last executing test programs: 12.868615641s ago: executing program 0 (id=4823): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x1) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x40, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) io_setup(0xffffff7f, &(0x7f0000000280)=0x0) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) io_submit(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x2, 0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0x400caed0, &(0x7f0000000080)={0x2, r5, 0xffffffff}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$clear(0x7, r7) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upd'], 0x1a, 0xffffffffffffffff) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41480}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x401}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_emit_vhci(0x0, 0x15) 11.864956928s ago: executing program 4 (id=4825): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe000000008500000057000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d70300000000000000d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df6c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8a9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2a9e99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8be1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaa072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a3ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a98838156ff00000000000000cdbf91f7582ab314be3e67b8c9459564c856339a80919ecf839560c62e69df8667b274cc53f83f2086cfd2664252471fad9081824d60741d663ee258705c364e162b84a09870acd0a19399103474444f4fa12dcbd10b40195b6088513029b60a34e4161fe48c092693eb07dc8ddcba2eac2efe30b285a877c862c73ff8a60cf73f1b17da0000000000005664181c1f28cd2880e6872bae932eaf4b0000000000007b662c0fe22cfd6d4bd7b851ae928cebeec6375b16af342e93c39d97e5d74d5a8e96c15fdcde7526b0af54b145e61b042c1e600390590a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x24000840) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, r2) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000580)=0xe) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r3, &(0x7f0000001740)=""/4147, 0x1033) 11.658780431s ago: executing program 0 (id=4827): bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x6e) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52", 0xc) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$igmp6(0xa, 0x3, 0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x40c}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408048000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000400)=r3, 0x4) sendmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="d80000001a0081044e81f782db4cb904021d0800fe0055a1150015000200142603600e12080005007a010401a8001600200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457fffffffffffff0001bace8017cbec4c2ee5a7cef4090000001fb79164d322fe7c9f8775d3f2d5d0683f5aeb4edbb57a5025ccca9e00360db785262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100000000000000000000000000d4da15", 0xd8}], 0x1}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000100)=0x3) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 11.031532284s ago: executing program 3 (id=4828): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_open_procfs(0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc0f8565c, &(0x7f0000000000)={0x0, 0x6, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x41415270, 0x0, 0x0, [{}, {}, {0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x7}], 0x7}}, 0xfffffffc}) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af60, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) write$sndseq(r6, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0), 0x0, 0xc001, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreq(r7, 0x0, 0x24, &(0x7f00000000c0)={@dev={0xac, 0x14, 0x14, 0x25}, @empty}, 0x8) syz_usb_connect(0x0, 0x12, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x100, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb, 0x2}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x4040850) 9.528808563s ago: executing program 1 (id=4829): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = socket(0x2b, 0x80801, 0x1) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}, r4}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, r4}}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@uncond, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7fff, 0x9, 0x7, 'syz0\x00', {0x719}}}}, {{@ipv6={@private0, @private2, [0xff, 0x0, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'tunl0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x4, 0x9456fff08070a538, 0x70}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x82b, 0x0, 0x0, 'syz0\x00', 'syz0\x00', {0x8000800000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x0, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000570000/0x4000)=nil, 0x4000, 0x9) r5 = fsopen(&(0x7f0000000180)='msdos\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000000c0)={0x0, 0xffffff60, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4000805}, 0x10) 9.477289356s ago: executing program 4 (id=4830): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, 0x0) preadv(r2, &(0x7f0000000740)=[{&(0x7f0000000340)=""/162, 0xa2}, {&(0x7f0000000540)=""/215, 0xd7}, {&(0x7f00000007c0)=""/218, 0xda}], 0x3, 0x80000001, 0x3f7a) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) pipe2$watch_queue(0x0, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x0, &(0x7f0000000400), &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, &(0x7f00000002c0), 0x40f00, 0x10, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0xbd4a, 0x2, 0x7eab, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x2, 0xa, 0x5, 0x10}}}}]}, 0x48}}, 0x8850) r4 = socket$inet_udp(0x2, 0x2, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x281, 0x3) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x2, @rand_addr=0x64010101}, 0x10) r5 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_current(r5, &(0x7f0000000040)=@profile={'stack ', ':\x00'}, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x2980000}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x20050800) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x191c) io_setup(0x8, &(0x7f0000000600)) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) 8.213008979s ago: executing program 1 (id=4831): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = socket(0x2b, 0x80801, 0x1) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x86}}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@uncond, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7fff, 0x9, 0x7, 'syz0\x00', {0x719}}}}, {{@ipv6={@private0, @private2, [0xff, 0x0, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'tunl0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x4, 0x9456fff08070a538, 0x70}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x82b, 0x0, 0x0, 'syz0\x00', 'syz0\x00', {0x8000800000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x0, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000570000/0x4000)=nil, 0x4000, 0x9) r4 = fsopen(&(0x7f0000000180)='msdos\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0xffffff60, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4000805}, 0x10) 8.210089013s ago: executing program 2 (id=4832): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) lsm_set_self_attr(0x68, 0x0, 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x76, 0x40c00) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000240)={'filter\x00', 0x4}, 0x64) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r6, &(0x7f0000000040)=[{&(0x7f0000000440)=""/217, 0xd9}], 0x1) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000080)=0x2) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$inet_smc(0x2b, 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 8.021609632s ago: executing program 4 (id=4833): r0 = socket$packet(0x11, 0x2, 0x300) signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) socket(0x10, 0x3, 0x0) socket(0x2b, 0x80801, 0x1) set_mempolicy(0x2, 0x0, 0xf5) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000e80)="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", 0x26f}, {&(0x7f0000000580)="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", 0x211}], 0x2, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) clock_settime(0xfffffff5, &(0x7f0000000040)) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x11, 0x1, 0x8, 0x6, 0x4, 0x4, 0x18da188d}, 0x1c) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = fsopen(&(0x7f0000000000)='hpfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00), 0x0) 7.156895369s ago: executing program 1 (id=4834): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file0/file0'}, 0x11) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000003c0)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r5, 0x81044804, &(0x7f0000000400)={0x1}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) writev(r6, &(0x7f0000000080)=[{&(0x7f00000004c0)="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", 0xd80}], 0x1) shutdown(r6, 0x1) 7.142735841s ago: executing program 0 (id=4835): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) r1 = socket$inet6(0xa, 0x3, 0x1) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f023}) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = fcntl$dupfd(r2, 0x0, r2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}, 0x1, 0x0, 0x0, 0xc001}, 0x800) fsopen(&(0x7f00000006c0)='nfsd\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioperm(0x6, 0x3, 0xb017) sysinfo(0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x65c, 0xec, 0xec, 0x424, 0x0, 0x1cc, 0x594, 0x594, 0x594, 0x594, 0x594, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}, @common=@inet=@socket1={{0x24}}]}, @HL={0x24, 'HL\x00', 0x0, {0x2, 0x8}}}, {{@uncond, 0x0, 0x11c, 0x140, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x80]}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xff}}}, {{@uncond, 0x0, 0x134, 0x170, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x2, 0x0, [0x905, 0xfffe, 0x4, 0x4, 0x68e, 0xffff, 0x6, 0x7, 0x6, 0x7, 0xfff7, 0x9, 0xffff, 0x8, 0x2, 0x9], 0xa}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x6b8) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f0000000700)=0xffffffff, 0x4) 6.180993162s ago: executing program 3 (id=4836): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = socket(0x2b, 0x80801, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x86}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}, r3}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, r3}}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@uncond, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7fff, 0x9, 0x7, 'syz0\x00', {0x719}}}}, {{@ipv6={@private0, @private2, [0xff, 0x0, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'tunl0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x4, 0x9456fff08070a538, 0x70}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x82b, 0x0, 0x0, 'syz0\x00', 'syz0\x00', {0x8000800000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x0, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000570000/0x4000)=nil, 0x4000, 0x9) r4 = fsopen(&(0x7f0000000180)='msdos\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0xffffff60, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4000805}, 0x10) 5.940617842s ago: executing program 2 (id=4837): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x1) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x40, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) io_setup(0xffffff7f, &(0x7f0000000280)=0x0) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) io_submit(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x2, 0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0x400caed0, &(0x7f0000000080)={0x2, r5, 0xffffffff}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$clear(0x7, r7) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upd'], 0x1a, 0xffffffffffffffff) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41480}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x401}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_emit_vhci(0x0, 0x15) 5.440812154s ago: executing program 4 (id=4838): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc2e}, 0x4040014) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0x10000000, 0x0, 0x0, 0xb49, 0xfffffffd, 0x8, 0x3, 0x3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe000000008500000057000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d70300000000000000d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df6c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8a9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2a9e99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8be1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaa072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a3ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a98838156ff00000000000000cdbf91f7582ab314be3e67b8c9459564c856339a80919ecf839560c62e69df8667b274cc53f83f2086cfd2664252471fad9081824d60741d663ee258705c364e162b84a09870acd0a19399103474444f4fa12dcbd10b40195b6088513029b60a34e4161fe48c092693eb07dc8ddcba2eac2efe30b285a877c862c73ff8a60cf73f1b17da0000000000005664181c1f28cd2880e6872bae932eaf4b0000000000007b662c0fe22cfd6d4bd7b851ae928cebeec6375b16af342e93c39d97e5d74d5a8e96c15fdcde7526b0af54b145e61b042c1e600390590a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) open_tree(0xffffffffffffffff, &(0x7f0000006180)='./mnt\x00', 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x24000840) add_key$user(0x0, &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc3036bb66682c", 0x7, 0xfffffffffffffffe) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, r2) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x641f5eb86f254ffb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x74}}, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000580)=0xe) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r3, &(0x7f0000001740)=""/4147, 0x1033) socket$inet6_mptcp(0xa, 0x1, 0x106) 5.31609721s ago: executing program 3 (id=4839): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x1) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x40, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) io_setup(0xffffff7f, &(0x7f0000000280)=0x0) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) io_submit(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x2, 0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0x400caed0, &(0x7f0000000080)={0x2, r5, 0xffffffff}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$clear(0x7, r7) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upd'], 0x1a, 0xffffffffffffffff) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41480}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x401}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_emit_vhci(0x0, 0x15) 4.937977224s ago: executing program 2 (id=4840): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x1) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x40, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) io_setup(0xffffff7f, &(0x7f0000000280)=0x0) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) io_submit(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x2, 0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0x400caed0, &(0x7f0000000080)={0x2, r5, 0xffffffff}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$clear(0x7, r7) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upd'], 0x1a, 0xffffffffffffffff) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41480}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x401}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_emit_vhci(0x0, 0x15) 4.873634937s ago: executing program 0 (id=4841): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0x2, 0x0) r2 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r3, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r5, &(0x7f0000000040)="e400", 0x2, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) mkdir(&(0x7f00000000c0)='./file0\x00', 0x143) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x103, 0x528ec475) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000200)={0x41, 0x80, 0xfe, 0x0, 0x9, 0x40, 0x8, 0x5a, 0x0, 0x0, 0x9}, 0xe) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r5}, 0x8) connect$unix(r7, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) recvmmsg(r5, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/21, 0x15}, 0x1ff}], 0x4000000000001bf, 0x40000023, 0x0) 4.120981191s ago: executing program 2 (id=4842): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = socket(0x2b, 0x80801, 0x1) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}, r4}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, r4}}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@uncond, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7fff, 0x9, 0x7, 'syz0\x00', {0x719}}}}, {{@ipv6={@private0, @private2, [0xff, 0x0, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'tunl0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x4, 0x9456fff08070a538, 0x70}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x82b, 0x0, 0x0, 'syz0\x00', 'syz0\x00', {0x8000800000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x0, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000570000/0x4000)=nil, 0x4000, 0x9) r5 = fsopen(&(0x7f0000000180)='msdos\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000000c0)={0x0, 0xffffff60, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4000805}, 0x10) 3.733830133s ago: executing program 1 (id=4843): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) r1 = socket$inet6(0xa, 0x3, 0x1) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f023}) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = fcntl$dupfd(r2, 0x0, r2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0xc001}, 0x800) fsopen(&(0x7f00000006c0)='nfsd\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioperm(0x6, 0x3, 0xb017) sysinfo(0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x65c, 0xec, 0xec, 0x424, 0x0, 0x1cc, 0x594, 0x594, 0x594, 0x594, 0x594, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}, @common=@inet=@socket1={{0x24}}]}, @HL={0x24, 'HL\x00', 0x0, {0x2, 0x8}}}, {{@uncond, 0x0, 0x11c, 0x140, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x80]}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xff}}}, {{@uncond, 0x0, 0x134, 0x170, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x2, 0x0, [0x905, 0xfffe, 0x4, 0x4, 0x68e, 0xffff, 0x6, 0x7, 0x6, 0x7, 0xfff7, 0x9, 0xffff, 0x8, 0x2, 0x9], 0xa}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x6b8) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f0000000700)=0xffffffff, 0x4) 3.20165678s ago: executing program 3 (id=4844): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = socket(0x2b, 0x80801, 0x1) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x86}}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@uncond, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7fff, 0x9, 0x7, 'syz0\x00', {0x719}}}}, {{@ipv6={@private0, @private2, [0xff, 0x0, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'tunl0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x4, 0x9456fff08070a538, 0x70}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x82b, 0x0, 0x0, 'syz0\x00', 'syz0\x00', {0x8000800000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x0, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000570000/0x4000)=nil, 0x4000, 0x9) r4 = fsopen(&(0x7f0000000180)='msdos\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffff60, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4000805}, 0x10) 2.823747323s ago: executing program 2 (id=4845): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = socket(0x2b, 0x80801, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x86}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}, r3}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, r3}}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@uncond, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7fff, 0x9, 0x7, 'syz0\x00', {0x719}}}}, {{@ipv6={@private0, @private2, [0xff, 0x0, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'tunl0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x4, 0x9456fff08070a538, 0x70}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x82b, 0x0, 0x0, 'syz0\x00', 'syz0\x00', {0x8000800000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x0, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000570000/0x4000)=nil, 0x4000, 0x9) r4 = fsopen(&(0x7f0000000180)='msdos\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0xffffff60, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4000805}, 0x10) 2.553921631s ago: executing program 4 (id=4846): syz_usb_connect$hid(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000200000010ac053002400001020301090224000101030000090400040103010206092105000723221e030905810320000a0400"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x323, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = fsopen(&(0x7f0000000040)='udf\x00', 0x1) r2 = fcntl$dupfd(r1, 0x0, r1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x11, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x41, 0x3, 0x200, 0x0, 0xa, 0x9a000000, 0x0, 0x0, 0x250, 0x1f0, 0x1f0, 0x250, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @remote, 0x7800, 0x0, 'wlan1\x00', 'veth1_to_bridge\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a18010000050a010100000000000000000000000508000b40000000010c000240000000000000000308000b4000000004340004800800024022ba48611400030076657468315f746f5f627269646765001400030069703665727370616e3000000000000020000480140003006261746164765f736c6176655f3000000800014000000000700008800c00014000000000000007940c00014000000000000003ff0c00024000000000000000060c00014000000000000004010c00024000000000000000070c0001400000000000000fff0c000240ffffffffffffffff0c00014000000000000000060c000140000000000000000c0c00024000000000000000020900030073797a31000000000900010073797a3000000000c8010000090a050000000000000000000300000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000078c0112804800018008000100667764003c000280080001400000001108000240000000140800024000000013080001400000000f080001400000000a080001400000001508000240000000041800018008000100647570000c00028008000240000000174c0001800b0001007470726f787900003c000280080003400000000a0800024000000010080001400000000a0800014000000000080003400000000a0800024000000000080002400000001430000180080001006c6f6700240002800800034080000001080003405e9e4194080005400000000706000140083f0000100001800a0001006c696d69740000005c0001800900010068617368000000004c0002800800054000000005080005400000000c0800064000100000080001400000000808000540000000050800044000000002080005400000000508000240000000090800034000000077140001800e000100636f6e6e6c696d6974000000100001800700010072740000040002801c0001800a00010072616e67650000000c0002800800024000000000380000000c0a01010000000000000000070000000900020073797a31000000000900010073797a31000000000900010073797a3000000000140000001000010000000000000000000284000a2b434cf597448ebae69defd526cae12e999fed2c20a68aaf693b356ece114a37c63e58c4fb3cd40d913ec85911624fe4776b4e2316b26d38162987469ed63431a22d5895a2bce38a90cad084add4f7af5bb68e17"], 0x340}, 0x1, 0x0, 0x0, 0x20040841}, 0x20000080) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="042c"], 0x14) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="70000000000101040000000000000000020000002400018014000180080001000000000008000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100ac1414aa08000200e0000002080007400000aa6c8241acba3174a40de95edf0fc44dad816fe0501d8ba400"/136], 0x70}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) epoll_create1(0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r8 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x1, 0x40) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f0000000080)={0x980900, 0x9}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8000, 0xffffffff}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) io_cancel(0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000a40)="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", 0x1a0}], 0x1) getdents(r0, &(0x7f0000000140)=""/72, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x4c081}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) r8 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='r', 0x200420}], 0x1}, 0x48000) sendmsg(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000580)='f', 0x1}], 0x1}, 0x15) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/rcu_expedited', 0x42, 0x0) 2.180693778s ago: executing program 3 (id=4848): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001bc0)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000002300)="ef", 0x1}], 0x1}}, {{&(0x7f0000000680)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000ac0)=[{0x0}], 0x1}}], 0x3, 0x1005) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004940)="2dbf64de21301238a91373eb6cb9313fc81b5cab78ffe487cef2eee7d4ca574e6f5d2b69fcae10ad7951835efded83d4521654e111b6f2494693e57c11043fb3fedd8b3d46d133f1a449745d6ab6fb6b7021c51e633ab9fd6ace88a24c3df02c058c66c93c6b714e3b3aac41a6f9a270bee77011caf679c55694b1d665ea134ae172d131cc2250371b3dabc157be0173f5d05768829e9ca7b27ed765fe122d4b90ec27d9d2bba12983b7eb823cc3e28ad8f62951cd6da348398d777117153c3c3aa4705493d1cde46ead1f6ab5c88495619effd2442e8e7749d3163870c335487ef9725423730e580403a52d6d982ed7fe05a6c2b82ab06677c0079679d5af535b6c4ac28ff8f6ee145e248ba3269cd6e86d75dd11ed791f5138816bca421da6c0f8d882520aa318873acef043e0d2788bbaae6c5fcd8858f4642b8b4f12dabdf8910347adae9c2d91b1c81f4f17fef20153eadcd0be115f869bf877608e8f74843e5afcad453872c0e8b9e1ac877317c240d194428f260a51a54fdeb7e6815e196e131e4f5109ce01ad5533e48ec821796e8f9d731b8f2d3d7147c12c5e05115954de5c4d72d01356ab28fb38eef1a5e9f3573427502ba3e87dc63ff78ae772f2ad7f53ab77ae403c04979a55dbc40df3ef9821bf5ebe93ebe35a57903ee0e48c802fe080209b0234efc4beffa25a4b477b63aaf746602ba936093793a423748d5b97f27faf7a01b384f5875031ccf1bee03efb04284a93f230c5be5193ba379efc5980d52a8755326534a4b8f2f931db4b989d44371275d06f60e99d27d1e650482587ce2d7850b8bce62f5e3c6a06f8125e03458da01e512f35ba2cbf282bb165320c0de2f7ba73f986643191cd578fe1ead3fc91cc0765afcf8eab04d6e275eda9cd43533c9f5bd5044dcc3bbbd3756e4f24d4429b4f62e62a67382442c6ff05acd56fa70c3477b1cfb17728ca75321e72429607703be1de4e7539291bf6324fbc949f989f66dd95bf6d389afaa65a63be4a49243c04d5eedbfd846926a680c42064441096dad097a4b21592b1d5b4e3e8b17e1dc84d810b54c2d02dedea376e5536669870e3e295b946fb762efb6bb7ad645f22f8b48f2af60c9d8c6d07962f35d1ccd10cb841119b7a86d6281bd69ece9eae64a2d029489da567ee3a772a4da0bc1053901679759dce82cbffd0ecf70adeb27f93ef11bf525f040e90c67243d5edfb3b7cb57d76bad8e1c8961199264344f9860249f2f46551a64f388d5067633cde9faa5441349f136f7d7d629d235a099acbac31048760535fa6f8b46479b5fcd3706f2d012b06797e3616431aeae27c94800792cf6f292f3f069c4fb48d1b1f87cf7a30239bbffbfdac40dd3703e4ff23c6a2f10c2d747654baf914146d820e9c52f33eb22b22c08b4d8a9f140f629480d33dd34c1758d1111ba30b29934035244e301ef9aa078db1c2d2d6de8fa27c87913c5961a9d4b0d0e3e921a9ea0b58db0e6334b826c44ce7629a60f62e51f4308b65f89b9c692bb966bab59b057e4ebe4967d6c0ee079d47c23982f38ef89703717e3a4d83ad3072a53f8d2b83e98a8e2d8047740647a390d1004ea7b03eda1646cf6ee643340c6c9c00340df2a7186e81dc35ae27981d43a08013d8e805a874f0157ac4a21e3c3b4063cdaac2ab2936131c64edebb6be8fcaacf0c6c37dfb89748fc05c36e63239a662c7a94cf6ef5f8c3a7a8c55d35ac10d5e2c309f6118b154d7dfdff3296bffd38fb5cbe1d127536066fec6107b40b10f8d6e836492575038a25624dc925ae4cd148aa5c0e5d23b8c07b4851bc9cff9dc90d62a9cd6d73d948a12fd481f40b7cdb905269b24421426f71aee20170d4bcb8943846835557d18123823942349b50d081a2517939505c6653590404f7ebe6b3c6f9984b7fc6c8797e8e215b1d8ca35ad71f048c45f30735460cf07c9a8a6a1a1aa44d8e749ac86e10f716a12e42ffed9967ddc820bac23fe118081bdbbe294b8d6d2db91557c1152057d4ccd000b7e17aa6178a516fb05078ef06170a1073a1050c5b5a15da9ca022d23404abbcc1f911f349cb1783606290d37170fc8facfb8fbeeec90f07661d52d6ef1a77aa9f99aaf9494dc3fb85ba818147f0698e87c362cd826ea6cf3ff916a852663dae6a9c3f2e8386065c8c065a3812a561191fb112e74873d7a52421fd723ae4b09d6962b456445bc5da6b7c5adadbd431cedf7aaf1080b9b4708b617044762976bc744df9eb00777d1a87056c5634554ae9640ad1d2a88ab1369429ab24de811619961766603d9badb4b9ca69193eaa3629a9d0c8b0193c44cf06ccdb60aa4b89a8b90c24b955031c3570fbb9a3636b6fa46ca5fcfc5ced1b296111c99ade9ad77229d4a54db502a4f9fe4e712f385e915c245010b385a10a887793f55119d92e34747c83cd3ae3f2f8b291176346ae3db8dcc6e38d07276c7bf067510506c237b64fb03c5ee9505ff7152968355070feb1a290d7398993c5030cdd66dbb32bb42d94c4ae1ef834f208010637f553ce5f3a5939a8ab66533ead95781c2da685d8fb7f3c3bb7b6a769c068dbdab2df7090d1635c25be5c55d6db17d97a5a1d72843f07cad76d2da33eea76eb5dd14c2a3497a55b26202425ec7094ac77ba1f6a0397cabca52dd105ae7a071f720ce16b80a3d2a38a002d9b0f770d5aea3d9b22a5a2f54a3332725d5d972e887bcd621b1036514d347b3cba5aedc6a48df2f597f6b084fe584e65864d679fc47acdafd686ce25e0ce3d8934d96d736cdca28a45db44a6fb6f153fdb9411cdcda0e5cda453984e8f20c14bbf8ecb66d3983e1464f13da6663ec14527e22ebbd17f5910e2706101dd1d6a17feb8210c35814cf23071a6932d46eeb3daf3855385bc6ce2bd3c37dea9c0f9690e1f8eb823d86c0a0f7b11236b3cf2667de6af00365b8d9ea30585f6feeb2a80c5becfedcbb2c9dd471b306b1e557f0c10516c95a96ab24a87011bf26a8869cbc4726ed39d83a04779d8af23e489b9b63a826886fee48a6f70731348eda3eda1b8bac2abf481bcf19208fa068709ce6be3657ae35835c611dcf1752da45ac3ec26cdd8f8aecce1f6d8d794744b3844e2b9d4d1f332fac25830816abb56c0f0d926cce1814ae9494eb5e02cd58c50fbd926e99337dc760b4cb07f75257fbb8851849aaaee992e5b31475d0c94634885d467f4ffc720770b9974196dd393628bbe50515340757c5df3f854aa35b71ad26cccf8a66f8d64c99b938ca5f6a3d0dc8fce537b1958d6c63610f1a0a452670bed6c06d22fcf971f1a37c847e816f83419d2f9d716613b624fd6595536335dc47ad0ccc3f95601133acbf8cdd13247df12c1135e39fc751dedfea495e0908970aebddc73650b92e76e96a431d8dc8fe00cf4d817e0931c9b10387bf24f84956a951b8923ae76b7612d82736c563c45561442ce8d546da24338a60c094ff50178671b0144c44680091c2b608cefaa7b6c7acf2a798e6afd0a2c5bd85c175074a2067790d3f10347cab4df69c2d06f9c8e86e8adf6fe221a112df25374cf58a23dd5af1bc9235a668076417dae59c8ee85302f45cb9445136c9380249e5c2be1c8120bb7f117bb431c348ab67a9af3e49407462a6c133c3fef1f76e833a165c910a823d01138ca4ea47a99a9303fd523b2bb6c377da5c7fdbb840b656ebe26d83d6c0c01a5a895ba5c44c0376b22439d65c33301d9097aa2f343bc729beb18210baa165676d3e66967db2a26733fa199f28ebe4c84a74d779ce6e9b7d7ad05cef65de3a3e84e3c10bb3e15be72f13aaf262043eb66ef513084a848c2de7aabab416665af5436cf2ffcca49c20e73c85ecd4ce989d4d257f6c782f4ca946169542196fd37b16872f55c8a9f6f2149bb4e265ab14a3cd882b0396cbdd96049ea2e0871fc53914f23e83bfe2f7781291a1c8e54a3881467f04c5d694dd5f1f9921dc13f150138fe9f176bad24eaefe52d2cbafeeeed493c010491d214b79c06ebffcdcaf0d9623899378caf8eec0da35cfe1a9542cebeba57157febc7963da3885af81ab05bfe9e1cc3972fad69490210a2969dbd5f422b24f3be44a97a6d123d160a22bbd961567e444e96d062794fcbe4b0ca0d817fdfbabcaf78cccadac5a6ad775e95806c444e6c91c4bf219ffe9549e8c947baba49799e6081977af4a64eff19f6fd17d4cce0647b50a1169410c27abe1289c3d950bbdd0deb7eefa2aefd490d8b195cfee0653f655e3736a370f14951267f051844850e05950681bea5df15d331d3e4e8a38ff3edcbd02a2f9c9f30424b3089b7fef17720d1fa28b7762a9283a965e84c6ae8095878d9cac59c74fe8890698e8f93eb9933c77581024069df33228fc2ee4c73cbb9613bd797fba36a86a668e7c78452aa658ef303bb66558ac3c9b10be20920e79bb16975f006820d9b17607bf043b1896727543bc574e3e8c49255ae770d6e4128490b24056106d12d405d17ecad965d53b57f0403df08dc9cd49a2eba3a1e5f3739120d0aaff95968d39603263441f9f09d3a2defb6c6d2a5f4dafd635003d5e330c9029d3843b4c25d08c6215f7fe3b827c33cf1ac41ce14c46900a7cfca13b82811f22f4438efd7bbd79df43c6802264f061ed3b94fe7a744ca67535455404c2b537972e9450546271d4ac449d414ac368ebea4cb47e0a6b7ea94b0771eee416a9408ac8fd4f7df6d233aca9451bf8c5d436e3c2ee0968575c81af702894823d326a6cabd8e8039f47ccc9b710cbd38773aac217229abdc830a0a26fb6c8ea894f6842cd572e3ef6751c573e2457e50d9975b7f8214533ca028996a8f5b1d268c023420f2919ed7b37faeea7801f0134cf0972af160c4ac1e29bf5075e512fcd2a17cb750dd2371df9358e9115f8e3b0edf5fb0830ae174193f84a142f7e9299e06732ff0695d7053442d288843c21a8cab3614da5e5dd77e266a2c9f93be7a888a3c7ccd90f2882245e8d0528c699c84f2fcc7c5f1a04e7d4c43e242a8f9c6d570a60d68f338b0feff74a0dcf2c5d1e396482fc1e86f0c333ee217b4be5f654d4d12cf6735f603307bc3e56c542cd9b05a36a799d8d282f8ba122b3fd3b71dc383e6ef2d7841bd048ae05f8c009eed2a54d54ca9d361b21dd965602b64ea7908916a38c0a26bf71d0cb1f928629d6092bdbe0a5767f68d455fae206bebadf72aa45ce7e4709ce3a63eb83d56289ed4ac1d14748ac1d4c157766dfb5e43bb615f249892de6be76b04f5f133b3204a91ffe65ce30ceb90fd22eb85520a08eb4fa474df564290a608d4852fd852cc5f007dc9dbf803d93defc601cb2a86d97c1b15b0a0a72bab7bae34961317b2fce763f99c8e1b859a3dc722410012eeb1b392be920dacb12f6a83d4707278343c999700f3506cc44b992d8bec62d4b4a2d5f6aaf633807376aabc0509604187986677287a4ecf01355aca7c312383af800c44fba2798ad089b09e5a96be5e8331fa0613d267902f051f86876bee34b4dc5cba40a3d7ce81af1988df58adaf4430011107c7362580a15913d1a1cd391816a3f7f4ab6a4ddf5f4763b0802a32821b680b3a98d08bd87b0612bbb135bac6ae4c620b42d7d2031afbc93e1401def81b7c22abfb560abc7a486a650f2ceca031c8df9874033255e0cb084ef85f67a77859c4d6ffe4516a95cd46217dffbf337ff2eb12b1eace89a2a0e16f74ec332c86ecb90bbcdba207e04789c7e3e698fcd5f9ca157643eee8b91c1d5a7b2a21727cfcb2720e4280a792a373b36921b5601d56379d841350c621bbfc71a914fb1886cd6291d10b0ddec15e18e26f35ffd54612ff0164f70c6003bd7d1055118600191c9147e86a4f8c80c82deaae8901078d08cf76c9dfc09357c60e860c1cbb278aae405088d3a9a6e0ab5cc7b170525d93954e5e2a86ad6b86b4899fa597398d34f064523b42f426b1e2302dc2ab6a1649292b9f2177fdf41a380a9dac10c1cb558b76c6e09f71a564dd099293843d33e29484c4063416bd187155772708454f3d926b9d467e6aaa5c7e0067ed18bb43557f846933e7c8d207896384d9bb45d7c244aef8273675905e640857cd604a86e7e83bdda44fba0dff5b5c8fb927a9b94767e9a0725950da89b64ef8efdd242a5dbc9137415485214d9b8808d3317481bf2dd401797c272a0411820e3cd39bc48491d313427836b95a7f82aef586f8ecccaa1c8b9f708ca69dcaefce10680037c3bbcb2345951b6ee704acae5d16bd3da11409c2c726a41c2c7541fae8d0c16e0d7149368419571041aca0662802f7fac41acdc8ace997d2c64120cac33946b99989ec16cbc6138dd7503cd6ec213eac004f4d0df6c1a70303a0bf667bd0c59e181fcc2aaeaf1120ceedac623042d86d44f39c4c0a2bb4c8063c43074450105bf335970707945db9e1b02e80922faad6bb50ba1d49bfb043d81a4524ca8471e424345ff1cff939908c27a22c699c6866030a942733aefc344669c06baca5c7db8227006db3a4af4195820537484784ac842293912ba2cf2afe93bcf5f88274e4849a3085fc4805c9dae580f6fa7ff022b14dad8ffee4802700e43776958e73ced686cf82df8e6945b2ab256ae831da7d34862dd965d63cbe125ab815c01276da93d8b18de617fcc5c828e6fb0fe3f9482b70032a4181e8186e5a8f1f9c17d83e1db32c22cfa949ab90335175dc49395fd62ac1d4810b42a456053adb5fed38bba4dfb606ddc754fec91226cb733708404c6860550e484601dc2bb56dd292906c029351b6d2a7973b7c9fcbe89e7ddd554c6787d259fbbb1f9c21edf13bfc35e40fe6ffdb9547b3da8be2b7e1358c4fd77faafb4081419e9e6d95ba35a096d04afa87de9a5b4a5c04a5abd0e763e1f5057dfdb446ec1e4f0bbfa5f9f250039ada1c088bd778f474c6a4622896b14e6a3739238257bc61d8543dd34d4e6734f6e81aed2b41dfb8e27f725d63f09e3f47bb36c03731dc2058e30bf19405480c6c3839c5bd7f2dfaf78a499a639b57449435f867ea2b0a0d41f0e74a2723ceaba88dea0e9355a2784b4297f1098496850494e82a3ecba35c4fe7668ff171eddc810d0ba15e1769ac7a39a902a397f20d1ad9cfbe928d3d71d381741b0d1f9c449515c1859ef46e555897be7c81dd60da9d5486d05c0ea07a8a5d7cad5a8f21d53776df388e53a87d89927fd908ca226a9846234ce4e6ad3c4ab77b4b4933c20b2a67f73bd599ef92726d8c1a07fa887904254e86d3d8c610126240f8a31547844df83b1504bbeb49d830cbde368c11faea563ad625d59739485ce0f986e32b23328e6b99155250e602648bd00fa6eadfaaf9f2af145ee0cbed38d942c900a6661ad9e2373dead68b71fe650128ec5cccb8e05add56e911fd15e62e06905c1dcc3918c038fdd6630fd71cd668411193cece59cb879e923a229f4c26df67af131a43db2ba7ad0e4a0ca1f2929beae9b3c859b583397ac3eda65a8c94511873aa68e7beb2814c78952a379bba6b060cf3859cc085d4bfd086567dc6e23d9c1df54918ab07a2f32ba7fa162a90de2336d85b350da1a11d0f5efb11df97bab458a75b263d15e953b2ae023b13d9a206cc6aca5b66c06790d3e235a44e893187ea9d18e506b8a04da6805d4b9ef20ce1419324e99a5fc2f75eb796697462a9df627857deea4d2aa1cb1d4b03c43f98dabc7f6b0aa23966d996a3ff847ffa3615a04dcb1a9581c1397f994cd082d4aa3a2cf29b6b98c7968e1a09259721945ef378fff7a6d4f8e6a4dfed96c3ca48469d419a8803624c5290aa484b6404f023a6b8569aa6d946e6c96e4b2c9211999acff5de5ad58aab52e9893ea2efadf436a122f61ff0937b40a8a8bee530a426f7ec6fc84e9ee0269cbc4685e71b2ee5d18ed4a8ac0376cf292a5258c19905b7fbc232a2f9de00d5467ea687e7d18caa92400103596830aeffb876abd924bad23b42a665c224e5fbb86681347183bf2ed6b1a3110fd01cec5f5bff394acd52cb1b1ee8b52a7d6bd714aeee210aaac83c5c9c0316ca9bc8c2de169fcc4128d95d6b73f1dd009e022722015f0768028f1f88cc9cc799d301ee0f00c939165d008a02309e2941e0692c5599ff8fbbaf117b87cf71b14083a6bdcc526963e156530fdadb1573da5dd1ab2ecc3c0925f3a4c3df39b874dd167efb51b4e1904aafefd4ffca9187f18499886b35aa2a28656b6462ab766bf924b7b1d94dc014b09154af1d130dffaf005b60d229ba95d4db5eaab7540a3bf1576f1914631f465d03f18736f322a37705defe5dbb6474f80dcfd51f9ad54cf6d509b87254c8b329ea6418957bf3c96d0eeb6a29b3a62d0665b90bfabeed1f4d70e7773820fbab7c0d3e1a34e3b538adc065e1ac3fd245a701bf9057291431ddd5851eda3046d837354b965f83646e5bd83d69dfed758ade20b08401b41b4cf34db3eb7ae4bf51327bdc212655376712f093697ee2e30eed64e64201ecddb70e4899096a0c2a5ccb4aa12e5cc962a69adae369a51b1a0fdd55b90cdf4d537d52b49b0c5ce9d9870cfa234d9e9ba9237f7f4fd5d4f868d114baaa25eaa0185c9297166ac1dadef70abb4a159e8f9e01d791fc5e3ff346e5abe235b3a29612f59684093215a2075169af239547f8fe823f53a3c1a9bebb5aaa51f4252def49bd5a504cb5c7bbf6810719a76aa51579202271705c920b936b92c7de9ab9c86213c9f08a2c12c2728b5daa8ca0f85a772bbe2d9774237eb6e2c69af31fa9199c513c248f8f1bfe9893eebcc9bb5289dc0e1fdeaacb9d70b83eb9c3dfddd66096cdc69c873d2256994eaf88f2fbd6b819dd71e9396c420c1920e4e19ab2e2c96637372fecf2b57e1c3dcc402ff160fa91f8247a2fadb8583d24f783770dca6fe02d3253adb17034d76b28a6a32470c12a540b54ebcd1dabe141899c19bc1a3b5342f6715d4ee69e218f3e2544ac5688c95a4d0bb37bf4b16a8aa61c36c1e51040ee857e4fb8b0a957383c0ee2108ec819ed53682f27fe51bb3d451e62f2cf006dcb98ae5ef5869b4ef60a8a36f3efcf674b41f3d8a7fb71e62ee6727e0a061b817254da3359aa5210440cf776fbbdb7b8112415615c55dd684766ac5533f5028668832d46abe742c503e6c8122a02cbbd03570b22ed4a706380a1be91e94627d6c2e319872d205633e2191ddc7549da39f3cca206a0e0c8839fb46894edbab3c7575e5950719d4da7953e230bdf9697f213f7ad11893297c3c33f8bd0772a752c6fdda998f9ee0f20746a3329d6813ece3bf57fcd8daef5bfa58be93ab4d89c1e1da1cf4066a1cd0d13bd55bd30114192763399eadc21d99d1ee414675689343fd7a2d6152d881f1e35d5474a939b47b6ebb968e7e4d3caa9348df50bc15de2356ca1ee748c01d7d8b827785c019e7833ed3ae88423fdef6c63b0a4a021a4082c09d2585e9a82ca68f0da20980c99a42d59044138734cf137bc2632ab1991c0bd4e952d57870e6d2ec1f68a419d3ce384c5cc26eef06a92ad6f65daed40095c791763a3c0eaa941017a9a4919370ecf57f94463761928b3b1d6a9f7b8963dbbfdf3f446de19635353d14a31099d4831ef7584f5dd83e044207e202132a4e922f93e48873c2d77cb3ba27009373300f6833c3e7875267aa63dea383a11003727fc84d87cbcefe438346f3e7ee5016ce2698006eb2b8262cafde205580890098788d996208ca04a4e07695f0405c8511b3c5451d283cd75b54415c94c4504f37b74f94f672a5819ab25d1db31198c92784640b18dab8237f31952543134763ce1bb3a5e98276ac22f6e9a89054106aa7d62690585d4435bed550f1d00f28d2cda82b2c74409e91ca42973bb185339d1abbe00b6c44555d8b99a73d0597d10ad9aaf2d642b2c758bb998a7f9acdedd0f7097bb0b4c5bbc5c9f6ff7fd18431f528031bcd377bd106b38f7cece20e3665de5dd121965a333e6cbaaca8d9f750e9fde9a6292dba1c4c6a5580736324b4560a63640496b6476adeb5bdd5101e28d6ae7c96655c595957cbe88570814bf6ada612bc936df2dadb867d7f8c7d36cafc52449c7d9675cb8d00a502c1501279f37fb9b8076b7b9cf380e0146f53f8b204d7d8b0a0deadc61cca629ae58e322d643b1b77a790cf4c95dd950a1bb15e5f218a095e80001f45d5f3516d6b8017145c7cf57fec4397459446f3e52bef05bca3ada45153f1aa35c626a232a5657a48dc4e3c64c2baf28ddb3c5d8a768c6d9a11c17085fff2b50573db171c1ec3c5b1b88d187ea05f85f1a54e82d594c99ce82d52b7a6a1359d6de86c5804a188514dcb37fd935fe0bfafa01a2f52e01794a75371b34723f70eca1a1159d9144cf3ca1f21494669981cc0c676414cde213725491d9bd99f40a560dc7af65f6167a48e14cc2e10dc9cbdebe493e85224eb0aaed16c865100004e881011c491229d160b4d1a4a9debdb6eb4d0cf088804d47a610c22139d407b2e5318a63b071402c629c26c0b9c972730157080a8061e869e369fe30368fe735fcd90192389f20a02742e48220acd32b8457284d271c3eb0a17acd40a8fe1f50e9ce974bc88d56c4c8ace5773e96e7c2e82901b67fec76ab6c980949ed05b346074278e997b3e882437c295257c9edaabd885a4703c60320b297fd440bd6823d631139c382a65e8da068f037948fffe79d32cbdbc49d5b1b0241b74622a079f7e507ae2b16b03654a32c10f52beb4684c6b55b4b897dfac1dfda4ca1420881b5f747c6000c0e6ac0f081c52994b8e64fc6a2ad2797530e69899b717e7fb48586dc49f7410d4353322708d2f3ea8e75b348df5cabd6c6a1aedff0936c173cba5f7ba1f25507beb2989d06b70871734f7c39831ce641118332b9dd73e0270f8f18188e058051887697c4cdcb19f96d5f14d3b540d98b00629d4ffc773e4a0a043fe4646188693c2d565fe96668c12fa5c91011cca892cdbce1f5062a60714c81b424b4cf3b64d8cf9971a049b0b45612a81f651bd99b52d9ce846c1cbf4a57cbe2080ccd612dbbd774667a675542d01ff696a780681641a6aa57eb43455cd3aaa3440facfef61af4ff98d7257d825e5fa2c598cd76d28f771005cf3329551b1696ec0476dd0d75ba55dd68bbc48b4800d0c05c3fe35958a82943d5bd4f93a802cd2e4d782d71bfe823364d1b5ab47dc08080edecfc7f0ebc9db76e14076629ff6254e9e4ea4d2b85de50d21537c2a0ce766bd3061712f9d234ed2ee064a2658d9589f12282dc578bcc23f69054fdf0db6dd651cc8ab2a0492184eb96303a09724795d4d189eba4d1c3521191210d07b0ef7ce164ea08b683d377121aa04cd8d28b0aaa858d19d2fa2f8e1bc6e439f3bf930b3cbf4f9d5d32b2f37fe07040ab8c0f7120f75468bbf2f11168ee4d5c1d8350392049e48d5c7c78ef33cb00535230f9b52df348e57d066f573d5281dc349692cc55c62cdb7cc66187a2110283359466e54e82653abb11ca8c2f218ae342c5c42f365b7a9310966ceddaacc7ab1d8563f20a2fb299a7d65892341d41df939faffffa293ccacccafa64fd934", 0x2000, &(0x7f0000006e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002500)={0x78, 0x0, 0x80000001, {0x7f, 0xfffffff8, 0x0, {0x5, 0x7, 0x8, 0xffffffffffffffff, 0x45, 0x800, 0x8, 0x3, 0x2, 0x2000, 0xffffffff, 0x0, 0x0, 0x3, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=@migrate={0x200, 0x21, 0x2, 0x70bd28, 0x25dfdbfc, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@remote, 0x4e21, 0x2, 0x4e22, 0x6, 0xa, 0x100, 0x90, 0x5c}, 0x6e6bb1, 0x1}, [@algo_comp={0xff, 0x3, {{'lzjh\x00'}, 0x5b8, "6d5de62930f0b2ca3ed730290ad54eeb73d225fe25b6995f40cb83262548d6146ecc41d286525bf97ab8d28b420300f535acb28691835114f62b9bca008019fb95a6e3d41c87039615879f2ed19f894b34bdafce33372631f51995908398fc70b902accf86a349416d5f4f1cd55cabbf2f0e88142a67c856119e09136afc2bf6ea811aab008b08cad6111d3fdc22cb85b4e6f90e1b125cade3294cb415da5731ccf091e95965da825c8ad3264512daa0ce025158477179"}}, @extra_flags={0x8, 0x18, 0x6}, @algo_crypt={0x7d, 0x2, {{'xchacha20-generic\x00'}, 0x1a8, "1dd6f14dd57e073a21e938ac6bf5ab51054b57f4330a69f07e040e1905bb08ef8f9097a8f7fed8b75c539305aba0efeebc8d3d6888"}}, @address_filter={0x28, 0x1a, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x2, 0x8, 0x4}}]}, 0x200}, 0x1, 0x0, 0x0, 0x8080}, 0x4004) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e000006a001c0000000000000000000000080000", @ANYRES64], 0x38}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x8000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) mlock2(&(0x7f000027f000/0x2000)=nil, 0x2000, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r4) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x80}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xec, 0x10, 0x200, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x9, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x2000, 0xa, 0x0, 0x0, 0x33}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc, 0xfffffffc}, 0x70bd27, 0x0, 0x2, 0x0, 0x2}}, 0xec}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB="20200100", @ANYRES32=0x0, @ANYBLOB="01000300ac1e000100000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 1.704134754s ago: executing program 2 (id=4849): r0 = socket$packet(0x11, 0x2, 0x300) signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) socket(0x10, 0x3, 0x0) socket(0x2b, 0x80801, 0x1) set_mempolicy(0x2, 0x0, 0xf5) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000e80)="632a1eb3f0c0d7e1f3e8d83e8279b7e98f2a563510c1fcfd07c0d1e58d723f809bb0322337f15e8d329d0926517a3148030a1d29dd671ac729d9cef6e520827a2201ccd77c7dc703e9116d512859f12dceb0dad478a2369aba7403b262e45c11c1290b59d473d3beb8d3a31bc7f5dcd1a708ed0be6f4770112b98b16c93db109594b2a4b04efb89f5ef215ff6d9d93fb8edbcf8d1c62b39759c68e1a184914791d5462c363b80e38ea6cd8556c46c6252445e967b63edceb1040badab4eef2ef162c734cb8052dabd2bfedbdfd0b22bdc6b9dc0fca9b566b32c4dc85d26161877f60652000000031ae091ccaa53c0faf409dee0d109e684a93bc32e715052d24d7349df7bdaa7aea658d7b0a53376ca1c71ad1a878ceacf5ce8a8c64ace50f4d18f1027b9efc61a4b4a61e4b323fad5c47e4341c1292d0d1c1e15582399572a3f2983e1a15eb78767b87da6d3da400d215326419919de0df00007736000000000000000000edd0c789d37a7dcf3f5b8c9aa5329c38e2ed4c0fe3a0eae2a169c0322b4e5b96dd251a4477da4961b81a965463617e444bfac080d03ac4fbf2d0c40e22aed01bea5ce1b4ca5e0b249366f1b777a13fcfad3d0a047371d2169230d0d0597e10f58c8e2b20cf205740044c15fab6d52121b0a6b2c122096848d4e29e968e20c1615b1e11c61d8e0c58fe667224e89b83ef29e04c0c6fdf73c50bf051d8651613e5bf65f9e91a91f5ce1080bcbad3aa36f82e9d367cb537444e25cdc8c21b60216d540ac605f39e02950b5af27d81a80cddc1a96754465fe43887165f7dc70939eefaf15dce85857c9329b2bbdcf10f5c85f110a42bcc3489b45f3ffd8a8fadf90cf9a6e35674a89b740ddc", 0x26f}, {&(0x7f0000000580)="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", 0x211}], 0x2, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) clock_settime(0xfffffff5, &(0x7f0000000040)) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x11, 0x1, 0x8, 0x6, 0x4, 0x4, 0x18da188d}, 0x1c) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = fsopen(&(0x7f0000000000)='hpfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00), 0x0) 1.608417591s ago: executing program 1 (id=4850): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = socket(0x2b, 0x80801, 0x1) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x86}}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@uncond, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7fff, 0x9, 0x7, 'syz0\x00', {0x719}}}}, {{@ipv6={@private0, @private2, [0xff, 0x0, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'tunl0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x4, 0x9456fff08070a538, 0x70}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x82b, 0x0, 0x0, 'syz0\x00', 'syz0\x00', {0x8000800000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x0, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000570000/0x4000)=nil, 0x4000, 0x9) r4 = fsopen(&(0x7f0000000180)='msdos\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0xffffff60, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4000805}, 0x10) 742.049951ms ago: executing program 0 (id=4851): socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000000), &(0x7f0000000080)=0x4) gettid() ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) fcntl$notify(0xffffffffffffffff, 0x402, 0x69) syz_open_dev$vim2m(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0cc5605, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000340)=""/161) mount$fuse(0xe000000, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x9c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xb}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x68, 0x2, [@TCA_MATCHALL_ACT={0x64, 0x2, [@m_ife={0x60, 0x5, 0x0, 0x0, {{0x8}, {0x4}, {0x35, 0x6, "c7475495adfa40d0663dc7601424f5bfe6d93b8608a6b99f8a140078876a6962e13617ab0a0f94fdf65d0f54e22af0994a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x88d0) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfafffff7, 0x3]}, 0x8, 0x0) readv(r7, &(0x7f0000002940)=[{&(0x7f0000000000)=""/93, 0x5d}, {0x0, 0x3c}], 0x2) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000001000/0x3000)=nil, 0x3000}, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000680)={0x0, 0x7fff, 0x1, [0x1, 0x7, 0x10000, 0x5, 0xd], [0x4, 0x3, 0x9, 0xfffffffffffffff7, 0x2, 0x2, 0x2, 0x7, 0x4003, 0x3, 0x8000, 0x6, 0x9, 0x2dad, 0x7ff, 0x4, 0x0, 0xffffffff, 0x2, 0x7fff7fff, 0x0, 0x0, 0x6, 0x7fffffffffffffff, 0x4, 0x6, 0x2, 0x8, 0x0, 0x7, 0x8388, 0x7, 0x99a, 0x401, 0x5, 0x7f, 0x1dcd479, 0x0, 0x9e36, 0xfffffffffffffffe, 0x40, 0x5, 0xffff, 0xa, 0xfffffffffffffffb, 0xa1d, 0x6, 0x8, 0x15, 0x4, 0x8, 0x7ffb, 0xf, 0xc, 0x8, 0x5, 0xb, 0xfffffffffffffffe, 0x0, 0x3, 0x5, 0x7, 0xfffffffffffffff7, 0x37, 0x8000, 0x100, 0x8, 0xbb7, 0x7f, 0x3, 0x40, 0x2, 0x2, 0xffffffffffffffff, 0xfe8e, 0x5, 0x3, 0x117, 0x5, 0x6, 0x7, 0x5, 0xfffffffffffff9e4, 0x0, 0x3, 0x1, 0xfffffffffffffffa, 0x3, 0xfffffffffffffff7, 0x6000000000000000, 0x27, 0x3, 0x4, 0xffffffffffffffff, 0x800, 0x7fffffff, 0xd, 0x0, 0x27e241bf, 0xffffffffffffffff, 0x1, 0xc, 0x6, 0x8, 0xf, 0x3ff, 0x1, 0x7f, 0x6, 0x5, 0x0, 0x9, 0x80000001, 0x1, 0x5, 0x1000, 0x6, 0xa2b8, 0x80000001, 0x2, 0x801]}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800150000000000ffffffff0a0000000202000000000000240009801c00000000000000140005"], 0x40}], 0x1}, 0x0) 493.253874ms ago: executing program 1 (id=4852): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x1) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x40, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) io_setup(0xffffff7f, &(0x7f0000000280)=0x0) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) io_submit(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x2, 0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0x400caed0, &(0x7f0000000080)={0x2, r5, 0xffffffff}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$clear(0x7, r7) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upd'], 0x1a, 0xffffffffffffffff) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41480}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x401}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_emit_vhci(0x0, 0x15) 361.19378ms ago: executing program 3 (id=4853): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) socket$inet6(0xa, 0x3, 0x1) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f023}) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) fcntl$dupfd(r1, 0x0, r1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc001}, 0x800) fsopen(&(0x7f00000006c0)='nfsd\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000002540)=[{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)="8256a3f765617d33111f6e95c27940f2", 0x10}], 0x1, 0x0, 0x0, 0x404c045}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 0s ago: executing program 4 (id=4854): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x1) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x40, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) io_setup(0xffffff7f, &(0x7f0000000280)=0x0) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) io_submit(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x2, 0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0x400caed0, &(0x7f0000000080)={0x2, r5, 0xffffffff}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$clear(0x7, r7) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upd'], 0x1a, 0xffffffffffffffff) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41480}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x401}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_emit_vhci(0x0, 0x15) kernel console output (not intermixed with test programs): 102][ T8958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2660.676346][ T45] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 2660.964170][ T45] ftdi_sio 5-1:0.0: GPIO initialisation failed: -32 [ 2660.991330][ T45] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2661.183074][T20625] usb 1-1: USB disconnect, device number 96 [ 2661.629080][ T8963] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4401'. [ 2661.849880][T20625] usb 2-1: USB disconnect, device number 106 [ 2662.020862][ T5868] usb 3-1: USB disconnect, device number 112 [ 2662.973978][ T5868] usb 5-1: USB disconnect, device number 100 [ 2663.001077][ T5868] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2663.070450][ T5868] ftdi_sio 5-1:0.0: device disconnected [ 2664.226651][ T9203] netlink: 'syz.4.4411': attribute type 4 has an invalid length. [ 2664.234469][ T9203] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4411'. [ 2664.509170][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 2664.509189][ T30] audit: type=1326 audit(1757944572.485:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9187 comm="syz.1.4407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 2664.593118][ T30] audit: type=1326 audit(1757944572.485:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9187 comm="syz.1.4407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 2664.877145][ T30] audit: type=1326 audit(1757944572.485:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9187 comm="syz.1.4407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 2664.902743][ T30] audit: type=1326 audit(1757944572.495:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9187 comm="syz.1.4407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 2664.929724][ T30] audit: type=1326 audit(1757944572.495:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9187 comm="syz.1.4407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 2665.535099][ T4532] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 2665.582186][ T30] audit: type=1326 audit(1757944572.495:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9187 comm="syz.1.4407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 2665.719816][ T4532] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2665.757642][ T30] audit: type=1326 audit(1757944572.495:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9187 comm="syz.1.4407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 2665.810807][ T30] audit: type=1326 audit(1757944572.495:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9187 comm="syz.1.4407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 2665.876969][ T30] audit: type=1326 audit(1757944572.495:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9187 comm="syz.1.4407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 2665.909871][ T4532] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2666.072418][ T30] audit: type=1326 audit(1757944572.535:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9187 comm="syz.1.4407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 2666.098429][ T4532] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2666.214245][ T4532] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2666.224949][ T4532] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2666.238823][ T4532] usb 1-1: Product: syz [ 2666.252171][ T4532] usb 1-1: Manufacturer: syz [ 2666.257050][ T4532] usb 1-1: SerialNumber: syz [ 2666.380551][ T4532] hub 1-1:1.0: bad descriptor, ignoring hub [ 2666.504719][ T4532] hub 1-1:1.0: probe with driver hub failed with error -5 [ 2666.595304][ T4532] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 97 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2667.172449][ T9] usb 1-1: USB disconnect, device number 97 [ 2667.189597][ T9] usblp0: removed [ 2667.366242][ T9202] delete_channel: no stack [ 2667.566451][ T9328] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4416'. [ 2668.046175][ T5868] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 2668.242421][ T9] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 2668.264318][ T5868] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2668.374238][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2668.414335][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2668.450422][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2668.497097][ T5868] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2668.534467][ T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2668.560258][ T5868] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2668.570467][ T5868] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2668.590626][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2668.610161][ T5868] usb 4-1: Manufacturer: syz [ 2668.636379][ T5868] usb 4-1: config 0 descriptor?? [ 2668.641443][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2668.688843][ T9338] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2668.715073][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2668.965302][ T9335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4417'. [ 2669.084410][ T5868] appleir 0003:05AC:8243.0062: item fetching failed at offset 0/1 [ 2669.177406][ T5868] appleir 0003:05AC:8243.0062: parse failed [ 2669.198974][ T5868] appleir 0003:05AC:8243.0062: probe with driver appleir failed with error -22 [ 2670.925080][ T9] usb 3-1: USB disconnect, device number 113 [ 2671.052225][ T5868] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 2671.110091][ T4532] usb 4-1: USB disconnect, device number 110 [ 2671.208978][ T5868] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2671.225175][ T5868] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2671.238860][ T5868] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2671.257629][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2671.274479][ T5868] usb 2-1: Product: syz [ 2671.282601][ T5868] usb 2-1: Manufacturer: syz [ 2671.289138][ T5868] usb 2-1: SerialNumber: syz [ 2671.741702][ T4532] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 2672.284190][ T4532] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2672.400131][ T4532] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2672.421401][ T4532] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2672.435301][ T4532] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2672.491466][ T4532] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2672.502633][ T4532] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2672.525270][ T4532] usb 3-1: Manufacturer: syz [ 2672.567365][ T4532] usb 3-1: config 0 descriptor?? [ 2673.007054][ T4532] appleir 0003:05AC:8243.0063: item fetching failed at offset 0/1 [ 2673.024160][ T4532] appleir 0003:05AC:8243.0063: parse failed [ 2673.042286][ T4532] appleir 0003:05AC:8243.0063: probe with driver appleir failed with error -22 [ 2674.473104][ T45] syz_tun: tun_net_xmit 110 [ 2674.596948][ T45] syz_tun: tun_net_xmit 90 [ 2674.632407][ T45] syz_tun: tun_net_xmit 110 [ 2674.843980][ T5868] usb 2-1: cannot find UAC_HEADER [ 2674.908431][ T5868] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2675.037596][ T5868] usb 2-1: USB disconnect, device number 107 [ 2675.116116][ T3792] udevd[3792]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2675.331869][ T45] syz_tun: tun_net_xmit 90 [ 2675.714905][T27745] usb 3-1: USB disconnect, device number 114 [ 2676.297962][ T9610] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4433'. [ 2677.371602][ T45] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 2677.567211][ T45] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2677.580248][ T45] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2677.598752][ T45] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2677.839597][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2677.900667][ T9622] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2677.987382][ T45] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2678.368025][ T9622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4435'. [ 2679.243800][ T9747] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4441'. [ 2681.223115][T27745] usb 1-1: USB disconnect, device number 98 [ 2681.644769][ T5868] syz_tun: tun_net_xmit 110 [ 2681.721856][ T4532] syz_tun: tun_net_xmit 90 [ 2681.781976][ T9] syz_tun: tun_net_xmit 110 [ 2682.532092][ T4532] syz_tun: tun_net_xmit 90 [ 2682.864317][ T9989] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4449'. [ 2683.157974][ T9989] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 2683.178573][ T9989] netlink: 'syz.0.4449': attribute type 8 has an invalid length. [ 2685.140393][T10013] netlink: 'syz.1.4453': attribute type 4 has an invalid length. [ 2685.148365][T10013] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4453'. [ 2685.914179][T10020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4456'. [ 2685.923407][T10020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4456'. [ 2685.932525][T10020] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4456'. [ 2686.131078][T10024] netlink: 'syz.3.4457': attribute type 10 has an invalid length. [ 2686.263233][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 2686.263252][ T30] audit: type=1326 audit(1757944594.255:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10025 comm="syz.3.4459" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2686.643473][ T45] syz_tun: tun_net_xmit 110 [ 2686.666808][ T4532] syz_tun: tun_net_xmit 90 [ 2686.723926][ T30] audit: type=1326 audit(1757944594.255:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10025 comm="syz.3.4459" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2686.785719][ T30] audit: type=1326 audit(1757944594.255:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10025 comm="syz.3.4459" exe="/root/syz-executor" sig=0 arch=40000003 syscall=433 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2686.810411][ T30] audit: type=1326 audit(1757944594.255:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10025 comm="syz.3.4459" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2686.999748][ T30] audit: type=1326 audit(1757944594.285:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10025 comm="syz.3.4459" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2687.205964][ T30] audit: type=1326 audit(1757944594.285:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10025 comm="syz.3.4459" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2687.346744][ T30] audit: type=1326 audit(1757944594.285:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10025 comm="syz.3.4459" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2687.492255][ T45] syz_tun: tun_net_xmit 110 [ 2687.658694][ T45] syz_tun: tun_net_xmit 90 [ 2688.221248][T10011] delete_channel: no stack [ 2688.754460][ T45] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 2689.002193][ T9] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 2689.056009][ T45] usb 4-1: config 0 has no interfaces? [ 2689.065759][ T45] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2689.118514][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2689.202104][ T45] usb 4-1: Product: syz [ 2689.322380][ T45] usb 4-1: Manufacturer: syz [ 2689.378837][ T45] usb 4-1: SerialNumber: syz [ 2689.397729][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2689.405317][ T45] usb 4-1: config 0 descriptor?? [ 2689.454159][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2689.971346][ T45] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 2689.991440][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2690.222431][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2690.258589][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2690.272171][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2690.395369][ T45] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2690.407425][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2690.448719][ T45] usb 3-1: SerialNumber: syz [ 2690.448730][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2690.448756][ T9] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2690.448775][ T9] usb 1-1: Manufacturer: syz [ 2690.685165][T10172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2690.696717][T10172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2690.787954][ T9] usb 1-1: config 0 descriptor?? [ 2691.061873][ T4532] usb 4-1: USB disconnect, device number 111 [ 2691.272929][ T9] appleir 0003:05AC:8243.0064: item fetching failed at offset 0/1 [ 2691.312347][ T9] appleir 0003:05AC:8243.0064: parse failed [ 2691.345933][ T9] appleir 0003:05AC:8243.0064: probe with driver appleir failed with error -22 [ 2692.692378][T27745] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 2692.792908][T10297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4471'. [ 2692.921457][T27745] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2693.022094][T27745] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2693.091449][T27745] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2693.155076][T27745] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2693.175134][T20625] usb 1-1: USB disconnect, device number 99 [ 2693.359461][T27745] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2693.370817][T27745] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2693.400913][T27745] usb 2-1: Manufacturer: syz [ 2693.430172][T27745] usb 2-1: config 0 descriptor?? [ 2693.844520][ T45] usb 3-1: 0:2 : does not exist [ 2693.909557][ T45] usb 3-1: unit 5: unexpected type 0x0c [ 2693.918271][T27745] appleir 0003:05AC:8243.0065: item fetching failed at offset 0/1 [ 2693.936512][T27745] appleir 0003:05AC:8243.0065: parse failed [ 2693.958331][T27745] appleir 0003:05AC:8243.0065: probe with driver appleir failed with error -22 [ 2694.023404][ T45] usb 3-1: USB disconnect, device number 115 [ 2694.749160][T27745] syz_tun: tun_net_xmit 110 [ 2694.787588][T27745] syz_tun: tun_net_xmit 90 [ 2694.822583][ T45] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 2695.014434][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 2695.055088][ T45] usb 3-1: config 0 has an invalid interface number: 56 but max is 0 [ 2695.064459][ T45] usb 3-1: config 0 has no interface number 0 [ 2695.182823][ T45] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 2695.203958][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2695.249669][ T45] usb 3-1: Product: syz [ 2695.252576][T18843] syz_tun: tun_net_xmit 110 [ 2695.266281][ T45] usb 3-1: Manufacturer: syz [ 2695.279391][ T45] usb 3-1: SerialNumber: syz [ 2695.401856][ T45] usb 3-1: config 0 descriptor?? [ 2695.573802][T27745] syz_tun: tun_net_xmit 90 [ 2695.718541][ T45] peak_usb 3-1:0.56: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 2695.919807][ T45] peak_usb 3-1:0.56 can0: sending command failure: -22 [ 2695.931554][ T45] peak_usb 3-1:0.56 can0: sending command failure: -22 [ 2696.021598][ T45] peak_usb 3-1:0.56 can0: sending command failure: -22 [ 2696.292796][ T45] peak_usb 3-1:0.56: probe with driver peak_usb failed with error -22 [ 2696.335147][ T45] usb 2-1: USB disconnect, device number 108 [ 2696.865587][ T45] usb 3-1: USB disconnect, device number 116 [ 2697.969260][T27745] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 2698.540166][T27745] usb 5-1: config 0 has no interfaces? [ 2698.566186][T27745] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2698.575364][T27745] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2698.602140][T10537] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.4482'. [ 2698.614389][T27745] usb 5-1: Product: syz [ 2698.621147][T27745] usb 5-1: Manufacturer: syz [ 2698.630738][T27745] usb 5-1: SerialNumber: syz [ 2698.674964][T27745] usb 5-1: config 0 descriptor?? [ 2699.001720][ T45] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 2699.257436][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 2699.277799][ T45] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 2699.346654][ T45] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2699.378243][ T45] usb 1-1: config 0 has no interface number 0 [ 2699.393357][ T45] usb 1-1: config 0 interface 133 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2699.704532][ T45] usb 1-1: config 0 interface 133 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2699.803901][ T45] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 2699.835633][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2699.864191][ T45] usb 1-1: Product: syz [ 2700.122794][ T45] usb 1-1: Manufacturer: syz [ 2700.173506][ T45] usb 1-1: SerialNumber: syz [ 2700.803357][ T45] usb 1-1: config 0 descriptor?? [ 2701.087578][ T45] usb 1-1: probing VID:PID(0424:012C) [ 2701.110921][ T45] usb 1-1: vub300 testing UNKNOWN EndPoint(0) 0B [ 2701.145201][ T45] usb 1-1: vub300 ignoring EndPoint(0) 0B [ 2701.269308][ T45] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 2701.311715][ T45] vub300 1-1:0.133: probe with driver vub300 failed with error -22 [ 2701.360708][T27745] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 2701.412365][ T45] usb 1-1: USB disconnect, device number 100 [ 2701.508810][T18843] usb 5-1: USB disconnect, device number 101 [ 2701.539440][T27745] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2701.553828][T27745] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2701.578431][T27745] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2701.675027][T27745] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2701.720812][T27745] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2701.739955][T27745] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2701.748917][T27745] usb 2-1: Manufacturer: syz [ 2701.778247][T27745] usb 2-1: config 0 descriptor?? [ 2702.112162][T10880] tipc: Enabling of bearer rejected, failed to enable media [ 2702.124121][T10880] tipc: Enabled bearer , priority 0 [ 2702.230886][T27745] appleir 0003:05AC:8243.0066: item fetching failed at offset 0/1 [ 2702.274041][T27745] appleir 0003:05AC:8243.0066: parse failed [ 2702.366912][T27745] appleir 0003:05AC:8243.0066: probe with driver appleir failed with error -22 [ 2702.422170][T18843] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 2702.466695][T10888] Invalid option length (64407) for dns_resolver key [ 2702.633280][T18843] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2702.645010][T18843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2702.688109][T18843] usb 4-1: Product: syz [ 2702.694831][T18843] usb 4-1: Manufacturer: syz [ 2702.701724][T18843] usb 4-1: SerialNumber: syz [ 2702.717472][T18843] usb 4-1: config 0 descriptor?? [ 2703.873040][T18843] usb 4-1: Firmware: major: 130, minor: 102, hardware type: HULUSB (4) [ 2704.089247][T18843] usb 4-1: failed to fetch extended address, random address set [ 2704.243848][T18843] usb 4-1: USB disconnect, device number 112 [ 2705.222686][T27745] usb 2-1: USB disconnect, device number 109 [ 2706.111996][T10927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4499'. [ 2706.138938][ T45] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 2706.410743][ T45] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2706.441575][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2706.501695][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2706.526329][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2706.638544][ T45] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2706.668138][ T45] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2706.707999][ T45] usb 1-1: Manufacturer: syz [ 2706.762430][ T45] usb 1-1: config 0 descriptor?? [ 2707.268696][ T45] appleir 0003:05AC:8243.0067: item fetching failed at offset 0/1 [ 2707.412625][ T45] appleir 0003:05AC:8243.0067: parse failed [ 2707.482476][ T45] appleir 0003:05AC:8243.0067: probe with driver appleir failed with error -22 [ 2708.142190][ T9] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 2708.302380][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 2708.315039][ T9] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 2708.326603][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2708.347763][ T9] usb 5-1: config 0 has no interface number 0 [ 2708.563659][ T9] usb 5-1: config 0 interface 133 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2708.581931][ T9] usb 5-1: config 0 interface 133 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2708.599382][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 2708.609566][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2708.620132][ T9] usb 5-1: Product: syz [ 2708.625295][ T9] usb 5-1: Manufacturer: syz [ 2708.630050][ T9] usb 5-1: SerialNumber: syz [ 2708.647136][ T9] usb 5-1: config 0 descriptor?? [ 2708.877194][ T9] usb 5-1: probing VID:PID(0424:012C) [ 2708.894580][ T9] usb 5-1: vub300 testing UNKNOWN EndPoint(0) 0B [ 2708.933840][ T9] usb 5-1: vub300 ignoring EndPoint(0) 0B [ 2708.984564][ T9] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 2709.006339][ T9] vub300 5-1:0.133: probe with driver vub300 failed with error -22 [ 2709.104007][ T9] usb 5-1: USB disconnect, device number 102 [ 2709.209503][ T45] usb 1-1: USB disconnect, device number 101 [ 2710.248942][T10961] trusted_key: encrypted_key: insufficient parameters specified [ 2710.807902][T10958] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4502'. [ 2711.598728][ T9] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 2711.939627][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2712.000081][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2712.135225][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2712.179958][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2712.377909][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2712.390613][ T9] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2712.419259][ T9] usb 4-1: Manufacturer: syz [ 2712.435587][ T9] usb 4-1: config 0 descriptor?? [ 2713.084671][ T9] appleir 0003:05AC:8243.0068: item fetching failed at offset 0/1 [ 2713.152081][ T9] appleir 0003:05AC:8243.0068: parse failed [ 2713.158154][ T9] appleir 0003:05AC:8243.0068: probe with driver appleir failed with error -22 [ 2713.497171][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.504305][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 2714.462470][T18843] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 2714.666469][T27745] usb 4-1: USB disconnect, device number 113 [ 2714.782835][T18843] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2714.794316][T18843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2714.822636][T18843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2714.847544][T18843] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2715.338029][T18843] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2715.348532][T18843] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2715.359223][T18843] usb 2-1: Manufacturer: syz [ 2715.366423][T18843] usb 2-1: config 0 descriptor?? [ 2715.444787][T27745] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 2715.638318][T27745] usb 4-1: config 0 has no interfaces? [ 2715.672771][T27745] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2715.684774][T27745] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2715.703573][T27745] usb 4-1: Product: syz [ 2715.725061][T27745] usb 4-1: Manufacturer: syz [ 2715.740328][T27745] usb 4-1: SerialNumber: syz [ 2715.753824][T27745] usb 4-1: config 0 descriptor?? [ 2715.869782][T18843] appleir 0003:05AC:8243.0069: item fetching failed at offset 0/1 [ 2715.896315][T18843] appleir 0003:05AC:8243.0069: parse failed [ 2715.922815][T18843] appleir 0003:05AC:8243.0069: probe with driver appleir failed with error -22 [ 2717.632097][ T2242] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 2717.786910][T11134] netlink: 'syz.2.4521': attribute type 10 has an invalid length. [ 2717.931061][T18843] usb 2-1: USB disconnect, device number 110 [ 2718.259010][T18843] usb 4-1: USB disconnect, device number 114 [ 2719.420667][ T2242] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2719.895098][ T2242] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2720.482972][ T2242] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2720.574227][ T2242] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2720.619410][ T2242] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2720.666697][ T2242] usb 1-1: config 0 descriptor?? [ 2720.725111][ T2242] usb 1-1: can't set config #0, error -71 [ 2720.751058][ T2242] usb 1-1: USB disconnect, device number 102 [ 2721.378517][T11171] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.4528'. [ 2721.422218][T11171] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4528'. [ 2722.201606][ T45] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 2722.437122][ T45] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2722.594242][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2722.639383][ T45] usb 2-1: Product: syz [ 2722.654131][ T45] usb 2-1: Manufacturer: syz [ 2722.761527][ T45] usb 2-1: SerialNumber: syz [ 2722.784101][ T45] usb 2-1: config 0 descriptor?? [ 2722.896653][T11286] netlink: 'syz.4.4534': attribute type 10 has an invalid length. [ 2722.919134][T11286] 8021q: adding VLAN 0 to HW filter on device team0 [ 2723.688993][T11397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2723.710417][T11397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2724.008320][ T2242] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 2724.035541][T27745] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 2724.047132][T27745] hid-generic 0000:0000:0000.006A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2724.642239][ T2242] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2724.685676][ T2242] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2724.737241][ T2242] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2724.777934][ T2242] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2724.922746][ T2242] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2724.991523][ T2242] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2725.012321][ T2242] usb 4-1: Manufacturer: syz [ 2725.037140][ T2242] usb 4-1: config 0 descriptor?? [ 2725.332121][T11411] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 2725.684569][ T2242] appleir 0003:05AC:8243.006B: item fetching failed at offset 0/1 [ 2725.693934][ T2242] appleir 0003:05AC:8243.006B: parse failed [ 2725.695041][T11411] @0: renamed from bond_slave_1 [ 2725.699961][ T2242] appleir 0003:05AC:8243.006B: probe with driver appleir failed with error -22 [ 2726.406531][ T45] usb 2-1: USB disconnect, device number 111 [ 2726.837438][T18843] syz_tun: tun_net_xmit 110 [ 2727.470227][T18843] syz_tun: tun_net_xmit 90 [ 2727.670975][T27745] syz_tun: tun_net_xmit 110 [ 2727.839214][ T30] audit: type=1326 audit(1757944635.825:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11536 comm="syz.0.4542" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x0 [ 2728.071597][ T45] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 2728.512620][T27745] syz_tun: tun_net_xmit 90 [ 2728.526903][T27745] usb 4-1: USB disconnect, device number 115 [ 2728.577284][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2728.592556][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2728.652358][T18843] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 2728.704084][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2728.741955][ T45] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2728.751264][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2729.126370][T18843] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 2729.136685][T18843] usb 1-1: config 0 has an invalid descriptor of length 237, skipping remainder of the config [ 2729.155640][T18843] usb 1-1: config 0 has no interface number 0 [ 2729.162748][T18843] usb 1-1: config 0 interface 20 altsetting 119 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 2729.276274][T18843] usb 1-1: config 0 interface 20 altsetting 119 has an endpoint descriptor with address 0x6E, changing to 0xE [ 2729.290007][ T45] usb 5-1: config 0 descriptor?? [ 2729.421843][T18843] usb 1-1: config 0 interface 20 altsetting 119 endpoint 0xE has invalid maxpacket 56345, setting to 64 [ 2729.465763][T18843] usb 1-1: config 0 interface 20 altsetting 119 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 2729.714234][T18843] usb 1-1: config 0 interface 20 has no altsetting 0 [ 2729.726850][T18843] usb 1-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= d.05 [ 2729.757283][T18843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2729.777312][T18843] usb 1-1: Product: syz [ 2729.792027][T18843] usb 1-1: Manufacturer: syz [ 2729.874277][T18843] usb 1-1: SerialNumber: syz [ 2729.898339][T18843] usb 1-1: config 0 descriptor?? [ 2730.023737][T11544] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 2730.245117][T11540] netlink: 41 bytes leftover after parsing attributes in process `syz.0.4542'. [ 2730.254884][T11540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4542'. [ 2730.607639][ T45] usbhid 5-1:0.0: can't add hid device: -71 [ 2730.614976][ T45] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2730.700844][ T45] usb 5-1: USB disconnect, device number 103 [ 2731.418466][T18843] keyspan 1-1:0.20: Keyspan 1 port adapter converter detected [ 2731.434587][T18843] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 87 [ 2731.452034][T27745] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 2731.514461][T18843] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 7 [ 2731.553471][T18843] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 81 [ 2731.589666][T18843] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 1 [ 2731.607030][T18843] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 2 [ 2731.615855][T18843] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 85 [ 2731.670810][T27745] usb 2-1: Using ep0 maxpacket: 32 [ 2731.716668][T27745] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 2731.726570][T27745] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2731.780594][T18843] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 5 [ 2731.792237][T27745] usb 2-1: config 0 has no interface number 0 [ 2731.835939][T27745] usb 2-1: config 0 interface 133 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2731.860405][T18843] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2731.918565][T27745] usb 2-1: config 0 interface 133 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2731.953689][T18843] usb 1-1: USB disconnect, device number 103 [ 2731.964390][T27745] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 2731.974987][T27745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2731.989214][T27745] usb 2-1: Product: syz [ 2731.995938][T27745] usb 2-1: Manufacturer: syz [ 2732.002337][T18843] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2732.016343][T18843] keyspan 1-1:0.20: device disconnected [ 2732.022862][T27745] usb 2-1: SerialNumber: syz [ 2732.034949][T27745] usb 2-1: config 0 descriptor?? [ 2732.377272][ T5868] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 2732.773587][T27745] usb 2-1: probing VID:PID(0424:012C) [ 2732.786426][T27745] usb 2-1: vub300 testing UNKNOWN EndPoint(0) 0B [ 2732.794688][T27745] usb 2-1: vub300 ignoring EndPoint(0) 0B [ 2732.800510][T27745] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 2732.869433][T27745] vub300 2-1:0.133: probe with driver vub300 failed with error -22 [ 2732.878420][ T5868] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2732.910908][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2732.928274][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2732.954109][T27745] usb 2-1: USB disconnect, device number 112 [ 2732.982224][ T5868] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2733.017460][ T5868] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2733.034903][ T5868] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2733.091078][ T5868] usb 4-1: Manufacturer: syz [ 2733.132050][ T5868] usb 4-1: config 0 descriptor?? [ 2733.412129][ T9] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 2733.568921][ T5868] appleir 0003:05AC:8243.006C: item fetching failed at offset 0/1 [ 2733.578672][ T5868] appleir 0003:05AC:8243.006C: parse failed [ 2733.662675][ T9] usb 1-1: config 170 has no interfaces? [ 2733.744690][ T9] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2733.759087][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2733.769179][ T5868] appleir 0003:05AC:8243.006C: probe with driver appleir failed with error -22 [ 2733.908613][ T9] usb 1-1: Product: syz [ 2733.917509][ T9] usb 1-1: Manufacturer: syz [ 2733.949166][ T9] usb 1-1: SerialNumber: syz [ 2734.414950][ T5868] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 2735.076627][ T5868] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2735.092670][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2735.105314][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2735.188970][ T5868] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2735.302041][ T5868] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2735.311736][ T5868] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2735.328248][ T5868] usb 2-1: Manufacturer: syz [ 2735.412823][ T5868] usb 2-1: config 0 descriptor?? [ 2735.467390][ T9] usb 1-1: USB disconnect, device number 104 [ 2735.842215][ T45] usb 4-1: USB disconnect, device number 116 [ 2735.938279][ T5868] appleir 0003:05AC:8243.006D: item fetching failed at offset 0/1 [ 2735.954673][ T5868] appleir 0003:05AC:8243.006D: parse failed [ 2735.960977][ T5868] appleir 0003:05AC:8243.006D: probe with driver appleir failed with error -22 [ 2737.197320][T11727] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 2738.124847][T20625] usb 2-1: USB disconnect, device number 113 [ 2738.486347][T11739] tipc: Enabled bearer , priority 10 [ 2738.496285][T11739] tipc: Enabled bearer , priority 0 [ 2738.798991][T11741] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4562'. [ 2738.811835][T20625] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 2739.118093][T20625] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2739.131773][T20625] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2739.193182][T20625] usb 1-1: Product: syz [ 2739.198710][T20625] usb 1-1: Manufacturer: syz [ 2739.205525][T20625] usb 1-1: SerialNumber: syz [ 2739.229482][T20625] usb 1-1: config 0 descriptor?? [ 2739.919250][T20625] usb 1-1: Firmware: major: 130, minor: 102, hardware type: HULUSB (4) [ 2740.072654][ T9] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 2740.137539][T20625] usb 1-1: failed to fetch extended address, random address set [ 2740.221887][T20625] usb 1-1: USB disconnect, device number 105 [ 2740.308735][ T9] usb 5-1: config 0 has no interfaces? [ 2740.324604][ T9] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2740.342113][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2740.350365][ T9] usb 5-1: Product: syz [ 2740.385751][ T9] usb 5-1: Manufacturer: syz [ 2740.401060][ T9] usb 5-1: SerialNumber: syz [ 2740.437690][ T9] usb 5-1: config 0 descriptor?? [ 2741.389498][T11764] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4567'. [ 2741.871613][ T45] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 2742.009882][T11778] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.4569'. [ 2742.319995][ T45] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2742.351173][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2742.403179][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2742.415258][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2742.471839][T11781] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4571'. [ 2742.493843][ T45] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2742.513854][ T45] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2742.522273][ T45] usb 1-1: Manufacturer: syz [ 2742.589132][ T5868] usb 5-1: USB disconnect, device number 104 [ 2742.609248][T11778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4569'. [ 2742.701987][ T45] usb 1-1: config 0 descriptor?? [ 2743.206787][T20625] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 2743.226426][ T45] appleir 0003:05AC:8243.006E: item fetching failed at offset 0/1 [ 2743.259979][ T45] appleir 0003:05AC:8243.006E: parse failed [ 2743.272933][ T45] appleir 0003:05AC:8243.006E: probe with driver appleir failed with error -22 [ 2743.409292][T20625] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2743.438984][T20625] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2743.486356][T20625] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2743.534705][T11893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4572'. [ 2743.546876][T20625] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2743.695925][T20625] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2743.710514][T20625] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2743.771128][T20625] usb 4-1: Manufacturer: syz [ 2743.801526][T20625] usb 4-1: config 0 descriptor?? [ 2744.410425][T20625] appleir 0003:05AC:8243.006F: item fetching failed at offset 0/1 [ 2744.427712][T20625] appleir 0003:05AC:8243.006F: parse failed [ 2744.443150][T20625] appleir 0003:05AC:8243.006F: probe with driver appleir failed with error -22 [ 2744.615177][ T2242] usb 4-1: USB disconnect, device number 117 [ 2745.030610][ T5868] usb 1-1: USB disconnect, device number 106 [ 2745.302332][ T9] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 2745.371815][ T2242] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 2745.465649][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 2745.479481][ T9] usb 2-1: config 0 has no interfaces? [ 2745.488829][ T9] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 2745.503410][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2745.511681][ T9] usb 2-1: Product: syz [ 2745.516088][ T9] usb 2-1: Manufacturer: syz [ 2745.520684][ T9] usb 2-1: SerialNumber: syz [ 2745.621879][ T2242] usb 5-1: Using ep0 maxpacket: 32 [ 2745.628096][ T9] usb 2-1: config 0 descriptor?? [ 2745.634139][ T2242] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 2745.646538][ T2242] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2745.723512][ T2242] usb 5-1: config 0 has no interface number 0 [ 2745.730826][ T2242] usb 5-1: config 0 interface 133 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2745.741615][ T2242] usb 5-1: config 0 interface 133 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2745.771861][ T2242] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 2745.781341][ T2242] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2745.790589][ T2242] usb 5-1: Product: syz [ 2745.795612][ T2242] usb 5-1: Manufacturer: syz [ 2745.831423][ T2242] usb 5-1: SerialNumber: syz [ 2745.914918][ T2242] usb 5-1: config 0 descriptor?? [ 2746.150223][ T2242] usb 5-1: probing VID:PID(0424:012C) [ 2746.166042][ T2242] usb 5-1: vub300 testing UNKNOWN EndPoint(0) 0B [ 2746.176912][ T2242] usb 5-1: vub300 ignoring EndPoint(0) 0B [ 2746.191096][ T2242] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 2746.575180][ T2242] vub300 5-1:0.133: probe with driver vub300 failed with error -22 [ 2746.639077][ T2242] usb 5-1: USB disconnect, device number 105 [ 2746.737598][T11925] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4580'. [ 2746.913208][ T9] usb 2-1: USB disconnect, device number 114 [ 2747.715599][T11930] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4581'. [ 2748.374304][T11939] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4582'. [ 2748.650888][ T9] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 2749.143056][ T9] usb 1-1: config 0 has no interfaces? [ 2749.160748][ T9] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2749.175385][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2749.206574][ T9] usb 1-1: Product: syz [ 2749.210800][ T9] usb 1-1: Manufacturer: syz [ 2749.223337][ T9] usb 1-1: SerialNumber: syz [ 2749.252280][ T9] usb 1-1: config 0 descriptor?? [ 2750.288105][T27745] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 2750.365723][T12064] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.4588'. [ 2750.432431][T27745] hid-generic 0000:0000:0000.0070: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2750.498127][T12064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4588'. [ 2750.852156][T27745] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 2750.928694][T12072] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4590'. [ 2751.053849][T27745] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2751.065788][T27745] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2751.088113][T27745] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2751.098941][T27745] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2751.120487][T27745] usb 4-1: Product: syz [ 2751.130894][T27745] usb 4-1: Manufacturer: syz [ 2751.141353][T27745] usb 4-1: SerialNumber: syz [ 2751.160130][T27745] usb 4-1: config 0 descriptor?? [ 2751.203820][T27745] usb 4-1: selecting invalid altsetting 0 [ 2751.879660][T27745] usb 1-1: USB disconnect, device number 107 [ 2751.949209][ T2242] usb 4-1: USB disconnect, device number 118 [ 2753.501713][ T2242] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 2753.935866][ T2242] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2753.957303][ T2242] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2754.000695][ T2242] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2754.035186][ T2242] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2754.210450][T27745] syz_tun: tun_net_xmit 110 [ 2754.234821][ T2242] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2754.377465][ T2242] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2754.477158][ T2242] usb 4-1: Manufacturer: syz [ 2754.491334][ T2242] usb 4-1: config 0 descriptor?? [ 2754.635652][ T5868] syz_tun: tun_net_xmit 90 [ 2755.317126][ T2242] appleir 0003:05AC:8243.0071: item fetching failed at offset 0/1 [ 2755.336678][T27745] syz_tun: tun_net_xmit 110 [ 2755.406696][T27745] syz_tun: tun_net_xmit 90 [ 2755.815879][ T2242] appleir 0003:05AC:8243.0071: parse failed [ 2756.005165][T12520] loop6: detected capacity change from 0 to 524287999 [ 2756.058048][T12520] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4597'. [ 2756.105018][ T2242] appleir 0003:05AC:8243.0071: probe with driver appleir failed with error -22 [ 2756.329667][ T4542] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 2756.730630][ T2242] usb 4-1: USB disconnect, device number 119 [ 2758.359996][T12541] trusted_key: encrypted_key: insufficient parameters specified [ 2758.992199][ T9] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 2759.157828][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2759.169128][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2759.183681][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2759.276853][T12551] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 2759.286079][T12551] CPU: 0 UID: 0 PID: 12551 Comm: syz.3.4604 Not tainted syzkaller #0 PREEMPT(full) [ 2759.286106][T12551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2759.286123][T12551] Call Trace: [ 2759.286132][T12551] [ 2759.286142][T12551] dump_stack_lvl+0x189/0x250 [ 2759.286176][T12551] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2759.286200][T12551] ? __pfx__printk+0x10/0x10 [ 2759.286230][T12551] ? __rcu_read_unlock+0x84/0xe0 [ 2759.286259][T12551] ? kernfs_path_from_node+0x2f/0x290 [ 2759.286283][T12551] ? kernfs_path_from_node+0x250/0x290 [ 2759.286303][T12551] ? kernfs_path_from_node+0x2f/0x290 [ 2759.286330][T12551] sysfs_warn_dup+0x8e/0xa0 [ 2759.286351][T12551] sysfs_do_create_link_sd+0xc0/0x110 [ 2759.286376][T12551] device_add_class_symlinks+0x1cf/0x240 [ 2759.286405][T12551] device_add+0x475/0xb50 [ 2759.286434][T12551] wiphy_register+0x1ba6/0x28d0 [ 2759.286473][T12551] ? __pfx_wiphy_register+0x10/0x10 [ 2759.286493][T12551] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 2759.286527][T12551] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 2759.286557][T12551] ieee80211_register_hw+0x3484/0x4100 [ 2759.286600][T12551] ? ieee80211_register_hw+0x13f1/0x4100 [ 2759.286637][T12551] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2759.286668][T12551] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2759.286707][T12551] ? __hrtimer_setup+0x187/0x210 [ 2759.286725][T12551] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2759.286749][T12551] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 2759.286809][T12551] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2759.286831][T12551] ? trace_kmalloc+0x1f/0xd0 [ 2759.286851][T12551] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 2759.286877][T12551] ? kstrndup+0xbf/0x160 [ 2759.286902][T12551] hwsim_new_radio_nl+0xea4/0x1b10 [ 2759.286927][T12551] ? __pfx___nla_validate_parse+0x10/0x10 [ 2759.286956][T12551] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2759.286988][T12551] ? __nla_parse+0x40/0x60 [ 2759.287006][T12551] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 2759.287037][T12551] genl_family_rcv_msg_doit+0x212/0x300 [ 2759.287064][T12551] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2759.287096][T12551] ? bpf_lsm_capable+0x9/0x20 [ 2759.287116][T12551] ? security_capable+0x7e/0x2e0 [ 2759.287146][T12551] genl_rcv_msg+0x60e/0x790 [ 2759.287171][T12551] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2759.287191][T12551] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2759.287225][T12551] netlink_rcv_skb+0x208/0x470 [ 2759.287240][T12551] ? __lock_acquire+0xab9/0xd20 [ 2759.287262][T12551] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2759.287284][T12551] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2759.287315][T12551] ? down_read+0x1ad/0x2e0 [ 2759.287346][T12551] genl_rcv+0x28/0x40 [ 2759.287363][T12551] netlink_unicast+0x82c/0x9e0 [ 2759.287392][T12551] ? __pfx_netlink_unicast+0x10/0x10 [ 2759.287415][T12551] ? netlink_sendmsg+0x642/0xb30 [ 2759.287429][T12551] ? skb_put+0x11b/0x210 [ 2759.287448][T12551] netlink_sendmsg+0x805/0xb30 [ 2759.287471][T12551] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2759.287488][T12551] ? __import_iovec+0x5d4/0x7f0 [ 2759.287506][T12551] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2759.287522][T12551] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2759.287537][T12551] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2759.287553][T12551] __sock_sendmsg+0x219/0x270 [ 2759.287577][T12551] ____sys_sendmsg+0x505/0x830 [ 2759.287599][T12551] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2759.287629][T12551] ___sys_sendmsg+0x21f/0x2a0 [ 2759.287649][T12551] ? __pfx____sys_sendmsg+0x10/0x10 [ 2759.287666][T12551] ? lockdep_hardirqs_on+0x9c/0x150 [ 2759.287707][T12551] ? __fget_files+0x2a/0x420 [ 2759.287719][T12551] ? __fget_files+0x3a0/0x420 [ 2759.287739][T12551] __sys_sendmsg+0x164/0x220 [ 2759.287758][T12551] ? __pfx___sys_sendmsg+0x10/0x10 [ 2759.287790][T12551] ? __secure_computing+0xe2/0x2a0 [ 2759.287812][T12551] __do_fast_syscall_32+0xb6/0x2b0 [ 2759.287830][T12551] ? lockdep_hardirqs_on+0x9c/0x150 [ 2759.287847][T12551] do_fast_syscall_32+0x34/0x80 [ 2759.287864][T12551] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2759.287881][T12551] RIP: 0023:0xf70ee539 [ 2759.287904][T12551] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2759.287916][T12551] RSP: 002b:00000000f549c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2759.287933][T12551] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040 [ 2759.287944][T12551] RDX: 0000000000000310 RSI: 0000000000000000 RDI: 0000000000000000 [ 2759.287953][T12551] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2759.287962][T12551] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2759.287970][T12551] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2759.287992][T12551] [ 2759.351909][ T30] audit: type=1326 audit(1757944667.245:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12548 comm="syz.3.4604" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2759.478990][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2760.006216][T12554] input: syz1 as /devices/virtual/input/input77 [ 2760.229459][ T30] audit: type=1326 audit(1757944667.245:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12548 comm="syz.3.4604" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2760.515778][ T30] audit: type=1326 audit(1757944667.245:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12548 comm="syz.3.4604" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2760.614752][ T30] audit: type=1326 audit(1757944667.245:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12548 comm="syz.3.4604" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2760.692123][ T5868] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 2760.763934][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2760.774803][ T9] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2760.783605][ T9] usb 5-1: Manufacturer: syz [ 2760.790194][ T9] usb 5-1: config 0 descriptor?? [ 2760.895902][ T5868] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2760.907979][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2760.940403][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2760.993359][ T5868] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2761.020408][ T30] audit: type=1326 audit(1757944667.245:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12548 comm="syz.3.4604" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2761.065810][T12660] VFS: Mount too revealing [ 2761.080326][T12660] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4606'. [ 2761.092486][ T30] audit: type=1326 audit(1757944667.245:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12548 comm="syz.3.4604" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2761.119034][ T5868] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2761.130340][ T5868] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2761.143691][ T5868] usb 1-1: Manufacturer: syz [ 2761.150216][ T30] audit: type=1326 audit(1757944667.245:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12548 comm="syz.3.4604" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2761.174123][ T5868] usb 1-1: config 0 descriptor?? [ 2761.205598][ T30] audit: type=1326 audit(1757944667.245:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12548 comm="syz.3.4604" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2761.239659][ T9] appleir 0003:05AC:8243.0072: item fetching failed at offset 0/1 [ 2761.249050][ T9] appleir 0003:05AC:8243.0072: parse failed [ 2761.260344][ T9] appleir 0003:05AC:8243.0072: probe with driver appleir failed with error -22 [ 2761.286000][ T30] audit: type=1326 audit(1757944667.245:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12548 comm="syz.3.4604" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2761.286053][ T30] audit: type=1326 audit(1757944667.815:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12548 comm="syz.3.4604" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2761.615666][ T5868] appleir 0003:05AC:8243.0073: item fetching failed at offset 0/1 [ 2761.616192][ T5868] appleir 0003:05AC:8243.0073: parse failed [ 2761.616260][ T5868] appleir 0003:05AC:8243.0073: probe with driver appleir failed with error -22 [ 2762.878499][ T45] usb 5-1: USB disconnect, device number 106 [ 2763.601137][T20625] usb 1-1: USB disconnect, device number 108 [ 2764.593813][T27745] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 2764.922505][T27745] usb 4-1: Using ep0 maxpacket: 8 [ 2764.929453][T27745] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2764.940848][T27745] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2764.959201][T27745] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2764.977807][T27745] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2764.990479][T27745] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2765.197126][T27745] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2765.299255][T27745] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2765.402148][T27745] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2765.592850][T27745] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2765.604815][T27745] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2765.834687][T27745] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2765.842889][T27745] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2765.897053][T27745] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2765.922438][ T2242] syz_tun: tun_net_xmit 110 [ 2765.943287][T27745] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2766.063696][ T2242] syz_tun: tun_net_xmit 110 [ 2766.080056][T27745] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2766.278329][T27745] usb 4-1: string descriptor 0 read error: -22 [ 2766.302053][ T2242] syz_tun: tun_net_xmit 90 [ 2766.382323][T27745] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2766.391419][T27745] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2766.448561][T27745] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2766.571791][ T2242] syz_tun: tun_net_xmit 90 [ 2766.743629][T12824] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4620'. [ 2767.086980][T27745] usb 4-1: USB disconnect, device number 120 [ 2767.112869][T12826] usb 4-1: Couldn't submit interrupt_out_urb -19 [ 2768.101910][T20625] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 2768.298194][T20625] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2768.323790][T20625] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2768.351972][T20625] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2768.363048][T20625] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2768.381386][T20625] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2768.390657][T20625] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2768.399006][T20625] usb 3-1: Manufacturer: syz [ 2768.476126][T20625] usb 3-1: config 0 descriptor?? [ 2768.977389][T20625] appleir 0003:05AC:8243.0074: item fetching failed at offset 0/1 [ 2768.987526][T20625] appleir 0003:05AC:8243.0074: parse failed [ 2768.999079][T20625] appleir 0003:05AC:8243.0074: probe with driver appleir failed with error -22 [ 2770.482279][T20625] syz_tun: tun_net_xmit 110 [ 2770.575222][T20625] syz_tun: tun_net_xmit 90 [ 2771.506909][T20625] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 2771.601972][ T2242] syz_tun: tun_net_xmit 90 [ 2771.613728][ T2242] syz_tun: tun_net_xmit 110 [ 2771.665386][T18843] usb 3-1: USB disconnect, device number 117 [ 2772.002837][T20625] usb 5-1: Using ep0 maxpacket: 32 [ 2772.010970][T20625] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 2772.019634][T20625] usb 5-1: config 0 has no interface number 0 [ 2772.026107][T20625] usb 5-1: config 0 interface 12 has no altsetting 0 [ 2772.035942][T20625] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 2772.045473][T20625] usb 5-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 2772.054035][T20625] usb 5-1: Product: syz [ 2772.058343][T20625] usb 5-1: Manufacturer: syz [ 2772.065558][T13087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4630'. [ 2772.139877][T20625] usb 5-1: SerialNumber: syz [ 2772.192624][T20625] usb 5-1: config 0 descriptor?? [ 2772.307173][T13087] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4630'. [ 2772.972944][T20625] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 2772.987463][T20625] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 2773.022127][T18843] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 2773.140792][T20625] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2773.178596][T20625] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 2773.192664][T18843] usb 4-1: Using ep0 maxpacket: 8 [ 2773.204479][T18843] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 2773.240556][T20625] usb 5-1: USB disconnect, device number 107 [ 2773.286210][T18843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2773.723854][T18843] usb 4-1: Product: syz [ 2773.766112][T18843] usb 4-1: Manufacturer: syz [ 2773.772097][T18843] usb 4-1: SerialNumber: syz [ 2773.828280][T18843] usb 4-1: config 0 descriptor?? [ 2773.865673][T18843] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 2773.964792][ T9] syz_tun: tun_net_xmit 110 [ 2773.975895][T13106] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4631'. [ 2773.987276][T13106] QAT: Device 253 not found [ 2774.189105][T13090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2774.198052][T13090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2774.255437][ T9] syz_tun: tun_net_xmit 90 [ 2774.381180][T13090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4632'. [ 2774.392491][T13090] netlink: 'syz.3.4632': attribute type 23 has an invalid length. [ 2774.434373][T18843] gspca_sonixj: reg_w1 err -110 [ 2774.439395][T18843] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 2774.692557][ T9] syz_tun: tun_net_xmit 90 [ 2774.852113][ T9] syz_tun: tun_net_xmit 110 [ 2775.135054][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 2775.152241][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 2775.968951][ T45] usb 4-1: USB disconnect, device number 121 [ 2777.408250][T13137] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4639'. [ 2778.436291][T13144] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.4640'. [ 2779.752877][T20625] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 2780.007791][T20625] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2780.030551][T20625] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2780.063121][T20625] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2780.352409][T20625] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2780.582597][T13272] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.4645'. [ 2781.075950][T20625] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2781.116545][T20625] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2781.328286][T20625] usb 3-1: Manufacturer: syz [ 2781.372703][T20625] usb 3-1: config 0 descriptor?? [ 2783.800650][T13300] trusted_key: encrypted_key: insufficient parameters specified [ 2784.037694][T13309] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.4652'. [ 2784.142500][ T45] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 2784.249512][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 2784.249529][ T30] audit: type=1326 audit(1757944692.225:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.4.4653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 2784.249576][ T30] audit: type=1326 audit(1757944692.225:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.4.4653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 2784.249605][ T30] audit: type=1326 audit(1757944692.225:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.4.4653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 2784.249642][ T30] audit: type=1326 audit(1757944692.225:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.4.4653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=85 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 2784.249689][ T30] audit: type=1326 audit(1757944692.225:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.4.4653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 2784.249720][ T30] audit: type=1326 audit(1757944692.225:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.4.4653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 2784.249747][ T30] audit: type=1326 audit(1757944692.225:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.4.4653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 2784.249780][ T30] audit: type=1326 audit(1757944692.225:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.4.4653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 2784.249819][ T30] audit: type=1326 audit(1757944692.225:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.4.4653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 2784.249855][ T30] audit: type=1326 audit(1757944692.225:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.4.4653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 2784.298134][ C0] vkms_vblank_simulate: vblank timer overrun [ 2784.678995][ T45] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2784.679049][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2784.679070][ T45] usb 1-1: Product: syz [ 2784.679086][ T45] usb 1-1: Manufacturer: syz [ 2784.679102][ T45] usb 1-1: SerialNumber: syz [ 2784.707111][ T45] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2784.751796][T20625] usbhid 3-1:0.0: can't add hid device: -71 [ 2784.751928][T20625] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2784.754513][T20625] usb 3-1: USB disconnect, device number 118 [ 2784.836041][ T45] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2785.050270][ C0] vkms_vblank_simulate: vblank timer overrun [ 2785.903434][ T45] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2785.933336][ T45] ath9k_htc: Failed to initialize the device [ 2786.054850][ T45] usb 1-1: ath9k_htc: USB layer deinitialized [ 2786.605394][T13328] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4658'. [ 2786.832593][T13333] usb usb8: usbfs: process 13333 (syz.1.4657) did not claim interface 0 before use [ 2788.370601][T27745] usb 1-1: USB disconnect, device number 109 [ 2789.013064][T27745] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 2789.198718][T13458] openvswitch: netlink: Key 0 has unexpected len 16 expected 0 [ 2789.211006][T13458] block nbd0: Attempted send on invalid socket [ 2789.217360][T13458] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 2789.283896][T27745] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2789.304780][T27745] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2789.350803][T27745] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2789.427430][T27745] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2789.475336][T27745] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2789.487057][T27745] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2789.517072][T27745] usb 5-1: Manufacturer: syz [ 2789.547975][T27745] usb 5-1: config 0 descriptor?? [ 2790.305601][T27745] appleir 0003:05AC:8243.0075: item fetching failed at offset 0/1 [ 2790.320324][T27745] appleir 0003:05AC:8243.0075: parse failed [ 2790.397227][T27745] appleir 0003:05AC:8243.0075: probe with driver appleir failed with error -22 [ 2791.065012][T27745] syz_tun: tun_net_xmit 110 [ 2791.152768][ T9] syz_tun: tun_net_xmit 90 [ 2791.791745][ T9] syz_tun: tun_net_xmit 90 [ 2792.010630][ T9] syz_tun: tun_net_xmit 110 [ 2792.911754][ T9] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 2793.106642][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2793.117777][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2793.129078][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2793.154214][T27745] usb 5-1: USB disconnect, device number 108 [ 2793.188275][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2793.264912][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2793.317928][ T9] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2793.385702][ T9] usb 2-1: Manufacturer: syz [ 2793.399733][ T9] usb 2-1: config 0 descriptor?? [ 2794.030893][ T9] appleir 0003:05AC:8243.0076: item fetching failed at offset 0/1 [ 2794.041241][ T9] appleir 0003:05AC:8243.0076: parse failed [ 2794.051388][ T9] appleir 0003:05AC:8243.0076: probe with driver appleir failed with error -22 [ 2795.214248][T13718] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 2795.222128][T13718] CPU: 0 UID: 0 PID: 13718 Comm: syz.0.4673 Not tainted syzkaller #0 PREEMPT(full) [ 2795.222154][T13718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2795.222166][T13718] Call Trace: [ 2795.222176][T13718] [ 2795.222185][T13718] dump_stack_lvl+0x189/0x250 [ 2795.222220][T13718] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2795.222246][T13718] ? __pfx__printk+0x10/0x10 [ 2795.222275][T13718] ? __rcu_read_unlock+0x84/0xe0 [ 2795.222302][T13718] ? kernfs_path_from_node+0x2f/0x290 [ 2795.222325][T13718] ? kernfs_path_from_node+0x250/0x290 [ 2795.222345][T13718] ? kernfs_path_from_node+0x2f/0x290 [ 2795.222372][T13718] sysfs_warn_dup+0x8e/0xa0 [ 2795.222393][T13718] sysfs_do_create_link_sd+0xc0/0x110 [ 2795.222418][T13718] device_add_class_symlinks+0x1cf/0x240 [ 2795.222447][T13718] device_add+0x475/0xb50 [ 2795.222475][T13718] wiphy_register+0x1ba6/0x28d0 [ 2795.222514][T13718] ? __pfx_wiphy_register+0x10/0x10 [ 2795.222544][T13718] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 2795.222579][T13718] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 2795.222610][T13718] ieee80211_register_hw+0x3484/0x4100 [ 2795.222638][T13718] ? preempt_schedule+0xae/0xc0 [ 2795.222670][T13718] ? ieee80211_register_hw+0x13f1/0x4100 [ 2795.222707][T13718] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2795.222738][T13718] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2795.222776][T13718] ? __hrtimer_setup+0x187/0x210 [ 2795.222795][T13718] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2795.222818][T13718] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 2795.222878][T13718] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2795.222907][T13718] ? trace_kmalloc+0x1f/0xd0 [ 2795.222930][T13718] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 2795.222957][T13718] ? kstrndup+0xbf/0x160 [ 2795.222989][T13718] hwsim_new_radio_nl+0xea4/0x1b10 [ 2795.223021][T13718] ? __pfx___nla_validate_parse+0x10/0x10 [ 2795.223058][T13718] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2795.223100][T13718] ? __nla_parse+0x40/0x60 [ 2795.223125][T13718] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 2795.223164][T13718] genl_family_rcv_msg_doit+0x212/0x300 [ 2795.223199][T13718] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2795.223240][T13718] ? bpf_lsm_capable+0x9/0x20 [ 2795.223266][T13718] ? security_capable+0x7e/0x2e0 [ 2795.223304][T13718] genl_rcv_msg+0x60e/0x790 [ 2795.223337][T13718] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2795.223363][T13718] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2795.223393][T13718] ? __asan_memcpy+0x40/0x70 [ 2795.223416][T13718] ? __pfx_ref_tracker_free+0x10/0x10 [ 2795.223443][T13718] netlink_rcv_skb+0x208/0x470 [ 2795.223462][T13718] ? __lock_acquire+0xab9/0xd20 [ 2795.223511][T13718] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2795.223545][T13718] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2795.223587][T13718] ? down_read+0x1ad/0x2e0 [ 2795.223613][T13718] genl_rcv+0x28/0x40 [ 2795.223638][T13718] netlink_unicast+0x82c/0x9e0 [ 2795.223679][T13718] ? __pfx_netlink_unicast+0x10/0x10 [ 2795.223712][T13718] ? netlink_sendmsg+0x642/0xb30 [ 2795.223730][T13718] ? skb_put+0x11b/0x210 [ 2795.223757][T13718] netlink_sendmsg+0x805/0xb30 [ 2795.223789][T13718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2795.223814][T13718] ? __import_iovec+0x5d4/0x7f0 [ 2795.223837][T13718] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2795.223859][T13718] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2795.223881][T13718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2795.223903][T13718] __sock_sendmsg+0x219/0x270 [ 2795.223936][T13718] ____sys_sendmsg+0x505/0x830 [ 2795.223968][T13718] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2795.224011][T13718] ___sys_sendmsg+0x21f/0x2a0 [ 2795.224040][T13718] ? __pfx____sys_sendmsg+0x10/0x10 [ 2795.224065][T13718] ? lockdep_hardirqs_on+0x9c/0x150 [ 2795.224122][T13718] ? __fget_files+0x2a/0x420 [ 2795.224140][T13718] ? __fget_files+0x3a0/0x420 [ 2795.224169][T13718] __sys_sendmsg+0x164/0x220 [ 2795.224196][T13718] ? __pfx___sys_sendmsg+0x10/0x10 [ 2795.224234][T13718] ? __secure_computing+0xe2/0x2a0 [ 2795.224263][T13718] __do_fast_syscall_32+0xb6/0x2b0 [ 2795.224287][T13718] ? lockdep_hardirqs_on+0x9c/0x150 [ 2795.224311][T13718] do_fast_syscall_32+0x34/0x80 [ 2795.224334][T13718] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2795.224358][T13718] RIP: 0023:0xf7fc3539 [ 2795.224375][T13718] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2795.224392][T13718] RSP: 002b:00000000f548455c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2795.224412][T13718] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040 [ 2795.224426][T13718] RDX: 0000000000000310 RSI: 0000000000000000 RDI: 0000000000000000 [ 2795.224438][T13718] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2795.224450][T13718] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2795.224462][T13718] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2795.224493][T13718] [ 2795.700384][ C0] vkms_vblank_simulate: vblank timer overrun [ 2795.712686][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 2795.712704][ T30] audit: type=1326 audit(1757944703.185:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13715 comm="syz.0.4673" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2795.741502][ T30] audit: type=1326 audit(1757944703.195:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13715 comm="syz.0.4673" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2795.772067][ T30] audit: type=1326 audit(1757944703.195:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13715 comm="syz.0.4673" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2795.794877][ T30] audit: type=1326 audit(1757944703.195:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13715 comm="syz.0.4673" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2795.816971][ C0] vkms_vblank_simulate: vblank timer overrun [ 2795.824312][ T30] audit: type=1326 audit(1757944703.195:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13715 comm="syz.0.4673" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2795.846870][ T30] audit: type=1326 audit(1757944703.195:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13715 comm="syz.0.4673" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2795.869042][ C0] vkms_vblank_simulate: vblank timer overrun [ 2795.875867][ T30] audit: type=1326 audit(1757944703.195:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13715 comm="syz.0.4673" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2795.898412][ T30] audit: type=1326 audit(1757944703.195:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13715 comm="syz.0.4673" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2795.920464][ C0] vkms_vblank_simulate: vblank timer overrun [ 2795.927759][ T30] audit: type=1326 audit(1757944703.195:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13715 comm="syz.0.4673" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2795.949820][ C0] vkms_vblank_simulate: vblank timer overrun [ 2795.956605][ T30] audit: type=1326 audit(1757944703.195:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13715 comm="syz.0.4673" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2796.098116][ T9] usb 2-1: USB disconnect, device number 115 [ 2796.319679][T13722] input: syz1 as /devices/virtual/input/input78 [ 2796.659866][T13733] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4674'. [ 2796.695880][T13733] netlink: 'syz.1.4674': attribute type 13 has an invalid length. [ 2796.704416][T13733] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4674'. [ 2799.012197][T13961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4678'. [ 2801.794282][T14195] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4685'. [ 2802.125966][T14197] trusted_key: encrypted_key: insufficient parameters specified [ 2803.517725][T14211] trusted_key: encrypted_key: insufficient parameters specified [ 2804.744274][T14221] trusted_key: encrypted_key: insufficient parameters specified [ 2805.021867][T20625] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 2805.595192][T20625] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2805.679267][T20625] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2805.710902][T20625] usb 5-1: Product: syz [ 2805.721500][T20625] usb 5-1: Manufacturer: syz [ 2805.733565][T20625] usb 5-1: SerialNumber: syz [ 2806.266925][T20625] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2806.320244][ T45] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2806.723450][T14358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4695'. [ 2806.908032][T14358] misc userio: The device must be registered before sending interrupts [ 2807.441603][ T45] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2807.462408][ T45] ath9k_htc: Failed to initialize the device [ 2807.497935][ T45] usb 5-1: ath9k_htc: USB layer deinitialized [ 2809.086846][T20625] usb 5-1: USB disconnect, device number 109 [ 2809.579353][T14485] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4702'. [ 2810.114929][T14492] trusted_key: encrypted_key: insufficient parameters specified [ 2812.082125][ T9] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 2812.147702][ T2242] syz_tun: tun_net_xmit 110 [ 2812.370772][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2812.392035][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2812.412134][T27745] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 2812.438837][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2812.439507][ T2242] syz_tun: tun_net_xmit 90 [ 2812.526725][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2812.540113][ T2242] syz_tun: tun_net_xmit 90 [ 2812.592335][ T2242] syz_tun: tun_net_xmit 110 [ 2812.602240][T27745] usb 2-1: Using ep0 maxpacket: 32 [ 2812.624027][T27745] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 2812.636755][T27745] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2812.701120][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2812.722732][T27745] usb 2-1: config 0 has no interface number 0 [ 2812.729031][ T9] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2812.741290][T27745] usb 2-1: config 0 interface 133 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2812.871070][ T9] usb 3-1: Manufacturer: syz [ 2812.922607][ T9] usb 3-1: config 0 descriptor?? [ 2812.929006][T27745] usb 2-1: config 0 interface 133 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2812.961525][T27745] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 2812.976259][T27745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2812.992129][T27745] usb 2-1: Product: syz [ 2813.004425][T27745] usb 2-1: Manufacturer: syz [ 2813.012352][T27745] usb 2-1: SerialNumber: syz [ 2813.093309][T27745] usb 2-1: config 0 descriptor?? [ 2813.625648][ T9] appleir 0003:05AC:8243.0077: item fetching failed at offset 0/1 [ 2813.685474][ T9] appleir 0003:05AC:8243.0077: parse failed [ 2813.692018][T27745] usb 2-1: probing VID:PID(0424:012C) [ 2813.698811][T27745] usb 2-1: vub300 testing UNKNOWN EndPoint(0) 0B [ 2813.730716][ T9] appleir 0003:05AC:8243.0077: probe with driver appleir failed with error -22 [ 2813.767048][T27745] usb 2-1: vub300 ignoring EndPoint(0) 0B [ 2813.777371][T27745] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 2813.796926][T27745] vub300 2-1:0.133: probe with driver vub300 failed with error -22 [ 2813.857439][T27745] usb 2-1: USB disconnect, device number 116 [ 2814.037538][T14635] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4710'. [ 2815.211999][T14641] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4712'. [ 2815.277762][T14645] binder: BINDER_SET_CONTEXT_MGR already set [ 2815.305887][T14645] binder: 14644:14645 ioctl 4018620d 80000040 returned -16 [ 2815.706455][T27745] usb 3-1: USB disconnect, device number 119 [ 2817.909283][T14870] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.4719'. [ 2818.675756][T14881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4721'. [ 2818.685410][T14881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4721'. [ 2820.587241][T14999] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4724'. [ 2820.607595][T14999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4724'. [ 2821.355403][T15118] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4727'. [ 2821.665145][T15124] trusted_key: encrypted_key: insufficient parameters specified [ 2822.441731][T20625] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 2822.612697][T20625] usb 4-1: Using ep0 maxpacket: 16 [ 2822.636694][T20625] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBB, changing to 0x8B [ 2822.742765][T15133] openvswitch: netlink: Key 0 has unexpected len 16 expected 0 [ 2822.758448][T15133] block nbd0: Attempted send on invalid socket [ 2822.764996][T15133] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 2823.347400][T15136] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4740'. [ 2823.418207][T20625] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2823.429660][T20625] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2823.466731][T20625] usb 4-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 2823.476098][T20625] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2823.484322][T20625] usb 4-1: Product: syz [ 2823.488476][T20625] usb 4-1: Manufacturer: syz [ 2823.493121][T20625] usb 4-1: SerialNumber: syz [ 2823.567117][T20625] usb 4-1: config 0 descriptor?? [ 2825.519094][T20625] usb 4-1: USB disconnect, device number 122 [ 2825.672868][T15264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4732'. [ 2826.528176][T15374] trusted_key: encrypted_key: insufficient parameters specified [ 2829.726785][T15408] trusted_key: encrypted_key: insufficient parameters specified [ 2830.192018][T11682] usb 1-1: new full-speed USB device number 110 using dummy_hcd [ 2830.284613][T15516] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4745'. [ 2830.343604][T11682] usb 1-1: not running at top speed; connect to a high speed hub [ 2830.459859][T11682] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2830.469928][T11682] usb 1-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 2830.479663][T11682] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2830.497921][T11682] usb 1-1: Product: syz [ 2830.507840][T11682] usb 1-1: Manufacturer: syz [ 2830.518873][T11682] usb 1-1: SerialNumber: syz [ 2830.756710][T15499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4744'. [ 2830.797291][T15499] loop8: detected capacity change from 0 to 16384 [ 2831.242906][T15529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2831.285344][T15529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2831.585444][T15531] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2831.680341][T15532] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4747'. [ 2832.594382][ C0] I/O error, dev loop8, sector 14848 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2 [ 2832.595325][T15526] loop8: detected capacity change from 16384 to 0 [ 2832.604625][ C0] I/O error, dev loop8, sector 15104 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 2832.959490][T11682] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input80 [ 2832.994364][ T5220] bcm5974 1-1:1.0: could not read from device [ 2833.018817][ T5220] bcm5974 1-1:1.0: could not read from device [ 2833.027421][T11682] usb 1-1: USB disconnect, device number 110 [ 2833.058232][ T5220] bcm5974 1-1:1.0: could not read from device [ 2834.311784][T11682] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 2834.556006][T11682] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2834.636576][T11682] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2834.660060][T11682] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2834.680768][T11682] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2834.861623][ T45] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 2834.965389][T11682] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2834.995767][T11682] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2835.065564][T11682] usb 4-1: Manufacturer: syz [ 2835.085464][T11682] usb 4-1: config 0 descriptor?? [ 2835.170243][T15677] fuse: Bad value for 'group_id' [ 2835.175607][T15677] fuse: Bad value for 'group_id' [ 2835.187724][T15677] fuse: Unknown parameter '0x0000000000000008 g%wA˘v' [ 2835.224091][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 2835.237012][ T45] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 2835.246413][ T45] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2835.259138][ T45] usb 1-1: config 0 has no interface number 0 [ 2835.266403][ T45] usb 1-1: config 0 interface 133 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2835.379139][ T45] usb 1-1: config 0 interface 133 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2835.416088][ T45] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 2835.432920][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2835.441368][ T45] usb 1-1: Product: syz [ 2835.449580][ T45] usb 1-1: Manufacturer: syz [ 2835.454436][T20625] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 2835.480263][ T45] usb 1-1: SerialNumber: syz [ 2835.537216][ T45] usb 1-1: config 0 descriptor?? [ 2835.537998][T11682] appleir 0003:05AC:8243.0078: item fetching failed at offset 0/1 [ 2835.577422][T11682] appleir 0003:05AC:8243.0078: parse failed [ 2835.621729][T20625] usb 5-1: Using ep0 maxpacket: 16 [ 2835.639278][T20625] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2835.651674][T11682] appleir 0003:05AC:8243.0078: probe with driver appleir failed with error -22 [ 2835.661275][T20625] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2835.719072][T20625] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2835.820685][T20625] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 2836.082983][T11682] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 2836.153935][ T45] usb 1-1: probing VID:PID(0424:012C) [ 2836.184737][ T45] usb 1-1: vub300 testing UNKNOWN EndPoint(0) 0B [ 2836.192060][T20625] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 2836.258197][T11682] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2836.279577][T11682] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2836.324417][ T45] usb 1-1: vub300 ignoring EndPoint(0) 0B [ 2836.340593][ T45] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 2836.340592][T11682] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2836.340637][T11682] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2836.349384][ T45] vub300 1-1:0.133: probe with driver vub300 failed with error -22 [ 2836.386759][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.393153][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 2836.427661][T20625] usb 5-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 2836.439320][T20625] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2836.447512][T20625] usb 5-1: SerialNumber: syz [ 2836.495528][ T45] usb 1-1: USB disconnect, device number 111 [ 2836.524039][T15677] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2836.536597][T20625] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 2836.632511][T11682] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2836.632734][T20625] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 2836.660014][T11682] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2836.674634][T11682] usb 3-1: Manufacturer: syz [ 2836.710178][T11682] usb 3-1: config 0 descriptor?? [ 2837.028057][T27745] usb 4-1: USB disconnect, device number 123 [ 2838.013682][T15773] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 2838.311605][ T45] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 2838.461712][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 2838.469789][ T45] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 2838.478344][ T45] usb 4-1: config 0 has no interface number 0 [ 2838.513229][ T45] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2838.571648][ T45] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 2838.640183][ T45] usb 4-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 2838.665265][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2838.686742][ T45] usb 4-1: Product: syz [ 2838.721297][ T45] usb 4-1: Manufacturer: syz [ 2838.746262][ T45] usb 4-1: SerialNumber: syz [ 2838.818889][ T45] usb 4-1: config 0 descriptor?? [ 2838.844360][T15773] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2838.853342][T15773] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2838.871506][ T45] ums-sddr09 4-1:0.20: USB Mass Storage device detected [ 2838.977632][ T45] ums-sddr09 4-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 2839.061888][T20625] usb 5-1: USB disconnect, device number 110 [ 2839.306917][T11682] usbhid 3-1:0.0: can't add hid device: -71 [ 2839.315298][T11682] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2839.380344][T11682] usb 3-1: USB disconnect, device number 120 [ 2839.743535][T15816] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4766'. [ 2840.273414][ T45] usb 4-1: USB disconnect, device number 124 [ 2840.330418][T15821] random: crng reseeded on system resumption [ 2841.824676][T15835] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4770'. [ 2841.848565][T15835] syz_tun: tun_net_xmit 1546 [ 2841.854803][T15835] syz_tun: tun_net_xmit 1546 [ 2841.862575][T15835] syz_tun: tun_net_xmit 1546 [ 2841.867321][T15835] syz_tun: tun_net_xmit 1546 [ 2841.873301][T15835] syz_tun: tun_net_xmit 1546 [ 2841.878066][T15835] syz_tun: tun_net_xmit 1546 [ 2841.896542][T15835] syz_tun: tun_net_xmit 1546 [ 2841.902564][T15835] syz_tun: tun_net_xmit 1546 [ 2841.907457][T15835] syz_tun: tun_net_xmit 1546 [ 2841.912873][T15835] syz_tun: tun_net_xmit 1546 [ 2841.917745][T15835] syz_tun: tun_net_xmit 1546 [ 2841.926740][T15835] syz_tun: tun_net_xmit 1546 [ 2841.932179][T15835] syz_tun: tun_net_xmit 1546 [ 2841.937107][T15835] syz_tun: tun_net_xmit 1546 [ 2841.942678][T15835] syz_tun: tun_net_xmit 1546 [ 2841.947665][T15835] syz_tun: tun_net_xmit 1546 [ 2841.953001][T15835] syz_tun: tun_net_xmit 1546 [ 2841.957939][T15835] syz_tun: tun_net_xmit 1546 [ 2841.965792][T15835] syz_tun: tun_net_xmit 1546 [ 2841.970668][T15835] syz_tun: tun_net_xmit 1546 [ 2841.980532][T15835] syz_tun: tun_net_xmit 1546 [ 2841.986044][T15835] syz_tun: tun_net_xmit 1546 [ 2841.990834][T15835] syz_tun: tun_net_xmit 1546 [ 2842.052633][T15835] syz_tun: tun_net_xmit 1546 [ 2842.063552][T15835] syz_tun: tun_net_xmit 1546 [ 2842.080651][T15835] syz_tun: tun_net_xmit 1546 [ 2842.096141][T15835] syz_tun: tun_net_xmit 1546 [ 2842.114667][T15835] syz_tun: tun_net_xmit 1546 [ 2842.119429][T15835] syz_tun: tun_net_xmit 1546 [ 2842.125981][T15835] syz_tun: tun_net_xmit 1546 [ 2842.145114][T15835] syz_tun: tun_net_xmit 1546 [ 2842.167563][T15835] syz_tun: tun_net_xmit 1546 [ 2842.207994][T15835] syz_tun: tun_net_xmit 1546 [ 2842.224170][T15835] syz_tun: tun_net_xmit 1546 [ 2842.237559][T15835] syz_tun: tun_net_xmit 1546 [ 2842.251755][T15835] syz_tun: tun_net_xmit 1546 [ 2842.260188][T15835] syz_tun: tun_net_xmit 1546 [ 2842.276668][T15835] syz_tun: tun_net_xmit 1546 [ 2842.293618][T15835] syz_tun: tun_net_xmit 1546 [ 2842.299622][T15835] syz_tun: tun_net_xmit 1546 [ 2842.306419][T15835] syz_tun: tun_net_xmit 1546 [ 2842.311084][T15835] syz_tun: tun_net_xmit 1546 [ 2842.316459][T15835] syz_tun: tun_net_xmit 1496 [ 2843.563633][ T4532] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 2843.623027][T15954] fuse: Unknown parameter '0x0000000000000008 g%wA˘v' [ 2843.766088][ T4532] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2843.780063][ T4532] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2843.830327][ T4532] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2843.848825][ T4532] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2843.941692][ T45] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 2844.026353][ T4532] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2844.026731][T15957] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4776'. [ 2844.035704][ T4532] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2844.035753][ T4532] usb 2-1: Manufacturer: syz [ 2844.069663][ T4532] usb 2-1: config 0 descriptor?? [ 2844.232126][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 2844.243187][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2844.279024][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2844.292288][ T45] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2844.334738][ T45] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 2844.348149][ T45] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 2844.396905][ T45] usb 4-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 2844.416479][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2844.507756][ T45] usb 4-1: SerialNumber: syz [ 2844.537777][T15954] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2844.636316][ T4532] appleir 0003:05AC:8243.0079: item fetching failed at offset 0/1 [ 2844.662730][ T4532] appleir 0003:05AC:8243.0079: parse failed [ 2844.684164][ T4532] appleir 0003:05AC:8243.0079: probe with driver appleir failed with error -22 [ 2844.703704][ T45] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 2844.725016][ T45] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 2844.922636][T20625] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 2845.166057][T20625] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2845.213527][T20625] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2845.655599][T20625] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2845.668594][T20625] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2845.816406][T20625] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2845.825868][T20625] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2845.843102][T20625] usb 3-1: Manufacturer: syz [ 2845.893339][T20625] usb 3-1: config 0 descriptor?? [ 2846.200399][ T4532] usb 2-1: USB disconnect, device number 117 [ 2846.347199][T20625] appleir 0003:05AC:8243.007A: item fetching failed at offset 0/1 [ 2846.358996][T15972] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4789'. [ 2846.448032][T20625] appleir 0003:05AC:8243.007A: parse failed [ 2846.454259][T20625] appleir 0003:05AC:8243.007A: probe with driver appleir failed with error -22 [ 2847.542537][T15988] CIFS: VFS: Malformed UNC in devname [ 2848.071308][T11682] usb 3-1: USB disconnect, device number 121 [ 2848.147824][T15994] IPv6: NLM_F_CREATE should be specified when creating new route [ 2848.158969][T15994] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2848.166262][T15994] IPv6: NLM_F_CREATE should be set when creating new route [ 2848.532433][ T4532] usb 4-1: USB disconnect, device number 125 [ 2849.911949][T27745] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 2850.402148][T27745] usb 3-1: Using ep0 maxpacket: 16 [ 2851.999777][T16128] PKCS7: Unknown OID: [5] (bad) [ 2852.005184][T16128] PKCS7: Only support pkcs7_signedData type [ 2852.170372][T27745] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2852.326174][T27745] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 2852.464455][T27745] usb 3-1: can't read configurations, error -71 [ 2853.381780][T20625] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 2853.608109][T16247] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4793'. [ 2853.626654][T20625] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2853.641841][T20625] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2853.677327][T20625] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2853.697419][T20625] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2853.745900][T20625] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2853.757368][T20625] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2853.765853][T20625] usb 5-1: Manufacturer: syz [ 2853.778270][T20625] usb 5-1: config 0 descriptor?? [ 2853.827420][ T30] kauditd_printk_skb: 108 callbacks suppressed [ 2853.827440][ T30] audit: type=1326 audit(1757944761.815:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16242 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 2853.885340][ T30] audit: type=1326 audit(1757944761.855:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16242 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 2854.033530][ T30] audit: type=1326 audit(1757944761.855:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16242 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=40000003 syscall=338 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 2854.107555][ T30] audit: type=1326 audit(1757944761.855:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16242 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 2854.137273][ T30] audit: type=1326 audit(1757944761.855:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16242 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 2854.165826][ T30] audit: type=1326 audit(1757944761.855:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16242 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 2854.237191][T20625] appleir 0003:05AC:8243.007B: item fetching failed at offset 0/1 [ 2854.248508][T20625] appleir 0003:05AC:8243.007B: parse failed [ 2854.258190][T20625] appleir 0003:05AC:8243.007B: probe with driver appleir failed with error -22 [ 2854.279590][ T30] audit: type=1326 audit(1757944761.855:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16242 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 2854.325381][ T30] audit: type=1326 audit(1757944761.855:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16242 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 2854.378930][ T30] audit: type=1326 audit(1757944761.855:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16242 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 2856.444834][T27745] usb 5-1: USB disconnect, device number 111 [ 2857.189330][T16279] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 2857.203465][ T30] audit: type=1326 audit(1757944765.165:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16275 comm="syz.4.4798" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 2857.232921][T16279] CPU: 0 UID: 0 PID: 16279 Comm: syz.4.4798 Not tainted syzkaller #0 PREEMPT(full) [ 2857.232949][T16279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2857.232963][T16279] Call Trace: [ 2857.232969][T16279] [ 2857.232975][T16279] dump_stack_lvl+0x189/0x250 [ 2857.232995][T16279] ? irqentry_exit+0x74/0x90 [ 2857.233011][T16279] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2857.233040][T16279] sysfs_warn_dup+0x8e/0xa0 [ 2857.233054][T16279] sysfs_do_create_link_sd+0xc0/0x110 [ 2857.233071][T16279] device_add_class_symlinks+0x1cf/0x240 [ 2857.233090][T16279] device_add+0x475/0xb50 [ 2857.233110][T16279] wiphy_register+0x1ba6/0x28d0 [ 2857.233135][T16279] ? __pfx_wiphy_register+0x10/0x10 [ 2857.233148][T16279] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 2857.233170][T16279] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 2857.233190][T16279] ieee80211_register_hw+0x3484/0x4100 [ 2857.233218][T16279] ? ieee80211_register_hw+0x13f1/0x4100 [ 2857.233242][T16279] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2857.233263][T16279] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2857.233289][T16279] ? __hrtimer_setup+0x187/0x210 [ 2857.233302][T16279] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2857.233317][T16279] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 2857.233357][T16279] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2857.233375][T16279] ? trace_kmalloc+0x1f/0xd0 [ 2857.233391][T16279] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 2857.233409][T16279] ? kstrndup+0xbf/0x160 [ 2857.233430][T16279] hwsim_new_radio_nl+0xea4/0x1b10 [ 2857.233451][T16279] ? __pfx___nla_validate_parse+0x10/0x10 [ 2857.233475][T16279] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2857.233503][T16279] ? __nla_parse+0x40/0x60 [ 2857.233519][T16279] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 2857.233543][T16279] genl_family_rcv_msg_doit+0x212/0x300 [ 2857.233567][T16279] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2857.233593][T16279] ? bpf_lsm_capable+0x9/0x20 [ 2857.233611][T16279] ? security_capable+0x7e/0x2e0 [ 2857.233636][T16279] genl_rcv_msg+0x60e/0x790 [ 2857.233665][T16279] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2857.233682][T16279] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2857.233701][T16279] ? __asan_memcpy+0x40/0x70 [ 2857.233716][T16279] ? __pfx_ref_tracker_free+0x10/0x10 [ 2857.233734][T16279] netlink_rcv_skb+0x208/0x470 [ 2857.233746][T16279] ? __lock_acquire+0xab9/0xd20 [ 2857.233766][T16279] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2857.233785][T16279] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2857.233811][T16279] ? down_read+0x1ad/0x2e0 [ 2857.233828][T16279] genl_rcv+0x28/0x40 [ 2857.233844][T16279] netlink_unicast+0x82c/0x9e0 [ 2857.233870][T16279] ? __pfx_netlink_unicast+0x10/0x10 [ 2857.233892][T16279] ? netlink_sendmsg+0x642/0xb30 [ 2857.233905][T16279] ? skb_put+0x11b/0x210 [ 2857.233923][T16279] netlink_sendmsg+0x805/0xb30 [ 2857.233944][T16279] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2857.233960][T16279] ? __import_iovec+0x5d4/0x7f0 [ 2857.233976][T16279] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2857.233990][T16279] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2857.234004][T16279] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2857.234019][T16279] __sock_sendmsg+0x219/0x270 [ 2857.234041][T16279] ____sys_sendmsg+0x505/0x830 [ 2857.234061][T16279] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2857.234089][T16279] ___sys_sendmsg+0x21f/0x2a0 [ 2857.234106][T16279] ? __pfx____sys_sendmsg+0x10/0x10 [ 2857.234122][T16279] ? lockdep_hardirqs_on+0x9c/0x150 [ 2857.234159][T16279] ? __fget_files+0x2a/0x420 [ 2857.234170][T16279] ? __fget_files+0x3a0/0x420 [ 2857.234188][T16279] __sys_sendmsg+0x164/0x220 [ 2857.234206][T16279] ? __pfx___sys_sendmsg+0x10/0x10 [ 2857.234230][T16279] ? __secure_computing+0xe2/0x2a0 [ 2857.234249][T16279] __do_fast_syscall_32+0xb6/0x2b0 [ 2857.234264][T16279] ? lockdep_hardirqs_on+0x9c/0x150 [ 2857.234281][T16279] do_fast_syscall_32+0x34/0x80 [ 2857.234295][T16279] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2857.234315][T16279] RIP: 0023:0xf7fd5539 [ 2857.234329][T16279] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2857.234340][T16279] RSP: 002b:00000000f549455c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2857.234355][T16279] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040 [ 2857.234364][T16279] RDX: 0000000000000310 RSI: 0000000000000000 RDI: 0000000000000000 [ 2857.234372][T16279] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2857.234380][T16279] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2857.234388][T16279] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2857.234407][T16279] [ 2858.007935][T16288] input: syz1 as /devices/virtual/input/input81 [ 2858.322057][ T2242] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 2858.504889][ T2242] usb 3-1: Using ep0 maxpacket: 32 [ 2858.517883][ T2242] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 2858.528623][ T2242] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2858.539713][ T2242] usb 3-1: config 0 has no interface number 0 [ 2858.552744][ T2242] usb 3-1: config 0 interface 133 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2858.564637][ T2242] usb 3-1: config 0 interface 133 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2858.603885][ T2242] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 2858.669715][ T2242] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2858.687125][ T2242] usb 3-1: Product: syz [ 2858.691340][ T2242] usb 3-1: Manufacturer: syz [ 2858.701164][ T2242] usb 3-1: SerialNumber: syz [ 2858.720218][ T2242] usb 3-1: config 0 descriptor?? [ 2859.327781][ T2242] usb 3-1: probing VID:PID(0424:012C) [ 2859.335483][ T2242] usb 3-1: vub300 testing UNKNOWN EndPoint(0) 0B [ 2859.365811][ T2242] usb 3-1: vub300 ignoring EndPoint(0) 0B [ 2859.376081][ T2242] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 2859.482138][ T2242] vub300 3-1:0.133: probe with driver vub300 failed with error -22 [ 2859.661382][ T2242] usb 3-1: USB disconnect, device number 124 [ 2861.232655][T20625] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 2861.421586][T20625] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2861.702728][T20625] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2861.722339][ T9] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 2861.730047][T27745] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 2861.788146][T20625] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2861.933081][T27745] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2861.944539][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2861.971034][T27745] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2861.992735][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2862.037211][T27745] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2862.048899][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 2862.075249][T20625] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2862.100815][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2862.122607][T27745] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2862.168417][ T9] usb 5-1: config 0 descriptor?? [ 2862.169064][T20625] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2862.222210][T27745] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2862.243611][T20625] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2862.271186][T20625] usb 2-1: Manufacturer: syz [ 2862.282118][T27745] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2862.310657][T27745] usb 1-1: Manufacturer: syz [ 2862.326829][T27745] usb 1-1: config 0 descriptor?? [ 2862.343532][T20625] usb 2-1: config 0 descriptor?? [ 2862.648493][ T9] hid-led 0003:04D8:F372.007C: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.4-1/input0 [ 2862.793082][T27745] appleir 0003:05AC:8243.007D: item fetching failed at offset 0/1 [ 2862.802363][T27745] appleir 0003:05AC:8243.007D: parse failed [ 2862.836288][T16634] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4810'. [ 2862.886418][T27745] appleir 0003:05AC:8243.007D: probe with driver appleir failed with error -22 [ 2862.889278][T20625] appleir 0003:05AC:8243.007E: item fetching failed at offset 0/1 [ 2863.050784][T20625] appleir 0003:05AC:8243.007E: parse failed [ 2863.079831][T20625] appleir 0003:05AC:8243.007E: probe with driver appleir failed with error -22 [ 2863.164414][ T9] hid-led 0003:04D8:F372.007C: Greynut Luxafor initialized [ 2864.690515][ T2242] usb 2-1: USB disconnect, device number 118 [ 2865.065034][ T2242] usb 1-1: USB disconnect, device number 112 [ 2865.203552][T20625] usb 5-1: USB disconnect, device number 112 [ 2865.235038][T27393] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 2865.255469][T27393] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 2865.294031][T27393] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 2865.331906][T27393] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 2865.346508][T27393] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 2865.406574][T27393] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 2865.434331][T27393] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 2865.451212][T16100] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 2865.469680][T16100] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 2865.723314][T27393] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 2865.789557][T27393] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 2865.815402][ T1106] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 2865.850363][T27393] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 2865.910461][T27393] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 2865.937251][T27393] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 2866.048631][T27393] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 2866.092674][T27393] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 2866.116042][T27393] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 2867.892722][T16891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4821'. [ 2867.963856][T16894] loop9: detected capacity change from 0 to 7 [ 2867.994544][T16894] Buffer I/O error on dev loop9, logical block 0, async page read [ 2868.011931][T16894] Buffer I/O error on dev loop9, logical block 0, async page read [ 2868.022403][T16894] Buffer I/O error on dev loop9, logical block 0, async page read [ 2868.030920][T16894] Buffer I/O error on dev loop9, logical block 0, async page read [ 2868.097962][T16897] trusted_key: encrypted_key: insufficient parameters specified [ 2868.134425][T16896] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4821'. [ 2868.172471][T16894] Buffer I/O error on dev loop9, logical block 0, async page read [ 2868.180497][T16894] Buffer I/O error on dev loop9, logical block 0, async page read [ 2868.254409][T16894] Buffer I/O error on dev loop9, logical block 0, async page read [ 2868.273709][T16894] ldm_validate_partition_table(): Disk read failed. [ 2868.390406][T16894] Buffer I/O error on dev loop9, logical block 0, async page read [ 2868.393024][T16903] fuse: Unknown parameter 'user_id0000000000000000000000000000000000000000' [ 2868.676199][T16894] Buffer I/O error on dev loop9, logical block 0, async page read [ 2868.685064][ T9] syz_tun: tun_net_xmit 110 [ 2868.694736][ T9] syz_tun: tun_net_xmit 90 [ 2868.792073][T11682] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 2868.851928][T16894] Buffer I/O error on dev loop9, logical block 0, async page read [ 2868.866400][ T9] syz_tun: tun_net_xmit 110 [ 2868.869531][T16894] Dev loop9: unable to read RDB block 0 [ 2868.877646][T16894] loop9: unable to read partition table [ 2868.886488][T16894] loop9: partition table beyond EOD, truncated [ 2868.893182][T16894] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 2868.893182][T16894] ) failed (rc=-5) [ 2869.034558][T27745] syz_tun: tun_net_xmit 90 [ 2869.055967][T11682] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2869.075390][T11682] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2869.198834][T11682] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2869.218844][T11682] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2869.366160][T11682] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2869.420744][T11682] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2869.489692][T11682] usb 3-1: Manufacturer: syz [ 2869.526926][T11682] usb 3-1: config 0 descriptor?? [ 2869.624257][T16921] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4827'. [ 2869.956967][T11682] appleir 0003:05AC:8243.007F: item fetching failed at offset 0/1 [ 2869.967895][T11682] appleir 0003:05AC:8243.007F: parse failed [ 2869.996871][T11682] appleir 0003:05AC:8243.007F: probe with driver appleir failed with error -22 [ 2870.039690][T16915] trusted_key: encrypted_key: insufficient parameters specified [ 2870.403880][T16928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4828'. [ 2870.417071][T16928] tc_dump_action: action bad kind [ 2872.814770][T20625] usb 3-1: USB disconnect, device number 125 [ 2874.872241][T27745] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 2875.081318][T27745] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2875.105885][T27745] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2875.215947][T27745] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2875.298900][T27745] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2875.441211][T27745] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2875.489672][T27745] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2875.535121][T27745] usb 2-1: Manufacturer: syz [ 2875.562982][T27745] usb 2-1: config 0 descriptor?? [ 2876.232994][T17153] trusted_key: encrypted_key: insufficient parameters specified [ 2877.265415][T27745] usbhid 2-1:0.0: can't add hid device: -71 [ 2877.282172][T27745] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2877.305462][T27745] usb 2-1: USB disconnect, device number 119 [ 2878.852204][ T9] usb 5-1: new full-speed USB device number 113 using dummy_hcd [ 2879.228140][T17231] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.4848'. [ 2879.324303][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 2879.340076][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2879.356345][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 2879.378349][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2879.415543][ T9] usb 5-1: Product: syz [ 2879.612800][ T9] usb 5-1: Manufacturer: syz [ 2879.618215][ T9] usb 5-1: SerialNumber: syz [ 2879.957137][T17221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4846'. [ 2880.098053][T17241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2880.160901][T17241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2880.375672][ T9] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input82 [ 2880.392977][ T5220] bcm5974 5-1:1.0: could not read from device [ 2880.420039][ T9] usb 5-1: USB disconnect, device number 113 [ 2880.449934][T14224] udevd[14224]: setting mode of /dev/bus/usb/005/113 to 020664 failed: No such file or directory [ 2880.573877][T14224] udevd[14224]: setting owner of /dev/bus/usb/005/113 to uid=0, gid=0 failed: No such file or directory [ 2880.851368][T17255] IPv6: NLM_F_CREATE should be specified when creating new route [ 2881.394608][T27393] ================================================================== [ 2881.402723][T27393] BUG: KASAN: use-after-free in __linkwatch_run_queue+0x5b6/0x7e0 [ 2881.410590][T27393] Read of size 8 at addr ffff8880351f4b80 by task kworker/u8:1/27393 [ 2881.418663][T27393] [ 2881.420984][T27393] CPU: 1 UID: 0 PID: 27393 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 2881.421002][T27393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2881.421013][T27393] Workqueue: events_unbound linkwatch_event [ 2881.421038][T27393] Call Trace: [ 2881.421044][T27393] [ 2881.421051][T27393] dump_stack_lvl+0x189/0x250 [ 2881.421069][T27393] ? __kasan_check_byte+0x12/0x40 [ 2881.421091][T27393] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2881.421107][T27393] ? lock_release+0x4b/0x3e0 [ 2881.421131][T27393] ? __virt_addr_valid+0x4a5/0x5c0 [ 2881.421150][T27393] print_report+0xca/0x240 [ 2881.421165][T27393] ? __linkwatch_run_queue+0x5b6/0x7e0 [ 2881.421183][T27393] kasan_report+0x118/0x150 [ 2881.421203][T27393] ? __linkwatch_run_queue+0x5b6/0x7e0 [ 2881.421225][T27393] __linkwatch_run_queue+0x5b6/0x7e0 [ 2881.421246][T27393] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 2881.421267][T27393] ? _raw_spin_unlock_irq+0x23/0x50 [ 2881.421288][T27393] ? process_scheduled_works+0x9ef/0x17b0 [ 2881.421302][T27393] ? process_scheduled_works+0x9ef/0x17b0 [ 2881.421316][T27393] linkwatch_event+0x4c/0x60 [ 2881.421334][T27393] process_scheduled_works+0xae1/0x17b0 [ 2881.421357][T27393] ? __pfx_process_scheduled_works+0x10/0x10 [ 2881.421377][T27393] worker_thread+0x8a0/0xda0 [ 2881.421394][T27393] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2881.421427][T27393] ? __kthread_parkme+0x7b/0x200 [ 2881.421452][T27393] kthread+0x70e/0x8a0 [ 2881.421477][T27393] ? __pfx_worker_thread+0x10/0x10 [ 2881.421497][T27393] ? __pfx_kthread+0x10/0x10 [ 2881.421521][T27393] ? _raw_spin_unlock_irq+0x23/0x50 [ 2881.421550][T27393] ? lockdep_hardirqs_on+0x9c/0x150 [ 2881.421568][T27393] ? __pfx_kthread+0x10/0x10 [ 2881.421593][T27393] ret_from_fork+0x436/0x7d0 [ 2881.421634][T27393] ? __pfx_ret_from_fork+0x10/0x10 [ 2881.421658][T27393] ? __switch_to_asm+0x39/0x70 [ 2881.421684][T27393] ? __switch_to_asm+0x33/0x70 [ 2881.421710][T27393] ? __pfx_kthread+0x10/0x10 [ 2881.421752][T27393] ret_from_fork_asm+0x1a/0x30 [ 2881.421787][T27393] [ 2881.421794][T27393] [ 2881.619891][T27393] The buggy address belongs to the physical page: [ 2881.626309][T27393] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880351f7c00 pfn:0x351f4 [ 2881.636375][T27393] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 2881.643487][T27393] raw: 00fff00000000000 ffffea0000da5c08 ffff8880b873fdc0 0000000000000000 [ 2881.652066][T27393] raw: ffff8880351f7c00 0000000000000000 00000000ffffffff 0000000000000000 [ 2881.660679][T27393] page dumped because: kasan: bad access detected [ 2881.667087][T27393] page_owner tracks the page as freed [ 2881.672449][T27393] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x446dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 17251, tgid 17245 (syz.0.4851), ts 2880663628074, free_ts 2881393149286 [ 2881.694324][T27393] post_alloc_hook+0x240/0x2a0 [ 2881.699089][T27393] get_page_from_freelist+0x21e4/0x22c0 [ 2881.704623][T27393] __alloc_frozen_pages_noprof+0x181/0x370 [ 2881.710418][T27393] alloc_pages_mpol+0x232/0x4a0 [ 2881.715263][T27393] ___kmalloc_large_node+0x5f/0x1b0 [ 2881.720458][T27393] __kmalloc_large_node_noprof+0x18/0x90 [ 2881.726097][T27393] __kvmalloc_node_noprof+0x6d/0x5f0 [ 2881.731394][T27393] alloc_netdev_mqs+0xa3/0x11b0 [ 2881.736265][T27393] tun_set_iff+0x532/0xef0 [ 2881.740698][T27393] __tun_chr_ioctl+0x788/0x1df0 [ 2881.745571][T27393] __ia32_compat_sys_ioctl+0x540/0x840 [ 2881.751048][T27393] __do_fast_syscall_32+0xb6/0x2b0 [ 2881.756167][T27393] do_fast_syscall_32+0x34/0x80 [ 2881.761027][T27393] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2881.767354][T27393] page last free pid 17245 tgid 17245 stack trace: [ 2881.773837][T27393] __free_frozen_pages+0xbc4/0xd30 [ 2881.778942][T27393] free_large_kmalloc+0x13a/0x1f0 [ 2881.783956][T27393] device_release+0x9c/0x1c0 [ 2881.788541][T27393] kobject_put+0x22b/0x480 [ 2881.792978][T27393] netdev_run_todo+0xd2e/0xea0 [ 2881.797731][T27393] tun_chr_close+0x13c/0x1c0 [ 2881.802305][T27393] __fput+0x44c/0xa70 [ 2881.806275][T27393] task_work_run+0x1d1/0x260 [ 2881.810881][T27393] exit_to_user_mode_loop+0xec/0x110 [ 2881.816170][T27393] __do_fast_syscall_32+0x1f4/0x2b0 [ 2881.821412][T27393] do_fast_syscall_32+0x34/0x80 [ 2881.826275][T27393] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2881.832595][T27393] [ 2881.834916][T27393] Memory state around the buggy address: [ 2881.840556][T27393] ffff8880351f4a80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 2881.848609][T27393] ffff8880351f4b00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 2881.856678][T27393] >ffff8880351f4b80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 2881.864742][T27393] ^ [ 2881.868800][T27393] ffff8880351f4c00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 2881.876862][T27393] ffff8880351f4c80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 2881.884923][T27393] ================================================================== [ 2881.892986][ C1] vkms_vblank_simulate: vblank timer overrun [ 2881.952998][T27393] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2881.960242][T27393] CPU: 1 UID: 0 PID: 27393 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 2881.969802][T27393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2881.979864][T27393] Workqueue: events_unbound linkwatch_event [ 2881.985801][T27393] Call Trace: [ 2881.989094][T27393] [ 2881.992045][T27393] dump_stack_lvl+0x99/0x250 [ 2881.996658][T27393] ? __asan_memcpy+0x40/0x70 [ 2882.001271][T27393] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2882.006471][T27393] ? __pfx__printk+0x10/0x10 [ 2882.011109][T27393] vpanic+0x281/0x750 [ 2882.015094][T27393] ? preempt_schedule+0xae/0xc0 [ 2882.019942][T27393] ? __pfx_vpanic+0x10/0x10 [ 2882.024453][T27393] ? preempt_schedule_common+0x83/0xd0 [ 2882.029930][T27393] ? preempt_schedule+0xae/0xc0 [ 2882.034775][T27393] ? __pfx_preempt_schedule+0x10/0x10 [ 2882.040155][T27393] panic+0xb9/0xc0 [ 2882.043887][T27393] ? __pfx_panic+0x10/0x10 [ 2882.048307][T27393] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 2882.054229][T27393] ? __linkwatch_run_queue+0x5b6/0x7e0 [ 2882.059709][T27393] check_panic_on_warn+0x89/0xb0 [ 2882.064649][T27393] ? __linkwatch_run_queue+0x5b6/0x7e0 [ 2882.070112][T27393] end_report+0x78/0x160 [ 2882.074368][T27393] kasan_report+0x129/0x150 [ 2882.078886][T27393] ? __linkwatch_run_queue+0x5b6/0x7e0 [ 2882.084352][T27393] __linkwatch_run_queue+0x5b6/0x7e0 [ 2882.089643][T27393] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 2882.095455][T27393] ? _raw_spin_unlock_irq+0x23/0x50 [ 2882.100677][T27393] ? process_scheduled_works+0x9ef/0x17b0 [ 2882.106396][T27393] ? process_scheduled_works+0x9ef/0x17b0 [ 2882.112109][T27393] linkwatch_event+0x4c/0x60 [ 2882.116701][T27393] process_scheduled_works+0xae1/0x17b0 [ 2882.122249][T27393] ? __pfx_process_scheduled_works+0x10/0x10 [ 2882.128229][T27393] worker_thread+0x8a0/0xda0 [ 2882.132825][T27393] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2882.139161][T27393] ? __kthread_parkme+0x7b/0x200 [ 2882.144104][T27393] kthread+0x70e/0x8a0 [ 2882.148178][T27393] ? __pfx_worker_thread+0x10/0x10 [ 2882.153285][T27393] ? __pfx_kthread+0x10/0x10 [ 2882.157878][T27393] ? _raw_spin_unlock_irq+0x23/0x50 [ 2882.163081][T27393] ? lockdep_hardirqs_on+0x9c/0x150 [ 2882.168272][T27393] ? __pfx_kthread+0x10/0x10 [ 2882.172863][T27393] ret_from_fork+0x436/0x7d0 [ 2882.177454][T27393] ? __pfx_ret_from_fork+0x10/0x10 [ 2882.182580][T27393] ? __switch_to_asm+0x39/0x70 [ 2882.187350][T27393] ? __switch_to_asm+0x33/0x70 [ 2882.192117][T27393] ? __pfx_kthread+0x10/0x10 [ 2882.196707][T27393] ret_from_fork_asm+0x1a/0x30 [ 2882.201480][T27393] [ 2882.204904][T27393] Kernel Offset: disabled [ 2882.209242][T27393] Rebooting in 86400 seconds..