 11 altsetting 23 has a duplicate endpoint with address 0xC, skipping [ 1697.583474][ T2148] usb 10-1: config 6 interface 11 altsetting 23 has 9 endpoint descriptors, different from the interface descriptor's value: 23 [ 1697.600022][ T2148] usb 10-1: config 6 interface 217 has no altsetting 0 [ 1697.607302][ T2148] usb 10-1: config 6 interface 152 has no altsetting 0 [ 1697.614847][ T2148] usb 10-1: config 6 interface 237 has no altsetting 0 [ 1697.622118][ T2148] usb 10-1: config 6 interface 167 has no altsetting 0 [ 1697.629645][ T2148] usb 10-1: config 6 interface 11 has no altsetting 0 [ 1697.726269][ T2148] usb 10-1: New USB device found, idVendor=06cd, idProduct=010b, bcdDevice=7e.2f [ 1697.743097][ T2148] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1697.830601][T26675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5862'. [ 1698.592376][ T2148] usb 10-1: Product: Ⱙ栖璧쉬ꬪ勊ᆟೢず㗏ࡂཞ汌ⴅ⚑刉옛鵃ᣊ军ඛ訴䳌ⷓꚡᩚ﮽㡊빡材튖噄欌崬퇥ﶇ듯敽䑅꧿ث븆壗濸䁩ﾨ㶔異貨켜 [ 1698.706062][ T2148] usb 10-1: Manufacturer: ࠇ [ 1698.746256][ T2148] usb 10-1: SerialNumber: Ќ [ 1698.831582][ T2148] usb 10-1: can't set config #6, error -71 [ 1698.876838][ T2148] usb 10-1: USB disconnect, device number 118 [ 1698.993146][T11675] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1699.332892][T11675] usb 5-1: Using ep0 maxpacket: 32 [ 1699.340402][T11675] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1699.349604][T11675] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 1699.358293][T11675] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1699.359066][T26690] fuse: Bad value for 'fd' [ 1699.435189][T11675] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1699.459317][T11675] usb 5-1: config 128 has no interface number 0 [ 1699.494874][T11675] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1699.520181][T11675] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1699.560501][T11675] usb 5-1: config 128 interface 127 has no altsetting 0 [ 1699.631109][T11675] usb 5-1: string descriptor 0 read error: -22 [ 1699.654911][T11675] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1699.686192][T11675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.987394][T11675] usb 5-1: USB disconnect, device number 39 [ 1700.002553][ T2148] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1700.036688][T26702] netlink: 152116 bytes leftover after parsing attributes in process `syz.9.5873'. [ 1700.187847][T22381] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 1700.203029][ T2148] usb 3-1: device descriptor read/64, error -71 [ 1700.214325][T22473] udevd[22473]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1700.496396][T26709] netlink: 172 bytes leftover after parsing attributes in process `syz.0.5875'. [ 1700.513466][ T2148] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1700.548103][T26712] fuse: Unknown parameter '0x0000000000000005' [ 1700.663883][ T2148] usb 3-1: device descriptor read/64, error -71 [ 1700.776376][ T2148] usb usb3-port1: attempt power cycle [ 1700.832920][ T5916] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 1700.907799][T26724] fuse: Unknown parameter '00000000000000000003' [ 1701.023707][ T5916] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1701.048328][ T5916] usb 4-1: not running at top speed; connect to a high speed hub [ 1701.068319][ T5916] usb 4-1: config 6 has an invalid interface number: 217 but max is 3 [ 1701.087348][ T5916] usb 4-1: config 6 has an invalid interface number: 152 but max is 3 [ 1701.130381][ T5916] usb 4-1: config 6 has an invalid interface number: 237 but max is 3 [ 1701.142853][ T2148] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1701.155571][ T5916] usb 4-1: config 6 has an invalid interface number: 167 but max is 3 [ 1701.186368][ T5916] usb 4-1: config 6 has an invalid interface number: 11 but max is 3 [ 1701.206471][ T2148] usb 3-1: device descriptor read/8, error -71 [ 1701.221650][ T5916] usb 4-1: config 6 has 5 interfaces, different from the descriptor's value: 4 [ 1701.275191][ T5916] usb 4-1: config 6 has no interface number 0 [ 1701.286323][ T5916] usb 4-1: config 6 has no interface number 1 [ 1701.299679][ T5916] usb 4-1: config 6 has no interface number 2 [ 1701.317971][ T5916] usb 4-1: config 6 has no interface number 3 [ 1701.318917][T26733] fuse: Unknown parameter '0x0000000000000004' [ 1701.330568][ T5916] usb 4-1: config 6 has no interface number 4 [ 1701.476677][ T2148] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1701.538315][ T31] audit: type=1800 audit(1775818986.624:1431): pid=26733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5884" name="file1" dev="tmpfs" ino=559 res=0 errno=0 [ 1701.581352][ T5916] usb 4-1: config 6 interface 217 altsetting 9 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1701.594227][ T5916] usb 4-1: config 6 interface 152 altsetting 1 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1701.608444][ T5916] usb 4-1: config 6 interface 152 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1701.621127][ T5916] usb 4-1: config 6 interface 152 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 1701.635311][ T2148] usb 3-1: device descriptor read/8, error -71 [ 1701.751585][ T2148] usb usb3-port1: unable to enumerate USB device [ 1702.365892][ T5916] usb 4-1: config 6 interface 152 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1702.451844][ T5916] usb 4-1: config 6 interface 237 altsetting 58 has a duplicate endpoint with address 0xF, skipping [ 1702.516779][ T5916] usb 4-1: config 6 interface 237 altsetting 58 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1702.546132][ T5916] usb 4-1: config 6 interface 237 altsetting 58 has an invalid descriptor for endpoint zero, skipping [ 1702.558137][ T5916] usb 4-1: config 6 interface 237 altsetting 58 has a duplicate endpoint with address 0x4, skipping [ 1702.571473][T26745] netlink: 165240 bytes leftover after parsing attributes in process `syz.7.5887'. [ 1702.593235][ T5916] usb 4-1: config 6 interface 237 altsetting 58 has a duplicate endpoint with address 0xF, skipping [ 1702.605209][ T5916] usb 4-1: config 6 interface 167 altsetting 233 has a duplicate endpoint with address 0xA, skipping [ 1702.616892][ T5916] usb 4-1: config 6 interface 167 altsetting 233 has a duplicate endpoint with address 0x4, skipping [ 1702.630360][ T5916] usb 4-1: config 6 interface 167 altsetting 233 has 3 endpoint descriptors, different from the interface descriptor's value: 12 [ 1702.644745][ T5916] usb 4-1: config 6 interface 11 altsetting 23 has an endpoint descriptor with address 0x2F, changing to 0xF [ 1702.686481][ T5916] usb 4-1: config 6 interface 11 altsetting 23 has a duplicate endpoint with address 0xF, skipping [ 1702.749958][ T5916] usb 4-1: config 6 interface 11 altsetting 23 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1702.772608][ T2148] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1702.780420][ T5916] usb 4-1: config 6 interface 11 altsetting 23 has a duplicate endpoint with address 0xF, skipping [ 1702.780463][ T5916] usb 4-1: config 6 interface 11 altsetting 23 has a duplicate endpoint with address 0xA, skipping [ 1702.851067][ T5916] usb 4-1: config 6 interface 11 altsetting 23 has a duplicate endpoint with address 0xC, skipping [ 1702.966118][ T2148] usb 1-1: Using ep0 maxpacket: 32 [ 1702.978063][ T2148] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1702.990224][ T2148] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1703.004808][ T2148] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1703.015634][ T2148] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1703.030033][ T2148] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1703.045517][ T2148] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1703.060349][ T2148] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1703.075566][ T2148] usb 1-1: Product: syz [ 1703.075942][ T5916] usb 4-1: config 6 interface 11 altsetting 23 has a duplicate endpoint with address 0xC, skipping [ 1703.079914][ T2148] usb 1-1: Manufacturer: syz [ 1703.090691][ T5916] usb 4-1: config 6 interface 11 altsetting 23 has a duplicate endpoint with address 0xC, skipping [ 1703.090775][ T5916] usb 4-1: config 6 interface 11 altsetting 23 has 9 endpoint descriptors, different from the interface descriptor's value: 23 [ 1703.090878][ T5916] usb 4-1: config 6 interface 217 has no altsetting 0 [ 1703.090940][ T5916] usb 4-1: config 6 interface 152 has no altsetting 0 [ 1703.091000][ T5916] usb 4-1: config 6 interface 237 has no altsetting 0 [ 1703.091060][ T5916] usb 4-1: config 6 interface 167 has no altsetting 0 [ 1703.091120][ T5916] usb 4-1: config 6 interface 11 has no altsetting 0 [ 1703.096333][ T5916] usb 4-1: New USB device found, idVendor=06cd, idProduct=010b, bcdDevice=7e.2f [ 1703.134696][ T2148] usb 1-1: SerialNumber: syz [ 1703.873462][ T2148] usb 1-1: config 0 descriptor?? [ 1703.991087][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1704.001863][ T5916] usb 4-1: Product: Ⱙ栖璧쉬ꬪ勊ᆟೢず㗏ࡂཞ汌ⴅ⚑刉옛鵃ᣊ军ඛ訴䳌ⷓꚡᩚ﮽㡊빡材튖噄欌崬퇥ﶇ듯敽䑅꧿ث븆壗濸䁩ﾨ㶔異貨켜 [ 1704.055747][ T5916] usb 4-1: Manufacturer: ࠇ [ 1704.060526][ T5916] usb 4-1: SerialNumber: Ќ [ 1704.062869][ T2148] ldusb 1-1:0.0: Interrupt in endpoint not found [ 1704.150068][ T5916] usb 4-1: can't set config #6, error -71 [ 1704.232823][ T5916] usb 4-1: USB disconnect, device number 73 [ 1704.435481][T26758] netlink: 172 bytes leftover after parsing attributes in process `syz.2.5892'. [ 1704.739558][ T31] audit: type=1326 audit(1775818989.964:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26740 comm="syz.0.5886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803e19c819 code=0x7ffc0000 [ 1704.770898][T26764] fuse: Unknown parameter '0x0000000000000005' [ 1704.992612][ T31] audit: type=1326 audit(1775818989.964:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26740 comm="syz.0.5886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803e19c819 code=0x7ffc0000 [ 1705.108572][T26772] fuse: Unknown parameter '00000000000000000003' [ 1705.250042][ T31] audit: type=1326 audit(1775818989.964:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26740 comm="syz.0.5886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f803e19c819 code=0x7ffc0000 [ 1705.483245][T26776] fuse: Unknown parameter '0x0000000000000004' [ 1707.014794][ T31] audit: type=1326 audit(1775818989.964:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26740 comm="syz.0.5886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803e19c819 code=0x7ffc0000 [ 1707.195420][ T31] audit: type=1326 audit(1775818989.964:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26740 comm="syz.0.5886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f803e19c819 code=0x7ffc0000 [ 1707.331252][ T31] audit: type=1326 audit(1775818989.964:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26740 comm="syz.0.5886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803e19c819 code=0x7ffc0000 [ 1707.447913][T26789] netlink: 165240 bytes leftover after parsing attributes in process `syz.4.5902'. [ 1707.557177][ T31] audit: type=1326 audit(1775818989.964:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26740 comm="syz.0.5886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f803e19c819 code=0x7ffc0000 [ 1707.694169][ T31] audit: type=1326 audit(1775818990.184:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26740 comm="syz.0.5886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803e19c819 code=0x7ffc0000 [ 1707.771376][T26794] netlink: 1320 bytes leftover after parsing attributes in process `syz.2.5903'. [ 1707.796416][ T31] audit: type=1326 audit(1775818990.184:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26740 comm="syz.0.5886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803e19c819 code=0x7ffc0000 [ 1707.883685][ T31] audit: type=1800 audit(1775818990.754:1441): pid=26776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5898" name="file1" dev="tmpfs" ino=2302 res=0 errno=0 [ 1708.042329][ T2148] usb 1-1: USB disconnect, device number 111 [ 1708.523195][ T2148] usb 1-1: new full-speed USB device number 112 using dummy_hcd [ 1708.716391][T26803] netlink: 172 bytes leftover after parsing attributes in process `syz.2.5908'. [ 1708.742346][ T2148] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1708.999002][ T2148] usb 1-1: not running at top speed; connect to a high speed hub [ 1709.015418][T26803] fuse: Unknown parameter '0xffffffffffffffff' [ 1709.052221][ T2148] usb 1-1: config 6 has an invalid interface number: 217 but max is 3 [ 1709.069116][ T2148] usb 1-1: config 6 has an invalid interface number: 152 but max is 3 [ 1709.152505][ T2148] usb 1-1: config 6 has an invalid interface number: 237 but max is 3 [ 1709.160737][ T2148] usb 1-1: config 6 has an invalid interface number: 167 but max is 3 [ 1709.162545][ T29] usb 8-1: new high-speed USB device number 94 using dummy_hcd [ 1709.252182][ T2148] usb 1-1: config 6 has an invalid interface number: 11 but max is 3 [ 1709.292842][ T2148] usb 1-1: config 6 has 5 interfaces, different from the descriptor's value: 4 [ 1709.301845][ T2148] usb 1-1: config 6 has no interface number 0 [ 1709.372543][ T29] usb 8-1: Using ep0 maxpacket: 16 [ 1709.380718][ T2148] usb 1-1: config 6 has no interface number 1 [ 1709.398215][ T2148] usb 1-1: config 6 has no interface number 2 [ 1709.425938][ T29] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 1709.437573][ T2148] usb 1-1: config 6 has no interface number 3 [ 1709.485186][ T2148] usb 1-1: config 6 has no interface number 4 [ 1709.503325][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 97, changing to 7 [ 1709.542638][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1024 [ 1709.590998][ T2148] usb 1-1: config 6 interface 217 altsetting 9 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1709.768019][ T29] usb 8-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1709.777434][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1709.785805][ T29] usb 8-1: Product: syz [ 1709.789988][ T29] usb 8-1: Manufacturer: syz [ 1709.794801][ T29] usb 8-1: SerialNumber: syz [ 1710.587972][T26813] fuse: Unknown parameter '0x0000000000000004' [ 1710.603202][ T2148] usb 1-1: config 6 interface 152 altsetting 1 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1710.613871][ T29] usb 8-1: config 0 descriptor?? [ 1710.632847][ T31] audit: type=1800 audit(1775818995.854:1442): pid=26813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5911" name="file1" dev="tmpfs" ino=1065 res=0 errno=0 [ 1710.648604][ T29] pegasus_notetaker 8-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 1710.693793][ T2148] usb 1-1: config 6 interface 152 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1710.730111][ T2148] usb 1-1: config 6 interface 152 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 1710.774718][ T2148] usb 1-1: config 6 interface 152 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1710.832543][ T2148] usb 1-1: config 6 interface 237 altsetting 58 has a duplicate endpoint with address 0xF, skipping [ 1711.062029][ T2148] usb 1-1: config 6 interface 237 altsetting 58 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1711.770326][T22443] Bluetooth: hci5: command 0x0406 tx timeout [ 1711.802864][ T2148] usb 1-1: config 6 interface 237 altsetting 58 has an invalid descriptor for endpoint zero, skipping [ 1711.814382][ T2148] usb 1-1: config 6 interface 237 altsetting 58 has a duplicate endpoint with address 0x4, skipping [ 1711.832982][ T2148] usb 1-1: config 6 interface 237 altsetting 58 has a duplicate endpoint with address 0xF, skipping [ 1711.843902][ T2148] usb 1-1: config 6 interface 167 altsetting 233 has a duplicate endpoint with address 0xA, skipping [ 1711.854928][ T2148] usb 1-1: config 6 interface 167 altsetting 233 has a duplicate endpoint with address 0x4, skipping [ 1711.866452][ T2148] usb 1-1: config 6 interface 167 altsetting 233 has 3 endpoint descriptors, different from the interface descriptor's value: 12 [ 1711.884284][ T2148] usb 1-1: config 6 interface 11 altsetting 23 has an endpoint descriptor with address 0x2F, changing to 0xF [ 1711.896877][ T2148] usb 1-1: config 6 interface 11 altsetting 23 has a duplicate endpoint with address 0xF, skipping [ 1711.913095][ T2148] usb 1-1: config 6 interface 11 altsetting 23 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1711.924754][ T2148] usb 1-1: config 6 interface 11 altsetting 23 has a duplicate endpoint with address 0xF, skipping [ 1711.935527][ T2148] usb 1-1: config 6 interface 11 altsetting 23 has a duplicate endpoint with address 0xA, skipping [ 1711.948848][ T2148] usb 1-1: config 6 interface 11 altsetting 23 has a duplicate endpoint with address 0xC, skipping [ 1711.960060][ T2148] usb 1-1: config 6 interface 11 altsetting 23 has a duplicate endpoint with address 0xC, skipping [ 1711.973626][ T2148] usb 1-1: config 6 interface 11 altsetting 23 has a duplicate endpoint with address 0xC, skipping [ 1711.984769][ T2148] usb 1-1: config 6 interface 11 altsetting 23 has 9 endpoint descriptors, different from the interface descriptor's value: 23 [ 1711.998102][ T2148] usb 1-1: config 6 interface 217 has no altsetting 0 [ 1712.005617][ T2148] usb 1-1: config 6 interface 152 has no altsetting 0 [ 1712.015108][ T2148] usb 1-1: config 6 interface 237 has no altsetting 0 [ 1712.021911][ T2148] usb 1-1: config 6 interface 167 has no altsetting 0 [ 1712.044057][ T2148] usb 1-1: config 6 interface 11 has no altsetting 0 [ 1712.051450][ T2148] usb 1-1: string descriptor 0 read error: -71 [ 1712.092659][ T2148] usb 1-1: New USB device found, idVendor=06cd, idProduct=010b, bcdDevice=7e.2f [ 1712.101765][ T2148] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.212280][ T2148] usb 1-1: can't set config #6, error -71 [ 1712.243350][ T2148] usb 1-1: USB disconnect, device number 112 [ 1712.273253][T11675] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 1712.497345][T11675] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1712.629165][T11675] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1712.714584][T11675] usb 5-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 1712.767180][T11675] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1712.846879][T11675] usb 5-1: config 0 descriptor?? [ 1712.887485][T26831] netlink: 165240 bytes leftover after parsing attributes in process `syz.9.5917'. [ 1712.914245][T11675] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1712.965247][ T2148] usb 8-1: USB disconnect, device number 94 [ 1713.132145][T26833] xt_hashlimit: size too large, truncated to 1048576 [ 1713.496736][T26842] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5920'. [ 1713.858964][ T2148] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1714.093264][T11675] usb 10-1: new high-speed USB device number 119 using dummy_hcd [ 1714.113070][ T2148] usb 4-1: Using ep0 maxpacket: 32 [ 1714.121338][ T2148] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1714.134854][ T2148] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1714.177037][ T2148] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1714.201345][ T2148] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1714.231706][ T2148] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1714.260607][T11675] usb 10-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1714.275259][T11675] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1714.288541][ T2148] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1714.301952][ T2148] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1714.313810][T11675] usb 10-1: Product: syz [ 1714.318291][T11675] usb 10-1: Manufacturer: syz [ 1714.323813][ T2148] usb 4-1: Product: syz [ 1714.334683][T11675] usb 10-1: SerialNumber: syz [ 1714.338665][T26851] fuse: Unknown parameter '0x0000000000000004' [ 1714.339655][ T2148] usb 4-1: Manufacturer: syz [ 1714.377955][ T2148] usb 4-1: SerialNumber: syz [ 1714.384357][T11675] usb 10-1: config 0 descriptor?? [ 1714.404287][ T31] audit: type=1800 audit(1775818999.644:1443): pid=26851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5925" name="file1" dev="tmpfs" ino=585 res=0 errno=0 [ 1714.987060][T11675] hub 10-1:0.0: bad descriptor, ignoring hub [ 1716.009866][T11675] hub 10-1:0.0: probe with driver hub failed with error -5 [ 1720.569514][ T10] usb 5-1: USB disconnect, device number 40 [ 1721.500123][ C0] sched: DL replenish lagged too much [ 1733.260608][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1733.278813][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.638204][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.656560][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1812.521202][T11675] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 1852.603077][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1852.621678][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1931.252376][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1931.259414][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P18509/1:b..l [ 1931.268886][ C1] rcu: (detected by 1, t=10502 jiffies, g=164573, q=1772 ncpus=2) [ 1931.276827][ C1] task:syz-executor state:R running task stack:22472 pid:18509 tgid:18509 ppid:18498 task_flags:0x400140 flags:0x00080000 [ 1931.293153][ C1] Call Trace: [ 1931.296551][ C1] [ 1931.299518][ C1] __schedule+0x15dd/0x52d0 [ 1931.304100][ C1] ? __pfx___schedule+0x10/0x10 [ 1931.308997][ C1] preempt_schedule_irq+0x4d/0xa0 [ 1931.314308][ C1] irqentry_exit+0x599/0x620 [ 1931.318932][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1931.324591][ C1] ? trace_irq_disable+0x3b/0x150 [ 1931.329656][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1931.335687][ C1] RIP: 0010:__rcu_read_unlock+0x32/0xe0 [ 1931.341287][ C1] Code: 41 55 41 54 53 49 bf 00 00 00 00 00 fc ff df 65 48 8b 3d f9 3c 71 11 48 8d 9f c4 04 00 00 49 89 dc 49 c1 ec 03 43 0f b6 04 3c <84> c0 75 4f ff 0b 75 1d 4c 8d b7 c8 04 00 00 4c 89 f0 48 c1 e8 03 [ 1931.360934][ C1] RSP: 0018:ffffc90016abf2e8 EFLAGS: 00000213 [ 1931.367049][ C1] RAX: 0000000000000000 RBX: ffff8880586104c4 RCX: 0000000000000046 [ 1931.375064][ C1] RDX: 0000000000000002 RSI: ffffffff8e16c412 RDI: ffff888058610000 [ 1931.383080][ C1] RBP: dffffc0000000000 R08: ffffc90016abfbc0 R09: ffffc90016abf438 [ 1931.391182][ C1] R10: dffffc0000000000 R11: fffff52002d57e89 R12: 1ffff1100b0c2098 [ 1931.399205][ C1] R13: ffffc90016ab8000 R14: ffffc90016abf3e8 R15: dffffc0000000000 [ 1931.407255][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1931.412624][ C1] unwind_next_frame+0x1aaf/0x23c0 [ 1931.417823][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1931.423005][ C1] ? security_inode_getattr+0x12b/0x310 [ 1931.428606][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1931.434902][ C1] arch_stack_walk+0x11b/0x150 [ 1931.439803][ C1] ? vfs_getattr+0x23/0x70 [ 1931.444280][ C1] stack_trace_save+0xa9/0x100 [ 1931.449096][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1931.454524][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1931.460210][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1931.465891][ C1] save_stack+0x122/0x230 [ 1931.470264][ C1] ? __pfx_save_stack+0x10/0x10 [ 1931.475155][ C1] ? __free_frozen_pages+0xc2b/0xdb0 [ 1931.480519][ C1] ? __slab_free+0x263/0x2b0 [ 1931.485170][ C1] ? qlist_free_all+0x97/0x100 [ 1931.489989][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 1931.495671][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 1931.500835][ C1] ? __kmalloc_noprof+0x316/0x760 [ 1931.505907][ C1] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1931.511679][ C1] ? tomoyo_path_perm+0x283/0x560 [ 1931.516760][ C1] ? security_inode_getattr+0x12b/0x310 [ 1931.522359][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1931.528052][ C1] ? page_ext_put+0x97/0xc0 [ 1931.533744][ C1] __reset_page_owner+0x71/0x1f0 [ 1931.538775][ C1] __free_frozen_pages+0xc2b/0xdb0 [ 1931.543985][ C1] __slab_free+0x263/0x2b0 [ 1931.548463][ C1] ? qlist_free_all+0x8c/0x100 [ 1931.553297][ C1] qlist_free_all+0x97/0x100 [ 1931.557938][ C1] kasan_quarantine_reduce+0x148/0x160 [ 1931.563460][ C1] __kasan_slab_alloc+0x22/0x80 [ 1931.568373][ C1] __kmalloc_noprof+0x316/0x760 [ 1931.573285][ C1] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1931.579064][ C1] ? __kmalloc_noprof+0x1b8/0x760 [ 1931.584158][ C1] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1931.589766][ C1] tomoyo_path_perm+0x283/0x560 [ 1931.594671][ C1] ? tomoyo_path_perm+0x251/0x560 [ 1931.599837][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1931.605367][ C1] security_inode_getattr+0x12b/0x310 [ 1931.610819][ C1] vfs_getattr+0x23/0x70 [ 1931.615149][ C1] vfs_statx_path+0x2b/0x230 [ 1931.619760][ C1] ? vfs_statx+0x107/0x200 [ 1931.624229][ C1] vfs_statx+0x12e/0x200 [ 1931.628542][ C1] ? __pfx_vfs_statx+0x10/0x10 [ 1931.633358][ C1] ? strncpy_from_user+0x150/0x2b0 [ 1931.638535][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1931.644240][ C1] ? do_getname+0x151/0x250 [ 1931.648818][ C1] vfs_fstatat+0x11b/0x170 [ 1931.653278][ C1] __x64_sys_newfstatat+0x151/0x200 [ 1931.658518][ C1] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 1931.664333][ C1] ? __pfx___x64_sys_umount+0x10/0x10 [ 1931.669749][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1931.675457][ C1] do_syscall_64+0x14d/0xf80 [ 1931.680108][ C1] ? trace_irq_disable+0x3b/0x150 [ 1931.685177][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1931.691424][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1931.697378][ C1] RIP: 0033:0x7f71a079ae5a [ 1931.701840][ C1] RSP: 002b:00007ffdb77e6f08 EFLAGS: 00000286 ORIG_RAX: 0000000000000106 [ 1931.710284][ C1] RAX: ffffffffffffffda RBX: 00007f71a0832048 RCX: 00007f71a079ae5a [ 1931.718297][ C1] RDX: 00007ffdb77e6f30 RSI: 00007ffdb77e6fc0 RDI: 00000000ffffff9c [ 1931.726309][ C1] RBP: 00007ffdb77e6fc0 R08: 00007ffdb77e7fc0 R09: 00000000ffffffff [ 1931.734330][ C1] R10: 0000000000000100 R11: 0000000000000286 R12: 00007ffdb77e8050 [ 1931.742341][ C1] R13: 00007f71a0832048 R14: 00000000001a3468 R15: 00007ffdb77e8090 [ 1931.750372][ C1] [ 1932.398346][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1932.541207][ T1287] ieee802154 phy1 wpan1: encryption failed: -22