last executing test programs: 2m46.396146824s ago: executing program 4 (id=166): socket(0x2, 0xa, 0x300) r0 = socket(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r4, 0x6, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x2040400) r6 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r6, 0x0, 0x0) r7 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r7, 0xc02c564a, &(0x7f0000001b00)={0x0, 0x34325842, 0x1, @discrete={0x1, 0x100}}) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2fc, 0x18c, 0x203, 0x0, 0x19030000, 0x3e8, 0x2e0, 0x2e0, 0x3e8, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x2fc, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0xfffc, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {0xffff}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0x10}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x50c) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r8 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r8, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000019240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') fsopen(&(0x7f0000000040)='hpfs\x00', 0x1) 2m43.462132809s ago: executing program 4 (id=173): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffffffffffe3e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000240)=[0x0, 0x0]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x10, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x3, @remote}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x1) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1e5) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000005c0)=ANY=[]) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x1}}, './file0\x00'}) connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e21, @multicast1}, 0x10) close(r3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 2m42.11203822s ago: executing program 4 (id=175): socket$nl_netfilter(0x10, 0x3, 0xc) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xfc9, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r2, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x2, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000002680)=[0x0], 0x1}) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000001c0)=0x9) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000140)={{0x1, 0x3, 0xf6, 0x2, 0x2}, 0xfffffffffffffff9, 0x5, 0x7fffffffffffffff}) ppoll(&(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) 2m38.26963239s ago: executing program 4 (id=182): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) unshare(0x24060400) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x7, 0x2}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000001c0)='ip_vti0\x00', 0x54) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x4, 0x0, 0x3, r6}, 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r8, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x80000}) r10 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r10, 0x9, 0x4) syz_open_procfs(0x0, 0x0) 2m35.90044775s ago: executing program 4 (id=186): syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82083, 0x10c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000100)=0x1ff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) io_uring_setup(0x3780, &(0x7f00000002c0)={0x0, 0x9cc2, 0x10000, 0x0, 0x28}) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000c32000/0x3000)=nil, &(0x7f0000a6f000/0x3000)=nil, &(0x7f0000a38000/0x2000)=nil, &(0x7f0000de3000/0x3000)=nil, &(0x7f0000eb6000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000acd000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f00000c0000/0x2000)=nil, &(0x7f000028b000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x24e6, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f7}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000080)={0x3, "00d06a"}, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000180)={0x1, 0x9, [@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @random="000000001698", @empty, @remote, @multicast]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2m32.405854134s ago: executing program 4 (id=192): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffc, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) io_uring_setup(0x7e55, 0x0) syz_clone(0x104680, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, 0x0) r6 = syz_io_uring_setup(0x88f, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x8001) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r8}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r10, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, &(0x7f0000001200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_netfilter(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xfffffffffffffdfb, &(0x7f0000000300)={&(0x7f0000000200)={0x1c, 0xd, 0x5, 0x801, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0xa}, [@nested={0x8, 0x3d, 0x0, 0x1, [@nested={0x4, 0xbb}]}]}, 0x1c}}, 0x80) sendmmsg$inet(r7, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="d4", 0x1}], 0x1, &(0x7f00000006c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xfd}}, @ip_retopts={{0xb0, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x10, 0x3, 0x7, [{@rand_addr=0x64010101, 0x3}, {@broadcast, 0x6}, {@empty, 0xffffffff}]}, @cipso={0x86, 0xa, 0xffffffffffffffff, [{0x5, 0x2}, {0x6, 0x2}]}, @rr={0x7, 0x3b, 0x3f, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @empty, @multicast1, @broadcast, @local, @private=0xa010100, @empty, @rand_addr=0x64010101, @remote, @loopback, @rand_addr=0x64010102, @empty, @broadcast]}, @timestamp_prespec={0x44, 0x3c, 0x9, 0x3, 0x3, [{@remote, 0x4}, {@loopback, 0x6}, {@remote, 0x2}, {@local, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x6}, {@private=0xa010102, 0xfffffff7}, {@loopback, 0x200}]}]}}}], 0xc8}}, {{&(0x7f0000001900)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000001c40)=[{&(0x7f0000001940)="9513", 0x2}], 0x1, &(0x7f0000001d40)}}], 0x2, 0x20040000) ioctl$TCSETSF(r0, 0x5404, 0x0) r11 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x4, 0x13, r11, 0x0) 2m17.175212735s ago: executing program 32 (id=192): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffc, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) io_uring_setup(0x7e55, 0x0) syz_clone(0x104680, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, 0x0) r6 = syz_io_uring_setup(0x88f, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x8001) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r8}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r10, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, &(0x7f0000001200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_netfilter(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xfffffffffffffdfb, &(0x7f0000000300)={&(0x7f0000000200)={0x1c, 0xd, 0x5, 0x801, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0xa}, [@nested={0x8, 0x3d, 0x0, 0x1, [@nested={0x4, 0xbb}]}]}, 0x1c}}, 0x80) sendmmsg$inet(r7, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="d4", 0x1}], 0x1, &(0x7f00000006c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xfd}}, @ip_retopts={{0xb0, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x10, 0x3, 0x7, [{@rand_addr=0x64010101, 0x3}, {@broadcast, 0x6}, {@empty, 0xffffffff}]}, @cipso={0x86, 0xa, 0xffffffffffffffff, [{0x5, 0x2}, {0x6, 0x2}]}, @rr={0x7, 0x3b, 0x3f, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @empty, @multicast1, @broadcast, @local, @private=0xa010100, @empty, @rand_addr=0x64010101, @remote, @loopback, @rand_addr=0x64010102, @empty, @broadcast]}, @timestamp_prespec={0x44, 0x3c, 0x9, 0x3, 0x3, [{@remote, 0x4}, {@loopback, 0x6}, {@remote, 0x2}, {@local, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x6}, {@private=0xa010102, 0xfffffff7}, {@loopback, 0x200}]}]}}}], 0xc8}}, {{&(0x7f0000001900)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000001c40)=[{&(0x7f0000001940)="9513", 0x2}], 0x1, &(0x7f0000001d40)}}], 0x2, 0x20040000) ioctl$TCSETSF(r0, 0x5404, 0x0) r11 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x4, 0x13, r11, 0x0) 9.868983869s ago: executing program 0 (id=814): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) socket$packet(0x11, 0x3, 0x300) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendto$inet(r0, &(0x7f0000000cc0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95916bcfc99c6eadc28f6769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe034fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca9b06a3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e74215fea43703a4e543ee9d1a3c3f5f2a41977ece8fdadcf89ce331ce59bebae5f53513d0e104839602510b3a23ea29a0d5d03a61e34d12942ea4a847c884b27b5344a456d02a55f8929cc567e7c792c01fab7a7b32780a14c361000609b817dd91507b04d875279527946fdb8fb92a512485e234d092c28f1d0a0498731ccc0eb10515d510e8945839307b46512ceca6f495fdd2c6ae5eb2ef3b2a40ebdc7edf0048e3fb5e3d97a9ea5113a6b70d20ad5c43f0df95d88c0f121a1884da21a21f0ba47420f8377a97921cc51871dbb272e43710fe71d5e342c3afd10608a8b02f00e8fbd8d570b6faace86c494ecea8913233391e7b7cec3d571bb3032181ed58e1b513e511f79ee562c8cde9b3b74c2e95dcde7fadb5a666bdc0c1684794620ce8cf0c0aee8e90b3ef6e7160d3f055cb4d1ced32e4edc15e7d102952d3237e6c02c591a95a182bf190c0124abc7f1225332ff1c5e1b94e4e9bf02c1a18bd7bfce20707f7298da322560bc1a4cf298d46f5bf8ff41da21e25aa17f65f9ee43ca890b5ef6a3ccf3efedf3ca60a9acef1352ad0c43e6cf375108cf0974ce9da99adba7e6a3f8949dc573440fafe0e3abdd0066057a2d868e8386080f18a421568d8e7a89536a4173861bd55245c8fcf7dcba18edce36d2e85b9630fbc218db9ebd16abb11ac06fdbf2bc3e6394d4c6e7ae71813d30772d487743a2856348fee09989ce03331e7848770fc91e62191c20fe5f4a73c5dae467dd612bdb63b1e50921d38271305d7412103d5a6214d6d534d1d530b9169f882b6926bbd338f0282a8bd9a44603934e5249e83f1d0947b39f82a7843d2b6f796d8abf7ff3e66cfd4519324d71cebbf6580dffc10d555e479e9acaa12c3c59e3732c181aa4223d0fcdac514e9d7c7963c2634964520286b028f60a4ae612b8e6049315139e884cbffd6836253094ad023329183496cf663366ad4d7f7f5f1bd2db9b0d33f106c041fba4494c63a404d45d8955e5459ca4a62862721ec1f4534fd95e262c5814426816e60000000000000000001aa4fb6f40ec24f42f6949cc28d2a0d4eb61cb1664627582d962523586539445b81e9759321652280ecb75d6b6e815d7ed02", 0x508, 0x40000, 0x0, 0x0) 9.425382881s ago: executing program 0 (id=819): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd7002"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001700)=""/4108, 0x100c}], 0x1}, 0x2000) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4}) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000100)=0x9, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x20, 0x4, [0x2, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x2]}}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r4, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) listen(0xffffffffffffffff, 0xda90) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000040)={0x18, r4}) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) 8.51803771s ago: executing program 1 (id=825): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000000c0)={0x1e, 0x4, 0x8}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b8377a000000d80f300f300fc79d53bf00000f0057000f01c3", 0x61}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.99992783s ago: executing program 1 (id=829): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001340)=@newtfilter={0x64, 0x2c, 0xf3f, 0x32bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xd, 0x4}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_route={{0xa}, {0x34, 0x2, [@TCA_ROUTE4_ACT={0x30, 0x6, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041080}, 0x0) 7.639974614s ago: executing program 1 (id=830): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$xdp(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x13, 0x13, 0xffffffffffffffff, 0x80000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2003, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'netpci0\x00', 0x2}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000040)=ANY=[@ANYBLOB="01000a000180c2000001a5adb7138c1daaaaaaaaaa27aaaaaaaaaaaaffffffffffffffffffffffffaaaaaaaaaebbbbbbbbbbbbbb95ed440b40d40180c200"]) r4 = accept4(r0, 0x0, 0x0, 0x800) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x40483) ioctl$VIDIOC_DQEVENT(r6, 0x80885659, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}], 0x1, 0x40800) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYBLOB='Dr', @ANYRESDEC=0x0, @ANYBLOB="2c67806545e9ae2316", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0xf8, r9, 0x1, 0xfffffffe, 0x0, {}, [@WGDEVICE_A_PEERS={0xd0, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @mcast2, 0x6}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7b4326167f79726ecfae0aeee91d38ba98df91957e9dead91c7bebb4db027bf1"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xff2e}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x40000007, @empty, 0xcd9}}, @WGPEER_A_ALLOWEDIPS={0x4}]}, {0x4}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xf8}}, 0x40000) ioctl$FS_IOC_ENABLE_VERITY(r7, 0x40806685, 0x0) 7.017359395s ago: executing program 0 (id=832): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528aa51fa2d9b48e7167b55d05a1b29e5b8e5b773fcce876b3e9fe15e6330b96d4004cb815d14"], 0x200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56", 0x2d}], 0x1}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x90, 0x29, 0x4, {0x4, 0xe, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0x80, 0xf, "09e12e5f0b6bdcf72f2ec7008a15fa"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}]}}}, @hopopts={{0x118, 0x29, 0x36, {0x5e, 0x1f, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @generic={0x8, 0x97, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd"}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x7, [0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x258}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) mkdirat(r1, &(0x7f0000000340)='./file0\x00', 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.451108848s ago: executing program 0 (id=836): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) unshare(0x24060400) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x7, 0x2}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000001c0)='ip_vti0\x00', 0x54) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x4, 0x0, 0x3, r6}, 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r8, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x80000}) r10 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r10, 0x9, 0x4) syz_open_procfs(0x0, 0x0) 6.232159809s ago: executing program 5 (id=837): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) poll(0x0, 0x0, 0x9) setitimer(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x250000, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000180)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}]}, 0x24}}, 0x8800) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x3c}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x840000000002, 0x3, 0x100) ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, &(0x7f0000000140)={'veth1_to_hsr\x00', {0x2, 0x4e23, @broadcast}}) 5.061446093s ago: executing program 1 (id=840): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.839114756s ago: executing program 0 (id=841): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_io_uring_setup(0x6b0c, 0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000280)={0x1, 0x1, 0x1, 0x1, 0xfffffff7, 0x3}) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) 4.621616575s ago: executing program 1 (id=844): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(0x0, 0x0, 0x9) setitimer(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x250000, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000180)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}]}, 0x24}}, 0x8800) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x3c}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x840000000002, 0x3, 0x100) ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, &(0x7f0000000140)={'veth1_to_hsr\x00', {0x2, 0x4e23, @broadcast}}) 4.29839872s ago: executing program 3 (id=845): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000100)={0x209d, 0x3, 0x0, 0x7ffffff9}, 0x10) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 3.920810197s ago: executing program 5 (id=846): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528aa51fa2d9b48e7167b55d05a1b29e5b8e5b773fcce876b3e9fe15e6330b96d4004cb815d14"], 0x200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56", 0x2d}], 0x1}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x90, 0x29, 0x4, {0x4, 0xe, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0x80, 0xf, "09e12e5f0b6bdcf72f2ec7008a15fa"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}]}}}, @hopopts={{0x118, 0x29, 0x36, {0x5e, 0x1f, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @generic={0x8, 0x97, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd"}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x7, [0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x258}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) mkdirat(r1, &(0x7f0000000340)='./file0\x00', 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.847725356s ago: executing program 3 (id=847): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x1, 0x22, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 3.498905413s ago: executing program 3 (id=848): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg$can_j1939(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000003bc0)=""/111, 0x6f}], 0x1}, 0x10000) sendmmsg$alg(r1, &(0x7f0000001880)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)="2cbddd39dad9edc182feabcec21043acf4901b5df84f6709085697efcd0f", 0x1e}], 0x1, 0x0, 0x0, 0x4}], 0x1, 0x4008000) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, 0x12, 0x4, 0x70bd2a, 0x25dfdbfc, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x95) 3.205753276s ago: executing program 5 (id=849): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket$kcm(0x21, 0x2, 0xa) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000002c0)={0xa002a014}) 3.023981628s ago: executing program 5 (id=850): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0xfffffffe, 0x0, 0x8, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x1, 0xfffffffe, 0x1}) write$snddsp(r2, &(0x7f0000000240)="bf3c", 0x2) 2.812674369s ago: executing program 3 (id=851): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) unshare(0x24060400) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x7, 0x2}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000001c0)='ip_vti0\x00', 0x54) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x4, 0x0, 0x3, r6}, 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r8, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x80000}) r10 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r10, 0x9, 0x4) syz_open_procfs(0x0, 0x0) 2.616969993s ago: executing program 5 (id=852): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x6, 0x8, 0xc97, 0xdd43, 0x10000000004, 0x3c, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 2.478929171s ago: executing program 2 (id=853): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) fcntl$dupfd(r0, 0x406, r0) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x1, 0x6, 0xfa11, 0xffefffff}, 0x0) r1 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000380)={0x2800, @bt={0x2d0, 0x190, 0x1, 0x3, 0xd59f80, 0x4, 0x5, 0xfe, 0x8, 0x5, 0x722, 0xe72, 0x7, 0x7f, 0x3d, 0x14, {0xffff945a, 0x1}, 0x3, 0xed}}) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x2800, 0xd59f83, 0x19f2, 0x42, 0x4, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0xd, 0x23, {0x8, 0xffffffff}, 0xd0, 0x9}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x2c, r4, 0x1, 0x0, 0x30000, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001340)={0x3, &(0x7f0000000080)=[{0x2d, 0x0, 0x1}, {0x0, 0xb, 0xfd}, {0x6, 0x0, 0x0, 0x7ffffdbd}]}) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r5, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) r6 = semget$private(0x0, 0x6, 0x0) semtimedop(r6, &(0x7f0000000200)=[{0x2, 0xc, 0x400}, {0x2, 0x8000, 0x800}], 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) 2.466789709s ago: executing program 1 (id=854): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000000904004001030000000921010000012205"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='P') 1.704663134s ago: executing program 2 (id=855): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000014f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003540)=@vmx={0x100, 0x0, 0x2080, {0x6000, 0x40000, {}, 0x1, 0x9a3}, {"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", "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"}}) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000440)=@svm={0x0, 0x1, 0x1080, {0xeeef0000}, {"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"}}) 1.536568455s ago: executing program 0 (id=856): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) unshare(0x24060400) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x7, 0x2}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000001c0)='ip_vti0\x00', 0x54) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x4, 0x0, 0x3, r6}, 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r8, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x80000}) r10 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r10, 0x9, 0x4) syz_open_procfs(0x0, 0x0) 1.476231749s ago: executing program 5 (id=857): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) poll(0x0, 0x0, 0x9) setitimer(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x250000, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000180)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}]}, 0x24}}, 0x8800) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x3c}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x840000000002, 0x3, 0x100) ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, &(0x7f0000000140)={'veth1_to_hsr\x00', {0x2, 0x4e23, @broadcast}}) 1.402758938s ago: executing program 2 (id=858): socket$kcm(0x11, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)={0x358, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0x33c, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b89e2a3f4810bb6d61bbf5cd155aa93e3a8e0aa9430fd473d267c9e37fe0edc1"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x30}]}, {0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffff9}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x800, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @local}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @remote}}]}, {0x254, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "df5838b7f36d47e264b9efa972ba72f2d03067b5c9ac940143a7ce191e051df4"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0x224, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x358}, 0x1, 0x0, 0x0, 0x20004000}, 0x48850) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 1.144441246s ago: executing program 3 (id=859): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x12510421, 0x0, 0xc, 0x1, 0x56, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006300)="bdf25e6f0d10668122f289a6bf3cc1c9476de5625a0271b8d988a9f5d5e0081242133ed6d905168ffd12a79b9d0245efce333b69021258af0b7f8fcc7b0ce9b48ff73dc5ebaa2a607033a6220a60c4e1348d92f8d0e9c79504518133021220077e1e0b4e0c8d373c779e03dd36c1f9667c8ee6aa56c2b97e9cded8b1738fea65774c4c5dedf7be75405218742aa9f5348129b9893ca01e43a8f648e689adb9776f9008596ca8a749e94b7d7b906945390e6c68fefd7364e749c35484b0a7b4569e8d5bf6fdc06c3ed56c599d61a21ed03ec5b61f74d9a7400e9a0999404ac63d7849d3f1bc1e777d2c180220c4227c492bd3ee3f854e846baf93fa9759ed96fb69c9bc2fca51d1f24a68e735ba5deeb0afc2b017849a1786574a50b6818e3ee1029b2257fe2ede4b065637fcb05632587600d1090b004d4fc3dc8d3576762d06a964bcc7d31f94e09ecec7a999717dd639a3db03df310a0a4f26134d982e80f00d3f1f20693cf36115046f52734d0bafab657131682c6c415168b87cabb42a125fdd6cb8a545b717e1fc301c0798515f201f7ff7bfd35db7605f4ef97a91a6da5d5f88d1455edce0e86ea60901ea22aee508a567dfcf0f3f630d4e8be3a312a5d997bbb8fcc319f32c45fc62b09778bcf810b48a863c1a0ffeac68af383d3bfb60ad9f69f50bb11557bb2e966bd231c49fee49ec8c2174fd3cfd245c56a1c982a1f818a50713df546cf9d01b70e165d371ce0d2ba41c6758c46da7eb8078d2c7f2a2462a32e37129dded20ec3f6169a33d136765d9ae28addf3fbecb633aee9a7ded0ec160b5ce35c92b855ba8362205017afaf9e45758d5e256e35452f6d03ac89712e81445b32dfdd8cdd28a5af8c75df2a27922dbf5cceabff945327b5f4ec2e93c4b367ebc6a54f903567ff1a3f9469a466ecbfef5c39671c9ac29f14de1575de46ba2e933cdeb068259593e73da67f05858ba0cf3e0316aa1a91c21f1a1ccf157b2f4160b86dd67ea854ddd098f34c0421a7ab541b6d105f76ff19afdef08456da28244b25b61162093592e72bc251936db09134f590ca0a1b844244aa054a748b695346a5d49b979b4c69cdad7ef09f615196bfa2918c07e81c325370461cdc50aeb105b3cc51e0a098d9e49118da9c1bb04da247fc4e7876136059fe1ed10042383502b54c6e26082eddf83196d6b2c9410e4217dc8c4c2de483e328ccfbea9c54ab549a23ec98c9db241a67ffd79af97822bcc0a784e8f4e61c83cfb637f4aa1a80027fb2322bca99b65d4d64e93f3484c83ce7f46e12f7accacf74c5d0362198d60de93925e1a631ea6c786843261c49cadf482f3ff541b88d92f801a8610c195ad6e09e4a1bc15f727d09d063e23bfde60585def96e3963978f0686ca079e86032cd23b30222ff0843fa1d0e883d2d75dffc12bab0109b25ff08cf1caeeb7c39e5f438c7b2a9a2a366d32fa9fa0e2885a473ce6b97455d58d941b46faac1f2d8335f276f14232e193be1301416584c47062059e92ece4347c89aa9bf2c12b7c7b5ef7b3bf27ef23367ca3fd037fd9145f84e6852ea3eb624b7622411851134a7ef388e7799df33bfae12a35bdde94de1b10e0e0fe6b40d158409992244a4e27af355aaf7983aceb0ca6c790ecbe5234fd0ad063ae2ee1fe48aff51c35c5553fd1ab998abcb3dd7b0efb2f9c658fc4671e536c0ea75b36d59efe1901e971a750a4fdaf15bc0d1de7681a18c73bd00329d8a7a59c8dde6ee9156759386428a593d9bcbac57f2ec6387dc713703b30e44e655f663947caf4bf15624517bf3f4df16a8ade7193d0a69d998d970c07406a5892dc625a2695bc5c495079f2100ac033f912b5135551c923b61687574b1c43ca81ae9312d668415c8162aea7582b8db90f96181700ac22771b985c0c3f6081cca160efb1bdcabc2177d081ee618ed92c5af569721cc9f0453fe8e512d089a2aa0a219504ff51ba258f6b3737120e7d55e3ceed42c1aef42ac5e969642e3ffa8bc9e7319927ff971d450ac5a8a12ef68747b2574e89a64dcff67a36cbcf0f166371f98825c6eaa8516e27b81b8701d47fbbb87748a771265afff6fdf0acd2e9da1d759523feb0f33a6b27c050cbd5ea833c4859d7c84878253652dc4277a8ad6dd0b1b118e866cb90f7f29cf3a65cd9ba5c5e888c2afdfcef2b9dca883dcb7908c0a2ba0e76d5992430819f4f7d0369c53f737abc75e7f52ed95320dde44bf8b6397ef1ae719eb550a2bcad515ed99246f753d9d344f668c58c2343873b2af2dbb8d0c1c3280a5e8267a89a16eae734102bf4ed6aec57f4e29eaadb118f5407337387ec12f6629f8de94b2fefceffb735effca8865722334dd3a27c789c96c2fdc7f96d702fa5e360a460856c3559ac65dac1aae0c10712cd99e8f7c9188a43460c2e3775f27518893628cb5f2cd25985570ad101b3ba16a342885d65ea1befef80aca975a3f8428eab9999124aeafa991f68151eb7ab9bffe132c8ad1f2e0ad79e0cbc0806aa46c0c53b6f1217dcd88f197a3c6ddcb5e1ca9c278d02736ab3f81db85d3fd751c38bdd449fb3f9e52c2e067fb8761b94ccf13e4958cb1f703d327cd510089ae4d10a96328b950689efd262f43470dd47c73327c63cd882432807a65d9d21ae39b57e27c14af2b6792c6d6687526593ce97e8000eb49157553fc6fc9e4f040098b43e4308aceb1c5f87f046389b3174cf96459460927b0fff05764d398c7c5e987ec4b08259c4a41a4fd293e0106e2c522cff08f07cb4dcb7165dd6ba7358bb7d389aae1bd76957e1b69e4b65a0443fe2ca48722b3babd8df8c53b6fc1fc0537defa60e79bf6f746771d3be7def7b14a813087804fdb7523566c47041014d0e4eb8e0faa6db79dc05a54299e54b34be446a3d3b0c073e212e305a78a190034885174fe25443061447ea7fa094f104b10dacc382cb353c96e3cf4993aba3b7271ecf3828feaa2490fa03697ac6bcd841130a175d7275033da3e7c094141d2ce798e8cf25b4b9d3356c0d74563ee9b81f9b18d10bf25988ce3f81ed002095c94b2cf2c8799f4e2194b11a6f4a774ac4fbf5c78d8163e681271505c17f47e71cd03a20490241c1f144ae59b19cce564475575e0af7f41984ffa6f5f8b365a338687ad494a79317679c00d74242b4155fb0a06fc735793d66bd6f252a26278896b6df70a393a21b0a9b80056c505f7266f296bbc3587af24c06476539cd1bfe1f20f818c778fd712300feab31861b31c254211c42d9f27ff3f41f5bb170c15b3daad6dda056065b24107ab3976549a353bd6f2859d84fba3d21f4377b1c5a0aa4fd039c485d1bdd8017817cdea1b8ba5b52c30ea06ae1abb942abd1917626deb37297d3df42cc848cd01622f13ad081f9d2c96384f6b4c72d4df9541b2cb36ec119e326f625aba6436dfa5d986cc8a6a15e082e2111c26a6da1d1e387445a7fe5a9ccf05dc01d08fd1b16f768b5b3b8b464976d480f4f1a44346ca5f01f29eff48e2ad585cc32f6c00e2c045c7015cb46f70052e4935c246ebcdbc7c3d091c825f864eea2dfe25459b6456f7b52c168fd565d250514261d171d65c8e9ef6fde70ff716b7c45a24f9666462a0919ed7a1a614df711c7f5b24dda275c71fbf973ed4f8cbbba5ea15bd7e5aaad972711159b20751f5fdb91a223f39cde6a83751a06c1ad0536d387bf3ea4a3d7e5e90bc52f4d101c045d5ad32fb58e45fd2fa2f5c8aa0bb40957465b87bef7fe6b76c16c8d07ecd51edb49faa5bb0070aba2dad3ca7eea1955d939cadb75286904a02db81fceb6b6b9b16ad84d373d33e134007fcdc02d40472fbbf70b57a53b6e5df122c0f8b3d44dc045104690f2d78b8cd2d0905d5d66830cb9125fa041d0fc2f08e20f9fa70bd17815cbb50f8019048d05df1673e9c8cc83e17dc91fd74b024b2b56b41bbff26016c6638b6ecc16deb349ee392776962746d62751b5672755a845b443c85d7c53605f274f3d5c3edd6ecd15e28545d2aea4df5d5e4eb169af361159249daf53f1339c1819370ad4d3ceafa7dc6a9118a2f1e69c4db409093eca05ec1cad8d606db1c5d3b58609eda4f1e71ae62765d79501ce8de42e60cfdc08517559f9c65e8dfbd73a5f971aa96f2cd20f1763e59d3b15367e0b206e97d5f5462e81299743e1959376fcdfac93855ebac2b5235b0f03c58eeaffcea40be5a9fe6bd290deddbb28db6539a72936a1953cb4a558dc93271a54d1e05cc3f4025c0ecca369b0d25d47c3e66049045d0daf9dc9fbe2c69d217d2e6939bf6d1875cd23b73d2e921aea9eee4f1f9b036e8f5cbb0100710c1dc27d1fb37ea26634dc827bfe42d094ce9576611a6bce6b67467f983a327e9dd34896672f257b41b8bee33a041ce2e83a65fad93e1a2a06854a40fe3751997c5233d397e5ce5ea676379527ad0e298fa62cd91ef89e9876db8e0909b60ff16c4a0ba01307826bf18c242e77af8ac40c681b8ae2cbd58c4eb4e6a580bd3f57bf1ffa44a1d080426d3f8c733568ccc75a61980ec92b5b0f4cf03e3ece177954c21b90b7828c9113da0fc53f6f5c5ea8bea08e14a12b889fc705ee44d834f184532421a584bd7301c9bc822deb7e71050a8cf0cd7f96dd2fd93b9d7306bb9702af5b88b2090d2b67bd88a299704e8c556b9066e35e4c864cf1775a6ed94a9685e996c4c671cc807f7c09b45559ee079d56547179e1b1af630c4ba04717cb5e88c0caadaf57964f5197d9d98a7f5b5e622c3eb5844645c4c2408806bbb4be5778925df16518c06597b243019bdc690a4723548a658529717360d474cfb6fcf30060b320cac29b2e42ec4f390a6c7a15274099a64a8d71c4a84e86d206cd2c7ee8125b19752a18dd2eb0dc643aa6b4494760f62acf187080281ec7d0a526374f69051e6aa13d8321372bea8d9e9c7fed4d0a48257e5c7463bc0a0165acc4712aec8cdd014de0b98d0de9b0dc3cc2d40c3be3ea3edb04b18f72209da21f5900a4ef002aeb88a364ed0bb102c2e164ac4f0dff7f082c3757b7ee1cd0e3b1ad45dd77553a4462c8f84ae21f8246281a02160bcf90c00b7816f93524d4d6577c6432d97da328757c3dc06c06760c82946f9f44e909cefaad0734094d8a9076abfc79c79bdb9bcdfa13697bff6f1a219653ac96882d615fe4757b76a8235f2f5e5978cdb5c5bacf4217a56fc6416943552d6e1d6c3f2e8801322368855aed0c5302d1445cbbeb5ef970abd8b5316f0c7cb7f5bd023c619ecf6b1714705a48b67e7a5c2f15bf9c90f6ada82d36484776d20f464d22b88b5d99dc2ba812b9f38754ac71499705f83875eee065482e2fed4c5f3537449857f409c635dbb2c0565ce9f23bbb5bde3ee0bb94f3fca1b5a0d78825c80f50a839a4b3fe6439fbef4190f8ddf1012990268aa8c87b91fdd210530e0bee9c17e35ee59e519801f7fdc72e5d1b96793ff13654b8eb28c2f1a702b1c5ed694d567e70981c596d9997a3e9133e3b623ea071bbd807c86ee191f02400c53851e567f2ceea1a80506af359cdf36c3cd9963d5cf3d32c64f4f7706c78a90d55f6cf12373fac70e17aa1bb6688710eb3b62ee809de762e5093cb326ed56c57b164fd73023021a4be32ec50bbed23bac420880af3a17a5f3502c95781e6251f88b17f83a02511ca782118f1bb07fe73d50fb70043734df8c82f07e74bb4500179d3c1e33d4075aa4a873eec1a34fd09bb3747825e1d821ce6e4f6b8270b0d1123499ca176ad47613bcd02b4825ad70ec79ecd1dbb496737d5258024898dde00e62b0b594f0e830f0c8475a3638ed4c438e87b6919314f9f2b5f81b2c42a9a0269477a637edc4b06486d41e093c65bb26acc7968320713fcf9551e9c6a855dbf7d3961bda89df32fbfb67bc285a1c14692afb72fbc6587e255627fed4971e8058248a926fd586bfa25aa19dc46b3f51d402f74724abcbbea314d8127c7e92ce0adf8af38b7047b8d5269e145c2d58158d178f0d91ed03a451e3a324b7add7377675ab8a56c5395efdaabaafcb6b1348e984677353e6f77296fe7e75a5afe6d2bd1e26be62ecb84801c20a462c4481762d2be207dce9c49e656133c605b16a1b4ff683983e3ececed23fb6540f0dd89776d525f5c4e07a3f50968f35b0bf92cd65514b1759918e333637d383a1810e28a822fb20151878461ff61cca3c340cb23f9602d03c10d4b05d4f712521921148c3e249358925f87d00a351ef7917b4e817a7a1d2191e6bb026dfb8e2ba08e52f1e43346cbab51a45dd2d8bfdd252ec79a7e9203e97a576a7db467def3ac0b789a6d52015712e89bb0df0879d2868d85e2f2d2c90547dae52500db275842eca910e48f0c43fc33fbd179d39ac9aab6e0f397f8eaca95793d8c196e49b050fd9815994f700ad4d22c07756fce9a755768be74dad0589411935de2dbfd10d200da75b4a4f9e523e763034820afc8c7d02132bde03108293263f84d7ed165e587733d255e4c11fffd52f72725fd0238dcd5ff815fd22c26126aae530a7d01e60c14f4f8e701ab527b6483fe78125c5e4402ff51c721cee92e5dd6db40e28b21532a21facbaf396d163237c5cad61a05e9c0c39d1ce99152687a16104787d87b092e9037f147da8bbc0c6456bbe7a2006742534010f507dca79ce8b59097e0cbbe312f48fc0a3ea84e7a484b266ee766a85849b464d93f872acae4af0ff5c7ea06dfb26a66674fba6e8a9481b49a41bed7becbfa680681834b1a3d7961d69d592fdb403d1566770e0173cbf8fa14956e0539a5a4eeae62cb6a7d1ec9e9d9a36b30b511a615395b470fccab197139818a30224c4f053d35e8d9897141c8a94012f8254f325b8ddec5c0e638c09e2cef80cb4e16bd9aea09b86bb48548b012145ef88932040d7cc59cb0265ee451e243c08d672ddc06de38dc15daf50a8ec1c18b9bbd87e2158ea8fd7a7559fe94d4c6680e304e2d500ca016e68d9f8a25271421b9deca3c8067f59a8f3edf2ad1cd20f15e4c820d703b6ffb6e368e8418bd392994c931c50cb4c858a7db9658e2a468fe06b416265b5e236fbcdaa86cee8ef146fe78628ed35c6aaad5bc455ecc2197ae951940e5bb64454b488a3b12e4b67e84f5a35a1daec5d95a33184f6c30fc553f5d0955a797831aeeed051fc7619471e77f5c5c8e40af7d6b354d039c4fcccc8624360cfc8b4a4a266e581f87b2822e1096741e804ad6a70973a3343822bc4138fdb2cac87fe7a74d0f71473668b3c62f00c622f8d9a25f6970700000000000000f412d53976b5fa199c0f85fcec7a6e8ba629b053f1a26597bdea2c53bc17fb1bca3d6ba561ddc17cee05ad161c20a24b420304b805733d613f8c67c6014a873f3d5f4ec973ebaf0078114db4fc6b607f2f9aefd61f439d80dca94c297081f005b63b26012d39d88b32e36d73b6dd5cc1838aed1d594bb3991f4a073330884eb07c2157f6864bec324ebcc8ce6a49c90cd2541323d95fff147ace0e70a86c6e5d758e37b12b6a280f72bdde00411c803607c4241a1d62b595925503636590b2a4fb910b1577026a83629fc039207b6d355e6a06353daf4a8b0f2e9c412044105df627e8686cc69e223b11c961eb00561144defd02ee6f5b8c0db6a314afe11cb68a66b01974c6dc9e685b013b654d9c7a450f7429cf2a26f6e34ea79895051d71b06b1903274f30fe2fd107b7e7bd477d70bd6324824d39d0e07b0f90e5152c562daddcb258a0faf8a9941868e7463910d35da02696ccb6b16567576bd8397337f20c5a5db9ac04fb302c513845883babdd345d7eebbd107fe0d2cdbbc01d5e40c56660eee85bba1c7317ec59a572a4eb9d1fea5d76dfb3e01f416ae4a0795eadd5f32b17dad816e37d630f9a433a05bbf091de03fdb0f4a5c8d74c0846d0fdec786a2adafd535d82401923eb5279009a2a247f41db21afc647b88c82529b65bec96dc5bd799264d32fc15de8a909946a939701d5c60269d0a631d4d9263ef527a69e5875339d5d2bdd0a2cbd5ccd58127b524bbb114b7a306ea220fe082db0e0db14d828cd72900c77dbcad0bb760e85b2986fc76d98e76a327253327bfb4d23aa1d45629ef71e30e453e19acc470538b95c3b77d84f376a5b485f2f5156392e22a99716dc90e653c1eb6343e647c41a60a2604b001f44c2e65c7f0d5040a405e948d9be5cad3aff848de9e9db6268a043c91e666226bcf9a8dadeeda32db2e14bece95d4925e06bf26cf6665000f98e47c4ca4b5a7859f28cca8c7f1b3340bcf616920c3cd53c2789364b03e6a291817766888425b0ec7ccc484d5474a02a7cbb821b058cc853fe830f86f6cb1ca73812dd919f1c79a7dfa13d310654176609f8ca482c3fee11dc8d843116f5a775fdeccbb975d7e833f081e16d914e0f7154a48668c2be7ccedccf2edb407975630e4ae24a16d818fea03b141dea14cbd404ac9b01dc8d0cba227cfbd33f33d20c9101a71f33d1fa832ce68868907be9fd8f9f6a76b03eb4eda0c55d83c57cedd17e3e96d267410287caa26984f84903b8748579a6879a301e7393ed1467cb98be15c34d6d5c0c957e1a7b941ecefe07b9954e207c76065c1f668ec143c533dd3d863fec137f2a00d746d349d8cf9fc438eb9aa22284f75f73891ede03d20757df1df054957ec94d551cfa56f10b2044e257e7d75470dfe0cc6094b8a1f2c6198cc89ba6df91e57fa87340edf426702aca7d2b3ef46b78335c2442b0d775405ad2569ad7ce46dd3494dab4d98d78e7f393ed6816a5b6c9356b7409a5cdc00b4ea99b7823c744e46e4215945cb02edbdf332d7c109fc4a83ceb2d6198fcc6f3a835679cad70c7dff7dc605450d5fa7e29f9b32f5a1d53d12e2561361346c55dd3fc79e2ea2588fbb8e55c42e55c8cf22ccdac9216be9fdad10efea56c393f6f58896a0df541141f829b50e5e7208f6218bb683208af0c542ac5636e5c2eeb15044072f28a9755c63ec67baeedf0941c6d0c5f2fd702ef1011539932368dbe1664de988efbed22a43b215ae69eeb5312ac5cc966ca12f12c034ddaaae340cd6e89e42621053db7969cd9753a72a6451f78fbd8b4840329b6c6eb9bdf365444276ab81251f6894fe3d125e8eecf30f3a98116c96d2de30a1b195c1d10ffdc731b78740a53f09bcb66b6b237bc56f9426135ca651d9329540c386dc5251b537c4b8317460b0dafbc3d4f1b8d6a939e51de59b22d32e5daafb5f0d469e58567cba1f327e67ee8d0f53b041fa643a4a594d4cf28a0004aace404ca95b58a1e26d601563b188fdd2c97b8d8714913c3564d0a445d35060ed2ce20daa4174cb92653626fa9bd10513c8006d757acecd7eda9d41393dfdd683ad50ab4de8cd832b26c82edeb4af5013f43f297dbf502b62fd6c2ced9641235838853c2aeb447fa06b6ecd1c11f17d3261e87aa1ec86ec8b23fd4281f33469d7c4414b60268367d38d9235dfe3ac4c7032e298d0cbee4b705f4085f5653b4637a80ae575b44c6f1a2374b899e061d03abad5770355673020afdb8fecf5be2a8617aab331646f05d49bf5beefd650bfd240ed3b5abadb21941c4a615004284ff7927ef9a745e3d4208dfabb0b04d04002bb7e449ca884373fe4ebe35e18ffd249e992ba779284b1064b1e27e6aa0c4c88e915246e029113b4d01b53583b8282ea1d5d4a305d3e20f894af640abf9e376d6b1c6fd3bf86821b4a57c5c22d8172ea40daf2b398dc0329d4b7dd08c75c902f0368def10217234bea599509a7e61b4a11915009680613bf69f2f4b38e7595449a20aee13949c688a69cfa73af328c7df7a494d0e8d249cb3c843149b11bdddf34282db31b156261254472fbc2e12c7b7133f7d273ef472761b58e7f8e54ea2861ebccfb141e3b245b5e4a75204d12ff5d7b0a44ae039b3cf79869d24f1602060f81785a851b996a3693856c6b2e90f27dbd4be518ae3065e692e5f2842380e4f5cf91582632e6d36b260c27a1e7ae80b47d14067db8720e619c7323f358098ef054fddde357f4453c6e7ace38833ed1c9bc9bf0c054564b79885cc7c8fc5d7ebde25f0307067816067a4a96ddedfbd268ca19a67207ecfec5598a442a1c0e823e012ced27c3266c6721aa5718dc076e7f50023a49a40980bc0fcd568295c8d4c59f1874aa944b88901e38c803ef52c226a7daf055f4ec3bbecd878654a456448e552a0fafa64124688dbd7f3787af8b3fdf661680ae309939542337ab22f510ba9ab1a7229f5244938e9324b0b1ad22ad9e16b84f93cea693186a5c76ad7f74e7c82ce6cb9a9ecf3a4a1a6d06a8fdd6474ae1aeddfcef270c6c637918b7aed3d5068e17d3642e9fa66c985b2dca5b38ffdb3545a4954d0a5813bfec99721259562b80696dadd921e9f18978d21dee1129a386623cf93c804aeb4e511ee8658fcef51746dbe1f87285eae850f008f3effdb78994e6eb370600c1855f672de0b750ad56c22aa937c1eaa8a7a333fc55f814e878bf71e8d9717a8f0854635554f07393ce04cb6d58e9ac0f5808d9158fd6320fdf75b2db9cd0380418e8664b5ccdde967b8a76e8002683849fa507d78e971f7118b2eba2c025dc359684cbd7b6b2e41ed0783da3fa2ae2de5dcb2db67d06a21aa419bd465ecc378842219a55f647535c7f4002061c65338d9c098ef31b77297c9905b91555cb436b83cb88e48821fe750dfcb4305e146b7f68265a35331017dcd902071a8b904534dc26a017f2bd14bcc65963efc9a8689298e039ac717fd460703e7d08ead0ca43c3c88ee423ed92a20e0b7dd6636313d057b97fbfead33d0aea2ff50c57df057bdd6c7470fde9bf9f1fbfc7ddcea22c1ce9273705be952464b3d48aacb7a96e5ddcab0b4d7b564d12b66c07663e05dff55d40d7a2371ead0f948e6921b8d271f8c710f526844db88102e68c3ae1a35a729af6d6521dc587f83ced8263d6d5801dc8b9c11659cca84c6e4076021f2747769cbf50d3362602f6491a1c3734a62aa024e060e69b32a5ca8f5ebdf8deeeda60405610fd182cef2e4cd534ee31db32bb13f0bdd53799dc438c38ac0a49be58f0dacb53286fb7f1648b8eaaf4c997689eb703594f55fdbac9840b91696f1f2ee8599cd84d3a904b3b7515fd22866cc0c2ef1f8db911593801474bc90bc8151ad4b0da717cba6b388440dbf85cfd6fdf874960712e93bfe9cb22bd84139c0e3badc70b36dfb9edb4f4d4b45514e826c5dc0972a9596f14c0b4de118253de91aaf7c6bec8f95ea509c374f35543f678f12e467c394d21f613b446607051943ebd5a49b729e91681f54215f9d1c330e264efd1f214b7196e72eeca6796ca35b17e27c10cb6171e7eb520fbe0394f7399b65fcb0014a5c3b9c9c10b14877520d0a572b8fdf5e0bccd328540422a4ad906e2e358a6916dbae6b36aa8c3bd4514c56fc2602bc84c7c571af4f667eb7c3015f3ff85a6a309db43c6c1dcc922951fbc65c659d4b9c65608086ee33151e02596976109e3e2de848dfcca7b771c1997b9fa6ccc7e0299303ad5d11700611ed70b809ea039b00", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x9, {0x101, 0xb, 0x0, {0x1, 0x0, 0xbdd6, 0x400, 0x10000, 0x5, 0x9d1f, 0x4, 0x8, 0x4000, 0x7, 0x0, 0xffffffffffffffff, 0x7ffffff7, 0xc877}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000740)='./file0\x00', 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) 1.038371526s ago: executing program 2 (id=860): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff2, 0xe}, {0x1, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 912.017179ms ago: executing program 3 (id=861): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRAWINFO(r1, 0x4004480d, 0x0) read$hidraw(r1, 0x0, 0x0) 690.759908ms ago: executing program 2 (id=862): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) close(0x3) 0s ago: executing program 2 (id=863): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf090100"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001700)=""/4108, 0x100c}], 0x1}, 0x2000) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4}) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000100)=0x9, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x20, 0x4, [0x2, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x2]}}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r4, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) listen(0xffffffffffffffff, 0xda90) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000040)={0x18, r4}) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) kernel console output (not intermixed with test programs): 070][ T71] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.105765][ T71] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.207816][ T71] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.229702][ T71] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.582442][ T71] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.652667][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.661554][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.726197][ T71] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.836644][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.854729][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.912329][ T5829] Bluetooth: hci0: command tx timeout [ 94.928280][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.938739][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.993351][ T5829] Bluetooth: hci1: command tx timeout [ 95.023951][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.201599][ T5829] Bluetooth: hci3: command tx timeout [ 95.207189][ T5829] Bluetooth: hci2: command tx timeout [ 95.214252][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.231660][ T5829] Bluetooth: hci4: command tx timeout [ 95.382101][ T5910] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.614628][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.732330][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 95.760548][ T5910] usb 2-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 95.770298][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.788849][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.839804][ T5910] usb 2-1: config 0 descriptor?? [ 95.883761][ T5910] smsusb:smsusb_probe: board id=8, interface number 0 [ 95.886532][ T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.903900][ T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.909407][ T5910] smsusb:smsusb_probe: Device initialized with return code -19 [ 96.097979][ T5944] netlink: 'syz.3.4': attribute type 4 has an invalid length. [ 96.178256][ T5946] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.253274][ T30] audit: type=1326 audit(1775197534.317:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c17f9c819 code=0x7ffc0000 [ 96.332301][ T5946] tipc: Started in network mode [ 96.433374][ T5946] tipc: Node identity 7f000001, cluster identity 4711 [ 96.458750][ T5946] tipc: Enabling of bearer rejected, failed to enable media [ 96.551297][ T5949] veth1_to_batadv: entered promiscuous mode [ 96.903171][ T30] audit: type=1326 audit(1775197534.317:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0c17f9c819 code=0x7ffc0000 [ 97.003151][ T30] audit: type=1326 audit(1775197534.317:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c17f9c819 code=0x7ffc0000 [ 97.088203][ T30] audit: type=1326 audit(1775197534.317:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0c17f9c819 code=0x7ffc0000 [ 97.184893][ T30] audit: type=1326 audit(1775197534.327:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c17f9c819 code=0x7ffc0000 [ 97.288800][ T30] audit: type=1326 audit(1775197534.327:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0c17f9e087 code=0x7ffc0000 [ 97.599410][ T30] audit: type=1326 audit(1775197534.327:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0c17f5d04e code=0x7ffc0000 [ 97.682028][ T5962] Zero length message leads to an empty skb [ 97.699243][ T5962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 97.740733][ T30] audit: type=1326 audit(1775197534.327:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0c17f5d04e code=0x7ffc0000 [ 97.771424][ T30] audit: type=1326 audit(1775197534.327:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0c17f5d04e code=0x7ffc0000 [ 97.801506][ T30] audit: type=1326 audit(1775197534.327:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0c17f5d04e code=0x7ffc0000 [ 98.367090][ T5965] capability: warning: `syz.4.9' uses deprecated v2 capabilities in a way that may be insecure [ 98.405839][ T5957] usb 2-1: USB disconnect, device number 2 [ 98.620568][ T5977] netlink: 'syz.3.11': attribute type 1 has an invalid length. [ 98.762893][ T5979] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11'. [ 98.851978][ T5831] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 99.391748][ T5831] usb 5-1: Using ep0 maxpacket: 8 [ 99.421815][ T5831] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 99.553014][ T5831] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 99.600168][ T5831] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 99.612173][ T5831] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.630275][ T5831] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 99.640890][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.891420][ T5831] usb 5-1: usb_control_msg returned -32 [ 99.901508][ T5831] usbtmc 5-1:16.0: can't read capabilities [ 99.915156][ T5991] netlink: 'syz.2.13': attribute type 13 has an invalid length. [ 100.285676][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 100.313517][ T5968] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -71 [ 100.741864][ T5997] process 'syz.1.14' launched '/dev/fd/7' with NULL argv: empty string added [ 101.450495][ T24] usb 5-1: USB disconnect, device number 2 [ 101.698669][ T6007] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16'. [ 101.812656][ T6002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15'. [ 102.199242][ T5831] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 102.417234][ T6007] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 102.434741][ T5831] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 102.451536][ T29] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.546213][ T5831] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.581805][ T5831] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 102.606141][ T5831] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.627189][ T5831] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 102.636909][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 102.645189][ T5831] usb 3-1: Product: syz [ 102.655931][ T5831] usb 3-1: Manufacturer: syz [ 102.684352][ T5831] cdc_wdm 3-1:1.0: skipping garbage [ 102.697855][ T5831] cdc_wdm 3-1:1.0: skipping garbage [ 102.879129][ T6002] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 102.900145][ T6018] fuse: Bad value for 'fd' [ 102.928030][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 102.955565][ T6018] ipip0: entered promiscuous mode [ 102.963133][ T6018] ipip0: entered allmulticast mode [ 103.027697][ T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.036262][ T5831] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 103.053883][ T29] usb 1-1: config 0 has no interfaces? [ 103.101353][ T29] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 103.123337][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.157700][ T29] usb 1-1: Product: syz [ 103.179560][ T29] usb 1-1: Manufacturer: syz [ 103.199960][ T29] usb 1-1: SerialNumber: syz [ 103.312578][ T29] usb 1-1: config 0 descriptor?? [ 106.197767][ T5957] usb 1-1: USB disconnect, device number 2 [ 106.336237][ T5897] usb 3-1: USB disconnect, device number 2 [ 106.612182][ T6049] netlink: 16 bytes leftover after parsing attributes in process `syz.3.22'. [ 107.071489][ T5957] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 107.298550][ T5957] usb 1-1: not running at top speed; connect to a high speed hub [ 107.316066][ T5957] usb 1-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 55887, setting to 64 [ 107.328086][ T5957] usb 1-1: config 1 interface 0 has no altsetting 0 [ 107.337640][ T5957] usb 1-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 107.348820][ T5957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.358483][ T5957] usb 1-1: Product: syz [ 107.368622][ T5957] usb 1-1: Manufacturer: syz [ 107.373707][ T5957] usb 1-1: SerialNumber: syz [ 107.409725][ T6052] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 108.141470][ T5957] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input5 [ 108.205862][ T5180] bcm5974 1-1:1.0: could not read from device [ 108.536078][ T5957] usb 1-1: USB disconnect, device number 3 [ 110.661353][ T5957] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 111.415994][ T6074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'. [ 111.802795][ T6098] syz.2.31 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 111.820946][ T6099] syz.3.32 uses obsolete (PF_INET,SOCK_PACKET) [ 113.271653][ T6119] dummy0: entered allmulticast mode [ 113.514053][ T6124] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 113.623789][ T6125] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size. [ 113.916194][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 113.916238][ T30] audit: type=1326 audit(1775197551.997:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6126 comm="syz.0.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95219c819 code=0x7ffc0000 [ 114.131891][ T6131] netlink: 'syz.0.38': attribute type 4 has an invalid length. [ 114.177966][ T6131] netlink: 'syz.0.38': attribute type 4 has an invalid length. [ 114.347730][ T30] audit: type=1326 audit(1775197551.997:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6126 comm="syz.0.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95219c819 code=0x7ffc0000 [ 114.864957][ T30] audit: type=1326 audit(1775197551.997:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6126 comm="syz.0.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd95219c819 code=0x7ffc0000 [ 114.928554][ T30] audit: type=1326 audit(1775197551.997:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6126 comm="syz.0.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95219c819 code=0x7ffc0000 [ 115.074592][ T30] audit: type=1326 audit(1775197551.997:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6126 comm="syz.0.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95219c819 code=0x7ffc0000 [ 115.315085][ T30] audit: type=1326 audit(1775197551.997:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6126 comm="syz.0.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd95219c819 code=0x7ffc0000 [ 115.393285][ T30] audit: type=1326 audit(1775197551.997:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6126 comm="syz.0.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95219c819 code=0x7ffc0000 [ 115.511654][ T30] audit: type=1326 audit(1775197551.997:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6126 comm="syz.0.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95219c819 code=0x7ffc0000 [ 115.628144][ T30] audit: type=1326 audit(1775197551.997:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6126 comm="syz.0.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd95219c819 code=0x7ffc0000 [ 115.756415][ T30] audit: type=1326 audit(1775197551.997:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6126 comm="syz.0.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95219c819 code=0x7ffc0000 [ 115.916432][ T6137] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 115.932033][ T6137] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 116.529811][ T6137] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 116.772953][ T6161] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.964546][ T6164] loop5: detected capacity change from 0 to 7 [ 116.992750][ T6137] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 117.001385][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 117.022800][ T6135] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 117.041508][ T6135] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 117.181526][ T6137] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 117.335927][ T6137] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 117.597945][ T6164] Dev loop5: unable to read RDB block 7 [ 117.650715][ T6135] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 117.663859][ T6137] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 117.663885][ T6135] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 117.689734][ T6164] loop5: unable to read partition table [ 117.725481][ T6164] loop5: partition table beyond EOD, truncated [ 117.749585][ T6164] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 117.874145][ T6137] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 118.330831][ T6137] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 118.374370][ T6135] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 118.374590][ T6137] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 118.380648][ T6135] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 118.479812][ T6137] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 118.659241][ T6137] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 118.686877][ T6137] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 118.686895][ T6135] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 118.744320][ T6137] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 118.744405][ T6135] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 118.847358][ T6137] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 118.961026][ T6135] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 118.969188][ T6135] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 119.231490][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 119.420027][ T9] usb 2-1: config 0 has no interfaces? [ 119.455458][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 119.492996][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.525156][ T9] usb 2-1: Product: syz [ 119.549465][ T9] usb 2-1: Manufacturer: syz [ 119.630815][ T9] usb 2-1: SerialNumber: syz [ 119.660618][ T9] usb 2-1: config 0 descriptor?? [ 119.818660][ T5920] IPVS: starting estimator thread 0... [ 119.970399][ T6201] IPVS: using max 32 ests per chain, 76800 per kthread [ 120.324125][ T9] usb 2-1: can't set config #0, error -71 [ 120.436676][ T9] usb 2-1: USB disconnect, device number 3 [ 120.826272][ T6215] PKCS8: Unsupported PKCS#8 version [ 121.379189][ T6226] netlink: 24 bytes leftover after parsing attributes in process `syz.3.49'. [ 122.201475][ T5831] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 122.387292][ T5831] usb 4-1: Using ep0 maxpacket: 8 [ 122.449921][ T5831] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.626913][ T5831] usb 4-1: config 0 has no interfaces? [ 122.665385][ T5831] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 122.757150][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.786290][ T5831] usb 4-1: Product: syz [ 122.800222][ T5831] usb 4-1: Manufacturer: syz [ 122.821717][ T5831] usb 4-1: SerialNumber: syz [ 122.849840][ T5831] usb 4-1: config 0 descriptor?? [ 124.016648][ T6247] netlink: 36 bytes leftover after parsing attributes in process `syz.0.51'. [ 125.335255][ T6254] tipc: Started in network mode [ 125.335289][ T6261] loop6: detected capacity change from 0 to 2640 [ 125.340277][ T6254] tipc: Node identity ac14140f, cluster identity 4711 [ 125.340729][ T6254] tipc: New replicast peer: 255.255.255.255 [ 125.382424][ T6254] tipc: Enabled bearer , priority 10 [ 125.569501][ T6265] loop6: detected capacity change from 2640 to 524288000 [ 125.654734][ T5897] usb 4-1: USB disconnect, device number 2 [ 125.810126][ T6225] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.823200][ T6259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.52'. [ 125.842702][ T6225] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.888537][ T6225] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.941601][ T6225] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.991545][ T6225] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.999854][ T6225] Buffer I/O error on dev loop6, logical block 0, async page read [ 126.009502][ T6259] tipc: Disabling bearer [ 126.029162][ T6225] Buffer I/O error on dev loop6, logical block 0, async page read [ 126.051770][ T6225] Buffer I/O error on dev loop6, logical block 0, async page read [ 126.138398][ T6225] ldm_validate_partition_table(): Disk read failed. [ 126.171490][ T6225] Buffer I/O error on dev loop6, logical block 0, async page read [ 126.194716][ T6225] Buffer I/O error on dev loop6, logical block 0, async page read [ 126.235019][ T6225] Dev loop6: unable to read RDB block 0 [ 126.262694][ T6225] loop6: unable to read partition table [ 126.504912][ T6294] netlink: 'syz.0.55': attribute type 3 has an invalid length. [ 126.729484][ T6261] ldm_validate_partition_table(): Disk read failed. [ 126.747496][ T6261] Dev loop6: unable to read RDB block 0 [ 126.788074][ T6261] loop6: unable to read partition table [ 126.829045][ T6261] loop_reread_partitions: partition scan of loop6 (ir¡c‡’ úÒVUŸX¯ÃG¨½›˜ñZtM<IÆ i8NL í á·ùWû@©àQ6ÒÝ%ž…û¥¡Úè) failed (rc=-5) [ 128.143730][ T6316] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 128.198163][ T6316] ======================================================= [ 128.198163][ T6316] WARNING: The mand mount option has been deprecated and [ 128.198163][ T6316] and is ignored by this kernel. Remove the mand [ 128.198163][ T6316] option from the mount to silence this warning. [ 128.198163][ T6316] ======================================================= [ 130.165200][ T6344] xt_bpf: check failed: parse error [ 131.533820][ T5831] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 131.989089][ T5831] usb 4-1: Using ep0 maxpacket: 16 [ 131.996945][ T5831] usb 4-1: too many endpoints for config 0 interface 0 altsetting 64: 129, using maximum allowed: 30 [ 132.023014][ T5831] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.047930][ T5831] usb 4-1: config 0 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 132.126757][ T5831] usb 4-1: config 0 interface 0 has no altsetting 0 [ 132.245441][ T5831] usb 4-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 132.304098][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.362923][ T5831] usb 4-1: config 0 descriptor?? [ 132.668103][ T6362] QAT: failed to copy from user. [ 133.236504][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.245335][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.341679][ T5920] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 133.416542][ T6371] netlink: 'syz.1.65': attribute type 1 has an invalid length. [ 133.428127][ T6371] netlink: 28 bytes leftover after parsing attributes in process `syz.1.65'. [ 133.971473][ T5920] usb 1-1: Using ep0 maxpacket: 16 [ 134.024625][ T5920] usb 1-1: device descriptor read/all, error -71 [ 134.227007][ T5831] usb 4-1: can't set config #0, error -71 [ 134.287363][ T5831] usb 4-1: USB disconnect, device number 3 [ 134.403482][ T6371] macvlan2: entered promiscuous mode [ 134.409082][ T6371] macvlan2: entered allmulticast mode [ 137.151266][ T6415] tipc: Failed to remove unknown binding: 66,0,0/0:2491234054/2491234056 [ 137.193117][ T6415] tipc: Failed to remove unknown binding: 66,0,0/0:2491234054/2491234055 [ 137.225862][ T6417] tipc: Failed to remove unknown binding: 66,0,0/0:2491234054/2491234056 [ 137.234837][ T6417] tipc: Failed to remove unknown binding: 66,0,0/0:2491234054/2491234055 [ 137.557927][ T6414] xt_ecn: cannot match TCP bits for non-tcp packets [ 138.049504][ T6414] netlink: 'syz.4.73': attribute type 1 has an invalid length. [ 138.921833][ T6423] netlink: 48 bytes leftover after parsing attributes in process `syz.3.74'. [ 139.711552][ T5831] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 139.940479][ T5831] usb 2-1: unable to get BOS descriptor or descriptor too short [ 139.949583][ T5831] usb 2-1: not running at top speed; connect to a high speed hub [ 140.047569][ T5831] usb 2-1: config 12 has an invalid interface number: 173 but max is 1 [ 140.062299][ T5831] usb 2-1: config 12 has an invalid interface number: 173 but max is 1 [ 140.243750][ T5831] usb 2-1: config 12 has 1 interface, different from the descriptor's value: 2 [ 140.275218][ T5831] usb 2-1: config 12 has no interface number 0 [ 140.299931][ T5831] usb 2-1: config 12 interface 173 has no altsetting 1 [ 140.322489][ T5831] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=33.b7 [ 140.335914][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.353455][ T5831] usb 2-1: Product: syz [ 140.363237][ T5831] usb 2-1: Manufacturer: syz [ 140.374742][ T5831] usb 2-1: SerialNumber: syz [ 140.594942][ T6439] mmap: syz.3.79 (6439) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 140.859572][ T6443] pim6reg: entered allmulticast mode [ 141.101281][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 141.110331][ T6450] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 141.507424][ T6454] fuse: Bad value for 'fd' [ 141.591469][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 141.841425][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 141.951639][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 64: 129, using maximum allowed: 30 [ 142.005507][ T9] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.054384][ T9] usb 1-1: config 0 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 142.111084][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 142.138649][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 142.181390][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.216519][ T9] usb 1-1: config 0 descriptor?? [ 144.267342][ T6472] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 144.350106][ T5831] usb 2-1: USB disconnect, device number 4 [ 144.489492][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 144.509803][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 144.591831][ T9] usb 1-1: USB disconnect, device number 7 [ 144.751154][ T6478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.84'. [ 144.761549][ T6478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.821040][ T6479] input: syz0 as /devices/virtual/input/input6 [ 145.005495][ T6478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.814560][ T6513] IPVS: sh: FWM 3 0x00000003 - no destination available [ 147.822418][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 147.908154][ T5889] IPVS: starting estimator thread 0... [ 148.050167][ T6516] IPVS: using max 29 ests per chain, 69600 per kthread [ 150.194631][ T6541] warning: `syz.2.95' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 151.530028][ T6557] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 152.181733][ T6566] ptrace attach of "./syz-executor exec"[5842] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ./file0 °ÿ Àÿ ÿÿÿÿ   8   € \x09 Û  þÿÿú ÿÿÿÿ /sys/kernel/debug/binder/stats cgroup.controllers [ 154.152087][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 154.487738][ T6583] netlink: zone id is out of range [ 154.524870][ T6583] netlink: zone id is out of range [ 154.538079][ T6583] netlink: zone id is out of range [ 154.556072][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 154.575403][ T6583] netlink: zone id is out of range [ 154.589671][ T24] usb 4-1: config 0 interface 0 has no altsetting 1 [ 154.635653][ T24] usb 4-1: New USB device found, idVendor=0499, idProduct=5ae2, bcdDevice= 9.0f [ 154.658071][ T6583] netlink: zone id is out of range [ 154.665364][ T6583] netlink: zone id is out of range [ 154.683963][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 154.699701][ T6583] netlink: zone id is out of range [ 154.724749][ T24] usb 4-1: Product: syz [ 154.729374][ T6583] netlink: zone id is out of range [ 154.738682][ T24] usb 4-1: Manufacturer: syz [ 154.746255][ T6583] netlink: set zone limit has 4 unknown bytes [ 154.761283][ T24] usb 4-1: SerialNumber: syz [ 154.775775][ T24] usb 4-1: config 0 descriptor?? [ 155.572683][ T6596] tipc: Failed to remove unknown binding: 66,0,0/0:191407467/191407469 [ 155.582872][ T6596] tipc: Failed to remove unknown binding: 66,0,0/0:191407467/191407468 [ 155.594165][ T6596] tipc: Failed to remove unknown binding: 66,0,0/0:191407467/191407469 [ 155.602869][ T6596] tipc: Failed to remove unknown binding: 66,0,0/0:191407467/191407468 [ 155.675763][ T6598] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 156.671269][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 156.796676][ T6603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.108'. [ 157.048489][ T24] usb 4-1: USB disconnect, device number 4 [ 157.064398][ T5831] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 157.069027][ T6225] udevd[6225]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.223593][ T5831] usb 2-1: Using ep0 maxpacket: 32 [ 157.257385][ T5831] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 157.267869][ T5831] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 157.297645][ T5831] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 157.307112][ T5831] usb 2-1: config 1 has no interface number 0 [ 157.314941][ T5831] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 157.326669][ T5831] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 157.388328][ T5831] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 157.431534][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.539505][ T5831] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 157.712684][ T5831] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 158.285953][ T5831] usb 2-1: USB disconnect, device number 5 [ 158.307332][ T5831] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 158.596259][ T6621] netlink: 24 bytes leftover after parsing attributes in process `syz.2.112'. [ 158.690761][ T6621] netlink: 24 bytes leftover after parsing attributes in process `syz.2.112'. [ 158.916617][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.115'. [ 160.828546][ T6654] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 161.222019][ T6659] binder: 6656:6659 ioctl 4018620d 0 returned -22 [ 161.972016][ T6663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.120'. [ 163.120353][ T6681] tc_dump_action: action bad kind [ 164.033993][ T6689] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 164.391337][ T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 164.641403][ T9] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 164.657719][ T9] usb 3-1: config 0 has no interface number 0 [ 164.676575][ T9] usb 3-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 164.707985][ T9] usb 3-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 164.730059][ T9] usb 3-1: config 0 interface 113 has no altsetting 0 [ 164.792053][ T9] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 164.802132][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.822987][ T9] usb 3-1: Product: syz [ 164.829835][ T9] usb 3-1: Manufacturer: syz [ 164.843055][ T9] usb 3-1: SerialNumber: syz [ 164.861171][ T9] usb 3-1: config 0 descriptor?? [ 164.904570][ C0] usb 3-1: NFC: Urb failure (status -71) [ 164.919354][ T9] usb 3-1: NFC: Unable to get FW version [ 164.937163][ T9] pn533_usb 3-1:0.113: probe with driver pn533_usb failed with error -90 [ 165.624157][ T6704] fuse: Unknown parameter 'group_i00000000000000000000' [ 166.082134][ T6712] netlink: 36 bytes leftover after parsing attributes in process `syz.4.130'. [ 166.691486][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 166.902428][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 166.978305][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.044535][ T9] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 167.070364][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.142716][ T9] usb 4-1: Product: syz [ 167.147331][ T9] usb 4-1: Manufacturer: syz [ 167.251278][ T9] usb 4-1: SerialNumber: syz [ 167.306442][ T9] usb 4-1: config 0 descriptor?? [ 167.324219][ T9] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 167.368656][ T9] usb 4-1: selecting invalid altsetting 1 [ 167.391265][ T29] usb 3-1: USB disconnect, device number 3 [ 167.560740][ T9] gspca_stk014: init reg: 0x00 [ 167.592358][ T9] stk014 4-1:0.0: probe with driver stk014 failed with error -5 [ 168.306036][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.133'. [ 168.711457][ T6723] nvme_fabrics: missing parameter 'transport=%s' [ 168.770101][ T6723] nvme_fabrics: missing parameter 'nqn=%s' [ 168.794383][ T29] usb 4-1: USB disconnect, device number 5 [ 170.011493][ T6756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.138'. [ 170.047766][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 170.047785][ T30] audit: type=1326 audit(1775197608.057:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6759 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472e99c819 code=0x7ffc0000 [ 170.146921][ T30] audit: type=1326 audit(1775197608.057:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6759 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f472e99c819 code=0x7ffc0000 [ 170.216928][ T30] audit: type=1326 audit(1775197608.057:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6759 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472e99c819 code=0x7ffc0000 [ 170.281331][ T30] audit: type=1326 audit(1775197608.057:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6759 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f472e99c819 code=0x7ffc0000 [ 170.384052][ T30] audit: type=1326 audit(1775197608.057:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6759 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472e99c819 code=0x7ffc0000 [ 170.493545][ T30] audit: type=1326 audit(1775197608.057:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6759 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f472e99c819 code=0x7ffc0000 [ 170.640116][ T30] audit: type=1326 audit(1775197608.057:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6759 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472e99c819 code=0x7ffc0000 [ 170.721391][ T30] audit: type=1326 audit(1775197608.057:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6759 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472e99c819 code=0x7ffc0000 [ 170.905675][ T30] audit: type=1326 audit(1775197608.057:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6759 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472e99c819 code=0x7ffc0000 [ 171.022003][ T30] audit: type=1326 audit(1775197608.067:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6759 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f472e99c819 code=0x7ffc0000 [ 172.410402][ T6785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.143'. [ 172.738240][ T6794] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 173.549700][ T6803] kAFS: unable to lookup cell 'ÿ' [ 173.582673][ T6803] kAFS: unable to lookup cell '(,c¾Ì' [ 174.447874][ T6817] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 175.914772][ T6830] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 176.608221][ T6845] hub 1-0:1.0: USB hub found [ 176.654181][ T6845] hub 1-0:1.0: 1 port detected [ 177.019275][ T5957] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 177.224188][ T5957] usb 1-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 177.280274][ T5957] usb 1-1: config 0 interface 0 has no altsetting 0 [ 177.316187][ T5957] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 177.371829][ T5957] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 177.449740][ T5957] usb 1-1: Product: syz [ 177.467628][ T5957] usb 1-1: Manufacturer: syz [ 177.497920][ T5957] usb 1-1: SerialNumber: syz [ 177.550748][ T5957] usb 1-1: config 0 descriptor?? [ 177.590880][ T6846] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 177.844472][ T5957] usb 1-1: selecting invalid altsetting 0 [ 178.223901][ T29] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 178.245098][ T6858] netlink: 24 bytes leftover after parsing attributes in process `syz.2.156'. [ 178.485197][ T6861] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 178.568407][ T29] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 178.670992][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.765318][ T29] usb 2-1: Product: syz [ 178.804516][ T29] usb 2-1: Manufacturer: syz [ 178.821462][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 178.850833][ T29] usb 2-1: SerialNumber: syz [ 178.912017][ T29] usb 2-1: config 0 descriptor?? [ 179.021377][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 179.038736][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.058501][ T9] usb 3-1: config 0 has no interfaces? [ 179.100179][ T9] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 179.120196][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.134496][ T9] usb 3-1: Product: syz [ 179.138987][ T9] usb 3-1: Manufacturer: syz [ 179.149282][ T9] usb 3-1: SerialNumber: syz [ 179.167573][ T9] usb 3-1: config 0 descriptor?? [ 180.192562][ T29] usb 2-1: Firmware version (0.0) predates our first public release. [ 180.472806][ T9] usb 1-1: USB disconnect, device number 8 [ 180.505662][ T29] usb 2-1: Please update to version 0.2 or newer [ 180.803304][ T30] kauditd_printk_skb: 171 callbacks suppressed [ 180.803323][ T30] audit: type=1326 audit(1775197618.897:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6872 comm="syz.0.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95219c819 code=0x7ffc0000 [ 180.860669][ T30] audit: type=1326 audit(1775197618.897:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6872 comm="syz.0.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95219c819 code=0x7ffc0000 [ 180.963372][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 180.988037][ T30] audit: type=1326 audit(1775197618.927:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6872 comm="syz.0.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd95219c819 code=0x7ffc0000 [ 181.104113][ T30] audit: type=1326 audit(1775197618.927:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6872 comm="syz.0.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95219c819 code=0x7ffc0000 [ 181.173929][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 181.197911][ T9] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 181.239283][ T30] audit: type=1326 audit(1775197619.017:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6872 comm="syz.0.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fd95219c819 code=0x7ffc0000 [ 181.315004][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 181.401003][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.426485][ T30] audit: type=1326 audit(1775197619.117:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6872 comm="syz.0.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95219c819 code=0x7ffc0000 [ 181.495085][ T9] usb 5-1: Product: syz [ 181.519802][ T9] usb 5-1: Manufacturer: syz [ 181.529734][ T30] audit: type=1326 audit(1775197619.147:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6872 comm="syz.0.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd95219c819 code=0x7ffc0000 [ 181.541672][ T9] usb 5-1: SerialNumber: syz [ 181.619934][ T24] usb 3-1: USB disconnect, device number 4 [ 181.680558][ T30] audit: type=1326 audit(1775197619.177:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6872 comm="syz.0.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95219c819 code=0x7ffc0000 [ 181.792550][ T30] audit: type=1326 audit(1775197619.217:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6872 comm="syz.0.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95219c819 code=0x7ffc0000 [ 181.897906][ T6878] netlink: 20 bytes leftover after parsing attributes in process `syz.4.161'. [ 182.052088][ T6890] netlink: 20 bytes leftover after parsing attributes in process `syz.4.161'. [ 182.141805][ T6892] netlink: 44 bytes leftover after parsing attributes in process `syz.4.161'. [ 182.266480][ T6894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.301931][ T6894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.330960][ T6878] team0 (unregistering): Port device team_slave_0 removed [ 182.379608][ T6878] team0 (unregistering): Port device team_slave_1 removed [ 182.402836][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.161'. [ 182.500956][ T6891] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 183.052557][ T6900] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 183.085130][ T9] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 183.273941][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 183.605385][ T9] usb 5-1: USB disconnect, device number 3 [ 183.956213][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 184.131971][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 184.148769][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 184.169324][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 184.196778][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 184.221328][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.273688][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 184.304053][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.566294][ T24] usb 3-1: GET_CAPABILITIES returned 0 [ 184.584200][ T24] usbtmc 3-1:16.0: can't read capabilities [ 184.670156][ T24] usb 2-1: USB disconnect, device number 6 [ 184.953300][ T6921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.964548][ T6921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.270239][ T6933] netlink: 52 bytes leftover after parsing attributes in process `syz.0.169'. [ 185.464577][ T6921] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 187.290532][ T6951] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 189.261368][ T5889] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 189.453865][ T5889] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 189.473455][ T5889] usb 4-1: config 0 has no interface number 0 [ 189.503417][ T5889] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 189.551172][ T5889] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 189.581363][ T24] usb 3-1: USB disconnect, device number 5 [ 189.610684][ T5889] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 189.641160][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.753074][ T5889] usb 4-1: config 0 descriptor?? [ 189.796391][ T6980] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 189.868833][ T5889] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 190.581320][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 190.921750][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 190.998938][ T24] usb 3-1: config 0 has no interfaces? [ 191.053240][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 191.091441][ T24] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 191.119825][ T24] usb 3-1: Manufacturer: syz [ 191.182880][ T24] usb 3-1: config 0 descriptor?? [ 191.251402][ T5957] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 191.421365][ T5957] usb 2-1: Using ep0 maxpacket: 8 [ 191.445473][ T5957] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.495987][ T5957] usb 2-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 191.543022][ T5957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.595464][ T5957] usb 2-1: config 0 descriptor?? [ 191.643680][ T5957] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 191.993983][ T6987] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.185961][ T6990] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 192.215445][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 192.237725][ T5957] usb 4-1: USB disconnect, device number 6 [ 192.891304][ T5957] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 193.082361][ T5957] usb 4-1: Using ep0 maxpacket: 8 [ 193.128376][ T5957] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.188694][ T5957] usb 4-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 193.250557][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.296654][ T5831] usb 3-1: USB disconnect, device number 6 [ 193.300102][ T5957] usb 4-1: Product: syz [ 193.332494][ T5957] usb 4-1: Manufacturer: syz [ 193.351291][ T5957] usb 4-1: SerialNumber: syz [ 193.388888][ T5957] usb 4-1: config 0 descriptor?? [ 193.456792][ T5957] cdc_phonet 4-1:0.0: probe with driver cdc_phonet failed with error -22 [ 193.768526][ T5957] usb 2-1: USB disconnect, device number 7 [ 194.197756][ T7023] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 194.763618][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.773302][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.162774][ T7028] netlink: 28 bytes leftover after parsing attributes in process `syz.2.185'. [ 196.718471][ T7039] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 197.189564][ T5910] usb 4-1: USB disconnect, device number 7 [ 197.545196][ T7062] netlink: 'syz.2.191': attribute type 1 has an invalid length. [ 198.045382][ T7065] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 198.105496][ T7065] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 198.191412][ T5957] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 198.357168][ T5957] usb 4-1: Using ep0 maxpacket: 16 [ 198.394717][ T5957] usb 4-1: config 0 has no interfaces? [ 198.426233][ T5957] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 198.467536][ T5957] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 198.509420][ T5957] usb 4-1: Manufacturer: syz [ 198.538945][ T7062] bond1: (slave gretap1): making interface the new active one [ 198.555526][ T5957] usb 4-1: config 0 descriptor?? [ 198.603408][ T7062] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 198.686319][ T7068] macvlan0: entered promiscuous mode [ 198.701411][ T7068] macvlan0: entered allmulticast mode [ 198.740384][ T7068] bond1: entered promiscuous mode [ 198.781485][ T7068] gretap1: entered promiscuous mode [ 198.800286][ T7068] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 199.674298][ T7090] netlink: 'syz.1.194': attribute type 20 has an invalid length. [ 199.682667][ T7090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.194'. [ 200.409807][ T7068] bond1: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 200.926689][ T7068] bond1: left promiscuous mode [ 200.931745][ T7068] gretap1: left promiscuous mode [ 201.018331][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.037339][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.107624][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.116991][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.753679][ T5889] usb 4-1: USB disconnect, device number 8 [ 201.990909][ T7104] netlink: 'syz.3.197': attribute type 7 has an invalid length. [ 203.501922][ T7125] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 203.565194][ T7126] netlink: 72 bytes leftover after parsing attributes in process `syz.3.200'. [ 203.591413][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 203.762191][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.797905][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 203.808148][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 203.827635][ T9] usb 2-1: Product: syz [ 203.836422][ T9] usb 2-1: Manufacturer: syz [ 203.848169][ T9] usb 2-1: SerialNumber: syz [ 204.103161][ T9] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 204.426974][ C0] usblp0: nonzero write bulk status received: -71 [ 204.439999][ T9] usb 2-1: USB disconnect, device number 8 [ 204.493837][ T7118] usblp0: removed [ 206.781313][ T5957] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 206.955417][ T5957] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 206.980372][ T5957] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.024874][ T5957] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 207.052794][ T5957] usb 3-1: config 1 has no interface number 1 [ 207.065331][ T5957] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 207.096565][ T5957] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 207.134474][ T5957] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 207.156147][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.171803][ T5957] usb 3-1: Product: syz [ 207.182988][ T5957] usb 3-1: Manufacturer: syz [ 207.193689][ T5957] usb 3-1: SerialNumber: syz [ 207.450027][ T5957] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 207.467004][ T5957] usb 3-1: MIDIStreaming interface descriptor not found [ 207.736974][ T5957] usb 3-1: USB disconnect, device number 7 [ 209.322420][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 209.524126][ T9] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 209.534464][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.553219][ T9] usb 2-1: Product: syz [ 209.561794][ T9] usb 2-1: Manufacturer: syz [ 209.571786][ T9] usb 2-1: SerialNumber: syz [ 209.585578][ T9] usb 2-1: config 0 descriptor?? [ 209.597286][ T9] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 209.688490][ T7189] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 209.795569][ T9] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 209.813384][ T9] sq905c 2-1:0.0: Get version command failed [ 209.819749][ T9] sq905c 2-1:0.0: probe with driver sq905c failed with error -71 [ 209.838265][ T9] usb 2-1: USB disconnect, device number 9 [ 210.139279][ T7149] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 211.398311][ T7208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.220'. [ 211.895970][ T7213] netlink: 24 bytes leftover after parsing attributes in process `syz.1.221'. [ 211.932646][ T7213] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 212.231459][ T5889] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 212.434202][ T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 212.461403][ T5889] usb 2-1: Using ep0 maxpacket: 8 [ 212.492482][ T5889] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.531908][ T5889] usb 2-1: config 0 has no interfaces? [ 212.581461][ T5889] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 212.609113][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.617707][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 212.631649][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.649922][ T24] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 212.667521][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.680292][ T5889] usb 2-1: Product: syz [ 212.686854][ T24] usb 4-1: Product: syz [ 212.696844][ T24] usb 4-1: Manufacturer: syz [ 212.708088][ T24] usb 4-1: SerialNumber: syz [ 212.717227][ T5889] usb 2-1: Manufacturer: syz [ 212.731405][ T5889] usb 2-1: SerialNumber: syz [ 212.778969][ T5889] usb 2-1: config 0 descriptor?? [ 212.957187][ T24] pxrc 4-1:1.0: Could not find endpoint [ 212.975021][ T24] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 213.005816][ T24] usb 4-1: USB disconnect, device number 9 [ 213.803249][ T7224] raw_sendmsg: syz.3.225 forgot to set AF_INET. Fix it! [ 213.866709][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 213.898985][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 213.907831][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 213.925002][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 213.937364][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 213.964854][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 213.984185][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 214.003416][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 214.017962][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 214.028362][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 214.032269][ T5910] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 214.277598][ T5910] usb 1-1: config index 0 descriptor too short (expected 141, got 72) [ 214.294295][ T5910] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 214.328295][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.376915][ T5910] usb 1-1: Product: syz [ 214.407201][ T5910] usb 1-1: Manufacturer: syz [ 214.430018][ T5910] usb 1-1: SerialNumber: syz [ 214.466623][ T5910] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 214.551725][ T24] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 214.719967][ T7226] chnl_net:caif_netlink_parms(): no params data found [ 215.068068][ T7226] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.075840][ T7226] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.084118][ T7226] bridge_slave_0: entered allmulticast mode [ 215.092574][ T7226] bridge_slave_0: entered promiscuous mode [ 215.119104][ T7226] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.131498][ T7226] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.160092][ T7226] bridge_slave_1: entered allmulticast mode [ 215.169281][ T7226] bridge_slave_1: entered promiscuous mode [ 215.313870][ T7226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.349293][ T7226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.631418][ T24] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 215.647942][ T24] ath9k_htc: Failed to initialize the device [ 215.699935][ T24] usb 1-1: ath9k_htc: USB layer deinitialized [ 216.001183][ T7226] team0: Port device team_slave_0 added [ 216.012590][ T7226] team0: Port device team_slave_1 added [ 216.060626][ T7226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.077467][ T7226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.112483][ T5827] Bluetooth: hci5: command tx timeout [ 216.147538][ T7226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.162058][ T7226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.190678][ T7226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.242916][ T7226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.337421][ T7226] hsr_slave_0: entered promiscuous mode [ 216.352320][ T7226] hsr_slave_1: entered promiscuous mode [ 216.358739][ T7226] debugfs: 'hsr0' already exists in 'hsr' [ 216.377048][ T7226] Cannot create hsr debugfs directory [ 216.901155][ T5889] usb 2-1: USB disconnect, device number 10 [ 216.977135][ T5920] usb 1-1: USB disconnect, device number 9 [ 217.078132][ T7178] Set syz1 is full, maxelem 65536 reached [ 217.279128][ T7240] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 217.458516][ T7226] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 217.485389][ T7248] Cannot find add_set index 0 as target [ 217.545951][ T7226] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 217.617557][ T7226] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 217.668767][ T7226] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 217.958543][ T7226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.017678][ T7226] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.074148][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.081350][ T5920] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 218.081360][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.143842][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.151060][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.191636][ T5827] Bluetooth: hci5: command tx timeout [ 218.309310][ T5920] usb 2-1: config 0 has an invalid interface number: 33 but max is 0 [ 218.330270][ T5920] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.379692][ T5920] usb 2-1: config 0 has no interface number 0 [ 218.401863][ T5920] usb 2-1: config 0 interface 33 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 218.418454][ T7226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.454506][ T5920] usb 2-1: config 0 interface 33 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 218.498747][ T5920] usb 2-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=68.64 [ 218.517803][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.546707][ T5920] usb 2-1: Product: syz [ 218.556835][ T5920] usb 2-1: Manufacturer: syz [ 218.577149][ T5920] usb 2-1: SerialNumber: syz [ 218.608551][ T5920] usb 2-1: config 0 descriptor?? [ 218.626684][ T7226] veth0_vlan: entered promiscuous mode [ 218.653520][ T7259] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 218.703456][ T7226] veth1_vlan: entered promiscuous mode [ 218.706446][ T5920] hdpvr 2-1:0.33: Could not find bulk-in endpoint [ 218.736636][ T5920] hdpvr 2-1:0.33: probe with driver hdpvr failed with error -12 [ 218.842000][ T7226] veth0_macvtap: entered promiscuous mode [ 218.884321][ T7226] veth1_macvtap: entered promiscuous mode [ 219.086808][ T7226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.270378][ T7226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.459503][ T71] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.495788][ T71] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.727312][ T71] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.775299][ T71] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.283328][ T5827] Bluetooth: hci5: command tx timeout [ 220.881923][ T7287] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 221.445926][ T9] usb 2-1: USB disconnect, device number 11 [ 221.571774][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.604989][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.807780][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.832415][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.010490][ T7299] 8021q: VLANs not supported on caif0 [ 222.352718][ T5827] Bluetooth: hci5: command tx timeout [ 222.544854][ T24] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 222.708047][ T7314] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 222.776844][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 222.824150][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 222.864777][ T24] usb 1-1: config 1 has an invalid interface number: 152 but max is 0 [ 222.908442][ T24] usb 1-1: config 1 has no interface number 0 [ 222.998220][ T24] usb 1-1: config 1 interface 152 has no altsetting 0 [ 223.201896][ T24] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0900, bcdDevice=17.6d [ 223.216122][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.276549][ T24] usb 1-1: Product: syz [ 223.293275][ T24] usb 1-1: Manufacturer: syz [ 223.396515][ T24] usb 1-1: SerialNumber: syz [ 223.773526][ T24] option 1-1:1.152: GSM modem (1-port) converter detected [ 223.790795][ T24] usb 1-1: USB disconnect, device number 10 [ 223.809119][ T24] option 1-1:1.152: device disconnected [ 223.837406][ T7322] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 224.540428][ T7336] binder: BC_ATTEMPT_ACQUIRE not supported [ 224.546990][ T7336] binder: 7334:7336 ioctl c0306201 200000000540 returned -22 [ 224.867040][ T7343] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 225.671343][ T5910] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 225.878917][ T5910] usb 3-1: unable to get BOS descriptor or descriptor too short [ 225.919532][ T5910] usb 3-1: config 3 has an invalid interface number: 19 but max is 0 [ 225.943436][ T5910] usb 3-1: config 3 has an invalid interface number: 4 but max is 0 [ 225.998372][ T5910] usb 3-1: config 3 has 2 interfaces, different from the descriptor's value: 1 [ 226.047201][ T5910] usb 3-1: config 3 has no interface number 0 [ 226.079616][ T5910] usb 3-1: config 3 has no interface number 1 [ 226.131387][ T5910] usb 3-1: config 3 interface 19 altsetting 9 endpoint 0x6 has invalid maxpacket 1040, setting to 64 [ 226.202924][ T5910] usb 3-1: config 3 interface 19 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 226.226864][ T5827] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 226.264793][ T5910] usb 3-1: too many endpoints for config 3 interface 4 altsetting 131: 175, using maximum allowed: 30 [ 226.377305][ T5910] usb 3-1: config 3 interface 4 altsetting 131 bulk endpoint 0x8E has invalid maxpacket 32 [ 226.498022][ T5910] usb 3-1: config 3 interface 4 altsetting 131 endpoint 0xC has invalid wMaxPacketSize 0 [ 226.538693][ T5910] usb 3-1: config 3 interface 4 altsetting 131 bulk endpoint 0xC has invalid maxpacket 0 [ 226.579932][ T5910] usb 3-1: config 3 interface 4 altsetting 131 has 2 endpoint descriptors, different from the interface descriptor's value: 175 [ 226.611684][ T7362] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 226.641261][ T5910] usb 3-1: config 3 interface 19 has no altsetting 0 [ 226.648005][ T5910] usb 3-1: config 3 interface 4 has no altsetting 0 [ 226.692682][ T5910] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=13.f5 [ 226.721449][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.742287][ T5910] usb 3-1: Product: syz [ 226.746700][ T5910] usb 3-1: Manufacturer: syz [ 226.773646][ T5910] usb 3-1: SerialNumber: syz [ 226.955849][ T7367] bond1: option resend_igmp: invalid value (1024) [ 226.962581][ T7367] bond1: option resend_igmp: allowed values 0 - 255 [ 226.975286][ T7367] bond1 (unregistering): Released all slaves [ 227.067034][ T5910] pl2303 3-1:3.19: required endpoints missing [ 227.099751][ T5910] pl2303 3-1:3.4: required interrupt-in endpoint missing [ 227.164979][ T5910] usb 3-1: USB disconnect, device number 8 [ 227.375787][ T7378] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 227.501559][ T5897] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 227.665283][ T5897] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 227.681095][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.705811][ T5897] usb 1-1: Product: syz [ 227.710218][ T5897] usb 1-1: Manufacturer: syz [ 227.739269][ T5897] usb 1-1: SerialNumber: syz [ 228.047638][ T5897] usb 1-1: unit 8 not found! [ 228.064729][ T5897] usb 1-1: unit 6 not found! [ 228.173778][ T5897] usb 1-1: USB disconnect, device number 11 [ 228.330694][ T6225] udevd[6225]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.479918][ T7393] netlink: 'syz.2.266': attribute type 8 has an invalid length. [ 229.723310][ T7416] netlink: 32 bytes leftover after parsing attributes in process `syz.0.272'. [ 230.992984][ T7436] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 231.966044][ T7452] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 232.924893][ T7472] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 233.336732][ T1169] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.127807][ T1169] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.323011][ T1169] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.408328][ T1169] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.511687][ T5889] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 234.701877][ T5889] usb 6-1: Using ep0 maxpacket: 8 [ 234.728306][ T5889] usb 6-1: config 64 has an invalid interface number: 19 but max is 0 [ 234.770192][ T5889] usb 6-1: config 64 has no interface number 0 [ 234.793558][ T5889] usb 6-1: config 64 interface 19 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 234.831397][ T5889] usb 6-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 234.858658][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.877082][ T1169] bridge_slave_1: left allmulticast mode [ 234.917871][ T1169] bridge_slave_1: left promiscuous mode [ 234.938564][ T1169] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.956662][ T5889] usb 6-1: probing VID:PID(2201:012C) [ 235.019423][ T5889] usb 6-1: vub300 testing UNKNOWN EndPoint(0) 02 [ 235.036836][ T1169] bridge_slave_0: left allmulticast mode [ 235.046693][ T5889] usb 6-1: vub300 ignoring EndPoint(0) 02 [ 235.061283][ T1169] bridge_slave_0: left promiscuous mode [ 235.081686][ T5889] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs [ 235.097879][ T1169] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.126700][ T5889] vub300 6-1:64.19: probe with driver vub300 failed with error -22 [ 235.200476][ T5889] usb 6-1: USB disconnect, device number 2 [ 235.681334][ T5889] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 235.780836][ T1169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.812025][ T1169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.839908][ T1169] bond0 (unregistering): Released all slaves [ 235.884052][ T5889] usb 4-1: unable to get BOS descriptor or descriptor too short [ 235.895452][ T5889] usb 4-1: not running at top speed; connect to a high speed hub [ 235.921020][ T5889] usb 4-1: config 12 has an invalid interface number: 173 but max is 1 [ 235.947335][ T5889] usb 4-1: config 12 has an invalid interface number: 173 but max is 1 [ 236.014082][ T5889] usb 4-1: config 12 has 1 interface, different from the descriptor's value: 2 [ 236.053488][ T5889] usb 4-1: config 12 has no interface number 0 [ 236.118033][ T5889] usb 4-1: config 12 interface 173 has no altsetting 1 [ 236.203672][ T5889] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=33.b7 [ 236.238473][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.283138][ T5889] usb 4-1: Product: syz [ 236.307870][ T5889] usb 4-1: Manufacturer: syz [ 236.345194][ T7529] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 236.352870][ T5889] usb 4-1: SerialNumber: syz [ 236.419035][ T7532] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 236.744389][ T1169] hsr_slave_0: left promiscuous mode [ 236.774144][ T1169] hsr_slave_1: left promiscuous mode [ 236.784517][ T1169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.806263][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.845303][ T1169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.881021][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.958351][ T7548] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 237.016712][ T1169] veth1_macvtap: left promiscuous mode [ 237.057498][ T1169] veth0_macvtap: left promiscuous mode [ 237.106771][ T1169] veth1_vlan: left promiscuous mode [ 237.135651][ T1169] veth0_vlan: left promiscuous mode [ 237.776577][ T7545] fuse: Bad value for 'fd' [ 239.486383][ T5897] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 239.672463][ T5897] usb 6-1: Using ep0 maxpacket: 8 [ 239.703538][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 239.758478][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 239.774270][ T5897] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 239.785558][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 239.809197][ T5897] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 239.826011][ T5897] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 239.859244][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.895863][ T5897] usb 6-1: config 0 descriptor?? [ 239.913767][ T7561] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 240.160069][ T5829] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 240.161160][ C1] Bluetooth: hci2: Unexpected continuation: 1 bytes [ 240.168016][ T5829] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 240.181352][ T5829] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 240.189266][ T5829] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 240.197182][ T5829] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 240.205437][ T5829] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 240.212527][ T5829] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 240.219494][ T5829] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 240.226787][ T5829] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 240.233996][ T5829] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 240.240900][ T5829] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 240.247916][ T5829] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 240.255509][ T5829] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 240.263527][ T5829] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 240.270460][ T5829] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 240.277864][ T5829] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 240.284790][ T5829] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 240.292390][ T5829] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 240.299512][ T5829] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 240.306665][ T5829] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 240.313734][ T5829] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 240.320719][ T5829] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 240.327792][ T5829] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 240.335378][ T5829] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 240.342430][ T5829] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 240.349704][ T5829] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 240.356701][ T5829] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 240.364096][ T5829] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 240.371351][ T5829] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 240.387122][ T5897] usb 6-1: USB disconnect, device number 3 [ 240.394864][ T5827] Bluetooth: hci2: Opcode 0x0c03 failed: -71 [ 240.444204][ T5889] usb 4-1: USB disconnect, device number 10 [ 241.109927][ T7594] xt_cgroup: invalid path, errno=-2 [ 241.649856][ T1169] IPVS: stop unused estimator thread 0... [ 241.847470][ T7608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.316'. [ 243.361777][ T7629] Cannot find add_set index 0 as target [ 244.501550][ T7645] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 245.215308][ T7642] kthread_run failed with err -4 [ 245.260489][ T7651] team0: entered promiscuous mode [ 245.283881][ T7651] team_slave_0: entered promiscuous mode [ 245.304369][ T7651] team_slave_1: entered promiscuous mode [ 246.151869][ T7684] xt_cgroup: invalid path, errno=-2 [ 248.283309][ T7722] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 250.151659][ T7742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.347'. [ 250.455480][ T7756] xt_cgroup: invalid path, errno=-2 [ 252.427954][ T7792] netlink: 48 bytes leftover after parsing attributes in process `syz.3.360'. [ 252.855233][ T7794] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 253.361420][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.366'. [ 253.769309][ T7825] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 255.117131][ T7857] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 255.901307][ T5889] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 256.066863][ T5889] usb 4-1: Using ep0 maxpacket: 8 [ 256.095957][ T5889] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.120976][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.127697][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.138056][ T5889] usb 4-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 256.212844][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.284379][ T5889] usb 4-1: config 0 descriptor?? [ 256.471663][ T5889] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 256.665126][ T7883] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 257.321665][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 257.425670][ T7911] fuse: root generation should be zero [ 257.496101][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 257.506923][ T24] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 257.528065][ T24] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 257.539972][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.584436][ T24] usb 6-1: Product: syz [ 257.612459][ T24] usb 6-1: Manufacturer: syz [ 257.617361][ T24] usb 6-1: SerialNumber: syz [ 257.658966][ T24] usb 6-1: config 0 descriptor?? [ 257.691816][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 257.743148][ T24] usb 6-1: setting power ON [ 257.763848][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 257.857824][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 257.895362][ T7902] dvb-usb: bulk message failed: -22 (3/0) [ 257.909979][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 257.943821][ T24] usb 6-1: media controller created [ 258.058621][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 258.159207][ T24] usb 6-1: selecting invalid altsetting 6 [ 258.203491][ T24] usb 6-1: digital interface selection failed (-22) [ 258.228981][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 258.261500][ T24] usb 6-1: setting power OFF [ 258.279845][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 258.306356][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 258.335702][ T24] (NULL device *): no alternate interface [ 258.474772][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 258.530790][ T5889] usb 4-1: USB disconnect, device number 11 [ 258.576511][ T24] usb 6-1: USB disconnect, device number 4 [ 258.878747][ T7947] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 262.131281][ T5889] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 262.291422][ T5889] usb 1-1: Using ep0 maxpacket: 8 [ 262.304270][ T5889] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.321542][ T5889] usb 1-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 262.330903][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.349340][ T5889] usb 1-1: config 0 descriptor?? [ 262.369253][ T5889] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 264.387455][ T8062] netlink: 12 bytes leftover after parsing attributes in process `syz.5.421'. [ 264.491367][ T5831] usb 1-1: USB disconnect, device number 12 [ 267.283003][ T5920] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 267.445053][ T5920] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 267.469906][ T5920] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 267.511365][ T5920] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 267.537636][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.590378][ T5920] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 267.611122][ T5920] usb 4-1: invalid MIDI out EP 0 [ 267.858176][ T5920] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 267.892581][ T5920] usb 4-1: USB disconnect, device number 12 [ 268.061393][ T5957] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 268.222725][ T5957] usb 3-1: Using ep0 maxpacket: 8 [ 268.246855][ T5957] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.284049][ T5957] usb 3-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 268.325442][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.437846][ T8125] netlink: 'syz.3.436': attribute type 10 has an invalid length. [ 268.454904][ T8125] dummy0: left allmulticast mode [ 268.484715][ T8125] team0: Port device dummy0 added [ 268.495886][ T8127] netlink: 'syz.3.436': attribute type 10 has an invalid length. [ 268.587488][ T8127] team0: Port device dummy0 removed [ 268.610399][ T8127] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 268.623385][ T5957] usb 3-1: config 0 descriptor?? [ 268.695945][ T5957] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 268.903728][ T8131] xt_cgroup: invalid path, errno=-2 [ 270.723724][ T5831] usb 3-1: USB disconnect, device number 9 [ 273.047642][ T8181] netlink: 'syz.3.449': attribute type 27 has an invalid length. [ 273.705160][ T8200] xt_cgroup: invalid path, errno=-2 [ 273.931412][ T5957] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 274.132959][ T5957] usb 1-1: Using ep0 maxpacket: 8 [ 274.168287][ T5957] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.256627][ T5957] usb 1-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 274.314342][ T5957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.388147][ T5957] usb 1-1: config 0 descriptor?? [ 274.456201][ T5957] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 276.010534][ T8227] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 276.557895][ T5910] usb 1-1: USB disconnect, device number 13 [ 278.157268][ T8271] netlink: 20 bytes leftover after parsing attributes in process `syz.1.473'. [ 278.484142][ T8275] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 278.742336][ T5910] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 278.922273][ T5910] usb 2-1: Using ep0 maxpacket: 8 [ 278.949121][ T5910] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.980575][ T5910] usb 2-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 279.020290][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.046305][ T5910] usb 2-1: config 0 descriptor?? [ 279.159462][ T5910] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 279.565348][ T8298] vcan0: tx address claim with dest, not broadcast [ 279.685879][ T8303] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 280.758790][ T8320] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 280.835400][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.490'. [ 281.107599][ T8332] C: renamed from team_slave_0 (while UP) [ 281.117674][ T8332] netlink: 'syz.5.493': attribute type 4 has an invalid length. [ 281.127618][ T8332] netlink: 116 bytes leftover after parsing attributes in process `syz.5.493'. [ 281.137551][ T8332] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 281.200601][ T8334] tun0: tun_chr_ioctl cmd 2148553947 [ 281.244948][ T9] usb 2-1: USB disconnect, device number 12 [ 282.571625][ T8358] netlink: 44 bytes leftover after parsing attributes in process `syz.2.501'. [ 282.591710][ T8358] Lè+߬ç³Õ: renamed from bridge_slave_0 (while UP) [ 282.831409][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 282.905935][ T8363] pim6reg0: tun_chr_ioctl cmd 1074025676 [ 282.920922][ T8363] pim6reg0: owner set to 0 [ 283.001394][ T5831] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 283.013253][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 283.024255][ T9] usb 1-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 283.035008][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.043687][ T9] usb 1-1: Product: syz [ 283.048064][ T9] usb 1-1: Manufacturer: syz [ 283.053473][ T9] usb 1-1: SerialNumber: syz [ 283.161582][ T5831] usb 6-1: Using ep0 maxpacket: 16 [ 283.172089][ T5831] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.186089][ T5831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 283.222225][ T5831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 283.237442][ T5831] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 283.253980][ T5831] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 283.271800][ T5831] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 283.285098][ T5831] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 283.285218][ T8373] tap0: tun_chr_ioctl cmd 1074025680 [ 283.293493][ T5831] usb 6-1: Manufacturer: syz [ 283.327536][ T5831] usb 6-1: config 0 descriptor?? [ 283.451642][ T5910] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 283.482441][ T9] mxuport 1-1:254.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 283.499676][ T9] mxuport 1-1:254.0: probe with driver mxuport failed with error -5 [ 283.611322][ T5910] usb 2-1: Using ep0 maxpacket: 8 [ 283.636530][ T5910] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.661675][ T5910] usb 2-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 283.681382][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.705939][ T5957] usb 1-1: USB disconnect, device number 14 [ 283.735953][ T5910] usb 2-1: config 0 descriptor?? [ 283.796674][ T5910] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 283.881502][ T5831] rc_core: IR keymap rc-hauppauge not found [ 283.894397][ T5831] Registered IR keymap rc-empty [ 283.909132][ T5831] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 283.941335][ T5831] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 283.978208][ T5831] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 284.019308][ T5831] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input8 [ 284.066670][ T5831] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 284.112778][ T5831] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 284.151560][ T5831] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 284.191873][ T5831] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 284.264803][ T5831] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 284.302918][ T5831] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 284.355747][ T5831] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 284.411416][ T5831] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 284.461385][ T5831] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 284.501364][ T5831] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 284.540173][ T5831] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 284.575030][ T5831] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 284.696335][ T5831] usb 6-1: USB disconnect, device number 5 [ 285.661779][ T5910] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 285.750922][ T8415] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 285.824535][ T5910] usb 3-1: Using ep0 maxpacket: 8 [ 285.843291][ T5910] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 285.885732][ T5910] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 285.925162][ T5910] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 285.958501][ T5910] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 286.009588][ T5910] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 286.070227][ T5910] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 286.107787][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.127971][ T5957] usb 2-1: USB disconnect, device number 13 [ 286.378539][ T5910] usb 3-1: GET_CAPABILITIES returned 0 [ 286.406062][ T5910] usbtmc 3-1:16.0: can't read capabilities [ 286.582536][ T5897] usb 3-1: USB disconnect, device number 10 [ 286.782566][ T8426] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 287.311518][ T5897] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 287.491327][ T5897] usb 4-1: Using ep0 maxpacket: 16 [ 287.514097][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.557876][ T5897] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 287.611096][ T5897] usb 4-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 287.647030][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.675339][ T5897] usb 4-1: config 0 descriptor?? [ 288.103079][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 288.139843][ T5897] zeroplus 0003:0C12:0030.0001: unknown main item tag 0x0 [ 288.177033][ T5897] zeroplus 0003:0C12:0030.0001: unknown main item tag 0x0 [ 288.194884][ T5897] zeroplus 0003:0C12:0030.0001: unknown main item tag 0x0 [ 288.205220][ T5897] zeroplus 0003:0C12:0030.0001: unknown main item tag 0x0 [ 288.231970][ T5897] zeroplus 0003:0C12:0030.0001: unknown main item tag 0x0 [ 288.240059][ T5897] zeroplus 0003:0C12:0030.0001: unknown main item tag 0x0 [ 288.249874][ T5897] zeroplus 0003:0C12:0030.0001: unknown main item tag 0x3 [ 288.262036][ T5897] zeroplus 0003:0C12:0030.0001: unknown main item tag 0x2 [ 288.288538][ T5897] zeroplus 0003:0C12:0030.0001: unbalanced collection at end of report description [ 288.317070][ T5897] zeroplus 0003:0C12:0030.0001: parse failed [ 288.329336][ T5897] zeroplus 0003:0C12:0030.0001: probe with driver zeroplus failed with error -22 [ 288.341142][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 288.350766][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.374602][ T9] usb 1-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 288.387423][ T5897] usb 4-1: USB disconnect, device number 13 [ 288.393568][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.429698][ T9] usb 1-1: config 0 descriptor?? [ 288.462061][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 290.826073][ T9] usb 1-1: USB disconnect, device number 15 [ 290.918265][ T8502] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 290.936593][ T5897] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 290.951628][ T8502] pim6reg1: linktype set to 6 [ 291.113751][ T5897] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 291.131261][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.155913][ T5897] usb 3-1: config 0 descriptor?? [ 291.174728][ T5897] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 291.270219][ T8518] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 291.805224][ T5897] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 291.838257][ T5897] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 291.865748][ T8520] pimreg: tun_chr_ioctl cmd 1074025677 [ 291.883201][ T8520] pimreg: linktype set to 805 [ 292.024962][ T5920] usb 3-1: USB disconnect, device number 11 [ 292.531293][ T5897] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 292.982828][ T5910] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 293.012897][ T5897] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 293.039712][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.062042][ T5897] usb 2-1: Product: syz [ 293.069042][ T5897] usb 2-1: Manufacturer: syz [ 293.079007][ T5897] usb 2-1: SerialNumber: syz [ 293.111088][ T5897] usb 2-1: config 0 descriptor?? [ 293.198018][ T5910] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 293.206617][ T5910] usb 3-1: config 0 has no interface number 0 [ 293.213270][ T5910] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.225477][ T5910] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.288094][ T5910] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 293.327179][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.341616][ T796] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 293.397187][ T5910] usb 3-1: config 0 descriptor?? [ 293.444428][ T5957] usb 2-1: USB disconnect, device number 14 [ 293.502023][ T796] usb 4-1: Using ep0 maxpacket: 8 [ 293.523404][ T796] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.555025][ T796] usb 4-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 293.584795][ T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.618697][ T796] usb 4-1: config 0 descriptor?? [ 293.654969][ T796] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 293.860796][ T5910] prodikeys 0003:041E:2801.0002: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input1 [ 293.877930][ T5910] hid_prodikeys: hid-prodikeys: failed to find output report [ 293.877930][ T5910] [ 294.079232][ T796] usb 3-1: USB disconnect, device number 12 [ 294.102390][ T8548] fido_id[8548]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:041E:2801.0002/report_descriptor': No such device [ 294.571282][ T796] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 294.741253][ T796] usb 1-1: Using ep0 maxpacket: 16 [ 294.761701][ T796] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.789387][ T796] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.829854][ T796] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 294.881484][ T796] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 294.902248][ T796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.930169][ T796] usb 1-1: config 0 descriptor?? [ 294.970628][ T8564] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 295.364644][ T796] microsoft 0003:045E:07DA.0003: unbalanced collection at end of report description [ 295.425799][ T796] microsoft 0003:045E:07DA.0003: parse failed [ 295.438771][ T796] microsoft 0003:045E:07DA.0003: probe with driver microsoft failed with error -22 [ 295.575672][ T796] usb 1-1: USB disconnect, device number 16 [ 295.979267][ T5831] usb 4-1: USB disconnect, device number 14 [ 296.266235][ T8576] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 298.228309][ T8614] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 298.599819][ T8628] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 298.744507][ T8636] netlink: 36 bytes leftover after parsing attributes in process `syz.1.587'. [ 300.151310][ T5831] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 300.339315][ T5831] usb 3-1: Using ep0 maxpacket: 8 [ 300.346804][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 300.401291][ T5831] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 300.410846][ T8656] syzkaller1: entered promiscuous mode [ 300.420661][ T8656] syzkaller1: entered allmulticast mode [ 300.467488][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.513583][ T5831] usb 3-1: config 0 descriptor?? [ 300.845042][ T5831] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 300.897824][ T5827] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 300.931699][ T5910] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 301.133531][ T5910] usb 1-1: Using ep0 maxpacket: 32 [ 301.154929][ T5910] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 301.187824][ T5910] usb 1-1: config 0 interface 0 has no altsetting 0 [ 301.210229][ T5910] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 301.250180][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.269625][ T5910] usb 1-1: config 0 descriptor?? [ 301.799262][ T5910] corsair-cpro 0003:1B1C:0C10.0004: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 301.841281][ T5831] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 302.025538][ T5831] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.059801][ T5957] usb 3-1: USB disconnect, device number 13 [ 302.085287][ T5831] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 302.148635][ T5831] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 302.175827][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.194486][ T5831] usb 4-1: Product: syz [ 302.204395][ T5910] corsair-cpro 0003:1B1C:0C10.0004: probe with driver corsair-cpro failed with error -71 [ 302.219549][ T5831] usb 4-1: Manufacturer: syz [ 302.245185][ T5831] usb 4-1: SerialNumber: syz [ 302.278593][ T8692] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 302.282289][ T5910] usb 1-1: USB disconnect, device number 17 [ 302.832348][ T8700] syzkaller1: entered promiscuous mode [ 302.888622][ T8700] syzkaller1: entered allmulticast mode [ 303.316997][ T5831] cdc_ncm 4-1:1.0: bind() failure [ 303.340730][ T5831] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 303.365589][ T5831] cdc_ncm 4-1:1.1: bind() failure [ 303.389743][ T5831] usb 4-1: USB disconnect, device number 15 [ 303.667641][ T30] audit: type=1326 audit(1775197741.757:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8717 comm="syz.1.615" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0c17f9c819 code=0x0 [ 303.929351][ T8728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.619'. [ 303.940819][ T8728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.619'. [ 303.971255][ T5831] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 304.141778][ T5831] usb 1-1: Using ep0 maxpacket: 32 [ 304.154223][ T5831] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.178358][ T5831] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.204436][ T5831] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 304.216225][ T5831] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 304.226090][ T5831] usb 1-1: Product: syz [ 304.232557][ T5831] usb 1-1: Manufacturer: syz [ 304.279629][ T5831] hub 1-1:4.0: USB hub found [ 304.301345][ T5897] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 304.474841][ T5897] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.494301][ T5897] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 304.508396][ T5831] hub 1-1:4.0: config failed, hub has too many ports! (err -19) [ 304.521233][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.558888][ T5897] usb 4-1: config 0 descriptor?? [ 304.577829][ T5897] pwc: Askey VC010 type 2 USB webcam detected. [ 304.851593][ T5957] usb 1-1: USB disconnect, device number 18 [ 304.962263][ T8741] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 304.990995][ T5897] pwc: recv_control_msg error -32 req 02 val 2b00 [ 305.007741][ T5897] pwc: recv_control_msg error -32 req 02 val 2700 [ 305.172508][ T5957] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 305.224182][ T5897] pwc: recv_control_msg error -71 req 04 val 1000 [ 305.236693][ T5897] pwc: recv_control_msg error -71 req 04 val 1300 [ 305.253083][ T8743] netlink: 16390 bytes leftover after parsing attributes in process `syz.5.624'. [ 305.262050][ T5897] pwc: recv_control_msg error -71 req 04 val 1400 [ 305.284742][ T5897] pwc: recv_control_msg error -71 req 02 val 2000 [ 305.295480][ T5897] pwc: recv_control_msg error -71 req 02 val 2100 [ 305.306299][ T5897] pwc: recv_control_msg error -71 req 04 val 1500 [ 305.316415][ T5897] pwc: recv_control_msg error -71 req 02 val 2500 [ 305.325510][ T5897] pwc: recv_control_msg error -71 req 02 val 2400 [ 305.348404][ T5897] pwc: recv_control_msg error -71 req 02 val 2600 [ 305.365925][ T5897] pwc: recv_control_msg error -71 req 02 val 2900 [ 305.367300][ T5957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 305.386297][ T5897] pwc: recv_control_msg error -71 req 02 val 2800 [ 305.420440][ T5897] pwc: recv_control_msg error -71 req 04 val 1100 [ 305.437995][ T5897] pwc: recv_control_msg error -71 req 04 val 1200 [ 305.447083][ T5957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.465838][ T5897] pwc: Registered as video103. [ 305.483788][ T5897] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 305.505392][ T5957] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 305.555579][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.607330][ T5957] usb 3-1: config 0 descriptor?? [ 305.613471][ T5897] usb 4-1: USB disconnect, device number 16 [ 306.132081][ T5957] isku 0003:1E7D:319C.0005: unknown main item tag 0x0 [ 306.156103][ T5957] isku 0003:1E7D:319C.0005: unknown main item tag 0x0 [ 306.203392][ T5957] isku 0003:1E7D:319C.0005: unknown main item tag 0x0 [ 306.249848][ T5957] isku 0003:1E7D:319C.0005: unknown main item tag 0x0 [ 306.308735][ T5957] isku 0003:1E7D:319C.0005: unknown main item tag 0x0 [ 306.362127][ T5957] isku 0003:1E7D:319C.0005: unknown main item tag 0x0 [ 306.431412][ T5957] isku 0003:1E7D:319C.0005: item fetching failed at offset 6/7 [ 306.494976][ T5957] isku 0003:1E7D:319C.0005: parse failed [ 306.520273][ T5957] isku 0003:1E7D:319C.0005: probe with driver isku failed with error -22 [ 306.580797][ T5957] usb 3-1: USB disconnect, device number 14 [ 306.741286][ T796] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 306.948171][ T796] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 307.012867][ T796] usb 4-1: config 0 has no interface number 0 [ 307.037428][ T8767] netlink: 9 bytes leftover after parsing attributes in process `syz.2.631'. [ 307.047249][ T796] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 307.058063][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.068099][ T8767] gretap0: entered promiscuous mode [ 307.075210][ T796] usb 4-1: Product: syz [ 307.079981][ T796] usb 4-1: Manufacturer: syz [ 307.108608][ T796] usb 4-1: SerialNumber: syz [ 307.121962][ T796] usb 4-1: config 0 descriptor?? [ 307.994371][ T796] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 308.007865][ T796] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 308.021128][ T796] asix 4-1:0.251: probe with driver asix failed with error -71 [ 308.084120][ T796] usb 4-1: USB disconnect, device number 17 [ 308.385927][ T8787] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 308.579173][ T8796] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 308.741532][ T5831] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 308.774936][ T8802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.644'. [ 308.866773][ T30] audit: type=1326 audit(1775197746.957:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8805 comm="syz.3.645" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f736979c819 code=0x0 [ 308.944552][ T5831] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 308.953574][ T5831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.976149][ T5831] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 308.987599][ T5831] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 308.999842][ T5831] usb 6-1: Manufacturer: syz [ 309.019143][ T5831] usb 6-1: config 0 descriptor?? [ 309.234629][ T5831] rc_core: IR keymap rc-hauppauge not found [ 309.259159][ T5831] Registered IR keymap rc-empty [ 309.310341][ T5831] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 309.352401][ T5831] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input10 [ 309.411723][ T5831] usb 6-1: USB disconnect, device number 6 [ 311.261267][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 311.292845][ T8852] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.661'. [ 311.442697][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.487967][ T8859] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 311.516805][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.531473][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 311.564800][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 311.575677][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.606810][ T9] usb 6-1: config 0 descriptor?? [ 311.721383][ T5910] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 311.891254][ T5910] usb 2-1: Using ep0 maxpacket: 16 [ 311.912785][ T5910] usb 2-1: too many configurations: 123, using maximum allowed: 8 [ 311.938282][ T5910] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.957853][ T5910] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.970270][ T5910] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.000179][ T5910] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.026094][ T5910] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.028910][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 312.091893][ T5910] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.103781][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 312.114272][ T5910] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.140501][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 312.163475][ T5910] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.178269][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 312.201589][ T5910] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 312.211206][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 312.211574][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 312.258914][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 312.286434][ T5910] usb 2-1: SerialNumber: syz [ 312.311568][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 312.322657][ T5910] usb 2-1: config 0 descriptor?? [ 312.334919][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 312.355114][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 312.361314][ T5910] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input11 [ 312.416046][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 312.547814][ T9] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 312.624412][ T9] usb 6-1: USB disconnect, device number 7 [ 312.636170][ T5180] bcm5974 2-1:0.0: could not read from device [ 312.715893][ T5180] bcm5974 2-1:0.0: could not read from device [ 312.724372][ T5910] usb 2-1: USB disconnect, device number 15 [ 312.880812][ T8870] fido_id[8870]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 313.681254][ T5910] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 313.874032][ T5910] usb 4-1: Using ep0 maxpacket: 32 [ 313.904257][ T5910] usb 4-1: unable to get BOS descriptor or descriptor too short [ 313.931326][ T5910] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.987380][ T5910] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 314.023830][ T5910] usb 4-1: config 1 has no interface number 0 [ 314.045356][ T5910] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 314.083414][ T5910] usb 4-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 314.114712][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.155746][ T5910] usb 4-1: Product: syz [ 314.160140][ T5910] usb 4-1: Manufacturer: syz [ 314.184631][ T5910] usb 4-1: SerialNumber: syz [ 314.629961][ T5910] usb 4-1: USB disconnect, device number 18 [ 314.782561][ T5936] udevd[5936]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 315.261772][ T8918] tipc: Started in network mode [ 315.275141][ T8918] tipc: Node identity ac14140f, cluster identity 4711 [ 315.292309][ T8918] tipc: New replicast peer: 255.255.255.255 [ 315.312242][ T8918] tipc: Enabled bearer , priority 10 [ 315.470387][ T8921] netlink: 'syz.3.683': attribute type 10 has an invalid length. [ 315.529267][ T8922] netlink: 'syz.3.683': attribute type 10 has an invalid length. [ 315.543934][ T8921] bond0: (slave dummy0): Releasing backup interface [ 315.593983][ T8921] team0: Port device dummy0 added [ 316.068934][ T8922] team0: Port device dummy0 removed [ 316.163062][ T8922] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 316.564589][ T796] tipc: Node number set to 2886997007 [ 317.558765][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.565388][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.089540][ T8961] loop8: detected capacity change from 0 to 7 [ 318.114356][ T8961] Dev loop8: unable to read RDB block 7 [ 318.124790][ T8961] loop8: unable to read partition table [ 318.137086][ T8961] loop8: partition table beyond EOD, truncated [ 318.152355][ T8961] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 318.323674][ T8958] netlink: 44 bytes leftover after parsing attributes in process `syz.0.691'. [ 319.398246][ T8982] loop7: detected capacity change from 0 to 6 [ 319.416753][ T8982] Dev loop7: unable to read RDB block 6 [ 319.429903][ T8982] loop7: unable to read partition table [ 319.447435][ T8982] loop7: partition table beyond EOD, truncated [ 319.462847][ T8982] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 319.505639][ C0] operation not supported error, dev loop7, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10800800 phys_seg 0 prio class 2 [ 319.691875][ T8985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.699'. [ 320.067155][ T8995] syzkaller1: entered promiscuous mode [ 320.080017][ T8995] syzkaller1: entered allmulticast mode [ 320.219689][ T8998] netlink: 27 bytes leftover after parsing attributes in process `syz.1.704'. [ 320.893756][ T9010] vcan0: tx drop: invalid sa for name 0x0000000007fffffe [ 322.930756][ T9054] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 323.268735][ T5831] IPVS: starting estimator thread 0... [ 323.391373][ T9069] IPVS: using max 25 ests per chain, 60000 per kthread [ 324.046025][ T9083] netlink: 8 bytes leftover after parsing attributes in process `syz.5.730'. [ 324.334780][ T5957] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 324.535534][ T5957] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 324.570722][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.606188][ T5957] usb 2-1: Product: syz [ 324.628185][ T5957] usb 2-1: Manufacturer: syz [ 324.652358][ T5957] usb 2-1: SerialNumber: syz [ 325.126742][ T5957] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 325.152908][ T30] audit: type=1800 audit(1775197763.237:228): pid=9104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.738" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 325.180283][ T5957] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 325.551264][ T5831] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 325.726518][ T5831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.752288][ T5831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.766404][ T5831] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 325.796140][ T5831] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 325.806345][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.813041][ T5957] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 325.838499][ T5957] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 325.850805][ T5957] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 325.850924][ T9118] loop4: detected capacity change from 0 to 7 [ 325.872389][ T5831] usb 1-1: config 0 descriptor?? [ 325.877876][ T5957] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 325.907386][ T5957] usb 2-1: USB disconnect, device number 16 [ 325.910580][ T9118] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 325.919332][ T9118] loop4: partition table partially beyond EOD, truncated [ 325.927386][ T9118] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 326.048071][ T6225] udevd[6225]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 326.337361][ T5831] hid_parser_main: 5 callbacks suppressed [ 326.337388][ T5831] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 326.361086][ T5831] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 326.369857][ T5831] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 326.377636][ T5831] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 326.386541][ T5831] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 326.406228][ T5831] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 326.589586][ T5920] usb 1-1: USB disconnect, device number 19 [ 326.709733][ T5827] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 326.807798][ T9137] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 328.703902][ T9175] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 329.390121][ T9190] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 329.909258][ T30] audit: type=1326 audit(1775197767.997:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9197 comm="syz.5.765" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5edff9c819 code=0x0 [ 330.090189][ T9204] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 331.311289][ T5920] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 331.506694][ T5920] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 331.527747][ T5920] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 331.558702][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 331.624053][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 331.686153][ T5920] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 331.741333][ T5831] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 331.757512][ T5920] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 331.800485][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.852584][ T5920] usb 4-1: config 0 descriptor?? [ 331.891746][ T9216] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 331.956625][ T5831] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.004817][ T5831] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.072389][ T5831] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 332.113976][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 332.167077][ T5831] usb 2-1: Product: syz [ 332.193457][ T5831] usb 2-1: SerialNumber: syz [ 332.382739][ T5920] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xd [ 332.515705][ T5920] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 332.696759][ T796] usb 4-1: USB disconnect, device number 19 [ 332.879290][ T9234] fido_id[9234]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 333.276528][ T5831] cdc_ncm 2-1:1.0: bind() failure [ 333.319828][ T5831] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 333.368463][ T5831] cdc_ncm 2-1:1.1: bind() failure [ 333.427374][ T9243] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 333.507388][ T5831] usb 2-1: USB disconnect, device number 17 [ 333.889981][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.784'. [ 334.211345][ T5920] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 334.401268][ T5920] usb 6-1: Using ep0 maxpacket: 32 [ 334.424894][ T5920] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 334.447442][ T5920] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 334.465673][ T5920] usb 6-1: config 0 interface 0 has no altsetting 0 [ 334.475261][ T5920] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 334.496330][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.514751][ T5920] usb 6-1: Product: syz [ 334.527434][ T5920] usb 6-1: Manufacturer: syz [ 334.533070][ T5920] usb 6-1: SerialNumber: syz [ 334.540978][ T5920] usb 6-1: config 0 descriptor?? [ 334.960266][ T5920] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 335.615203][ T5910] usb 6-1: USB disconnect, device number 8 [ 335.681819][ T5920] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 335.854320][ T5920] usb 3-1: unable to get BOS descriptor or descriptor too short [ 335.880727][ T5920] usb 3-1: not running at top speed; connect to a high speed hub [ 335.908379][ T5920] usb 3-1: config 1 interface 0 has no altsetting 0 [ 335.943188][ T5920] usb 3-1: string descriptor 0 read error: -22 [ 335.968030][ T5920] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 335.987758][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.471117][ T5920] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 336.507707][ T5920] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 336.532844][ T5920] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 336.545866][ T5920] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 336.583038][ T5920] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 336.611004][ T5920] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 336.626091][ T9309] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 336.641238][ T5920] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 336.658472][ T5920] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 336.669992][ T5920] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 336.714415][ T5920] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 336.875404][ T5920] hid-picolcd 0003:04D8:C002.0009: No report with id 0x11 found [ 336.959109][ T5920] usb 3-1: USB disconnect, device number 15 [ 340.118787][ T5829] Bluetooth: hci5: command 0x0406 tx timeout [ 341.380348][ T9432] netlink: 'syz.5.818': attribute type 11 has an invalid length. [ 341.440054][ T9432] netlink: 4 bytes leftover after parsing attributes in process `syz.5.818'. [ 341.535266][ T9432] netlink: 'syz.5.818': attribute type 11 has an invalid length. [ 341.544262][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.570675][ T9432] netlink: 4 bytes leftover after parsing attributes in process `syz.5.818'. [ 341.581222][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.603166][ T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.641861][ T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.669813][ T9438] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 342.089660][ T9450] capability: warning: `syz.5.823' uses 32-bit capabilities (legacy support in use) [ 342.413422][ T9460] input: syz0 as /devices/virtual/input/input13 [ 342.591713][ T5831] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 342.787249][ T5831] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 342.807155][ T5831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.842365][ T5831] usb 6-1: config 0 descriptor?? [ 342.858703][ T5831] cp210x 6-1:0.0: cp210x converter detected [ 343.169390][ T5831] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 343.211380][ T5831] cp210x 6-1:0.0: querying part number failed [ 343.272748][ T5831] usb 6-1: cp210x converter now attached to ttyUSB0 [ 343.346188][ T5831] usb 6-1: USB disconnect, device number 9 [ 343.377593][ T5831] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 343.426715][ T5831] cp210x 6-1:0.0: device disconnected [ 346.174332][ T9523] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 346.245832][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 346.515249][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.578854][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.609177][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 346.666902][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 346.699928][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.756499][ T9] usb 1-1: config 0 descriptor?? [ 346.907528][ T5827] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 347.301724][ T9] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 348.551315][ T796] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 348.713479][ T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.736019][ T796] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 348.757099][ T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.781103][ T796] usb 2-1: config 0 descriptor?? [ 349.042619][ T796] usbhid 2-1:0.0: can't add hid device: -71 [ 349.072635][ T796] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 349.137017][ T796] usb 2-1: USB disconnect, device number 18 [ 349.329998][ T9] usb 1-1: USB disconnect, device number 20 [ 349.633308][ T796] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 349.864224][ T796] usb 2-1: Using ep0 maxpacket: 16 [ 349.889155][ T796] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.930441][ T796] usb 2-1: config 0 interface 0 has no altsetting 0 [ 349.938576][ T5910] hid_parser_main: 3543 callbacks suppressed [ 349.938594][ T5910] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 349.997753][ T796] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 350.050657][ T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.075431][ T5910] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 350.128470][ T796] usb 2-1: config 0 descriptor?? [ 350.208065][ T9593] pim6reg1: entered promiscuous mode [ 350.230771][ T9593] pim6reg1: entered allmulticast mode [ 350.600196][ T796] mcp2221 0003:04D8:00DD.000C: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 350.782750][ C0] ================================================================== [ 350.791067][ C0] BUG: KASAN: use-after-free in mcp2221_raw_event+0x106a/0x1240 [ 350.798869][ C0] Read of size 1 at addr ffff8880590abfff by task kworker/0:2/796 [ 350.806879][ C0] [ 350.809242][ C0] CPU: 0 UID: 0 PID: 796 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 350.809268][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 350.809294][ C0] Workqueue: usb_hub_wq hub_event [ 350.809330][ C0] Call Trace: [ 350.809345][ C0] [ 350.809351][ C0] dump_stack_lvl+0xe8/0x150 [ 350.809391][ C0] print_report+0xba/0x230 [ 350.809419][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 350.809450][ C0] kasan_report+0x117/0x150 [ 350.809479][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 350.809516][ C0] mcp2221_raw_event+0x106a/0x1240 [ 350.809546][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 350.809610][ C0] ? down_trylock+0x50/0xb0 [ 350.809646][ C0] hid_input_report+0x41d/0x580 [ 350.809685][ C0] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 350.809719][ C0] hid_irq_in+0x47e/0x6d0 [ 350.809748][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 350.809809][ C0] dummy_timer+0xbbd/0x45d0 [ 350.809869][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 350.809915][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 350.809942][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 350.809978][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 350.810022][ C0] __hrtimer_run_queues+0x53a/0xcc0 [ 350.810063][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 350.810098][ C0] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 350.810128][ C0] hrtimer_run_softirq+0x182/0x5a0 [ 350.810173][ C0] handle_softirqs+0x22a/0x870 [ 350.810202][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 350.810238][ C0] __irq_exit_rcu+0x5f/0x150 [ 350.810272][ C0] irq_exit_rcu+0x9/0x30 [ 350.810298][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 350.810327][ C0] [ 350.810338][ C0] [ 350.810342][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 350.810368][ C0] RIP: 0010:lock_acquire+0x20b/0x2e0 [ 350.810403][ C0] Code: e9 30 ff ff ff e8 85 f4 0d 0a f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 01 02 7b 11 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 3e 95 73 [ 350.810421][ C0] RSP: 0018:ffffc90003e66330 EFLAGS: 00000296 [ 350.810459][ C0] RAX: 0bd7207812d7cf00 RBX: 0000000000000246 RCX: 0000000000000046 [ 350.810476][ C0] RDX: 0000000000000009 RSI: ffffffff8e16b7af RDI: ffffffff8c27d100 [ 350.810491][ C0] RBP: 0000000000000000 R08: ffffc90003e66178 R09: 0000000000000020 [ 350.810505][ C0] R10: dffffc0000000000 R11: ffffffff81a1fa10 R12: 0000000000000000 [ 350.810527][ C0] R13: ffffffff8e8984c0 R14: 0000000000000000 R15: 0000000000000001 [ 350.810543][ C0] ? __pfx_hlock_conflict+0x10/0x10 [ 350.810582][ C0] ? fs_reclaim_acquire+0x7c/0x100 [ 350.810611][ C0] fs_reclaim_acquire+0x98/0x100 [ 350.810644][ C0] ? fs_reclaim_acquire+0x7c/0x100 [ 350.810674][ C0] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 350.810701][ C0] ? __alloc_skb+0x1d0/0x7d0 [ 350.810726][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 350.810762][ C0] __alloc_skb+0x1d0/0x7d0 [ 350.810792][ C0] alloc_uevent_skb+0x7d/0x230 [ 350.810818][ C0] kobject_uevent_net_broadcast+0x2fa/0x560 [ 350.810838][ C0] kobject_uevent_env+0x55c/0x9e0 [ 350.810864][ C0] device_add+0x557/0xb70 [ 350.810896][ C0] cdev_device_add+0x1d6/0x390 [ 350.810932][ C0] i2cdev_attach_adapter+0x2ed/0x510 [ 350.810960][ C0] notifier_call_chain+0x1be/0x400 [ 350.811000][ C0] blocking_notifier_call_chain+0x6a/0x90 [ 350.811026][ C0] bus_notify+0x143/0x180 [ 350.811055][ C0] device_add+0x54d/0xb70 [ 350.811091][ C0] i2c_register_adapter+0x51b/0x1180 [ 350.811113][ C0] ? __pfx_i2c_register_adapter+0x10/0x10 [ 350.811147][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 350.811209][ C0] ? idr_alloc+0x89/0xd0 [ 350.811253][ C0] devm_i2c_add_adapter+0x1b/0x80 [ 350.811285][ C0] mcp2221_probe+0x404/0x880 [ 350.811313][ C0] hid_device_probe+0x416/0x7a0 [ 350.811338][ C0] ? driver_sysfs_add+0x1fe/0x210 [ 350.811368][ C0] ? __pfx_hid_device_probe+0x10/0x10 [ 350.811403][ C0] really_probe+0x267/0xaf0 [ 350.811441][ C0] __driver_probe_device+0x18c/0x320 [ 350.811478][ C0] driver_probe_device+0x4f/0x240 [ 350.811522][ C0] __device_attach_driver+0x279/0x430 [ 350.811577][ C0] bus_for_each_drv+0x258/0x2f0 [ 350.811603][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 350.811642][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 350.811673][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 350.811707][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 350.811734][ C0] __device_attach+0x2c5/0x450 [ 350.811772][ C0] ? __pfx___device_attach+0x10/0x10 [ 350.811813][ C0] ? _raw_spin_unlock+0x28/0x50 [ 350.811839][ C0] device_initial_probe+0xa1/0xd0 [ 350.811873][ C0] bus_probe_device+0x12a/0x220 [ 350.811898][ C0] ? device_add+0x726/0xb70 [ 350.811926][ C0] device_add+0x7b6/0xb70 [ 350.811961][ C0] hid_add_device+0x272/0x3e0 [ 350.811979][ C0] usbhid_probe+0xe3a/0x12f0 [ 350.812017][ C0] usb_probe_interface+0x668/0xc90 [ 350.812066][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 350.812103][ C0] really_probe+0x267/0xaf0 [ 350.812146][ C0] __driver_probe_device+0x18c/0x320 [ 350.812182][ C0] driver_probe_device+0x4f/0x240 [ 350.812218][ C0] __device_attach_driver+0x279/0x430 [ 350.812266][ C0] bus_for_each_drv+0x258/0x2f0 [ 350.812291][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 350.812334][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 350.812359][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 350.812386][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 350.812413][ C0] __device_attach+0x2c5/0x450 [ 350.812451][ C0] ? __pfx___device_attach+0x10/0x10 [ 350.812487][ C0] ? _raw_spin_unlock+0x28/0x50 [ 350.812513][ C0] device_initial_probe+0xa1/0xd0 [ 350.812550][ C0] bus_probe_device+0x12a/0x220 [ 350.812575][ C0] ? device_add+0x726/0xb70 [ 350.812625][ C0] device_add+0x7b6/0xb70 [ 350.812668][ C0] usb_set_configuration+0x1a87/0x2110 [ 350.812732][ C0] usb_generic_driver_probe+0x8d/0x150 [ 350.812798][ C0] usb_probe_device+0x1c4/0x3b0 [ 350.812841][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 350.812876][ C0] really_probe+0x267/0xaf0 [ 350.812912][ C0] __driver_probe_device+0x18c/0x320 [ 350.812948][ C0] driver_probe_device+0x4f/0x240 [ 350.812985][ C0] __device_attach_driver+0x279/0x430 [ 350.813028][ C0] bus_for_each_drv+0x258/0x2f0 [ 350.813053][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 350.813093][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 350.813130][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 350.813156][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 350.813191][ C0] __device_attach+0x2c5/0x450 [ 350.813226][ C0] ? __pfx___device_attach+0x10/0x10 [ 350.813262][ C0] ? _raw_spin_unlock+0x28/0x50 [ 350.813289][ C0] device_initial_probe+0xa1/0xd0 [ 350.813329][ C0] bus_probe_device+0x12a/0x220 [ 350.813354][ C0] ? device_add+0x726/0xb70 [ 350.813382][ C0] device_add+0x7b6/0xb70 [ 350.813418][ C0] usb_new_device+0xa08/0x16f0 [ 350.813448][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 350.813475][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 350.813502][ C0] hub_event+0x2a1c/0x4f30 [ 350.813547][ C0] ? __pfx_hub_event+0x10/0x10 [ 350.813584][ C0] ? process_scheduled_works+0xa8d/0x18c0 [ 350.813612][ C0] ? process_scheduled_works+0xa8d/0x18c0 [ 350.813647][ C0] process_scheduled_works+0xb6e/0x18c0 [ 350.813688][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 350.813716][ C0] ? assign_work+0x3d5/0x5e0 [ 350.813750][ C0] worker_thread+0xa53/0xfc0 [ 350.813800][ C0] kthread+0x388/0x470 [ 350.813818][ C0] ? __pfx_worker_thread+0x10/0x10 [ 350.813852][ C0] ? __pfx_kthread+0x10/0x10 [ 350.813870][ C0] ret_from_fork+0x51e/0xb90 [ 350.813907][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 350.813941][ C0] ? __switch_to+0xc7d/0x1450 [ 350.813983][ C0] ? __pfx_kthread+0x10/0x10 [ 350.814001][ C0] ret_from_fork_asm+0x1a/0x30 [ 350.814043][ C0] [ 350.814055][ C0] [ 351.591559][ C0] The buggy address belongs to the physical page: [ 351.598149][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x590ab [ 351.608500][ C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 351.615612][ C0] raw: 00fff00000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 351.624368][ C0] raw: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 351.632963][ C0] page dumped because: kasan: bad access detected [ 351.639377][ C0] page_owner tracks the page as freed [ 351.644748][ C0] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8008, tgid 8008 (sed), ts 261361369039, free_ts 277019099556 [ 351.665598][ C0] post_alloc_hook+0x231/0x280 [ 351.670546][ C0] get_page_from_freelist+0x24dc/0x2580 [ 351.676190][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 351.682011][ C0] allocate_slab+0x77/0x660 [ 351.686619][ C0] refill_objects+0x331/0x3c0 [ 351.691402][ C0] kmem_cache_prefill_sheaf+0x2e6/0x540 [ 351.696969][ C0] mas_alloc_nodes+0x1c2/0x350 [ 351.701942][ C0] mas_preallocate+0x2d6/0x640 [ 351.706731][ C0] vma_link+0x123/0x470 [ 351.710924][ C0] insert_vm_struct+0x199/0x260 [ 351.715912][ C0] _install_special_mapping+0x1b0/0x350 [ 351.721465][ C0] map_vdso+0x1f6/0x470 [ 351.725788][ C0] load_elf_binary+0x1d81/0x2980 [ 351.730765][ C0] bprm_execve+0x93d/0x1460 [ 351.735267][ C0] do_execveat_common+0x50d/0x690 [ 351.740550][ C0] __x64_sys_execve+0x97/0xc0 [ 351.745232][ C0] page last free pid 5951 tgid 5951 stack trace: [ 351.751826][ C0] __free_frozen_pages+0xc2b/0xdb0 [ 351.757057][ C0] __slab_free+0x263/0x2b0 [ 351.761487][ C0] qlist_free_all+0x97/0x100 [ 351.766115][ C0] kasan_quarantine_reduce+0x148/0x160 [ 351.771685][ C0] __kasan_slab_alloc+0x22/0x80 [ 351.776549][ C0] kmem_cache_alloc_noprof+0x2bc/0x650 [ 351.782194][ C0] do_getname+0x2e/0x250 [ 351.786697][ C0] do_readlinkat+0xc8/0x510 [ 351.791217][ C0] __x64_sys_readlink+0x7f/0x90 [ 351.796296][ C0] do_syscall_64+0x14d/0xf80 [ 351.800979][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.806968][ C0] [ 351.809790][ C0] Memory state around the buggy address: [ 351.815523][ C0] ffff8880590abe80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 351.823608][ C0] ffff8880590abf00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 351.832197][ C0] >ffff8880590abf80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 351.840324][ C0] ^ [ 351.848468][ C0] ffff8880590ac000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 351.856785][ C0] ffff8880590ac080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 351.865011][ C0] ================================================================== [ 351.873071][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 351.880380][ C0] CPU: 0 UID: 0 PID: 796 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 351.889685][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 351.899836][ C0] Workqueue: usb_hub_wq hub_event [ 351.905139][ C0] Call Trace: [ 351.908558][ C0] [ 351.911505][ C0] vpanic+0x56c/0xa60 [ 351.915569][ C0] ? __pfx_vpanic+0x10/0x10 [ 351.920076][ C0] panic+0xc5/0xd0 [ 351.923837][ C0] ? __pfx_panic+0x10/0x10 [ 351.928254][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 351.933631][ C0] ? rcu_is_watching+0x15/0xb0 [ 351.938397][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 351.943764][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 351.949064][ C0] check_panic_on_warn+0x89/0xb0 [ 351.954014][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 351.959295][ C0] end_report+0x73/0x180 [ 351.963533][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 351.968817][ C0] kasan_report+0x128/0x150 [ 351.973405][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 351.978882][ C0] mcp2221_raw_event+0x106a/0x1240 [ 351.984024][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 351.989846][ C0] ? down_trylock+0x50/0xb0 [ 351.994370][ C0] hid_input_report+0x41d/0x580 [ 351.999408][ C0] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 352.004992][ C0] hid_irq_in+0x47e/0x6d0 [ 352.009364][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 352.015120][ C0] dummy_timer+0xbbd/0x45d0 [ 352.019795][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 352.024822][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 352.030802][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 352.035767][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 352.040875][ C0] __hrtimer_run_queues+0x53a/0xcc0 [ 352.046254][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 352.051973][ C0] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 352.058062][ C0] hrtimer_run_softirq+0x182/0x5a0 [ 352.063239][ C0] handle_softirqs+0x22a/0x870 [ 352.068045][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 352.072832][ C0] __irq_exit_rcu+0x5f/0x150 [ 352.077456][ C0] irq_exit_rcu+0x9/0x30 [ 352.081721][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 352.087462][ C0] [ 352.090392][ C0] [ 352.093331][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 352.099303][ C0] RIP: 0010:lock_acquire+0x20b/0x2e0 [ 352.104800][ C0] Code: e9 30 ff ff ff e8 85 f4 0d 0a f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 01 02 7b 11 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 3e 95 73 [ 352.124419][ C0] RSP: 0018:ffffc90003e66330 EFLAGS: 00000296 [ 352.130493][ C0] RAX: 0bd7207812d7cf00 RBX: 0000000000000246 RCX: 0000000000000046 [ 352.138475][ C0] RDX: 0000000000000009 RSI: ffffffff8e16b7af RDI: ffffffff8c27d100 [ 352.146446][ C0] RBP: 0000000000000000 R08: ffffc90003e66178 R09: 0000000000000020 [ 352.154795][ C0] R10: dffffc0000000000 R11: ffffffff81a1fa10 R12: 0000000000000000 [ 352.162793][ C0] R13: ffffffff8e8984c0 R14: 0000000000000000 R15: 0000000000000001 [ 352.170850][ C0] ? __pfx_hlock_conflict+0x10/0x10 [ 352.176079][ C0] ? fs_reclaim_acquire+0x7c/0x100 [ 352.181283][ C0] fs_reclaim_acquire+0x98/0x100 [ 352.186391][ C0] ? fs_reclaim_acquire+0x7c/0x100 [ 352.191602][ C0] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 352.197488][ C0] ? __alloc_skb+0x1d0/0x7d0 [ 352.202091][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 352.207476][ C0] __alloc_skb+0x1d0/0x7d0 [ 352.212078][ C0] alloc_uevent_skb+0x7d/0x230 [ 352.216837][ C0] kobject_uevent_net_broadcast+0x2fa/0x560 [ 352.222905][ C0] kobject_uevent_env+0x55c/0x9e0 [ 352.228140][ C0] device_add+0x557/0xb70 [ 352.232491][ C0] cdev_device_add+0x1d6/0x390 [ 352.237267][ C0] i2cdev_attach_adapter+0x2ed/0x510 [ 352.242772][ C0] notifier_call_chain+0x1be/0x400 [ 352.248007][ C0] blocking_notifier_call_chain+0x6a/0x90 [ 352.253753][ C0] bus_notify+0x143/0x180 [ 352.258657][ C0] device_add+0x54d/0xb70 [ 352.263213][ C0] i2c_register_adapter+0x51b/0x1180 [ 352.268592][ C0] ? __pfx_i2c_register_adapter+0x10/0x10 [ 352.274315][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 352.280674][ C0] ? idr_alloc+0x89/0xd0 [ 352.284930][ C0] devm_i2c_add_adapter+0x1b/0x80 [ 352.289958][ C0] mcp2221_probe+0x404/0x880 [ 352.294642][ C0] hid_device_probe+0x416/0x7a0 [ 352.299518][ C0] ? driver_sysfs_add+0x1fe/0x210 [ 352.304552][ C0] ? __pfx_hid_device_probe+0x10/0x10 [ 352.309917][ C0] really_probe+0x267/0xaf0 [ 352.314613][ C0] __driver_probe_device+0x18c/0x320 [ 352.320067][ C0] driver_probe_device+0x4f/0x240 [ 352.325089][ C0] __device_attach_driver+0x279/0x430 [ 352.330470][ C0] bus_for_each_drv+0x258/0x2f0 [ 352.335492][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 352.341579][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 352.346952][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 352.352201][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 352.358093][ C0] __device_attach+0x2c5/0x450 [ 352.362943][ C0] ? __pfx___device_attach+0x10/0x10 [ 352.368235][ C0] ? _raw_spin_unlock+0x28/0x50 [ 352.373079][ C0] device_initial_probe+0xa1/0xd0 [ 352.378124][ C0] bus_probe_device+0x12a/0x220 [ 352.383059][ C0] ? device_add+0x726/0xb70 [ 352.387771][ C0] device_add+0x7b6/0xb70 [ 352.392216][ C0] hid_add_device+0x272/0x3e0 [ 352.396903][ C0] usbhid_probe+0xe3a/0x12f0 [ 352.401497][ C0] usb_probe_interface+0x668/0xc90 [ 352.406700][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 352.412431][ C0] really_probe+0x267/0xaf0 [ 352.417049][ C0] __driver_probe_device+0x18c/0x320 [ 352.422352][ C0] driver_probe_device+0x4f/0x240 [ 352.427385][ C0] __device_attach_driver+0x279/0x430 [ 352.432789][ C0] bus_for_each_drv+0x258/0x2f0 [ 352.437666][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 352.443562][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 352.448929][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 352.454137][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 352.460053][ C0] __device_attach+0x2c5/0x450 [ 352.464921][ C0] ? __pfx___device_attach+0x10/0x10 [ 352.470318][ C0] ? _raw_spin_unlock+0x28/0x50 [ 352.475257][ C0] device_initial_probe+0xa1/0xd0 [ 352.480458][ C0] bus_probe_device+0x12a/0x220 [ 352.485395][ C0] ? device_add+0x726/0xb70 [ 352.489898][ C0] device_add+0x7b6/0xb70 [ 352.494229][ C0] usb_set_configuration+0x1a87/0x2110 [ 352.499708][ C0] usb_generic_driver_probe+0x8d/0x150 [ 352.505539][ C0] usb_probe_device+0x1c4/0x3b0 [ 352.510574][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 352.516057][ C0] really_probe+0x267/0xaf0 [ 352.520593][ C0] __driver_probe_device+0x18c/0x320 [ 352.525966][ C0] driver_probe_device+0x4f/0x240 [ 352.531174][ C0] __device_attach_driver+0x279/0x430 [ 352.536577][ C0] bus_for_each_drv+0x258/0x2f0 [ 352.541448][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 352.547462][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 352.553050][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 352.558274][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 352.564380][ C0] __device_attach+0x2c5/0x450 [ 352.569161][ C0] ? __pfx___device_attach+0x10/0x10 [ 352.574450][ C0] ? _raw_spin_unlock+0x28/0x50 [ 352.579322][ C0] device_initial_probe+0xa1/0xd0 [ 352.584391][ C0] bus_probe_device+0x12a/0x220 [ 352.589337][ C0] ? device_add+0x726/0xb70 [ 352.593845][ C0] device_add+0x7b6/0xb70 [ 352.598206][ C0] usb_new_device+0xa08/0x16f0 [ 352.603096][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 352.608310][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 352.613535][ C0] hub_event+0x2a1c/0x4f30 [ 352.617971][ C0] ? __pfx_hub_event+0x10/0x10 [ 352.622744][ C0] ? process_scheduled_works+0xa8d/0x18c0 [ 352.628474][ C0] ? process_scheduled_works+0xa8d/0x18c0 [ 352.634283][ C0] process_scheduled_works+0xb6e/0x18c0 [ 352.639864][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 352.645948][ C0] ? assign_work+0x3d5/0x5e0 [ 352.650550][ C0] worker_thread+0xa53/0xfc0 [ 352.655175][ C0] kthread+0x388/0x470 [ 352.659425][ C0] ? __pfx_worker_thread+0x10/0x10 [ 352.664551][ C0] ? __pfx_kthread+0x10/0x10 [ 352.669147][ C0] ret_from_fork+0x51e/0xb90 [ 352.673755][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 352.678877][ C0] ? __switch_to+0xc7d/0x1450 [ 352.683674][ C0] ? __pfx_kthread+0x10/0x10 [ 352.688449][ C0] ret_from_fork_asm+0x1a/0x30 [ 352.693242][ C0] [ 352.696468][ C0] Kernel Offset: disabled [ 352.700799][ C0] Rebooting in 86400 seconds..