last executing test programs: 14m6.080828844s ago: executing program 2 (id=84): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904"], 0x0) syz_usb_disconnect(r0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x6}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000100)=0xc, 0x4) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) cachestat(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x70, 0x47, 0x99, 0x40, 0x4a5, 0x3035, 0xb8ef, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000000)={0x38, 0x0, 0x10000028, 0x9, 0x8, 0xf, 0x0, 0x0, 0x3, 0x2}, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f00000001c0)={0x1d, r4}, 0x10) sendmsg$can_raw(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@can={{}, 0x0, 0x1, 0x0, 0x0, "00000000000300"}, 0x10}}, 0x20000000) read(r3, &(0x7f0000002340)=""/232, 0xe8) 14m2.657781666s ago: executing program 2 (id=93): r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x6, 0x80000) ioctl$HIDIOCGVERSION(r0, 0x80044801, &(0x7f00000000c0)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f00000011c0)={0xfc, {"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", 0x1000}}, 0xffbc) ioctl$VT_DISALLOCATE(r1, 0x5608) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r2, 0x1, 0x14, 0x0, &(0x7f0000000300)) 14m2.115788997s ago: executing program 2 (id=97): r0 = request_key(&(0x7f0000000000)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)='*\x00', 0xfffffffffffffffe) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f0000000440)=ANY=[], 0x10}, {&(0x7f0000000600)={0x22e8, 0x3c, 0x100, 0x70bd28, 0x25dfdbfd, "", [@nested={0x4, 0x139}, @typed={0x4, 0x13}, @nested={0x1099, 0x12a, 0x0, 0x1, [@generic="b3074984e15567ae1ba04a765b6af5644aef81cc7e557ade92c13d806af26f2601ad9facd5c9dc23f561a01666d145d511d940ab818de187cb848fd8ba726b0de032e560f382d062da27dab71f95f21b0a6478b38671b15a64d5ddedc8f650", @generic="d3e1d39293a0a681c258b4df98fdd68a2d61d2741f84c81e5248221547e4a20986442c7e5a9469acc47e86856737c353d6e46adc75fce21df319f132bd3d6124cb6d041a83cf1af96356f03dba77942b9c72f807779f67f60031398b43d1fe33a83de123ce5d5f286f9766a20d80a68a35ba0c0ffed5ba5ad9bc4691c2802cc97cda1484f18c3f805df1162e1f003efa007dd3a1d6db7671cc508d6d82289edd76a4ca33286c26aec8cb46de0ec0a82b1170cd12d9a927d6b54566826c20ecea2340a462d217c2eb485472258bc98032d31a2f11d96c02ffc1b3f97ba4f09ec18c2b262c50ad52a60ff2c49529907ac4a3a28736236fd019536d8e407e664b058cf6b4c69eafdde5dacaa297eed03811fdbff9a8e5512d89402a72d04b3c3a5408cce64cf88c512c4292a4b7ed8b8bdda88e37856a257ecc49b942b5552fcb66a452b4d75d57e8ac15a3e98ee3def42d04e2d14d48eff3fb52e72e0970966d72bff446322b05eae95940efea524b581efedb7e6dd49db2f97263506c9b6ce1e2a544fcefce18133441576e081e1e27884c4df5c4e5676484e208471e9739fc620fb682881524ba9bb3cb1702d14c53acd2789be820d1ff1236a363c12c8481466e644ce634710c3fdc1de0bb625df769c96f7cc10a1a21e0f9210dbd9461e9745b7f2189af634c9c22d2f7f2a89edaa4425da65c20a0653383c1ca379584a685dff195a42e5ab4f14ddee4d3947dc0f231dceaaf23d8d896931b09a713f77030f102e811382dd39723829bc47320503d4d80b39bf248353f9e415e7b5447805a1c5b0d23b42815f9428ba1fc29ed2d38fe8e518572119b66284627605bd2dac80ed87464edee70b55407c6c60646209ad4926965b6f4243c327b5536cff555de632b5ad9023e497678f9e9b8a45ec0b8c6102071ebb036064d32892c457f43f2f5516879940061c7dbd24501952b6499d507bdfa277c1abaccec565ad3d07ffbe9b49c69457ff96fa99d457041d20fb6007a734bbbefcce6fb23afa33c8f277443def36e4d499a7ed10f4f2cbdd35ceaf22f21f86526d519edb0407a1a467b51490d91cec9464f2effc9a0d8f73dafb8f5ad036f4e56306a37b36050f38067e433d63ebdc7e6c321ea064095719429444a2114c27e3b2c954a1cfd40b512e1dc6873ad034845ee453163d7870ccf0b24fda492319284426967d0cb206275f2ba2eb354f03550f67631cadd163194e4d88808805ab51a78b1e0c6d71203409a2967bade61f2082067cfd63243c25ad3fe6d9bb0c5fe810a9330baae3ee770c4650a7ae77ec9d45c4baa37c16d0a3aac47d4c69eb06887fbb4af09dcb598039d248d1b3ae900116673fabcd7a9a62cee7ed768217107f7796cd2fa0ae0dd23b4b4fbfd694164ce230d3d6a2ccdc2631873c239a2d9d6b2ce7d86192de666ba366ba075b7361c1fc188e404b212c66ef24ec9e4f5b1a0c85986d1628acc5d79831d1c429338e15a960d88176fc3adebea3153b09748d7e8c6bc42f8c3d5f65a0885c46baac425cbd84f67420fa5de8fb6243a0ecfcda3ae787206fc9a6d0cb254eb169349c18c47758f484ba3609d23682496196378c80ee68a923a72f10da1c4d6db7019b98789b19c337b8b4b32537de8a91a56d1a92847bfa92d51878b43b5f05a7bbe65ed137a4c1ed1b7d82b15a8c3f35c005a8f653a8591d2981c3fe502bb1f492b8c9fd83c4fbb76d0e2fcb89d71b6f681f0dd244e98ef50f2a69efb0a51aa324224af506ef165bbb3af3f9ddc7bc51b6f55f19ad57040c796714d05550dc52ab237da3779a950cb1bc312cb540b735e6fdeb336da8e753b5f86e2466adc02664d3a319a37022317d3cc9e6c2f84978f8e4f27ad40913138bbab53d4602e0f471ee592726698cc922481a95245fbb4e6630feafbe4c5ffa7bc29eb59e0ff31cbdd9914f2dd773ca6d492aabc6a4a9819029718bdb2ac43a99b97e005079bfad5d62a5f8c2fd190d2cfe38537e60ff7ef3298f5b41efbb831bb405d1430e65b571d9e16986d782280b55d569667b395ecac51e92f7de11deaf1194e1ecfd777484c35aa86dc6c4f6fe9c9b023bd8ac3a0a3e0a7188a1d169389d42397e2042c955773f8fe8b1d6e2193b50072fa78ed5af740a5bae49eab14f99b1f0402e6f5ad9a39294ee580a80134a1acf94c2ad464db1abed5ec29b32c81b3c6b0efe126ad476ff019aad54a4ce406b2d1c5414523d75432aa070afd2ef7b0f052212a8101d0f21d4abb7efc5d057d0e6b482267b220f49761f0edb2f9798b3cdfbee5706b1d7f2fab84c8cab1ba8397dea7aae3267d7d616d78afdac773310b2eda878d2c51e3f1aeca3bc4b36c4983cb365a4b921eae13264972ca54a7c63e8ebcaa7aa2b35863cd03853dc8d79ad014386bf52b25c14d8e0a7474bcedc110ab827d46deae38985fbfc52dc14a8f3db64265f0dbc0154491106ea6c160f76b75f998fbdd592b6958b4be98a1debc28a17f8b1f8266019c40bd344ac0a81ef8b66254f3abbfe5542006027063ed25b0c7c8f543f607299f64d37752401d7486aeb56c7300f07af3fb25a89f840f7d6c6421a6d8a79e25943fb29a253df28302bd236f74874887a5a19b6cc5b1dd374dcdcde646f156c28cf3bbfb4693cf528264790e4c19e9fa2c100b40b9cdbd8b5690ea3243df4ad0b6093af90429379cca01bbaa113161ae1899709cc6ad94119e3bb372161c7c79913240fc73805fc01ee3f945a26977b0217abe1505efd5501983897090deb29e534793032dfaf1c2f3b1146937d2c439b42b06461a494f987e7bf51b974875c6f54b0c036ec9592b9444523c3ac70620a27462a04076a5e52e5184f1882e754fdf88546def54e23cd05887dbe33c217d9909b8e0b5ff1effb56069f7409ffca914d10224ec627c3b437f9e3f3d902bb1b07bd023e73c0ace974339780d17e097937d183b3b285832144e684e3c301b97231f5c20bbb9f2f3f6fc3510ca6cc7ed4189404781bf4cfd3b50b4c393e12a8011727363fc7a347b4ccf8e4d722834a7d01839bf6d3a80843b467211e08b4f3bea61de8546e930e96e904301cee98694581fa46ecbbe5d8464bf663573e70e99c44cb13c5979fd6d2b670661f7c25e0e121267710f7e7a1230d768f9dcad5ee14ad8105db4e77e89a19b5cf890b45026a72ddae00d8d7b5ac758028348e92c6774c086d1b6db12dcf6ca9e9dce59751946ebe72cf5e83de374eafcff933c86d91ce30e9235c6eeb25108c47c0708fe6f0ca37d2d9ca3c12faa38deafd5efd79509d4962fe537f1baf286e58f1afea57042c0ea77e44733754491dc345566424af0473cb1dd19e480d494da87d1a331b7d7e054a7e164d8eaaa585028bc8a511c0e488cb0aa6ee5fcc40445f7b99b0bc9e4e5eac5a41aefba29013c024d63a228a3f6c0d9437cb8ede85dec4ab97eb0e37a9cfb03c2396c32a692ffb88816702c35f48c691fa8f5ab5232a6ac26caaa9b8c7f47f7cf28cb80d2a475537be0bd8a1f1d52213ecc0ad0a21a0aacd9277e15ea84d21587eb84498b5d456e29f16268c018caa08ea19f1a957aca199fc462bd99b5bcf951159b31c0f0104107450997930501ec1bcb395666fd5b8dde45dada21afe63b8d2789e2646572fb4fcb42b29a12e99877eb3c3faba05375f84bb5cde015d705f83f6285fe44c22056211e47e4a5612bed892d61c7c9826462cbb522d245b52b06bf56b4d95b6fbdc4f220cac08fc009a700638e4a135091c7b83465ed106c791327aa287c63438387e54cbb45b408d102aee987fe637a49192efb36a6bb32fc029cafcd3b51ac287bd416d403d7bdb7bdb52d622edca2ca245004b1b6763c0d296ba531fb06f5398e514abc0effe3447204a3185060f2e87bb0888ea359dcc05cbf504616152cea3828636977c90918feb7d5f3d9cf5e1357b086bb886486955feb2603d9fbaf3e00ae5d26094bf115724e83c799c652080366541ca9fb76116b96dd692ecff6383b3c2624b2320c9b230bb02b7ec05d03af9ff2eae074f3f726f3460397ad239c5e24b22a8d67e68ee00b1b59509de29179cc3a6533cbd256132b6da14bc4c815a1e9a4d205e1d7eaf2f572a7bd9dd876c6c3622c6e3ebd5dad682f0ec628c326809f4e3d3a843f52b005e19cae61f35e822d558f7b2f2ced1935242d18db97cfb05c79ec7ee26d0f15e61d836216d97dccac8cedb5577f9f1b95a0d7bb7e045f54756c12f94226e77c0e686a3541feafd4991a2fa1f8c5875e61becd1a8d63404c1ed82b846332203d15ac39a4035fe569e90cdd0572cdcc526ae97c85d988e729c8dcbbb014cea53e549778367fa8d608ab49eaa65142c13d3ecf566b0e19cde9c1f0733afc1db4dd75668084387ccf5fba5211a984479487a8543c88c32e87f41208b202aa158198c50ddb7d62c7c360c1e24cdf4a6037a47c3ddc4960deead78363ce6a35b7ed214d81d39ea751a65a7bc4c682ec1c65117bd7d60c309827420975fc3f58d63549e9a8daae1a9ebb71356c2f5311893891128bdfe171814a7fa1753a35dd5b1a774696ecf69b40fa9b667e4c31330d73cf6c9bf7dfd2d49e70ec774d7d7561269f7f23eaea0c0fcc1889db5a2266bb3a0e2737e4ce79c58695215460e4aacac73648e8bd3094d67c6f48547fe7b65f34bdece2e88a502cdbba7fbd10b5c32a8a817fcd175828a3ac382e7a9231ec22f711e486937f2cb93627536757ea8995b5c6e15720b65ef7947e715093cc16bc79732ebc7d95b023b4f8c223c9dab29d454b5c9b2e0ce7d786377bcd9016883f746dbfc9e7d72da0c771bee8ec97d160d3862843d6a39c69e2502b9f0dc9e0462283ffb6afa395df8de381a076f88f874071c2a655966a3348c734f35671334ffc2890ec4088d1b6fde02460fa963a9f6a43ad6bdb7dc303fa16ba06a90507336e45e4e8e2b0bfb1e1e34038842d091dff6841135994b8499a61d219e58b3ad30e8fcf8de913ae32906b66c615de62b96b3ff0c4e645c2d848b3ebb1d08f1097e3fd5b760198c76487d8e834d26154c6751bda7045fe64cef887466d72673462451f215689965d87f822a54073d558d39e06794ebcd57ddb8ecf41830950b011f41785ae72ad199e44b3569dd4f7fe37fa8e20686080f5968d9e05a0293ba87fefb034d9210794ce004e14377da5e52e7dc90537ff677f03a973baa98e3dda939d12567eafe5bc6a52a3419fd909e6952498ea7f3be820653f47359249fb3f230ee8c6ff2f19c5f2285ad0e7f50086b4e8c2366b6aa24f9416bfc3703f44f77244e78089b53c5baddb7d7a8871debdf555bcc6b8878901660c5da706ba704a6e2f7b3f1720892de08ba3d7cf583d62701df738aa3c04b269a4c6d8951a27689a4a7ecad0a557c60c58e92925e6adea2a0e2a93476d9dd8c200ed573566056fc795e1b7d14f17d2023fe4ff93eae8c95b02c5430c4195a6299f81fdff63da9093e2c63d5d1d369a0371b024a167b31a78483d0042de0683960d8c07d5858b5733f5e77108f3b1add0500d5b1556ec6632006e7d4c3249ab40072ec8a7696ac7dc40615098b62b20b62afcdb129318d390597f6a76340ddc51e8c4f4d56bf0c6600953556715ec0bd55e026afe6dfc98856e6b84f40b16f04b2aa32761fe7e40fb22a78c1d4397431706d5a7af0811a4cbf96c2a572d51a53dfe071d87515124e0795573755b1d698f498dfe1eff4af88ae0f12295ae8bbd75a7c0972d408b8d5f98ade478330dbaaf4a", @nested={0x4, 0x2c}, @typed={0x8, 0x37, 0x0, 0x0, @fd=r2}, @generic="4ebaa64026db626f226f2fd7f5106607606d6311fee41e25bcd7ebd1532d20efc83695064813dec693fc"]}, @nested={0x14d, 0x134, 0x0, 0x1, [@typed={0x8, 0x5f, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0x8, 0x77, 0x0, 0x1, [@typed={0x4, 0x3b}]}, @nested={0x4, 0x77}, @generic="6f3c7cc23d66e3b9b00d6d3407af866c7fe462442ac8a7de2ddc234eab21043f62c9cd6a28c0ef29bbb5e80b82997363a3933a157b8835a345a5fb9fe5f19a3edaa506e3adbdc527df8b84c29bec8bc07e36ede3a442dd4feada3ceabcf8e13fa6f69038e7497863d5ae5e7b82a9d67f20471a3f6d0773a6f051ae747de5d078a78d2dc7407521cf194e1b82a2d16e0d39661723c70bba5f829fe2a816363e9c9b61b0e8e2371636aa9afff9", @typed={0x8, 0x123, 0x0, 0x0, @u32=0x7ff}, @generic="95d9cf237c8f31d2596dfc6d9c633a4661de7b9da32f7b6aeb67cce08247a21ca2592909eb209eb4686bf8c62b27dfa6a1e8af05a2a7ced959bf8a572a65b646e65171952e069c89b9712560acd2160d551f2c2017ce430837795faa0ee7987dbd7205a7210ce2a7e5b9ad0c15e754259d1da76032ae6795dbd3a6ce78f980a048"]}, @typed={0xc1, 0x56, 0x0, 0x0, @binary="ed1f15c095b7a579c6e866d3124ec073fec247c61fe7183ba4bcd51412e65699f19ccdcbea9b6950e0ac417e8e44b3c4db72f79afc679fbfa789f8d9a60b6dc3631cadec5ce65e9aa8a616bd4277bcefc077e5b6aff188e6153d5b23edb2d5c85b8c89ac06b86988dce8156c462b4537be430c059da1570a8faca86721e2afe02e87b39baf9deb82a4362340c8b801193fd76543f098d62b0e7abcb2ad348376124b3c7fe24ded6e0eac1fa28e970216d1bfa51608af2e46bcd0883c49"}, @generic="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", @generic="8acf1de9b5517ec1744a17914f2c3c6898ae88c54057700d8aabce8273"]}, 0x22e8}], 0x3}, 0x20040051) r4 = socket(0x10, 0x803, 0x0) r5 = io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x0, 0x1}) io_uring_enter(r5, 0x0, 0x0, 0xf, &(0x7f0000000000), 0x18) keyctl$reject(0x13, r0, 0x2, 0x1, r0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x20c89}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x96}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x4, r8}) ioctl$DMA_BUF_SET_NAME_A(r10, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r10, 0x40086200, &(0x7f0000000540)=0x1) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000700)={0x6, 0x118, 0xfa00, {{0x1, 0x6, "2d82d157f1214643655e16437f5326fd7e2eacd51c1f1609a47b9a3bee7f4a6628084a68201b21b78f5ef18ed7498ca8fe0075ec9d5e5ba5bf05e9aaed4995912babe78da5c9b87ae5d84c2f80d2151f6bbdcda4a66930a23c388589937363d1d8aebbe51c579d7fcd13b91d46aa345724718ce8916e7c039ffdf99eff7ac39c30890df5f1ac55cd2c7c657868bdb19684b774acef57242aa591b41cbee681e8befed8c22d4f7cafd6e9bf4b96de401395c7fa7ea0951c3d738f813cc4d2f798c710a3efc7dfc8d13efa327b831066d75a4f2447423f7108cffc57fd7b25e1e51d3695853c16558c460ee64fb5c72f252c32c8a194b7aada02b8eabb0cd82668", 0x5, 0x83, 0x38, 0x36, 0x0, 0x7, 0x1}}}, 0x120) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 14m1.29210009s ago: executing program 2 (id=98): open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_usb_connect(0x2, 0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="120100006b36a2207b06a12708000000030109024c0001000010000904"], 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x4, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0x9, 0x4, 0x0, @rand_addr=0x64010101, @broadcast}}}, 0x22) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x8, 0x0, 0x20) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x44000, 0x0) 13m58.04131516s ago: executing program 2 (id=112): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x8002, &(0x7f0000000080)={@align=0x1, {0x401, 0x9648, 0x1, 0x6}}, 0x4, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x6}) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x800) r8 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r8, 0x627, 0x4c1, 0x43, 0x0, 0x30) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000580)={0x48, 0x2, r5}) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0xaa, 0x10, 0x0, 0x7fff7ffd}]}) close_range(r11, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYRESHEX=r3, @ANYRES32=r3, @ANYBLOB="08000500060000001084251406000a00e8000802110000000000"], 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x808) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a6012203010902220001000000000904", @ANYRES8=r1, @ANYRESOCT=r0], 0x0) 13m57.527513053s ago: executing program 2 (id=113): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0) symlink(&(0x7f0000000180)='./file1/file2\x00', &(0x7f0000000040)='./file1\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, 0x0, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b\\/\\o\\\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b\\/\\o\\\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0x1}, {0xb, 0xd}, {0xfff3, 0xe}}, [{0x8, 0xb, 0xfffffffc}, {0x8, 0xb, 0xb50}, {0x8, 0xb, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc080}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100010000001300000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000000000d0001007564703a"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffb, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x80a, 0x205, 0x1, 0x5}, 0xb, 0xfffffffe, 0x32, 0x5, 0x9, 0x0, 0x9, 0xd, 0x5, 0x1, {0x10000000, 0x23, 0x2, 0x8, 0xfffffffe, 0x2}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x801}, 0x8000) sendto$packet(r4, &(0x7f0000000440)="bad330752181510000316f3a277f", 0x5ea, 0x2000041, &(0x7f0000000080)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @remote}, 0x14) socket$inet(0x2, 0x6, 0x83e) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xa) 10m17.39651609s ago: executing program 5 (id=1135): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@can={{}, 0x0, 0x1, 0x0, 0x0, "00000000000300"}, 0x10}}, 0x20000000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffb000) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c", 0x2d}], 0x1}, 0x0) read(r0, &(0x7f0000002340)=""/232, 0xe8) 10m17.284936249s ago: executing program 5 (id=1136): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x7fffffff, 0x1}, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000280)={r2, &(0x7f0000000080)='\x87^\x00', 0x400500, &(0x7f0000000180)={@_ha_fsid={[0x20000000]}, {0xd, 0x3, 0x9273, 0x9}}, 0x5, &(0x7f00000001c0), &(0x7f0000000200)=0x101}) open(&(0x7f0000000380)='./file0\x00', 0x80000, 0x14) sendmsg$TIPC_NL_MON_GET(r8, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x891001}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)={0x3c0, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9a25}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20fe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7cb193c3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0x208, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "44b911bc891550d221483540b3529731f1f013b0566e810e32a9c7f0cc84"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ID={0x51, 0x3, "b584106d68047d1d0c02e1ff508e31a2e90fb9952ae1e2fcfda1e0bfca4f178b66ed099304be3d6d33a74f0655ab40e013cc9c75fd1b1df8dfa60ca669f15a9c4a2ad43505f493ccb58a2918b8"}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "c5346754a0873581f36cc5f937c5de0504c1d682e79731c0"}}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "cdcbff5a186472e57a43932585f61636aaf315454c8b5cb144457c7398528cbc88"}}, @TIPC_NLA_NODE_ID={0xbe, 0x3, "c6ebc1d64fed8e0187894a958a12c08f52e17c2e5fdee7f4e6d29399e4b833354b909ebd960376debfb9c31b52371d0179fe1aaf8d04fcb9570db5e3a5f7c035ad2a625e6a8f549b7fcb45cb00ba6cb436f5c3a1eea646181c73c41e1b480b378c84d90e496ef7384c1ab5724d5f1e16fe1a3d77e1a70eac9ad825c2b332db9601039f2dc61b3f81881dbd9bdb9fbcde904eb7016fa637a831bf09b604a08d8b779bd814e30a952e0ccbea6cacd9e103ff3f52efcac1ecd998eb"}]}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x20008000}, 0x4c) syz_emit_ethernet(0x5e, &(0x7f0000000540)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @remote, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast2, @loopback}}}}}}, 0x0) copy_file_range(r2, 0x0, r2, &(0x7f0000000100)=0x2295, 0xf, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000000c0)={0x3, 0x43}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 10m16.664158703s ago: executing program 5 (id=1139): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007000000", @ANYRES32=r2, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000100) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000200)=""/252, &(0x7f0000000000)=0xfc) 10m16.376079113s ago: executing program 5 (id=1140): socket(0xa, 0x3, 0xff) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000280)={0x84, @local, 0x4e24, 0x3, 'wrr\x00', 0x0, 0x1, 0x72}, 0x2c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x1000000c, 0x8001, 0x80000000, 0x4, 0x1, 0x8001, 0xfa11, 0x9}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x80) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000000306010400000000000000000a000006090016157379662800000000050001000700000005000101070000000900020073797a30000000000900020073797a31000000000900020073797a3100000000"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20048041) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa002}, 0x4) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e23, @empty}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000200)=ANY=[@ANYRES16=r5, @ANYBLOB="01002abd7000fbdbdf25410000000e0001006e657464657673696d0000000f0002006e657464657673696d3000"], 0x44}, 0x1, 0x0, 0x0, 0x800c000}, 0x20000000) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="90300000bcc10d278edaa6a9a06d53ed01000000244bf5bf19c499f0244c6407040e1900eed226070df0ebc94f6b00989ba9ad067b3b9b57dd33d0ef357e34fa104a7f3529517055b368f25521f013c41ee26be52d7ddad66019c6", @ANYRES16=r5, @ANYBLOB="000129bd7000fedbdf254d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080001007063690011000200303030303a30303a31302e3000000000"], 0x90}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 10m16.144798632s ago: executing program 33 (id=1140): socket(0xa, 0x3, 0xff) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000280)={0x84, @local, 0x4e24, 0x3, 'wrr\x00', 0x0, 0x1, 0x72}, 0x2c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x1000000c, 0x8001, 0x80000000, 0x4, 0x1, 0x8001, 0xfa11, 0x9}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x80) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000000306010400000000000000000a000006090016157379662800000000050001000700000005000101070000000900020073797a30000000000900020073797a31000000000900020073797a3100000000"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20048041) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa002}, 0x4) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e23, @empty}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000200)=ANY=[@ANYRES16=r5, @ANYBLOB="01002abd7000fbdbdf25410000000e0001006e657464657673696d0000000f0002006e657464657673696d3000"], 0x44}, 0x1, 0x0, 0x0, 0x800c000}, 0x20000000) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="90300000bcc10d278edaa6a9a06d53ed01000000244bf5bf19c499f0244c6407040e1900eed226070df0ebc94f6b00989ba9ad067b3b9b57dd33d0ef357e34fa104a7f3529517055b368f25521f013c41ee26be52d7ddad66019c6", @ANYRES16=r5, @ANYBLOB="000129bd7000fedbdf254d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080001007063690011000200303030303a30303a31302e3000000000"], 0x90}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1m7.492229086s ago: executing program 0 (id=3741): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20044010) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a3f0400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0xf5ff, 0x0, 0x1, 0x0, 0x0, 0x4000851}, 0x40) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000240)={{0x80, 0xfd}, 'port0\x00', 0x0, 0x1604, 0x0, 0xcf, 0x8, 0xfffffffd, 0x1, 0x0, 0x7cce8c743ee810df, 0x2e}) 1m7.443979198s ago: executing program 0 (id=3742): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = io_uring_setup(0x46ea, &(0x7f00000000c0)={0x0, 0xc0a6, 0x40, 0x7fc, 0x3e2}) openat$mice(0xffffffffffffff9c, &(0x7f0000019080), 0x2000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000019140)=ANY=[@ANYBLOB="1201000000000040ac0538024000010203010902240601010000000904000000030102"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$midi(&(0x7f0000000040), 0x3, 0x88c02) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b160000000000000000020000082c00048028000180080001006f7366001c0002800500020000000000080001400000001008000340100000010900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x0) unshare(0x22020600) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r4, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) fcntl$setpipe(r3, 0x407, 0x176) vmsplice(r4, &(0x7f0000000480)=[{&(0x7f00000000c0)='{', 0x1}], 0x1, 0xd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r5 = syz_io_uring_setup(0xb5b, &(0x7f0000000640)={0x0, 0x7e9e, 0x0, 0x0, 0x164}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)=""/203, 0xcb}, {0x0}], 0x2}) io_uring_enter(r5, 0xf27, 0x0, 0x0, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 1m6.640368145s ago: executing program 0 (id=3744): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)={0x14, r2, 0x1, 0x0, 0x0, {0x23}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) (async) write$sndseq(r3, &(0x7f0000000300)=[{0x84, 0x77, 0x0, 0x0, @tick, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x2, 0x0, 0x5, 0x83, @tick, {0xfd}, {}, @note={0x81}}, {0x6, 0x3, 0x9, 0xff, @tick=0x1, {0x10, 0x5}, {0xc, 0x2}, @control={0x3, 0xa, 0x7fff}}, {0x8, 0x3, 0x6, 0x4, @time={0x3, 0x6}, {0xbb, 0x3}, {0xdb}, @result={0x5, 0x9}}], 0x70) pwrite64(r0, &(0x7f0000000440)='}', 0x1, 0x4) 1m4.92893367s ago: executing program 0 (id=3753): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x91450, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x3) syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f0000000800)={0x48}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x1f2f, 0x22, 0x0, &(0x7f0000000440)="9f449470fe919559684010a408002d7a5d4153f0226dcacf36a548ab01b5cb16afce", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2402, 0x0) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f00000007c0)={{'\x00', 0x7}, {0x958}, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000500)={0x4, 0x0, [{0x80000001, 0x3, 0x1, 0x7fffffff, 0x9, 0x3, 0x4}, {0x7, 0xb, 0x6, 0x7f, 0xd11, 0x6, 0xfffffffe}, {0xd, 0x9, 0x1, 0x4, 0x80, 0x81, 0x2}, {0x2, 0x40, 0x5, 0x5, 0x2, 0x4, 0xfffffffd}]}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x9, 0xe, 0xb0, '\x00', 0x8000000000000000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m3.954131332s ago: executing program 0 (id=3755): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dmmidi(&(0x7f0000019300), 0x7, 0x920) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000340)=0x800) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000019200)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) r4 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x0, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x1008, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x1ff}, 0x3, 0xed}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"}) r6 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000019240)=ANY=[@ANYRESHEX=r6, @ANYRES32=0x0, @ANYBLOB="150100000000000030001280090001b9275c662ad88900766c616e00000000200002980010000000000000020000"], 0x58}, 0x1, 0x0, 0x0, 0x2008801}, 0x40000) syz_usb_control_io$hid(r7, 0x0, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000001a00), 0x1, 0x800) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCGLCKTRMIOS(r10, 0x5432, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r9, 0xc1205531, &(0x7f0000001a40)={0x1, 0x6, 0x0, 0x8004, '\x00', '\x00', '\x00', 0x0, 0x5d05, 0x10000004, 0x1, "38d49788ead5f71fd65acf7132de72ec"}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000192c0)='coredump_filter\x00') syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) 1m3.644057083s ago: executing program 0 (id=3757): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000641000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00001ae000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000780000/0x1000)=nil, 0x0}, 0x68) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x3, &(0x7f0000000180)=0x3ff, 0x4) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x3, &(0x7f0000000180)=0x3ff, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000001c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)='S', 0x1}], 0x1}}], 0x1, 0x20008000) shutdown(r3, 0x1) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c7900, 0x0) sendfile(r4, r5, 0x0, 0x201f00) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r6, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x50, 0x180c75, 0x7, 0x104, 0x1ff, 0x0, 0x0, 0x0, 0x6}) r7 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x2) preadv(r7, &(0x7f0000000740)=[{&(0x7f0000000340)=""/162, 0xca80}], 0x1, 0x80000001, 0x3f7a) ioctl$VIDIOC_S_STD(r7, 0x40085618, &(0x7f0000000300)=0x800) (async) ioctl$VIDIOC_S_STD(r7, 0x40085618, &(0x7f0000000300)=0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) 1m3.307657049s ago: executing program 34 (id=3757): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000641000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00001ae000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000780000/0x1000)=nil, 0x0}, 0x68) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x3, &(0x7f0000000180)=0x3ff, 0x4) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x3, &(0x7f0000000180)=0x3ff, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000001c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)='S', 0x1}], 0x1}}], 0x1, 0x20008000) shutdown(r3, 0x1) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c7900, 0x0) sendfile(r4, r5, 0x0, 0x201f00) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r6, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x50, 0x180c75, 0x7, 0x104, 0x1ff, 0x0, 0x0, 0x0, 0x6}) r7 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x2) preadv(r7, &(0x7f0000000740)=[{&(0x7f0000000340)=""/162, 0xca80}], 0x1, 0x80000001, 0x3f7a) ioctl$VIDIOC_S_STD(r7, 0x40085618, &(0x7f0000000300)=0x800) (async) ioctl$VIDIOC_S_STD(r7, 0x40085618, &(0x7f0000000300)=0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) 6.787915223s ago: executing program 6 (id=4058): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x68}}, 0x4004040) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0xffffff01}, 0x8) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x3501) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) unshare(0x6a040000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xfc, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000002005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0) 6.312109296s ago: executing program 6 (id=4070): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x8, @private0, 0x2}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f0000008600)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)='\b', 0x1}], 0x1, &(0x7f0000000440)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x1671, 0x0, 0xd, 0xf4, 0x4, 0x1, 0x7}}], 0x30, 0x4000001}], 0x1, 0x0) 6.110533387s ago: executing program 6 (id=4075): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xa0}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x7, 0x2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048810}, 0x0) 5.724454718s ago: executing program 6 (id=4080): r0 = socket(0x2, 0x80805, 0x0) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB=' \x00'], 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000003c0)={r5, 0x0, 0x20}, 0xc) 5.582052642s ago: executing program 6 (id=4082): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 5.388411859s ago: executing program 6 (id=4087): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) 1.75396462s ago: executing program 3 (id=4153): openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x118) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x6, 0x8, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, &(0x7f0000000040), 0x0}, 0x20) 1.643815401s ago: executing program 1 (id=4155): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="02"], 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x20000003}) close_range(r3, r1, 0x0) 1.635261384s ago: executing program 3 (id=4156): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x2e, 0x1, r3}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 1.582092174s ago: executing program 7 (id=4157): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) io_setup(0x3ff, &(0x7f0000000500)) 1.471911159s ago: executing program 1 (id=4158): syz_emit_ethernet(0x5e, &(0x7f0000000840)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="c437b78cb64c", @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, '@\x00', 0x28, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2f}}}}}}}, 0x0) 1.448513818s ago: executing program 7 (id=4159): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x5}, 0x94) 1.411067431s ago: executing program 1 (id=4160): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x40008) write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)={0x70, r2, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x161a, 0x53}}}}, [@NL80211_ATTR_FRAME={0x50, 0x33, @data_frame={@a_msdu=@type00={{0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x136}, @device_b, @device_a, @initial, {0x4}}, @a_msdu=[{@device_b, @device_a, 0x23, "155de2b49e6f406b9eb535304decc91478878a391826de13cb6f50ed4c47f05bc95ba6"}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x41d1}, 0x4008000) 1.410780596s ago: executing program 3 (id=4161): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000001c0)={0x5, 0x10, 0xfa00, {&(0x7f0000002200), r1}}, 0x18) 1.29569938s ago: executing program 7 (id=4163): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) r3 = memfd_create(&(0x7f0000000300)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xde', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r3, 0x0) write(r0, &(0x7f0000000000)="717e40f4d3356ecd267cb6", 0xb) 1.155016951s ago: executing program 7 (id=4165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELCHAIN={0x24, 0x5, 0xa, 0x301, 0x0, 0x0, {0x9, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x50) 1.008112853s ago: executing program 7 (id=4167): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20040045, &(0x7f0000000140)={0xa, 0x4001, 0xfffb, @loopback, 0xfffffffd}, 0x1c) 915.929276ms ago: executing program 7 (id=4168): mremap(&(0x7f00005e4000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0xfffc, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000040)=0x1, 0x4) 894.801607ms ago: executing program 4 (id=4169): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x4, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x24, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}}}}}}}, 0x0) 740.370187ms ago: executing program 4 (id=4170): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@dstopts={{0x12, 0x29, 0x37, {0x2f}}}], 0x18}, 0x40440c0) 680.296773ms ago: executing program 4 (id=4171): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'tunl0\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x0, 0x700, 0x9, 0x0, {{0x5, 0x4, 0x0, 0x2f, 0x14, 0x65, 0x0, 0x20, 0x29, 0x0, @remote, @remote}}}}) 582.030574ms ago: executing program 4 (id=4172): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) 436.277481ms ago: executing program 1 (id=4173): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00'}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, 0x0, &(0x7f0000000100)) 396.154971ms ago: executing program 4 (id=4174): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = io_uring_setup(0x37b0, &(0x7f00000003c0)={0x0, 0x20b034, 0x0, 0x2, 0x400022a}) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0}]}, 0x4}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r2, 0x17, &(0x7f0000000300)={0x0}, 0x1) 356.533323ms ago: executing program 3 (id=4175): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3fd4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)={0x77359400}, &(0x7f0000001280)={&(0x7f0000001240)={[0x4]}, 0x8}) 264.459074ms ago: executing program 1 (id=4176): r0 = socket(0x2b, 0x80801, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0xfffffffc, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3, 0x0, 0x401}]}]}, 0xfc}}, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0xab, @empty, 0x1}, 0x1c) 215.819699ms ago: executing program 4 (id=4177): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010003000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0c0003000e00"], 0x28}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) syz_open_dev$usbfs(0x0, 0x77, 0x3501) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 179.834108ms ago: executing program 3 (id=4178): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x8080003ad) 106.213953ms ago: executing program 1 (id=4179): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x40, 0xfffffffffffffffe, 0x4, 0x9}, 0xe4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x60}}, 0x0) 0s ago: executing program 3 (id=4180): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xffffff5e, &(0x7f00000002c0)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c050010ffff0af30000000075f800250003000f600000251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd7000340000000001f00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) kernel console output (not intermixed with test programs): eturned -16 [ 838.760527][ T5885] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 838.780992][ T5885] synaptics_usb 5-1:0.52: probe with driver synaptics_usb failed with error -5 [ 838.851947][ T5942] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 838.973028][T15524] usb 5-1: USB disconnect, device number 66 [ 839.003864][ T5942] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 839.020543][ T5942] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 839.065056][ T5942] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 839.116663][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.148760][ T5942] usb 1-1: Product: syz [ 839.162891][T19402] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3552'. [ 839.190785][ T5942] usb 1-1: Manufacturer: syz [ 839.213873][ T5942] usb 1-1: SerialNumber: syz [ 839.357901][T19408] program syz.3.3554 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 839.415585][T19409] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3553'. [ 839.428414][ T5885] usb 2-1: USB disconnect, device number 57 [ 840.342656][T19425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 840.431980][T19427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 840.518620][T19427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 840.581015][T19432] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3560'. [ 841.821673][T15524] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 841.927210][T19440] netlink: 'syz.3.3561': attribute type 8 has an invalid length. [ 841.994544][T15524] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 842.025458][T15524] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.063774][T15524] usb 2-1: config 0 descriptor?? [ 842.089502][T15524] cp210x 2-1:0.0: cp210x converter detected [ 842.115421][ T5885] usb 1-1: USB disconnect, device number 59 [ 842.510556][T15524] usb 2-1: cp210x converter now attached to ttyUSB0 [ 843.051395][ T5885] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 843.057757][T19457] netlink: zone id is out of range [ 843.088526][T19456] netlink: set zone limit has 4 unknown bytes [ 843.161053][T19456] ip6tnl0: Caught tx_queue_len zero misconfig [ 843.251697][ T5885] usb 4-1: Using ep0 maxpacket: 16 [ 843.253185][T15524] usb 2-1: USB disconnect, device number 58 [ 843.276476][ T5885] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 843.302054][T15524] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 843.308121][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 843.337846][ T5885] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 843.362402][T15524] cp210x 2-1:0.0: device disconnected [ 843.363848][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.407683][ T5885] usb 4-1: Product: syz [ 843.423103][ T5885] usb 4-1: Manufacturer: syz [ 843.430787][T19462] nfs: Unknown parameter ' [ 843.430787][T19462] ' [ 843.441719][ T5885] usb 4-1: SerialNumber: syz [ 843.509767][ T5885] usb 4-1: config 0 descriptor?? [ 843.540642][ T5885] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 843.571166][ T5885] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 844.041390][ T9] usb 1-1: new low-speed USB device number 60 using dummy_hcd [ 844.116087][T19480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3572'. [ 844.126361][T19481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3572'. [ 844.137693][T19480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3572'. [ 844.148457][T19481] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3572'. [ 844.175598][ T5885] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 844.202175][ T5885] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 844.211235][ T9618] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 844.222541][ T9] usb 1-1: Invalid ep0 maxpacket: 16 [ 844.243821][ T5885] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 844.256080][ T9618] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 844.276553][ T5885] em28xx 4-1:0.0: No AC97 audio processor [ 844.287950][ T9618] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 844.335926][ T5885] usb 4-1: USB disconnect, device number 12 [ 844.342367][ T9618] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 844.372484][ T5885] em28xx 4-1:0.0: Disconnecting em28xx [ 844.393095][ T9] usb 1-1: new low-speed USB device number 61 using dummy_hcd [ 844.402946][ T5885] em28xx 4-1:0.0: Freeing device [ 844.581351][ T9] usb 1-1: Invalid ep0 maxpacket: 16 [ 844.604759][ T9] usb usb1-port1: attempt power cycle [ 845.006150][ T9] usb 1-1: new low-speed USB device number 62 using dummy_hcd [ 845.068781][ T9] usb 1-1: Invalid ep0 maxpacket: 16 [ 845.211511][ T5885] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 845.223874][ T9] usb 1-1: new low-speed USB device number 63 using dummy_hcd [ 845.272331][ T9] usb 1-1: Invalid ep0 maxpacket: 16 [ 845.289392][ T9] usb usb1-port1: unable to enumerate USB device [ 845.394659][ T5885] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 845.419124][ T5885] usb 5-1: config 0 has no interface number 0 [ 845.437206][ T5885] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 845.469887][ T5885] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 845.500293][ T5885] usb 5-1: config 0 interface 8 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 845.542824][ T5885] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 845.568323][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.603050][ T5885] usb 5-1: config 0 descriptor?? [ 845.800575][T19498] netlink: 'syz.1.3577': attribute type 13 has an invalid length. [ 845.819731][T19498] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3577'. [ 846.042824][ T5885] uclogic 0003:28BD:0042.0034: interface is invalid, ignoring [ 846.144114][T19505] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 846.424720][T19514] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.3581'. [ 846.519103][T19512] binder: 19509:19512 ioctl c0306201 0 returned -14 [ 846.791396][ T9] usb 5-1: USB disconnect, device number 67 [ 846.951546][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 847.075494][T19536] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3588'. [ 847.122656][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 847.135493][ T10] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 847.160888][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.194655][ T10] usb 4-1: config 0 descriptor?? [ 847.228082][ T10] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 847.251463][ T9] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 847.321466][ T5885] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 847.434071][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.461372][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 847.476984][ T9] usb 5-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 847.490080][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.502432][ T9] usb 5-1: config 0 descriptor?? [ 847.511675][ T5885] usb 1-1: Using ep0 maxpacket: 32 [ 847.521990][ T5885] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 847.530416][ T5885] usb 1-1: config 0 has no interface number 0 [ 847.542386][ T5885] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 847.552959][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.562899][ T5885] usb 1-1: Product: syz [ 847.569825][ T5885] usb 1-1: Manufacturer: syz [ 847.574729][ T5885] usb 1-1: SerialNumber: syz [ 847.583665][ T5885] usb 1-1: config 0 descriptor?? [ 847.593197][ T5885] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 847.846443][ T5885] usb 1-1: qt2_attach - failed to power on unit: -71 [ 847.866532][ T5885] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 847.883681][ T5885] usb 1-1: USB disconnect, device number 64 [ 847.915944][ T9] playstation 0003:054C:0BA0.0035: unknown main item tag 0x0 [ 847.937252][ T9] playstation 0003:054C:0BA0.0035: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.4-1/input0 [ 848.126101][ T9] playstation 0003:054C:0BA0.0035: Invalid byte count transferred, expected 16 got 0 [ 848.137615][ T9] playstation 0003:054C:0BA0.0035: Failed to retrieve DualShock4 pairing info: -22 [ 848.158654][ T9] playstation 0003:054C:0BA0.0035: Failed to get MAC address from DualShock4 [ 848.185778][ T9] playstation 0003:054C:0BA0.0035: Failed to create dualshock4. [ 848.209898][ T9] playstation 0003:054C:0BA0.0035: probe with driver playstation failed with error -22 [ 848.348681][T19525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.367705][T19525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.385986][ T9] usb 5-1: USB disconnect, device number 68 [ 848.440001][T19518] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3584'. [ 848.474378][T19518] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3584'. [ 848.536376][T19557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3593'. [ 848.561521][T19557] netlink: 'syz.0.3593': attribute type 30 has an invalid length. [ 848.569806][T19557] netlink: 'syz.0.3593': attribute type 29 has an invalid length. [ 848.710532][ T29] audit: type=1326 audit(1774476710.351:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19563 comm="syz.0.3595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ebd9c799 code=0x7ffc0000 [ 848.761830][ T29] audit: type=1326 audit(1774476710.351:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19563 comm="syz.0.3595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ebd9c799 code=0x7ffc0000 [ 848.812027][ T29] audit: type=1326 audit(1774476710.401:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19563 comm="syz.0.3595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fe0ebd9c799 code=0x7ffc0000 [ 848.861372][ T29] audit: type=1326 audit(1774476710.401:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19563 comm="syz.0.3595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ebd9c799 code=0x7ffc0000 [ 848.906805][ T29] audit: type=1326 audit(1774476710.501:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19563 comm="syz.0.3595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ebd9c799 code=0x7ffc0000 [ 848.965346][ T29] audit: type=1326 audit(1774476710.501:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19563 comm="syz.0.3595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fe0ebd9c799 code=0x7ffc0000 [ 849.021769][ T29] audit: type=1326 audit(1774476710.501:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19563 comm="syz.0.3595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ebd9c799 code=0x7ffc0000 [ 849.052156][ T29] audit: type=1326 audit(1774476710.591:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19563 comm="syz.0.3595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe0ebd9c799 code=0x7ffc0000 [ 849.292326][T19568] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 849.299671][ T29] audit: type=1326 audit(1774476710.941:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19563 comm="syz.0.3595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ebd9c799 code=0x7ffc0000 [ 849.350885][ T29] audit: type=1326 audit(1774476710.941:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19563 comm="syz.0.3595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ebd9c799 code=0x7ffc0000 [ 849.374726][ T10] gspca_sonixj: reg_r err -71 [ 849.379569][ T10] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 849.397240][ T10] usb 4-1: USB disconnect, device number 13 [ 849.613743][T19581] binder: 19578:19581 ioctl c0306201 0 returned -14 [ 850.723387][T19619] __nla_validate_parse: 1 callbacks suppressed [ 850.723434][T19619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3612'. [ 850.852279][T19621] ptrace attach of ""[19622] was attempted by "./syz-executor exec"[19621] [ 851.064541][T19631] FAULT_INJECTION: forcing a failure. [ 851.064541][T19631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 851.103976][T19631] CPU: 1 UID: 0 PID: 19631 Comm: syz.1.3616 Tainted: G L syzkaller #0 PREEMPT(full) [ 851.104007][T19631] Tainted: [L]=SOFTLOCKUP [ 851.104013][T19631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 851.104024][T19631] Call Trace: [ 851.104031][T19631] [ 851.104047][T19631] dump_stack_lvl+0xe8/0x150 [ 851.104078][T19631] should_fail_ex+0x412/0x560 [ 851.104107][T19631] _copy_from_iter+0x1d3/0x1670 [ 851.104137][T19631] ? unwind_next_frame+0xa5/0x23c0 [ 851.104171][T19631] ? __lock_acquire+0x6b5/0x2cf0 [ 851.104195][T19631] ? __pfx__copy_from_iter+0x10/0x10 [ 851.104236][T19631] tun_get_user+0x516/0x3dd0 [ 851.104379][T19631] ? aa_file_perm+0x192/0x15e0 [ 851.104401][T19631] ? aa_file_perm+0x50e/0x15e0 [ 851.104419][T19631] ? __pfx_tun_get_user+0x10/0x10 [ 851.104436][T19631] ? aa_file_perm+0x192/0x15e0 [ 851.104459][T19631] ? __lock_acquire+0x6b5/0x2cf0 [ 851.104491][T19631] ? ref_tracker_alloc+0x35c/0x4c0 [ 851.104551][T19631] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 851.104581][T19631] ? tun_get+0x1c/0x2f0 [ 851.104602][T19631] ? tun_get+0x1c/0x2f0 [ 851.104619][T19631] ? tun_get+0x1c/0x2f0 [ 851.104642][T19631] tun_chr_write_iter+0x113/0x200 [ 851.104664][T19631] vfs_write+0x61d/0xb90 [ 851.104692][T19631] ? __pfx_vfs_write+0x10/0x10 [ 851.104721][T19631] ? __fget_files+0x2a/0x420 [ 851.104755][T19631] ksys_write+0x150/0x270 [ 851.104777][T19631] ? __pfx_ksys_write+0x10/0x10 [ 851.104807][T19631] do_syscall_64+0x14d/0xf80 [ 851.104828][T19631] ? trace_irq_disable+0x3b/0x150 [ 851.104854][T19631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.104873][T19631] ? clear_bhb_loop+0x40/0x90 [ 851.104896][T19631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.104913][T19631] RIP: 0033:0x7f993ed9c799 [ 851.104932][T19631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 851.104947][T19631] RSP: 002b:00007f993fb90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 851.104968][T19631] RAX: ffffffffffffffda RBX: 00007f993f015fa0 RCX: 00007f993ed9c799 [ 851.104982][T19631] RDX: 0000000000000036 RSI: 0000200000000300 RDI: 0000000000000003 [ 851.104994][T19631] RBP: 00007f993fb90090 R08: 0000000000000000 R09: 0000000000000000 [ 851.105005][T19631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 851.105016][T19631] R13: 00007f993f016038 R14: 00007f993f015fa0 R15: 00007f993f13fa48 [ 851.105051][T19631] [ 852.523015][T19648] netlink: 180 bytes leftover after parsing attributes in process `syz.6.3619'. [ 853.144308][T19666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3623'. [ 853.182343][ T9910] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 853.251165][T19668] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 853.317621][T19675] FAULT_INJECTION: forcing a failure. [ 853.317621][T19675] name failslab, interval 1, probability 0, space 0, times 0 [ 853.331008][T19675] CPU: 1 UID: 0 PID: 19675 Comm: syz.1.3627 Tainted: G L syzkaller #0 PREEMPT(full) [ 853.331030][T19675] Tainted: [L]=SOFTLOCKUP [ 853.331034][T19675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 853.331041][T19675] Call Trace: [ 853.331045][T19675] [ 853.331050][T19675] dump_stack_lvl+0xe8/0x150 [ 853.331069][T19675] should_fail_ex+0x412/0x560 [ 853.331087][T19675] should_failslab+0xa8/0x100 [ 853.331101][T19675] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 853.331118][T19675] ? __alloc_skb+0x186/0x7d0 [ 853.331130][T19675] ? __alloc_skb+0x1d0/0x7d0 [ 853.331138][T19675] ? __local_bh_enable_ip+0xd0/0x130 [ 853.331154][T19675] __alloc_skb+0x1d0/0x7d0 [ 853.331166][T19675] alloc_skb_with_frags+0xca/0x890 [ 853.331282][T19675] sock_alloc_send_pskb+0x878/0x990 [ 853.331316][T19675] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 853.331339][T19675] ? iov_iter_advance+0x8b/0x1c0 [ 853.331351][T19675] tun_get_user+0x92d/0x3dd0 [ 853.331367][T19675] ? aa_file_perm+0x192/0x15e0 [ 853.331379][T19675] ? aa_file_perm+0x50e/0x15e0 [ 853.331388][T19675] ? __pfx_tun_get_user+0x10/0x10 [ 853.331398][T19675] ? aa_file_perm+0x192/0x15e0 [ 853.331409][T19675] ? __lock_acquire+0x6b5/0x2cf0 [ 853.331434][T19675] ? ref_tracker_alloc+0x35c/0x4c0 [ 853.331451][T19675] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 853.331467][T19675] ? tun_get+0x1c/0x2f0 [ 853.331480][T19675] ? tun_get+0x1c/0x2f0 [ 853.331489][T19675] ? tun_get+0x1c/0x2f0 [ 853.331501][T19675] tun_chr_write_iter+0x113/0x200 [ 853.331513][T19675] vfs_write+0x61d/0xb90 [ 853.331528][T19675] ? __pfx_vfs_write+0x10/0x10 [ 853.331543][T19675] ? __fget_files+0x2a/0x420 [ 853.331562][T19675] ksys_write+0x150/0x270 [ 853.331574][T19675] ? __pfx_ksys_write+0x10/0x10 [ 853.331589][T19675] do_syscall_64+0x14d/0xf80 [ 853.331601][T19675] ? trace_irq_disable+0x3b/0x150 [ 853.331616][T19675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.331627][T19675] ? clear_bhb_loop+0x40/0x90 [ 853.331639][T19675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.331649][T19675] RIP: 0033:0x7f993ed9c799 [ 853.331660][T19675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 853.331669][T19675] RSP: 002b:00007f993fb90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 853.331682][T19675] RAX: ffffffffffffffda RBX: 00007f993f015fa0 RCX: 00007f993ed9c799 [ 853.331689][T19675] RDX: 0000000000000036 RSI: 0000200000000300 RDI: 0000000000000003 [ 853.331695][T19675] RBP: 00007f993fb90090 R08: 0000000000000000 R09: 0000000000000000 [ 853.331701][T19675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.331707][T19675] R13: 00007f993f016038 R14: 00007f993f015fa0 R15: 00007f993f13fa48 [ 853.331722][T19675] [ 853.649580][ T9910] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 853.660854][ T9910] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 853.682041][ T9910] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 853.691162][ T9910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 853.699594][ T9910] usb 1-1: SerialNumber: syz [ 853.793763][T19679] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3629'. [ 853.913495][ T9910] usb 1-1: 0:2 : does not exist [ 853.918674][ T9910] usb 1-1: unit 5: unexpected type 0x0b [ 853.971054][ T9910] usb 1-1: USB disconnect, device number 65 [ 854.056834][ T5819] udevd[5819]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 854.077387][ T5885] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 854.164172][T19695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3636'. [ 854.241618][ T5885] usb 4-1: device descriptor read/64, error -71 [ 854.447717][T19700] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 854.521372][ T5885] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 854.661362][ T5885] usb 4-1: device descriptor read/64, error -71 [ 854.781628][ T5885] usb usb4-port1: attempt power cycle [ 854.922986][ T29] audit: type=1326 audit(1774476716.571:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19707 comm="syz.0.3640" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe0ebd9c799 code=0x0 [ 855.141401][ T5885] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 855.191960][ T5885] usb 4-1: device descriptor read/8, error -71 [ 855.443463][T19728] binder: 19727:19728 ioctl c04064a0 2000000001c0 returned -22 [ 855.443498][T19729] binder: 19727:19729 ioctl c04064a0 2000000001c0 returned -22 [ 855.461972][ T9910] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 855.471493][ T5885] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 855.502504][ T5885] usb 4-1: device descriptor read/8, error -71 [ 855.611865][ T5885] usb usb4-port1: unable to enumerate USB device [ 855.614525][ T9910] usb 5-1: config 4 has an invalid interface number: 88 but max is 0 [ 855.627686][ T9910] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 855.643653][ T9910] usb 5-1: config 4 has no interface number 0 [ 855.644207][T19734] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3649'. [ 855.659953][ T9910] usb 5-1: config 4 interface 88 altsetting 119 endpoint 0xB has invalid wMaxPacketSize 0 [ 855.679387][ T9910] usb 5-1: config 4 interface 88 altsetting 119 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 855.694808][ T9910] usb 5-1: config 4 interface 88 has no altsetting 0 [ 855.704236][ T9910] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 855.715913][ T9910] usb 5-1: New USB device strings: Mfr=8, Product=0, SerialNumber=3 [ 855.741630][ T9910] usb 5-1: Manufacturer: syz [ 855.748671][ T9910] usb 5-1: SerialNumber: syz [ 855.993765][ T9910] usb 5-1: USB disconnect, device number 69 [ 856.717141][T19750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3653'. [ 857.181588][ T5828] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 857.267990][T19773] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 857.340210][T19773] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 857.376423][ T5828] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 857.396001][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.427747][ T5828] usb 5-1: Product: syz [ 857.441594][ T5828] usb 5-1: Manufacturer: syz [ 857.446237][ T5828] usb 5-1: SerialNumber: syz [ 857.560033][T19781] netlink: 'syz.6.3664': attribute type 10 has an invalid length. [ 857.603474][T19781] bond0: (slave wlan1): Opening slave failed [ 857.807285][T19789] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3665'. [ 857.908912][ T5828] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 857.932689][T19789] netlink: 'syz.3.3665': attribute type 4 has an invalid length. [ 857.986130][T19787] vlan3: entered allmulticast mode [ 857.992030][T19792] netlink: 'syz.3.3665': attribute type 4 has an invalid length. [ 857.999888][T19787] team0: entered allmulticast mode [ 858.005700][T19787] team_slave_0: entered allmulticast mode [ 858.015546][T19787] team_slave_1: entered allmulticast mode [ 858.032041][T19795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 858.050384][ T5828] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 858.191826][T15524] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 858.331991][T15524] usb 1-1: device descriptor read/64, error -71 [ 858.399660][T19801] netlink: 'syz.1.3671': attribute type 1 has an invalid length. [ 858.452272][T19801] 8021q: adding VLAN 0 to HW filter on device bond6 [ 858.489484][T19804] bond6: (slave geneve2): making interface the new active one [ 858.514480][T19804] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 858.537481][ T9603] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.561915][ T9603] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.571964][T15524] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 858.583419][ T9603] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.600605][ T9618] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.715607][T15524] usb 1-1: device descriptor read/64, error -71 [ 858.864633][T15524] usb usb1-port1: attempt power cycle [ 858.949014][T19812] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3673'. [ 858.949812][T19813] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3673'. [ 859.211966][T15524] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 859.243973][T15524] usb 1-1: device descriptor read/8, error -71 [ 859.481817][T15524] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 859.492569][ T5828] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 859.501984][T15524] usb 1-1: device descriptor read/8, error -71 [ 859.512535][ T5828] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 859.526129][ T5828] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 859.541183][ T5828] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 859.570056][ T5828] usb 5-1: USB disconnect, device number 70 [ 859.576614][ T10] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 859.611803][T15524] usb usb1-port1: unable to enumerate USB device [ 859.751401][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 859.784839][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 859.800114][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 859.821176][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 859.841207][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 859.872005][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 859.893618][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 859.912604][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.937443][ T10] usb 2-1: config 0 descriptor?? [ 859.952220][T19826] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 860.389690][T12361] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 860.390784][ T10] usb 2-1: USB disconnect, device number 59 [ 860.687462][T19835] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3680'. [ 861.025869][T19845] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3683'. [ 861.251764][ T10] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 861.291348][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 861.423883][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 861.434759][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 861.473317][ T9] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 861.486357][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 861.503074][ T9] usb 4-1: config 1 has no interface number 0 [ 861.514782][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.530284][ T9] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 861.554969][ T10] usb 1-1: Product: syz [ 861.569734][ T10] usb 1-1: Manufacturer: syz [ 861.578615][ T9] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 861.595839][ T10] usb 1-1: SerialNumber: syz [ 861.613597][ T9] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 861.647242][ T9] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x8 has invalid maxpacket 58549, setting to 1024 [ 861.713392][ T9] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 861.749455][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.799200][ T9] usb 4-1: Product: syz [ 861.813616][ T9] usb 4-1: Manufacturer: syz [ 861.837221][ T9] usb 4-1: SerialNumber: syz [ 861.847968][T19839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.885565][T19839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.896122][T19845] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 861.957398][T19845] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 862.535241][ T10] usb 1-1: USB disconnect, device number 70 [ 862.545769][T19860] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 862.552330][T19860] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 862.574927][T19860] vhci_hcd vhci_hcd.0: Device attached [ 862.599542][T19845] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 862.614427][ T6582] udevd[6582]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 862.650123][T19845] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 862.713051][T19865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3689'. [ 862.724130][T19861] vhci_hcd: connection closed [ 862.733047][ T1162] vhci_hcd vhci_hcd.1: stop threads [ 862.747275][ T1162] vhci_hcd vhci_hcd.1: release socket [ 862.768522][ T1162] vhci_hcd vhci_hcd.1: disconnect device [ 862.782030][ T9910] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 862.811759][T15524] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 862.837370][T15524] usb 35-1: enqueue for inactive port 0 [ 862.921785][T15524] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 862.954586][T19873] ip6tnl1: entered promiscuous mode [ 862.994710][ T9] usb 4-1: No status endpoint found [ 862.998713][ T9910] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 863.010781][ T9910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.063569][ T9910] usb 5-1: Product: syz [ 863.080617][ T9910] usb 5-1: Manufacturer: syz [ 863.093086][ T9910] usb 5-1: SerialNumber: syz [ 863.334459][T19883] sit0: Caught tx_queue_len zero misconfig [ 863.372503][ T9] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 863.407131][ T9] hid-generic 0000:0000:0000.0036: hidraw0: HID v0.00 Device [syz1] on syz0 [ 863.521077][ T9910] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 863.538989][ T9910] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 863.631416][ T9] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 863.817271][ T9] usb 2-1: config 0 has no interfaces? [ 863.844111][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 863.885022][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 863.906736][ T9] usb 2-1: SerialNumber: syz [ 863.929999][ T9] usb 2-1: config 0 descriptor?? [ 864.130028][T19892] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 864.424239][ T9] usb 2-1: USB disconnect, device number 60 [ 864.892339][ T9] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 864.958745][T15524] usb 4-1: USB disconnect, device number 18 [ 864.999188][T19858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 865.036947][T19858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 865.079519][ T9] usb 1-1: config index 0 descriptor too short (expected 72, got 38) [ 865.107819][ T9] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 865.147513][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 865.190604][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 865.221215][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.279815][ T9910] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 865.311753][ T9] usb 1-1: Product: syz [ 865.327703][ T9] usb 1-1: Manufacturer: syz [ 865.335427][ T9] usb 1-1: SerialNumber: syz [ 865.348531][ T9910] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 865.384955][ T9] usb 1-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 865.463265][ T9910] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 865.531908][ T9910] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 865.572786][ T9910] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 865.627090][ T9910] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 865.690096][ T9910] usb 5-1: USB disconnect, device number 71 [ 865.701773][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 865.861566][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 865.878377][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.890241][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 865.900530][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 865.914988][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 865.924549][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.939206][ T9] usb 4-1: config 0 descriptor?? [ 866.141797][ T9910] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 866.301716][ T9910] usb 5-1: Using ep0 maxpacket: 16 [ 866.309389][ T9910] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 866.320171][ T9910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 866.351833][ T9910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 866.367430][ T9910] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 866.379234][ T9910] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 866.396182][ T9910] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 866.417346][ T9910] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 866.434011][ T9910] usb 5-1: Manufacturer: syz [ 866.449039][ T9910] usb 5-1: config 0 descriptor?? [ 866.513266][T19938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 867.011821][ T9910] rc_core: IR keymap rc-hauppauge not found [ 867.031664][ T9910] Registered IR keymap rc-empty [ 867.036670][ T9910] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 867.081932][ T9910] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 867.116404][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 867.145775][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 867.163526][ T9910] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 867.201038][ T9910] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input86 [ 867.223117][T15524] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 867.244958][ T9] usb 4-1: USB disconnect, device number 19 [ 867.263465][ T9910] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 867.282147][ T9910] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 867.322610][ T9910] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 867.356077][ T9910] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 867.392969][T15524] usb 2-1: Using ep0 maxpacket: 32 [ 867.411984][ T9910] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 867.453744][T15524] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 867.475636][ T9910] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 867.559905][T15524] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 867.578791][ T9910] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 867.605804][T15524] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 867.642122][ T5828] usb 1-1: USB disconnect, device number 71 [ 867.662130][ T9910] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 867.767528][T15524] usb 2-1: Product: syz [ 867.791086][T15524] usb 2-1: Manufacturer: syz [ 867.796486][ T9910] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 867.806833][T19966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3713'. [ 867.815988][T15524] usb 2-1: SerialNumber: syz [ 867.858746][T15524] usb 2-1: config 0 descriptor?? [ 867.864081][ T9910] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 867.904582][T15524] hub 2-1:0.0: bad descriptor, ignoring hub [ 867.925687][ T9910] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 867.938091][T15524] hub 2-1:0.0: probe with driver hub failed with error -5 [ 868.018900][ T9910] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 868.122931][ T9910] usb 5-1: USB disconnect, device number 72 [ 869.294506][T19981] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 869.701558][ T5828] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 869.922071][ T5828] usb 5-1: Using ep0 maxpacket: 8 [ 869.935001][ T5828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 869.967060][ T5828] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 869.991590][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.016293][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.022774][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.037771][ T5828] usb 5-1: config 0 descriptor?? [ 870.211683][ T10] usb 2-1: USB disconnect, device number 61 [ 870.306761][ T5828] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 870.510460][ T5828] usb 5-1: USB disconnect, device number 73 [ 870.828801][T20017] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3724'. [ 871.449436][ T29] audit: type=1326 audit(1774476733.091:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20032 comm="syz.0.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ebd9c799 code=0x7ffc0000 [ 871.472886][ T29] audit: type=1326 audit(1774476733.091:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20032 comm="syz.0.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ebd9c799 code=0x7ffc0000 [ 871.495906][ T29] audit: type=1326 audit(1774476733.121:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20032 comm="syz.0.3731" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe0ebd9c799 code=0x0 [ 871.527831][ T29] audit: type=1326 audit(1774476733.171:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20032 comm="syz.0.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe0ebd9c799 code=0x7ffc0000 [ 871.552151][ T29] audit: type=1326 audit(1774476733.171:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20032 comm="syz.0.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ebd9c799 code=0x7ffc0000 [ 871.553325][ T5828] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 871.575912][ T29] audit: type=1326 audit(1774476733.171:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20032 comm="syz.0.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ebd9c799 code=0x7ffc0000 [ 871.619232][ T29] audit: type=1326 audit(1774476733.201:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20032 comm="syz.0.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe0ebd9c799 code=0x7ffc0000 [ 871.646289][ T29] audit: type=1326 audit(1774476733.201:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20032 comm="syz.0.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ebd9c799 code=0x7ffc0000 [ 871.682241][ T29] audit: type=1326 audit(1774476733.231:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20032 comm="syz.0.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ebd9c799 code=0x7ffc0000 [ 871.725721][ T29] audit: type=1326 audit(1774476733.231:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20032 comm="syz.0.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe0ebd5cfce code=0x7ffc0000 [ 871.753482][ T10] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 871.764147][T20040] loop7: detected capacity change from 0 to 7 [ 871.764249][ T5828] usb 5-1: device descriptor read/64, error -71 [ 871.778317][ C0] blk_print_req_error: 10 callbacks suppressed [ 871.778338][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 871.794115][ C0] buffer_io_error: 10 callbacks suppressed [ 871.794132][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 871.807959][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 871.817607][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 871.827040][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 871.836690][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 871.845402][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 871.855006][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 871.863770][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 871.873372][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 871.884553][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 871.894142][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 871.901359][ T10] usb 2-1: device descriptor read/64, error -71 [ 871.903429][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 871.918279][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 871.927931][T20040] ldm_validate_partition_table(): Disk read failed. [ 871.935175][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 871.944786][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 871.953606][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 871.963207][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 871.971338][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 871.980903][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 871.989494][T20040] Dev loop7: unable to read RDB block 0 [ 871.998148][T20040] loop7: unable to read partition table [ 872.004579][T20040] loop7: partition table beyond EOD, truncated [ 872.010849][T20040] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 872.041406][ T5828] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 872.154450][T20044] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3734'. [ 872.172914][ T10] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 872.201805][ T5828] usb 5-1: device descriptor read/64, error -71 [ 872.210660][T20044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3734'. [ 872.311791][ T5828] usb usb5-port1: attempt power cycle [ 872.321683][ T10] usb 2-1: device descriptor read/64, error -71 [ 872.433924][ T10] usb usb2-port1: attempt power cycle [ 872.587068][T20063] pimreg: entered allmulticast mode [ 872.593390][T20063] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3739'. [ 872.593390][T20064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3739'. [ 872.593895][T20064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3739'. [ 872.623236][T20063] pimreg: left allmulticast mode [ 872.681531][ T5828] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 872.710663][ T5828] usb 5-1: device descriptor read/8, error -71 [ 872.771386][ T10] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 872.802397][ T10] usb 2-1: device descriptor read/8, error -71 [ 872.961749][ T5828] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 873.003023][ T5828] usb 5-1: device descriptor read/8, error -71 [ 873.061471][ T10] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 873.102068][ T10] usb 2-1: device descriptor read/8, error -71 [ 873.111715][ T5828] usb usb5-port1: unable to enumerate USB device [ 873.211836][ T10] usb usb2-port1: unable to enumerate USB device [ 873.283343][T15524] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 873.443566][T15524] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 873.455229][T15524] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 873.466112][T15524] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 873.475611][T15524] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.487662][T20073] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 873.498562][T15524] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 873.713400][T20073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.723707][T20073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.815822][T15524] usb 1-1: USB disconnect, device number 72 [ 874.171674][T15524] usb 1-1: new low-speed USB device number 73 using dummy_hcd [ 874.335568][T15524] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 874.356839][T15524] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 874.373075][T15524] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 874.385804][T15524] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 874.398504][T15524] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 874.418345][T15524] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 874.427409][T15524] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 874.455147][T15524] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 874.470139][T15524] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 874.482014][T15524] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 874.498137][T15524] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 874.506312][T15524] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 874.535718][T15524] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 874.578200][T15524] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 874.629861][T15524] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 874.670833][T15524] usb 1-1: string descriptor 0 read error: -22 [ 874.693740][T15524] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 874.729333][T15524] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.764695][T15524] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 874.969808][ T10] usb 1-1: USB disconnect, device number 73 [ 875.833394][T20119] kvm: pic: non byte write [ 876.456502][T20124] pimreg: entered allmulticast mode [ 877.215636][T20136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3760'. [ 877.326216][ T5822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 877.337477][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 877.348077][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 877.358668][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 877.369068][ T5822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 877.405851][T12361] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 877.416613][T12361] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 877.426217][T12361] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 877.447065][T12361] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 877.457310][T12361] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 877.911924][ T42] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 878.017256][T20147] chnl_net:caif_netlink_parms(): no params data found [ 878.041903][ T42] usb 2-1: device descriptor read/64, error -71 [ 878.138467][T20158] binder: 20153:20158 ioctl c0306201 0 returned -14 [ 878.281869][ T42] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 878.421643][ T42] usb 2-1: device descriptor read/64, error -71 [ 878.503120][T20147] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.520559][T20147] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.532008][ T42] usb usb2-port1: attempt power cycle [ 878.548213][T20147] bridge_slave_0: entered allmulticast mode [ 878.577124][T20147] bridge_slave_0: entered promiscuous mode [ 878.604644][T20147] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.639034][T20147] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.666980][T20147] bridge_slave_1: entered allmulticast mode [ 878.699579][T20147] bridge_slave_1: entered promiscuous mode [ 878.815894][T20147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 878.858776][T20147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 878.882029][ T42] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 878.912674][ T42] usb 2-1: device descriptor read/8, error -71 [ 878.972539][T20147] team0: Port device team_slave_0 added [ 879.011870][T20147] team0: Port device team_slave_1 added [ 879.133393][T20147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 879.140519][T20147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 879.168991][T20147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 879.189570][T20147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 879.191424][ T42] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 879.216963][T20147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 879.265595][T20147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 879.352831][ T42] usb 2-1: device descriptor read/8, error -71 [ 879.426409][T20147] hsr_slave_0: entered promiscuous mode [ 879.448527][T20147] hsr_slave_1: entered promiscuous mode [ 879.462181][ T42] usb usb2-port1: unable to enumerate USB device [ 879.479840][T20147] debugfs: 'hsr0' already exists in 'hsr' [ 879.493233][T20147] Cannot create hsr debugfs directory [ 879.521475][T12361] Bluetooth: hci1: command tx timeout [ 879.928308][T20165] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.936157][T20165] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.170627][T20165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 880.217271][T20165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 880.559283][ T1162] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 880.574547][ T1162] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.603073][ T1162] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 880.621305][ T1162] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.747184][ T1162] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 880.777497][ T1162] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.803552][ T1162] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 880.856481][ T1162] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.062515][T20175] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 881.128328][T20147] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 881.177577][T20195] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3773'. [ 881.208516][T20147] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 881.262626][T20175] usb 2-1: config 5 has an invalid interface number: 123 but max is 0 [ 881.289123][T20175] usb 2-1: config 5 has no interface number 0 [ 881.326315][T20147] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 881.345285][T20175] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 881.395305][T20175] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 881.418162][T20175] usb 2-1: config 5 interface 123 has no altsetting 0 [ 881.430958][T20147] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 881.459506][T20175] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 881.481808][T20175] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.507554][T20175] usb 2-1: Product: syz [ 881.512451][T20175] usb 2-1: Manufacturer: syz [ 881.517179][T20175] usb 2-1: SerialNumber: syz [ 881.601452][T12361] Bluetooth: hci1: command tx timeout [ 881.842825][T20175] ni6501 2-1:5.123: driver 'ni6501' failed to auto-configure device. [ 881.867335][T20175] usb 2-1: USB disconnect, device number 70 [ 881.926680][T20147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 881.979674][T20147] 8021q: adding VLAN 0 to HW filter on device team0 [ 882.026903][T20203] hsr0: entered promiscuous mode [ 882.046693][T20203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3770'. [ 882.081897][ T9603] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.089127][ T9603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 882.134940][T20203] hsr_slave_0: left promiscuous mode [ 882.148237][T20203] hsr_slave_1: left promiscuous mode [ 882.184720][T20203] hsr0 (unregistering): left promiscuous mode [ 882.241860][ T9603] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.249268][ T9603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 882.556010][T20147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 882.680003][T20232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3780'. [ 882.690697][T20147] veth0_vlan: entered promiscuous mode [ 882.769762][T20232] vxlan0: entered promiscuous mode [ 882.787791][ T49] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 882.813361][T20147] veth1_vlan: entered promiscuous mode [ 882.820269][ T49] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 882.844095][ T49] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 882.863264][ T49] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 882.888670][T20147] veth0_macvtap: entered promiscuous mode [ 882.902428][T20147] veth1_macvtap: entered promiscuous mode [ 882.927736][T20147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 882.946376][T20147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 882.954120][ T9914] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 882.977338][ T1162] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.999779][ T1162] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.037763][ T1162] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.068077][ T1162] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.128045][ T9914] usb 4-1: unable to get BOS descriptor or descriptor too short [ 883.162370][ T9914] usb 4-1: not running at top speed; connect to a high speed hub [ 883.194103][ T9914] usb 4-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 883.226356][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 883.227717][ T9914] usb 4-1: config 1 interface 0 has no altsetting 0 [ 883.239674][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 883.258558][ T9914] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 883.299547][ T9618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 883.310143][ T9914] usb 4-1: New USB device strings: Mfr=1, Product=244, SerialNumber=2 [ 883.310606][ T9618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 883.321298][ T9914] usb 4-1: Product: syz [ 883.342637][ T9914] usb 4-1: Manufacturer: syz [ 883.368450][ T9914] usb 4-1: SerialNumber: syz [ 883.499769][T20243] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3782'. [ 883.587229][T20252] netlink: 'syz.7.3783': attribute type 1 has an invalid length. [ 883.603762][T20254] netlink: 'syz.7.3783': attribute type 1 has an invalid length. [ 883.637864][ T9914] usbhid 4-1:1.0: can't add hid device: -71 [ 883.656667][ T9914] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 883.669051][ T9914] usb 4-1: USB disconnect, device number 20 [ 883.693901][T12361] Bluetooth: hci1: command tx timeout [ 883.862817][T20174] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 884.031992][T20174] usb 2-1: Using ep0 maxpacket: 16 [ 884.043726][T20174] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 884.058801][T20174] usb 2-1: config 0 has no interface number 0 [ 884.065922][T20174] usb 2-1: config 0 interface 214 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 884.086718][T20174] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice=fd.f5 [ 884.096108][T20174] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 884.104610][T20174] usb 2-1: Product: syz [ 884.109082][T20174] usb 2-1: SerialNumber: syz [ 884.124323][T20174] usb 2-1: config 0 descriptor?? [ 884.140911][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 884.140930][ T29] audit: type=1326 audit(1774476745.781:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20270 comm="syz.4.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3079c799 code=0x7ffc0000 [ 884.176232][ T29] audit: type=1326 audit(1774476745.781:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20270 comm="syz.4.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3079c799 code=0x7ffc0000 [ 884.199691][T20271] fuse: Unknown parameter '00000000000000000003' [ 884.206976][ T29] audit: type=1326 audit(1774476745.781:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20270 comm="syz.4.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7e3079c799 code=0x7ffc0000 [ 884.230791][ T29] audit: type=1326 audit(1774476745.781:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20270 comm="syz.4.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3079c799 code=0x7ffc0000 [ 884.266848][ T29] audit: type=1326 audit(1774476745.781:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20270 comm="syz.4.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3079c799 code=0x7ffc0000 [ 884.324048][ T29] audit: type=1326 audit(1774476745.821:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20270 comm="syz.4.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7e3079e007 code=0x7ffc0000 [ 884.338668][T20174] usb 2-1: USB disconnect, device number 71 [ 884.364179][ T29] audit: type=1326 audit(1774476745.821:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20270 comm="syz.4.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f7e3075cfce code=0x7ffc0000 [ 884.388329][ T29] audit: type=1326 audit(1774476745.821:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20270 comm="syz.4.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f7e3075cfce code=0x7ffc0000 [ 884.413790][ T29] audit: type=1326 audit(1774476745.821:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20270 comm="syz.4.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f7e3075cfce code=0x7ffc0000 [ 884.437401][ T29] audit: type=1326 audit(1774476745.821:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20270 comm="syz.4.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7e3075cfce code=0x7ffc0000 [ 884.591386][ T9914] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 884.753265][ T9914] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 884.763704][ T9914] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 884.772882][ T9914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.783158][ T9914] usb 5-1: config 0 descriptor?? [ 884.794969][ T9914] pwc: Askey VC010 type 2 USB webcam detected. [ 884.995177][ T9914] pwc: send_video_command error -71 [ 885.000428][ T9914] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 885.029874][ T9914] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 885.056384][ T9914] usb 5-1: USB disconnect, device number 78 [ 885.532068][ T9914] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 885.695238][ T9914] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 885.727781][T20309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 885.738423][ T9914] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 885.755832][T20309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 885.763905][T12361] Bluetooth: hci1: command tx timeout [ 885.776949][ T9914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.790737][ T9914] usb 5-1: config 0 descriptor?? [ 885.799032][ T9914] pwc: Askey VC010 type 2 USB webcam detected. [ 885.951790][ T796] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 886.122298][ T796] usb 4-1: Using ep0 maxpacket: 32 [ 886.136838][ T796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 886.164870][ T796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 886.191817][ T796] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 886.200886][ T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.206686][ T9914] pwc: recv_control_msg error -32 req 02 val 2b00 [ 886.223626][ T9914] pwc: recv_control_msg error -32 req 02 val 2700 [ 886.236222][ T796] usb 4-1: config 0 descriptor?? [ 886.320345][T20318] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3801'. [ 886.331752][T20318] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3801'. [ 886.344047][T20318] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3801'. [ 886.353621][T20318] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3801'. [ 886.363096][T20318] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3801'. [ 886.372611][T20318] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3801'. [ 886.381990][T20318] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3801'. [ 886.391543][T20318] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3801'. [ 886.433800][ T9914] pwc: recv_control_msg error -71 req 04 val 1000 [ 886.451823][ T9914] pwc: recv_control_msg error -71 req 04 val 1300 [ 886.462199][ T9914] pwc: recv_control_msg error -71 req 04 val 1400 [ 886.473583][ T796] usbhid 4-1:0.0: can't add hid device: -71 [ 886.473633][ T9914] pwc: recv_control_msg error -71 req 02 val 2000 [ 886.482444][ T796] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 886.488942][ T9914] pwc: recv_control_msg error -71 req 02 val 2100 [ 886.504920][ T796] usb 4-1: USB disconnect, device number 21 [ 886.518172][ T9914] pwc: recv_control_msg error -71 req 04 val 1500 [ 886.534629][ T9914] pwc: recv_control_msg error -71 req 02 val 2500 [ 886.554743][ T9914] pwc: recv_control_msg error -71 req 02 val 2400 [ 886.575367][ T9914] pwc: recv_control_msg error -71 req 02 val 2600 [ 886.597547][ T9914] pwc: recv_control_msg error -71 req 02 val 2900 [ 886.619278][ T9914] pwc: recv_control_msg error -71 req 02 val 2800 [ 886.626570][T20322] veth0_vlan: Caught tx_queue_len zero misconfig [ 886.635719][ T9914] pwc: recv_control_msg error -71 req 04 val 1100 [ 886.657830][ T9914] pwc: recv_control_msg error -71 req 04 val 1200 [ 886.683540][ T9914] pwc: Registered as video103. [ 886.698597][ T9914] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input87 [ 886.745274][ T9914] usb 5-1: USB disconnect, device number 79 [ 887.233382][T20339] netlink: 'syz.4.3805': attribute type 4 has an invalid length. [ 887.324753][T20340] netlink: 'syz.4.3805': attribute type 4 has an invalid length. [ 888.103854][T20347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 888.359895][T20352] __nla_validate_parse: 27 callbacks suppressed [ 888.359910][T20352] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3810'. [ 888.462508][ T796] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 888.622223][ T796] usb 4-1: Using ep0 maxpacket: 16 [ 888.629184][ T796] usb 4-1: config 182 has an invalid interface number: 81 but max is 0 [ 888.639014][ T796] usb 4-1: config 182 has no interface number 0 [ 888.646637][ T796] usb 4-1: config 182 interface 81 has no altsetting 0 [ 888.658621][ T796] usb 4-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=99.33 [ 888.668391][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.676723][ T796] usb 4-1: Product: syz [ 888.681084][ T796] usb 4-1: Manufacturer: syz [ 888.686506][ T796] usb 4-1: SerialNumber: syz [ 888.824892][T20354] syzkaller0: entered promiscuous mode [ 888.830386][T20354] syzkaller0: entered allmulticast mode [ 888.862526][T20354] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 888.933435][ T796] usb 4-1: USB disconnect, device number 22 [ 889.075968][T20357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 889.100145][T20357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 889.231147][T20362] loop8: detected capacity change from 0 to 8 [ 889.243671][T20362] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 889.255327][T20362] loop8: p1 start 170943852 is beyond EOD, truncated [ 889.263066][T20362] loop8: p2 size 3397386272 extends beyond EOD, truncated [ 889.272901][T20362] loop8: p3 start 594335246 is beyond EOD, truncated [ 889.279618][T20362] loop8: p4 start 3776743406 is beyond EOD, truncated [ 889.287222][T20362] loop8: p5 start 2027407540 is beyond EOD, truncated [ 889.301275][T20362] loop8: p6 start 638845845 is beyond EOD, truncated [ 889.308000][T20362] loop8: p7 start 575385556 is beyond EOD, truncated [ 889.311883][ T796] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 889.326427][T20362] loop8: p8 start 2093735673 is beyond EOD, truncated [ 889.336920][T20362] loop8: p9 start 742306117 is beyond EOD, truncated [ 889.343945][T20362] loop8: p10 start 702590879 is beyond EOD, truncated [ 889.350745][T20362] loop8: p11 start 3071560887 is beyond EOD, truncated [ 889.361287][T20362] loop8: p12 start 1681252333 is beyond EOD, truncated [ 889.484432][ T796] usb 5-1: too many configurations: 151, using maximum allowed: 8 [ 889.513189][ T796] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 889.523694][ T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 889.533059][ T796] usb 5-1: Product: syz [ 889.537318][ T796] usb 5-1: Manufacturer: syz [ 889.554146][ T796] usb 5-1: SerialNumber: syz [ 889.557757][T20371] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 889.565304][T20371] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 889.569497][ T796] usb 5-1: config 0 descriptor?? [ 889.575133][T20371] vhci_hcd vhci_hcd.0: Device attached [ 889.596120][ T796] ims_pcu 5-1:0.0: Zero length descriptor [ 889.607118][ T796] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 889.751420][ T9914] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 889.811353][ T9914] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 889.822967][T20357] bond1: option lacp_rate: invalid value (64) [ 889.831171][T20357] bond1 (unregistering): Released all slaves [ 889.894873][T20358] bond1: option lacp_rate: invalid value (64) [ 889.911345][T20174] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 889.934375][T20358] bond1 (unregistering): Released all slaves [ 889.987235][ T796] usb 5-1: USB disconnect, device number 80 [ 890.093174][T20174] usb 4-1: Using ep0 maxpacket: 32 [ 890.109492][T20174] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 890.141613][T20174] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 890.165577][T20174] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.174192][T20174] usb 4-1: Product: syz [ 890.180003][T20174] usb 4-1: Manufacturer: syz [ 890.185452][T20174] usb 4-1: SerialNumber: syz [ 890.199194][T20174] usb 4-1: config 0 descriptor?? [ 890.207113][T20174] usb 4-1: bad CDC descriptors [ 890.215497][T20174] usb 4-1: unsupported MDLM descriptors [ 890.409519][ T796] usb 4-1: USB disconnect, device number 23 [ 890.494490][T20375] vhci_hcd: connection reset by peer [ 890.501748][ T49] vhci_hcd vhci_hcd.3: stop threads [ 890.508573][ T49] vhci_hcd vhci_hcd.3: release socket [ 890.518587][ T49] vhci_hcd vhci_hcd.3: disconnect device [ 890.708799][T20393] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3821'. [ 890.719478][T20393] netlink: 'syz.4.3821': attribute type 4 has an invalid length. [ 890.745041][T20393] netlink: 'syz.4.3821': attribute type 4 has an invalid length. [ 891.081390][T20174] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 891.251818][T20174] usb 2-1: Using ep0 maxpacket: 8 [ 891.260035][T20174] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 891.275598][T20174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 891.291074][T20174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 891.310858][T20174] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 891.322013][T20174] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.331883][T20174] usb 2-1: Product: syz [ 891.336232][T20174] usb 2-1: Manufacturer: syz [ 891.341988][T20174] usb 2-1: SerialNumber: syz [ 891.351536][T20174] usb 2-1: config 0 descriptor?? [ 891.364165][T20397] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 891.461973][ T42] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 891.621885][ T42] usb 4-1: Using ep0 maxpacket: 16 [ 891.652340][ T42] usb 4-1: config index 0 descriptor too short (expected 67, got 36) [ 891.660891][T20397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 891.674650][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 891.689378][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 891.699927][T20397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 891.708215][ T42] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 891.718052][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.730197][ T796] usb 2-1: USB disconnect, device number 72 [ 891.747731][ T42] usb 4-1: config 0 descriptor?? [ 891.798236][T20418] "syz.4.3828" (20418) uses obsolete ecb(arc4) skcipher [ 891.973459][T20404] fuse: Invalid gid '00000000000000000004' [ 892.151966][ T796] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 892.304298][ T796] usb 5-1: Using ep0 maxpacket: 16 [ 892.315116][ T796] usb 5-1: unable to get BOS descriptor or descriptor too short [ 892.325918][ T796] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 892.340168][ T796] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 2047, setting to 1024 [ 892.356976][ T796] usb 5-1: string descriptor 0 read error: -22 [ 892.364719][ T796] usb 5-1: New USB device found, idVendor=0e41, idProduct=4244, bcdDevice= 0.40 [ 892.379106][ T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.416933][ T796] usb 5-1: unit 9 not found! [ 892.743799][T20427] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3830'. [ 892.930004][ T42] usbhid 4-1:0.0: can't add hid device: -71 [ 892.946740][ T42] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 892.982610][ T42] usb 4-1: USB disconnect, device number 24 [ 893.295581][ T5885] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 893.399662][T20436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3832'. [ 893.424479][T20436] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 893.464805][ T5885] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 893.480669][ T5885] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 893.532499][ T5885] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 893.570275][ T5885] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 893.615232][ T5885] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 893.646599][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 893.675262][ T5885] usb 2-1: Product: syz [ 893.687529][ T5885] usb 2-1: Manufacturer: syz [ 893.760019][ T5885] cdc_wdm 2-1:1.0: skipping garbage [ 893.784499][ T5885] cdc_wdm 2-1:1.0: skipping garbage [ 893.805025][ T5885] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 893.959579][T20431] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 894.649015][T20460] netlink: 'syz.6.3839': attribute type 10 has an invalid length. [ 894.654944][T20461] netlink: 'syz.6.3839': attribute type 10 has an invalid length. [ 894.688549][T20460] dummy0: entered allmulticast mode [ 894.704764][T20462] netlink: 'syz.6.3839': attribute type 10 has an invalid length. [ 894.711942][ T5954] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 894.714597][T20460] team0: Port device dummy0 added [ 894.734390][T20462] dummy0: left allmulticast mode [ 894.748407][T20462] team0: Port device dummy0 removed [ 894.865366][T20174] usb 5-1: USB disconnect, device number 81 [ 894.873481][ T5954] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 894.902569][ T5954] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 894.918352][ T5954] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 894.932734][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.948622][T20456] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 894.963125][ T9914] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 894.967480][ T5954] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 894.999346][T20467] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3841'. [ 895.112914][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 895.112929][ T29] audit: type=1326 audit(1774476756.761:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20466 comm="syz.4.3841" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7e3079c799 code=0x0 [ 895.202043][T20174] usb 4-1: USB disconnect, device number 25 [ 895.312569][T20472] bond2: entered allmulticast mode [ 895.318113][T20472] 8021q: adding VLAN 0 to HW filter on device bond2 [ 896.319549][T20501] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3849'. [ 897.331346][T20174] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 897.477436][T20516] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3854'. [ 897.538510][T20174] usb 4-1: config index 0 descriptor too short (expected 157, got 72) [ 897.557388][T20174] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 897.576929][T20174] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.591802][T20174] usb 4-1: Product: syz [ 897.597187][T20174] usb 4-1: Manufacturer: syz [ 897.605798][T20174] usb 4-1: SerialNumber: syz [ 897.626533][T20174] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 897.640250][ T29] audit: type=1326 audit(1774476759.271:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20515 comm="syz.7.3854" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe203f9c799 code=0x0 [ 897.671586][T20175] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 897.980302][ T5954] usb 2-1: USB disconnect, device number 73 [ 898.051602][T20174] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 898.233416][T20174] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 898.251017][T20174] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 898.279223][T20174] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 898.376130][T20525] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.3856'. [ 898.387799][T20174] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 898.458745][T20174] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 898.489131][T20174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.584040][T20174] usb 5-1: config 0 descriptor?? [ 898.801789][T20175] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 898.874058][T20175] ath9k_htc: Failed to initialize the device [ 898.918055][T20175] usb 4-1: ath9k_htc: USB layer deinitialized [ 899.059589][T20174] usbhid 5-1:0.0: can't add hid device: -71 [ 899.086184][T20174] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 899.120173][T20174] usb 5-1: USB disconnect, device number 82 [ 899.189911][T20548] fuse: Unknown parameter '' [ 899.298920][T20551] binder: BINDER_SET_CONTEXT_MGR already set [ 899.315523][T20551] binder: 20549:20551 ioctl 4018620d 2000000000c0 returned -16 [ 899.317835][T20556] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3867'. [ 899.336625][T20551] binder: BINDER_SET_CONTEXT_MGR already set [ 899.344656][ T29] audit: type=1326 audit(1774476760.981:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20555 comm="syz.1.3867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993ed9c799 code=0x7ffc0000 [ 899.368081][T20551] binder: 20549:20551 ioctl 4018620d 2000000000c0 returned -16 [ 899.376220][T20554] binder: BINDER_SET_CONTEXT_MGR already set [ 899.383952][T20554] binder: 20549:20554 ioctl 4018620d 200000003300 returned -16 [ 899.396364][ T29] audit: type=1326 audit(1774476760.981:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20555 comm="syz.1.3867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f993ed9c799 code=0x7ffc0000 [ 899.441046][ T29] audit: type=1326 audit(1774476760.981:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20555 comm="syz.1.3867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993ed9c799 code=0x7ffc0000 [ 899.487703][ T29] audit: type=1326 audit(1774476760.981:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20555 comm="syz.1.3867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f993ed5cfce code=0x7ffc0000 [ 899.525526][ T29] audit: type=1326 audit(1774476760.981:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20555 comm="syz.1.3867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f993ed9c42b code=0x7ffc0000 [ 899.554418][ T29] audit: type=1326 audit(1774476760.991:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20555 comm="syz.1.3867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f993ed9c42b code=0x7ffc0000 [ 899.556974][T20560] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3869'. [ 899.586997][ T29] audit: type=1326 audit(1774476760.991:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20555 comm="syz.1.3867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f993ed9c42b code=0x7ffc0000 [ 899.611451][T20174] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 899.620429][ T29] audit: type=1326 audit(1774476760.991:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20555 comm="syz.1.3867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f993ed9c42b code=0x7ffc0000 [ 899.773956][T20174] usb 2-1: Using ep0 maxpacket: 8 [ 899.782136][T20174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 899.794208][T20174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 899.804631][T20174] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 899.830497][T20174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 899.863422][T20174] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 899.893469][T20174] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 899.918564][T20174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.957051][T20174] usb 2-1: config 0 descriptor?? [ 899.974632][T20556] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 900.151552][T20174] usb 4-1: USB disconnect, device number 26 [ 900.184475][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 900.184493][ T29] audit: type=1326 audit(1774476761.831:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20555 comm="syz.1.3867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993ed9c799 code=0x7ffc0000 [ 900.287066][ T29] audit: type=1326 audit(1774476761.861:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20555 comm="syz.1.3867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993ed9c799 code=0x7ffc0000 [ 900.359492][ T29] audit: type=1326 audit(1774476761.881:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20555 comm="syz.1.3867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f993ed9c799 code=0x7ffc0000 [ 900.413194][ T29] audit: type=1326 audit(1774476761.881:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20555 comm="syz.1.3867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993ed9c799 code=0x7ffc0000 [ 900.438616][ T5954] usb 2-1: USB disconnect, device number 74 [ 900.452732][T12361] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 900.525445][ T29] audit: type=1326 audit(1774476761.881:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20555 comm="syz.1.3867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993ed9c799 code=0x7ffc0000 [ 900.621736][ T29] audit: type=1326 audit(1774476761.881:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20555 comm="syz.1.3867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f993ed9c799 code=0x7ffc0000 [ 900.701383][T20174] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 900.713056][ T29] audit: type=1326 audit(1774476761.881:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20555 comm="syz.1.3867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993ed9c799 code=0x7ffc0000 [ 900.745277][T20579] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3874'. [ 900.762745][ T29] audit: type=1326 audit(1774476761.881:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20555 comm="syz.1.3867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993ed9c799 code=0x7ffc0000 [ 900.821899][ T5954] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 900.837922][ T29] audit: type=1326 audit(1774476761.881:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20555 comm="syz.1.3867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f993ed5cfce code=0x7ffc0000 [ 900.887436][ T29] audit: type=1326 audit(1774476761.881:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20555 comm="syz.1.3867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993ed9c799 code=0x7ffc0000 [ 900.941376][T20174] usb 4-1: Using ep0 maxpacket: 32 [ 900.948867][T20174] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 900.959585][T20174] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 900.970300][T20174] usb 4-1: config 0 interface 0 has no altsetting 0 [ 900.980979][T20174] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 900.990582][T20174] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.998953][T20174] usb 4-1: Product: syz [ 901.003734][T20174] usb 4-1: Manufacturer: syz [ 901.008369][T20174] usb 4-1: SerialNumber: syz [ 901.011929][ T5954] usb 5-1: Using ep0 maxpacket: 16 [ 901.020556][T20174] usb 4-1: config 0 descriptor?? [ 901.052435][ T5954] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 901.100778][ T5954] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 901.124518][ T5954] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 901.137655][ T5954] usb 5-1: config 0 interface 0 has no altsetting 0 [ 901.158469][ T5954] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 901.181798][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.195527][ T5954] usb 5-1: config 0 descriptor?? [ 901.438319][T20174] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 901.482233][ T796] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 901.644253][ T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 901.655690][ T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 901.666218][ T796] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 901.679761][ T796] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 901.689959][ T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.705718][ T796] usb 2-1: config 0 descriptor?? [ 902.299991][T20606] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3880'. [ 902.737728][ T5954] usbhid 5-1:0.0: can't add hid device: -71 [ 902.744241][ T5954] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 902.757945][ T5954] usb 5-1: USB disconnect, device number 83 [ 903.191388][T20174] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 903.345301][T20174] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 903.355900][T20174] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 903.370382][T20174] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 903.379868][T20174] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 903.388391][T20174] usb 5-1: Manufacturer: syz [ 903.396635][T20174] usb 5-1: config 0 descriptor?? [ 903.405445][T20174] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 905.574904][T20624] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 905.592741][T20624] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 906.369482][T12361] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 906.431934][T20627] netlink: 'syz.7.3886': attribute type 1 has an invalid length. [ 906.724526][ T796] usbhid 2-1:0.0: can't add hid device: -32 [ 906.730573][ T796] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 906.945304][ T796] usb 4-1: USB disconnect, device number 27 [ 907.007148][ T5954] usb 5-1: USB disconnect, device number 84 [ 907.095319][T15530] usb 2-1: USB disconnect, device number 75 [ 907.274154][T20646] FAULT_INJECTION: forcing a failure. [ 907.274154][T20646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 907.307820][T20646] CPU: 1 UID: 0 PID: 20646 Comm: syz.7.3892 Tainted: G L syzkaller #0 PREEMPT(full) [ 907.307850][T20646] Tainted: [L]=SOFTLOCKUP [ 907.307857][T20646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 907.307867][T20646] Call Trace: [ 907.307874][T20646] [ 907.307882][T20646] dump_stack_lvl+0xe8/0x150 [ 907.307914][T20646] should_fail_ex+0x412/0x560 [ 907.307943][T20646] _copy_from_user+0x2d/0xb0 [ 907.307965][T20646] ___sys_sendmsg+0x1c6/0x360 [ 907.307993][T20646] ? __pfx____sys_sendmsg+0x10/0x10 [ 907.308041][T20646] ? __fget_files+0x2a/0x420 [ 907.308066][T20646] ? __fget_files+0x3a0/0x420 [ 907.308099][T20646] __x64_sys_sendmsg+0x1bd/0x2a0 [ 907.308121][T20646] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 907.308149][T20646] ? __pfx_ksys_write+0x10/0x10 [ 907.308177][T20646] do_syscall_64+0x14d/0xf80 [ 907.308198][T20646] ? trace_irq_disable+0x3b/0x150 [ 907.308222][T20646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.308241][T20646] ? clear_bhb_loop+0x40/0x90 [ 907.308261][T20646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.308278][T20646] RIP: 0033:0x7fe203f9c799 [ 907.308294][T20646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 907.308309][T20646] RSP: 002b:00007fe2021ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 907.308327][T20646] RAX: ffffffffffffffda RBX: 00007fe204215fa0 RCX: 00007fe203f9c799 [ 907.308339][T20646] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 907.308350][T20646] RBP: 00007fe2021ee090 R08: 0000000000000000 R09: 0000000000000000 [ 907.308361][T20646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 907.308372][T20646] R13: 00007fe204216038 R14: 00007fe204215fa0 R15: 00007fe20433fa48 [ 907.308400][T20646] [ 907.765105][T20668] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3898'. [ 908.925196][T20706] FAULT_INJECTION: forcing a failure. [ 908.925196][T20706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 908.943600][T20706] CPU: 0 UID: 0 PID: 20706 Comm: syz.4.3906 Tainted: G L syzkaller #0 PREEMPT(full) [ 908.943629][T20706] Tainted: [L]=SOFTLOCKUP [ 908.943636][T20706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 908.943647][T20706] Call Trace: [ 908.943653][T20706] [ 908.943660][T20706] dump_stack_lvl+0xe8/0x150 [ 908.943689][T20706] should_fail_ex+0x412/0x560 [ 908.943717][T20706] _copy_from_user+0x2d/0xb0 [ 908.943738][T20706] __copy_msghdr+0x3c5/0x5b0 [ 908.943762][T20706] ___sys_sendmsg+0x213/0x360 [ 908.943785][T20706] ? __pfx____sys_sendmsg+0x10/0x10 [ 908.943831][T20706] ? __fget_files+0x2a/0x420 [ 908.943855][T20706] ? __fget_files+0x3a0/0x420 [ 908.943887][T20706] __x64_sys_sendmsg+0x1bd/0x2a0 [ 908.943910][T20706] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 908.943940][T20706] ? __pfx_ksys_write+0x10/0x10 [ 908.943970][T20706] do_syscall_64+0x14d/0xf80 [ 908.943998][T20706] ? trace_irq_disable+0x3b/0x150 [ 908.944025][T20706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.944042][T20706] ? clear_bhb_loop+0x40/0x90 [ 908.944065][T20706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.944082][T20706] RIP: 0033:0x7f7e3079c799 [ 908.944100][T20706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 908.944115][T20706] RSP: 002b:00007f7e316cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 908.944135][T20706] RAX: ffffffffffffffda RBX: 00007f7e30a15fa0 RCX: 00007f7e3079c799 [ 908.944148][T20706] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 908.944160][T20706] RBP: 00007f7e316cf090 R08: 0000000000000000 R09: 0000000000000000 [ 908.944171][T20706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 908.944182][T20706] R13: 00007f7e30a16038 R14: 00007f7e30a15fa0 R15: 00007f7e30b3fa48 [ 908.944211][T20706] [ 909.178787][T20710] syzkaller0: entered promiscuous mode [ 909.184595][T20710] syzkaller0: entered allmulticast mode [ 909.457858][T20724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3910'. [ 909.523983][T20726] blktrace: Concurrent blktraces are not allowed on nullb0 [ 909.842165][ T796] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 909.982730][T15530] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 910.001639][ T796] usb 5-1: Using ep0 maxpacket: 32 [ 910.015356][ T796] usb 5-1: config 1 has an invalid interface number: 112 but max is 0 [ 910.030279][ T796] usb 5-1: config 1 has an invalid descriptor of length 123, skipping remainder of the config [ 910.053052][ T796] usb 5-1: config 1 has no interface number 0 [ 910.075737][ T796] usb 5-1: too many endpoints for config 1 interface 112 altsetting 144: 119, using maximum allowed: 30 [ 910.089539][ T796] usb 5-1: config 1 interface 112 altsetting 144 has 0 endpoint descriptors, different from the interface descriptor's value: 119 [ 910.104502][ T796] usb 5-1: config 1 interface 112 has no altsetting 0 [ 910.116864][ T796] usb 5-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.40 [ 910.129112][ T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.139140][ T796] usb 5-1: Product: syz [ 910.146553][ T796] usb 5-1: Manufacturer: syz [ 910.155638][T15530] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 910.168073][ T796] usb 5-1: SerialNumber: syz [ 910.177373][T15530] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.188355][T15530] usb 4-1: Product: syz [ 910.199746][T15530] usb 4-1: Manufacturer: syz [ 910.206927][T15530] usb 4-1: SerialNumber: syz [ 910.415523][ T796] usb 5-1: USB disconnect, device number 85 [ 910.553864][T20748] Cannot find set identified by id 1 to match [ 910.848319][T15530] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 910.892984][T15530] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 910.935891][T15530] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 910.996352][T15530] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 911.032821][T15530] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 911.095087][T15530] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 911.154437][T15530] usb 4-1: USB disconnect, device number 28 [ 911.167689][T20750] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3921'. [ 911.366157][T20755] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3920'. [ 911.432075][T20755] netlink: 'syz.4.3920': attribute type 4 has an invalid length. [ 911.632018][T20766] netlink: 'syz.4.3920': attribute type 4 has an invalid length. [ 911.912447][T20175] usb 2-1: new low-speed USB device number 76 using dummy_hcd [ 912.009107][T20777] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3926'. [ 912.113238][T20175] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 912.121741][T20175] usb 2-1: config 0 has no interface number 0 [ 912.145071][T20175] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 912.179412][T20175] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 912.228055][T20175] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 912.272905][T20175] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 912.313620][T20175] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 912.351634][T20175] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 912.398706][T20175] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 912.438531][T20175] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.502802][T20175] usb 2-1: config 0 descriptor?? [ 912.518600][T20765] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 912.528437][T20765] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 912.543429][T20175] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 912.758360][T20765] ldusb 2-1:0.55: Write buffer overflow, 1 bytes dropped [ 912.778874][T20765] netlink: 'syz.1.3925': attribute type 32 has an invalid length. [ 913.097310][T20784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3929'. [ 913.110847][T20785] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 913.129652][T20785] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 913.391790][ T5954] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 913.547287][ T5954] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 913.567309][ T5954] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 913.579173][ T5954] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 913.593685][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 913.606444][ T5954] usb 4-1: SerialNumber: syz [ 913.835219][ T5954] usb 4-1: 0:2 : does not exist [ 913.841957][T15530] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 913.888297][ T5954] usb 4-1: USB disconnect, device number 29 [ 913.997427][T15530] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 914.007422][T15530] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 914.016569][T15530] usb 5-1: Product: syz [ 914.020850][T15530] usb 5-1: Manufacturer: syz [ 914.026181][T15530] usb 5-1: SerialNumber: syz [ 914.034065][T15530] usb 5-1: config 0 descriptor?? [ 914.243713][T15530] peak_usb 5-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 914.457186][T15530] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 914.472016][T15530] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 914.484816][T15530] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 914.582797][T15530] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 914.609008][T20800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3933'. [ 914.677312][T15530] usb 5-1: USB disconnect, device number 86 [ 914.677935][T20175] usb 2-1: USB disconnect, device number 76 [ 914.762921][T20175] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 914.995624][T20808] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3935'. [ 915.605120][T20822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3940'. [ 915.620059][T20823] netlink: 'syz.3.3941': attribute type 13 has an invalid length. [ 915.652455][T20823] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.3941'. [ 915.703258][T20827] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3942'. [ 915.942091][T20837] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3945'. [ 916.031549][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 916.031569][ T29] audit: type=1326 audit(1774476777.671:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20836 comm="syz.6.3945" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f14e7b9c799 code=0x0 [ 916.141337][ T5885] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 916.291515][ T5885] usb 4-1: Using ep0 maxpacket: 16 [ 916.300060][ T5885] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 916.313337][ T5885] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 2047, setting to 1024 [ 916.329036][ T5885] usb 4-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 916.338724][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.347492][ T5885] usb 4-1: Product: syz [ 916.352257][ T5885] usb 4-1: Manufacturer: syz [ 916.357043][ T5885] usb 4-1: SerialNumber: syz [ 916.629681][ T5885] usb 4-1: USB disconnect, device number 30 [ 916.966191][T20853] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 917.187982][T20862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3953'. [ 917.241899][ T796] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 917.261124][ T29] audit: type=1326 audit(1774476778.901:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20856 comm="syz.6.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e7b9c799 code=0x7ffc0000 [ 917.294627][ T29] audit: type=1326 audit(1774476778.901:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20856 comm="syz.6.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e7b9c799 code=0x7ffc0000 [ 917.319936][ T29] audit: type=1326 audit(1774476778.901:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20856 comm="syz.6.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e7b9c799 code=0x7ffc0000 [ 917.348045][ T29] audit: type=1326 audit(1774476778.901:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20856 comm="syz.6.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e7b9c799 code=0x7ffc0000 [ 917.373258][ T29] audit: type=1326 audit(1774476778.901:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20856 comm="syz.6.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e7b9c799 code=0x7ffc0000 [ 917.402729][ T29] audit: type=1326 audit(1774476778.931:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20856 comm="syz.6.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f14e7b9c799 code=0x7ffc0000 [ 917.442072][ T29] audit: type=1326 audit(1774476778.931:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20856 comm="syz.6.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e7b9c799 code=0x7ffc0000 [ 917.442194][ T796] usb 5-1: Using ep0 maxpacket: 32 [ 917.465712][ T29] audit: type=1326 audit(1774476778.931:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20856 comm="syz.6.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e7b9c799 code=0x7ffc0000 [ 917.475990][ T796] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 917.507166][ T796] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 917.516528][ T29] audit: type=1326 audit(1774476778.931:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20856 comm="syz.6.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e7b9c799 code=0x7ffc0000 [ 917.551991][ T796] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 917.564737][ T796] usb 5-1: Product: syz [ 917.581555][ T796] usb 5-1: Manufacturer: syz [ 917.586193][ T796] usb 5-1: SerialNumber: syz [ 917.620912][ T796] usb 5-1: config 0 descriptor?? [ 917.626858][T20853] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 917.671751][ T5954] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 917.822825][ T5954] usb 2-1: Using ep0 maxpacket: 16 [ 917.826448][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 917.826502][ T5954] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 917.826521][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.828544][ T5954] usb 2-1: config 0 descriptor?? [ 917.831372][T20175] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 917.881016][ T796] usb 5-1: USB disconnect, device number 87 [ 917.991379][T20175] usb 4-1: Using ep0 maxpacket: 16 [ 918.003518][T20175] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 918.015290][T20175] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 918.029113][T20175] usb 4-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 918.041861][T20175] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.069019][T20175] usb 4-1: config 0 descriptor?? [ 918.246354][ T5954] mcp2221 0003:04D8:00DD.0037: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 918.303096][T20870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 918.340159][T20870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 918.351781][T20174] usb 5-1: new low-speed USB device number 88 using dummy_hcd [ 918.450608][T20870] Cannot find set identified by id 1 to match [ 918.544354][T20174] usb 5-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0x73, changing to 0x3 [ 918.589909][T20174] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 918.636537][T20174] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 918.671006][T20869] xt_TCPMSS: Only works on TCP SYN packets [ 918.677062][T20174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.733030][T20879] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3958'. [ 918.899851][T20174] usb 5-1: string descriptor 0 read error: -71 [ 918.907514][T20174] hub 5-1:32.0: bad descriptor, ignoring hub [ 918.914340][T20174] hub 5-1:32.0: probe with driver hub failed with error -5 [ 919.032871][T20174] usb 5-1: USB disconnect, device number 88 [ 919.553561][T20888] fuse: Bad value for 'fd' [ 919.861916][T15530] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 920.043292][T15530] usb 5-1: not running at top speed; connect to a high speed hub [ 920.065876][T15530] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 920.086003][T15530] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.106157][T15530] usb 5-1: Product: syz [ 920.116542][T15530] usb 5-1: Manufacturer: syz [ 920.131092][T15530] usb 5-1: SerialNumber: syz [ 920.294280][ T5885] usb 2-1: USB disconnect, device number 77 [ 920.372705][T20889] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3959'. [ 920.526945][T20175] usbhid 4-1:0.0: can't add hid device: -71 [ 920.563352][T20175] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 920.578771][T20900] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3965'. [ 920.613741][T20175] usb 4-1: USB disconnect, device number 31 [ 920.723031][ T5885] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 920.794264][T20907] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3966'. [ 920.818225][T20904] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3967'. [ 920.830173][T20904] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3967'. [ 920.847967][T20907] netlink: 'syz.3.3966': attribute type 4 has an invalid length. [ 920.902981][T20909] netlink: 'syz.3.3966': attribute type 4 has an invalid length. [ 920.920524][ T5885] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 921.007164][ T5885] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 921.024136][T20911] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3968'. [ 921.052757][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 921.052776][ T29] audit: type=1326 audit(1774476782.701:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20896 comm="syz.1.3964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f993ed9c42b code=0x7ffc0000 [ 921.089115][ T5885] usb 2-1: New USB device found, idVendor=08b7, idProduct=8000, bcdDevice= 0.00 [ 921.108925][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 921.123995][ T5885] usb 2-1: SerialNumber: syz [ 921.145581][ T29] audit: type=1326 audit(1774476782.731:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20896 comm="syz.1.3964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f993ed9c42b code=0x7ffc0000 [ 921.236124][ T29] audit: type=1326 audit(1774476782.731:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20896 comm="syz.1.3964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f993ed9c42b code=0x7ffc0000 [ 921.319501][ T29] audit: type=1326 audit(1774476782.731:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20896 comm="syz.1.3964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f993ed9c42b code=0x7ffc0000 [ 921.399925][ T5885] usb 2-1: 0:2 : does not exist [ 921.407563][ T29] audit: type=1326 audit(1774476782.831:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20896 comm="syz.1.3964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f993ed9c42b code=0x7ffc0000 [ 921.478806][ T29] audit: type=1326 audit(1774476782.831:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20896 comm="syz.1.3964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f993ed9c42b code=0x7ffc0000 [ 921.527040][ T5885] usb 2-1: USB disconnect, device number 78 [ 921.572603][ T29] audit: type=1326 audit(1774476782.831:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20896 comm="syz.1.3964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f993ed9c42b code=0x7ffc0000 [ 921.688416][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 921.705091][ T29] audit: type=1326 audit(1774476782.831:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20896 comm="syz.1.3964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f993ed5cfce code=0x7ffc0000 [ 921.728771][ T29] audit: type=1326 audit(1774476783.031:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20896 comm="syz.1.3964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993ed9c799 code=0x7ffc0000 [ 921.752944][ T29] audit: type=1326 audit(1774476783.031:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20896 comm="syz.1.3964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993ed9c799 code=0x7ffc0000 [ 922.521362][ T5885] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 922.681396][ T5885] usb 2-1: Using ep0 maxpacket: 32 [ 922.689607][ T5885] usb 2-1: unable to get BOS descriptor or descriptor too short [ 922.699742][ T5885] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 112, changing to 7 [ 922.726145][ T5885] usb 2-1: New USB device found, idVendor=0582, idProduct=0060, bcdDevice= 0.40 [ 922.735904][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.744290][ T5885] usb 2-1: Product: syz [ 922.748649][ T5885] usb 2-1: Manufacturer: syz [ 922.753772][ T5885] usb 2-1: SerialNumber: syz [ 922.932054][ T796] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 922.977152][ T5885] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 923.010720][ T5885] usb 2-1: USB disconnect, device number 79 [ 923.094425][ T796] usb 4-1: config 5 has an invalid interface number: 123 but max is 0 [ 923.116368][ T796] usb 4-1: config 5 has no interface number 0 [ 923.142187][ T796] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 923.155180][ T796] usb 4-1: config 5 interface 123 has no altsetting 0 [ 923.179118][ T796] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 923.190770][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.210863][ T796] usb 4-1: Product: syz [ 923.237080][ T796] usb 4-1: Manufacturer: syz [ 923.254968][ T796] usb 4-1: SerialNumber: syz [ 923.283639][T20941] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 923.423744][T15530] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 923.461157][T15530] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 923.528966][T20949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3978'. [ 923.559321][ T796] ni6501 4-1:5.123: driver 'ni6501' failed to auto-configure device. [ 923.660607][T20947] hsr0: entered promiscuous mode [ 923.666768][ T796] usb 4-1: USB disconnect, device number 32 [ 923.712615][T15530] usb 5-1: USB disconnect, device number 89 [ 923.738171][T20946] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3977'. [ 923.780077][T20946] hsr_slave_0: left promiscuous mode [ 923.852212][T20959] netlink: 196 bytes leftover after parsing attributes in process `syz.6.3980'. [ 923.886949][T20946] hsr_slave_1: left promiscuous mode [ 923.896877][ T5819] udevd[5819]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 923.914873][ T42] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 924.147157][T20964] fuse: Unknown parameter '' [ 924.661718][ T796] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 924.858104][ T796] usb 4-1: Using ep0 maxpacket: 32 [ 924.871973][ T796] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 924.881043][ T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.910515][ T796] usb 4-1: config 0 descriptor?? [ 924.946589][ T796] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 925.555634][ T796] usb 4-1: USB disconnect, device number 33 [ 925.708066][T20994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3991'. [ 925.746107][T20992] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 925.806812][T20998] overlayfs: missing 'lowerdir' [ 925.932843][T21002] ptrace attach of "./syz-executor exec"[10241] was attempted by "\x0a Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ    À 8\x0b [ 926.058340][T21006] ip6erspan0: entered allmulticast mode [ 926.158483][ T5885] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 926.268667][T21010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3994'. [ 926.376732][T21013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3994'. [ 926.567113][T21020] netlink: 'syz.3.3999': attribute type 3 has an invalid length. [ 926.771794][ T42] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 926.933978][ T42] usb 2-1: Using ep0 maxpacket: 16 [ 926.949014][ T42] usb 2-1: config 0 has no interfaces? [ 926.978603][ T42] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 927.000625][ T42] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 927.015355][ T42] usb 2-1: Manufacturer: syz [ 927.023382][ T42] usb 2-1: config 0 descriptor?? [ 927.581433][ T5885] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 927.768504][ T5885] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 927.798720][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.826379][ T5885] usb 5-1: Product: syz [ 927.839852][ T5885] usb 5-1: Manufacturer: syz [ 927.856915][ T5885] usb 5-1: SerialNumber: syz [ 928.283907][ T5885] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 928.334732][ T5885] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 928.394175][ T5885] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 928.447483][ T5885] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 928.481991][ T5885] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 928.507280][ T5885] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 928.591498][ T5885] usb 5-1: USB disconnect, device number 91 [ 929.153766][T21049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4006'. [ 929.195477][T21048] bridge0: port 3(syz_tun) entered blocking state [ 929.236812][ T796] usb 2-1: USB disconnect, device number 81 [ 929.248930][T21048] bridge0: port 3(syz_tun) entered disabled state [ 929.279287][T21048] syz_tun: entered allmulticast mode [ 929.323828][T21048] syz_tun: entered promiscuous mode [ 929.661576][ T796] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 929.832005][ T796] usb 2-1: Using ep0 maxpacket: 16 [ 929.853927][ T796] usb 2-1: config 0 has no interfaces? [ 929.863279][T21062] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4010'. [ 929.865224][ T796] usb 2-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=82.8f [ 929.883000][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.900541][ T796] usb 2-1: Product: syz [ 929.906041][ T796] usb 2-1: Manufacturer: syz [ 929.910857][ T796] usb 2-1: SerialNumber: syz [ 929.942830][ T796] usb 2-1: config 0 descriptor?? [ 930.241718][T15525] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 930.388775][T21073] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4014'. [ 930.401770][T15525] usb 5-1: Using ep0 maxpacket: 8 [ 930.417465][T15525] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 930.428729][T21073] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4014'. [ 930.438066][T15525] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.446810][T15525] usb 5-1: Product: syz [ 930.454997][T15525] usb 5-1: Manufacturer: syz [ 930.464513][T15525] usb 5-1: SerialNumber: syz [ 930.466505][T21077] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 930.472751][T15525] usb 5-1: config 0 descriptor?? [ 930.515970][T15525] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 930.741319][ T5885] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 930.847975][T15525] gspca_sonixj: reg_r err -71 [ 930.858731][T15525] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 930.899052][ T5885] usb 4-1: device descriptor read/64, error -71 [ 930.938428][T15525] usb 5-1: USB disconnect, device number 92 [ 930.960586][T20174] usb 2-1: USB disconnect, device number 82 [ 931.175736][ T5885] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 931.341715][ T5885] usb 4-1: device descriptor read/64, error -71 [ 931.438089][T21096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4022'. [ 931.461724][ T5885] usb usb4-port1: attempt power cycle [ 931.467785][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.474220][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.821358][ T5885] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 931.843095][ T5885] usb 4-1: device descriptor read/8, error -71 [ 932.091521][ T5885] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 932.113351][ T5885] usb 4-1: device descriptor read/8, error -71 [ 932.223040][ T5885] usb usb4-port1: unable to enumerate USB device [ 932.575751][T21118] sg_write: data in/out 439260/178 bytes for SCSI command 0x0-- guessing data in; [ 932.575751][T21118] program syz.4.4031 not setting count and/or reply_len properly [ 932.946422][T21140] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4041'. [ 932.960839][T21132] netlink: 'syz.4.4037': attribute type 6 has an invalid length. [ 933.104290][T21147] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4043'. [ 935.554186][T21259] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4091'. [ 935.783284][T21259] bridge_slave_0 (unregistering): left allmulticast mode [ 935.835930][T21259] bridge_slave_0 (unregistering): left promiscuous mode [ 935.871836][T21259] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.676734][T21296] xt_hashlimit: size too large, truncated to 1048576 [ 937.130704][T21317] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4119'. [ 937.250177][T21322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4121'. [ 937.517344][T21327] team0 (unregistering): Port device team_slave_0 removed [ 937.562672][T21327] team0 (unregistering): Port device team_slave_1 removed [ 937.795696][T21347] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4133'. [ 938.167256][T21362] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4140'. [ 938.214769][T21362] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4140'. [ 940.330540][T21445] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 940.362004][T21445] netlink: 'syz.4.4177': attribute type 3 has an invalid length. [ 940.370040][T21445] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4177'. [ 940.441884][T21445] ------------[ cut here ]------------ [ 940.447405][T21445] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 940.460205][T21445] WARNING: net/sched/cls_u32.c:855 at u32_change+0x1da0/0x2720, CPU#1: syz.4.4177/21445 [ 940.470987][T21445] Modules linked in: [ 940.476428][T21445] CPU: 1 UID: 0 PID: 21445 Comm: syz.4.4177 Tainted: G L syzkaller #0 PREEMPT(full) [ 940.488543][T21445] Tainted: [L]=SOFTLOCKUP [ 940.493506][T21445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 940.504538][T21445] RIP: 0010:u32_change+0x1daf/0x2720 [ 940.510051][T21445] Code: 3d 2a 4b 43 06 01 75 33 e8 ee 57 0d f8 eb 50 e8 e7 57 0d f8 48 8d 3d 50 7c 68 06 b9 10 00 00 00 4c 89 f6 48 c7 c2 00 97 e1 8c <67> 48 0f b9 3a e9 af ee ff ff e8 c2 57 0d f8 eb 24 e8 bb 57 0d f8 [ 940.530172][T21445] RSP: 0018:ffffc900054defc0 EFLAGS: 00010283 [ 940.537826][T21445] RAX: ffffffff89b84a49 RBX: ffff88807a67a400 RCX: 0000000000000010 [ 940.548806][T21445] RDX: ffffffff8ce19700 RSI: 0000000000000020 RDI: ffffffff9020c6a0 [ 940.558547][T21445] RBP: ffffc900054df178 R08: 0000000000000dc0 R09: 00000000ffffffff [ 940.568623][T21445] R10: dffffc0000000000 R11: fffffbfff2023677 R12: ffff88807a67a8e8 [ 940.577718][T21445] R13: 0000000000000001 R14: 0000000000000020 R15: 0000000000000001 [ 940.587772][T21445] FS: 00007f7e316cf6c0(0000) GS:ffff88812555d000(0000) knlGS:0000000000000000 [ 940.598556][T21445] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 940.606573][T21445] CR2: 00007fa6643456b8 CR3: 0000000080ec8000 CR4: 00000000003526f0 [ 940.616043][T21445] DR0: 0000000000000000 DR1: 0000000000010000 DR2: 0000000000000000 [ 940.624939][T21445] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 940.633042][T21445] Call Trace: [ 940.636343][T21445] [ 940.639315][T21445] ? __pfx_u32_change+0x10/0x10 [ 940.645910][T21445] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 940.652313][T21445] tc_new_tfilter+0xff8/0x1780 [ 940.657773][T21445] ? __pfx_tc_new_tfilter+0x10/0x10 [ 940.663613][T21445] ? is_bpf_text_address+0x26/0x2b0 [ 940.668879][T21445] ? __pfx_tc_new_tfilter+0x10/0x10 [ 940.674735][T21445] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 940.679843][T21445] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 940.685574][T21445] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 940.691077][T21445] ? __lock_acquire+0x6b5/0x2cf0 [ 940.696632][T21445] netlink_rcv_skb+0x232/0x4b0 [ 940.702395][T21445] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 940.707901][T21445] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 940.714288][T21445] ? netlink_deliver_tap+0x2e/0x1b0 [ 940.719980][T21445] netlink_unicast+0x80f/0x9b0 [ 940.726736][T21445] ? __pfx_netlink_unicast+0x10/0x10 [ 940.732676][T21445] ? netlink_sendmsg+0x650/0xb40 [ 940.737656][T21445] ? skb_put+0x11b/0x210 [ 940.742658][T21445] netlink_sendmsg+0x813/0xb40 [ 940.747477][T21445] ? __pfx_netlink_sendmsg+0x10/0x10 [ 940.753355][T21445] ? aa_sock_msg_perm+0xf1/0x1b0 [ 940.758341][T21445] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 940.764205][T21445] ____sys_sendmsg+0x972/0x9f0 [ 940.769019][T21445] ? __pfx_____sys_sendmsg+0x10/0x10 [ 940.774996][T21445] ? import_iovec+0x73/0xa0 [ 940.779544][T21445] ___sys_sendmsg+0x2a5/0x360 [ 940.784917][T21445] ? __pfx____sys_sendmsg+0x10/0x10 [ 940.790167][T21445] ? __pfx_futex_wake_mark+0x10/0x10 [ 940.796056][T21445] ? __fget_files+0x2a/0x420 [ 940.800780][T21445] ? __fget_files+0x3a0/0x420 [ 940.807159][T21445] __sys_sendmmsg+0x27c/0x4e0 [ 940.812773][T21445] ? __pfx___sys_sendmmsg+0x10/0x10 [ 940.818011][T21445] ? do_futex+0x333/0x420 [ 940.823022][T21445] ? rcu_is_watching+0x15/0xb0 [ 940.827836][T21445] __x64_sys_sendmmsg+0xa0/0xc0 [ 940.833317][T21445] do_syscall_64+0x14d/0xf80 [ 940.837935][T21445] ? trace_irq_disable+0x3b/0x150 [ 940.843552][T21445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.849648][T21445] ? clear_bhb_loop+0x40/0x90 [ 940.854892][T21445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.860809][T21445] RIP: 0033:0x7f7e3079c799 [ 940.865711][T21445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 940.885429][T21445] RSP: 002b:00007f7e316cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 940.894451][T21445] RAX: ffffffffffffffda RBX: 00007f7e30a15fa0 RCX: 00007f7e3079c799 [ 940.903027][T21445] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000006 [ 940.911489][T21445] RBP: 00007f7e30832c99 R08: 0000000000000000 R09: 0000000000000000 [ 940.919487][T21445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 940.928422][T21445] R13: 00007f7e30a16038 R14: 00007f7e30a15fa0 R15: 00007f7e30b3fa48 [ 940.937010][T21445] [ 940.940062][T21445] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 940.947358][T21445] CPU: 1 UID: 0 PID: 21445 Comm: syz.4.4177 Tainted: G L syzkaller #0 PREEMPT(full) [ 940.958313][T21445] Tainted: [L]=SOFTLOCKUP [ 940.962646][T21445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 940.972714][T21445] Call Trace: [ 940.976022][T21445] [ 940.978966][T21445] vpanic+0x56c/0xa60 [ 940.983010][T21445] ? __pfx__printk+0x10/0x10 [ 940.987623][T21445] ? __pfx_vpanic+0x10/0x10 [ 940.992149][T21445] ? is_bpf_text_address+0x292/0x2b0 [ 940.997452][T21445] ? is_bpf_text_address+0x26/0x2b0 [ 941.002661][T21445] panic+0xc5/0xd0 [ 941.006381][T21445] ? __pfx_panic+0x10/0x10 [ 941.010808][T21445] __warn+0x315/0x4f0 [ 941.014787][T21445] ? u32_change+0x1da0/0x2720 [ 941.019652][T21445] ? u32_change+0x1da0/0x2720 [ 941.024341][T21445] __report_bug+0x29a/0x540 [ 941.028939][T21445] ? ___sys_sendmsg+0x2a5/0x360 [ 941.033785][T21445] ? __sys_sendmmsg+0x27c/0x4e0 [ 941.038629][T21445] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 941.043659][T21445] ? u32_change+0x1da0/0x2720 [ 941.048336][T21445] ? __pfx___report_bug+0x10/0x10 [ 941.053370][T21445] report_bug_entry+0x19a/0x290 [ 941.058218][T21445] ? u32_change+0x1daf/0x2720 [ 941.062884][T21445] ? u32_change+0x1db4/0x2720 [ 941.067549][T21445] handle_bug+0xce/0x200 [ 941.071788][T21445] exc_invalid_op+0x1a/0x50 [ 941.076283][T21445] asm_exc_invalid_op+0x1a/0x20 [ 941.081122][T21445] RIP: 0010:u32_change+0x1daf/0x2720 [ 941.086403][T21445] Code: 3d 2a 4b 43 06 01 75 33 e8 ee 57 0d f8 eb 50 e8 e7 57 0d f8 48 8d 3d 50 7c 68 06 b9 10 00 00 00 4c 89 f6 48 c7 c2 00 97 e1 8c <67> 48 0f b9 3a e9 af ee ff ff e8 c2 57 0d f8 eb 24 e8 bb 57 0d f8 [ 941.105995][T21445] RSP: 0018:ffffc900054defc0 EFLAGS: 00010283 [ 941.112143][T21445] RAX: ffffffff89b84a49 RBX: ffff88807a67a400 RCX: 0000000000000010 [ 941.120104][T21445] RDX: ffffffff8ce19700 RSI: 0000000000000020 RDI: ffffffff9020c6a0 [ 941.128065][T21445] RBP: ffffc900054df178 R08: 0000000000000dc0 R09: 00000000ffffffff [ 941.136023][T21445] R10: dffffc0000000000 R11: fffffbfff2023677 R12: ffff88807a67a8e8 [ 941.143980][T21445] R13: 0000000000000001 R14: 0000000000000020 R15: 0000000000000001 [ 941.151980][T21445] ? u32_change+0x1d99/0x2720 [ 941.156680][T21445] ? __pfx_u32_change+0x10/0x10 [ 941.161523][T21445] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 941.167172][T21445] tc_new_tfilter+0xff8/0x1780 [ 941.171978][T21445] ? __pfx_tc_new_tfilter+0x10/0x10 [ 941.177278][T21445] ? is_bpf_text_address+0x26/0x2b0 [ 941.182522][T21445] ? __pfx_tc_new_tfilter+0x10/0x10 [ 941.187724][T21445] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 941.192700][T21445] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 941.197909][T21445] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 941.203393][T21445] ? __lock_acquire+0x6b5/0x2cf0 [ 941.208345][T21445] netlink_rcv_skb+0x232/0x4b0 [ 941.213210][T21445] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 941.218695][T21445] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 941.224490][T21445] ? netlink_deliver_tap+0x2e/0x1b0 [ 941.229708][T21445] netlink_unicast+0x80f/0x9b0 [ 941.234479][T21445] ? __pfx_netlink_unicast+0x10/0x10 [ 941.239930][T21445] ? netlink_sendmsg+0x650/0xb40 [ 941.244858][T21445] ? skb_put+0x11b/0x210 [ 941.249145][T21445] netlink_sendmsg+0x813/0xb40 [ 941.254010][T21445] ? __pfx_netlink_sendmsg+0x10/0x10 [ 941.259395][T21445] ? aa_sock_msg_perm+0xf1/0x1b0 [ 941.264338][T21445] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 941.269706][T21445] ____sys_sendmsg+0x972/0x9f0 [ 941.274472][T21445] ? __pfx_____sys_sendmsg+0x10/0x10 [ 941.279757][T21445] ? import_iovec+0x73/0xa0 [ 941.284254][T21445] ___sys_sendmsg+0x2a5/0x360 [ 941.288929][T21445] ? __pfx____sys_sendmsg+0x10/0x10 [ 941.294126][T21445] ? __pfx_futex_wake_mark+0x10/0x10 [ 941.299430][T21445] ? __fget_files+0x2a/0x420 [ 941.304015][T21445] ? __fget_files+0x3a0/0x420 [ 941.308726][T21445] __sys_sendmmsg+0x27c/0x4e0 [ 941.313402][T21445] ? __pfx___sys_sendmmsg+0x10/0x10 [ 941.318785][T21445] ? do_futex+0x333/0x420 [ 941.323147][T21445] ? rcu_is_watching+0x15/0xb0 [ 941.327916][T21445] __x64_sys_sendmmsg+0xa0/0xc0 [ 941.332764][T21445] do_syscall_64+0x14d/0xf80 [ 941.337447][T21445] ? trace_irq_disable+0x3b/0x150 [ 941.342565][T21445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.348653][T21445] ? clear_bhb_loop+0x40/0x90 [ 941.353375][T21445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.359264][T21445] RIP: 0033:0x7f7e3079c799 [ 941.363676][T21445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 941.383551][T21445] RSP: 002b:00007f7e316cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 941.391986][T21445] RAX: ffffffffffffffda RBX: 00007f7e30a15fa0 RCX: 00007f7e3079c799 [ 941.400048][T21445] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000006 [ 941.408663][T21445] RBP: 00007f7e30832c99 R08: 0000000000000000 R09: 0000000000000000 [ 941.416660][T21445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 941.424662][T21445] R13: 00007f7e30a16038 R14: 00007f7e30a15fa0 R15: 00007f7e30b3fa48 [ 941.432669][T21445] [ 941.436162][T21445] Kernel Offset: disabled [ 941.440475][T21445] Rebooting in 86400 seconds..