last executing test programs: 5m59.267393338s ago: executing program 3 (id=2580): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) ppoll(&(0x7f0000000200)=[{r0, 0x1}], 0x1, &(0x7f0000000240)={0x0, 0x3938700}, 0x0, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000d80), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000e40)=@multiplanar_overlay={0x7ff, 0x2, 0x4, 0x70000, 0x81, {0x0, 0x2710}, {0x2, 0x8, 0x3, 0x7f, 0x2, 0xe, "b6793c23"}, 0xffffffff, 0x3, {0x0}, 0x12ed14d1}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@abs={0x0, 0x0, 0x4e25}, 0x6e) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000100)=0x3, 0x4) ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, 0x0) pread64(r4, &(0x7f00000002c0)=""/174, 0xae, 0xe0) readv(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/123, 0x7b}], 0x1) 5m59.098956205s ago: executing program 3 (id=2583): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) close(0x3) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x8000288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) creat(&(0x7f0000000000)='./file0\x00', 0x1) r7 = inotify_init1(0x80000) inotify_add_watch(r7, &(0x7f00000000c0)='./file0\x00', 0x14) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000004280), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 5m57.11195285s ago: executing program 3 (id=2591): r0 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, @llc={0x1a, 0x338, 0x9, 0x6, 0x2, 0x5, @random="69024702269f"}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @vsock={0x28, 0x0, 0x2711, @my=0x1}, 0x570, 0x0, 0x0, 0x0, 0xfff7, 0x0, 0xfa, 0x4, 0xc}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, 0x0, &(0x7f0000000500)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) (async) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x7, &(0x7f0000000000)) (async) modify_ldt$write(0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={r7, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000380)={r7, 0x8, 0x6b26}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000440), &(0x7f0000000580)=0x4) r8 = socket(0x2, 0x80805, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) (async) sendmmsg$inet(r8, &(0x7f00000005c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000140)}}, {{&(0x7f00000001c0)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000200)="b6852333b4", 0x5}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1400000000000000000000000200000001000000000000006400000000000000000000000700000000440af90447da729fd47b44249e13ac1e000100000006e000000200000001ac14143500000006ac1414aa000000814424f7f1ac1414bb00000005e00000020080000064010101ffffff37ac1414bb0000000900000000001100000000000000000000000100000002000000000000001400000000000000000000000100000008000000000000001100"], 0xc8}}], 0x3, 0x40) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000340)={0x2, 0xfff, 0x1, 0x2, 0x100, 0x80, 0x8000, 0x7, r3}, 0x20) (async) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r3, 0xd, 0x80000000}, &(0x7f0000000080)=0xc) (async) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="300000000000000084000000feffff7f000000a70df06f07bbf2a6000c00"/52, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 5m56.943822755s ago: executing program 3 (id=2593): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000300"/100}}}}}}, 0x0) 5m56.692699543s ago: executing program 3 (id=2596): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0x40, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8}]}, @NFT_MSG_DELTABLE={0x14c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0xed, 0x6, "535ebb8c1c6399c8fe959a2f4153f354872c8fae3a8e6d08d411ac0ec847ee5f89bee35f6d5f99a89d0a74a7bc22460cf80e3ff542056f3db228ffb7e2606c85752777d532057c1888a749fd739ae20e70648759e7e06ab42d0883f48e33b9f361de9f846812d0f4d5b1cc1c5a7a84f98e79d4549edb1a6275c52db76d6f20087499d4df8a1c11c679b545500fab4132e5e4f3b758c4eae8da4e83126641523d76a861d3cd290e3d2babd517661df5f31be7d2055f775e56e2422522b4f475b1cb3ca59f1ab802ed4718fc33fd8874fe4ea122cbeb348def4ad0b2e6889778131c0742937fd47e42fa"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x37193f390cf51822}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x2bc, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x104, 0x6, "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"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xc2, 0x6, "cd2fe15941d4cd3784b0e0b0ba24c7308f7fafe0f8176dbacd0287b8ba3b323a04d0e0bac9d9d55f3f920bdfa75df78de041166b1c0b5e81eb53c4d5894ca6b6c00fb7cfcf4ed4b8a5928a935e31ba7852765a288680849d39b1845202e498825e34645029cd6a4677c8d6b6c65411bf9e4b919db6b62874331f76b3b2ef6d1f9746a663b1201563266c8d4c84fb055dd1f749ed9451f8e7ced07ca1388fc5cd45bc9033ec6aa38c00e51db37950683b2adce5b36754c1150212e7c472a2"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xbf, 0x6, "0e51ec674158703145a7846a8d2ca88bacb52aedea4b162713609641e9de12a86a1c5c5eee51b941ae278f83f255cf6fa231505ec2a2b05024487e8aa7a3a471f95976fe585a1eaf302edef6aa7832ef8b9e4114c28717e756022f78d501af28cd85b07f1dac65088030303f9fd2a09068fb050d00af538514585a37ec803d51d7037f204949127efc6cc69e73cc22b865168660a94e52eefd660e0c5125a340cb59a455800342010543177af1a9e4f8a0ad0ab0bb9ccc1c071292"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x4e0}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) 5m56.628240635s ago: executing program 3 (id=2597): r0 = syz_io_uring_setup(0x2c7e, &(0x7f0000000040)={0x0, 0xec25, 0x2, 0x1, 0x40100333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MSG_RING={0x28, 0x6, 0x0, r0, 0x1, &(0x7f0000000240), 0x0, 0x1}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4$alg(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f000000d680)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000006940)="a79a514a7fb9cd83a1a2947c2f82eab6", 0x10}], 0x1, 0x0, 0x0, 0x80}], 0x1, 0x2010) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r5, 0x2000000000000225, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r4, &(0x7f0000000340), 0x2d}]) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5m40.96576043s ago: executing program 32 (id=2597): r0 = syz_io_uring_setup(0x2c7e, &(0x7f0000000040)={0x0, 0xec25, 0x2, 0x1, 0x40100333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MSG_RING={0x28, 0x6, 0x0, r0, 0x1, &(0x7f0000000240), 0x0, 0x1}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4$alg(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f000000d680)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000006940)="a79a514a7fb9cd83a1a2947c2f82eab6", 0x10}], 0x1, 0x0, 0x0, 0x80}], 0x1, 0x2010) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r5, 0x2000000000000225, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r4, &(0x7f0000000340), 0x2d}]) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2m45.140485482s ago: executing program 4 (id=3208): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r1, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r2 = accept(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0xc040) r3 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2m44.975922128s ago: executing program 4 (id=3209): r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r1 = accept$unix(r0, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x9c, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x7f}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5f223a99}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x22, 0x24, [{0xb}, {0x48, 0x1}, {0xc}, {0x26, 0x1}, {0x70, 0x1}, {0x12}, {0x9, 0x1}, {0x0, 0x1}, {0x5}, {0x570bacfd766d4a2d, 0x1}, {0x36}, {0x30, 0x1}, {0x3, 0x1}, {0x12, 0x1}, {0x6c}, {0x1}, {0x12}, {0x36, 0x1}, {0x0, 0x1}, {0x24, 0x1}, {0x30}, {0x24, 0x1}, {0x1b}, {0x9}, {0x1}, {0x9, 0x1}, {0x18, 0x1}, {0x24, 0x1}, {0x60, 0x1}, {0x60, 0x1}]}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x1a, 0x24, [{0x5}, {0xb}, {0x0, 0x1}, {0x9}, {0x12}, {0x3, 0x1}, {0x1b}, {0x1b}, {0x24}, {0x30}, {0xc, 0x1}, {0x30, 0x1}, {0x35}, {0x24}, {0x48, 0x1}, {0xb}, {0xb}, {0x60}, {0x18}, {0x5}, {0x16}, {0x48}]}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8804}, 0x800) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400), 0x41, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r4, 0xc0046d00, &(0x7f0000000440)=0xa125) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000480)=""/240, &(0x7f0000000580)=0xf0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000640)={0x0, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e24, 0xa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, @in6={0xa, 0x4e22, 0x800, @local, 0x5}, @in6={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, @in={0x2, 0x4e21, @remote}]}, &(0x7f0000000680)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000007c0)={r6, 0xe4, &(0x7f00000006c0)=[@in6={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000000}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e21, 0x7ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb59d}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, @in6={0xa, 0x4e22, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffe}, @in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0xb}, 0x4}, @in6={0xa, 0x4e21, 0x7, @empty, 0x7f}, @in6={0xa, 0x4e21, 0xf3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xff}]}, &(0x7f0000000800)=0x10) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000008c0)={'ip6gre0\x00', &(0x7f0000000840)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x6, 0x8, 0x11, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x8, 0x7800, 0x9, 0x80000000}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000900)={@private1, 0x32, r7}) (async) syz_80211_join_ibss(&(0x7f0000000940)='wlan1\x00', &(0x7f0000000980)=@default_ibss_ssid, 0x6, 0x1) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000e00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_DELTABLE={0x180, 0x2, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x6d, 0x6, "8d39b2df53126e60bd2d347dc136be007cc20b368aed02256fdf5801a245ca4f2e5722b01d062b788da7a5f1639c512cc3f3aaf2f1985c271d9c4f398ace03484f80a5d76d249fbe95b2331434771eae76a3f45bbe90d422f783a56ed8b96d88d38990ec29694fa071"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x62, 0x6, "43a4715e7134fb1d8f53cb50d8a378a88eec61fcee98d93c97c7f8adbc06de65d8304229e26ddba58eba18a4e7ab053ac60eba1b9196d782e6cf5a2d8b80d1f5c0dba68ef4006a2a00f721e703192b72d74ad102c9d3a972c8e198c2fb2b"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x57, 0x6, "a0a0da82d1285426614bc7e4a3fa7dc5668888d537d876ade9d90fd4d13543e43d97f4b3c92eb2f169b327671c886003ca1d3e95f8609db8b396d5f7ebf85d9cfe6786923b9398263d4a42d941f9af8d05d0b6"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x60, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0xe, 0x0, 0xa}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x401, 0x0, 0x0, {0x9, 0x0, 0x1}, [@NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_USERDATA={0x5f, 0xc, "50d9e2a4f65636a2d163e85fb399eb53e25e4cf48bb0f5fa3e5b7e5cfd83026c4ceb0cd8306d2e6733a27b5cb68c695ed8ff80d9f93173f18bab60921158ef642a88106a4e7fac5b5bc63252a8b53fcf6965747cf70badc2ff7596"}]}, @NFT_MSG_DELTABLE={0xe0, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x12, 0x6, "c6212868c6178b06139f4f701952"}, @NFTA_TABLE_USERDATA={0xa0, 0x6, "ae8829761a1f890156cad34b1921d054fccaa8615f9802d871ac0d96b1ecfc4456bc8a120191fab87d8c4eee808bd2e5b65cff1037d18e426c9c9fbfc59d2213299a0dd0647f4559ccd2d4c8914faba6938e36c97979e6e21c421e684a634789236fe2272e13f0499acf56f0bf8e5b68f4fb5650f768d6a561813699f34aeb78de0cc39eb46015c83523bddbd71d79871ef4b11afe238ffb2245a720"}]}], {0x14}}, 0x3a4}, 0x1, 0x0, 0x0, 0x20044084}, 0x50) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x14) socket(0x1a, 0x3, 0xc857) r8 = socket(0x6, 0x6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffb000/0x2000)=nil) (async) setsockopt$inet_tcp_buf(r8, 0x6, 0x1a, &(0x7f0000000e40)="26855cf3c751bcd7a11f212eb5e684f714ceeb11fe0722afdce230252b334eab524f39aa532460fbf90731d07e9c427844b097bc18960828967fe2c2e1b46e8617d3a162a706763b8047f7c85aa7c649a46af331dd143b6d251e722d358059c6f0b25baab4792460c1ca6d04d955b5cd7b83e363faddf8c20e46f57553ac", 0x7e) (async) getsockopt$inet_sctp_SCTP_NODELAY(r8, 0x84, 0x3, &(0x7f0000000ec0), &(0x7f0000000f00)=0x4) sendmsg$nl_route(r0, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)=@ipv4_newnexthop={0x24, 0x68, 0x4, 0x70bd25, 0x25dfdbfe, {0x2, 0x0, 0x2, 0x0, 0x10}, [@NHA_FDB={0x4}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000001040), 0x10) unshare(0x20300) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) r9 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCGSTAMP(r9, 0x8906, &(0x7f0000001080)) (async) socket$kcm(0x29, 0x2, 0x0) 2m44.47372132s ago: executing program 4 (id=3211): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x598080, 0x184) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x2040400) r2 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r2, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0xfffffffe, 0x0, 0x30314742, 0x1, 0x0, 0x0, 0x3}}) r4 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000001b00)={0xfffffffd, 0x50313459, 0x3, @stepwise={0x1, 0x8497, 0x1000, 0x401, 0x9, 0x400}}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe20, 0x0, @private1, 0x4000}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4048000}, 0x44450) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2003, 0x0) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') ioctl$NS_GET_PARENT(r7, 0x8004b706, 0x0) 2m42.549692138s ago: executing program 4 (id=3217): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000000c0)='5', 0x1, 0x20000000, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) preadv(r1, 0x0, 0x0, 0x1, 0x5) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x4000000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xfffffff9, 0x1, 0x6, 0x9}, 0x110b28cd, 0x0, 0x10000, 0xf, 0x93, 0xe, 0xe, 0xc, 0x5, 0x7fffffff, {0x7, 0x3, 0x80, 0x2040, 0x7, 0x76c6e0a}}}}]}, 0x78}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r5, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0xde61, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) 2m38.485876081s ago: executing program 4 (id=3228): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r4, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000500)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0x5}, 0x8) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e62, 0xfffffffd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, r3}}, 0x30) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r7, 0x1, 0x70bd27, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8040) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='s.\xef:A\xd5\x05=s\x99\xbc\xe4\xae\xb9\x82\x8f1\xa5a%kM\xc9\xa2\x9b\x91R\x98\x9c?\xad\x162J\x00-]B\xc3\xc1\xea\x04\xa8\x85\x15\x80R\xf3?', 0x0) 2m36.208878336s ago: executing program 4 (id=3236): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x5902}) ioctl$TUNSETVNETHDRSZ(r1, 0x800454e0, &(0x7f0000000140)) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0xe76180e1627182be, 0x3, 0x0}) 2m20.925567486s ago: executing program 33 (id=3236): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x5902}) ioctl$TUNSETVNETHDRSZ(r1, 0x800454e0, &(0x7f0000000140)) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0xe76180e1627182be, 0x3, 0x0}) 10.905793858s ago: executing program 1 (id=3693): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) socket(0x26, 0x800, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$inet(0x2b, 0x801, 0x0) socket$packet(0x11, 0x2, 0x300) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x1, 0x652, 0x2, 0x9, 0x6, 0x9, 0x8001, 0xff}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="90000000100003050000000000efffffff000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES8=r0], 0x90}}, 0x0) 10.10361599s ago: executing program 1 (id=3696): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000001fc0)={0x42, 0x3, 0x0, {0x0, 0x21, 0x0, '/proc/sys/net/ipv4/vs/secure_tcp\x00'}}, 0x42) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000021000304000200800000000002000004000000000000000008000a00380b0000140011"], 0x38}}, 0x20004080) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) msync(&(0x7f0000f50000/0x3000)=nil, 0x3000, 0x1) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0xc7, 0x309082) syz_usb_connect$cdc_ncm(0x2, 0x80, &(0x7f00000001c0)={{0x12, 0x1, 0x311, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x2, 0x1, 0x6, 0x90, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xa}, {0xd, 0x24, 0xf, 0x1, 0xb, 0x200, 0x4, 0x2}, {0x6, 0x24, 0x1a, 0x81, 0xa}, [@country_functional={0x6, 0x24, 0x7, 0x40, 0xbd1f}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x9, 0x7c, 0xb6, 0xbafa, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x6, 0x5, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xf, 0x6, 0xc8}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x4, 0x80}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0x7f, 0xba, 0x4, 0x20, 0xf}, 0x25, &(0x7f0000000300)={0x5, 0xf, 0x25, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0xdb, 0x0, 0x5, 0x0, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0xd7, "2ceba70b79d990318bf16b9f3a79b100"}]}, 0x1, [{0xd5, &(0x7f0000000380)=@string={0xd5, 0x3, "206eae5226484ebdaf0cbac11e3eedda6ea4e65b02191124a32209af319bb61dc1767bf62f9b9d7ff9259df7ace3429888c01d490197bf5f50dcb293197bc423e54d68349ca9fa22147e8f81d6a6367467d0625b6297e535b85a09f478ce4bdca33b47f32375ddd7795bdfbb82a28840b2b36207411de6c80ac469e05e24e4ca9b258a32d4c4832ac085a79d71fbfa7961bc768dbc34cbd24ed80c03beac86c37e224c5819c326377185a52c08d005f7aa02374ad018fcd9c60817d819790eea0479c11b73ee956b50688cb2d866c74fbf18f6"}}]}) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000004e40)={0xfb, 0x11, 0x0, 0x28, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"}) mmap(&(0x7f00004b4000/0x1000)=nil, 0x1000, 0x1, 0x4c831, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000040)=""/185) 8.837624633s ago: executing program 5 (id=3704): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) prctl$PR_SET_KEEPCAPS(0x8, 0x1) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0x1, 0xfa14, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) madvise(&(0x7f0000c38000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x86) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) 7.899927896s ago: executing program 2 (id=3708): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB="5c030000", @ANYRES16=r2, @ANYBLOB="010026bd70000000000008000000bc00048034000780080002000b000000080004000000010008000300070000000800010018000000080003007f000000080003000600000009000100"], 0x35c}}, 0x20000010) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect(0x4, 0x506, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0xdc, 0x30, 0xbe, 0x10, 0x456, 0xf000, 0xecc9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f4, 0x1, 0x1, 0xc, 0x70, 0xc, [{{0x9, 0x4, 0x16, 0x3, 0x8, 0xcd, 0x80, 0x4f, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0xf0}, [@extension_unit={0x7, 0x24, 0x8, 0x3, 0x7, 0x4}, @mixer_unit={0x8, 0x24, 0x4, 0x4, 0x54, "5ac34d"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x202, 0x6, 0x3, 0x5, 0xff, 0xf3}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x101, 0x5, 0x2e, 0xf, 0x7f, 0x6}, @processing_unit={0x7, 0x24, 0x7, 0x6, 0x4, 0x2}, @feature_unit={0xf, 0x24, 0x6, 0x3, 0x6, 0x4, [0x7, 0xa, 0x6, 0x1], 0xe5}]}, @uac_control={{0xa, 0x24, 0x1, 0x505, 0x6}, [@mixer_unit={0x7, 0x24, 0x4, 0x2, 0x5d, "70b0"}, @extension_unit={0xd, 0x24, 0x8, 0x3, 0xa, 0x2, "e30342375c31"}, @mixer_unit={0xb, 0x24, 0x4, 0x2, 0x0, "90d742c44c5a"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x100, 0x5, 0x3, 0xfffe, 0xf9, 0x7}]}], [{{0x9, 0x5, 0x12, 0x0, 0x40, 0x1, 0xb0, 0xe, [@generic={0x21, 0x3, "c706e7264300a8d4fbfc340ec5f091e55bdea3daf6c54cfa71c2d0107a72b0"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x0, 0x0, 0x1, 0xfe, [@generic={0xf0, 0x36, "bc45a618eb5807c9c2ce08fbe469768783024229f3b96aa75e0001e1e84a7cd04e430d2e18e8e32f67564eb52ad036bb40b80b17a98b4e6bcc01412a1f139c74966236c7b4030a32b1065f9851de9658635fb0840267a82d2b3e9f31a72be8a151a970af8aa571a2cb3c1d111adb45626abd92032af897e57c9488749c658fd692965d00ec52805ead1d2d471a2c2bbc4ee426a2b48e980cc19e32db260d95e6435f81a2ad8a012c2a962101db65da08fca406a4b883e1aa44bf87acfa15487d6b3976325e2a3f5bd2a645e09a920701c0f4015ff1ce3e9402eb61e83c89899cbf09f7a4ba370ae2fbcf5f5c89d2"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xa, 0x6}]}}, {{0x9, 0x5, 0xf, 0x4, 0x8, 0x3, 0x5, 0xe3, [@uac_iso={0x7, 0x25, 0x1, 0x113d01ef6b2d9ceb, 0x9, 0x1}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x7, 0xd, 0x5, [@generic={0xde, 0xc89830d352907d00, "78a59df2a0ad68a12982bf7901a4b2ed56e0c8f3a70ee1da30443bf38fb93d99148c0f3be909452bf33fc8918ff22da73f904eeb81d5b6a61a6905f59091d991e54c6bad11f643049da9397bddfcdce9a59cb5e030ed28eb86b7d1cf68f2ae1a72b927f12c47abb7d6deb35a046d27f8439fb23527ba7a9361862e9f8bb85b9b16521effa208ae3b2762f096ee55a31b7d800351450c686ae5d42e573858dc029bd0bd5fe9e7afc83830042872cb0e9743862e06626f8a2ad2a45651bdb4974d3922ac02b0e4329b16bffc8160541f10ed1b2c51a99b6b29be853991"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x200, 0x9, 0x1, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x34}, @generic={0x67, 0xe, "939bec99f4909a26e4905d5d7ef6385e14d66e30e7dda85877754b8ea38cec5f3268d4d1f7d1bcf8a581c1021048bdf707a8dceb813d952dc83cf5183fe1712a522fe4fd0e082455455a5b799b9cf6365d48817f97217f42d488011cf2babda48bf96cab34"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x4, 0x2, 0x0, [@generic={0x54, 0x22, "1030b601be6a8a5d533a5d2fbf94cde9fd1e8f2baa681342aeb44e9a1045619263829f173c271790c5551bcf28a634baa3f51ced46abfb5cf8fd1a3c7cdf2e83d0968696320023beb2c58d8e0f1a7117b55a"}, @generic={0x4b, 0xe, "ed29f9dc6797faf1f7fc0dad71eaa2d500b1e7cf693eeeca7abbff71746632ad0ab7d3c8ca8ffcbd05d6d6fef52fd27d9483f00d7ae92dbb4a919c42782bc1f496483bf25f9cc54dd6"}]}}, {{0x9, 0x5, 0x3, 0xc, 0x3ff, 0x8, 0x4, 0xc, [@generic={0x74, 0x22, "bba26f8e2374b64ba238e255954482e0c8ea7525d91071c4c8bed2227483f1a860d70e90eefd3d0da511456c5339a8d905a644c7239e9a9005435afd896d3e5f5735d3ca4d49e2a585a5bd3722e3496a22603b0794619ce68c1088af53b7e525fb75c9dc54da536ce077e48182421feb623e"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x8, 0x4f, 0x1, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x81}, @generic={0x9b, 0x4, "f3a7e03f4887a99f57610507e057591b1c24576b9b32ec6b3e88fd1a0ed779d3e60e54d97ab0da65bd4f977df0d61d1f86f5c2acc3fd6ea5fec787d9f92d96c2a1a9d9498551ed54d1fabb54eaa739cb9daca876cde418c64a68e82fcb81b877dd268760f54f3e5c271704517186c93fb3143bbb3edcc1e455c1ee1a1d40331db1170fdd089240e362e5cef9064a93066f648165d10c4e21b2"}]}}]}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x7f, 0x1, 0x3, 0x40}, 0x10, &(0x7f0000000240)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0xa1, 0x1, 0x6, 0x7f}]}, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x413}}]}) syz_usb_control_io$sierra_net(r4, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x20, 0xb, 0xb6, {0xb6, 0xa, "942707afd42d0f0ccf6e66e38cdacee6f03f238d235abe30cff8d00ddcc46e7f073ac1834d760862cf53c7932f07a8bb672c9dde6d006a180f78982d7668f3cd6a0994a631220b2000c893a1825ccff8a3ef71f31f8dbfae564a332826ed05b9ca2593d872b3879d1e1cdcff92237e1d30b3bfc73ebe4db3247c8fc8ccd2df17257f3a9f4214d04f56b4e700d1572c91b34db7e38e0a9279300743d9597c7abf12002da38d07671fdc6b4d4cd46fff41d9071ccd"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4c0a}}}, &(0x7f0000000f40)={0x1c, &(0x7f0000000a00)={0x20, 0x0, 0xaf, "955d339e482a16a582cdf8f04bd9fa840d0dbdefd27ad8175c33c5969391a94e7145dbf248cecab80a52ef302a06e407e5e536dd25dd9ed8ad5bf9f1426d1a291dedd81dfd687b252bad83932137905f27e4f431cae330c0e0b42153d1b7080fa59cde1b3136c3c3c7ce934bc9edfc2a94d80210e534f9ba855a3d1548f6f16c6270e7fad9d487e565684deb1dbe328a9289664435a01fd65807ad8acd902b9a13359fee9ed1ddc77d4f0bc0aa7ced"}, &(0x7f0000000ac0)={0xa1, 0x1, 0x400, "08ba4ec96bd0ab7c383f8a399b25cda28d9f2d692d8a227795165558bec90993fc1ab155a6cf1eb46bac7b4ea52fb36bc3b558302d2b763514fca7676f2bb40f95aa4f66121fd8e771a489d5443cd6749de0599156609f31cf197b081cd4a999efdd25ebfafa43bb130e8b0d1835251d9bf865bbbb7a4202be9cde24afbed5c741c3551ceb6ab02f1feff887331dae33e767d04257a009ad00eb0d6e33dadb6e18be7c1138ab57309fbc82d11b2b6e5697fb5252664969a2a1b7b3d51442bee006a1221d771867f356d4d449742212a6aadbf3940bd1d11805723af1fcfc164bef39f66bd4cc12fc74f3cd92609a9f58d5ab192df9a43ff8edae5ab48559430497bfacada136fc5746812ec963fcf1a732d04e7ed1138c13a8d61ef839053ddd1a26cca4d120588d802abd867ac9e9095b8fbc33b275c8c1a4dca09bdb65de09b6f6de7f1e33e4415ba7d5191bf6c8d22b72a9e18a913c089b306cc79492f0fbf12ca826643577c4b009b8bd1ced23004dd6ddf642278bf709caf11917aaaf5525dfd1be3735395502ec406b2c17ddb2328e0f2a8ceaac8a363cbc5637215b983d3a6109c9841eb0a240c82e03910e79b742d4229405a4487b78b606de29e95d2812d36aaf9a0e0036336101465a1db029d56cda28ca07981e5cb8dc2e5959efcc887acc4167cbc25b738d630fe9d5344858b51b97824fa61dac832cba458fd123b9dbda0eadc692c9a4b66a5a22385e36ce8270756fca4721337e595e3bfe018d66c909032c50a15b9ec78b5aaaed38b6eeaeb209396e44aa3f5c4819032f2e3ffbaf928cb923538e35083bae1105cca787d3a6fc6d3fa4ebd794c9a8f3d5d18d7a3c15b2360d7548266907ed62347d9b1e96d5b186ac0dda056276862680201bfe2c83c661dbf7a485189749cb16720b7e0fffe9ae6b4d52aa53b096e027725c82f5224964d21e2fbf1201920e95f97997cbb86968b5eeca1d49e502ad2afe56dc2ecf1cd8c1b7560786ce3b034684558dcd8fe4f19ccd9c145811bf1c215e737ef15745d8f9268716e3ecf9dc8d40579ccad26d4a15ccae69e1c13eeb58eef2c56aedc7eeb2ee629f7d9e58299b26cc750b4123784f684a7c79cbac19033fff59ecf988dd63201cf57cf27c70e2a9dd81fbd5dad44556149690c38770f6dc72ad5a827e1c36e23777d2bde2b85c04d95829a837cbb11001e9e98e95f1169c8b543575dcf9c486261aa1f7c5999b07a1dbf80d283f49b64b661ea30c2a3f4ea368c367f609132c37988cdc40702fdbb0d732def88e237fd34521f4fc27d4cc69e9fd2e33ceefc6f528c36ea75fb253e5066480b4866d6e4f9b87a793830a872621be2fede12d66f782db65d226ae77d433d270f6a8cfcb8147219e79eb596c63274c05c51e479eb9dd8084299dcf54ed83a97e42f2632f63436d1b0d5575cb"}, &(0x7f0000000f00)={0x21, 0x0, 0x1, 'V'}}) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000480)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="c00c49000000d2fc635957c5e1f702260680691d4614c81c09bd74d53632d33fa3445b065d2df24c48b4ec73a95e9f7e367817332c9aaf9b216a605f152738f22d479df60b44e216078e"], 0x0, 0x0}) r5 = syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000340)={0x0, 0x0, 0x3013}) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r0, 0xa) 7.11273886s ago: executing program 0 (id=3710): r0 = socket$igmp(0x2, 0x3, 0x2) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpid() syz_pidfd_open(r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = syz_io_uring_setup(0x8d2, &(0x7f00000002c0)={0x0, 0xfffffffc, 0x400, 0x3, 0x374}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000000)={0x8, 'bridge_slave_1\x00', {'veth1\x00'}, 0xc}) (async) io_uring_enter(r4, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) (async) sendmsg$inet(r0, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000140)="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", 0x5cc}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac14140f7f0000010000000038000000000000000000000007000000018727"], 0x58}, 0x4) 7.065730321s ago: executing program 1 (id=3711): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200601, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0x1, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0x3, 0xb}, {0xfff1, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040040}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) 6.943052706s ago: executing program 5 (id=3712): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891a, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @empty}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f00000011c0)='hfs\x00', 0x1) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r6, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0xffffffff, @loopback, 0x5b}}, 0x105, 0x6, 0xf06, 0x1, 0xac, 0x9, 0x1}, 0x9c) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\xf9\xfd\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000914b2d7a5f518cdd000008000300", @ANYRES32=r8], 0x38}}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="48010000100001000000000000000000fe8800000000000000000000000000016401010000000000000000000000000000000000000000000a0020005c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x44c84}, 0x0) 6.66257213s ago: executing program 6 (id=3713): socket(0x400000000010, 0x3, 0x0) (async) r0 = socket(0x400000000010, 0x3, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x12, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x0, 0x2, 0x1, @mcast2, @loopback={0x0, 0xffff888101827518}, 0x7, 0x20, 0x1}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x0, 0x2, 0x1, @mcast2, @loopback={0x0, 0xffff888101827518}, 0x7, 0x20, 0x1}}) 6.535131283s ago: executing program 0 (id=3714): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {0xffea}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8040) 6.337142109s ago: executing program 6 (id=3715): r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000040)={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0xfc, 0x11, 0x0, @private=0x800001f, @empty=0xe0000001}, {0x1000, 0x17c1, 0x10, 0x0, @opaque="367dbdc900000000"}}}}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @remote}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000180)={r3, 0x2, 0x6, 0x80000000, 0xa18c, 0x8}, &(0x7f00000001c0)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x3b2b, 0x1, 0xd, 0x8, 0xf, 0x1, 0x3, 0xf, r3}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800070008000000060018000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x54}}, 0x0) 5.988173916s ago: executing program 0 (id=3716): setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x9, @remote, 0x9}, @in6={0xa, 0x4e24, 0xc8cf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}], 0x48) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}, {&(0x7f0000000100)="6ce19765800e743076cb50c4b044a6bafbacef0fc5ad54af893c8f239a7e09cb0000", 0x22}, {&(0x7f0000001400)="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", 0x10bf}, {&(0x7f0000000140)="d81c847a2e", 0x5}], 0x4) 5.98747183s ago: executing program 1 (id=3717): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/248, 0xf8}, {&(0x7f00000005c0)=""/185, 0xb9}], 0x2, &(0x7f0000000680)=""/102, 0x66}, 0xe}], 0x1, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x11, 0x6, 0x0, 0xb49, 0xff, 0x8, 0x2, 0x10001c}, 0x0) r3 = fsopen(&(0x7f0000000200)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000400)='source\xefBE\x9eGR\x88L!V\x10P\f\xd5\\+\x06\x00\x00\x00\x00\x00\x00\x00\xb6\x91\xa3\x91\xd3\xd4\xfe\\\r\x10\xc4*\xf4J\"\xeaJ^\xc4E\xca\xfaA\"\xd2\xd7\xb89\xf2\xb5w\x86\xb0N\x1d\x91T\x98>\x17\xe1\xe9\xddEd}o\x04\x986\x12\x00\xdb\xd29\xb0\x01N2\xbc#\x16\xc3\x9cu\xf6d\xd7VT\x17\xbe\n\x14\xe7A]\xf1\xe6\x98T\xa3\xdaa\xd8\xa3\xcc\xb8w2i\b\x0f\x1b\x8fn^\x00\x9d,\xfc\xf0\xe1\xd04$\x05D\x84\xcd\x12\x99\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x80J\x80\xc4i\xd8\xce\xf3\xa2u\xb8\xdc\xa3\x00\x00\x00\x00\x00\x00', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) close(0x3) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x8000288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000006bb95456b0c407000000000000004863bb36398500", @ANYRES32=r5, @ANYBLOB="f081b23600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000020000000500"/28], 0x50) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) creat(&(0x7f0000000000)='./file0\x00', 0x1) r8 = inotify_init1(0x80000) inotify_add_watch(r8, &(0x7f00000000c0)='./file0\x00', 0x14) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000004280), 0x0, 0xff99, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 5.959932263s ago: executing program 2 (id=3718): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="05dff72e1800cd1338160000000000000000", @ANYRES32=0x0, @ANYBLOB="0800050004000000050053"], 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[], 0x60) 5.792426s ago: executing program 6 (id=3719): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="05dff72e1800cd1338160000000000000000", @ANYRES32=0x0, @ANYBLOB="0800050004000000050053"], 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[], 0xd0060) (fail_nth: 5) 5.698615185s ago: executing program 0 (id=3720): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc222, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0x2, 'l'}, @main=@item_012={0x2, 0x0, 0xb, "75c7"}, @local=@item_012={0x1, 0x2, 0x9, 'P'}]}}, 0x0}, 0x0) syz_usb_connect$printer(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x80, 0xc7, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x2, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x3e, 0x5f, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x8, 0x3, 0x9}}]}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000100)={0xa, 0x6, 0xe1e24d4f37fd32fa, 0x7, 0x4, 0x7, 0x20, 0xf8}, 0xf, &(0x7f0000000140)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x3, 0x7fff}, @ptm_cap={0x3}]}}) 5.298139272s ago: executing program 2 (id=3721): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000001fc0)={0x42, 0x3, 0x0, {0x0, 0x21, 0x0, '/proc/sys/net/ipv4/vs/secure_tcp\x00'}}, 0x42) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000021000304000200800000000002000004000000000000000008000a00380b0000140011"], 0x38}}, 0x20004080) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) msync(&(0x7f0000f50000/0x3000)=nil, 0x3000, 0x1) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0xc7, 0x309082) syz_usb_connect$cdc_ncm(0x2, 0x80, &(0x7f00000001c0)={{0x12, 0x1, 0x311, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x2, 0x1, 0x6, 0x90, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xa}, {0xd, 0x24, 0xf, 0x1, 0xb, 0x200, 0x4, 0x2}, {0x6, 0x24, 0x1a, 0x81, 0xa}, [@country_functional={0x6, 0x24, 0x7, 0x40, 0xbd1f}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x9, 0x7c, 0xb6, 0xbafa, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x6, 0x5, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xf, 0x6, 0xc8}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x4, 0x80}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0x7f, 0xba, 0x4, 0x20, 0xf}, 0x25, &(0x7f0000000300)={0x5, 0xf, 0x25, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0xdb, 0x0, 0x5, 0x0, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0xd7, "2ceba70b79d990318bf16b9f3a79b100"}]}, 0x1, [{0xd5, &(0x7f0000000380)=@string={0xd5, 0x3, "206eae5226484ebdaf0cbac11e3eedda6ea4e65b02191124a32209af319bb61dc1767bf62f9b9d7ff9259df7ace3429888c01d490197bf5f50dcb293197bc423e54d68349ca9fa22147e8f81d6a6367467d0625b6297e535b85a09f478ce4bdca33b47f32375ddd7795bdfbb82a28840b2b36207411de6c80ac469e05e24e4ca9b258a32d4c4832ac085a79d71fbfa7961bc768dbc34cbd24ed80c03beac86c37e224c5819c326377185a52c08d005f7aa02374ad018fcd9c60817d819790eea0479c11b73ee956b50688cb2d866c74fbf18f6"}}]}) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000004e40)={0xfb, 0x11, 0x0, 0x28, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"}) mmap(&(0x7f00004b4000/0x1000)=nil, 0x1000, 0x1, 0x4c831, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000040)=""/185) 4.442770973s ago: executing program 1 (id=3722): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) prctl$PR_SET_KEEPCAPS(0x8, 0x1) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0x1, 0xfa14, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) madvise(&(0x7f0000c38000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x86) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) 3.343578474s ago: executing program 5 (id=3723): socket$kcm(0x11, 0x200000000000003, 0x300) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000945b312bf7b103a6e236c5e1f4b9cf8cf3712486ac55b69c536b9fbe643b9156cb0ce29fc8bfabf667e95c43670ea263507cf1feee7f0fb92d1676c5b1dbe45225ea1b109f009a68eb2d69adfbe40a3129685da5f19cf825", @ANYRES16=r1, @ANYBLOB="01002dbd7000000000001b000000"], 0x14}}, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000180)=0x9, 0x4) (async, rerun: 32) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async, rerun: 32) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008004500002c0000ff"], 0x0) 3.09185045s ago: executing program 5 (id=3724): socket$netlink(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x6, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtfilter={0x98, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x9, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x68, 0x2, [@TCA_FLOW_EMATCHES={0x64, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x40, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x7}, {0x2, 0x6, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0xf, 0x2}, {0x10, 0xb}}}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0xf, 0x3, [@TCF_META_TYPE_VAR="01d18ed711ba7f67caf2", @TCF_META_TYPE_VAR='/']}]}}]}]}]}}]}, 0x98}}, 0x20040054) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtfilter={0x98, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x9, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x68, 0x2, [@TCA_FLOW_EMATCHES={0x64, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x40, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x7}, {0x2, 0x6, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0xf, 0x2}, {0x10, 0xb}}}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0xf, 0x3, [@TCF_META_TYPE_VAR="01d18ed711ba7f67caf2", @TCF_META_TYPE_VAR='/']}]}}]}]}]}}]}, 0x98}}, 0x20040054) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r6, 0x7b0, 0x0) (async) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r6, 0x7b0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x59, 0x8) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) (async) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TCXONC(r8, 0x540a, 0x0) ioctl$TCXONC(r8, 0x540a, 0x3) shutdown(r7, 0x0) (async) shutdown(r7, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$peek(0x2, r9, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) (async) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 2.787472881s ago: executing program 1 (id=3725): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x85, {0x1, 0x1}, {0x74, 0x2}, @const={0x2, {0x2, 0x200, 0x2}}}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r2, 0x80404518, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r4, &(0x7f0000000400)="2ae0", 0x2, 0x0, 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000001280)={0x0, [[0x7fff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7f3], [0x2, 0x5, 0x0, 0x0, 0x0, 0xecdc, 0xfffffffc, 0xfffffffc], [0xb, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x20001]], '\x00', [{}, {0x1000000}, {0x3, 0x4}, {0x0, 0x803}, {0x1000}, {0x0, 0x1000}, {0x200000}, {}, {0x0, 0x4}, {0x5, 0xffffffff}, {0xd, 0x400000}, {0xe}], '\x00', 0x401, 0x0, 0x0, 0x2}) recvmmsg(r4, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000011c0)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x41) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f0000001180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x80}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2.719929998s ago: executing program 6 (id=3726): socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_io_uring_setup(0x5051, &(0x7f0000000700)={0x0, 0x1bfe, 0x40, 0x3, 0x13a}, &(0x7f0000000240), &(0x7f0000000140)) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x220, 0x0, 0x220, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0x6, 0x2}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) mbind(&(0x7f00008ca000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000000)=0x100000000000008, 0x9, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {0x0}], 0x2}], 0x1, 0x0) setxattr$incfs_metadata(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300)="ae702f04dc0aca68412a803a3e6fcecd83d1cd7221ab6cdab67bb13fc15ceb79524b25cdc9cb", 0x26, 0x2) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x0, 0x4, 0x1) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x2d}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x22}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x35}}, &(0x7f0000000bc0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000780)={'erspan0\x00', 0x0, 0x7, 0x7800, 0x401, 0x8, {{0x26, 0x4, 0x1, 0x1e, 0x98, 0x66, 0x0, 0xe, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @dev={0xac, 0x14, 0x14, 0x41}, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @cipso={0x86, 0x3b, 0x3, [{0x0, 0x12, "648b2257e8ccfc40ad867fab49a42caa"}, {0x2, 0x11, "585f9273039ab374f25ccd7ec5291a"}, {0x7, 0x9, "358ccca624ea40"}, {0x7, 0x7, "96f9813675"}, {0x2, 0x2}]}, @noop, @generic={0x44, 0x7, "667c04e3fe"}, @timestamp_addr={0x44, 0x14, 0x26, 0x1, 0x2, [{@multicast2, 0x9}, {@loopback, 0x11}]}, @rr={0x7, 0x1b, 0xe9, [@empty, @broadcast, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x36}, @local, @broadcast]}, @end, @ra={0x94, 0x4}, @timestamp={0x44, 0x4, 0x36, 0x0, 0x7}]}}}}}) 2.599188578s ago: executing program 5 (id=3727): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {0x3000000}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8040) 2.419103566s ago: executing program 5 (id=3728): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f0000000280)={0x1, 0x0, 0x1, 'queue1\x00', 0x5}) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003440)=ANY=[], 0x116c}, 0x1, 0x0, 0x0, 0x48815}, 0x1d) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRES16=0x0, @ANYBLOB="01002dbd7000fcdbdf25010000000800070009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) socket$kcm(0x29, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f0000000780)={0x10000000}) write$dsp(0xffffffffffffffff, &(0x7f00000012c0)="a52876830a602214f6", 0x9) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000ffdbdf252d000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20008800}, 0x200488c0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x1bd143, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 2.357674997s ago: executing program 0 (id=3729): r0 = socket$packet(0x11, 0x3, 0x300) socket(0xa, 0x3, 0xff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4600043200ff7f00000040000003003e00ebffffff940200000000000040000000002000"/50], 0x78) close(r3) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x80b81, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000980)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0xeae, 0x4, 0x9, 0xb, 0x5, 0x4, "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"}}, 0xfc6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00', 0xfffffc01, 0x48, &(0x7f0000000540)=""/72, 0x41000, 0x76, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x1, 0x8, 0x0, 0x1ff}, 0x10, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000600)=[0x1, 0xffffffffffffffff], &(0x7f0000000640)=[{0x5, 0x1, 0x6, 0x2}, {0x1, 0x4, 0xc, 0x8}, {0x5, 0x2, 0x1, 0x2}, {0x3, 0x4, 0x3}, {0x1, 0x5, 0xc, 0xb}, {0x0, 0x5, 0xf, 0x4}], 0x10, 0xfff}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{0x1, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)='%pB \x00'}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000019c0)=ANY=[@ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES16, @ANYBLOB="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"], 0x50) r6 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x44}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000240)=[0xffffffffffffffff, r0, r5, r5], 0x4) io_uring_enter(r6, 0x3516, 0xc2de, 0x8, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r10, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000014001e"], 0x30}}, 0x0) 1.899978219s ago: executing program 2 (id=3730): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_PEC(r2, 0x708, 0x10) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000000)={0x0, 0x4, 0x5, &(0x7f0000000100)={0x0, "fd5a44512b7e1b0020ed2abb4301002700"}}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f00000002c0), &(0x7f0000000240)=r4}, 0x20) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0xe, 0xfffffffffffffff4, 0x0, 0xfffffffffffffbff, 0xd4, 0x3, 0x100000000, 0x3, 0x2c0, 0x9, 0x0, 0x400, 0x1, 0x9, 0x5]}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000480)={r6, @in={{0x2, 0x4e22, @empty}}, [0x200, 0xf45, 0x400, 0xb2, 0x2, 0x6, 0x0, 0x203a7707, 0x8, 0x7ff, 0x55, 0x0, 0xff, 0x8, 0xe]}, &(0x7f0000000180)=0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000f8ff18120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg(r7, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}], 0x1}, 0x0) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000580)={0xe0, 0xb, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xa2}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xa}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_ADT={0x64, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7fffffffffffffff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x26}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x9}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 896.161079ms ago: executing program 2 (id=3731): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000001, 0xfffffffffffffffb}, {0x0, 0x1, 0x2}, 0x800}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x400000, 0x0, 0x9, 0x0, 0x0, 0x2, 0x2}, {0x0, 0xff80, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 801.214995ms ago: executing program 2 (id=3732): r0 = socket$netlink(0x10, 0x3, 0x0) setpriority(0x85e9621c373d618c, 0x0, 0x6) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) r2 = gettid() tkill(r2, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r4 = syz_open_pts(r3, 0x900) r5 = dup3(r4, r3, 0x80000) read(r5, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r5, &(0x7f0000002d40)=""/4104, 0x1008) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000000080000003700000038db904dd3ef28bdee12880b1f65548a7b0763b3ce13a053fd919e8480f7e2d60d213435ec352cd2bfafecf4f1a66609f6d8e0a1f384649138763f2f99041f5767d09ddb9e8908e56afeacda1660808fb70cda2b0d9639ebd2c66ddce3dfd588b59ff3224c891dda229f915d6a515929ce022e3ba13e563cfbf366017260b2696c8b8092071f6e617616e4a526e02100c4adb5c3753ec4a68502e9df6f"]) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r10, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$KVM_RUN(r9, 0xae80, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a428040000000000140035006d6163766c616e30000000000000000008000a0092e6015955bd0715b772d44128831f414842ca046363d4d226dc9a6272ea1ea90276b5dd0f68d28440699a964f62feaf539d2d6080d93ab1f0d155e7215a5f6904031a5d6e04e49e358c28cd1f46290a260b607a35cc69464d50b6885d852bf823c504a2ececa0a691abcda2d7c58ee5d6de7ad03e0d1e66a783871c5cb7288f38b79085", @ANYRES32=r11, @ANYBLOB], 0x3c}}, 0x8000) 476.25847ms ago: executing program 0 (id=3733): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891a, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @empty}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f00000011c0)='hfs\x00', 0x1) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r6, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0xffffffff, @loopback, 0x5b}}, 0x105, 0x6, 0xf06, 0x1, 0xac, 0x9, 0x1}, 0x9c) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x03\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000914b2d7a5f518cdd000008000300", @ANYRES32=r8], 0x38}}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="48010000100001000000000000000000fe8800000000000000000000000000016401010000000000000000000000000000000000000000000a0020005c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x44c84}, 0x0) 329.879829ms ago: executing program 6 (id=3734): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x103341) (async) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async) r4 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) (async) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) (async) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0x4}) (async) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) (async, rerun: 64) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) (async, rerun: 64) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) syz_usb_control_io(r2, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (async) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x8, 0xb92, 0x0, 0x2, 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000010000105fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r5, @ANYBLOB="08000500", @ANYRES32=r5, @ANYBLOB="140012800b0001006d6163736563"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 0s ago: executing program 6 (id=3735): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) prctl$PR_SET_KEEPCAPS(0x8, 0x1) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0x1, 0xfa14, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) madvise(&(0x7f0000c38000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) kernel console output (not intermixed with test programs): state [ 893.527918][ T3024] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.535111][ T3024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 893.961514][T21351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 893.972687][T21479] kAFS: unable to lookup cell 'ÿ' [ 894.128982][T21351] veth0_vlan: entered promiscuous mode [ 894.166709][T21351] veth1_vlan: entered promiscuous mode [ 894.313859][T21351] veth0_macvtap: entered promiscuous mode [ 894.407220][T21351] veth1_macvtap: entered promiscuous mode [ 894.520532][T21351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 894.550452][T21487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3317'. [ 894.593000][T21351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 894.601049][T21487] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3317'. [ 894.837322][T19980] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.865555][T19980] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.962124][T19980] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.000392][T19980] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.242159][ T3024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 895.289806][ T3024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 895.344752][T17199] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 895.388260][T19971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 895.407188][T19971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 895.526606][T17199] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 895.560803][T17199] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 895.613254][T17199] usb 2-1: config 1 has no interface number 0 [ 895.647435][T17199] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 895.717364][T17199] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 895.763706][T17199] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 247, using maximum allowed: 30 [ 895.830133][T17199] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 895.895627][T17199] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 895.942356][T17199] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.981087][T17199] usb 2-1: Product: syz [ 896.018841][T17199] usb 2-1: Manufacturer: syz [ 896.055075][T17199] usb 2-1: SerialNumber: syz [ 896.929858][T21496] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3320'. [ 897.583145][T17199] cdc_ncm 2-1:1.1: bind() failure [ 897.619882][T17199] usb 2-1: USB disconnect, device number 74 [ 897.676251][T17167] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 897.855156][T17167] usb 7-1: Using ep0 maxpacket: 8 [ 897.867770][T21506] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3322'. [ 897.886593][T17167] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 897.901112][T21506] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3322'. [ 897.911849][T21523] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3325'. [ 897.924102][T17167] usb 7-1: config 179 has no interface number 0 [ 897.944332][T17167] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 897.956504][T17167] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 897.970121][T17167] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 897.982931][T17167] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 897.995698][T17167] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 898.010675][T17167] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 898.048152][T17167] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.091182][T21515] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 898.352100][T17167] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input35 [ 898.409782][T21531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3327'. [ 898.536670][T21531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3327'. [ 898.632504][T21531] netlink: 'syz.2.3327': attribute type 11 has an invalid length. [ 898.804528][T17199] usb 7-1: USB disconnect, device number 2 [ 898.804558][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 899.445146][ T5910] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 899.542201][T21545] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3330'. [ 899.625107][ T5910] usb 2-1: Using ep0 maxpacket: 32 [ 899.633183][ T5910] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 899.650283][ T5910] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 899.671800][ T5910] usb 2-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 899.685755][ T5910] usb 2-1: config 0 interface 0 has no altsetting 1 [ 899.937954][ T5910] usb 2-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice=8e.57 [ 899.961910][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.988711][ T5910] usb 2-1: Product: syz [ 899.995458][ T5910] usb 2-1: Manufacturer: syz [ 900.000124][ T5910] usb 2-1: SerialNumber: syz [ 900.058688][ T5910] usb 2-1: config 0 descriptor?? [ 900.411171][T17204] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 900.604264][T17204] usb 7-1: device descriptor read/64, error -71 [ 900.700631][T21563] kAFS: unable to lookup cell 'ÿ' [ 900.845284][T17204] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 901.010954][T17204] usb 7-1: device descriptor read/64, error -71 [ 901.136361][T17204] usb usb7-port1: attempt power cycle [ 901.524679][T17204] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 901.558933][T17204] usb 7-1: device descriptor read/8, error -71 [ 901.844670][T17204] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 901.896903][T17204] usb 7-1: device descriptor read/8, error -71 [ 902.015245][T17204] usb usb7-port1: unable to enumerate USB device [ 902.129846][ T5910] usb 2-1: USB disconnect, device number 75 [ 902.227199][T18348] udevd[18348]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 902.745606][T10068] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 902.905161][T10068] usb 2-1: Using ep0 maxpacket: 32 [ 902.917805][T10068] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 902.939703][T10068] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.959956][T10068] usb 2-1: Product: syz [ 902.969754][T10068] usb 2-1: Manufacturer: syz [ 902.989948][T10068] usb 2-1: SerialNumber: syz [ 903.022052][T10068] usb 2-1: config 0 descriptor?? [ 903.278014][T10068] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 076 [ 903.418029][T21580] loop6: detected capacity change from 0 to 524287999 [ 903.443245][T18348] buffer_io_error: 40 callbacks suppressed [ 903.443258][T18348] Buffer I/O error on dev loop6, logical block 0, async page read [ 903.475798][T18348] Buffer I/O error on dev loop6, logical block 0, async page read [ 903.524995][T18348] Buffer I/O error on dev loop6, logical block 0, async page read [ 903.535665][T18348] Buffer I/O error on dev loop6, logical block 0, async page read [ 903.553771][T18348] Buffer I/O error on dev loop6, logical block 0, async page read [ 903.573172][T18348] Buffer I/O error on dev loop6, logical block 0, async page read [ 903.597188][T18348] Buffer I/O error on dev loop6, logical block 0, async page read [ 903.617474][T18348] Buffer I/O error on dev loop6, logical block 0, async page read [ 903.638553][T18348] ldm_validate_partition_table(): Disk read failed. [ 903.654305][T18348] Buffer I/O error on dev loop6, logical block 0, async page read [ 903.679605][T18348] Buffer I/O error on dev loop6, logical block 0, async page read [ 903.704293][T18348] Dev loop6: unable to read RDB block 0 [ 903.727639][T18348] loop6: unable to read partition table [ 903.749710][T21580] ldm_validate_partition_table(): Disk read failed. [ 903.766988][T21580] Dev loop6: unable to read RDB block 0 [ 903.791658][T21580] loop6: unable to read partition table [ 903.811134][T21580] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 903.848363][T21581] ldm_validate_partition_table(): Disk read failed. [ 903.877275][T21581] Dev loop6: unable to read RDB block 0 [ 903.892872][T21581] loop6: unable to read partition table [ 903.927583][T21581] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 903.942267][T21573] i2c i2c-1: failure reading status [ 903.959877][T10068] usb 2-1: USB disconnect, device number 76 [ 904.287549][T21586] FAULT_INJECTION: forcing a failure. [ 904.287549][T21586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 904.372010][T21586] CPU: 0 UID: 0 PID: 21586 Comm: syz.0.3343 Tainted: G L syzkaller #0 PREEMPT(full) [ 904.372042][T21586] Tainted: [L]=SOFTLOCKUP [ 904.372057][T21586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 904.372068][T21586] Call Trace: [ 904.372077][T21586] [ 904.372086][T21586] dump_stack_lvl+0xe8/0x150 [ 904.372112][T21586] should_fail_ex+0x412/0x560 [ 904.372138][T21586] _copy_from_user+0x2d/0xb0 [ 904.372162][T21586] ___sys_sendmsg+0x1c6/0x360 [ 904.372183][T21586] ? __lock_acquire+0x6b5/0x2cf0 [ 904.372209][T21586] ? __pfx____sys_sendmsg+0x10/0x10 [ 904.372262][T21586] ? __fget_files+0x2a/0x420 [ 904.372280][T21586] ? __fget_files+0x3a0/0x420 [ 904.372308][T21586] __x64_sys_sendmsg+0x1bd/0x2a0 [ 904.372331][T21586] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 904.372361][T21586] ? __pfx_ksys_write+0x10/0x10 [ 904.372394][T21586] do_syscall_64+0xe2/0xf80 [ 904.372413][T21586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.372431][T21586] ? clear_bhb_loop+0x60/0xb0 [ 904.372452][T21586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.372469][T21586] RIP: 0033:0x7f4c1739aeb9 [ 904.372485][T21586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 904.372500][T21586] RSP: 002b:00007f4c181b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 904.372521][T21586] RAX: ffffffffffffffda RBX: 00007f4c17615fa0 RCX: 00007f4c1739aeb9 [ 904.372534][T21586] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000015 [ 904.372546][T21586] RBP: 00007f4c181b3090 R08: 0000000000000000 R09: 0000000000000000 [ 904.372557][T21586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 904.372568][T21586] R13: 00007f4c17616038 R14: 00007f4c17615fa0 R15: 00007f4c1773fa48 [ 904.372597][T21586] [ 904.869405][T21597] netlink: 'syz.1.3349': attribute type 4 has an invalid length. [ 904.907382][T21597] netlink: 'syz.1.3349': attribute type 4 has an invalid length. [ 904.954667][T17199] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 905.004365][T21604] kAFS: unable to lookup cell 'ÿ' [ 905.139530][T17199] usb 6-1: Using ep0 maxpacket: 32 [ 905.153315][T17199] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 905.164976][T17199] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 905.197935][T17199] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 905.266205][T17199] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 905.403914][T17199] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.435384][T10068] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 905.461820][T17199] usb 6-1: config 0 descriptor?? [ 905.625149][T10068] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 905.641307][T10068] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 905.676849][T10068] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 905.732112][T10068] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.790988][T21611] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 905.850850][T10068] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 905.900234][ T9] kworker/0:0 (9) used greatest stack depth: 14816 bytes left [ 905.999323][T17199] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.001F/input/input36 [ 906.032665][T21611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 906.150455][T21593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 906.169417][T21611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.186329][T21593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.217496][T21593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 906.290559][T21593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.305094][T17199] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.001F/input/input37 [ 906.983402][T21593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.049049][T21624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3353'. [ 907.145573][T21593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 907.297309][T17199] kye 0003:0458:5011.001F: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.5-1/input0 [ 907.473988][T21611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.483107][T17199] usb 6-1: USB disconnect, device number 22 [ 907.540273][T21611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 908.254268][T21631] fido_id[21631]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 909.236442][T17204] usb 7-1: USB disconnect, device number 7 [ 909.434693][ T5910] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 909.491869][T21646] loop5: detected capacity change from 0 to 7 [ 909.499504][T21646] Dev loop5: unable to read RDB block 7 [ 909.506283][T21646] loop5: unable to read partition table [ 909.515490][T21646] loop5: partition table beyond EOD, truncated [ 909.556752][T21646] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 909.635777][ T5910] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 909.648973][ T5910] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 909.750143][ T5910] usb 6-1: New USB device found, idVendor=4c4e, idProduct=1232, bcdDevice= 0.23 [ 909.815198][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.967438][ T5910] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 910.047116][ T5910] usb 6-1: no configuration chosen from 1 choice [ 910.207983][T17204] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 910.582503][T17204] usb 7-1: device descriptor read/64, error -71 [ 910.598533][T21677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3361'. [ 910.923303][T17204] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 911.074944][T17204] usb 7-1: device descriptor read/64, error -71 [ 911.190320][T17204] usb usb7-port1: attempt power cycle [ 911.279846][ T5910] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 911.489140][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 911.522891][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 911.558599][ T5910] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 911.574961][T17204] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 911.581470][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.635337][T17204] usb 7-1: device descriptor read/8, error -71 [ 911.641020][ T5910] usb 3-1: config 0 descriptor?? [ 911.658476][T17199] usb 6-1: USB disconnect, device number 23 [ 911.884896][T17204] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 911.939114][T17204] usb 7-1: device descriptor read/8, error -71 [ 912.077594][T17204] usb usb7-port1: unable to enumerate USB device [ 912.079008][T21684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 912.125112][T21684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 912.359037][T21692] pim6reg1: entered promiscuous mode [ 912.381426][T21692] pim6reg1: entered allmulticast mode [ 912.531727][T21692] syz_tun: entered promiscuous mode [ 912.566852][T21692] vlan2: entered promiscuous mode [ 912.958913][T21698] kAFS: unable to lookup cell 'ÿ' [ 913.925193][T17166] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 913.988291][ T5910] usbhid 3-1:0.0: can't add hid device: -71 [ 913.994400][ T5910] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 914.085271][T17166] usb 6-1: Using ep0 maxpacket: 32 [ 914.123351][T21711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 914.255111][ T5910] usb 3-1: USB disconnect, device number 5 [ 914.282281][T17166] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 914.293524][T17166] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 914.307021][T17166] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 914.317358][T17166] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 914.329133][T17166] usb 6-1: Product: syz [ 914.333436][T17166] usb 6-1: Manufacturer: syz [ 914.346641][T17166] hub 6-1:4.0: USB hub found [ 914.583535][T21714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3374'. [ 914.906125][T17199] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 914.926874][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 914.926896][ T30] audit: type=1326 audit(1769960849.662:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21699 comm="syz.1.3370" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11f519aeb9 code=0x0 [ 915.064086][T17166] hub 6-1:4.0: config failed, can't read hub descriptor (err -22) [ 915.126030][T17166] usb 6-1: USB disconnect, device number 24 [ 915.132244][T17199] usb 3-1: Using ep0 maxpacket: 16 [ 915.187218][T17199] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 915.250054][T17199] usb 3-1: config 1 has no interface number 1 [ 915.281223][T17199] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 915.385223][T17199] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 915.486538][T17199] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 915.528604][T17199] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 915.544444][T17199] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.555805][T17203] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 915.610184][T17199] usb 3-1: Product: syz [ 915.620439][T17199] usb 3-1: Manufacturer: syz [ 915.640746][T17199] usb 3-1: SerialNumber: syz [ 915.808989][T17203] usb 7-1: config 160 has an invalid interface number: 200 but max is 0 [ 915.817492][T17203] usb 7-1: config 160 has no interface number 0 [ 915.823888][T17203] usb 7-1: config 160 interface 200 has no altsetting 0 [ 915.874957][T17203] usb 7-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 915.884053][T17203] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.892896][T17203] usb 7-1: Product: syz [ 915.911841][T21725] kvm: user requested TSC rate below hardware speed [ 915.939313][T17203] usb 7-1: Manufacturer: syz [ 915.954354][T17203] usb 7-1: SerialNumber: syz [ 917.456248][T21739] netlink: 'syz.0.3379': attribute type 10 has an invalid length. [ 917.522652][T17199] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 917.565843][T17199] usb 3-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 917.808948][T21739] syz_tun: entered promiscuous mode [ 918.003651][T17199] usb 3-1: USB disconnect, device number 6 [ 918.034772][T10068] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 918.183609][T17645] udevd[17645]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 918.191915][T21739] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 918.237073][T21763] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3379'. [ 918.302953][T10068] usb 6-1: Using ep0 maxpacket: 8 [ 918.349633][T10068] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 918.443499][T10068] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 918.506418][T10068] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.599017][T10068] usb 6-1: config 0 descriptor?? [ 918.613430][T21775] loop6: detected capacity change from 0 to 524287999 [ 918.643978][T21775] buffer_io_error: 40 callbacks suppressed [ 918.643994][T21775] Buffer I/O error on dev loop6, logical block 0, async page read [ 918.714670][T21775] Buffer I/O error on dev loop6, logical block 0, async page read [ 918.722583][T21775] Buffer I/O error on dev loop6, logical block 0, async page read [ 918.785188][T21775] Buffer I/O error on dev loop6, logical block 0, async page read [ 918.835277][T21775] Buffer I/O error on dev loop6, logical block 0, async page read [ 918.875693][T21775] Buffer I/O error on dev loop6, logical block 0, async page read [ 918.883589][T21775] Buffer I/O error on dev loop6, logical block 0, async page read [ 919.054920][T21775] Buffer I/O error on dev loop6, logical block 0, async page read [ 919.066827][T21775] ldm_validate_partition_table(): Disk read failed. [ 919.092308][T21775] Buffer I/O error on dev loop6, logical block 0, async page read [ 919.122052][T21775] Buffer I/O error on dev loop6, logical block 0, async page read [ 919.148814][T21775] Dev loop6: unable to read RDB block 0 [ 919.176341][T21775] loop6: unable to read partition table [ 919.210537][T21775] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 919.221638][T18348] ldm_validate_partition_table(): Disk read failed. [ 919.249406][T10068] corsair 0003:1B1C:1B09.0020: unbalanced delimiter at end of report description [ 919.268263][T18348] Dev loop6: unable to read RDB block 0 [ 919.274532][T18348] loop6: unable to read partition table [ 919.282611][T10068] corsair 0003:1B1C:1B09.0020: parse failed [ 919.299665][T17203] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 919.312865][T21777] ldm_validate_partition_table(): Disk read failed. [ 919.321672][T10068] corsair 0003:1B1C:1B09.0020: probe with driver corsair failed with error -22 [ 919.328561][T17203] usb 7-1: MIDIStreaming interface descriptor not found [ 919.344815][T17199] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 919.360477][T21777] Dev loop6: unable to read RDB block 0 [ 919.370715][T21777] loop6: unable to read partition table [ 919.379402][T21777] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 919.466121][T17203] usb 7-1: USB disconnect, device number 12 [ 919.529089][T17199] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 919.569797][T17199] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 919.606620][T17199] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 919.639838][T17199] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.698948][T17199] usb 3-1: config 0 descriptor?? [ 919.787479][T21787] kAFS: unable to lookup cell 'ÿ' [ 920.187011][T21776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 920.232325][T21776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 920.757933][T10068] usb 6-1: USB disconnect, device number 25 [ 921.206448][T10068] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 921.427472][T10068] usb 6-1: Using ep0 maxpacket: 16 [ 921.454893][T10068] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 921.510699][T10068] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 921.561597][T17199] usbhid 3-1:0.0: can't add hid device: -71 [ 921.577368][T10068] usb 6-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 921.587672][T17199] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 921.691209][T10068] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.724458][T17199] usb 3-1: USB disconnect, device number 7 [ 921.742351][T10068] usb 6-1: config 0 descriptor?? [ 922.596810][T10068] usbhid 6-1:0.0: can't add hid device: -71 [ 922.677166][T10068] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 922.728483][T10068] usb 6-1: USB disconnect, device number 26 [ 923.392327][ T30] audit: type=1800 audit(1769960858.102:2258): pid=21816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3392" name="/" dev="fuse" ino=9 res=0 errno=0 [ 923.963070][T21827] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3396'. [ 924.468983][T21836] kAFS: unable to lookup cell 'ÿ' [ 925.362511][T21841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3399'. [ 926.293806][ T5910] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 926.506556][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 926.522652][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 926.550981][ T5910] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 926.576843][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.644522][ T5910] usb 3-1: config 0 descriptor?? [ 926.817086][T21865] dvmrp0: entered allmulticast mode [ 926.835418][T17166] usb 6-1: new low-speed USB device number 27 using dummy_hcd [ 927.002616][T17166] usb 6-1: Invalid ep0 maxpacket: 16 [ 927.145902][T21846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.154872][T21846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.162715][T17166] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 927.385183][T17166] usb 6-1: Invalid ep0 maxpacket: 16 [ 927.407733][T17166] usb usb6-port1: attempt power cycle [ 927.775181][T17166] usb 6-1: new low-speed USB device number 29 using dummy_hcd [ 927.795616][T17166] usb 6-1: Invalid ep0 maxpacket: 16 [ 928.197040][T17166] usb 6-1: new low-speed USB device number 30 using dummy_hcd [ 928.315321][T17166] usb 6-1: Invalid ep0 maxpacket: 16 [ 928.326629][T17166] usb usb6-port1: unable to enumerate USB device [ 928.436006][T10068] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 928.615403][T10068] usb 7-1: Using ep0 maxpacket: 32 [ 928.623795][T10068] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 928.647951][T10068] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 928.776955][ T5910] usbhid 3-1:0.0: can't add hid device: -71 [ 928.795402][ T5910] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 928.803647][T10068] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 928.844167][T10068] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 928.864038][T10068] usb 7-1: config 1 has no interface number 0 [ 928.887550][T10068] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 928.953281][ T5910] usb 3-1: USB disconnect, device number 8 [ 929.062444][T21883] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3412'. [ 929.196451][T10068] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.231122][T10068] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 929.440633][T21877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 929.450374][T21877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.904206][T21903] kAFS: unable to lookup cell 'ÿ' [ 931.148494][T10068] snd_usb_pod 7-1:1.1: set_interface failed [ 931.260066][T10068] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 931.305157][T10068] snd_usb_pod 7-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 931.396383][T10068] usb 7-1: USB disconnect, device number 13 [ 931.500035][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.506546][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.575136][T21908] binder: 21905:21908 ioctl 4018620d 0 returned -22 [ 931.776346][T21894] ALSA: mixer_oss: invalid OSS volume '' [ 932.637965][T21919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 932.702923][T21919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 932.795155][T21919] hub 9-0:1.0: USB hub found [ 932.820769][T21919] hub 9-0:1.0: 1 port detected [ 932.885191][T10068] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 934.959452][T21966] kAFS: unable to lookup cell 'ÿ' [ 936.635142][T17166] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 936.795065][T17166] usb 6-1: Using ep0 maxpacket: 16 [ 936.814423][T17166] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 936.857082][T17166] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 936.907077][T17166] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 936.957503][T17166] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.984249][T17166] usb 6-1: Product: syz [ 936.995415][T17166] usb 6-1: Manufacturer: syz [ 937.008652][T17166] usb 6-1: SerialNumber: syz [ 937.065601][T17166] usb 6-1: config 0 descriptor?? [ 937.087882][T17166] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 937.122840][T17166] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 937.357700][T21995] macsec1: entered promiscuous mode [ 937.362967][T21995] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 937.398902][T21998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 937.409991][T21998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 937.475336][T21995] macsec1: entered allmulticast mode [ 937.505161][T21995] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 937.753444][T22002] tipc: Enabled bearer , priority 0 [ 937.766147][T22002] syzkaller0: entered promiscuous mode [ 937.772094][T22002] syzkaller0: entered allmulticast mode [ 937.876336][T22002] tipc: Resetting bearer [ 937.904510][T22001] tipc: Resetting bearer [ 938.088193][T22001] tipc: Disabling bearer [ 938.878075][T17166] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 938.885958][T17166] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 938.925433][T17166] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 938.950471][T17166] em28xx 6-1:0.0: No AC97 audio processor [ 939.768792][T22020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3449'. [ 939.829068][T22022] sctp: [Deprecated]: syz.0.3451 (pid 22022) Use of struct sctp_assoc_value in delayed_ack socket option. [ 939.829068][T22022] Use struct sctp_sack_info instead [ 939.927467][ T5910] usb 6-1: USB disconnect, device number 31 [ 939.955637][ T5910] em28xx 6-1:0.0: Disconnecting em28xx [ 939.986643][ T5910] em28xx 6-1:0.0: Freeing device [ 940.018650][T22022] sctp: [Deprecated]: syz.0.3451 (pid 22022) Use of int in maxseg socket option. [ 940.018650][T22022] Use struct sctp_assoc_value instead [ 940.628658][T22036] kAFS: unable to lookup cell 'ÿ' [ 940.679549][T22022] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 940.713495][T22022] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 940.887034][T22022] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 940.910941][T22022] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 940.935299][T22022] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 940.963156][T22022] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 941.315277][T17166] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 941.500994][T22046] tipc: Started in network mode [ 941.505997][T22046] tipc: Node identity , cluster identity 4711 [ 941.519903][T22046] tipc: Failed to obtain node identity [ 941.544738][T22046] tipc: Enabling of bearer rejected, failed to enable media [ 941.604057][T22051] syzkaller0: entered promiscuous mode [ 941.643763][T22051] syzkaller0: entered allmulticast mode [ 941.729076][T17166] usb 2-1: Using ep0 maxpacket: 8 [ 941.965186][T17166] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 942.063159][T17166] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 942.114513][T17166] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 942.215043][T15680] Bluetooth: hci2: command 0x0c1a tx timeout [ 942.248532][T17166] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 942.308191][T17166] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.344921][T17166] usb 2-1: Product: syz [ 942.353692][T17166] usb 2-1: Manufacturer: syz [ 942.380280][T17166] usb 2-1: SerialNumber: syz [ 942.408423][T22019] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 942.470142][T17166] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 942.573296][T22063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 942.825170][T17166] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 942.872245][T17166] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 942.953256][T15680] Bluetooth: hci3: command 0x0c1a tx timeout [ 943.605790][T17203] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 943.741586][T17199] usb 2-1: USB disconnect, device number 77 [ 943.798804][T17203] usb 6-1: Using ep0 maxpacket: 16 [ 943.816615][T17203] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 943.865439][T17203] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 943.927421][T17203] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 943.968462][T17203] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.005531][T17203] usb 6-1: Product: syz [ 944.009741][T17203] usb 6-1: Manufacturer: syz [ 944.014342][T17203] usb 6-1: SerialNumber: syz [ 944.087236][T17203] usb 6-1: config 0 descriptor?? [ 944.142372][T17203] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 944.185192][T10068] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 944.194703][T17203] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 944.260739][T22084] netlink: 'syz.0.3468': attribute type 4 has an invalid length. [ 944.305485][T15680] Bluetooth: hci2: command 0x0c1a tx timeout [ 944.365285][T10068] usb 7-1: Using ep0 maxpacket: 16 [ 944.375291][T10068] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 944.394185][T22085] sctp: [Deprecated]: syz.0.3468 (pid 22085) Use of struct sctp_assoc_value in delayed_ack socket option. [ 944.394185][T22085] Use struct sctp_sack_info instead [ 944.436889][T10068] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.546762][T22088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.562324][T10068] usb 7-1: Product: syz [ 944.567941][T10068] usb 7-1: Manufacturer: syz [ 944.573327][T10068] usb 7-1: SerialNumber: syz [ 944.582962][T22088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.658094][T22091] tipc: Enabled bearer , priority 0 [ 944.676846][T10068] usb 7-1: config 0 descriptor?? [ 944.687337][T10068] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 944.698101][T22091] syzkaller0: entered promiscuous mode [ 944.698950][T10068] usb 7-1: Detected FT-X [ 944.703608][T22091] syzkaller0: entered allmulticast mode [ 944.720964][T22091] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 944.748440][T22091] tipc: Resetting bearer [ 944.862038][T22090] tipc: Resetting bearer [ 944.966390][T22079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.024889][T15680] Bluetooth: hci3: command 0x0c1a tx timeout [ 945.098436][T22079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.137385][T10068] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 945.171556][T22090] tipc: Disabling bearer [ 945.590556][T10068] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 945.714979][T22098] kAFS: unable to lookup cell 'ÿ' [ 945.813277][T17166] usb 7-1: USB disconnect, device number 14 [ 945.851832][T17166] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 945.917398][T17166] ftdi_sio 7-1:0.0: device disconnected [ 946.066988][T17203] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 946.074050][T17203] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 946.106907][T17203] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 946.139306][T17203] em28xx 6-1:0.0: No AC97 audio processor [ 946.385079][T15680] Bluetooth: hci2: command 0x0c1a tx timeout [ 947.094703][T15680] Bluetooth: hci3: command 0x0c1a tx timeout [ 947.697308][T17166] usb 6-1: USB disconnect, device number 32 [ 947.706565][T17166] em28xx 6-1:0.0: Disconnecting em28xx [ 947.749765][T17166] em28xx 6-1:0.0: Freeing device [ 948.148039][T22125] syz_tun: left promiscuous mode [ 948.219646][T22125] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 948.387719][T22128] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3479'. [ 948.640248][T22133] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3480'. [ 948.898762][T22138] tipc: Started in network mode [ 948.984753][T22138] tipc: Node identity , cluster identity 4711 [ 948.990872][T22138] tipc: Failed to obtain node identity [ 949.045237][T22138] tipc: Enabling of bearer rejected, failed to enable media [ 949.100591][T22138] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 949.390098][T22146] usb usb8: usbfs: process 22146 (syz.0.3483) did not claim interface 0 before use [ 949.877390][T17199] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 949.983875][T22162] kAFS: unable to lookup cell 'ÿ' [ 950.084982][T17199] usb 6-1: Using ep0 maxpacket: 16 [ 950.105502][T17199] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 950.278315][T17199] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 950.381627][T17199] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 950.404894][T17199] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.478066][T17199] usb 6-1: Product: syz [ 950.482283][T17199] usb 6-1: Manufacturer: syz [ 950.514648][T17199] usb 6-1: SerialNumber: syz [ 950.548591][T17199] usb 6-1: config 0 descriptor?? [ 950.582715][T17199] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 950.612065][T17199] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 950.891319][T22178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 950.900701][T22178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 951.076607][T22180] tipc: Started in network mode [ 951.081504][T22180] tipc: Node identity , cluster identity 4711 [ 951.095237][T10068] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 951.140175][T22180] tipc: Failed to obtain node identity [ 951.192123][T22180] tipc: Enabling of bearer rejected, failed to enable media [ 951.265468][T22183] sch_tbf: burst 0 is lower than device syzkaller0 mtu (65521) ! [ 951.342865][T10068] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 951.480123][T10068] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 951.549363][T10068] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 951.584266][T10068] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.636710][T10068] usb 3-1: config 0 descriptor?? [ 952.074980][T22166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 952.085055][T22166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 952.294876][T17199] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 952.309423][T17199] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 952.330069][T17199] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 952.404470][T17199] em28xx 6-1:0.0: No AC97 audio processor [ 953.134692][T17166] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 953.239437][T10068] usbhid 3-1:0.0: can't add hid device: -71 [ 953.249949][T10068] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 953.306802][T10068] usb 3-1: USB disconnect, device number 10 [ 953.324677][T17166] usb 7-1: Using ep0 maxpacket: 32 [ 953.331419][T17166] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 953.353950][T17166] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 953.375967][T17166] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 953.399678][T17166] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 953.421934][T17166] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.451635][T17166] usb 7-1: config 0 descriptor?? [ 953.526626][T22195] fuse: Unknown parameter 'fdïì±d$Lÿ00000000000000000000075' [ 953.608870][T17199] usb 6-1: USB disconnect, device number 33 [ 953.616263][T17199] em28xx 6-1:0.0: Disconnecting em28xx [ 953.624612][T17199] em28xx 6-1:0.0: Freeing device [ 954.052063][T17166] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.0021/input/input38 [ 954.094721][T17199] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 954.193825][T22188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 954.223484][T22188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.264968][T17166] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.0021/input/input39 [ 954.284741][T17199] usb 6-1: Using ep0 maxpacket: 16 [ 954.303609][T22188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 954.327244][T17199] usb 6-1: config 0 has an invalid interface number: 107 but max is 0 [ 954.343305][T17199] usb 6-1: config 0 has no interface number 0 [ 954.374715][T17199] usb 6-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 55, changing to 9 [ 954.414008][T17199] usb 6-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 8496, setting to 1024 [ 954.445735][T17166] kye 0003:0458:5011.0021: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.6-1/input0 [ 954.471684][T17199] usb 6-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 954.479422][T22188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.481077][T17199] usb 6-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 954.576603][T17199] usb 6-1: Product: syz [ 954.581759][T22188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 954.592311][T17199] usb 6-1: Manufacturer: syz [ 954.618691][T17199] usb 6-1: SerialNumber: syz [ 954.652216][T22188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.681214][T17199] usb 6-1: config 0 descriptor?? [ 954.724504][T17199] keyspan 6-1:0.107: Keyspan 4 port adapter converter detected [ 954.732473][T17199] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 81 [ 954.782099][T17166] usb 7-1: USB disconnect, device number 15 [ 954.810553][T17199] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 1 [ 954.811102][T22203] fido_id[22203]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 954.891796][T17199] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 955.048273][T17199] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 2 [ 955.049275][T17199] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 955.050274][T17199] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 4 [ 955.075325][T17199] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 955.076451][T17199] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 6 [ 955.083453][T17199] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 955.125533][T17199] usb 6-1: USB disconnect, device number 34 [ 955.129638][T17199] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 955.150196][T17199] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 955.159578][T17199] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 955.173873][T17199] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 955.174491][T17199] keyspan 6-1:0.107: device disconnected [ 955.923768][T22216] tipc: Started in network mode [ 955.923790][T22216] tipc: Node identity eeef520b6b62, cluster identity 4711 [ 955.923886][T22216] tipc: Enabled bearer , priority 0 [ 955.924381][T22216] syzkaller0: entered promiscuous mode [ 955.924395][T22216] syzkaller0: entered allmulticast mode [ 955.927053][T22216] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 956.302330][T22219] tipc: Resetting bearer [ 956.314989][T22215] tipc: Resetting bearer [ 956.486937][T22215] tipc: Disabling bearer [ 957.035079][ T5910] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 957.188525][ T5910] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 88, changing to 10 [ 957.188563][ T5910] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 957.188604][ T5910] usb 7-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 957.188628][ T5910] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.193478][ T5910] usb 7-1: config 0 descriptor?? [ 957.672136][T22232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 957.703546][T22240] binder: 22235:22240 ioctl 4018620d 0 returned -22 [ 957.740020][T22232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 957.819676][ T5910] usbhid 7-1:0.0: can't add hid device: -71 [ 957.835384][ T5910] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 957.860617][ T5910] usb 7-1: USB disconnect, device number 16 [ 958.294924][T17201] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 958.568025][T17201] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 958.579089][T17201] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14660, setting to 64 [ 958.631532][T17201] usb 3-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 958.672070][T17201] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.745556][T17201] usb 3-1: config 0 descriptor?? [ 958.775862][T22246] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 959.073733][T22254] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3515'. [ 959.086292][T17201] usbhid 3-1:0.0: can't add hid device: -71 [ 959.092285][T17201] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 959.134918][T17201] usb 3-1: USB disconnect, device number 11 [ 959.331422][T22250] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3512'. [ 959.587159][T22262] tipc: Enabled bearer , priority 0 [ 959.623980][T22262] syzkaller0: entered promiscuous mode [ 959.646160][T22262] syzkaller0: entered allmulticast mode [ 959.666834][T22262] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 959.714390][T22262] tipc: Resetting bearer [ 959.739926][T22261] tipc: Resetting bearer [ 959.767747][T22261] tipc: Disabling bearer [ 961.553166][T22291] netlink: 596 bytes leftover after parsing attributes in process `syz.6.3526'. [ 961.570191][T22290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 961.707205][T22290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 962.112159][T22298] loop6: detected capacity change from 0 to 524287999 [ 962.147387][T22298] buffer_io_error: 40 callbacks suppressed [ 962.147399][T22298] Buffer I/O error on dev loop6, logical block 0, async page read [ 962.195200][T22298] Buffer I/O error on dev loop6, logical block 0, async page read [ 962.244497][T22298] Buffer I/O error on dev loop6, logical block 0, async page read [ 962.404721][T22298] Buffer I/O error on dev loop6, logical block 0, async page read [ 962.466017][T22298] Buffer I/O error on dev loop6, logical block 0, async page read [ 962.499927][T22298] Buffer I/O error on dev loop6, logical block 0, async page read [ 962.515604][T22298] Buffer I/O error on dev loop6, logical block 0, async page read [ 962.533117][T22298] Buffer I/O error on dev loop6, logical block 0, async page read [ 962.550732][T22298] ldm_validate_partition_table(): Disk read failed. [ 962.571777][T22298] Buffer I/O error on dev loop6, logical block 0, async page read [ 962.592256][T22298] Buffer I/O error on dev loop6, logical block 0, async page read [ 962.609684][T22298] Dev loop6: unable to read RDB block 0 [ 962.628018][T22298] loop6: unable to read partition table [ 962.641944][T22298] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 962.655429][T18348] ldm_validate_partition_table(): Disk read failed. [ 962.711271][ T5910] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 962.739739][T18348] Dev loop6: unable to read RDB block 0 [ 962.782435][T18348] loop6: unable to read partition table [ 962.815557][T22300] ldm_validate_partition_table(): Disk read failed. [ 962.825698][T22300] Dev loop6: unable to read RDB block 0 [ 962.833060][T22300] loop6: unable to read partition table [ 962.839165][T22300] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 962.876719][ T5910] usb 3-1: Using ep0 maxpacket: 16 [ 962.912352][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 962.956728][ T5910] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 963.015309][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.038470][ T5910] usb 3-1: config 0 descriptor?? [ 963.425252][T10068] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 963.554475][ T5910] kye 0003:0458:5016.0022: control desc unexpectedly large [ 963.604745][T10068] usb 7-1: Using ep0 maxpacket: 16 [ 963.672883][ T5910] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0022/input/input40 [ 963.685773][T10068] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 963.730070][T10068] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 963.794806][T10067] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 963.803399][T10068] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 963.856634][T10068] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.869870][ T5910] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0022/input/input41 [ 963.912286][T10068] usb 7-1: Product: syz [ 963.920496][T10068] usb 7-1: Manufacturer: syz [ 963.960539][T10068] usb 7-1: SerialNumber: syz [ 964.017278][T10068] usb 7-1: config 0 descriptor?? [ 964.091413][T10068] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 964.147713][ T5910] kye 0003:0458:5016.0022: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 964.187324][T10068] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 964.205404][T10067] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 964.264771][T22313] tipc: Started in network mode [ 964.311394][T10067] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 964.320364][T22313] tipc: Node identity 8aeaf5ce0e1f, cluster identity 4711 [ 964.510247][T22321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 964.519391][T22321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 964.583970][T10067] usb 2-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 964.648178][T10067] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.667529][T22313] tipc: Enabled bearer , priority 0 [ 964.809827][T10067] usb 2-1: config 0 descriptor?? [ 964.824973][T22316] syzkaller0: entered promiscuous mode [ 964.896574][T22316] syzkaller0: entered allmulticast mode [ 964.972327][T22307] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3531'. [ 965.057266][T22322] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 965.334461][T22311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 965.378879][T22311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 965.424359][T22323] tipc: Resetting bearer [ 965.442058][T22312] tipc: Resetting bearer [ 965.611975][T22312] tipc: Disabling bearer [ 965.980250][T10068] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 965.987714][T10068] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 966.005616][T10068] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 966.075265][T10068] em28xx 7-1:0.0: No AC97 audio processor [ 966.898558][T10067] usbhid 2-1:0.0: can't add hid device: -71 [ 966.905371][T10067] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 966.960522][T17203] usb 3-1: USB disconnect, device number 12 [ 967.465392][T10067] usb 2-1: USB disconnect, device number 78 [ 968.382636][T22348] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3540'. [ 968.392305][T22348] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3540'. [ 968.519076][T10067] usb 7-1: USB disconnect, device number 17 [ 968.652060][T10067] em28xx 7-1:0.0: Disconnecting em28xx [ 968.662029][T10067] em28xx 7-1:0.0: Freeing device [ 970.206303][T22357] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3544'. [ 970.322700][T10068] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 970.364301][T22377] netlink: 'syz.6.3550': attribute type 20 has an invalid length. [ 970.393422][T22377] IPv6: NLM_F_CREATE should be specified when creating new route [ 970.471110][T22377] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 970.478477][T22377] IPv6: NLM_F_CREATE should be set when creating new route [ 970.516416][T10068] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 970.541764][T10068] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 970.673838][T10068] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 970.702783][T10068] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.730355][T10068] usb 3-1: config 0 descriptor?? [ 971.175680][T17166] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 971.484088][T22370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 971.502598][T22370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 971.580479][T17166] usb 2-1: Using ep0 maxpacket: 16 [ 971.591037][T17166] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 971.608069][T17166] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 971.619772][T17166] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.643201][T17166] usb 2-1: Product: syz [ 971.655199][T17166] usb 2-1: Manufacturer: syz [ 971.723280][T17166] usb 2-1: SerialNumber: syz [ 971.757709][T17166] usb 2-1: config 0 descriptor?? [ 971.864403][T17166] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 971.883349][T17166] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 972.473341][T17166] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 972.575962][T22400] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3555'. [ 972.809157][ T5910] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 972.888805][T10068] usbhid 3-1:0.0: can't add hid device: -71 [ 972.895702][T10068] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 972.964943][T17203] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 972.973023][T10068] usb 3-1: USB disconnect, device number 13 [ 973.083810][T22383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 973.094035][T22383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 973.104944][ T5910] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 973.144755][T17203] usb 7-1: Using ep0 maxpacket: 8 [ 973.228461][T17166] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 973.265654][T17203] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 973.278196][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.299724][T22411] program syz.2.3559 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 973.309069][T17166] em28xx 2-1:0.0: board has no eeprom [ 973.320273][ T5910] usb 6-1: Product: syz [ 973.324481][ T5910] usb 6-1: Manufacturer: syz [ 973.353071][ T5910] usb 6-1: SerialNumber: syz [ 973.371381][ T5910] usb 6-1: config 0 descriptor?? [ 973.394135][T17203] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 973.395356][T17166] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 973.420419][ T5910] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 973.447632][T17166] em28xx 2-1:0.0: dvb set to bulk mode. [ 973.454062][T17203] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 973.485425][ T5910] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 973.499991][T10068] em28xx 2-1:0.0: Binding DVB extension [ 973.557906][T17166] usb 2-1: USB disconnect, device number 79 [ 973.565235][T17203] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 973.591560][ T5910] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 973.601609][T17203] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.611557][T22416] netlink: 'syz.1.3560': attribute type 4 has an invalid length. [ 973.625920][T17166] em28xx 2-1:0.0: Disconnecting em28xx [ 973.634603][T17203] usb 7-1: Product: syz [ 973.642636][T22398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 973.662207][T17203] usb 7-1: Manufacturer: syz [ 973.669140][ T5910] usb 6-1: media controller created [ 973.675066][T22417] netlink: 'syz.1.3560': attribute type 4 has an invalid length. [ 973.690151][T17203] usb 7-1: SerialNumber: syz [ 973.715805][T22398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 973.732362][T22400] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 973.751331][T17203] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 973.802935][T17203] usbtest 7-1:1.0: couldn't get endpoints, -22 [ 973.826175][ T5910] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 973.834679][T17203] usbtest 7-1:1.0: probe with driver usbtest failed with error -22 [ 973.859290][T10068] em28xx 2-1:0.0: Registering input extension [ 973.888847][T17166] em28xx 2-1:0.0: Closing input extension [ 973.969344][T17166] em28xx 2-1:0.0: Freeing device [ 974.116678][ T5910] DVB: Unable to find symbol mt352_attach() [ 974.365308][ T5910] DVB: Unable to find symbol nxt6000_attach() [ 974.392417][ T5910] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 974.452758][ T5910] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input44 [ 974.533035][ T5910] dvb-usb: schedule remote query interval to 1000 msecs. [ 974.589101][ T5910] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 974.686923][ T5910] dvb-usb: bulk message failed: -22 (7/0) [ 974.717676][T22426] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3563'. [ 974.776819][ T5910] dvb-usb: bulk message failed: -22 (7/0) [ 974.813445][T22426] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 974.839391][T22426] macsec1: entered allmulticast mode [ 974.841602][ T5910] usb 6-1: USB disconnect, device number 35 [ 974.873931][T22426] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 974.932255][T22426] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 974.941104][T22426] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 975.057490][ T5910] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 975.410511][T17166] usb 7-1: USB disconnect, device number 18 [ 975.770316][T22445] kAFS: unable to lookup cell 'ÿ' [ 976.973794][T22455] tipc: Enabled bearer , priority 0 [ 977.065303][T22456] syzkaller0: entered promiscuous mode [ 977.106868][T22456] syzkaller0: entered allmulticast mode [ 977.441925][T22456] tipc: Resetting bearer [ 977.610187][T22454] tipc: Resetting bearer [ 977.742246][T22454] tipc: Disabling bearer [ 977.774698][T17199] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 977.930446][T17199] usb 3-1: unable to get BOS descriptor or descriptor too short [ 977.951047][T17199] usb 3-1: not running at top speed; connect to a high speed hub [ 977.976756][T17199] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 978.000294][T17199] usb 3-1: config 4 has an invalid descriptor of length 163, skipping remainder of the config [ 978.046977][T17199] usb 3-1: config 4 has no interface number 0 [ 978.071275][T17199] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 978.088522][T17199] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.118012][T17199] usb 3-1: Product: syz [ 978.134866][T17199] usb 3-1: Manufacturer: syz [ 978.151551][T17199] usb 3-1: SerialNumber: syz [ 978.229116][T22466] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 978.411716][T22468] netlink: 'syz.1.3574': attribute type 4 has an invalid length. [ 978.530851][T22470] netlink: 'syz.1.3574': attribute type 4 has an invalid length. [ 979.204888][T17203] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 979.397690][T17203] usb 2-1: Using ep0 maxpacket: 32 [ 979.425154][T17203] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 979.458978][T17203] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 979.502241][T17203] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 979.538387][T17203] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.584148][T17203] usb 2-1: config 0 descriptor?? [ 979.629684][T17203] hub 2-1:0.0: USB hub found [ 979.811546][T17203] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 980.052025][T17203] hid-generic 0003:046D:C31C.0023: item fetching failed at offset 0/1 [ 980.101251][T17203] hid-generic 0003:046D:C31C.0023: probe with driver hid-generic failed with error -22 [ 980.269048][T22476] netlink: 'syz.5.3577': attribute type 11 has an invalid length. [ 980.374534][T17203] usb 2-1: USB disconnect, device number 80 [ 980.633566][T17199] uvcvideo 3-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 980.664930][T17199] uvcvideo 3-1:4.147: No valid video chain found. [ 980.749611][T17199] usb 3-1: USB disconnect, device number 14 [ 980.895286][T22488] netlink: 'syz.6.3581': attribute type 4 has an invalid length. [ 980.977686][T22488] netlink: 'syz.6.3581': attribute type 4 has an invalid length. [ 981.177573][T17199] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 981.289161][T22492] batadv0: entered promiscuous mode [ 981.326703][T22492] vlan2: entered promiscuous mode [ 981.354856][T17199] usb 2-1: Using ep0 maxpacket: 8 [ 981.374461][T17199] usb 2-1: config 0 has an invalid interface number: 154 but max is 0 [ 981.392980][T17199] usb 2-1: config 0 has no interface number 0 [ 981.409515][T17199] usb 2-1: config 0 interface 154 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 981.505758][T17199] usb 2-1: config 0 interface 154 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 981.546741][T17199] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=9e.bc [ 981.605597][T22498] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3580'. [ 981.634690][T17199] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.673317][T17199] usb 2-1: Product: syz [ 981.693799][T17199] usb 2-1: Manufacturer: syz [ 981.724481][T17199] usb 2-1: SerialNumber: syz [ 981.745273][T17199] usb 2-1: config 0 descriptor?? [ 981.780915][T17199] appletouch 2-1:0.154: Could not find int-in endpoint [ 981.805362][T17199] appletouch 2-1:0.154: probe with driver appletouch failed with error -5 [ 981.836721][T17199] usbhid 2-1:0.154: couldn't find an input interrupt endpoint [ 981.967091][T22490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 982.043341][T22490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 982.317478][T17199] usb 2-1: USB disconnect, device number 81 [ 982.402129][T22516] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 982.466605][T22487] veth0: entered promiscuous mode [ 982.472013][T22487] vlan3: entered promiscuous mode [ 983.085677][T22516] vlan3: entered promiscuous mode [ 983.093675][T22537] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3588'. [ 983.229494][T22516] vlan3: entered allmulticast mode [ 983.264661][T22516] hsr_slave_1: entered allmulticast mode [ 983.545209][T10068] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 983.735578][T10068] usb 2-1: Using ep0 maxpacket: 32 [ 983.742114][T10068] usb 2-1: unable to get BOS descriptor or descriptor too short [ 983.756520][T10068] usb 2-1: config 5 has an invalid interface number: 52 but max is 0 [ 983.784252][T10068] usb 2-1: config 5 has no interface number 0 [ 983.817186][T10068] usb 2-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 983.856128][T10068] usb 2-1: string descriptor 0 read error: -22 [ 983.879836][T10068] usb 2-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 983.937508][T10068] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.988061][T22540] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 984.020927][T10068] aircable 2-1:5.52: aircable converter detected [ 984.096591][T10068] usb 2-1: aircable converter now attached to ttyUSB0 [ 984.256069][T22560] netlink: 'syz.5.3595': attribute type 4 has an invalid length. [ 984.420059][T17203] usb 2-1: USB disconnect, device number 82 [ 984.445668][T17203] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 984.470928][T17203] aircable 2-1:5.52: device disconnected [ 984.596585][T22560] netlink: 'syz.5.3595': attribute type 4 has an invalid length. [ 984.939673][T22567] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3596'. [ 985.178682][T22565] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3590'. [ 985.289428][T17200] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 985.625301][T22580] loop2: detected capacity change from 0 to 7 [ 985.643031][T17200] usb 6-1: too many configurations: 30, using maximum allowed: 8 [ 985.662578][T22580] Dev loop2: unable to read RDB block 7 [ 985.671667][T22580] loop2: AHDI p1 p2 p3 [ 985.676604][T22580] loop2: partition table partially beyond EOD, truncated [ 985.689975][T22580] loop2: p1 start 1601398130 is beyond EOD, truncated [ 985.765085][T22580] loop2: p2 start 1702059890 is beyond EOD, truncated [ 985.833860][ T5194] Dev loop2: unable to read RDB block 7 [ 985.858100][T17200] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 985.885403][ T5194] loop2: AHDI p1 p2 p3 [ 985.898063][T17200] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.937306][ T5194] loop2: partition table partially beyond EOD, truncated [ 986.007023][T22580] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 986.013919][T17200] usb 6-1: Product: syz [ 986.013941][T17200] usb 6-1: Manufacturer: syz [ 986.019116][ T5194] loop2: p1 start 1601398130 is beyond EOD, truncated [ 986.037113][ T5194] loop2: p2 start 1702059890 is beyond EOD, truncated [ 986.054217][T17200] usb 6-1: SerialNumber: syz [ 986.212409][T17200] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 986.233263][T22590] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 986.389602][T17203] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 986.602406][ C0] usb 6-1: ath9k_htc: invalid pkt_len (e108) [ 987.085769][T17166] usb 6-1: USB disconnect, device number 36 [ 987.494838][T17203] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 987.505322][T17203] ath9k_htc: Failed to initialize the device [ 987.539037][T22595] can: request_module (can-proto-0) failed. [ 987.555287][T17166] usb 6-1: ath9k_htc: USB layer deinitialized [ 988.048860][T22605] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3605'. [ 988.602181][T22607] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3608'. [ 988.838116][T22622] ip6t_srh: unknown srh match flags 5F28 [ 988.995361][ T5910] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 989.166900][ T5910] usb 2-1: no configurations [ 989.185195][ T5910] usb 2-1: can't read configurations, error -22 [ 989.355155][ T5910] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 989.567251][ T5910] usb 2-1: no configurations [ 989.572015][ T5910] usb 2-1: can't read configurations, error -22 [ 989.711780][ T30] audit: type=1800 audit(1769960924.442:2259): pid=22637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3616" name=66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161249110 dev="tmpfs" ino=2382 res=0 errno=0 [ 989.778536][ T5910] usb usb2-port1: attempt power cycle [ 990.128456][ T5910] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 990.188453][ T5910] usb 2-1: no configurations [ 990.193136][ T5910] usb 2-1: can't read configurations, error -22 [ 990.336597][ T5910] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 990.393922][ T5910] usb 2-1: no configurations [ 990.399368][ T5910] usb 2-1: can't read configurations, error -22 [ 990.420952][ T5910] usb usb2-port1: unable to enumerate USB device [ 990.639390][T22636] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3615'. [ 990.825822][T17200] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 991.163200][T17200] usb 3-1: Using ep0 maxpacket: 32 [ 991.189208][T17200] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 991.202546][T17200] usb 3-1: config 0 has no interface number 0 [ 991.223842][T17200] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 991.258229][T17200] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 991.314096][T17200] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 991.354910][T17200] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 991.394799][T17200] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 991.424921][T17200] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 991.525435][T17200] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 991.775084][T17200] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 991.844661][T17200] usb 3-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 991.917341][T17200] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 991.959056][T17200] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.002519][T17200] usb 3-1: Product: syz [ 992.016855][T17200] usb 3-1: Manufacturer: syz [ 992.034748][T17200] usb 3-1: SerialNumber: syz [ 992.067978][T17200] usb 3-1: config 0 descriptor?? [ 992.103251][T22644] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 992.125388][T17200] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 992.166287][T17200] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 992.214725][T17199] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 992.346925][T17200] usb 3-1: USB disconnect, device number 15 [ 992.358594][T17199] usb 2-1: device descriptor read/64, error -71 [ 992.665393][T17199] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 992.912226][T17199] usb 2-1: device descriptor read/64, error -71 [ 992.943205][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.949582][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.046042][T17199] usb usb2-port1: attempt power cycle [ 993.255360][ T5910] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 993.365197][T17166] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 993.416867][ T5910] usb 6-1: Using ep0 maxpacket: 16 [ 993.425158][T17199] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 993.426031][ T5910] usb 6-1: config 6 has an invalid descriptor of length 169, skipping remainder of the config [ 993.447158][ T5910] usb 6-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 993.459852][ T5910] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=ba.fb [ 993.473647][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.482655][T10068] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 993.482751][T17199] usb 2-1: device descriptor read/8, error -71 [ 993.495916][ T5910] usb 6-1: Product: syz [ 993.502427][ T5910] usb 6-1: Manufacturer: syz [ 993.509111][ T5910] usb 6-1: SerialNumber: syz [ 993.525602][T17166] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 993.544005][T17166] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 993.558553][T17166] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 993.572325][T17166] usb 3-1: config 0 interface 0 has no altsetting 0 [ 993.584502][T17166] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 993.601124][T17166] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 993.616006][T17166] usb 3-1: config 0 interface 0 has no altsetting 0 [ 993.626281][T17166] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 993.637976][T17166] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 993.650978][T17166] usb 3-1: config 0 interface 0 has no altsetting 0 [ 993.661255][T17166] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 993.673881][T10068] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 993.688716][T17166] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 993.700567][T10068] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14660, setting to 64 [ 993.718629][T17166] usb 3-1: config 0 interface 0 has no altsetting 0 [ 993.727574][T10068] usb 7-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 993.739598][T17166] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 993.755986][ T5910] usb 6-1: USB disconnect, device number 37 [ 993.770025][T17166] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 993.785120][T10068] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.792033][T17199] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 993.799900][T17166] usb 3-1: config 0 interface 0 has no altsetting 0 [ 993.812710][T17166] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 993.826365][T17199] usb 2-1: device descriptor read/8, error -71 [ 993.833059][T17166] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 993.846416][T10068] usb 7-1: config 0 descriptor?? [ 993.853362][T17166] usb 3-1: config 0 interface 0 has no altsetting 0 [ 993.862083][T22672] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 993.875903][T17166] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 993.890384][T17166] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 993.902478][T17166] usb 3-1: config 0 interface 0 has no altsetting 0 [ 993.913527][T17166] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 993.924164][T17166] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 993.941596][T17166] usb 3-1: config 0 interface 0 has no altsetting 0 [ 993.951780][T17166] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 993.962395][T17166] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 993.964999][T17199] usb usb2-port1: unable to enumerate USB device [ 993.971701][T17166] usb 3-1: Product: syz [ 993.986408][T17166] usb 3-1: Manufacturer: syz [ 993.991139][T17166] usb 3-1: SerialNumber: syz [ 994.002678][T17166] usb 3-1: config 0 descriptor?? [ 994.024035][T17166] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 994.106548][T10068] usbhid 7-1:0.0: can't add hid device: -71 [ 994.112834][T10068] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 994.167905][T10068] usb 7-1: USB disconnect, device number 19 [ 994.512997][T22667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3626'. [ 994.525893][T22667] bond0: Caught tx_queue_len zero misconfig [ 994.541914][ T5910] usb 3-1: USB disconnect, device number 16 [ 994.556538][T10068] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 994.565319][ T5910] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 994.735702][T10068] usb 7-1: Using ep0 maxpacket: 32 [ 994.748574][T10068] usb 7-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 994.760435][T10068] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.779078][T10068] usb 7-1: config 0 descriptor?? [ 995.118124][T22686] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 996.336673][T22708] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3636'. [ 996.351275][T22708] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3636'. [ 996.731205][T22708] erspan0: entered promiscuous mode [ 996.737770][T22708] bridge0: entered promiscuous mode [ 998.235867][T10068] usbhid 7-1:0.0: can't add hid device: -71 [ 998.355095][T10068] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 998.461201][T10068] usb 7-1: USB disconnect, device number 20 [ 998.736327][ T30] audit: type=1326 audit(1769960933.472:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22736 comm="syz.6.3639" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b1ed9aeb9 code=0x0 [ 999.130306][T22746] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3642'. [ 999.207441][ T30] audit: type=1326 audit(1769960933.942:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22747 comm="syz.1.3643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f519aeb9 code=0x7ffc0000 [ 999.295363][ T30] audit: type=1326 audit(1769960933.942:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22747 comm="syz.1.3643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f519aeb9 code=0x7ffc0000 [ 999.402922][ T30] audit: type=1326 audit(1769960933.972:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22747 comm="syz.1.3643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f11f519aeb9 code=0x7ffc0000 [ 999.478071][ T30] audit: type=1326 audit(1769960933.972:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22747 comm="syz.1.3643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f519aeb9 code=0x7ffc0000 [ 999.508254][T17199] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 999.569846][ T30] audit: type=1326 audit(1769960933.972:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22747 comm="syz.1.3643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f519aeb9 code=0x7ffc0000 [ 999.645436][ T30] audit: type=1326 audit(1769960933.972:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22747 comm="syz.1.3643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f11f519aeb9 code=0x7ffc0000 [ 999.735733][T17199] usb 3-1: Using ep0 maxpacket: 32 [ 999.830426][T17199] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 999.841159][T17199] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 999.860601][ T30] audit: type=1326 audit(1769960933.972:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22747 comm="syz.1.3643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f519aeb9 code=0x7ffc0000 [ 999.921540][T17199] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 999.960846][T17199] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 999.977694][ T30] audit: type=1326 audit(1769960933.972:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22747 comm="syz.1.3643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f519aeb9 code=0x7ffc0000 [ 1000.038162][T17199] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1000.063074][ T30] audit: type=1326 audit(1769960933.972:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22747 comm="syz.1.3643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f11f519aeb9 code=0x7ffc0000 [ 1000.094722][T17199] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.103149][T22760] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3647'. [ 1000.112934][T22760] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3647'. [ 1000.123107][T17199] usb 3-1: Product: syz [ 1000.132818][T17199] usb 3-1: Manufacturer: syz [ 1000.148468][T17199] usb 3-1: SerialNumber: syz [ 1000.185529][T17166] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1000.189060][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1000.253369][T17199] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input45 [ 1000.345680][T17166] usb 7-1: Using ep0 maxpacket: 8 [ 1000.362257][T17166] usb 7-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1000.406571][T17199] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1000.416548][T17199] (id 0x00) [ 1000.439281][T17166] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.478154][T17166] usb 7-1: Product: syz [ 1000.478179][T17166] usb 7-1: Manufacturer: syz [ 1000.478195][T17166] usb 7-1: SerialNumber: syz [ 1000.488843][T17166] usb 7-1: config 0 descriptor?? [ 1000.574968][ T5910] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1000.575275][T17199] rc_core: IR keymap rc-imon-pad not found [ 1000.575314][T17199] Registered IR keymap rc-empty [ 1000.576112][T17199] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1000.576133][T17199] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1000.576681][T17199] imon:send_packet: packet tx failed (-71) [ 1000.595302][T17199] imon 3-1:155.0: remote input dev register failed [ 1000.595487][T17199] imon 3-1:155.0: imon_init_intf0: rc device setup failed [ 1000.697849][T17199] imon 3-1:155.0: unable to initialize intf0, err 0 [ 1000.697874][T17199] imon:imon_probe: failed to initialize context! [ 1000.697887][T17199] imon 3-1:155.0: unable to register, err -19 [ 1000.704191][T17166] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1000.709066][T17199] usb 3-1: USB disconnect, device number 17 [ 1000.734934][ T5910] usb 6-1: Using ep0 maxpacket: 16 [ 1000.748291][ T5910] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1000.748325][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1000.758345][ T5910] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1000.758376][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.758417][ T5910] usb 6-1: Product: syz [ 1000.758433][ T5910] usb 6-1: Manufacturer: syz [ 1000.758448][ T5910] usb 6-1: SerialNumber: syz [ 1000.768581][ T5910] usb 6-1: config 0 descriptor?? [ 1000.780054][ T5910] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1000.780084][ T5910] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1001.102526][T22773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1001.103637][T22773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1001.146111][T17166] gspca_sunplus: reg_w_riv err -71 [ 1001.146234][T17166] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 1001.172711][T17166] usb 7-1: USB disconnect, device number 21 [ 1002.020843][T22779] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3651'. [ 1002.138989][T22783] netlink: 23 bytes leftover after parsing attributes in process `syz.2.3651'. [ 1002.475969][ T5910] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1002.499622][ T5910] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1002.524199][ T5910] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1002.536445][ T5910] em28xx 6-1:0.0: No AC97 audio processor [ 1004.056181][T22827] xt_hashlimit: max too large, truncated to 1048576 [ 1004.267766][T17167] usb 6-1: USB disconnect, device number 38 [ 1004.298038][T17167] em28xx 6-1:0.0: Disconnecting em28xx [ 1004.321639][T17167] em28xx 6-1:0.0: Freeing device [ 1004.684249][T22832] tipc: Enabled bearer , priority 0 [ 1004.732164][T22832] syzkaller0: entered promiscuous mode [ 1004.746787][T22832] syzkaller0: entered allmulticast mode [ 1004.792964][T22835] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1005.102197][T22831] tipc: Resetting bearer [ 1005.177642][T22831] tipc: Disabling bearer [ 1005.286303][T17166] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1005.824352][T17166] usb 7-1: config 0 has no interfaces? [ 1005.873985][T17166] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1005.890136][T17166] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.899406][T17166] usb 7-1: Product: syz [ 1005.903684][T17166] usb 7-1: Manufacturer: syz [ 1005.908615][T17166] usb 7-1: SerialNumber: syz [ 1005.933756][T17166] usb 7-1: config 0 descriptor?? [ 1006.178967][T17166] usb 7-1: USB disconnect, device number 22 [ 1006.824684][T17201] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1007.036126][T17201] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1007.084006][T17201] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1007.134376][T17201] usb 6-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 1007.248070][T17201] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.340865][T17201] usb 6-1: config 0 descriptor?? [ 1007.655232][T17166] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1007.850588][T22854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1007.859762][T17166] usb 3-1: device descriptor read/64, error -71 [ 1007.876356][T22869] netlink: 'syz.6.3668': attribute type 4 has an invalid length. [ 1007.900071][T22854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1008.136573][T17166] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1008.286634][T17166] usb 3-1: device descriptor read/64, error -71 [ 1008.437476][T17166] usb usb3-port1: attempt power cycle [ 1008.964679][T17166] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1009.005932][T17166] usb 3-1: device descriptor read/8, error -71 [ 1009.125148][ T5910] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1009.334206][ T5910] usb 2-1: Using ep0 maxpacket: 8 [ 1009.353915][ T5910] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1009.354694][T17201] usbhid 6-1:0.0: can't add hid device: -71 [ 1009.362951][ T5910] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1009.386543][ T5910] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1009.398025][ T5910] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1009.398290][T17201] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1009.409530][ T5910] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1009.442822][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1009.442838][ T30] audit: type=1326 audit(1769960944.172:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22886 comm="syz.5.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3a59aeb9 code=0x7ffc0000 [ 1009.474448][T17166] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1009.490745][ T5910] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1009.501108][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.510946][T17166] usb 3-1: device descriptor read/8, error -71 [ 1009.519618][ T30] audit: type=1326 audit(1769960944.172:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22886 comm="syz.5.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3a59aeb9 code=0x7ffc0000 [ 1009.525100][T17201] usb 6-1: USB disconnect, device number 39 [ 1009.609174][ T30] audit: type=1326 audit(1769960944.172:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22886 comm="syz.5.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f1c3a59aeb9 code=0x7ffc0000 [ 1009.644517][T17166] usb usb3-port1: unable to enumerate USB device [ 1009.738302][ T30] audit: type=1326 audit(1769960944.172:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22886 comm="syz.5.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3a59aeb9 code=0x7ffc0000 [ 1009.790725][ T30] audit: type=1326 audit(1769960944.172:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22886 comm="syz.5.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3a59aeb9 code=0x7ffc0000 [ 1009.826600][ T5910] usb 2-1: GET_CAPABILITIES returned 0 [ 1009.832209][ T5910] usbtmc 2-1:16.0: can't read capabilities [ 1009.915775][ T30] audit: type=1326 audit(1769960944.172:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22886 comm="syz.5.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f1c3a599d97 code=0x7ffc0000 [ 1009.946218][T22895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3677'. [ 1009.963444][ T30] audit: type=1326 audit(1769960944.172:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22886 comm="syz.5.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f1c3a59c14a code=0x7ffc0000 [ 1010.030521][T22895] kvm: Disabled LAPIC found during irq injection [ 1010.040408][ T5910] usb 2-1: USB disconnect, device number 91 [ 1010.077387][ T30] audit: type=1326 audit(1769960944.222:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22886 comm="syz.5.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1c3a55b78e code=0x7ffc0000 [ 1010.115119][T17166] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1010.144011][ T30] audit: type=1326 audit(1769960944.252:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22886 comm="syz.5.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3a59aeb9 code=0x7ffc0000 [ 1010.170336][ T30] audit: type=1326 audit(1769960944.252:2284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22886 comm="syz.5.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3a59aeb9 code=0x7ffc0000 [ 1010.205706][T22899] loop6: detected capacity change from 0 to 524287999 [ 1010.213656][T22899] buffer_io_error: 39 callbacks suppressed [ 1010.213672][T22899] Buffer I/O error on dev loop6, logical block 0, async page read [ 1010.235904][T22899] Buffer I/O error on dev loop6, logical block 0, async page read [ 1010.259991][T22899] Buffer I/O error on dev loop6, logical block 0, async page read [ 1010.294326][T17166] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1010.326465][T22899] Buffer I/O error on dev loop6, logical block 0, async page read [ 1010.340004][T17166] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.357077][T22899] Buffer I/O error on dev loop6, logical block 0, async page read [ 1010.391860][T17166] usb 6-1: config 0 descriptor?? [ 1010.409061][T22899] Buffer I/O error on dev loop6, logical block 0, async page read [ 1010.438660][T22899] Buffer I/O error on dev loop6, logical block 0, async page read [ 1010.480959][T22899] Buffer I/O error on dev loop6, logical block 0, async page read [ 1010.515491][T22899] ldm_validate_partition_table(): Disk read failed. [ 1010.545774][T22899] Buffer I/O error on dev loop6, logical block 0, async page read [ 1010.565250][T22909] FAULT_INJECTION: forcing a failure. [ 1010.565250][T22909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1010.588942][T22899] Buffer I/O error on dev loop6, logical block 0, async page read [ 1010.608494][T22899] Dev loop6: unable to read RDB block 0 [ 1010.625249][T22899] loop6: unable to read partition table [ 1010.640472][T22909] CPU: 0 UID: 0 PID: 22909 Comm: syz.2.3682 Tainted: G L syzkaller #0 PREEMPT(full) [ 1010.640501][T22909] Tainted: [L]=SOFTLOCKUP [ 1010.640508][T22909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1010.640520][T22909] Call Trace: [ 1010.640527][T22909] [ 1010.640536][T22909] dump_stack_lvl+0xe8/0x150 [ 1010.640565][T22909] should_fail_ex+0x412/0x560 [ 1010.640591][T22909] _copy_from_user+0x2d/0xb0 [ 1010.640618][T22909] do_ip6t_set_ctl+0x6ae/0xe10 [ 1010.640643][T22909] ? rcu_is_watching+0x15/0xb0 [ 1010.640662][T22909] ? trace_contention_end+0x39/0x100 [ 1010.640682][T22909] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1010.640720][T22909] ? __pfx___mutex_lock+0x10/0x10 [ 1010.640741][T22909] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1010.640768][T22909] ? __pfx_aa_sk_perm+0x10/0x10 [ 1010.640794][T22909] nf_setsockopt+0x26f/0x290 [ 1010.640818][T22909] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1010.640841][T22909] do_sock_setsockopt+0x17c/0x1b0 [ 1010.640867][T22909] __x64_sys_setsockopt+0x13d/0x1b0 [ 1010.640895][T22909] do_syscall_64+0xe2/0xf80 [ 1010.640914][T22909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.640932][T22909] ? trace_irq_disable+0x37/0x100 [ 1010.640950][T22909] ? clear_bhb_loop+0x60/0xb0 [ 1010.640972][T22909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.640990][T22909] RIP: 0033:0x7fd96e59aeb9 [ 1010.641008][T22909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1010.641024][T22909] RSP: 002b:00007fd96f370028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1010.641044][T22909] RAX: ffffffffffffffda RBX: 00007fd96e815fa0 RCX: 00007fd96e59aeb9 [ 1010.641058][T22909] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1010.641071][T22909] RBP: 00007fd96f370090 R08: 00000000000d0060 R09: 0000000000000000 [ 1010.641083][T22909] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1010.641095][T22909] R13: 00007fd96e816038 R14: 00007fd96e815fa0 R15: 00007fd96e93fa48 [ 1010.641123][T22909] [ 1010.641643][T22899] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1010.642343][T18348] ldm_validate_partition_table(): Disk read failed. [ 1010.888990][T17166] usb 6-1: Cannot read MAC address [ 1010.895102][T17166] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1010.923072][T18348] Dev loop6: unable to read RDB block 0 [ 1010.988922][T18348] loop6: unable to read partition table [ 1011.004004][T17166] usb 6-1: USB disconnect, device number 40 [ 1011.030658][T22900] ldm_validate_partition_table(): Disk read failed. [ 1011.038117][T22900] Dev loop6: unable to read RDB block 0 [ 1011.052205][T22900] loop6: unable to read partition table [ 1011.074428][T22900] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1011.818643][T17166] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1012.148397][T22938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1012.196538][T17166] usb 6-1: Using ep0 maxpacket: 8 [ 1012.207284][T17166] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 1012.220239][T17166] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 1012.230246][T17166] usb 6-1: config 0 has no interface number 0 [ 1012.239039][T17166] usb 6-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1012.258241][T17166] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1012.286259][T17166] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1012.410715][T17166] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 1012.426291][T17166] usb 6-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 1012.438646][T17166] usb 6-1: Product: syz [ 1012.443159][T17166] usb 6-1: Manufacturer: syz [ 1012.549716][T17166] usb 6-1: config 0 descriptor?? [ 1012.583272][T22928] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1012.882732][T17166] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.21/input/input47 [ 1013.100986][T17201] usb 6-1: USB disconnect, device number 41 [ 1013.101079][ C1] keyspan_remote 6-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 1013.599170][T22955] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3693'. [ 1013.649140][T22955] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3693'. [ 1013.791895][T22960] FAULT_INJECTION: forcing a failure. [ 1013.791895][T22960] name failslab, interval 1, probability 0, space 0, times 0 [ 1013.871527][T22960] CPU: 0 UID: 0 PID: 22960 Comm: syz.6.3694 Tainted: G L syzkaller #0 PREEMPT(full) [ 1013.871547][T22960] Tainted: [L]=SOFTLOCKUP [ 1013.871552][T22960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1013.871558][T22960] Call Trace: [ 1013.871563][T22960] [ 1013.871568][T22960] dump_stack_lvl+0xe8/0x150 [ 1013.871586][T22960] should_fail_ex+0x412/0x560 [ 1013.871602][T22960] should_failslab+0xa8/0x100 [ 1013.871615][T22960] __kvmalloc_node_noprof+0x166/0x8d0 [ 1013.871627][T22960] ? xt_alloc_table_info+0x40/0xb0 [ 1013.871644][T22960] xt_alloc_table_info+0x40/0xb0 [ 1013.871658][T22960] do_ip6t_set_ctl+0x90c/0xe10 [ 1013.871672][T22960] ? rcu_is_watching+0x15/0xb0 [ 1013.871683][T22960] ? trace_contention_end+0x39/0x100 [ 1013.871694][T22960] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1013.871714][T22960] ? __pfx___mutex_lock+0x10/0x10 [ 1013.871726][T22960] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1013.871740][T22960] ? __pfx_aa_sk_perm+0x10/0x10 [ 1013.871755][T22960] nf_setsockopt+0x26f/0x290 [ 1013.871775][T22960] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1013.871788][T22960] do_sock_setsockopt+0x17c/0x1b0 [ 1013.871803][T22960] __x64_sys_setsockopt+0x13d/0x1b0 [ 1013.871818][T22960] do_syscall_64+0xe2/0xf80 [ 1013.871829][T22960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.871839][T22960] ? trace_irq_disable+0x37/0x100 [ 1013.871849][T22960] ? clear_bhb_loop+0x60/0xb0 [ 1013.871861][T22960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.871871][T22960] RIP: 0033:0x7f9b1ed9aeb9 [ 1013.871881][T22960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1013.871889][T22960] RSP: 002b:00007f9b1fc3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1013.871902][T22960] RAX: ffffffffffffffda RBX: 00007f9b1f015fa0 RCX: 00007f9b1ed9aeb9 [ 1013.871909][T22960] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1013.871916][T22960] RBP: 00007f9b1fc3f090 R08: 00000000000d0060 R09: 0000000000000000 [ 1013.871923][T22960] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1013.871929][T22960] R13: 00007f9b1f016038 R14: 00007f9b1f015fa0 R15: 00007f9b1f13fa48 [ 1013.871944][T22960] [ 1014.635382][T17167] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1014.655000][T17166] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 1014.735230][T22968] loop6: detected capacity change from 0 to 524287999 [ 1014.764109][T22968] ldm_validate_partition_table(): Disk read failed. [ 1014.796410][T22968] Dev loop6: unable to read RDB block 0 [ 1014.802177][T22968] loop6: unable to read partition table [ 1014.813274][T17167] usb 2-1: Using ep0 maxpacket: 32 [ 1014.822372][T17167] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1014.843306][T17166] usb 7-1: config 1 interface 0 altsetting 7 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1014.856675][T17167] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1014.856919][T22968] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1014.875136][T17166] usb 7-1: config 1 interface 0 altsetting 7 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 1014.897519][T17167] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1014.921744][T17166] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1014.932445][T18348] ldm_validate_partition_table(): Disk read failed. [ 1014.951033][T17166] usb 7-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1014.955802][T18348] Dev loop6: unable to read RDB block 0 [ 1014.989665][T18348] loop6: unable to read partition table [ 1014.995463][T17167] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1015.009347][T17166] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.009853][T22973] ldm_validate_partition_table(): Disk read failed. [ 1015.035264][T17167] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.035693][T22973] Dev loop6: unable to read RDB block 0 [ 1015.048997][T17166] usb 7-1: Product: syz [ 1015.053236][T17166] usb 7-1: Manufacturer: syz [ 1015.089710][T22973] loop6: unable to read partition table [ 1015.116879][T17167] usb 2-1: config 0 descriptor?? [ 1015.124869][T17166] usb 7-1: SerialNumber: syz [ 1015.125107][T22973] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1015.161513][T22965] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1015.169724][T22965] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1015.226978][T18348] buffer_io_error: 88 callbacks suppressed [ 1015.226996][T18348] Buffer I/O error on dev loop6, logical block 0, async page read [ 1015.243422][T22977] all: renamed from lo (while UP) [ 1015.437112][T17166] usblp0: Disabling reads from problematic bidirectional printer [ 1015.477907][T17166] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 7 proto 1 vid 0x03F0 pid 0x0004 [ 1015.551505][T17166] usb 7-1: USB disconnect, device number 23 [ 1015.622945][T17166] usblp0: removed [ 1015.647456][T17167] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0024/input/input48 [ 1015.761906][T22963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1015.776631][T17167] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0024/input/input49 [ 1015.798906][T22963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1015.928614][T22991] FAULT_INJECTION: forcing a failure. [ 1015.928614][T22991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1015.984968][T22991] CPU: 0 UID: 0 PID: 22991 Comm: syz.0.3705 Tainted: G L syzkaller #0 PREEMPT(full) [ 1015.984998][T22991] Tainted: [L]=SOFTLOCKUP [ 1015.985006][T22991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1015.985017][T22991] Call Trace: [ 1015.985025][T22991] [ 1015.985033][T22991] dump_stack_lvl+0xe8/0x150 [ 1015.985058][T22991] should_fail_ex+0x412/0x560 [ 1015.985081][T22991] _copy_from_user+0x2d/0xb0 [ 1015.985105][T22991] copy_from_sockptr_offset+0x66/0xa0 [ 1015.985128][T22991] do_ip6t_set_ctl+0x93d/0xe10 [ 1015.985150][T22991] ? rcu_is_watching+0x15/0xb0 [ 1015.985168][T22991] ? trace_contention_end+0x39/0x100 [ 1015.985185][T22991] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1015.985218][T22991] ? __pfx___mutex_lock+0x10/0x10 [ 1015.985237][T22991] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1015.985261][T22991] ? __pfx_aa_sk_perm+0x10/0x10 [ 1015.985283][T22991] nf_setsockopt+0x26f/0x290 [ 1015.985304][T22991] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1015.985324][T22991] do_sock_setsockopt+0x17c/0x1b0 [ 1015.985347][T22991] __x64_sys_setsockopt+0x13d/0x1b0 [ 1015.985372][T22991] do_syscall_64+0xe2/0xf80 [ 1015.985390][T22991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.985406][T22991] ? trace_irq_disable+0x37/0x100 [ 1015.985421][T22991] ? clear_bhb_loop+0x60/0xb0 [ 1015.985438][T22991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.985455][T22991] RIP: 0033:0x7f4c1739aeb9 [ 1015.985471][T22991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1015.985485][T22991] RSP: 002b:00007f4c181b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1015.985504][T22991] RAX: ffffffffffffffda RBX: 00007f4c17615fa0 RCX: 00007f4c1739aeb9 [ 1015.985518][T22991] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1015.985529][T22991] RBP: 00007f4c181b3090 R08: 00000000000d0060 R09: 0000000000000000 [ 1015.985540][T22991] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1015.985559][T22991] R13: 00007f4c17616038 R14: 00007f4c17615fa0 R15: 00007f4c1773fa48 [ 1015.985586][T22991] [ 1015.989464][T22963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1016.305397][T17167] kye 0003:0458:5011.0024: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 1016.469748][T22995] tipc: Enabled bearer , priority 0 [ 1016.525317][T22997] syzkaller0: entered promiscuous mode [ 1016.565821][T22997] syzkaller0: entered allmulticast mode [ 1016.601353][T22999] netlink: 652 bytes leftover after parsing attributes in process `syz.2.3708'. [ 1016.611619][T22963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1016.635748][T22999] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3708'. [ 1016.744503][T23001] xt_hashlimit: size too large, truncated to 1048576 [ 1016.915375][T17200] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1017.097542][T17200] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1017.112760][T17200] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.154046][T17200] usb 3-1: config 0 descriptor?? [ 1017.177929][T17200] cp210x 3-1:0.0: cp210x converter detected [ 1017.259488][T22994] tipc: Resetting bearer [ 1017.322569][T22994] tipc: Disabling bearer [ 1017.516378][T17201] usb 2-1: USB disconnect, device number 92 [ 1017.533306][T23013] tipc: Started in network mode [ 1017.565103][T23013] tipc: Node identity 02db956ec1c1, cluster identity 4711 [ 1017.573389][T23013] tipc: Enabled bearer , priority 0 [ 1017.595092][T17200] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1017.664078][T17200] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1017.705508][T23014] syzkaller0: entered promiscuous mode [ 1017.715155][T23014] syzkaller0: entered allmulticast mode [ 1017.777153][T23013] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1017.873241][T17166] usb 3-1: USB disconnect, device number 22 [ 1017.916551][T17166] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1017.967324][T23013] tipc: Resetting bearer [ 1018.023374][T17166] cp210x 3-1:0.0: device disconnected [ 1018.034902][T23012] tipc: Resetting bearer [ 1018.176946][T23012] tipc: Disabling bearer [ 1018.277877][T23024] erspan0: entered promiscuous mode [ 1018.289212][T23024] erspan0: left promiscuous mode [ 1018.506399][T23028] netlink: 'syz.0.3716': attribute type 4 has an invalid length. [ 1018.739048][T23036] FAULT_INJECTION: forcing a failure. [ 1018.739048][T23036] name failslab, interval 1, probability 0, space 0, times 0 [ 1018.780948][T23036] CPU: 1 UID: 0 PID: 23036 Comm: syz.6.3719 Tainted: G L syzkaller #0 PREEMPT(full) [ 1018.780969][T23036] Tainted: [L]=SOFTLOCKUP [ 1018.780974][T23036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1018.780981][T23036] Call Trace: [ 1018.780986][T23036] [ 1018.780991][T23036] dump_stack_lvl+0xe8/0x150 [ 1018.781009][T23036] should_fail_ex+0x412/0x560 [ 1018.781025][T23036] should_failslab+0xa8/0x100 [ 1018.781038][T23036] __kmalloc_cache_node_noprof+0x87/0x6d0 [ 1018.781049][T23036] ? __get_vm_area_node+0x13f/0x300 [ 1018.781067][T23036] __get_vm_area_node+0x13f/0x300 [ 1018.781084][T23036] __vmalloc_node_range_noprof+0x372/0x1730 [ 1018.781094][T23036] ? translate_table+0x191/0x20b0 [ 1018.781108][T23036] ? __asan_memset+0x22/0x50 [ 1018.781133][T23036] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1018.781142][T23036] ? alloc_pages_mpol+0x3cd/0x4a0 [ 1018.781155][T23036] ? translate_table+0x191/0x20b0 [ 1018.781167][T23036] ? rcu_is_watching+0x15/0xb0 [ 1018.781178][T23036] ? translate_table+0x191/0x20b0 [ 1018.781189][T23036] __kvmalloc_node_noprof+0x62d/0x8d0 [ 1018.781200][T23036] ? translate_table+0x191/0x20b0 [ 1018.781214][T23036] ? do_ip6t_set_ctl+0x90c/0xe10 [ 1018.781256][T23036] ? nf_setsockopt+0x26f/0x290 [ 1018.781276][T23036] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1018.781295][T23036] ? do_syscall_64+0xe2/0xf80 [ 1018.781317][T23036] translate_table+0x191/0x20b0 [ 1018.781352][T23036] ? __pfx_translate_table+0x10/0x10 [ 1018.781367][T23036] ? __might_fault+0xaf/0x130 [ 1018.781383][T23036] ? __might_fault+0xaf/0x130 [ 1018.781405][T23036] ? _copy_from_user+0x94/0xb0 [ 1018.781426][T23036] do_ip6t_set_ctl+0x9fe/0xe10 [ 1018.781441][T23036] ? rcu_is_watching+0x15/0xb0 [ 1018.781450][T23036] ? trace_contention_end+0x39/0x100 [ 1018.781462][T23036] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1018.781482][T23036] ? __pfx___mutex_lock+0x10/0x10 [ 1018.781494][T23036] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1018.781510][T23036] ? __pfx_aa_sk_perm+0x10/0x10 [ 1018.781525][T23036] nf_setsockopt+0x26f/0x290 [ 1018.781539][T23036] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1018.781551][T23036] do_sock_setsockopt+0x17c/0x1b0 [ 1018.781565][T23036] __x64_sys_setsockopt+0x13d/0x1b0 [ 1018.781581][T23036] do_syscall_64+0xe2/0xf80 [ 1018.781591][T23036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.781601][T23036] ? trace_irq_disable+0x37/0x100 [ 1018.781611][T23036] ? clear_bhb_loop+0x60/0xb0 [ 1018.781623][T23036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.781633][T23036] RIP: 0033:0x7f9b1ed9aeb9 [ 1018.781644][T23036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1018.781652][T23036] RSP: 002b:00007f9b1fc3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1018.781664][T23036] RAX: ffffffffffffffda RBX: 00007f9b1f015fa0 RCX: 00007f9b1ed9aeb9 [ 1018.781671][T23036] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1018.781678][T23036] RBP: 00007f9b1fc3f090 R08: 00000000000d0060 R09: 0000000000000000 [ 1018.781685][T23036] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1018.781691][T23036] R13: 00007f9b1f016038 R14: 00007f9b1f015fa0 R15: 00007f9b1f13fa48 [ 1018.781706][T23036] [ 1018.783006][T23036] syz.6.3719: vmalloc error: size 21757972, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz6,mems_allowed=0-1 [ 1019.224376][T23036] CPU: 1 UID: 0 PID: 23036 Comm: syz.6.3719 Tainted: G L syzkaller #0 PREEMPT(full) [ 1019.224404][T23036] Tainted: [L]=SOFTLOCKUP [ 1019.224411][T23036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1019.224421][T23036] Call Trace: [ 1019.224428][T23036] [ 1019.224436][T23036] dump_stack_lvl+0xe8/0x150 [ 1019.224463][T23036] warn_alloc+0x249/0x340 [ 1019.224486][T23036] ? __pfx_warn_alloc+0x10/0x10 [ 1019.224504][T23036] ? __get_vm_area_node+0x13f/0x300 [ 1019.224529][T23036] ? __get_vm_area_node+0x2b5/0x300 [ 1019.224559][T23036] __vmalloc_node_range_noprof+0x397/0x1730 [ 1019.224579][T23036] ? __asan_memset+0x22/0x50 [ 1019.224622][T23036] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1019.224638][T23036] ? alloc_pages_mpol+0x3cd/0x4a0 [ 1019.224660][T23036] ? translate_table+0x191/0x20b0 [ 1019.224682][T23036] ? rcu_is_watching+0x15/0xb0 [ 1019.224700][T23036] ? translate_table+0x191/0x20b0 [ 1019.224719][T23036] __kvmalloc_node_noprof+0x62d/0x8d0 [ 1019.224739][T23036] ? translate_table+0x191/0x20b0 [ 1019.224756][T23036] ? do_ip6t_set_ctl+0x90c/0xe10 [ 1019.224774][T23036] ? nf_setsockopt+0x26f/0x290 [ 1019.224794][T23036] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1019.224813][T23036] ? do_syscall_64+0xe2/0xf80 [ 1019.224837][T23036] translate_table+0x191/0x20b0 [ 1019.224875][T23036] ? __pfx_translate_table+0x10/0x10 [ 1019.224893][T23036] ? __might_fault+0xaf/0x130 [ 1019.224916][T23036] ? __might_fault+0xaf/0x130 [ 1019.224951][T23036] ? _copy_from_user+0x94/0xb0 [ 1019.224979][T23036] do_ip6t_set_ctl+0x9fe/0xe10 [ 1019.225002][T23036] ? rcu_is_watching+0x15/0xb0 [ 1019.225019][T23036] ? trace_contention_end+0x39/0x100 [ 1019.225036][T23036] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1019.225069][T23036] ? __pfx___mutex_lock+0x10/0x10 [ 1019.225086][T23036] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1019.225109][T23036] ? __pfx_aa_sk_perm+0x10/0x10 [ 1019.225133][T23036] nf_setsockopt+0x26f/0x290 [ 1019.225155][T23036] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1019.225175][T23036] do_sock_setsockopt+0x17c/0x1b0 [ 1019.225198][T23036] __x64_sys_setsockopt+0x13d/0x1b0 [ 1019.225223][T23036] do_syscall_64+0xe2/0xf80 [ 1019.225240][T23036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.225290][T23036] ? trace_irq_disable+0x37/0x100 [ 1019.225307][T23036] ? clear_bhb_loop+0x60/0xb0 [ 1019.225326][T23036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.225342][T23036] RIP: 0033:0x7f9b1ed9aeb9 [ 1019.225358][T23036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1019.225371][T23036] RSP: 002b:00007f9b1fc3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1019.225388][T23036] RAX: ffffffffffffffda RBX: 00007f9b1f015fa0 RCX: 00007f9b1ed9aeb9 [ 1019.225400][T23036] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1019.225411][T23036] RBP: 00007f9b1fc3f090 R08: 00000000000d0060 R09: 0000000000000000 [ 1019.225422][T23036] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1019.225433][T23036] R13: 00007f9b1f016038 R14: 00007f9b1f015fa0 R15: 00007f9b1f13fa48 [ 1019.225459][T23036] [ 1019.676639][T23029] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3712'. [ 1019.887261][T23036] Mem-Info: [ 1019.890437][T23036] active_anon:16064 inactive_anon:0 isolated_anon:0 [ 1019.890437][T23036] active_file:21962 inactive_file:4208 isolated_file:0 [ 1019.890437][T23036] unevictable:768 dirty:150 writeback:0 [ 1019.890437][T23036] slab_reclaimable:10067 slab_unreclaimable:107494 [ 1019.890437][T23036] mapped:48589 shmem:9068 pagetables:1825 [ 1019.890437][T23036] sec_pagetables:0 bounce:0 [ 1019.890437][T23036] kernel_misc_reclaimable:0 [ 1019.890437][T23036] free:1281280 free_pcp:26222 free_cma:0 [ 1019.983702][T23036] Node 0 active_anon:64156kB inactive_anon:0kB active_file:87844kB inactive_file:16696kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:194224kB dirty:600kB writeback:0kB shmem:34736kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13712kB pagetables:7140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1020.076573][T23036] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1020.236007][T23036] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1020.275195][T17166] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1020.335108][T23036] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 1020.341272][T23036] Node 0 DMA32 free:1202864kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:65336kB inactive_anon:0kB active_file:87844kB inactive_file:16696kB unevictable:1536kB writepending:600kB zspages:0kB present:3129332kB managed:2554124kB mlocked:0kB bounce:0kB free_pcp:93624kB local_pcp:35132kB free_cma:0kB [ 1020.417253][T23036] lowmem_reserve[]: 0 0 1 1 1 [ 1020.432261][T23036] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1020.515803][T23036] lowmem_reserve[]: 0 0 0 0 0 [ 1020.520890][T23036] Node 1 Normal free:3902084kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:136kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12468kB local_pcp:11916kB free_cma:0kB [ 1020.548160][T17166] usb 3-1: Using ep0 maxpacket: 32 [ 1020.579294][T23036] lowmem_reserve[]: 0 0 0 0 0 [ 1020.603914][T17166] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1020.617826][T17166] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1020.641506][T23036] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1020.675859][T17166] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1020.699822][T23036] Node 0 DMA32: 3306*4kB (UE) 3377*8kB (UE) 2544*16kB (UE) 825*32kB (UME) 737*64kB (UME) 291*128kB (UME) 173*256kB (UME) 180*512kB (UME) 113*1024kB (UME) 8*2048kB (UM) 182*4096kB (UM) = 1205776kB [ 1020.794833][T23036] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1020.908757][T17166] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1020.945214][T23036] Node 1 Normal: 183*4kB (UME) 35*8kB (UE) 21*16kB (UE) 196*32kB (UE) 99*64kB (UE) 28*128kB (UE) 10*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 3*2048kB (UE) 945*4096kB (M) = 3902084kB [ 1020.998236][T23036] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1021.037321][T23036] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1021.047003][T17166] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.064956][T23036] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1021.088054][T17166] usb 3-1: config 0 descriptor?? [ 1021.095257][T23036] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1021.144883][T23036] 32384 total pagecache pages [ 1021.165606][T23036] 0 pages in swap cache [ 1021.169801][T23036] Free swap = 124996kB [ 1021.195022][T23036] Total swap = 124996kB [ 1021.199227][T23036] 2097051 pages RAM [ 1021.224656][T23036] 0 pages HighMem/MovableOnly [ 1021.234855][T23036] 426622 pages reserved [ 1021.249862][T23036] 0 pages cma reserved [ 1021.572516][T17166] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0025/input/input50 [ 1021.699048][T23040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1021.709384][T23040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1021.761491][T23040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1021.772124][T17166] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0025/input/input51 [ 1021.825972][T23040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1021.915914][T23059] x_tables: duplicate entry at hook 2 [ 1021.925676][T17166] kye 0003:0458:5011.0025: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 1022.205669][T17166] usb 3-1: USB disconnect, device number 23 [ 1022.333358][T23064] fido_id[23064]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1022.378087][T23073] nvme_fabrics: unknown parameter or missing value ' ' in ctrl creation request [ 1023.825261][T23082] program syz.2.3732 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1024.410618][T23082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3732'. [ 1024.486343][T23082] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1025.284138][T23102] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3733'. [ 1025.574987][ T31] INFO: task syz.4.3236:21150 blocked for more than 143 seconds. [ 1025.591635][ T31] Tainted: G L syzkaller #0 [ 1025.608193][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1025.746577][ T31] task:syz.4.3236 state:D stack:28184 pid:21150 tgid:21149 ppid:18689 task_flags:0x400040 flags:0x00080002 [ 1025.822350][ T31] Call Trace: [ 1025.828593][ T31] [ 1025.871128][ T31] __schedule+0x14ea/0x5050 [ 1025.891430][ T31] ? __pfx___schedule+0x10/0x10 [ 1025.911755][ T31] ? schedule+0x90/0x360 [ 1025.932949][ T31] schedule+0x164/0x360 [ 1025.973736][ T31] schedule_preempt_disabled+0x13/0x30 [ 1025.991776][ T31] __mutex_lock+0x7fe/0x1300 [ 1026.022229][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1026.031697][ T31] ? usbdev_open+0x182/0x770 [ 1026.050427][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1026.064840][ T31] ? bus_find_device+0x27d/0x2d0 [ 1026.079220][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 1026.094136][ T31] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1026.118580][ T31] ? usbdev_open+0xa7/0x770 [ 1026.130735][ T31] usbdev_open+0x182/0x770 [ 1026.145576][ T31] ? kobject_get_unless_zero+0x167/0x1f0 [ 1026.151267][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 1026.176836][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 1026.194094][ T31] chrdev_open+0x4cd/0x5e0 [ 1026.231357][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1026.245660][ T31] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1026.264942][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1026.270121][ T31] do_dentry_open+0x7ce/0x1420 [ 1026.280875][ T31] vfs_open+0x3b/0x340 [ 1026.291720][ T31] ? path_openat+0x346e/0x3e20 [ 1026.310397][ T31] path_openat+0x3486/0x3e20 [ 1026.322122][ T31] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 1026.333673][ T31] ? getname_flags+0xb7/0x540 [ 1026.340274][ T31] ? __pfx_path_openat+0x10/0x10 [ 1026.345747][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1026.350805][ T31] do_filp_open+0x22d/0x490 [ 1026.395598][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1026.401104][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1026.407623][ T31] ? alloc_fd+0x64b/0x6c0 [ 1026.412171][ T31] do_sys_openat2+0x12f/0x220 [ 1026.418937][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1026.424377][ T31] ? exc_page_fault+0x6a/0xc0 [ 1026.429723][ T31] ? do_user_addr_fault+0xc7c/0x1360 [ 1026.436286][ T31] __x64_sys_openat+0x138/0x170 [ 1026.441423][ T31] do_syscall_64+0xe2/0xf80 [ 1026.446484][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.452788][ T31] ? trace_irq_disable+0x37/0x100 [ 1026.459696][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1026.465965][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.472095][ T31] RIP: 0033:0x7fdad6f5b78e [ 1026.477532][ T31] RSP: 002b:00007fdad7ea1b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1026.497171][ T31] RAX: ffffffffffffffda RBX: 00007fdad7ea26c0 RCX: 00007fdad6f5b78e [ 1026.522095][ T31] RDX: 000000000000a401 RSI: 00007fdad7ea1c00 RDI: ffffffffffffff9c [ 1026.538478][ T31] RBP: 00007fdad7ea1c00 R08: 0000000000000000 R09: 0000000000000000 [ 1026.547529][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1026.557096][ T31] R13: 00007fdad7216038 R14: 00007fdad7215fa0 R15: 00007fdad733fa48 [ 1026.566708][ T31] [ 1026.574254][ T31] [ 1026.574254][ T31] Showing all locks held in the system: [ 1026.610608][ T31] 1 lock held by khungtaskd/31: [ 1026.656990][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1026.668705][ T31] 2 locks held by getty/5585: [ 1026.673534][ T31] #0: ffff888035b420a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1026.685134][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1026.699460][ T31] 7 locks held by kworker/0:13/17202: [ 1026.707206][ T31] 1 lock held by syz.4.3236/21150: [ 1026.712475][ T31] #0: ffff888028d67198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 1026.728166][ T31] 1 lock held by syz.5.3728/23072: [ 1026.733429][ T31] #0: ffffffff8e560b40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1026.746600][ T31] [ 1026.749030][ T31] ============================================= [ 1026.749030][ T31] [ 1026.758819][ T31] NMI backtrace for cpu 1 [ 1026.758836][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1026.758861][ T31] Tainted: [L]=SOFTLOCKUP [ 1026.758869][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1026.758880][ T31] Call Trace: [ 1026.758888][ T31] [ 1026.758896][ T31] dump_stack_lvl+0xe8/0x150 [ 1026.758924][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1026.758948][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1026.758975][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1026.759000][ T31] sys_info+0x135/0x170 [ 1026.759020][ T31] watchdog+0xf90/0xfe0 [ 1026.759044][ T31] ? watchdog+0x209/0xfe0 [ 1026.759069][ T31] kthread+0x726/0x8b0 [ 1026.759092][ T31] ? __pfx_watchdog+0x10/0x10 [ 1026.759110][ T31] ? __pfx_kthread+0x10/0x10 [ 1026.759132][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1026.759156][ T31] ? __pfx_kthread+0x10/0x10 [ 1026.759176][ T31] ret_from_fork+0x51b/0xa40 [ 1026.759202][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1026.759228][ T31] ? __switch_to+0xc82/0x1410 [ 1026.759254][ T31] ? __pfx_kthread+0x10/0x10 [ 1026.759274][ T31] ret_from_fork_asm+0x1a/0x30 [ 1026.759309][ T31] [ 1026.759349][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1026.889951][ C0] NMI backtrace for cpu 0 [ 1026.889972][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1026.889993][ C0] Tainted: [L]=SOFTLOCKUP [ 1026.889999][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1026.890008][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1026.890029][ C0] Code: a8 60 02 e9 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 67 12 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1026.890042][ C0] RSP: 0018:ffffffff8e207dc0 EFLAGS: 00000246 [ 1026.890057][ C0] RAX: 000000000160b203 RBX: ffffffff8199570d RCX: 0000000080000001 [ 1026.890068][ C0] RDX: 0000000000000001 RSI: ffffffff8dcc9146 RDI: ffffffff8c073a00 [ 1026.890079][ C0] RBP: ffffffff8e207eb0 R08: ffff8880b86336db R09: 1ffff110170c66db [ 1026.890090][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8fef1b70 [ 1026.890101][ C0] R13: 1ffffffff1c52a78 R14: 0000000000000000 R15: 0000000000000000 [ 1026.890112][ C0] FS: 0000000000000000(0000) GS:ffff8881256f5000(0000) knlGS:0000000000000000 [ 1026.890124][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1026.890134][ C0] CR2: 00007f11f53e0ad8 CR3: 00000000761a8000 CR4: 00000000003526f0 [ 1026.890148][ C0] Call Trace: [ 1026.890156][ C0] [ 1026.890162][ C0] default_idle+0x9/0x20 [ 1026.890179][ C0] default_idle_call+0x72/0xb0 [ 1026.890196][ C0] do_idle+0x1bd/0x500 [ 1026.890210][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1026.890229][ C0] ? __pfx_do_idle+0x10/0x10 [ 1026.890246][ C0] cpu_startup_entry+0x43/0x60 [ 1026.890260][ C0] rest_init+0x2de/0x300 [ 1026.890277][ C0] start_kernel+0x380/0x3d0 [ 1026.890297][ C0] x86_64_start_reservations+0x24/0x30 [ 1026.890314][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1026.890329][ C0] common_startup_64+0x13e/0x147 [ 1026.890354][ C0] [ 1027.097677][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1027.104545][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1027.115212][ T31] Tainted: [L]=SOFTLOCKUP [ 1027.119530][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1027.129563][ T31] Call Trace: [ 1027.132820][ T31] [ 1027.135730][ T31] vpanic+0x1e0/0x670 [ 1027.139695][ T31] panic+0xc5/0xd0 [ 1027.143395][ T31] ? __pfx_panic+0x10/0x10 [ 1027.147787][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1027.153145][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1027.159277][ T31] watchdog+0xfda/0xfe0 [ 1027.163411][ T31] ? watchdog+0x209/0xfe0 [ 1027.167717][ T31] kthread+0x726/0x8b0 [ 1027.171762][ T31] ? __pfx_watchdog+0x10/0x10 [ 1027.176442][ T31] ? __pfx_kthread+0x10/0x10 [ 1027.181011][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1027.186187][ T31] ? __pfx_kthread+0x10/0x10 [ 1027.190850][ T31] ret_from_fork+0x51b/0xa40 [ 1027.195424][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1027.200526][ T31] ? __switch_to+0xc82/0x1410 [ 1027.205188][ T31] ? __pfx_kthread+0x10/0x10 [ 1027.209756][ T31] ret_from_fork_asm+0x1a/0x30 [ 1027.214504][ T31] [ 1027.217905][ T31] Kernel Offset: disabled [ 1027.222217][ T31] Rebooting in 86400 seconds..