last executing test programs: 25m22.138292111s ago: executing program 2 (id=707): socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="010026bd7000fedbdf253e00000008000300", @ANYRES32=0x0, @ANYBLOB="85e682a3c4f2da1ea916f580c8118934e1cc1b8367e52882409b0ad1d1b606c285090a6a63bbc11076c50b9d528de78f78c742fa63ed5a827a71de798e63966a27cc8fbb4719f00bf4ad9ddf71147d92886b957deac923f99c6bb4c8f214cc20b3c8bbeb39fa27280b9fad4e36fbc67fafba5c005115c18ff6555c676e009916bc51e07fe2b5c5f488310e1dc34380b61f737cf88ef249244175169016132b6d13aec32e94070d236b1be3d043ae008f3437b7c2083f23b363688e08a929bd5888da1041a93f423b5c17dfeabe4fb4e3970e36f04cab85e27d482fef637e6df3c248932e3b364df23fba3077c89228b0aa51b7"], 0x1c}, 0x1, 0x0, 0x0, 0x4054}, 0x200cc0c4) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb8a47eadbd30bc50) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x4, 0x5, 0x4, 0x7f, 0x4230, 0x500000000000000, 0x81, 0x9c1, 0x8001, 0x5, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0xdddd1000, 0x80300}) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x4, 0x5, 0x4, 0x7f, 0x4230, 0x500000000000000, 0x81, 0x9c1, 0x8001, 0x5, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0xdddd1000, 0x80300}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000340)="0bbb288dd6ffa80800431c00000000000000210d0000aaa8fa017242ba9380d419", 0x21) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000180)=0x3) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r8, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r6], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) socket$netlink(0x10, 0x3, 0xc) (async) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r10 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 25m21.665535327s ago: executing program 2 (id=709): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af8ff000000007a0af0ff0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000280000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb7040000e0ff00008500000002000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 25m21.545266838s ago: executing program 2 (id=710): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000100)={0x1d, r1}, 0x10) sendmmsg$sock(r0, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000003000)="010000000300000064000000000000000000000000000000000000000000000000000000000000000200000000000000010000000100000001000000010000000000000000000003", 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="79e42a75b4aff14d326ac370b330f7975a10e6361201f90b57acc78f9f517d1a4e5c574df8818a889867d8dda90ddd30a8c88fbf31076c27", 0x38}, {0x0}], 0x2}}], 0x2, 0x0) 25m21.280128424s ago: executing program 2 (id=712): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0) unshare(0x6000480) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) write$FUSE_INIT(r1, &(0x7f0000004300)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x1400001, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x2, 0x1, 0x0, @sint={0xfffffff8, 0x21}}]}) ioctl$KVM_IRQ_LINE_STATUS(r5, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x1}) syz_fuse_handle_req(r1, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x800007fffffff, {0x3, 0x0, 0x7fffffff, 0x1ffffffffffff, 0xe5, 0xc, {0x2, 0x9, 0x1, 0x4, 0x5, 0x8001, 0x8, 0x123, 0x3, 0xa000, 0x1, 0x0, r3, 0x6, 0x2000ffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000640)=ANY=[], 0x1, 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x20000, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000021c0)={'syztnl1\x00', &(0x7f0000002000)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x6, 0xf7d, 0x21, @loopback, @private0, 0x1, 0x40, 0xa, 0x1000}}) connect$can_j1939(r7, &(0x7f0000002200)={0x1d, r8, 0x3, {0x0, 0x1, 0x4}, 0xfe}, 0x18) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 25m20.318959974s ago: executing program 2 (id=717): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x17, 0x17, &(0x7f00000004c0)=ANY=[@ANYBLOB="18"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x810) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x20005, 0xfffffff8, 0x0, 0xff, 0xff}) 25m20.009356669s ago: executing program 2 (id=719): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xc, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x0, 0x4000003, 0x7, 0x10, 0x4, 0x17, 0x0, 0x5, 0x2, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001412000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 25m19.398191387s ago: executing program 32 (id=719): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xc, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x0, 0x4000003, 0x7, 0x10, 0x4, 0x17, 0x0, 0x5, 0x2, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001412000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 2m47.794655137s ago: executing program 0 (id=4221): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x400) mount_setattr(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x1f, &(0x7f0000001f80)=0x8, 0x4) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000)=0x3, 0x4) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x50) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) fcntl$getflags(r4, 0x3) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f00000001c0)="1400000016000b63d25a8064000000000124fc60", 0x14}, {&(0x7f00000004c0)="635db2391f9e253f8aa9a1d38ff3387ff6d583bc40290b557c798572804501b38ed9436077", 0x25}], 0x2}, 0x0) recvmmsg(r5, &(0x7f0000003640)=[{{&(0x7f0000000240)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000300)=""/228, 0xe4}, {&(0x7f0000000400)=""/50, 0x32}], 0x2, &(0x7f0000000480)=""/61, 0x3d}, 0x1}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000540)=""/187, 0xbb}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x2, &(0x7f0000003980)=""/242, 0xf2}, 0x798}, {{&(0x7f0000001740)=@generic, 0x80, &(0x7f0000001b80)=[{&(0x7f00000017c0)=""/110, 0x6e}, {&(0x7f00000038c0)=""/130, 0x82}, {&(0x7f0000001900)=""/67, 0x43}, {&(0x7f0000001980)=""/208, 0xd0}, {&(0x7f0000001a80)=""/216, 0xd8}], 0x5, &(0x7f0000001c00)=""/53, 0x35}, 0x463}, {{&(0x7f0000001c40)=@caif, 0x80, &(0x7f0000001640)=[{&(0x7f0000001cc0)=""/255, 0xff}, {&(0x7f0000001dc0)=""/233, 0xe9}, {&(0x7f0000001ec0)=""/9, 0x9}], 0x3, &(0x7f0000002000)=""/125, 0x7d}}, {{&(0x7f0000002080)=@generic, 0x80, &(0x7f0000003880)=[{&(0x7f0000002100)=""/109, 0x6d}, {&(0x7f0000001f40)=""/51, 0x33}], 0x2, &(0x7f00000021c0)=""/219, 0xdb}, 0x1}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f00000022c0)=""/245, 0xf5}, {&(0x7f00000023c0)=""/171, 0xab}, {&(0x7f0000002480)=""/83, 0x53}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/108, 0x6c}], 0x5, &(0x7f0000003600)=""/6, 0x6}, 0x80000000}], 0x6, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b00010000000009046b00016a93f00009058803", @ANYRESOCT], 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x13, 0x0, 0xff}}) r7 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f0000000200)={0x31, &(0x7f0000000080)=[{0x10, '\x00', @st={0x4, [{0x3, @svalue=0xc0}, {0x1, @svalue=0x3}, {0x1, @svalue=0x8}, {0x3, @uvalue=0x1}]}, 0x6}, {0x2f, '\x00', @buffer={"c451ea6b65438b7f0f0312f9337312d969d50ce97c8757b68a73a94c64bc9424", 0x20}, 0x8000}, {0xd, '\x00', @buffer={"e218dcbc3630e64473f88acc1530a1f06747969346671c1e0491a8381cf77100", 0x20}}, {0x16, '\x00', @st={0x4, [{0x3, @svalue=0x4}, {0x1, @svalue}, {0x3, @uvalue=0x4}, {0x1, @svalue=0xfc}]}, 0xfffffffa}]}) ioctl$AUTOFS_IOC_PROTOVER(r7, 0x80049363, 0x0) close(r2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001714"], 0x38}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, &(0x7f00000037c0)={{0x80}, 'port1\x00', 0xa3, 0x1b1c07, 0x0, 0x0, 0x1000, 0x4}) 2m46.71189322s ago: executing program 1 (id=4223): r0 = memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) fcntl$setstatus(r0, 0x4, 0x42400) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0x5a4, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x40, "", [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0x3, 0x1, {0x22, 0x16}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x7, 0x8}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, &(0x7f0000000480)=ANY=[@ANYBLOB="000916"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0xc201}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x0, &(0x7f0000001300)) setsockopt$inet_tcp_int(r2, 0x6, 0x2b, &(0x7f00000000c0)=0x3, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='addr\x00\xde\xbc\x1fB\x82\xff\x1ef\xfan\xcc\xa4\xcc~-3\x8dZ\xdd\x06(\xbeG\xd8\x00\x0f\x95_\xd0\xf5\xbc\xfc\xa1\x02a\xd9\xf9q\xb2j\x0f\xfel\x9a\xc0\xae8\x8bT\xaa\xde\xbe\x98E\xf3-\xab\xc2\n\x13\xe9X\x89\t\fC\xbc\xd5\n\xe1r\x0eq\xb6\xdc\xc9M:Y6F\xf13\x90\x1dO[P,\x8csKv\xdbJ\xf9\x00r`C\f)\"\x10\xb2\x8f\x876\xcd\x86\x95\x8dV\x0eF\x12\xf7\x89s\x98\xa5\xed\xfb\xc5\x86\x85\x9e\xf0Ee\xc4\x11\xc0\xc7%#\x95D\x84rq\xedb\xc4h\xd7\x05\x00\x04\x009\x96\x1d\xd2+\x1ay\x86N\xe3\xf4\xedw\xd7\xa3\xbe\xd7\x800\x0f\xa1\x90c%\xb1\x0e\xb2\x80C\xb3\x13`\x88\x13mH\x86[F4\x97)\r\x9e$\x934(\x7f\xa5 &\xabb\x00\x00\x00\x00\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x1, 0x3, 0x15, 0x77}, {0x7fd, 0x6, 0x8, 0x5c98d075}, {0xfffa, 0x2, 0x3, 0x80000001}, {0x7ff, 0x20, 0x3, 0xf369}, {0x0, 0x5a, 0x0, 0xb}, {0x2, 0xfd, 0x2, 0x2}, {0x6, 0x7, 0xe0, 0x1}, {0x29c, 0x3, 0x2f, 0x8000000}]}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x12) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x8008af83, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_THP_DISABLE(0x44, 0x0) sendmsg$nl_route(r6, 0x0, 0x4000000) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 2m45.512033937s ago: executing program 1 (id=4228): unshare(0x24000480) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x44, r3, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7ffffffe}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) 2m44.794706024s ago: executing program 4 (id=4230): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xc9751000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_clone3(&(0x7f0000000500)={0x3000100, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200), {0x16}, &(0x7f0000000240)=""/8, 0x8, &(0x7f0000000280)=""/209, &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x3}, 0x58) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r4, 0x73aa7000) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000040)={0xe8e, 0x4, 0xd, 0x4}, 0x0) userfaultfd(0x80000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) syz_clone(0x6408f400, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, 0x0, 0x0, 0x80001) recvmmsg(r6, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000000880)=""/67, 0x43}, {&(0x7f0000000900)=""/133, 0x85}, {&(0x7f00000009c0)=""/24, 0x18}, {0xffffffffffffffff}, {&(0x7f0000000a00)=""/237, 0xed}], 0x6}, 0x81}, {{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x1}, 0xe}, {{0x0, 0x0, &(0x7f0000003ac0)}, 0xd4}], 0x3, 0x40000141, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) munlockall() mprotect(&(0x7f0000ace000/0x4000)=nil, 0x4000, 0x1000006) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) epoll_create1(0x80000) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000040)={0x0, 0x1007, 0x9, 0x0, 0x89, "00000000000000000000fff6a899af51e2bead"}) syz_open_pts(r7, 0x40) 2m44.05464932s ago: executing program 0 (id=4231): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x0, 0x1}, 0x10) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) setrlimit(0x2, &(0x7f0000000040)={0x0, 0x80000002}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x6) 2m43.701161059s ago: executing program 1 (id=4232): syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8203, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x82, 0x40, 0xf7, {0x8, 0xb, 0x1, 0x1, 0x1, 0x1, 0x20, 0x39}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1, 0xc, 0x9, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x5, 0x3d, 0x3d, {0x8, 0x25, 0x1, 0x1, 0x3f, 0x40, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xc0, 0x9, 0x8, {0x8, 0x25, 0x1, 0x2, 0x3c, 0xd, 0x8}}}}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x6, 0xfc, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xea, 0x1, 0x1, 0x2, 0x50, 0x46, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0x8, {{0x8, 0x24, 0x6, 0x0, 0x0, "5f97a3"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xf42f, 0x8, 0x7}, [@acm={0x4, 0x24, 0x2, 0x4}, @mdlm_detail={0x27, 0x24, 0x13, 0xff, "33986b6ee5983ce0ca75250c80812ae0d5a4b8b2285b445e70fbfdf58c325065acbcad"}, @mdlm_detail={0x74, 0x24, 0x13, 0x1, "8d1c457ce528dad2c8169722c94adad6ca5aef0b5ec9b3c5170c7d663b389e7f4f698377332404af094fb9992cba538e5024a04f3b936e4f21d1e2755928b642439fce8de06fec3be6bc2f871a0e8263d1e483f1774592f2f5f805d9fafa100f04a0a7b3953db7ad2be9ffc0addbd59f"}, @acm={0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x7, 0x3, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x9, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x2, 0x3, 0x3f}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0xd, 0x4, 0x8, 0xdf, 0x5}, 0x19, &(0x7f00000001c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x10, "bca4dd4472d66385356d7f3bdbb79885"}]}, 0x8, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x814}}, {0x8d, &(0x7f00000002c0)=@string={0x8d, 0x3, "f3d545d10e8cbb3e8088623935366893713fcd38fe1e78892a29ea1f528d1425f7720c82aae5250b72e1ff5684c45dd345f677d2ab2df74a1e963512fbef924528a2490a250f29f818e9590fd357f167cbb1b36bda442b5b61c29409a773838898f08d9e0ad7abb5e8ae412be20482a165c1d8d8ab89753a9dd6ca543e59e5a589a72491fc77ad82e1d6e8"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x41f}}, {0x3d, &(0x7f0000000400)=@string={0x3d, 0x3, "7b8a75a7f31b9cd865a1e36090717ac7c8b15888128bd97016685e4ea833f56d4960fba5a83f018497b07266aba50a13d799dbe903d6ee725b0afb"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x2009}}, {0x69, &(0x7f0000000480)=@string={0x69, 0x3, "3762107194378a3611d402fe5b95a105c76f8ca68d310606140b1e279502ec5d35f28cc935e0b26deabd89d96cb48ccb349d93a47578a45a390e8664ff562c59e6b466c591681eb98323288bbcc3945804ebc9f5f06d9819032b1006e11799b17fdf08bb4340f4"}}]}) 2m43.632564463s ago: executing program 0 (id=4234): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x9ca86080, 0x0, 0xfffffffffffffcd8, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) symlink(0x0, &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ptrace$setsig(0x4203, 0x0, 0x895, &(0x7f0000000200)={0x12, 0x7, 0xfffff32b}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000640)={'tunl0\x00', 0x0, 0x80, 0x10, 0x3, 0x2, {{0x2b, 0x4, 0x0, 0x12, 0xac, 0x66, 0x0, 0x5, 0x29, 0x0, @remote, @rand_addr=0x64010101, {[@lsrr={0x83, 0x3, 0xaf}, @rr={0x7, 0x1f, 0xc, [@private=0xa010100, @broadcast, @dev={0xac, 0x14, 0x14, 0x2d}, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @multicast2]}, @cipso={0x86, 0x57, 0x0, [{0x5, 0x12, "927800eae472636866094370c104e535"}, {0x1, 0xd, "fa7dcc5ba7c7159ea6c5d0"}, {0x6, 0x10, "0158badbb4cc93621cfa5afc6ae5"}, {0x6, 0xd, "ddd51e2326c18f0cb67475"}, {0x5, 0x4, "e12d"}, {0x6, 0x11, "2c512b28af2feeb4c77b10bf8b8e99"}]}, @cipso={0x86, 0x1e, 0x3, [{0x1, 0x2}, {0x1, 0xe, "5a574fb27cc6618370fae002"}, {0x2, 0x2}, {0x1, 0x6, "d71f2d55"}]}]}}}}}) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000300100a1c0000000b0a0101000000000000000007000005080008400000000109000000110035bb460b1e84ec0f5196f32939ce723cfc91000000001400000500000aff0100"/83], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x1) connect(r0, &(0x7f0000000180)=@xdp={0x2c, 0x4, r1, 0x19}, 0x80) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) write(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) syz_open_dev$dri(0x0, 0xe, 0x40201) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c0400070080000700", 0x33a) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xe0, r3, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x7c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40880}, 0x894) socket$inet_tcp(0x2, 0x1, 0x0) 2m42.530804019s ago: executing program 0 (id=4236): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x400c01, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000001280)) (async) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) (async) write$char_usb(0xffffffffffffffff, &(0x7f00000001c0)="3717c213a99af14d2dd7ef28de8d5b13fcbc234ac1553e8f297631c03e6fb920b90bc1e7366f1b5789b06642a548cab097be61a609824b6d2a302d585d0c189eb0161c7f", 0x44) timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x20000, 0xb) fcntl$notify(r4, 0x402, 0x80000002) setxattr$incfs_metadata(&(0x7f00000002c0)='./cgroup/pids.max\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) (async) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xff7e, 0x7}) (async) r5 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000dcffbfff000000009f0900001811000047", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000057000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000000085000000d4000000b7000000006400009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x8, 0x20, &(0x7f0000000000)=""/32, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$binfmt_format(r7, &(0x7f0000000a00)='1\x00', 0x2) 2m41.841103968s ago: executing program 1 (id=4237): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r2, 0x110, 0x7, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x0, 0x0, 0x9, 0xffffff7fffffffff, 0xfffffdfffffffffd, 0xffffffc0, 0xffffffff}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$sock(r0, &(0x7f0000000840)={&(0x7f0000000500)=@qipcrtr, 0x80, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000680)="5f150f107ac3e05b42b4425cd3c8b40437ea0213fe93ef7b865e907684d2faa297c7ccc1adac82421e8f8951b2277448e812f3f56164a3d6", 0x38}, {0x0}], 0x3, &(0x7f0000000800)}, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x10000, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)=0x800001c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, r4, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x9}) socket(0xa, 0x3, 0x3a) syz_usb_connect$uac2(0x3, 0x87, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100300000020ba0d001040000102030109027500030106100208c597e7b58f1b4ed509991ebb097cfd640b0100010c200009040000000101200009240180ff071500040c2403020403050400ff011c0904010000010220000904010101010220000905010910000c02090825018030ad000109040200000102200009040201010102200009"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) write(r5, &(0x7f0000000040)="0f03000018002551075c0165ff0ffc02802000030011000500e1000cee0203001a000000", 0x33a) 2m41.323335759s ago: executing program 5 (id=4238): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x88}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @broadcast}) write$tun(r8, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x6, 0x0, 0x14, 0xf}, @ipv4=@tcp={{0x5, 0x4, 0x3, 0x2f, 0x28, 0x64, 0x0, 0x8, 0x6, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3e}}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x101, 0x0, 0x411}}}}, 0x36) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r4}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 2m41.087519702s ago: executing program 3 (id=4239): syz_open_dev$sg(0x0, 0x0, 0x8002) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000980)={'filter\x00', 0x10, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e5fce0c960bc", @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @broadcast, @loopback, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (fail_nth: 6) 2m39.994047773s ago: executing program 4 (id=4240): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000100)={0x1d, r1}, 0x10) sendmmsg$sock(r0, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000003000)="0100000003000000640000000000000000000000000000000000000000000000020f58000000000002000000000000000100000001000000010000000100"/72, 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="79e42a75b4aff14d326ac370b330f7975a10e6361201f90b57acc78f9f517d1a4e5c574df8818a889867d8dda90ddd30a8c88fbf31076c27", 0x38}, {0x0, 0xf423f}], 0x2}}], 0x2, 0x0) 2m39.201362676s ago: executing program 3 (id=4241): futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) close(0xffffffffffffffff) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00008ba000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000b1e000/0x4000)=nil, &(0x7f00004ff000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x17}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x8, 0x8, 0x100000c1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x33, 0x0, 0x0) r5 = syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r5, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9ea4318123341cf9d90a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a22a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a19eed87b277be335c75e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436e101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521bc9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d2502000000d9051f22614d1f62734d678039a97d2b74f9e8e97f4e8e7025123e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f23128d743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069f6f24e1e1bc976d965ddabb01085f16bff63a06578d6d184f5de7bfb6aaa75f16996d8d60bd0111a8a237a1536256c02284cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798bbe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e2005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9cde5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde330289d6348d183ed9d3dae3cccf109f7c78e8479a345e805e47dfa82cafc6b64b1f4659834aecbeded44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1b7d5f80c580dc31b0963ff953ce09148e8dfea9d03a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e96c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20c290a1f6c09272dbc3b2c0ab2b5baa1b07b16e81f278e54a479f1a06bc06e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4d57b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce788c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f709294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b132876159972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0598700130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe"], 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d40)=ANY=[@ANYBLOB="581800004400010029bd7000040000000300000004004880401801"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000340)={0x0, 0x10, 0x1, "c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f00000001c0)={0x0, 0x1, 0x5, &(0x7f00000000c0)={0x11, "8101d6c721100f00000000400000a82600"}}) syz_usb_control_io$uac2(r5, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="404807000000010100000000fe79806284e537b8814600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x0, 0x0}) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r8 = syz_open_dev$video(0x0, 0x8, 0x0) ioctl$VIDIOC_STREAMOFF(r8, 0x40045613, &(0x7f0000000100)=0xc97) socket$inet6_tcp(0xa, 0x1, 0x0) 2m39.046840564s ago: executing program 0 (id=4242): r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0x1000, 0xd, 0x4, 0x70000, 0x2, {}, {0x3, 0x8, 0xff, 0x1d, 0x9, 0x7, "d397d9e0"}, 0x1, 0x4, {}, 0x3, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {0x21b}}, './file0\x00'}) syz_usb_control_io(r1, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) recvfrom$inet6(r4, &(0x7f0000000640)=""/248, 0xffffff1f, 0x40010002, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r4, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r4, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0xfe86}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xfc96}, {&(0x7f00000014c0)="8fa68a274cab49b9c806172798e6a829701bb4eefee6919e0a30fa83a50170b6a3b499361f95ab6ff05f9001332b3a463b64282a924b0dcf6499c8c9b23d7290ab896ed6e2c7280dcda0336864e06d9570ea2cc78330859fa73080f5ddd3fd2b943287b312357816e9cfaa9e8941dd981f837506cabc6e016e507076819ff37d790c0b868166925649c9a74f4afc322ac971832fc3f12ba4dd3931c773134441bd46d9b10095eaabcfb846ac5fa9ea76f3547884091f073880656438f4406cf2051edb37139066dcaed45a544f5f92cccb1db0e2e503de3d4216d961dea1cbd9119a3f49b8bcdfe7078a7706296712eab5bd91b189f0140892b56c46912cc16dbe9fb469502eb67f36e8531dbfbed70615a836d32b5dabcf933201c97b29209e071433edb1b92ba47b514232654a36067c9b241737eb902ede1e18f99757339d2858bbe9c48484ec608e5fae534c4580d22fcd6ad28a786e0f5e675bc264ca03cf081038cb872e039100f94d25a7b5b9f2f18815e948aa65513c63a61e68c6a4ef4888980b54e3b7332112ee424e65172b2076528cd11cf63d7f4ff88c9eabf2c388bcb02beaa7e9c33cbe26149703fd3d511283739fa9638b1d6290a53b679227ee54d0fb232befdc92e59396c5bb818926e8a30a38a0aa358e1c818dbc27646fb4dc43168540cf724358d07124937cb3baa5365970e14240d727a8111d250202b39e8e3d6ff5e250eb09fdd83b8a129015567ae0f71a6b9166cd3718e3a83e711271f2ffd2d968e1153a38a8c5995e5c46fb8f22613690852bbea407b417eff9fd86e685025cbad82174164c3529407c4a27af5c6fdd911a4a87b7365655d5275c5719151b4440752785ff416a8e3a1f83f70e1f5d2538348b839f4e965e586e8b28a8aa94b79bc4e23d97d159af010918721be419234850fbeac52bb5de10a199f6591ab4deea9670e8b3d9f9341cddef4f3fe1b08a4f1943329cfa12c3972fc50525b8ebb5923235bbecd182d486169cf51e8c69259a404c0867328943358e95ad690a9c8eea73ddde677ebfe6f0d5f2e3a03541291e09a30bcce4b66550c28c6ba6cc431bb0fa87848652fb9319577a38a8ad45a87647b523fe3e452d90306c4c690b47d3c840ebbb1d96abb0735b21f557f5de101b7fbb7618d9739fabf89b8fb34c02493d1bfc31e80b1a9fcdac8aaf0fd69a0aee6f456705420ea3e7df30b478dd12ee137a6d6747750e5d6a7e5d308276c0ebd77377f000296108954f5371a9c84a01a18a76bee8ea849ddaf492a35f943ac395b9dddbd5ee05f6d75ac40237a0690584d7afaa3e117135b1406e03c9e49223ee48feccab18a3fd0325ed281bc70fb41b4f13905744afcbb588b8daee6d635007cf96dbd9549726c4cf9e350072702058bb533a4bb598a06e5505e8393b2793cc6ac2d66a0529b2aa7991a30f8bdd2bec5ac7ca2064e7b3a2a2d510de4675a7a6ce5d1729c2b98dbb08ab4a33cbd83484092d48b9c4fac7b7b6191057a2acf109565c6d49d9be0f1f2838650cdc36ad835fd78be83c6df052659ed1e8242d45891442a54205311da1814b18ed7fcc7c5bd979434040cd2133fd35ab946ff87e807a48a4802a1e4cce7cef4f2f555029cdecadaf99c5c3bf65db4be3940bfedb87cc491ac59d027496d87a792961f1f59cb72df3280b1845722282745fa77dfa1fce5e67e09466475c0e988719e528d39815cdfe0d16a6de1d871cfc4778ed47e8a7d3b2dfeea2083a41b061848324fe15e90c2dac3303992fdc42ba1a1995b87154a618660094a942074c5e02ed1a11293c5276b06439468f99c9d184c0152c44308c64c432277fe367a7fac9c9fb08d9dc8949e8ab9740a357fdc9d69df07375d011947b43072f554d63831af4319664e735c3eb08c0afe5120bd89b4d0654b6266aa4709ea2beb3dfd0449d2c3fde3f1098c9f73d994a741bb9f3c5322743c310fd7881856e5d529f4a9eb7dc43c0be6c36653b2cda92a7f07247450d666ca88863c6880d656eb8006bfe2f96543bf683fe3126e03ccf2120878a4fc46bdf64e11e323637ae0024a3d6fa52729591758c36a5ddeff1d1c5ba3e1bfedad1ff460f05ce276f1f3c2d70f9c6c5927a8fd15e65bc9c648b7dfccde510f5bf46bab8f2c5e21cb129dbf3f4df7a5a831f198f21fee429d73646eab00b1542941108592708fe8f53613d6b7dc1e4999374317b57c1e4a974fedd089c4295682d1a03d770b7639e80d25b0f428dfd3c46be492fc80b5c4913e476845a359dbe4187fd0027bd9fc814ba6a2877b61b637878f2af7ef18a0858fe5c7e75ecf92e735452456089efae8a13d3e6ac9d28c18cb1ca54522066edbf9e67ab4cf158b63c7b4d25146bafa14163cd4d171ad97f3ef93cfabae0557e237bbbe9cb80144b03f6fdb7d357d253235ddbde503829403657fdde516d3974091c40c6b9dd245f730458e1fd594f6b694af0150cbd31b6d0fb3bc04eb5096e704e039eecf4be9e93eb2f841878538ed1c46d015b1a792b599ed9225577460f72e6b4e271e5e6eeed34f69cfd76683e21d87e3ee8ed88df79901f9354823824fa6b67a91e2626161436327fc58879085d87db5dd94e09a0d24c7c381fb8fdc7198d2c2fece49e6496a119023852fca717d2ff2f9ed5e0715ddebd267ed0b8378ad852b03a539e6d03025b4a04f2483bdb79a4bd233ce3b6bd30d736ad0784b978861badc236e7106d23f26eac50e93d8ab012dc7c5d85d4f944aaa27378efc99572f932344cddc488ffa9210dc6b8f0cc29d07110362485eaa5b4b196a49c7080633c1befe802207ed0a172fa0b61fea6305f04d7b755a6e5e162aa8047f80647ad0bae8143226ce3aa8de3b0c0fc4e7cd6baab274fba47abf95ae88584778325250063855a4b9f0c966efa43dc0196d3dec619c490181c259b341b3fd370bab0b66af3cb1e9365cf6b62e44d939d36ffcc6badb924f44e86337360efbf4e3f9bd716adbc3f0ba6055ec9790504c9f3865f47e422b1c6ba16c07d0df618cc572b36ec8e519db90a499424a7d689e6fbcc9be1abd843512ec16540c6c7c6d6e2cf50ab2014e4208c2abb0ddfd2ef9dece79389f21d7a9985903f7f01b0394d268349fa41a487bacfe8deba2ffca815ad0b1c6ffa5af2eba6d9436ad298c4e11b68451c7ff001c02ddd3ceb153a865327845349e8b817aa8ed24924f49260f8209d0ddcacf5306d9222320776162fe8396914fa22c85bc261661fa547c3063e20ca37c0862c3b9abd3da9b02e3f58d89be00003509bae9b82f60975c0687c500bb213a580f6e9f08b207d7c31748e3fda05a0cc76b1fdd563610a2bb09a57020d85026a57a178c38839b5b88cd8434d1f0308d872c7356a6445de801ff14c133bda3b42b9ca099fb3ee0d5c7a835f56ed30aa75d47cd97c329b682879290faee167334500d2fe596564f3e4064f41cf3469aaae846f1e84f3d8a7f42d98d0b6b67913c376d6bbde3027aa41b753ace165f88379981685f918ada5043800b5e0a0865dcda94df85fefa9348d6ec4e1ffbd940d023fbbd3b77d5db572981dbe40cbae9f010c1ea02718b1c4b7d0447c9d83d1afea58097a0467d6cdd47aef05f97dab63462f6ea61f4b611040b30e7cf60a499aa9d0bc50c08463f25a47d2dbc958fe1d1cf2399dcf1952987b6fcbc97bf73b12177c374c8fd56c8228fc796c958687104f4eb9d46ab80eeeeedb7096a67ee440ae92a65cbf6f81939e3d1050c67245036b5dcc13d577fbb4d9c3fbf2e2e61aa154074ae225c54e23289c4ef41a07a49a9d40f3103f4c9dfd4d750cc646adadd2e1fe24c74ce099d753d4c59d806a0b7f576ac37ac58a51a120f93162c43d16c1f7e5289c75f5f0a5b838d020040c9ce512ca35d08f42acd24cdbc2e6b1ac3c6809a5ed9e272155e9fa55349bc3ce0e3f2d1624dc60e2396b954587bbab275f38911e86b826b85730c6670a92a221cdcbf18ee0c44aec4591fcd12204b3049a1b5da1215a4cf88ecbe2d877ef975f4f661999d17d7d9ec14e0895ce25034dac4705d50ae42ca162778d0dcfc4e9180517be0daca5deb10773f93e2c61a5fe9b823218a97c35d0d7b436b2e1afb670b5a4c6dacd401afd1832c1dd96e8eba7734954070c6796cc80707441404cfe95fabf214bf03a6e4643ca559c2b8dcf1fa871114f3dc973a056c9aee7cd0ed4cbaf18298377e750869551632c1713bd8372e3f11fa02edf0a68d2c01245459d9e78597ac1eec75064024c1f3c98260d34b611ba8fa4b2022babd44b76ea70c718df8268dba447038b1539f0499603cf2d79bcc49c35a8cf38892d982d153d72253a22ae68da65e84d6399e81a14ebf89ba446630814d9dcf8914acafc8603a5396167c5aa99814af62c1c39a6ba76ad2c6c51a6d56d89fbda5334e626540ef1b1ecad53247531fcdd661a48d28a6d48bac8ef70c888b00db57edceee94425df5161e1b1a1bec9c897e01867442ed8ba000b5f75832a8ec57ef0737994b95f40eac48f3c8da5db80e965fcdf3f0bbb4439a7123b59987f0fdac96bc7ce09c013562ff7c0cb23a882828e45a51f7e748db90c5eaacfdf3657d11a348f747ddd860387de41be3376a5dabf4296bc05282cb73fcd60c4a4148d9e872ae86e30b22db1ce5452ad9fe3fea029f94a583d301e74eac1818da3f1279c63690db6e7166ddaacd1278716fa3221daaa27c98fd97b88e63208d604505ad8f31bd2b83a19f89480b71198d8a31c89cadd258ce338afe1a26b0db248c1a39fe027716e417e45bb6c9a68cab1cd6c3445e9796ee1003650e97eccdadc9bea540e2c8253652c8f1586ba7e508cd29d53467bad11eef729796dbe83d3fc0bc15762c2f1de34c6380a6725f94600a82d87ccf80948babcadec31ca654671d17de360f20aaf04f4d44951661fe8fe7731174ec3aaf330aebeaed9620f694859785a36c5f787ce35e4425ed3387710fa346f04db11255c6985fa4cdbe54d25c942264b3383d60903bd2677611850fe125b", 0xdf3}], 0x5) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01864c1, &(0x7f0000000040)={0x0, 0x1, 0xffffffffffffffff}) cachestat(r6, &(0x7f0000000080)={0x10, 0x5}, &(0x7f00000000c0), 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@delqdisc={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 2m38.782840916s ago: executing program 5 (id=4243): syz_emit_ethernet(0x7e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast1, @rand_addr, {[@lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x2d}}, {@remote, 0xfffffffd}, {@private}, {@dev}, {@rand_addr=0x64010101}, {@local}, {@dev={0xac, 0x14, 0x14, 0x12}}]}]}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000280)=""/138, 0x8a}, {&(0x7f0000000340)=""/209, 0xd1}, {&(0x7f0000000180)=""/62, 0x3e}, {&(0x7f0000001640)=""/4092, 0xffc}], 0x4}, 0x2}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000002980)=""/4100, 0x1004}, {&(0x7f0000000040)=""/104, 0x68}, {&(0x7f0000002640)=""/203, 0xcb}], 0x4}, 0x8fffff}], 0x7, 0x0, 0x0) 2m38.644687341s ago: executing program 4 (id=4244): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='addr\x00\xde\xbc\x1fB\x82\xff\x1ef\xfan\xcc\xa4\xcc~-3\x8dZ\xdd\x06(\xbeG\xd8\x00\x0f\x95_\xd0\xf5\xbc\xfc\xa1\x02a\xd9\xf9q\xb2j\x0f\xfel\x9a\xc0\xae8\x8bT\xaa\xde\xbe\x98E\xf3-\xab\xc2\n\x13\xe9X\x89\t\fC\xbc\xd5\n\xe1r\x0eq\xb6\xdc\xc9M:Y6F\xf13\x90\x1dO[P,\x8csKv\xdbJ\xf9\x00r`C\f)\"\x10\xb2\x8f\x876\xcd\x86\x95\x8dV\x0eF\x12\xf7\x89s\x98\xa5\xed\xfb\xc5\x86\x85\x9e\xf0Ee\xc4\x11\xc0\xc7%#\x95D\x84rq\xedb\xc4h\xd7\x05\x00\x04\x009\x96\x1d\xd2+\x1ay\x86N\xe3\xf4\xedw\xd7\xa3\xbe\xd7\x800\x0f\xa1\x90c%\xb1\x0e\xb2\x80C\xb3\x13`\x88\x13mH\x86[F4\x97)\r\x9e$\x934(\x7f\xa5 &\xabb\x00\x00\x00\x00\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x20000227, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0xd80f0000}, 0x54) 2m38.498358165s ago: executing program 0 (id=4245): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000008c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000bbb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') read$FUSE(r0, &(0x7f0000000a40)={0x2020}, 0xffffffb2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004010}, 0x20000040) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x16) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c8e000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000380)=ANY=[], 0x0) bind$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x24) r5 = syz_open_dev$audion(0x0, 0x3, 0x1) open$dir(&(0x7f00000000c0)='./file0\x00', 0x101040, 0x20) lsetxattr$security_evm(0x0, &(0x7f0000000240), &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'], 0x9, 0x0) write$P9_RVERSION(r5, 0x0, 0xfffffcd9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_usb_disconnect(r4) close_range(r3, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x230041, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) 2m37.21973759s ago: executing program 5 (id=4246): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = creat(0x0, 0xecf86c37d53049cc) write$sndseq(r1, &(0x7f00000006c0)=[{0x5, 0x2, 0x43, 0x9, @tick=0x8, {0x45}, {0x5, 0x2}, @quote={{0x80, 0x1}, 0x6}}], 0x1c) (async) sendmsg$inet6(r1, &(0x7f00000004c0)={&(0x7f00000000c0)={0xa, 0x4e20, 0xff800, @private1, 0x800}, 0x1c, 0xfffffffffffffffd, 0x0, &(0x7f0000000700)}, 0x0) (async) close(r1) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x55d81000) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x164, 0x0) (async) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) (async) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440)=0x0) (async) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r2, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) (async) timer_settime(r3, 0x1, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0) r5 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) (async) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) tkill(r5, 0x7) (async) close_range(r4, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0xf, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0) 2m37.219481789s ago: executing program 4 (id=4247): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304240202042402000424060244"], 0x0) r0 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x96cd, 0x400, 0x0, 0x277}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f00000001c0)=""/157, 0x9d}], 0x2) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x40, 0x0, 0xffffffffffffffff, 0x9, 0x3, 0x2f05, 0x18, 0x0, {0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="18080000cbb60000000000001000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000000)={r6, @dev={0xac, 0x14, 0x14, 0x36}, @multicast1}, 0xc) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r4, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) fcntl$lock(r7, 0x24, &(0x7f0000000240)={0x1, 0x1, 0x2, 0x70000000000000, r8}) syz_usb_connect$printer(0x4, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0xb0, 0x40, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x7, 0x1, 0x2, 0x68, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xd0, 0xa9, 0x9}}}}}]}}]}}, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 2m36.769967241s ago: executing program 1 (id=4248): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x409, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x7c010500) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000080)=0x8000) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000008732b0a0040000102030109024e00030109200c080b0001010130080904000000010130000a2401010a000010000009040100000102300009040101010102300009050109b0020905f80a25"], 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x14000, 0x8, 0x3, 0x600, 0x6, 0x2}, 0x30, 0x1) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x10003, 0x101002) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) ioctl$BLKCLOSEZONE(r1, 0x40101287, &(0x7f0000001140)={0x7ff, 0x7}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) r4 = dup(r3) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/../file0/file0\x00', 0x200) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') write$UHID_INPUT(r4, &(0x7f0000000100)={0x9, {"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", 0xffffffffffffff6c}}, 0x1006) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1, 0x20000000}}}, 0x32) sendmmsg(r7, &(0x7f0000004380)=[{{0x0, 0x31, 0x0}}], 0x34000, 0x0) close(0x3) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'gretap0\x00', 0x2}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x339) close(0x3) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000080)={0x18, 0x0, {0x1, @broadcast, 'veth0_virt_wifi\x00'}}, 0x1e) 2m35.773054699s ago: executing program 3 (id=4249): r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x1e, &(0x7f0000000580)={0x0, 0x9f03, 0x80, 0x6, 0x10001d8}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4f3f, 0x4, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x80, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x10, 0x0, 0x19b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x200, 0x2, 0x30c}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x8006, &(0x7f0000000100)=0x80000fff, 0x3) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r8, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x0, 0x1, 0x4, 0x0, 0xfffffff9, {0x0, 0xea60}, {0x1, 0xc, 0x9, 0x48, 0x3, 0x8}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x496000}) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f00000013c0)=@framed, &(0x7f0000001400)='syzkaller\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r11, 0x104, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x8, 0xfffffffffffffe53, 0x0}}, 0xd) connect$can_bcm(r9, &(0x7f0000000080)={0x1d, r10}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'gre0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x7800, 0x20, 0x8, 0x587b9e78, {{0x36, 0x4, 0x0, 0x4, 0xd8, 0x68, 0x0, 0x1, 0x0, 0x0, @broadcast, @empty, {[@cipso={0x86, 0x5b, 0x0, [{0x0, 0xe, "1e686b369b8ac90e1300930e"}, {0x1, 0xa, "ae147b198d2d3303"}, {0x7, 0xd, "fa7cc4f665ced287d7fb0b"}, {0x5, 0x2}, {0x5, 0xb, "53847889de81a7ccdd"}, {0x7, 0x3, '1'}, {0x6, 0xa, "86c6bc277970dd72"}, {0x0, 0xe, "c379e408418b271bad2874cc"}, {0x0, 0x8, "29d2927f0c3b"}]}, @cipso={0x86, 0x4c, 0x2, [{0x2, 0x4, "5901"}, {0x6, 0xc, "a08450a640c0426c7f90"}, {0x2, 0xa, "5450cb513dbc7056"}, {0x7, 0xa, "e365a483aa19fdb6"}, {0x1, 0xb, "3504215c51553cfa23"}, {0x1, 0x4, "b429"}, {0x0, 0x2}, {0x2, 0x11, "e5d0589a1850230dbe11cc2c554d23"}]}, @end, @ssrr={0x89, 0x1b, 0x4d, [@local, @rand_addr=0x64010100, @local, @rand_addr=0x64010100, @loopback, @loopback]}]}}}}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r13 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x1ed202, 0x0) writev(r13, &(0x7f0000000000)=[{&(0x7f0000000200)="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", 0x200}, {0x0, 0x20000}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r16 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r15, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe6, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x46, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x100, 0x31, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300), &(0x7f0000000340)=[{0x5, 0x3, 0x9, 0x4}], 0x10, 0x395}, 0x94) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) 2m35.772634919s ago: executing program 4 (id=4250): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x8000) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000300)={0x0, 0x0, 0x5, 0x6a03, "0f9d0000002000200000b82100"}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004a80)={0x2c, r5, 0x105, 0x70bd25, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x40006) connect$inet(r3, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r3, r6}) sendmmsg$inet(r7, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000001300)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r8 = socket$inet(0xa, 0x801, 0x84) listen(r8, 0x8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r9, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) 2m35.0634607s ago: executing program 5 (id=4251): syz_open_dev$sg(0x0, 0x0, 0x8002) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000980)={'filter\x00', 0x10, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e5fce0c960bc", @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @broadcast, @loopback, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (fail_nth: 7) 2m34.324500339s ago: executing program 5 (id=4252): unshare(0x6020400) (async) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0xa, 0x4, 0x1, 0x5, '\x00', 0x9}, 0x1, [0x8, 0x3eb, 0xf9, 0x7, 0x10000000000000, 0x3, 0x3, 0xff800, 0xfffffffffffffff8, 0x40, 0x100000001, 0x9, 0x6, 0x2, 0x80000000, 0x10, 0x1, 0x5, 0x6, 0xfffffffffffffffa, 0xc, 0x3ff, 0x1ff, 0x4, 0x101, 0x200f, 0x14000000000, 0xfffffffffffff001, 0x6, 0xffff, 0x2, 0xffff, 0x86, 0x7f, 0x3, 0x1b06, 0x7, 0x3, 0x17ba067b, 0x3, 0x1, 0x8, 0x7, 0x6, 0xd9, 0xf, 0xcb0, 0xc8, 0x7, 0x9, 0x5, 0xb, 0xffffffffffffff05, 0x80, 0x1, 0x0, 0x23, 0xf, 0x8, 0xffffffffffff41d6, 0x1, 0x3, 0x5, 0x1c00000000000, 0x17a080000000, 0x4, 0xfff, 0x80000001, 0x9, 0x5, 0x300000000, 0x2, 0x4, 0x1640000, 0x83, 0x8, 0xe, 0x8, 0x3, 0xf523, 0xec4f, 0x3, 0x0, 0x3, 0x2, 0x6, 0x8, 0x81, 0x1, 0x7, 0x5, 0x1, 0x5, 0xfffffffffffffffc, 0x5, 0xffffffff00000001, 0x4, 0x8001, 0x5, 0x10001, 0xfffffffffffffd32, 0x3, 0xecc, 0x6, 0x8, 0x10001, 0xae, 0xe7, 0xbf9, 0x80000000, 0x80000000, 0x10000, 0x6, 0x6, 0x435, 0x6, 0x1, 0x7, 0x80000001, 0x0, 0xfffffffffffffffd, 0x3, 0x8, 0x8b72, 0xb2, 0x6, 0xfffffffffffffff9, 0x7]}) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000001d80)={{r0, &(0x7f0000001b80)='[)\\+!%\x00', 0x107140, &(0x7f0000001bc0)={@align=0x1, {0x2, 0x1, 0x7, 0x17c}}, 0x3, &(0x7f0000001c00), &(0x7f0000001d00)=0xaf}, {[0x10, 0x800, 0x6, 0x1]}, 0x7f, 0xc, &(0x7f0000001d40)=""/12}) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e23, 0x4, @mcast1, 0x1}}, [0x7, 0x4, 0x5, 0xfffffffffffffffc, 0x4, 0x3, 0x9, 0x397, 0x10, 0x6, 0x200, 0xf5f, 0x2d, 0xffffffff, 0x80]}, &(0x7f00000003c0)=0x100) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000400)={r3, 0x63, "e5e29bc64c2b036edfd31a3844e31d4c19482e612dd8a4d23570cb11062688d39ca74d61e46600fa022dca26aaea9890e3b647ff84790d5b9c49cd436077dea24ca977f256dffe7ee23800f93e1bebe09ab9467c5b5d75a9f8373b1558a647e171b7d0"}, &(0x7f0000000a40)=0x6b) (async) r4 = msgget$private(0x0, 0x3ac) msgrcv(r4, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_INFO(r4, 0x3, &(0x7f00000001c0)=""/219) msgsnd(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="03001a0000000000"], 0x8, 0x800) mmap(&(0x7f0000498000/0x2000)=nil, 0x2000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) mbind(&(0x7f0000d19000/0x3000)=nil, 0x3000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x2) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) (async) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) (async) sendmsg$tipc(r5, &(0x7f00000008c0)={&(0x7f0000000600)=@id={0x1e, 0x3, 0x0, {0x4e23}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000085}, 0x80) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) r7 = socket(0xa, 0x5, 0x0) preadv(r7, &(0x7f0000001b40)=[{&(0x7f0000000080)=""/78, 0x4e}, {&(0x7f0000000a80)=""/137, 0x89}, {&(0x7f0000000b40)=""/4096, 0x1000}], 0x3, 0x7, 0xcf22) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x80}, &(0x7f0000000100)=0x90) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, 0x0) (async) ioctl$sock_SIOCBRDELBR(r7, 0x89a1, &(0x7f0000000140)='team_slave_0\x00') (async) r8 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x11) ioctl$DVB_DEMUX_DMX_STOP(r1, 0x6f2a) (async) write$cgroup_int(r8, &(0x7f0000007880)=0x7fffffff, 0x12) (async) getdents(r8, &(0x7f0000001c40)=""/189, 0xbd) (async) unshare(0x10000000) 2m33.396228967s ago: executing program 5 (id=4253): unshare(0x24000480) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000003c0)="8c", 0x1}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x44, r5, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) 2m33.155540186s ago: executing program 3 (id=4254): gettid() (async) r0 = gettid() tkill(r0, 0x12) io_setup(0x2, &(0x7f00000001c0)=0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$loop(&(0x7f0000000180), 0xffff, 0xb00) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f00000001c0)) sendmmsg(r2, &(0x7f0000010600)=[{{0x0, 0x0, &(0x7f0000006600)=[{&(0x7f0000006300)="382ff07f7d", 0x5}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x20}}], 0x1, 0x0) io_pgetevents(r1, 0x3, 0x3, &(0x7f0000000200)=[{}, {}, {}], &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000380)={&(0x7f00000002c0)={[0x2368e8ff]}, 0x8}) (async) io_pgetevents(r1, 0x3, 0x3, &(0x7f0000000200)=[{}, {}, {}], &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000380)={&(0x7f00000002c0)={[0x2368e8ff]}, 0x8}) 2m32.887265815s ago: executing program 1 (id=4255): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x34, r1, 0x1, 0x0, 0x0, {0x54}, [@nsim={{0xe, 0x2}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x9}]}) (async) fsopen(0x0, 0x1) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) syz_usb_connect$uac1(0x6, 0xe0, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x19f7, 0x11, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xce, 0x3, 0x1, 0x6f, 0xd0, 0xe, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x27}, [@mixer_unit={0xb, 0x24, 0x4, 0x2, 0x8, "e28e04eb8cf3"}, @mixer_unit={0x6, 0x24, 0x4, 0x5, 0x81, "d1"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x205, 0x1, 0x4, 0xc, 0x0, 0xb7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x3, 0x74, 0x40, "5fc3", "d63f"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x1, 0x94, 0xb8, "", "8dac"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x7, 0x3, 0x26, 0x6, "4138d0"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x8, 0x8, 0x3}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x9, 0x7, 0xe, "aeaf9eac9c"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x1, 0x2, 0x0, 0x0, "7e6a8297"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x6, 0x3, 0x1, {0x7, 0x25, 0x1, 0xc, 0x3, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x9, 0x1, 0x23, 0x44, "97e6", "3a805d"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x4c, 0x9, {0x7, 0x25, 0x1, 0x8, 0xff, 0x7}}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x6, 0x9, 0x2, 0x20, 0x5}, 0x49, &(0x7f00000002c0)={0x5, 0xf, 0x49, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0x8, 0xf0f, 0xc13, [0x30, 0xc000, 0x3f, 0xc00f]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a948fc0c9836c998d800"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "28d45a0d6bcc6ef2a22e95b02ac777f1"}]}, 0x9, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x424}}, {0xa3, &(0x7f0000000380)=@string={0xa3, 0x3, "a4769a8b6119d66b377f99538e90e0754ddc5eb1c9ac2a597011cb0fe013636b98d13126eccaad0cb65b43520b4ead900dd76d28f8a1f05933bbc7d07e48fd7e662932dca2acf3f1de56057596772c9c72c7d8e98c41f91795046434925c37dc565e69cacd898efa55370438d895af5e7d82f6a6c52319ea5578b4ba6475bfc0a25affa64598626bb09141776bbfa344a57a59a2eb9c472770c4ab58e0ed147bcf"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x439}}, {0xe0, &(0x7f0000000480)=@string={0xe0, 0x3, "4a8d99cb519d75c0197608c5e6afd578a29519ded3ae7a2cea1013dc8f482cbde83ee9439b113880ce653f205ed117a9bfd019107308a33ff228dbb532b8a6dfaa32a02f7bd56b387f7a35888b7f415ca0f9f8f808cd684056dd58c80907348c97110312b24f2d0480620e9a06c426a6ad81d119466b78ef0c86aeb7fc85367db70eb895d05e715c4a6a01bac667fbc2e4d18de4a496edf40d264cbb73de69766e2ae50ed44e8873e9bb008733abd4e5717f7a966d280e335a43a65578cc83ceb62a2b89bc00fef5b6bbf006ac8160226475f9baa366343b37877de6da9b"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x42a}}, {0x41, &(0x7f0000000600)=@string={0x41, 0x3, "664a83cee689ab2569687b742429a70cfdd6ba801ae0f727222785c3166576c15a4f2ac8a2f8b411a09665ce457f09d518408d737c8a60e2fdb219d3fbf148"}}, {0x44, &(0x7f0000000700)=@string={0x44, 0x3, "92c70577a08fbd1f889d07f45d5ab629bb013a187ec4a77359dd0bd49f7004d913e3476711898510710dc3abc902223448a50971273621187347f94e72073b5c530a"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x41f}}]}) (async) close_range(r2, 0xffffffffffffffff, 0x0) 2m32.577416528s ago: executing program 3 (id=4256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) 2m32.487148439s ago: executing program 4 (id=4257): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x140800, 0x0) epoll_create1(0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x26c, 0x0, 0x8000010100000}]}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000200)={0x30000, 0x0, {[0xa, 0x4, 0x8e7, 0xfffffffffffff9fe, 0x1, 0xe, 0x1, 0x5]}}) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x5, 0x0, 0x4, 0x0, 0x5, 0x7fff, 0xffffffff}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x87) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd26, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x20}, @in6=@rand_addr=' \x01\x00', 0x1, 0x0, 0x4e21, 0x0, 0xa}, {0x0, 0x40000000003ff, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdac, 0x2f, 0x407fffffffffff, 0x7fffffffffffffe}, 0x1, 0x0, 0x1, 0x0, 0x5, 0x2}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x3c}, 0x2, @in6=@private2, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e21, 0x7, @empty, 0x80000000}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) getsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r7, {0x80000000, 0xffff}}, './bus\x00'}) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x2, 0x6, 0x518, 0x378, 0x0, 0x1b0, 0x0, 0x0, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x12, 0x1}, {0x0, 0x5, 0xc}, {0xffffffffffffffff, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0xffffffff, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'wg0\x00', {}, {}, 0x6, 0x7f, 0x4}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x5}, {0x3, 0x4, 0x4}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @private0, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xff000000, 0xffffff, 0xff, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x1b}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, [0xff, 0x0, 0x7f7fff00, 0xffffffff], [0xff000000, 0xcf16d9bfdc28978c, 0x0, 0xff], 'veth0\x00', 'dvmrp1\x00', {0xff}, {}, 0x2c, 0x0, 0x6, 0x8}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0xfd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x578) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r9, 0x4048587b, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000002600)={@ipv4={""/10, ""/2, @dev}}, &(0x7f0000002640)=0x14) writev(r9, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) socket$netlink(0x10, 0x3, 0x0) 2m32.326375228s ago: executing program 3 (id=4258): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r2, 0x110, 0x7, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x0, 0x0, 0x9, 0xffffff7fffffffff, 0xfffffdfffffffffd, 0xffffffc0, 0xffffffff}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$sock(r0, &(0x7f0000000840)={&(0x7f0000000500)=@qipcrtr, 0x80, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000680)="5f150f107ac3e05b42b4425cd3c8b40437ea0213fe93ef7b865e907684d2faa297c7ccc1adac82421e8f8951b2277448e812f3f56164a3d6", 0x38}, {0x0}], 0x3, &(0x7f0000000800)}, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x10000, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)=0x800001c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, r4, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x9}) socket(0xa, 0x3, 0x3a) syz_usb_connect$uac2(0x3, 0x87, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100300000020ba0d001040000102030109027500030106100208c597e7b58f1b4ed509991ebb097cfd640b0100010c200009040000000101200009240180ff071500040c2403020403050400ff011c0904010000010220000904010101010220000905010910000c02090825018030ad000109040200000102200009040201010102200009"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) write(r5, &(0x7f0000000040)="0f03000018002551075c0165ff0ffc02802000030011000500e1000cee0203001a000000", 0x33a) 0s ago: executing program 33 (id=4255): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x34, r1, 0x1, 0x0, 0x0, {0x54}, [@nsim={{0xe, 0x2}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x9}]}) (async) fsopen(0x0, 0x1) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) syz_usb_connect$uac1(0x6, 0xe0, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x19f7, 0x11, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xce, 0x3, 0x1, 0x6f, 0xd0, 0xe, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x27}, [@mixer_unit={0xb, 0x24, 0x4, 0x2, 0x8, "e28e04eb8cf3"}, @mixer_unit={0x6, 0x24, 0x4, 0x5, 0x81, "d1"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x205, 0x1, 0x4, 0xc, 0x0, 0xb7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x3, 0x74, 0x40, "5fc3", "d63f"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x1, 0x94, 0xb8, "", "8dac"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x7, 0x3, 0x26, 0x6, "4138d0"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x8, 0x8, 0x3}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x9, 0x7, 0xe, "aeaf9eac9c"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x1, 0x2, 0x0, 0x0, "7e6a8297"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x6, 0x3, 0x1, {0x7, 0x25, 0x1, 0xc, 0x3, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x9, 0x1, 0x23, 0x44, "97e6", "3a805d"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x4c, 0x9, {0x7, 0x25, 0x1, 0x8, 0xff, 0x7}}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x6, 0x9, 0x2, 0x20, 0x5}, 0x49, &(0x7f00000002c0)={0x5, 0xf, 0x49, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0x8, 0xf0f, 0xc13, [0x30, 0xc000, 0x3f, 0xc00f]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a948fc0c9836c998d800"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "28d45a0d6bcc6ef2a22e95b02ac777f1"}]}, 0x9, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x424}}, {0xa3, &(0x7f0000000380)=@string={0xa3, 0x3, "a4769a8b6119d66b377f99538e90e0754ddc5eb1c9ac2a597011cb0fe013636b98d13126eccaad0cb65b43520b4ead900dd76d28f8a1f05933bbc7d07e48fd7e662932dca2acf3f1de56057596772c9c72c7d8e98c41f91795046434925c37dc565e69cacd898efa55370438d895af5e7d82f6a6c52319ea5578b4ba6475bfc0a25affa64598626bb09141776bbfa344a57a59a2eb9c472770c4ab58e0ed147bcf"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x439}}, {0xe0, &(0x7f0000000480)=@string={0xe0, 0x3, "4a8d99cb519d75c0197608c5e6afd578a29519ded3ae7a2cea1013dc8f482cbde83ee9439b113880ce653f205ed117a9bfd019107308a33ff228dbb532b8a6dfaa32a02f7bd56b387f7a35888b7f415ca0f9f8f808cd684056dd58c80907348c97110312b24f2d0480620e9a06c426a6ad81d119466b78ef0c86aeb7fc85367db70eb895d05e715c4a6a01bac667fbc2e4d18de4a496edf40d264cbb73de69766e2ae50ed44e8873e9bb008733abd4e5717f7a966d280e335a43a65578cc83ceb62a2b89bc00fef5b6bbf006ac8160226475f9baa366343b37877de6da9b"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x42a}}, {0x41, &(0x7f0000000600)=@string={0x41, 0x3, "664a83cee689ab2569687b742429a70cfdd6ba801ae0f727222785c3166576c15a4f2ac8a2f8b411a09665ce457f09d518408d737c8a60e2fdb219d3fbf148"}}, {0x44, &(0x7f0000000700)=@string={0x44, 0x3, "92c70577a08fbd1f889d07f45d5ab629bb013a187ec4a77359dd0bd49f7004d913e3476711898510710dc3abc902223448a50971273621187347f94e72073b5c530a"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x41f}}]}) (async) close_range(r2, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): or directory [ 1527.232014][T18920] usb 6-1: Failed to submit usb control message: -110 [ 1527.232059][T18920] usb 6-1: unable to send the bmi data to the device: -110 [ 1527.232089][T18920] usb 6-1: unable to get target info from device [ 1527.232116][T18920] usb 6-1: could not get target info (-110) [ 1527.232188][T18920] usb 6-1: could not probe fw (-110) [ 1527.670445][T19094] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1527.813111][T21307] ovs-dp0: left promiscuous mode [ 1527.860829][T19094] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 1527.915018][T19094] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1527.915043][T19094] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1527.930600][T19094] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.930652][T19094] usb 2-1: Product: syz [ 1527.930664][T19094] usb 2-1: Manufacturer: syz [ 1527.930689][T19094] usb 2-1: SerialNumber: syz [ 1528.308484][T21323] tipc: Can't bind to reserved service type 0 [ 1528.430779][T19094] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 1528.804021][T19094] usb 6-1: USB disconnect, device number 36 [ 1529.755557][T19090] usb 2-1: USB disconnect, device number 26 [ 1529.775494][T19090] usblp0: removed [ 1530.689913][ T5682] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 1530.842212][ T5682] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 1530.844368][ T5682] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1530.844605][ T5682] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1530.844679][ T5682] usb 2-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1530.896313][ T5682] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.896345][ T5682] usb 2-1: Product: syz [ 1530.896362][ T5682] usb 2-1: Manufacturer: syz [ 1530.896380][ T5682] usb 2-1: SerialNumber: syz [ 1531.224263][ T5682] snd-usb-caiaq 2-1:1.0: invalid EPs [ 1531.224292][ T5682] usb 2-1: unable to init card! (ret=-22) [ 1531.255576][ T5682] snd-usb-caiaq 2-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 1531.473593][ T5682] usb 2-1: USB disconnect, device number 27 [ 1531.979917][T19090] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1532.142025][T19090] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 1532.143998][T19090] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1532.144032][T19090] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1532.187376][T19090] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.187414][T19090] usb 4-1: Product: syz [ 1532.187441][T19090] usb 4-1: Manufacturer: syz [ 1532.187453][T19090] usb 4-1: SerialNumber: syz [ 1532.437236][T19090] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 89 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 1532.600413][ T5682] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1532.690686][T21332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1532.702989][T21332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1532.750044][ T5682] usb 6-1: Using ep0 maxpacket: 16 [ 1532.751146][ T5682] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1532.753464][ T5682] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1532.753499][ T5682] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1532.753570][ T5682] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1532.753615][ T5682] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1532.868732][ T5682] usb 6-1: config 0 descriptor?? [ 1533.260081][T19094] usb 4-1: USB disconnect, device number 89 [ 1533.318267][T19094] usblp0: removed [ 1533.609040][ T5682] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.005E/input/input171 [ 1533.764269][ T5682] microsoft 0003:045E:07DA.005E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1533.806485][ T5682] usb 6-1: USB disconnect, device number 37 [ 1534.154240][T21367] fido_id[21367]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1536.192895][T21384] ovs-dp0: left promiscuous mode [ 1536.229471][T21386] usb usb1: usbfs: process 21386 (syz.4.3986) did not claim interface 0 before use [ 1536.354010][T21390] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3989'. [ 1536.610934][ T5682] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1536.791027][ T5682] usb 1-1: Using ep0 maxpacket: 32 [ 1536.806761][ T5682] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1536.806815][ T5682] usb 1-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0 [ 1536.823461][ T5682] usb 1-1: config 3 has an invalid interface number: 223 but max is 1 [ 1536.823544][ T5682] usb 1-1: config 3 has an invalid interface number: 25 but max is 1 [ 1536.823678][ T5682] usb 1-1: config 3 has an invalid interface number: 223 but max is 1 [ 1536.823748][ T5682] usb 1-1: config 3 has no interface number 0 [ 1536.823804][ T5682] usb 1-1: config 3 has no interface number 1 [ 1536.824183][ T5682] usb 1-1: config 3 interface 25 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1536.824245][ T5682] usb 1-1: too many endpoints for config 3 interface 223 altsetting 155: 82, using maximum allowed: 30 [ 1536.824349][ T5682] usb 1-1: config 3 interface 223 altsetting 155 has 0 endpoint descriptors, different from the interface descriptor's value: 82 [ 1536.824422][ T5682] usb 1-1: config 3 interface 223 has no altsetting 1 [ 1536.824473][ T5682] usb 1-1: config 3 interface 25 has no altsetting 0 [ 1536.846721][T21378] ovs-dp0: entered promiscuous mode [ 1536.981429][ T5682] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.981460][ T5682] usb 1-1: Product: syz [ 1536.981477][ T5682] usb 1-1: Manufacturer: syz [ 1536.981493][ T5682] usb 1-1: SerialNumber: syz [ 1537.364189][ T5682] usb 1-1: USB disconnect, device number 15 [ 1537.659250][T21405] FAULT_INJECTION: forcing a failure. [ 1537.659250][T21405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1537.659296][T21405] CPU: 1 UID: 0 PID: 21405 Comm: syz.5.3990 Tainted: G L syzkaller #0 PREEMPT(full) [ 1537.659319][T21405] Tainted: [L]=SOFTLOCKUP [ 1537.659325][T21405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1537.659336][T21405] Call Trace: [ 1537.659343][T21405] [ 1537.659350][T21405] dump_stack_lvl+0xe8/0x150 [ 1537.659378][T21405] should_fail_ex+0x410/0x560 [ 1537.659402][T21405] _copy_from_user+0x2d/0xb0 [ 1537.659427][T21405] ___sys_sendmsg+0x1c6/0x360 [ 1537.659452][T21405] ? __lock_acquire+0x747/0x2de0 [ 1537.659474][T21405] ? __pfx____sys_sendmsg+0x10/0x10 [ 1537.659503][T21405] ? kstrtouint+0x6e/0xe0 [ 1537.659538][T21405] ? __fget_files+0x2a/0x420 [ 1537.659562][T21405] ? __fget_files+0x3a2/0x420 [ 1537.659637][T21405] __sys_sendmmsg+0x273/0x4d0 [ 1537.659675][T21405] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1537.659717][T21405] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1537.659753][T21405] ? ksys_write+0x242/0x270 [ 1537.659770][T21405] ? __pfx_ksys_write+0x10/0x10 [ 1537.659790][T21405] __x64_sys_sendmmsg+0xa0/0xc0 [ 1537.659817][T21405] do_syscall_64+0x166/0x520 [ 1537.659839][T21405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1537.659856][T21405] ? clear_bhb_loop+0x70/0xc0 [ 1537.659875][T21405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1537.659891][T21405] RIP: 0033:0x7efc8059e159 [ 1537.659906][T21405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1537.659919][T21405] RSP: 002b:00007efc81458028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1537.659937][T21405] RAX: ffffffffffffffda RBX: 00007efc80825fa0 RCX: 00007efc8059e159 [ 1537.659949][T21405] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 1537.659959][T21405] RBP: 00007efc81458090 R08: 0000000000000000 R09: 0000000000000000 [ 1537.659970][T21405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1537.659979][T21405] R13: 00007efc80826038 R14: 00007efc80825fa0 R15: 00007efc8094fa48 [ 1537.660025][T21405] [ 1538.779873][T19082] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 1538.931507][T19082] usb 1-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 1538.932774][T19082] usb 1-1: config 4 has an invalid interface number: 44 but max is 0 [ 1538.932803][T19082] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1538.932824][T19082] usb 1-1: config 4 has no interface number 0 [ 1538.932866][T19082] usb 1-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1538.935802][T19082] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.935828][T19082] usb 1-1: Product: syz [ 1538.935843][T19082] usb 1-1: Manufacturer: syz [ 1538.935860][T19082] usb 1-1: SerialNumber: syz [ 1539.119817][ T5682] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1539.284813][ T5682] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1539.286596][ T5682] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1539.286623][ T5682] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1539.286646][ T5682] usb 6-1: config 220 has no interface number 2 [ 1539.286733][ T5682] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1539.286764][ T5682] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1539.286784][ T5682] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1539.286803][ T5682] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1539.337476][ T5682] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.337623][ T5682] usb 6-1: Product: syz [ 1539.337666][ T5682] usb 6-1: Manufacturer: syz [ 1539.337708][ T5682] usb 6-1: SerialNumber: syz [ 1539.735268][T19082] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 1539.761647][T19082] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1539.763985][T19082] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 1539.764041][T19082] usb 1-1: media controller created [ 1539.814843][T19082] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1539.988216][T21412] i2c i2c-1: Invalid block size returned: 253 [ 1540.302515][T19082] DVB: Unable to find symbol dib7000p_attach() [ 1540.302535][T19082] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 1540.417949][ T5682] usb 6-1: selecting invalid altsetting 0 [ 1540.418596][ T5682] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1540.418632][ T5682] uvcvideo 6-1:220.0: No valid video chain found. [ 1540.488706][ T5682] usb 6-1: selecting invalid altsetting 0 [ 1540.488755][ T5682] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 1540.520577][ T5682] usb 6-1: USB disconnect, device number 38 [ 1540.729888][T19082] rc_core: IR keymap rc-dib0700-rc5 not found [ 1540.729909][T19082] Registered IR keymap rc-empty [ 1540.730238][T19082] dvb-usb: could not initialize remote control. [ 1540.730249][T19082] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 1540.750961][T19081] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1540.901157][T19081] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 1540.902748][T19081] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1540.902777][T19081] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1540.911027][T19081] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.911099][T19081] usb 5-1: Product: syz [ 1540.911171][T19081] usb 5-1: Manufacturer: syz [ 1540.911222][T19081] usb 5-1: SerialNumber: syz [ 1541.278119][T19081] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 1541.575999][T21424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1541.576644][T21424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1542.155714][T19094] usb 1-1: USB disconnect, device number 16 [ 1542.179538][T19094] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 1542.382427][T19081] usb 5-1: USB disconnect, device number 4 [ 1542.473261][T19081] usblp0: removed [ 1542.711544][ T31] kauditd_printk_skb: 133 callbacks suppressed [ 1542.711577][ T31] audit: type=1400 audit(1790928257.930:6130): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=":+%%:" pid=21431 comm="syz.0.3997" [ 1543.721701][T19094] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1543.889982][T19094] usb 5-1: device descriptor read/64, error -71 [ 1544.160413][T19094] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1544.302692][T19094] usb 5-1: device descriptor read/64, error -71 [ 1544.309715][ T5682] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1544.423452][T19094] usb usb5-port1: attempt power cycle [ 1544.468911][ T5682] usb 6-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 1544.480263][ T5682] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1544.480297][ T5682] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1544.480321][ T5682] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1544.480364][ T5682] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.542114][ T5682] usb 6-1: config 0 descriptor?? [ 1544.809928][T19094] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1544.849172][T19094] usb 5-1: device descriptor read/8, error -71 [ 1544.910193][T19081] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1544.960319][T21448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1544.960907][T21448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1545.060928][T19081] usb 2-1: Using ep0 maxpacket: 16 [ 1545.064064][T19081] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1545.064119][T19081] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 1545.094499][T19081] usb 2-1: config 127 has an invalid interface number: 124 but max is 0 [ 1545.094533][T19081] usb 2-1: config 127 has no interface number 0 [ 1545.094592][T19081] usb 2-1: config 127 interface 124 has no altsetting 0 [ 1545.097392][T19081] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.097420][T19081] usb 2-1: Product: syz [ 1545.097467][T19081] usb 2-1: Manufacturer: syz [ 1545.097485][T19081] usb 2-1: SerialNumber: syz [ 1545.154125][T19094] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1545.211251][T19094] usb 5-1: device descriptor read/8, error -71 [ 1545.320376][T19094] usb usb5-port1: unable to enumerate USB device [ 1545.427986][T21456] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4003'. [ 1545.492138][ T5682] usbhid 6-1:0.0: can't add hid device: -71 [ 1545.492256][ T5682] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1545.518741][ T5682] usb 6-1: USB disconnect, device number 39 [ 1545.670703][T21459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4003'. [ 1545.964311][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.964384][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.171002][T19081] usb 2-1: reset high-speed USB device number 28 using dummy_hcd [ 1546.559970][ T5682] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1546.700439][ T5682] usb 5-1: device descriptor read/64, error -71 [ 1546.941743][ T5682] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1547.070000][ T5682] usb 5-1: device descriptor read/64, error -71 [ 1547.105916][T21475] vcan1: entered promiscuous mode [ 1547.105941][T21475] vcan1: entered allmulticast mode [ 1547.180762][ T5682] usb usb5-port1: attempt power cycle [ 1547.408242][T19081] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1547.457452][T19081] usb 2-1: device firmware changed [ 1547.477689][T19081] usb 2-1: USB disconnect, device number 28 [ 1547.526785][ T5682] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1547.540836][ T5682] usb 5-1: device descriptor read/8, error -71 [ 1547.780925][ T5682] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1547.804244][ T5682] usb 5-1: device descriptor read/8, error -71 [ 1547.841902][T19079] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1547.910703][ T5682] usb usb5-port1: unable to enumerate USB device [ 1547.990123][T19079] usb 6-1: Using ep0 maxpacket: 16 [ 1547.997083][T19079] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1547.999545][T19079] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1548.000017][T19079] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1548.000053][T19079] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1548.000080][T19079] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1548.000109][T19079] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1548.085180][T19079] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1548.085215][T19079] usb 6-1: Manufacturer: syz [ 1548.106869][T19079] usb 6-1: config 0 descriptor?? [ 1548.459726][T19079] rc_core: IR keymap rc-hauppauge not found [ 1548.459748][T19079] Registered IR keymap rc-empty [ 1548.460154][T19079] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1548.489318][T19079] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1548.517192][T19079] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1548.535771][T19079] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input173 [ 1548.564665][T19079] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1548.579891][T19079] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1548.600199][T19079] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1548.620422][T19079] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1548.659974][T19079] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1548.689880][T19079] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1548.710366][T19079] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1548.729881][T19079] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1548.749810][T19079] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1548.770242][T19079] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1548.793813][T19079] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1548.793841][T19079] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1548.877512][T19094] usb 6-1: USB disconnect, device number 40 [ 1549.395747][T21493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4013'. [ 1549.508864][T21498] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4015'. [ 1549.662081][T21505] loop0: detected capacity change from 0 to 6 [ 1549.743038][T21505] Dev loop0: unable to read RDB block 6 [ 1549.743144][T21505] loop0: unable to read partition table [ 1549.743670][T21505] loop0: partition table beyond EOD, truncated [ 1549.743768][T21505] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 1549.853312][T21509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4015'. [ 1550.060876][T19094] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1550.085641][ T31] audit: type=1326 audit(1790928265.300:6131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21511 comm="syz.1.4020" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00f39e159 code=0x7ffc0000 [ 1550.127624][ T31] audit: type=1326 audit(1790928265.330:6132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21511 comm="syz.1.4020" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00f39e159 code=0x7ffc0000 [ 1550.127685][ T31] audit: type=1326 audit(1790928265.340:6133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21511 comm="syz.1.4020" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=468 compat=0 ip=0x7fa00f39e159 code=0x7ffc0000 [ 1550.127732][ T31] audit: type=1326 audit(1790928265.340:6134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21511 comm="syz.1.4020" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00f39e159 code=0x7ffc0000 [ 1550.161879][ T31] audit: type=1326 audit(1790928265.340:6135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21511 comm="syz.1.4020" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00f39e159 code=0x7ffc0000 [ 1550.161935][ T31] audit: type=1326 audit(1790928265.380:6136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21511 comm="syz.1.4020" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00f39e159 code=0x7ffc0000 [ 1550.161978][ T31] audit: type=1326 audit(1790928265.380:6137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21511 comm="syz.1.4020" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00f39e159 code=0x7ffc0000 [ 1550.162020][ T31] audit: type=1326 audit(1790928265.380:6138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21511 comm="syz.1.4020" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00f39e159 code=0x7ffc0000 [ 1550.208474][ T31] audit: type=1326 audit(1790928265.380:6139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21511 comm="syz.1.4020" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa00f35e98e code=0x7ffc0000 [ 1550.208606][ T31] audit: type=1326 audit(1790928265.380:6140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21511 comm="syz.1.4020" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00f39e159 code=0x7ffc0000 [ 1550.222903][T19094] usb 4-1: device descriptor read/64, error -71 [ 1550.292659][T21515] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4020'. [ 1550.343117][T21514] netlink: 'syz.4.4019': attribute type 1 has an invalid length. [ 1550.480009][T19094] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1550.600421][T21514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1550.626883][T19094] usb 4-1: device descriptor read/64, error -71 [ 1550.708053][T21516] vlan2: entered promiscuous mode [ 1550.708087][T21516] bond0: entered promiscuous mode [ 1550.729423][T21516] vlan2: entered allmulticast mode [ 1550.729441][T21516] bond0: entered allmulticast mode [ 1550.740624][T19094] usb usb4-port1: attempt power cycle [ 1550.895989][T21518] bond0: (slave bridge1): making interface the new active one [ 1550.896024][T21518] bridge1: entered promiscuous mode [ 1550.901334][T21518] bridge1: entered allmulticast mode [ 1550.907259][T21518] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 1551.108168][T19094] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1551.126864][T19094] usb 4-1: device descriptor read/8, error -71 [ 1551.380970][T19094] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1551.438444][T19094] usb 4-1: device descriptor read/8, error -71 [ 1551.540480][T19094] usb usb4-port1: unable to enumerate USB device [ 1552.920161][ T5682] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1553.049835][ T5682] usb 4-1: device descriptor read/64, error -71 [ 1553.290323][ T5682] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1553.439904][ T5682] usb 4-1: device descriptor read/64, error -71 [ 1553.558459][ T5682] usb usb4-port1: attempt power cycle [ 1553.672918][T21540] loop0: detected capacity change from 0 to 6 [ 1553.760295][T21540] Dev loop0: unable to read RDB block 6 [ 1553.760345][T21540] loop0: unable to read partition table [ 1553.760560][T21540] loop0: partition table beyond EOD, truncated [ 1553.760579][T21540] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 1553.899817][ T5682] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1553.921274][ T5682] usb 4-1: device descriptor read/8, error -71 [ 1554.053347][T21546] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4031'. [ 1554.159899][ T5682] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1554.181535][T19094] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1554.181579][ T5682] usb 4-1: device descriptor read/8, error -71 [ 1554.290147][ T5682] usb usb4-port1: unable to enumerate USB device [ 1554.313878][T21538] netlink: 1030 bytes leftover after parsing attributes in process `syz.0.4029'. [ 1554.362256][T19094] usb 5-1: Using ep0 maxpacket: 16 [ 1554.365431][T19094] usb 5-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1554.397088][T19094] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 1554.397154][T19094] usb 5-1: config 0 has an invalid descriptor of length 122, skipping remainder of the config [ 1554.397216][T19094] usb 5-1: config 0 has no interface number 0 [ 1554.397317][T19094] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x8A has an invalid bInterval 157, changing to 11 [ 1554.397382][T19094] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x8A has invalid maxpacket 58632, setting to 1024 [ 1554.397446][T19094] usb 5-1: config 0 interface 35 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1554.484509][T19094] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.484544][T19094] usb 5-1: Product: syz [ 1554.484618][T19094] usb 5-1: Manufacturer: syz [ 1554.484643][T19094] usb 5-1: SerialNumber: syz [ 1554.489168][T19094] usb 5-1: config 0 descriptor?? [ 1554.491529][T21545] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1554.508475][T19094] cypress_m8 5-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 1554.511318][T19094] nokiaca42v2 ttyUSB0: required endpoint is missing [ 1554.715874][T19079] usb 5-1: USB disconnect, device number 13 [ 1554.718773][T19079] cypress_m8 5-1:0.35: device disconnected [ 1554.749057][T21558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1554.749507][T21558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1554.949748][ T5682] usb 6-1: new low-speed USB device number 42 using dummy_hcd [ 1555.079677][ T5682] usb 6-1: device descriptor read/64, error -71 [ 1555.250585][T19079] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1555.319763][ T5682] usb 6-1: new low-speed USB device number 43 using dummy_hcd [ 1555.410910][T19079] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1555.415294][T19079] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1555.415323][T19079] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1555.415363][T19079] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1555.468783][ T5682] usb 6-1: device descriptor read/64, error -71 [ 1555.476960][T19079] usb 1-1: config 0 descriptor?? [ 1555.570005][ T5682] usb usb6-port1: attempt power cycle [ 1555.909745][ T5682] usb 6-1: new low-speed USB device number 44 using dummy_hcd [ 1555.941545][ T5682] usb 6-1: device descriptor read/8, error -71 [ 1556.179887][ T5682] usb 6-1: new low-speed USB device number 45 using dummy_hcd [ 1556.202633][ T5682] usb 6-1: device descriptor read/8, error -71 [ 1556.312398][ T5682] usb usb6-port1: unable to enumerate USB device [ 1558.196493][T21590] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 1558.221627][T19090] usb 1-1: USB disconnect, device number 17 [ 1558.562914][T21599] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4043'. [ 1558.889762][T19079] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1558.941040][ T5682] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 1558.970055][T19081] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 1559.020168][T19079] usb 5-1: device descriptor read/64, error -71 [ 1559.090935][ T5682] usb 4-1: New USB device found, idVendor=0582, idProduct=009a, bcdDevice= 0.40 [ 1559.092327][ T5682] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1559.094866][ T5682] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.094892][ T5682] usb 4-1: Product: syz [ 1559.094909][ T5682] usb 4-1: Manufacturer: syz [ 1559.097410][ T5682] usb 4-1: SerialNumber: syz [ 1559.171094][T19081] usb 2-1: New USB device found, idVendor=0105, idProduct=17a0, bcdDevice= 0.3e [ 1559.171169][T19081] usb 2-1: too many configurations: 93, using maximum allowed: 8 [ 1559.172671][T19081] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1559.172981][T19081] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 249, changing to 4 [ 1559.173014][T19081] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 1559.174379][T19081] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1559.174474][T19081] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 249, changing to 4 [ 1559.174522][T19081] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 1559.175812][T19081] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1559.175878][T19081] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 249, changing to 4 [ 1559.175930][T19081] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 1559.177269][T19081] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1559.177367][T19081] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 249, changing to 4 [ 1559.177398][T19081] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 1559.178916][T19081] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1559.179010][T19081] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 249, changing to 4 [ 1559.179041][T19081] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 1559.260132][T19081] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1559.260235][T19081] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 249, changing to 4 [ 1559.260263][T19081] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 1559.306084][T19081] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1559.306185][T19081] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 249, changing to 4 [ 1559.306214][T19081] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 1559.339642][T19079] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1559.350358][T19081] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1559.350486][T19081] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 249, changing to 4 [ 1559.350517][T19081] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 1559.441576][T19081] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=18 [ 1559.441606][T19081] usb 2-1: Product: syz [ 1559.441656][T19081] usb 2-1: Manufacturer: syz [ 1559.441673][T19081] usb 2-1: SerialNumber: syz [ 1559.579795][T19079] usb 5-1: device descriptor read/64, error -71 [ 1559.680323][T19079] usb usb5-port1: attempt power cycle [ 1559.878754][T21602] input: syz0 as /devices/virtual/input/input175 [ 1560.015697][T21618] ovs-dp0: left promiscuous mode [ 1560.030499][T19079] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1560.073640][T19079] usb 5-1: device descriptor read/8, error -71 [ 1560.304106][T21619] ovs-dp0: entered promiscuous mode [ 1560.320088][T19079] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1560.351097][T19079] usb 5-1: device descriptor read/8, error -71 [ 1560.429956][ T5682] usb 4-1: Can't get UAC3 power state for id 10 [ 1560.436608][ T5682] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 1560.460541][T19079] usb usb5-port1: unable to enumerate USB device [ 1560.478181][ T5682] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1560.478213][ T5682] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1560.478260][ T5682] usb 4-1: [2] FU [Headphone Playback Volume] ch = 2, val = 0/1/1 [ 1560.584917][ T5682] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1560.674538][ T5682] usb 4-1: USB disconnect, device number 98 [ 1560.854281][T21626] loop0: detected capacity change from 0 to 6 [ 1560.903308][T21626] Dev loop0: unable to read RDB block 6 [ 1560.903397][T21626] loop0: unable to read partition table [ 1560.903770][T21626] loop0: partition table beyond EOD, truncated [ 1560.903821][T21626] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 1561.003655][T19081] usb 2-1: invalid UAC_HEADER (v1) [ 1561.272500][T20451] udevd[20451]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1561.344410][T19081] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1561.385858][T19081] usb 2-1: USB disconnect, device number 29 [ 1561.562984][T20839] udevd[20839]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1561.930655][T19104] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1561.931228][T21629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4050'. [ 1562.079946][T19104] usb 4-1: Using ep0 maxpacket: 8 [ 1562.080860][T19104] usb 4-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 1562.083322][T19104] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 1562.127158][T19104] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.127228][T19104] usb 4-1: Product: ä Š [ 1562.127261][T19104] usb 4-1: Manufacturer: 㽉椿齾ﴶ䄬᧼膈ᕋ욹틵ä½æ½‹ëº‘轜î‘ﳎ࠴ம묗삡鹄▚ⴲ넎멖è¿ë³±ç¨‰é“¼ìŠ‹â¡­àº¨ïŽ¼ì¡—쫮諜鋵녷賰ꠅἽ韒ୃ䟦몃싈敗ᡧá˜äž˜ê¼ê¿¦ïƒ½è”ªÓ³è€ å¨¿å¶˜ì£† [ 1562.129455][T19104] usb 4-1: SerialNumber: 㦪 [ 1562.567177][T21641] tipc: Enabling of bearer rejected, media not registered [ 1562.728380][T19104] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1562.728574][T19104] usb 4-1: MIDIStreaming interface descriptor not found [ 1562.749867][T19082] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1562.903784][T19082] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1562.905339][T19082] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1562.905368][T19082] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1562.905408][T19082] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1562.912094][T19082] usb 5-1: config 0 descriptor?? [ 1563.107943][T19104] usb 4-1: USB disconnect, device number 99 [ 1563.314255][T21192] udevd[21192]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1563.576287][T21659] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4058'. [ 1563.632212][T21659] ovs-dp0: left promiscuous mode [ 1564.020036][T19081] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1564.170050][T19081] usb 6-1: Using ep0 maxpacket: 32 [ 1564.173868][T19081] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1564.176490][T19081] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 1564.176531][T19081] usb 6-1: config 0 has no interface number 0 [ 1564.176587][T19081] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1564.176618][T19081] usb 6-1: config 0 interface 85 has no altsetting 0 [ 1564.261881][T21669] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1564.279433][T19081] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.279464][T19081] usb 6-1: Product: syz [ 1564.279476][T19081] usb 6-1: Manufacturer: syz [ 1564.279487][T19081] usb 6-1: SerialNumber: syz [ 1564.330689][T19081] usb 6-1: config 0 descriptor?? [ 1564.799931][T19082] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1564.858913][T19081] appletouch 6-1:0.85: Failed to request geyser raw mode [ 1564.879390][T19081] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 1564.919255][T19081] usb 6-1: USB disconnect, device number 46 [ 1564.959919][T19082] usb 1-1: Using ep0 maxpacket: 32 [ 1564.982244][T19082] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1564.982313][T19082] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1565.012266][T19082] usb 1-1: config 1 has an invalid descriptor of length 213, skipping remainder of the config [ 1565.012300][T19082] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1565.050264][T19082] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.050296][T19082] usb 1-1: Product: syz [ 1565.050314][T19082] usb 1-1: Manufacturer: syz [ 1565.050333][T19082] usb 1-1: SerialNumber: syz [ 1565.101184][ T5682] usb 5-1: USB disconnect, device number 18 [ 1565.458692][T21675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4062'. [ 1565.569139][T21675] bond1: entered promiscuous mode [ 1565.576990][T21675] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1565.892810][T21677] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1565.911289][T21677] bond1: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 1565.911985][T21677] bond1: (slave ip6gre2): Error -95 calling set_mac_address [ 1565.953307][T21669] netlink: 'syz.0.4060': attribute type 3 has an invalid length. [ 1565.953334][T21669] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4060'. [ 1566.120383][T19079] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1566.290234][T19079] usb 5-1: Using ep0 maxpacket: 32 [ 1566.291054][T19079] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1566.294233][T19079] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1566.294261][T19079] usb 5-1: config 0 has no interface number 0 [ 1566.392874][T19079] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.392906][T19079] usb 5-1: Product: syz [ 1566.392923][T19079] usb 5-1: Manufacturer: syz [ 1566.392939][T19079] usb 5-1: SerialNumber: syz [ 1566.445590][T19079] usb 5-1: config 0 descriptor?? [ 1567.101043][T21690] tipc: Enabled bearer , priority 0 [ 1567.133646][T21689] tipc: Resetting bearer [ 1567.506945][T21689] tipc: Disabling bearer [ 1567.648086][T19079] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1567.648140][T19079] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1568.366078][T19079] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 1568.366459][T19079] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 1568.412426][T19079] usb 5-1: USB disconnect, device number 19 [ 1568.931809][T19079] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1569.089500][T19079] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 1569.097655][T19079] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1569.176583][T19079] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1569.176670][T19079] usb 4-1: Product: syz [ 1569.176688][T19079] usb 4-1: Manufacturer: syz [ 1569.220680][T19082] usb 1-1: USB disconnect, device number 18 [ 1569.296265][T19079] usb 4-1: selecting invalid altsetting 1 [ 1569.296420][T19079] dvb_ttusb_budget: ttusb_init_controller: error [ 1569.296436][T19079] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1569.381919][T15964] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1569.412457][T19079] DVB: Unable to find symbol cx22700_attach() [ 1569.475437][T19079] DVB: Unable to find symbol tda10046_attach() [ 1569.475455][T19079] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1569.518934][T21700] futex_wake_op: syz.4.4069 tries to shift op by -1; fix this program [ 1569.531023][T15964] usb 6-1: Using ep0 maxpacket: 8 [ 1569.593309][T15964] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1569.593365][T15964] usb 6-1: New USB device found, idVendor=046d, idProduct=0850, bcdDevice= 0.40 [ 1569.644453][T15964] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1569.644487][T15964] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1569.721892][T15964] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.721930][T15964] usb 6-1: Product: syz [ 1569.721955][T15964] usb 6-1: Manufacturer: syz [ 1569.721967][T15964] usb 6-1: SerialNumber: syz [ 1569.845226][ T31] kauditd_printk_skb: 123 callbacks suppressed [ 1569.845247][ T31] audit: type=1326 audit(1790928285.060:6264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21699 comm="syz.4.4069" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047c79e159 code=0x7ffc0000 [ 1569.845772][ T31] audit: type=1326 audit(1790928285.060:6265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21699 comm="syz.4.4069" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047c79e159 code=0x7ffc0000 [ 1569.847126][ T31] audit: type=1326 audit(1790928285.060:6266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21699 comm="syz.4.4069" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f047c79e159 code=0x7ffc0000 [ 1569.847368][ T31] audit: type=1326 audit(1790928285.060:6267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21699 comm="syz.4.4069" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047c79e159 code=0x7ffc0000 [ 1569.847600][ T31] audit: type=1326 audit(1790928285.060:6268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21699 comm="syz.4.4069" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047c79e159 code=0x7ffc0000 [ 1569.857310][ T31] audit: type=1326 audit(1790928285.060:6269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21699 comm="syz.4.4069" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f047c79e159 code=0x7ffc0000 [ 1569.916874][ T31] audit: type=1326 audit(1790928285.130:6270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21699 comm="syz.4.4069" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047c79e159 code=0x7ffc0000 [ 1569.916942][ T31] audit: type=1326 audit(1790928285.130:6271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21699 comm="syz.4.4069" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047c79e159 code=0x7ffc0000 [ 1570.205438][T21695] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 1571.561429][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1571.887864][T15964] gspca_main: STV06xx-2.14.0 probing 046d:0850 [ 1571.915772][T15964] usb 6-1: 0:1 : does not exist [ 1571.915868][T15964] usb 6-1: unit 8 not found! [ 1572.174069][T15964] usb 6-1: USB disconnect, device number 47 [ 1572.263519][ T31] audit: type=1326 audit(1790928287.480:6272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21721 comm="syz.3.4074" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff360d9e159 code=0x7ffc0000 [ 1572.263579][ T31] audit: type=1326 audit(1790928287.480:6273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21721 comm="syz.3.4074" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff360d9e159 code=0x7ffc0000 [ 1572.436251][T21628] udevd[21628]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1572.437244][T21726] netlink: 144 bytes leftover after parsing attributes in process `syz.5.4075'. [ 1572.523156][T21726] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1575.530248][T19079] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1575.689745][T19079] usb 5-1: Using ep0 maxpacket: 16 [ 1575.699483][T19079] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1575.737856][T19079] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 1575.770797][T19079] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.770829][T19079] usb 5-1: Product: syz [ 1575.770841][T19079] usb 5-1: Manufacturer: syz [ 1575.770852][T19079] usb 5-1: SerialNumber: syz [ 1575.829123][T21740] ovs-dp0: left promiscuous mode [ 1575.843900][T19079] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1575.843929][T19079] r8152-cfgselector 5-1: config 0 descriptor?? [ 1576.285899][T21741] ovs-dp0: entered promiscuous mode [ 1576.787047][T21759] tipc: Started in network mode [ 1576.787083][T21759] tipc: Node identity 7205d72cb642, cluster identity 4711 [ 1576.787400][T21759] tipc: Enabled bearer , priority 0 [ 1576.851694][T21757] tipc: Resetting bearer [ 1577.385876][T21757] tipc: Disabling bearer [ 1578.112403][T21776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1578.117262][T21776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1578.414361][T19094] r8152-cfgselector 5-1: USB disconnect, device number 20 [ 1579.085967][T21786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4089'. [ 1579.100840][T21786] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4089'. [ 1579.109269][T19082] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1579.206298][T21790] sctp: [Deprecated]: syz.4.4089 (pid 21790) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1579.206298][T21790] Use struct sctp_sack_info instead [ 1579.311263][T19082] usb 1-1: Using ep0 maxpacket: 8 [ 1579.318030][T19082] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1579.318092][T19082] usb 1-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 1579.343947][T19082] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1579.383127][T19082] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1579.383160][T19082] usb 1-1: Product: syz [ 1579.383178][T19082] usb 1-1: Manufacturer: syz [ 1579.383196][T19082] usb 1-1: SerialNumber: syz [ 1580.028579][T19082] usb 1-1: USB disconnect, device number 19 [ 1580.114413][T21793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1580.115535][T21793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1580.382450][T21788] ovs-dp0: left promiscuous mode [ 1580.503676][T21192] udevd[21192]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1581.175703][T21793] ovs-dp0: entered promiscuous mode [ 1581.303196][T21813] veth0: entered promiscuous mode [ 1581.387327][T21813] veth0: left promiscuous mode [ 1582.540636][T19098] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1582.695652][T19098] usb 2-1: Using ep0 maxpacket: 32 [ 1582.724548][T19098] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1582.767648][T19098] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.767685][T19098] usb 2-1: Product: ᦺㆉṸ燘켒孚ϊ﹪豖苂榈äšã¨¢äƒ¡çš‘癑ï±â“Œé˜‰ç‹ºçŒºà§˜ë¦§ì³‰æ„뫔倯䟉燞餥ㄕӀጆ솠ᮘﵹ [ 1582.767716][T19098] usb 2-1: Manufacturer: æ•â°ŽÓ´á›·è²–⅑㿧ꆘ⟛鉷밡îµëŸ°âš£ê—‹é„ﺭï¾ë‰¤ä¦žãª‘㚲苗跇접备嵛桤炴틊臣臈週衟࿳ᎋ⌶愶瓄㉗忙䈼æ¥å„ŒåŽ‚✗紦ᇩ슗눕㩵ᄰ樆漡詠㣔í¶âš°ã²¢àµç ²æŸ³Ê·ëŽ…塺ᑱ陸⾶ꊟ톅댡ⴺà¯æ„€ç¾µî³©á¼ã••ë核NJ䥪谹ኙ㧋䌆鰌콚⥸溫⓿傹᯴ꬄ野䚀ᘀꙗãƒâ°¹á§â¯«á˜´é© ê¦²êžŠå¾å»‹è„í€ã‘– [ 1582.767757][T19098] usb 2-1: SerialNumber: Ó¿ [ 1582.881098][T21624] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1582.901797][T19081] usb 4-1: USB disconnect, device number 100 [ 1582.950035][ T5682] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1583.049803][T21624] usb 5-1: Using ep0 maxpacket: 16 [ 1583.059038][T21624] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1583.072800][T21624] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1583.072866][T21624] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1583.072900][T21624] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1583.072933][T21624] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1583.113505][ T5682] usb 6-1: Using ep0 maxpacket: 32 [ 1583.114561][ T5682] usb 6-1: New USB device found, idVendor=1ae7, idProduct=9003, bcdDevice=44.08 [ 1583.115999][ T5682] usb 6-1: config 0 has an invalid interface number: 74 but max is 0 [ 1583.116035][ T5682] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1583.116057][ T5682] usb 6-1: config 0 has no interface number 0 [ 1583.116101][ T5682] usb 6-1: config 0 interface 74 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1583.116126][ T5682] usb 6-1: config 0 interface 74 has no altsetting 0 [ 1583.132372][T19098] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1583.168955][ T5682] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.168987][ T5682] usb 6-1: Product: syz [ 1583.169004][ T5682] usb 6-1: Manufacturer: syz [ 1583.169020][ T5682] usb 6-1: SerialNumber: syz [ 1583.234424][T21624] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.234487][T21624] usb 5-1: Product: syz [ 1583.234583][T21624] usb 5-1: Manufacturer: syz [ 1583.234619][ T5682] usb 6-1: config 0 descriptor?? [ 1583.234621][T21624] usb 5-1: SerialNumber: syz [ 1583.285263][ T5682] em28xx 6-1:0.74: New device syz syz @ 480 Mbps (1ae7:9003, interface 74, class 74) [ 1583.285302][ T5682] em28xx 6-1:0.74: Video interface 74 found: [ 1583.286184][T21624] usb 5-1: config 0 descriptor?? [ 1583.338944][T21624] appledisplay 5-1:0.0: Submitting URB failed [ 1583.339079][T21624] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -5 [ 1583.340798][T19098] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1583.340822][T19098] usb 2-1: 2:1 : invalid channels 0 [ 1583.390127][T19081] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1583.556547][T19081] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1583.557936][T19081] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1583.557963][T19081] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1583.600357][ T5682] em28xx 6-1:0.74: unknown em28xx chip ID (0) [ 1583.656196][T19081] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.656230][T19081] usb 4-1: Product: syz [ 1583.656248][T19081] usb 4-1: Manufacturer: syz [ 1583.656267][T19081] usb 4-1: SerialNumber: syz [ 1583.690400][T19098] usb 2-1: USB disconnect, device number 30 [ 1583.790743][ T5682] em28xx 6-1:0.74: reading from i2c device at 0xa0 failed (error=-5) [ 1583.790778][ T5682] em28xx 6-1:0.74: board has no eeprom [ 1583.853931][ T5682] em28xx 6-1:0.74: writing to i2c device at 0xb8 failed (error=-5) [ 1583.853997][ T5682] em28xx 6-1:0.74: couldn't read from i2c device 0xb8: error -5 [ 1583.854475][ T5682] em28xx 6-1:0.74: writing to i2c device at 0xba failed (error=-5) [ 1583.854502][ T5682] em28xx 6-1:0.74: couldn't read from i2c device 0xba: error -5 [ 1583.855234][ T5682] em28xx 6-1:0.74: writing to i2c device at 0x90 failed (error=-5) [ 1583.855261][ T5682] em28xx 6-1:0.74: couldn't read from i2c device 0x90: error -5 [ 1583.855888][ T5682] em28xx 6-1:0.74: writing to i2c device at 0x42 failed (error=-5) [ 1583.855920][ T5682] em28xx 6-1:0.74: couldn't read from i2c device 0x42: error -5 [ 1583.856595][ T5682] em28xx 6-1:0.74: writing to i2c device at 0x60 failed (error=-5) [ 1583.856649][ T5682] em28xx 6-1:0.74: couldn't read from i2c device 0x60: error -5 [ 1583.856671][ T5682] em28xx 6-1:0.74: No sensor detected [ 1583.957781][ T5682] em28xx 6-1:0.74: Identified as SpeedLink Vicious And Devine Laplace webcam (card=91) [ 1583.957813][ T5682] em28xx 6-1:0.74: Currently, V4L2 is not supported on this model [ 1583.958209][T19079] em28xx 6-1:0.74: Registering snapshot button... [ 1584.057521][T19081] usb 4-1: 0:1 : does not exist [ 1584.057603][T19081] usb 4-1: unit 9 not found! [ 1584.057620][T19081] usb 4-1: unit 0 not found! [ 1584.096890][ T5682] usb 6-1: USB disconnect, device number 48 [ 1584.121284][T21628] udevd[21628]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1584.129116][ T5682] em28xx 6-1:0.74: Disconnecting em28xx [ 1584.185222][T21845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1584.185798][T21845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1584.240069][T19079] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.74/input/input177 [ 1584.363247][T19081] usb 4-1: USB disconnect, device number 101 [ 1584.431908][T19079] em28xx 6-1:0.74: Remote control support is not available for this card. [ 1584.431990][ T5682] em28xx 6-1:0.74: Closing input extension [ 1584.432690][ T5682] em28xx 6-1:0.74: Deregistering snapshot button [ 1584.627113][T21628] udevd[21628]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1585.347096][ T5682] em28xx: Freeing device [ 1585.479834][T19081] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1585.620562][T19081] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1585.621989][T19081] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 1585.622051][T19081] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1585.622074][T19081] usb 2-1: config 0 has no interface number 0 [ 1585.622117][T19081] usb 2-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1585.624925][T19081] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.624953][T19081] usb 2-1: Product: syz [ 1585.624972][T19081] usb 2-1: Manufacturer: syz [ 1585.624989][T19081] usb 2-1: SerialNumber: syz [ 1585.709234][T19081] usb 2-1: config 0 descriptor?? [ 1585.723001][T19081] yurex 2-1:0.50: Could not find endpoints [ 1585.810639][T19090] usb 5-1: USB disconnect, device number 21 [ 1585.937716][T19081] usb 2-1: USB disconnect, device number 31 [ 1586.002901][T21862] loop6: detected capacity change from 0 to 2640 [ 1586.022335][T20839] Buffer I/O error on dev loop6, logical block 0, async page read [ 1586.022887][T20839] Buffer I/O error on dev loop6, logical block 0, async page read [ 1586.023385][T20839] Buffer I/O error on dev loop6, logical block 0, async page read [ 1586.023885][T20839] Buffer I/O error on dev loop6, logical block 0, async page read [ 1586.024466][T20839] Buffer I/O error on dev loop6, logical block 0, async page read [ 1587.153728][T19081] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1587.316950][T19081] usb 2-1: Using ep0 maxpacket: 16 [ 1587.318717][T19081] usb 2-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 1587.343652][T19081] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1587.343694][T19081] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1587.343724][T19081] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1587.343762][T19081] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.418165][T19081] usb 2-1: config 0 descriptor?? [ 1587.760600][T19098] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1587.916412][T19098] usb 5-1: Using ep0 maxpacket: 16 [ 1587.919136][T19098] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1587.921497][T19098] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 1587.976521][T19098] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.976584][T19098] usb 5-1: Product: syz [ 1587.976649][T19098] usb 5-1: Manufacturer: syz [ 1587.976684][T19098] usb 5-1: SerialNumber: syz [ 1588.007113][T19081] logitech-djreceiver 0003:046D:C53A.005F: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.1-1/input0 [ 1588.117256][T19098] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1588.117326][T19098] r8152-cfgselector 5-1: config 0 descriptor?? [ 1588.269740][T19079] usb 4-1: new low-speed USB device number 102 using dummy_hcd [ 1588.438922][T19079] usb 4-1: No LPM exit latency info found, disabling LPM. [ 1588.439030][T19079] usb 4-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice= 0.40 [ 1588.473215][T19079] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 16, setting to 0 [ 1588.473288][T19079] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 0 [ 1589.051705][T21897] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1589.082648][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 1589.082670][ T31] audit: type=1800 audit(1790928304.300:6278): pid=21897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4115" name="SYSV00000000" dev="tmpfs" ino=15 res=0 errno=0 [ 1590.189933][T19081] usb 2-1: USB disconnect, device number 32 [ 1590.749039][T19090] r8152-cfgselector 5-1: USB disconnect, device number 22 [ 1591.352696][T19079] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.401852][T19079] usb 4-1: can't set config #1, error -71 [ 1591.406122][T19079] usb 4-1: USB disconnect, device number 102 [ 1591.638005][T21920] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4128'. [ 1591.774349][T19079] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1591.989981][T19079] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1591.993533][T19079] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 1591.993568][T19079] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 124, setting to 64 [ 1591.993613][T19079] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1592.010799][T19079] usb 4-1: config 0 descriptor?? [ 1592.622361][T21931] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1593.109749][T19081] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1593.162322][T19079] ath6kl: Failed to submit usb control message: -110 [ 1593.162378][T19079] ath6kl: unable to send the bmi data to the device: -110 [ 1593.162395][T19079] ath6kl: Unable to send get target info: -110 [ 1593.164872][T19079] ath6kl: Failed to init ath6kl core: -110 [ 1593.187748][T19079] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1593.329709][T19081] usb 6-1: Using ep0 maxpacket: 32 [ 1593.372217][T19081] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1593.372278][T19081] usb 6-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1593.374496][T19081] usb 6-1: config 1 has an invalid descriptor of length 213, skipping remainder of the config [ 1593.374527][T19081] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1593.457486][T19081] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.457519][T19081] usb 6-1: Product: syz [ 1593.457537][T19081] usb 6-1: Manufacturer: syz [ 1593.457553][T19081] usb 6-1: SerialNumber: syz [ 1593.750956][T21934] netlink: 'syz.5.4129': attribute type 3 has an invalid length. [ 1593.750986][T21934] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4129'. [ 1594.815422][T19082] usb 4-1: USB disconnect, device number 103 [ 1596.420109][T21949] tipc: Enabled bearer , priority 0 [ 1596.482467][T21949] syzkaller0: MTU too low for tipc bearer [ 1596.482527][T21949] tipc: Disabling bearer [ 1596.759766][T19082] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 1596.910736][T19082] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1596.912632][T19082] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1596.912660][T19082] usb 5-1: config 0 has no interface number 0 [ 1596.912734][T19082] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1596.912796][T19082] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1596.912876][T19082] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.009929][T19082] usb 5-1: config 0 descriptor?? [ 1597.010942][T21951] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1597.087526][T19082] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1597.231561][T21949] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 1597.251412][T19082] usb 5-1: USB disconnect, device number 23 [ 1597.297338][T18921] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 1597.333051][T21957] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 1597.450405][T19079] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1597.630326][T19079] usb 4-1: Using ep0 maxpacket: 8 [ 1597.633323][T19079] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1597.637545][T19079] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1597.637574][T19079] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1597.637660][T19079] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1597.728252][T19079] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.731001][T19079] usb 4-1: Product: syz [ 1597.731052][T19079] usb 4-1: Manufacturer: syz [ 1597.731071][T19079] usb 4-1: SerialNumber: syz [ 1597.904363][T19081] usb 6-1: USB disconnect, device number 49 [ 1598.448733][T19090] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1598.611824][T19090] usb 1-1: Using ep0 maxpacket: 16 [ 1598.615627][T19090] usb 1-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 1598.644916][T19090] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1598.644986][T19090] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1598.645084][T19090] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.715667][T19090] usb 1-1: config 0 descriptor?? [ 1599.020122][T19082] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1599.180940][T19079] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1599.199789][T19082] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 1599.203124][T19082] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1599.203154][T19082] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1599.206331][T19082] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.206360][T19082] usb 2-1: Product: syz [ 1599.206377][T19082] usb 2-1: Manufacturer: syz [ 1599.206394][T19082] usb 2-1: SerialNumber: syz [ 1599.424543][T19079] usb 4-1: USB disconnect, device number 104 [ 1599.591566][T19082] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 33 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 1599.592205][T19090] usbhid 1-1:0.0: can't add hid device: -71 [ 1599.592359][T19090] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1599.639856][T19090] usb 1-1: USB disconnect, device number 20 [ 1599.677400][T21975] ovs-dp0: entered promiscuous mode [ 1599.864801][T20450] udevd[20450]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1600.265680][T19079] usb 2-1: USB disconnect, device number 33 [ 1600.291659][T19082] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1600.325195][T19079] usblp0: removed [ 1600.479800][T19082] usb 4-1: Using ep0 maxpacket: 16 [ 1600.481039][T19082] usb 4-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 1600.483231][T19082] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1600.483265][T19082] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1600.483328][T19082] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.566512][T19082] usb 4-1: config 0 descriptor?? [ 1600.891660][T21984] netlink: 'syz.0.4144': attribute type 10 has an invalid length. [ 1601.070571][T21984] team0: Port device dummy0 added [ 1601.078643][T21989] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4146'. [ 1601.124636][T21981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1601.177146][T21981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1601.257288][T19082] hid_parser_main: 23 callbacks suppressed [ 1601.257317][T19082] holtek_mouse 0003:04D9:A067.0060: unknown main item tag 0x6 [ 1601.257351][T19082] holtek_mouse 0003:04D9:A067.0060: unknown main item tag 0x0 [ 1601.257379][T19082] holtek_mouse 0003:04D9:A067.0060: item fetching failed at offset 8/40 [ 1601.297297][T19082] holtek_mouse 0003:04D9:A067.0060: hid parse failed: -22 [ 1601.297377][T19082] holtek_mouse 0003:04D9:A067.0060: probe with driver holtek_mouse failed with error -22 [ 1601.514085][T19082] usb 4-1: USB disconnect, device number 105 [ 1601.990430][T21990] ovs-dp0: left promiscuous mode [ 1602.238243][T21995] ovs-dp0: entered promiscuous mode [ 1602.610859][T22003] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1602.624994][T21994] ovs-dp0: entered promiscuous mode [ 1602.774935][T22007] sctp: [Deprecated]: syz.3.4150 (pid 22007) Use of int in max_burst socket option. [ 1602.774935][T22007] Use struct sctp_assoc_value instead [ 1602.960437][T19077] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1603.032796][T22011] sctp: [Deprecated]: syz.3.4150 (pid 22011) Use of int in max_burst socket option. [ 1603.032796][T22011] Use struct sctp_assoc_value instead [ 1603.109956][T19077] usb 1-1: Using ep0 maxpacket: 32 [ 1603.123964][T19077] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1603.124028][T19077] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1603.149906][T19077] usb 1-1: config 1 has an invalid descriptor of length 213, skipping remainder of the config [ 1603.149936][T19077] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1603.198885][T19077] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.198917][T19077] usb 1-1: Product: syz [ 1603.198934][T19077] usb 1-1: Manufacturer: syz [ 1603.198953][T19077] usb 1-1: SerialNumber: syz [ 1603.487559][T22006] netlink: 'syz.0.4149': attribute type 3 has an invalid length. [ 1603.487618][T22006] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4149'. [ 1603.787583][T22016] loop0: detected capacity change from 0 to 6 [ 1603.861414][T22016] Dev loop0: unable to read RDB block 6 [ 1603.861488][T22016] loop0: unable to read partition table [ 1603.861779][T22016] loop0: partition table beyond EOD, truncated [ 1603.861801][T22016] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 1605.339915][T19090] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1605.489874][T19090] usb 5-1: Invalid ep0 maxpacket: 9 [ 1605.619932][T19090] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1605.796768][T19090] usb 5-1: Invalid ep0 maxpacket: 9 [ 1605.797802][T19090] usb usb5-port1: attempt power cycle [ 1605.825781][T19104] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1605.841545][T22033] netlink: 'syz.1.4156': attribute type 5 has an invalid length. [ 1605.879098][T18920] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1605.927559][T18920] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1605.927670][T18920] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1605.927742][T18920] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1606.052087][T19104] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1606.078138][T19104] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.078206][T19104] usb 4-1: Product: syz [ 1606.078241][T19104] usb 4-1: Manufacturer: syz [ 1606.078289][T19104] usb 4-1: SerialNumber: syz [ 1606.151408][T19104] usb 4-1: config 0 descriptor?? [ 1606.202304][T19090] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1606.233709][T19090] usb 5-1: Invalid ep0 maxpacket: 9 [ 1606.385767][T19090] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1606.433975][T22031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1606.469759][T19090] usb 5-1: Invalid ep0 maxpacket: 9 [ 1606.470351][T19090] usb usb5-port1: unable to enumerate USB device [ 1606.472249][T22031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1607.395292][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.395447][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.775962][T19104] usb 4-1: USB disconnect, device number 106 [ 1608.338162][T19077] usb 1-1: USB disconnect, device number 21 [ 1609.250523][T22061] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1609.321330][T19104] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1609.485460][T22065] loop5: detected capacity change from 0 to 7 [ 1609.497968][T22065] Dev loop5: unable to read RDB block 7 [ 1609.498000][T22065] loop5: unable to read partition table [ 1609.498148][T22065] loop5: partition table beyond EOD, truncated [ 1609.498163][T22065] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1609.540865][T19104] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1609.576647][T19104] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1609.596132][T19104] usb 4-1: config 0 descriptor?? [ 1609.683450][T19104] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1609.820622][T19090] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1609.991351][T19090] usb 5-1: Using ep0 maxpacket: 32 [ 1610.033062][T19090] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1610.033151][T19090] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1610.034737][T19090] usb 5-1: config 1 has an invalid descriptor of length 213, skipping remainder of the config [ 1610.034792][T19090] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1610.067315][T19104] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 1610.113409][T19090] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.113447][T19090] usb 5-1: Product: syz [ 1610.113473][T19090] usb 5-1: Manufacturer: syz [ 1610.113510][T19090] usb 5-1: SerialNumber: syz [ 1610.439749][T19081] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1610.449753][T19104] gspca_cpia1: usb_control_msg 02, error -71 [ 1610.449820][T19104] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 1610.518653][T19104] usb 4-1: USB disconnect, device number 107 [ 1610.633939][T19081] usb 6-1: Using ep0 maxpacket: 16 [ 1610.634684][T19081] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1610.635906][T19081] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1610.635956][T19081] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1610.635982][T19081] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1610.750904][T19081] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.750936][T19081] usb 6-1: Product: syz [ 1610.750954][T19081] usb 6-1: Manufacturer: syz [ 1610.750971][T19081] usb 6-1: SerialNumber: syz [ 1610.754828][T19081] usb 6-1: config 0 descriptor?? [ 1610.778040][T19081] mcba_usb 6-1:0.0: Can't find endpoints [ 1610.942704][T22061] netlink: 'syz.4.4161': attribute type 3 has an invalid length. [ 1610.942731][T22061] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4161'. [ 1611.015141][T19104] usb 6-1: USB disconnect, device number 50 [ 1611.108855][T22072] ovs-dp0: left promiscuous mode [ 1611.477577][T22074] ovs-dp0: entered promiscuous mode [ 1612.020279][T19081] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1612.190248][T19081] usb 4-1: Using ep0 maxpacket: 16 [ 1612.213834][T19081] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1612.231776][T19081] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1612.231808][T19081] usb 4-1: config 0 has no interface number 0 [ 1612.231855][T19081] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1612.231885][T19081] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1612.231935][T19081] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1612.327005][T19081] usb 4-1: config 0 descriptor?? [ 1613.051920][T19081] uclogic 0003:28BD:0071.0061: pen parameters not found [ 1613.051964][T19081] uclogic 0003:28BD:0071.0061: interface is invalid, ignoring [ 1613.334154][T22078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1613.335866][T22078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1614.820220][T22094] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1614.971936][T22097] netlink: 'syz.0.4171': attribute type 1 has an invalid length. [ 1615.029872][T19081] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1615.180209][T19081] usb 2-1: Using ep0 maxpacket: 32 [ 1615.200515][T19081] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1615.200566][T19081] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1615.333017][T19081] usb 2-1: config 1 has an invalid descriptor of length 213, skipping remainder of the config [ 1615.333049][T19081] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1615.376731][T19104] usb 4-1: USB disconnect, device number 108 [ 1615.406150][T19081] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1615.406181][T19081] usb 2-1: Product: syz [ 1615.406199][T19081] usb 2-1: Manufacturer: syz [ 1615.406216][T19081] usb 2-1: SerialNumber: syz [ 1615.408814][T22101] netlink: 'syz.0.4171': attribute type 10 has an invalid length. [ 1615.408843][T22101] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4171'. [ 1615.683220][T22097] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1615.702401][T19077] usb 5-1: USB disconnect, device number 28 [ 1615.893100][T22094] netlink: 'syz.1.4170': attribute type 3 has an invalid length. [ 1615.893149][T22094] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4170'. [ 1616.038320][T22105] openvswitch: netlink: Actions may not be safe on all matching packets [ 1616.079726][T18919] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1616.099349][T22099] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1616.264812][T18895] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1616.539457][T22100] team0: Port device dummy0 removed [ 1616.696766][ T31] audit: type=1326 audit(1790928331.910:6279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22106 comm="syz.4.4173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047c79e159 code=0x7ffc0000 [ 1616.697493][ T31] audit: type=1326 audit(1790928331.910:6280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22106 comm="syz.4.4173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047c79e159 code=0x7ffc0000 [ 1616.721049][T22100] bond1: (slave dummy0): Enslaving as a backup interface with a down link [ 1616.806107][T22101] dummy0: entered promiscuous mode [ 1616.810405][ T31] audit: type=1326 audit(1790928332.030:6281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22106 comm="syz.4.4173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f047c79e159 code=0x7ffc0000 [ 1616.810755][ T31] audit: type=1326 audit(1790928332.030:6282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22106 comm="syz.4.4173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047c79e159 code=0x7ffc0000 [ 1616.811016][ T31] audit: type=1326 audit(1790928332.030:6283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22106 comm="syz.4.4173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047c79e159 code=0x7ffc0000 [ 1616.865599][ T31] audit: type=1326 audit(1790928332.070:6284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22106 comm="syz.4.4173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f047c79e159 code=0x7ffc0000 [ 1616.865755][ T31] audit: type=1326 audit(1790928332.070:6285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22106 comm="syz.4.4173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047c79e159 code=0x7ffc0000 [ 1616.865887][ T31] audit: type=1326 audit(1790928332.070:6286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22106 comm="syz.4.4173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047c79e159 code=0x7ffc0000 [ 1616.866008][ T31] audit: type=1326 audit(1790928332.070:6287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22106 comm="syz.4.4173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047c79e159 code=0x7ffc0000 [ 1616.866124][ T31] audit: type=1326 audit(1790928332.070:6288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22106 comm="syz.4.4173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047c79e159 code=0x7ffc0000 [ 1617.042526][T22101] bond1: (slave dummy0): Releasing backup interface [ 1617.251121][T19104] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1617.461596][T19104] usb 5-1: device descriptor read/all, error -61 [ 1617.619961][T19104] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1617.824019][T19104] usb 5-1: device descriptor read/64, error -71 [ 1617.945720][T19104] usb usb5-port1: attempt power cycle [ 1618.300418][T19104] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1618.360438][T19104] usb 5-1: device descriptor read/8, error -71 [ 1618.474579][T19098] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1618.610580][T19104] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1618.644137][T19104] usb 5-1: device descriptor read/8, error -71 [ 1618.689879][T19098] usb 4-1: Using ep0 maxpacket: 16 [ 1618.761290][T19098] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1618.761791][T19104] usb usb5-port1: unable to enumerate USB device [ 1618.837861][T19098] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 1618.995893][T19098] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.995969][T19098] usb 4-1: Product: syz [ 1618.996003][T19098] usb 4-1: Manufacturer: syz [ 1618.996036][T19098] usb 4-1: SerialNumber: syz [ 1619.117515][T19098] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1619.117584][T19098] r8152-cfgselector 4-1: config 0 descriptor?? [ 1621.611257][T19104] usb 2-1: USB disconnect, device number 34 [ 1621.841628][T22111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1621.843401][ T31] kauditd_printk_skb: 61 callbacks suppressed [ 1621.843435][ T31] audit: type=1800 audit(1790928337.060:6350): pid=22111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4175" name="SYSV00000000" dev="tmpfs" ino=7 res=0 errno=0 [ 1622.137565][T22133] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4179'. [ 1622.494738][T19081] r8152-cfgselector 4-1: USB disconnect, device number 109 [ 1624.210379][T19077] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1624.339700][T19077] usb 1-1: device descriptor read/64, error -71 [ 1624.593022][T19077] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1624.721455][T19077] usb 1-1: device descriptor read/64, error -71 [ 1624.788804][T22166] random: crng reseeded on system resumption [ 1624.830584][T19077] usb usb1-port1: attempt power cycle [ 1625.180703][T19077] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1625.212721][T19077] usb 1-1: device descriptor read/8, error -71 [ 1625.475233][T19077] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1625.515787][T19077] usb 1-1: device descriptor read/8, error -71 [ 1625.620432][T19077] usb usb1-port1: unable to enumerate USB device [ 1626.122545][T22157] ip_tables: iptables: counters copy to user failed while replacing table [ 1627.250997][T22176] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1627.710341][T19077] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1627.865432][T19077] usb 4-1: Using ep0 maxpacket: 32 [ 1627.870149][T19077] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1627.870199][T19077] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1627.913506][T19077] usb 4-1: config 1 has an invalid descriptor of length 213, skipping remainder of the config [ 1627.913537][T19077] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1627.946787][T19077] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1627.946818][T19077] usb 4-1: Product: syz [ 1627.946834][T19077] usb 4-1: Manufacturer: syz [ 1627.946852][T19077] usb 4-1: SerialNumber: syz [ 1628.329705][T22176] netlink: 'syz.3.4190': attribute type 3 has an invalid length. [ 1628.329732][T22176] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4190'. [ 1631.592089][T18895] IPVS: starting estimator thread 0... [ 1631.680156][T22206] IPVS: using max 29 ests per chain, 69600 per kthread [ 1632.514910][T19077] usb 4-1: USB disconnect, device number 110 [ 1632.655158][T19082] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1632.820365][T19082] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 1632.821709][T19082] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1632.821852][T19082] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1632.889760][T19082] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1632.889781][T19082] usb 1-1: Product: syz [ 1632.889793][T19082] usb 1-1: Manufacturer: syz [ 1632.889804][T19082] usb 1-1: SerialNumber: syz [ 1632.948444][T21624] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1633.117195][T21624] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1633.177023][T19082] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 1633.195852][T21624] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1633.195911][T21624] usb 5-1: Product: syz [ 1633.195940][T21624] usb 5-1: SerialNumber: syz [ 1633.255617][T21624] usb 5-1: config 0 descriptor?? [ 1633.541495][T22230] FAULT_INJECTION: forcing a failure. [ 1633.541495][T22230] name failslab, interval 1, probability 0, space 0, times 0 [ 1633.541537][T22230] CPU: 0 UID: 0 PID: 22230 Comm: syz.5.4203 Tainted: G L syzkaller #0 PREEMPT(full) [ 1633.541568][T22230] Tainted: [L]=SOFTLOCKUP [ 1633.541577][T22230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1633.541592][T22230] Call Trace: [ 1633.541602][T22230] [ 1633.541612][T22230] dump_stack_lvl+0xe8/0x150 [ 1633.541654][T22230] should_fail_ex+0x410/0x560 [ 1633.541692][T22230] should_failslab+0xa8/0x100 [ 1633.541727][T22230] __kvmalloc_node_noprof+0x176/0x820 [ 1633.541760][T22230] ? xt_alloc_table_info+0x40/0xb0 [ 1633.541809][T22230] ? xt_alloc_table_info+0x40/0xb0 [ 1633.541852][T22230] xt_alloc_table_info+0x40/0xb0 [ 1633.541886][T22230] do_arpt_set_ctl+0x7b2/0xb50 [ 1633.541917][T22230] ? trace_contention_end+0x3d/0x140 [ 1633.541958][T22230] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 1633.541982][T22230] ? nf_setsockopt+0x221/0x290 [ 1633.542020][T22230] ? __mutex_unlock_slowpath+0x731/0x900 [ 1633.542080][T22230] nf_setsockopt+0x26f/0x290 [ 1633.542115][T22230] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1633.542146][T22230] smc_setsockopt+0x232/0xb00 [ 1633.542269][T22230] ? __pfx_smc_setsockopt+0x10/0x10 [ 1633.542301][T22230] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1633.542331][T22230] ? __pfx_smc_setsockopt+0x10/0x10 [ 1633.542361][T22230] do_sock_setsockopt+0x17c/0x1b0 [ 1633.542398][T22230] __x64_sys_setsockopt+0x13d/0x1b0 [ 1633.542436][T22230] do_syscall_64+0x166/0x520 [ 1633.542466][T22230] ? trace_irq_disable+0x3b/0x140 [ 1633.542491][T22230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1633.542515][T22230] ? clear_bhb_loop+0x70/0xc0 [ 1633.542543][T22230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1633.542565][T22230] RIP: 0033:0x7efc8059e159 [ 1633.542585][T22230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1633.542605][T22230] RSP: 002b:00007efc81458028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1633.542630][T22230] RAX: ffffffffffffffda RBX: 00007efc80825fa0 RCX: 00007efc8059e159 [ 1633.542646][T22230] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 1633.542660][T22230] RBP: 00007efc81458090 R08: 0000000000000440 R09: 0000000000000000 [ 1633.542674][T22230] R10: 0000200000000980 R11: 0000000000000246 R12: 0000000000000001 [ 1633.542689][T22230] R13: 00007efc80826038 R14: 00007efc80825fa0 R15: 00007efc8094fa48 [ 1633.542721][T22230] [ 1633.883401][T21624] usb 5-1: USB disconnect, device number 33 [ 1634.314227][T19104] usb 1-1: USB disconnect, device number 26 [ 1634.322820][T19104] usblp0: removed [ 1634.372349][T22232] netlink: 'syz.5.4204': attribute type 1 has an invalid length. [ 1634.875868][T22236] ovs-dp0: left promiscuous mode [ 1635.375838][T22234] ovs-dp0: entered promiscuous mode [ 1636.926531][T22268] loop0: detected capacity change from 0 to 6 [ 1637.046222][T22268] Dev loop0: unable to read RDB block 6 [ 1637.046258][T22268] loop0: unable to read partition table [ 1637.046396][T22268] loop0: partition table beyond EOD, truncated [ 1637.046410][T22268] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 1637.309081][T22272] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1637.610228][T19077] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1637.761066][T19077] usb 5-1: Using ep0 maxpacket: 32 [ 1637.794656][T19077] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1637.794713][T19077] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1637.796860][T19077] usb 5-1: config 1 has an invalid descriptor of length 213, skipping remainder of the config [ 1637.796887][T19077] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1637.918466][T19077] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.918499][T19077] usb 5-1: Product: syz [ 1637.918518][T19077] usb 5-1: Manufacturer: syz [ 1637.918534][T19077] usb 5-1: SerialNumber: syz [ 1638.243035][T22272] netlink: 'syz.4.4212': attribute type 3 has an invalid length. [ 1638.243097][T22272] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4212'. [ 1638.366573][T22283] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4217'. [ 1638.475647][T22283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4217'. [ 1638.740391][T21624] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1638.893568][T21624] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 1638.898766][T21624] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1638.898825][T21624] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1638.966728][T21624] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.966785][T21624] usb 2-1: Product: syz [ 1638.966834][T21624] usb 2-1: Manufacturer: syz [ 1638.966887][T21624] usb 2-1: SerialNumber: syz [ 1639.305662][T21624] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 35 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 1640.291791][T19079] usb 2-1: USB disconnect, device number 35 [ 1640.329113][T19079] usblp0: removed [ 1640.393921][T19104] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1640.570742][T19104] usb 4-1: Using ep0 maxpacket: 8 [ 1640.571885][T19104] usb 4-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 1640.661054][T19104] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 1640.661122][T19104] usb 4-1: Product: syz [ 1640.661150][T19104] usb 4-1: Manufacturer: syz [ 1640.661196][T19104] usb 4-1: SerialNumber: syz [ 1640.713041][T19104] usb 4-1: config 0 descriptor?? [ 1640.787872][T19104] usbtest 4-1:0.0: FX2 device [ 1640.787934][T19104] usbtest 4-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 1641.306985][T22292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1641.334565][T22292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1642.713233][T19098] usb 4-1: USB disconnect, device number 111 [ 1643.604885][T19077] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1643.707819][T22312] loop0: detected capacity change from 0 to 6 [ 1643.760991][T19077] usb 1-1: Using ep0 maxpacket: 16 [ 1643.761752][T19077] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1643.767718][T19077] usb 1-1: config 0 has an invalid interface number: 107 but max is 0 [ 1643.767746][T19077] usb 1-1: config 0 has no interface number 0 [ 1643.767821][T19077] usb 1-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 55, changing to 9 [ 1643.767853][T19077] usb 1-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 8496, setting to 1024 [ 1643.828391][T19077] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1643.828421][T19077] usb 1-1: Product: syz [ 1643.828438][T19077] usb 1-1: Manufacturer: syz [ 1643.828455][T19077] usb 1-1: SerialNumber: syz [ 1643.853669][T19077] usb 1-1: config 0 descriptor?? [ 1643.874257][T19077] keyspan 1-1:0.107: Keyspan 4 port adapter converter detected [ 1643.874572][T19077] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 81 [ 1643.878184][T19077] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 1 [ 1643.913393][T19077] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1643.928083][T19104] usb 5-1: USB disconnect, device number 34 [ 1643.940029][T19077] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 2 [ 1643.947234][T19077] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1643.972782][T19077] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 4 [ 1643.993487][T19077] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1643.996773][T19077] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 6 [ 1644.028260][T19077] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1644.043326][T22312] Dev loop0: unable to read RDB block 6 [ 1644.043377][T22312] loop0: unable to read partition table [ 1644.043592][T22312] loop0: partition table beyond EOD, truncated [ 1644.043627][T22312] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 1644.386643][T22314] FAULT_INJECTION: forcing a failure. [ 1644.386643][T22314] name failslab, interval 1, probability 0, space 0, times 0 [ 1644.386684][T22314] CPU: 0 UID: 0 PID: 22314 Comm: syz.4.4227 Tainted: G L syzkaller #0 PREEMPT(full) [ 1644.386720][T22314] Tainted: [L]=SOFTLOCKUP [ 1644.386729][T22314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1644.386744][T22314] Call Trace: [ 1644.386754][T22314] [ 1644.386764][T22314] dump_stack_lvl+0xe8/0x150 [ 1644.386804][T22314] should_fail_ex+0x410/0x560 [ 1644.386839][T22314] should_failslab+0xa8/0x100 [ 1644.386872][T22314] __kvmalloc_node_noprof+0x176/0x820 [ 1644.386899][T22314] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1644.386932][T22314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1644.386958][T22314] ? translate_table+0x1a2/0x2010 [ 1644.386992][T22314] ? translate_table+0x1a2/0x2010 [ 1644.387034][T22314] translate_table+0x1a2/0x2010 [ 1644.387105][T22314] ? __pfx_translate_table+0x10/0x10 [ 1644.387162][T22314] ? _copy_from_user+0x94/0xb0 [ 1644.387203][T22314] do_arpt_set_ctl+0x81a/0xb50 [ 1644.387225][T22314] ? trace_contention_end+0x3d/0x140 [ 1644.387266][T22314] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 1644.387289][T22314] ? nf_setsockopt+0x221/0x290 [ 1644.387327][T22314] ? __mutex_unlock_slowpath+0x731/0x900 [ 1644.387387][T22314] nf_setsockopt+0x26f/0x290 [ 1644.387422][T22314] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1644.387453][T22314] smc_setsockopt+0x232/0xb00 [ 1644.387489][T22314] ? __pfx_smc_setsockopt+0x10/0x10 [ 1644.387524][T22314] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1644.387554][T22314] ? __pfx_smc_setsockopt+0x10/0x10 [ 1644.387586][T22314] do_sock_setsockopt+0x17c/0x1b0 [ 1644.387624][T22314] __x64_sys_setsockopt+0x13d/0x1b0 [ 1644.387664][T22314] do_syscall_64+0x166/0x520 [ 1644.387696][T22314] ? trace_irq_disable+0x3b/0x140 [ 1644.387719][T22314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1644.387743][T22314] ? clear_bhb_loop+0x70/0xc0 [ 1644.387772][T22314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1644.387796][T22314] RIP: 0033:0x7f047c79e159 [ 1644.387816][T22314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1644.387837][T22314] RSP: 002b:00007f047d610028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1644.387863][T22314] RAX: ffffffffffffffda RBX: 00007f047ca25fa0 RCX: 00007f047c79e159 [ 1644.387880][T22314] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 1644.387895][T22314] RBP: 00007f047d610090 R08: 0000000000000440 R09: 0000000000000000 [ 1644.387910][T22314] R10: 0000200000000980 R11: 0000000000000246 R12: 0000000000000001 [ 1644.387926][T22314] R13: 00007f047ca26038 R14: 00007f047ca25fa0 R15: 00007f047cb4fa48 [ 1644.387962][T22314] [ 1645.103504][T22325] netlink: 'syz.5.4229': attribute type 1 has an invalid length. [ 1645.316295][T22325] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1645.431753][T22330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1645.450315][T18919] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1645.483946][T22330] bond1: (slave batadv0): Enslaving as an active interface with an up link [ 1645.552129][T22325] bond1: (slave batadv0): Removing an active aggregator [ 1645.580791][T19082] usb 1-1: USB disconnect, device number 27 [ 1645.588282][T22325] bond1: (slave batadv0): Releasing backup interface [ 1645.654412][T19082] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1645.690109][T22325] bridge_slave_0: left allmulticast mode [ 1645.690138][T22325] bridge_slave_0: left promiscuous mode [ 1645.690414][T22325] bridge0: port 1(bridge_slave_0) entered disabled state [ 1645.697738][T19082] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1645.762907][T19082] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1645.862724][T22325] bridge_slave_1: left allmulticast mode [ 1645.862756][T22325] bridge_slave_1: left promiscuous mode [ 1645.863817][T22325] bridge0: port 2(bridge_slave_1) entered disabled state [ 1645.892713][T19082] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1645.917724][T19082] keyspan 1-1:0.107: device disconnected [ 1646.066328][T22325] bond0: (slave bond_slave_0): Releasing backup interface [ 1646.142080][T22325] bond0: (slave bond_slave_1): Releasing backup interface [ 1646.248637][T22325] team0: Port device team_slave_0 removed [ 1646.274745][ T31] audit: type=1326 audit(1790928361.490:6351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22337 comm="syz.0.4234" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2054d9e159 code=0x7ffc0000 [ 1646.275359][ T31] audit: type=1326 audit(1790928361.490:6352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22337 comm="syz.0.4234" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2054d9e159 code=0x7ffc0000 [ 1646.278433][T22325] team0: Port device team_slave_1 removed [ 1646.310238][ T31] audit: type=1326 audit(1790928361.520:6353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22337 comm="syz.0.4234" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2054d9e159 code=0x7ffc0000 [ 1646.310356][ T31] audit: type=1326 audit(1790928361.520:6354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22337 comm="syz.0.4234" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2054d9e159 code=0x7ffc0000 [ 1646.310453][ T31] audit: type=1326 audit(1790928361.530:6355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22337 comm="syz.0.4234" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2054d9e159 code=0x7ffc0000 [ 1646.348228][T22325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1646.348296][T22325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1646.373408][ T31] audit: type=1326 audit(1790928361.560:6356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22337 comm="syz.0.4234" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2054d9e159 code=0x7ffc0000 [ 1646.414494][T19077] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1646.487011][ T31] audit: type=1326 audit(1790928361.700:6357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22337 comm="syz.0.4234" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2054d9e159 code=0x7ffc0000 [ 1646.487066][ T31] audit: type=1326 audit(1790928361.700:6358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22337 comm="syz.0.4234" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2054d9e159 code=0x7ffc0000 [ 1646.488887][T22325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1646.488924][T22325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1646.495584][ T31] audit: type=1326 audit(1790928361.700:6359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22337 comm="syz.0.4234" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2054d9e159 code=0x7ffc0000 [ 1646.495838][ T31] audit: type=1326 audit(1790928361.700:6360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22337 comm="syz.0.4234" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2054d9e159 code=0x7ffc0000 [ 1646.515961][T22325] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1646.768585][T19077] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1646.768644][T19077] usb 2-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 1646.776236][T19077] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 192, changing to 7 [ 1646.817030][T19077] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.817061][T19077] usb 2-1: Product: syz [ 1646.817079][T19077] usb 2-1: Manufacturer: syz [ 1646.817096][T19077] usb 2-1: SerialNumber: syz [ 1646.892271][T22339] netlink: 666 bytes leftover after parsing attributes in process `syz.0.4234'. [ 1647.127476][T19077] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1647.129401][T19077] usb 2-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8203); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1647.129467][T19077] usb 2-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 1647.461878][T19077] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1647.758208][T22178] udevd[22178]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1647.800522][T19082] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1647.818178][T19077] usb 2-1: USB disconnect, device number 36 [ 1647.929780][T19082] usb 1-1: device descriptor read/64, error -71 [ 1648.179940][T19082] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1648.274537][T22360] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1648.364859][T19082] usb 1-1: device descriptor read/64, error -71 [ 1648.471130][T19082] usb usb1-port1: attempt power cycle [ 1648.596543][T22362] netlink: 'syz.5.4238': attribute type 1 has an invalid length. [ 1648.809690][T19082] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1648.811452][T22362] bond2: entered promiscuous mode [ 1648.813741][T22362] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1648.842856][T19082] usb 1-1: device descriptor read/8, error -71 [ 1648.951771][T22362] syzkaller1: entered promiscuous mode [ 1648.951796][T22362] syzkaller1: entered allmulticast mode [ 1649.071305][T19082] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1649.101479][T19082] usb 1-1: device descriptor read/8, error -71 [ 1649.108953][T22368] FAULT_INJECTION: forcing a failure. [ 1649.108953][T22368] name failslab, interval 1, probability 0, space 0, times 0 [ 1649.108993][T22368] CPU: 0 UID: 0 PID: 22368 Comm: syz.3.4239 Tainted: G L syzkaller #0 PREEMPT(full) [ 1649.109025][T22368] Tainted: [L]=SOFTLOCKUP [ 1649.109034][T22368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1649.109048][T22368] Call Trace: [ 1649.109058][T22368] [ 1649.109068][T22368] dump_stack_lvl+0xe8/0x150 [ 1649.109107][T22368] should_fail_ex+0x410/0x560 [ 1649.109143][T22368] should_failslab+0xa8/0x100 [ 1649.109177][T22368] __kmalloc_cache_node_noprof+0xaa/0x620 [ 1649.109206][T22368] ? __get_vm_area_node+0x155/0x2f0 [ 1649.109238][T22368] ? __get_vm_area_node+0x155/0x2f0 [ 1649.109278][T22368] __get_vm_area_node+0x155/0x2f0 [ 1649.109317][T22368] __vmalloc_node_range_noprof+0x343/0x1540 [ 1649.109366][T22368] ? __do_replace+0xc2/0xac0 [ 1649.109390][T22368] ? pcpu_alloc_noprof+0x1036/0x1900 [ 1649.109449][T22368] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1649.109488][T22368] ? __do_replace+0xc2/0xac0 [ 1649.109522][T22368] vzalloc_noprof+0xb2/0xe0 [ 1649.109543][T22368] ? __do_replace+0xc2/0xac0 [ 1649.109566][T22368] __do_replace+0xc2/0xac0 [ 1649.109591][T22368] ? __pfx_translate_table+0x10/0x10 [ 1649.109632][T22368] ? __pfx___do_replace+0x10/0x10 [ 1649.109663][T22368] ? _copy_from_user+0x94/0xb0 [ 1649.109700][T22368] do_arpt_set_ctl+0x892/0xb50 [ 1649.109722][T22368] ? trace_contention_end+0x3d/0x140 [ 1649.109761][T22368] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 1649.109784][T22368] ? nf_setsockopt+0x221/0x290 [ 1649.109820][T22368] ? __mutex_unlock_slowpath+0x731/0x900 [ 1649.109877][T22368] nf_setsockopt+0x26f/0x290 [ 1649.109909][T22368] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1649.109939][T22368] smc_setsockopt+0x232/0xb00 [ 1649.109945][T19098] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1649.109974][T22368] ? __pfx_smc_setsockopt+0x10/0x10 [ 1649.110008][T22368] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1649.110039][T22368] ? __pfx_smc_setsockopt+0x10/0x10 [ 1649.110068][T22368] do_sock_setsockopt+0x17c/0x1b0 [ 1649.110105][T22368] __x64_sys_setsockopt+0x13d/0x1b0 [ 1649.110142][T22368] do_syscall_64+0x166/0x520 [ 1649.110172][T22368] ? trace_irq_disable+0x3b/0x140 [ 1649.110215][T22368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1649.110239][T22368] ? clear_bhb_loop+0x70/0xc0 [ 1649.110268][T22368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1649.110291][T22368] RIP: 0033:0x7ff360d9e159 [ 1649.110313][T22368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1649.110333][T22368] RSP: 002b:00007ff35eff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1649.110359][T22368] RAX: ffffffffffffffda RBX: 00007ff361025fa0 RCX: 00007ff360d9e159 [ 1649.110377][T22368] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 1649.110391][T22368] RBP: 00007ff35eff6090 R08: 0000000000000440 R09: 0000000000000000 [ 1649.110407][T22368] R10: 0000200000000980 R11: 0000000000000246 R12: 0000000000000001 [ 1649.110422][T22368] R13: 00007ff361026038 R14: 00007ff361025fa0 R15: 00007ff36114fa48 [ 1649.110460][T22368] [ 1649.155601][T22368] syz.3.4239: vmalloc error: size 64, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1649.155917][T22368] CPU: 0 UID: 0 PID: 22368 Comm: syz.3.4239 Tainted: G L syzkaller #0 PREEMPT(full) [ 1649.155986][T22368] Tainted: [L]=SOFTLOCKUP [ 1649.156008][T22368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1649.156048][T22368] Call Trace: [ 1649.156070][T22368] [ 1649.156101][T22368] dump_stack_lvl+0xe8/0x150 [ 1649.156187][T22368] warn_alloc+0x24d/0x270 [ 1649.156258][T22368] ? __kasan_kmalloc+0x22/0xb0 [ 1649.156335][T22368] ? __pfx_warn_alloc+0x10/0x10 [ 1649.156417][T22368] ? __get_vm_area_node+0x155/0x2f0 [ 1649.156522][T22368] ? __get_vm_area_node+0x2a9/0x2f0 [ 1649.156625][T22368] __vmalloc_node_range_noprof+0x36b/0x1540 [ 1649.156723][T22368] ? pcpu_alloc_noprof+0x1036/0x1900 [ 1649.156894][T22368] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1649.157002][T22368] ? __do_replace+0xc2/0xac0 [ 1649.157064][T22368] vzalloc_noprof+0xb2/0xe0 [ 1649.157116][T22368] ? __do_replace+0xc2/0xac0 [ 1649.157169][T22368] __do_replace+0xc2/0xac0 [ 1649.157224][T22368] ? __pfx_translate_table+0x10/0x10 [ 1649.157328][T22368] ? __pfx___do_replace+0x10/0x10 [ 1649.157406][T22368] ? _copy_from_user+0x94/0xb0 [ 1649.157497][T22368] do_arpt_set_ctl+0x892/0xb50 [ 1649.157549][T22368] ? trace_contention_end+0x3d/0x140 [ 1649.157639][T22368] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 1649.157692][T22368] ? nf_setsockopt+0x221/0x290 [ 1649.157834][T22368] ? __mutex_unlock_slowpath+0x731/0x900 [ 1649.157965][T22368] nf_setsockopt+0x26f/0x290 [ 1649.158054][T22368] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1649.158145][T22368] smc_setsockopt+0x232/0xb00 [ 1649.158262][T22368] ? __pfx_smc_setsockopt+0x10/0x10 [ 1649.158352][T22368] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1649.158425][T22368] ? __pfx_smc_setsockopt+0x10/0x10 [ 1649.158508][T22368] do_sock_setsockopt+0x17c/0x1b0 [ 1649.158605][T22368] __x64_sys_setsockopt+0x13d/0x1b0 [ 1649.158700][T22368] do_syscall_64+0x166/0x520 [ 1649.158776][T22368] ? trace_irq_disable+0x3b/0x140 [ 1649.158838][T22368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1649.158901][T22368] ? clear_bhb_loop+0x70/0xc0 [ 1649.158975][T22368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1649.159020][T22368] RIP: 0033:0x7ff360d9e159 [ 1649.159073][T22368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1649.159113][T22368] RSP: 002b:00007ff35eff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1649.159168][T22368] RAX: ffffffffffffffda RBX: 00007ff361025fa0 RCX: 00007ff360d9e159 [ 1649.159211][T22368] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 1649.159252][T22368] RBP: 00007ff35eff6090 R08: 0000000000000440 R09: 0000000000000000 [ 1649.159286][T22368] R10: 0000200000000980 R11: 0000000000000246 R12: 0000000000000001 [ 1649.159319][T22368] R13: 00007ff361026038 R14: 00007ff361025fa0 R15: 00007ff36114fa48 [ 1649.159412][T22368] [ 1649.213609][T19082] usb usb1-port1: unable to enumerate USB device [ 1649.302896][T19098] usb 2-1: Using ep0 maxpacket: 32 [ 1649.361815][T22368] Mem-Info: [ 1649.361856][T22368] active_anon:45992 inactive_anon:7 isolated_anon:0 [ 1649.361856][T22368] active_file:670 inactive_file:63117 isolated_file:0 [ 1649.361856][T22368] unevictable:0 dirty:283 writeback:0 [ 1649.361856][T22368] slab_reclaimable:8945 slab_unreclaimable:121639 [ 1649.361856][T22368] mapped:46884 shmem:38098 pagetables:1613 [ 1649.361856][T22368] sec_pagetables:2 bounce:0 [ 1649.361856][T22368] kernel_misc_reclaimable:0 [ 1649.361856][T22368] free:1206422 free_pcp:17737 free_cma:0 [ 1649.361998][T22368] Node 0 active_anon:183968kB inactive_anon:28kB active_file:2680kB inactive_file:252276kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:187536kB dirty:1132kB writeback:0kB shmem:152392kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:6144kB kernel_stack:14784kB pagetables:6260kB sec_pagetables:8kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1649.362157][T22368] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:192kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1649.362301][T22368] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1649.379197][T22368] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 1649.379347][T22368] Node 0 DMA32 free:894728kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:183968kB inactive_anon:28kB active_file:2680kB inactive_file:252276kB unevictable:0kB writepending:1132kB zspages:32kB present:3129332kB managed:2546864kB mlocked:0kB bounce:0kB free_pcp:44068kB local_pcp:23776kB free_cma:0kB [ 1649.400549][T19098] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1649.400628][T19098] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1649.408455][T22368] lowmem_reserve[]: 0 0 0 0 0 [ 1649.408513][T22368] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1649.408578][T22368] lowmem_reserve[]: 0 0 0 0 0 [ 1649.408619][T22368] Node 1 Normal free:3915900kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:26592kB local_pcp:11420kB free_cma:0kB [ 1649.408686][T22368] lowmem_reserve[]: 0 0 0 0 0 [ 1649.417845][T22368] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1649.454252][T22368] Node 0 DMA32: 1884*4kB (UME) 1141*8kB (UME) 2830*16kB (UME) 2245*32kB (UME) 1128*64kB (UME) 373*128kB (UME) 106*256kB (UME) 31*512kB (UME) 8*1024kB (UM) 2*2048kB (M) 143*4096kB (UM) = 894744kB [ 1649.454750][T22368] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1649.467275][T22368] Node 1 Normal: 3*4kB (UM) 4*8kB (UM) 3*16kB (UM) 3*32kB (UM) 3*64kB (UM) 4*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 2*2048kB (UM) 954*4096kB (M) = 3915900kB [ 1649.467452][T22368] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1649.467470][T22368] Node 0 hugepages_total=4 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1649.468669][T19098] usb 2-1: config 1 has an invalid descriptor of length 213, skipping remainder of the config [ 1649.468703][T19098] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1649.471905][T22368] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1649.471963][T22368] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1649.472015][T22368] 101853 total pagecache pages [ 1649.472037][T22368] 1 pages in swap cache [ 1649.472060][T22368] Free swap = 124992kB [ 1649.472088][T22368] Total swap = 124996kB [ 1649.472111][T22368] 2097051 pages RAM [ 1649.472131][T22368] 0 pages HighMem/MovableOnly [ 1649.472160][T22368] 428719 pages reserved [ 1649.472181][T22368] 0 pages cma reserved [ 1649.675401][T19098] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1649.675471][T19098] usb 2-1: Product: syz [ 1649.675507][T19098] usb 2-1: Manufacturer: syz [ 1649.675571][T19098] usb 2-1: SerialNumber: syz [ 1650.428000][T22362] bond2: (slave bridge1): making interface the new active one [ 1650.428029][T22362] bridge1: entered promiscuous mode [ 1650.440326][T22362] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 1650.587471][T22360] netlink: 'syz.1.4237': attribute type 3 has an invalid length. [ 1650.587818][T22360] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4237'. [ 1650.924687][T17147] cgroup: fork rejected by pids controller in /syz0 [ 1651.120106][T19082] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 1651.263648][T19082] usb 4-1: device descriptor read/64, error -71 [ 1651.511298][T19082] usb 4-1: new full-speed USB device number 113 using dummy_hcd [ 1651.649791][T19082] usb 4-1: device descriptor read/64, error -71 [ 1651.763042][T19082] usb usb4-port1: attempt power cycle [ 1652.110144][T19082] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 1652.148615][T19082] usb 4-1: device descriptor read/8, error -71 [ 1652.389671][T19082] usb 4-1: new full-speed USB device number 115 using dummy_hcd [ 1652.424487][T19082] usb 4-1: device descriptor read/8, error -71 [ 1652.530435][T19082] usb usb4-port1: unable to enumerate USB device [ 1652.915117][T19098] usb 2-1: USB disconnect, device number 37 [ 1653.031984][ T4933] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1653.037834][ T4933] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1653.039048][ T4933] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1653.040515][ T4933] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1653.041165][ T4933] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1653.239887][T19090] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1653.539919][T19098] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1653.690948][T19098] usb 2-1: Using ep0 maxpacket: 8 [ 1653.692596][T19098] usb 2-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 1653.695213][T19098] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1653.695276][T19098] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1653.755007][T19098] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.755042][T19098] usb 2-1: Product: syz [ 1653.755067][T19098] usb 2-1: Manufacturer: syz [ 1653.755079][T19098] usb 2-1: SerialNumber: syz [ 1653.931420][ T31] kauditd_printk_skb: 52 callbacks suppressed [ 1653.931444][ T31] audit: type=1326 audit(1790928369.150:6413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22381 comm="syz.5.4246" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8059e159 code=0x7fc00000 [ 1653.931493][ T31] audit: type=1326 audit(1790928369.150:6414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22381 comm="syz.5.4246" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7efc8059e159 code=0x7fc00000 [ 1654.721233][T18768] dvmrp1: left allmulticast mode [ 1654.976646][T22414] FAULT_INJECTION: forcing a failure. [ 1654.976646][T22414] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1654.976687][T22414] CPU: 0 UID: 0 PID: 22414 Comm: syz.5.4251 Tainted: G L syzkaller #0 PREEMPT(full) [ 1654.976718][T22414] Tainted: [L]=SOFTLOCKUP [ 1654.976727][T22414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1654.976741][T22414] Call Trace: [ 1654.976750][T22414] [ 1654.976764][T22414] dump_stack_lvl+0xe8/0x150 [ 1654.976803][T22414] should_fail_ex+0x410/0x560 [ 1654.976836][T22414] prepare_alloc_pages+0x223/0x600 [ 1654.976869][T22414] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1654.976901][T22414] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1654.976926][T22414] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 1654.976957][T22414] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1654.976994][T22414] ? __pfx_policy_nodemask+0x10/0x10 [ 1654.977023][T22414] ? __get_vm_area_node+0x155/0x2f0 [ 1654.977054][T22414] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 1654.977088][T22414] ? vzalloc_noprof+0xb2/0xe0 [ 1654.977113][T22414] __alloc_pages_noprof+0x10/0x100 [ 1654.977141][T22414] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 1654.977175][T22414] ? alloc_pages_noprof+0x140/0x2b0 [ 1654.977211][T22414] __kasan_populate_vmalloc+0xb7/0x1c0 [ 1654.977242][T22414] alloc_vmap_area+0xd1a/0x1420 [ 1654.977289][T22414] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1654.977326][T22414] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 1654.977353][T22414] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 1654.977376][T22414] ? __get_vm_area_node+0x155/0x2f0 [ 1654.977415][T22414] __get_vm_area_node+0x200/0x2f0 [ 1654.977466][T22414] __vmalloc_node_range_noprof+0x343/0x1540 [ 1654.977500][T22414] ? __do_replace+0xc2/0xac0 [ 1654.977523][T22414] ? pcpu_alloc_noprof+0x1036/0x1900 [ 1654.977599][T22414] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1654.977642][T22414] ? __do_replace+0xc2/0xac0 [ 1654.977675][T22414] vzalloc_noprof+0xb2/0xe0 [ 1654.977695][T22414] ? __do_replace+0xc2/0xac0 [ 1654.977717][T22414] __do_replace+0xc2/0xac0 [ 1654.977739][T22414] ? __pfx_translate_table+0x10/0x10 [ 1654.977778][T22414] ? __pfx___do_replace+0x10/0x10 [ 1654.977807][T22414] ? _copy_from_user+0x94/0xb0 [ 1654.977859][T22414] do_arpt_set_ctl+0x892/0xb50 [ 1654.977880][T22414] ? trace_contention_end+0x3d/0x140 [ 1654.977919][T22414] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 1654.977941][T22414] ? nf_setsockopt+0x221/0x290 [ 1654.977977][T22414] ? __mutex_unlock_slowpath+0x731/0x900 [ 1654.978041][T22414] nf_setsockopt+0x26f/0x290 [ 1654.978075][T22414] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1654.978109][T22414] smc_setsockopt+0x232/0xb00 [ 1654.978162][T22414] ? __pfx_smc_setsockopt+0x10/0x10 [ 1654.978198][T22414] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1654.978228][T22414] ? __pfx_smc_setsockopt+0x10/0x10 [ 1654.978260][T22414] do_sock_setsockopt+0x17c/0x1b0 [ 1654.978298][T22414] __x64_sys_setsockopt+0x13d/0x1b0 [ 1654.978339][T22414] do_syscall_64+0x166/0x520 [ 1654.978371][T22414] ? trace_irq_disable+0x3b/0x140 [ 1654.978395][T22414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1654.978419][T22414] ? clear_bhb_loop+0x70/0xc0 [ 1654.978448][T22414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1654.978471][T22414] RIP: 0033:0x7efc8059e159 [ 1654.978493][T22414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1654.978513][T22414] RSP: 002b:00007efc81458028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1654.978539][T22414] RAX: ffffffffffffffda RBX: 00007efc80825fa0 RCX: 00007efc8059e159 [ 1654.978557][T22414] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 1654.978571][T22414] RBP: 00007efc81458090 R08: 0000000000000440 R09: 0000000000000000 [ 1654.978587][T22414] R10: 0000200000000980 R11: 0000000000000246 R12: 0000000000000001 [ 1654.978603][T22414] R13: 00007efc80826038 R14: 00007efc80825fa0 R15: 00007efc8094fa48 [ 1654.978638][T22414] [ 1655.154117][T20566] Bluetooth: hci4: command tx timeout [ 1655.956862][T18768] bond1 (unregistering): (slave gretap1): Removing an active aggregator [ 1655.979300][T18768] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 1656.084911][T18768] bond0 (unregistering): Released all slaves [ 1656.102734][T18768] bond1 (unregistering): Released all slaves [ 1656.247217][T18768] ovs-dp0: left promiscuous mode [ 1656.464094][T18768] tipc: Left network mode [ 1656.802754][T21624] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1656.960868][T21624] usb 6-1: Using ep0 maxpacket: 8 [ 1656.965791][T21624] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1656.997931][ T31] audit: type=1326 audit(1790928372.210:6415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22432 comm="syz.1.4255" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa00f39e159 code=0x0 [ 1657.030391][T21624] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1657.030416][T21624] usb 6-1: config 0 has no interface number 0 [ 1657.030445][T21624] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1657.030462][T21624] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1657.030481][T21624] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1657.030500][T21624] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1657.030531][T21624] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.073232][T21624] usb 6-1: config 0 descriptor?? [ 1657.230971][T20566] Bluetooth: hci4: command tx timeout [ 1657.289888][T21624] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1657.317614][T22390] bridge0: port 1(bridge_slave_0) entered blocking state [ 1657.317741][T22390] bridge0: port 1(bridge_slave_0) entered disabled state [ 1657.317902][T22390] bridge_slave_0: entered allmulticast mode [ 1657.371582][T22390] bridge_slave_0: entered promiscuous mode [ 1657.379388][T21624] usb 6-1: USB disconnect, device number 51 [ 1657.383505][T21624] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1657.427973][T22390] bridge0: port 2(bridge_slave_1) entered blocking state [ 1657.428185][T22390] bridge0: port 2(bridge_slave_1) entered disabled state [ 1657.428379][T22390] bridge_slave_1: entered allmulticast mode [ 1659.338499][T20566] Bluetooth: hci4: command tx timeout [ 1661.193352][T19098] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1661.543910][T20566] Bluetooth: hci4: command tx timeout [ 1662.119023][ C1] sched: DL replenish lagged too much [ 1666.994169][T22390] bridge_slave_1: entered promiscuous mode [ 1669.030942][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.045711][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1673.326049][T19098] usb 2-1: USB disconnect, device number 38 [ 1730.426568][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.440147][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1799.084435][T17142] Bluetooth: hci4: command 0x0406 tx timeout [ 1799.227795][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1799.242014][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1819.346936][ T32] INFO: task kworker/u8:5:14398 blocked for more than 144 seconds. [ 1819.346971][ T32] Tainted: G L syzkaller #0 [ 1819.346985][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1819.346997][ T32] task:kworker/u8:5 state:D stack:21544 pid:14398 tgid:14398 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 1819.347064][ T32] Workqueue: ipv6_addrconf addrconf_verify_work [ 1819.347246][ T32] Call Trace: [ 1819.347256][ T32] [ 1819.347272][ T32] __schedule+0x17db/0x58f0 [ 1819.347339][ T32] ? __pfx___schedule+0x10/0x10 [ 1819.347380][ T32] ? schedule+0x90/0x2b0 [ 1819.347413][ T32] schedule+0x164/0x2b0 [ 1819.347446][ T32] schedule_preempt_disabled+0x13/0x30 [ 1819.347476][ T32] __mutex_lock+0x7c1/0x1550 [ 1819.347515][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1819.347552][ T32] ? addrconf_verify_work+0x19/0x30 [ 1819.347585][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1819.347635][ T32] ? rcu_is_watching+0x16/0xb0 [ 1819.347668][ T32] ? process_scheduled_works+0x97a/0x1630 [ 1819.347715][ T32] addrconf_verify_work+0x19/0x30 [ 1819.347747][ T32] process_scheduled_works+0xc3d/0x1630 [ 1819.347812][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 1819.347852][ T32] ? assign_work+0x3cf/0x5d0 [ 1819.347923][ T32] worker_thread+0xa47/0xfb0 [ 1819.347985][ T32] kthread+0x38b/0x480 [ 1819.348009][ T32] ? __pfx_worker_thread+0x10/0x10 [ 1819.348040][ T32] ? __pfx_kthread+0x10/0x10 [ 1819.348065][ T32] ret_from_fork+0x514/0xb70 [ 1819.348103][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1819.348127][ T32] ? __switch_to+0xc89/0x1420 [ 1819.348176][ T32] ? __pfx_kthread+0x10/0x10 [ 1819.348212][ T32] ret_from_fork_asm+0x1a/0x30 [ 1819.348267][ T32] [ 1819.348304][ T32] INFO: task kworker/u8:4:18768 blocked for more than 144 seconds. [ 1819.348325][ T32] Tainted: G L syzkaller #0 [ 1819.348338][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1819.348349][ T32] task:kworker/u8:4 state:D stack:22512 pid:18768 tgid:18768 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 1819.348413][ T32] Workqueue: netns cleanup_net [ 1819.348507][ T32] Call Trace: [ 1819.348516][ T32] [ 1819.348530][ T32] __schedule+0x17db/0x58f0 [ 1819.348592][ T32] ? __pfx___schedule+0x10/0x10 [ 1819.348632][ T32] ? schedule+0x90/0x2b0 [ 1819.348666][ T32] schedule+0x164/0x2b0 [ 1819.348699][ T32] schedule_preempt_disabled+0x13/0x30 [ 1819.348729][ T32] __mutex_lock+0x7c1/0x1550 [ 1819.348767][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1819.348805][ T32] ? wiphy_unregister+0x274/0xb20 [ 1819.348877][ T32] ? __pfx___mutex_lock+0x10/0x10