last executing test programs: 16.601536115s ago: executing program 3 (id=992): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x5, 0x6, 0x7}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x28}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x134}}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="0500000000000000800006000000080003001b7a36249d48551aca7fca3cea71f0f3e3b33728b31bfc316a9a4ffbc78a3596fa4213568eb26643bccf39f790e17c79cd5f18b1b9b0f5ab93dc0b4c672424f949f9ee798b9b9221a9a572bce30eef7dbb1c3184d2caaefc204049a1b846d2e9714685b5883731df4d26c707000000b23179768df29e5b8feae8780617a2b2105f4586056cb7ed351c4e1a133f6cda03072aaa3bb87990827541c3fbc1767a86448de69ab8c69b", @ANYRES32=r7, @ANYBLOB="0800050007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r8 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, 0x0, &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 13.894770427s ago: executing program 3 (id=1000): r0 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='name', &(0x7f0000000140)='ccnA\xf6gr\xe7lo.', 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000370401000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="890c0400000000000500000005000000240012800b0001006772657461700000140002800800040003000000060003008000"], 0x4c}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) r6 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2b, 'cpuset'}]}, 0xe) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f00000003c0)={0x48, 0x2, r9, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000240)={0x0, 0x3, 0xa}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="940000001000ffff2abd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="f9840400110200006000128009000100626f6e64000000005000028005001d000900000008000b00", @ANYRES32, @ANYBLOB="14000880ac1e0101ac1514bb640101010a01010008001300001000000800070009"], 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x8000002) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r4, 0x7b1, &(0x7f00000000c0)={&(0x7f0000000640)=[0x6, 0xf, 0x80000000, 0x793, 0x4, 0xfffeffff, 0x7, 0x6, 0x2, 0x9, 0x4, 0x4, 0x8, 0x4, 0x7fff, 0x6, 0x4, 0x9, 0x5, 0xa695, 0x7fffffff, 0x80000000, 0x7ff, 0xf, 0x8001, 0x0, 0x8, 0x7ff, 0x1000, 0x3, 0x4, 0x5, 0xb, 0x1, 0x8734, 0x9, 0x4, 0x7f, 0x7, 0x1d1f, 0x40, 0x8, 0xbf, 0xd, 0x54b9, 0xd1, 0x3, 0x8, 0x3, 0x3, 0x0, 0x5, 0x0, 0x241, 0x1000, 0x3ff, 0x6, 0x9, 0x800, 0x4, 0x4, 0x582, 0xb, 0x9, 0xffffffff, 0x7, 0x101, 0x7, 0x8, 0x6, 0x5, 0xff, 0x8, 0x1, 0x1ff, 0x2, 0x6, 0x3, 0x7, 0xfffffff9, 0x0, 0x1, 0x101, 0x2, 0x3, 0x80000001, 0x9, 0xff, 0x80000001, 0x8, 0x3, 0x4, 0x4, 0x9d, 0xffffff64, 0x28d, 0x8, 0x3, 0x0, 0x1, 0xfffffffe, 0x665a, 0x3, 0x11, 0x3, 0x6, 0x2, 0x8, 0x7, 0xc, 0x0, 0x1000, 0x3, 0x8000, 0x1, 0xfff, 0x4, 0x3, 0xffff, 0x3, 0x0, 0xbf38, 0x4c8, 0x3, 0x800, 0x2000000, 0x1, 0xf7, 0x4, 0x9c, 0x154, 0x1, 0x6730, 0x3, 0x3, 0x7, 0xf, 0x8, 0x5, 0x6, 0xffff, 0x8, 0xb, 0x9, 0x0, 0x1, 0x6, 0x9, 0x0, 0x48, 0x89, 0x7, 0x81, 0xa, 0x2, 0x6, 0x52abf46b, 0x9, 0x9, 0xf, 0xfffffff6, 0x8, 0x3, 0x3, 0x8, 0x5, 0x9, 0x6, 0x7, 0x4, 0x8000, 0xfffffff8, 0x36d, 0x8, 0x9, 0x0, 0xc, 0x6, 0x101, 0x6, 0x6, 0x6, 0x9, 0x100, 0x4, 0x4, 0x5, 0x0, 0xf, 0x401, 0x10001, 0x6aae, 0x0, 0x2d, 0xffffffff, 0x8, 0x0, 0x3, 0x4, 0x1, 0x1, 0x5, 0x4, 0x1, 0x5, 0x5, 0x1, 0x2, 0x3, 0x9, 0x567dc6a3, 0x2, 0xff, 0x3ff, 0x8, 0x8, 0x5, 0x9, 0x10000, 0x81, 0x10000, 0x80000000, 0x4, 0x3, 0x8, 0x3, 0x100, 0x1000, 0xbd, 0x7, 0x1ff, 0x5, 0x8, 0xfffffffe, 0x3, 0x1, 0x1, 0x1, 0xc6ad, 0x9, 0x0, 0x81, 0xffffffff, 0x1ff, 0xfffffffb, 0xded, 0x5, 0x1, 0x0, 0xca7, 0x4, 0x0, 0xfae6, 0x7, 0x6, 0x3, 0x6e, 0x4, 0xfc, 0x5, 0x80000000, 0x1, 0x7f, 0x4, 0x4, 0x7fff, 0x46, 0x8, 0x4, 0xffff7fff, 0x7, 0xc5f, 0xe09f, 0x49, 0x3e, 0x6, 0x1a, 0x82, 0x7ff, 0x3, 0xf08, 0x7, 0x5, 0x5, 0x1, 0x9, 0xffff, 0x9, 0xa41a, 0xf8000000, 0x3, 0x7ff, 0x4, 0x7, 0x8, 0x4, 0x8, 0x8000, 0x91a, 0x10, 0xca3, 0xd7b, 0x7, 0x200, 0x1, 0x101, 0x3, 0x2c7, 0x7ff, 0x1, 0x7f, 0xf, 0x3, 0xfffe0, 0x3, 0x2, 0x6, 0x9, 0x7, 0x4, 0x3, 0xfffffffc, 0xffff, 0x0, 0x9, 0x0, 0xdde, 0x3, 0x55, 0xfff, 0x6, 0xd, 0x38fe81ef, 0xdf, 0x8000, 0x6, 0x0, 0x43, 0x2, 0x5e, 0x7, 0x81, 0x0, 0x1ff, 0xfffffff9, 0x8, 0xd56, 0x1000, 0x7, 0x2, 0x0, 0xff, 0x13, 0x9, 0x8d, 0x1, 0x1, 0x77898615, 0x6, 0x611, 0xc2, 0xfffffffe, 0x0, 0xd5bf, 0x8, 0x9, 0x2afa, 0x7ff, 0x7, 0x5, 0x8000, 0x2, 0xffffffff, 0x0, 0x7, 0x5, 0x0, 0x3, 0x8, 0x2, 0x0, 0x8, 0x0, 0x100, 0x5, 0x200, 0xa8, 0x7ff, 0x0, 0x7, 0x4, 0x6, 0x2, 0xb, 0x5, 0x800, 0x10001, 0x4, 0x100, 0x0, 0x8, 0x3, 0x44f9170d, 0x40, 0xe, 0x9, 0x10, 0x80000000, 0x5, 0x10000, 0x1, 0x800, 0x400, 0x0, 0x4, 0x6, 0x2, 0x7, 0x7f, 0x6, 0x7fffffff, 0x7, 0x2, 0xf8b, 0x4eb, 0x3, 0x1, 0x56, 0x1, 0xa3b1, 0xf0aa, 0x6, 0x1, 0xd, 0x486, 0x401, 0x0, 0x1, 0x3, 0x9, 0x592, 0x7, 0x8000, 0x101, 0x6, 0x6, 0xc0000000, 0x3, 0x80000001, 0x7ff, 0x1000, 0xff, 0x3a, 0x4, 0x200, 0x1, 0xd, 0x9, 0x60, 0x2, 0x2, 0x3, 0x2, 0x5cc, 0x7, 0x0, 0x0, 0x1, 0x8, 0x0, 0x81, 0x6, 0x0, 0x1, 0x4, 0x1, 0x200, 0x0, 0x9, 0x6, 0x1000, 0x0, 0x0, 0x6, 0x1, 0x10000, 0x0, 0x4, 0x0, 0x1000, 0x80000001, 0x9, 0x4, 0x8, 0x1, 0x5, 0x40, 0x10000, 0x0, 0x9, 0x1000, 0xffffff81, 0x4, 0x5, 0x8, 0x0, 0xffff, 0x10, 0x0, 0x4, 0x0, 0x7ff, 0x5, 0x4, 0xfffffff7, 0x9, 0x3, 0x2, 0x4, 0x9cc8, 0xde00, 0x5, 0xe, 0x8, 0x8, 0x8, 0x8, 0x2, 0xe, 0x7fff, 0x3, 0x6, 0x1, 0x401, 0x8, 0xd, 0x8, 0x3, 0xe, 0x80000000, 0x4, 0x1, 0xc, 0xf, 0xe, 0x9, 0x14000000, 0xf, 0x23f4, 0x9, 0xfffffffb, 0x6, 0x3, 0xa879, 0x4, 0x10001, 0x4, 0x6, 0x318b, 0x9, 0x8, 0x80000000, 0x80000001, 0x2, 0x2, 0x9, 0x3, 0x0, 0x5, 0x9b8, 0x7, 0xe, 0x2, 0x0, 0x4, 0xb3e9, 0x1ff, 0x8, 0x200, 0x80, 0x7, 0x320, 0xfff, 0x51d7ecb8, 0xcb26, 0x1, 0x4, 0x9, 0x40, 0x8379, 0x10, 0x100, 0x8, 0x8001, 0x1, 0x9, 0x800, 0x1, 0x4, 0x6, 0x8, 0x8, 0x1, 0x3, 0x5, 0x58d, 0x200, 0x7, 0x67, 0xe, 0x7374, 0x7e4d066, 0xb, 0xff, 0x8, 0x6, 0x80000001, 0x80000000, 0x2a, 0x800, 0x1, 0xa, 0xc87b, 0x2, 0x7, 0x9, 0x0, 0x0, 0x4, 0x1ff, 0x9, 0x8, 0x9, 0x650, 0xf, 0x81, 0x7, 0x9, 0x4, 0xffffff81, 0x6, 0x6, 0x31b11752, 0x8000, 0x3, 0x0, 0x1, 0x80000000, 0x6, 0x1000, 0x5, 0x4, 0x1, 0x8, 0xfd, 0x400, 0x2, 0x7, 0x460a, 0x8, 0xdc7, 0x1e, 0x5, 0xcb, 0xffff, 0x4c30, 0x9, 0x3, 0x8001, 0x7, 0x1ff, 0xffffffff, 0x6, 0x3ff, 0x252, 0x800, 0x5, 0x2, 0x5, 0x8, 0x80000001, 0x9, 0xf, 0xd, 0x2, 0x4, 0x95a, 0x8001, 0xfffffffd, 0x101, 0x0, 0x7, 0x307c3d61, 0x80, 0x0, 0x10d0000, 0x45, 0x8000, 0x1, 0x100, 0x9, 0x8474, 0x6, 0x101, 0x9, 0x0, 0x9, 0xb1c8, 0x101, 0x10, 0x3, 0xf, 0x8, 0x10000, 0x401, 0x401, 0x1ff, 0x9, 0x6, 0xf, 0x3, 0x1, 0x5, 0x5, 0x800, 0x6, 0x2, 0x3, 0x6, 0x3, 0x0, 0xe03, 0xfffff60a, 0x7f, 0x0, 0xfffffbff, 0x8, 0x7, 0x9, 0x5, 0x1, 0x0, 0x6, 0x27, 0x1, 0x0, 0x3, 0x3, 0xff, 0x10000, 0x3ff, 0x6, 0xc, 0x2, 0xffff8001, 0x6, 0x6, 0x8, 0x9, 0x9, 0x7, 0x432b, 0xa50, 0x9, 0x4db, 0x1ff, 0x4, 0x5, 0xc36b, 0xa13, 0x6, 0x5, 0x79, 0x9, 0x75f, 0x2, 0x1ff, 0x8, 0x7, 0x658, 0x3, 0x7, 0x1, 0x1, 0x100, 0x389, 0x10000, 0x7fff, 0x2, 0x6, 0x7, 0x0, 0x0, 0x1, 0x4, 0x5, 0x8, 0x1, 0x7, 0x0, 0xbd, 0x3, 0x8, 0x8, 0x0, 0x401, 0x8, 0x2b, 0x4a9c, 0x7fffffff, 0xffffffff, 0x0, 0x9, 0x0, 0x5e6bf677, 0x8, 0x0, 0x2, 0x5, 0x5, 0xffff2995, 0x4, 0xce8, 0x9, 0x7, 0x52, 0xfffffffc, 0x8, 0x9, 0xffffffff, 0x2, 0x7ff, 0x0, 0x9, 0x4b8aca56, 0x9, 0x7f4a, 0x95d, 0x81, 0x6, 0x0, 0x7, 0x9, 0xb, 0x6, 0x0, 0xa, 0x1ff, 0xfffffffb, 0x2, 0x3, 0x3, 0x4, 0x2, 0x4, 0x3, 0x4, 0x3, 0x9, 0x9, 0x4, 0x100, 0x6, 0x1, 0x40, 0x3, 0xffffff00, 0x7fffffff, 0x1, 0x7, 0x9, 0x3, 0xc, 0xe, 0x3, 0x80000000, 0x2, 0x3, 0x5, 0x2, 0x2, 0xe, 0x0, 0xa, 0x2, 0x4, 0xc, 0x5, 0x0, 0xf, 0x7fffffff, 0x6, 0x3, 0x0, 0x7, 0x1, 0x4, 0x821, 0x6, 0x6abc, 0x540, 0x5, 0x300, 0x5e0, 0x9, 0x8, 0x4b71fb34, 0x0, 0xffffff72, 0x40, 0x5, 0xce13, 0x9, 0x8, 0x7, 0x7, 0x6, 0x80000000, 0x101, 0x0, 0x3e, 0xa, 0x6b28, 0x3, 0x7ff, 0x81, 0x9, 0x7, 0x8, 0x5, 0x7, 0x81, 0x0, 0x4, 0x6, 0x4, 0x40000, 0x5, 0xc8f, 0x9, 0x1ff, 0x2, 0x5, 0x7, 0x7, 0x6, 0xc, 0xff, 0x5, 0x10001, 0x401, 0x1, 0x0, 0x7, 0x4, 0xfffffffe, 0x2, 0x5, 0x4, 0x5, 0x4, 0xf, 0x327, 0x7c, 0x4, 0x5, 0x6, 0x100, 0x7, 0x6, 0x4e8aaf00, 0x6, 0xae1, 0x3, 0x0, 0x6, 0x5b, 0x6, 0x7, 0x1, 0x5, 0xa, 0x10000, 0x0, 0x8, 0x9, 0x3, 0xf, 0x3, 0x7, 0xc, 0x3, 0x0, 0xf1d, 0x0, 0x826, 0x5, 0x153, 0xca8, 0x7f, 0x4000000, 0x7, 0x4, 0x401, 0x4, 0x8, 0x0, 0x1, 0x200, 0x22ef, 0x7, 0x1, 0x0, 0x6, 0x4a0, 0x5, 0xffff, 0x1, 0x1ff, 0x6, 0x10, 0x7a6, 0x6, 0xc], 0x4, 0x400, 0x7}) ioctl$TUNSETDEBUG(r7, 0x400454c9, &(0x7f0000000280)=0x2) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x14, 0x1e, 0x301, 0x2, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) r11 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r11, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @loopback}}}], 0x20}}], 0x1, 0x4040880) 13.473029633s ago: executing program 4 (id=1002): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) close(0x4) pipe(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) io_uring_enter(0xffffffffffffffff, 0xeb6, 0x26f7, 0x1c, &(0x7f0000000100)={[0x1]}, 0x8) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r2, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r5, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r6, &(0x7f0000e15000)={0x2, 0x4c20, @private=0xa010100}, 0x10) socket$inet(0x2, 0x1, 0x0) 12.568469963s ago: executing program 1 (id=1004): openat$iommufd(0xffffffffffffff9c, 0x0, 0x64c842, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x5, 0x8, 0x0, 0xb}, 0x0) r2 = io_uring_setup(0x664c, &(0x7f0000000500)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x2, 0x1, 0x0, 0x3, 0xa, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd28, 0x3503}]}, 0x50}, 0x1, 0x7}, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) accept(r6, 0x0, 0x0) r7 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_WKALM_SET(r7, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x16, 0x16, 0x0, 0x8000}}) close_range(r2, 0xffffffffffffffff, 0x0) r8 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r8, 0x29, 0x17, &(0x7f0000000080)=0x4, 0x4) shutdown(r8, 0x1) r9 = socket$alg(0x26, 0x5, 0x0) r10 = accept4(r9, 0x0, 0x0, 0x800) recvmmsg$unix(r10, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 11.37231822s ago: executing program 4 (id=1005): mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f9404010014000000000000000006000002000000020000000000000048000000000000000000000001"], 0x80}}], 0x1, 0x4000004) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000150001030000000000"], 0x14}}, 0x0) r7 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1e) sendmmsg$unix(r2, &(0x7f0000004680)=[{{&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f00000001c0)="3c0121c2ffddf1f67a99e150c3df39887c28b1320b58341801359f98e4bed839bcc6e0011057c538aa53a5aca7222e74537b106a80e722072f7dbb35cc9d", 0x3e}], 0x1, &(0x7f0000000940)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r5]}}, @rights={{0x2c, 0x1, 0x1, [r1, r1, r0, r4, r5, r3, r3]}}, @rights={{0x24, 0x1, 0x1, [r2, r3, r6, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0xd0, 0x1}}, {{&(0x7f0000000a40)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000003080)=[{&(0x7f0000000ac0)="f3d9c8c023d5e127b2804652e14c23", 0xf}, {&(0x7f0000000b80)="e0d505c032b745dab8ff5aec38e0725f6f43cfa6f769efb66e7f5c787d386ea2e1f2aad958624c1e5f1321d605188e64f69846da992875c1c849275b4a85aabd366262fbef6c572f3c66b4e2b1fe4b232b1c3cb7e9cc1447bfcb8d2ca14ef32f1c6f1c81", 0x64}, {&(0x7f0000000c00)="f587d1daff2aecd6c5ffb383cf211081b450af89ad004375d0903fa23bbb4b931c376b8e4e3a630243ae220119251d286eaad16cafcfe2d59e632e70dca38a1fde9fed1a182a1bbb55e7d63fe87f73705841b7269e967b864690", 0x5a}, {&(0x7f0000002d80)="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", 0xfb}, {&(0x7f0000003480)="e250be00a4396baccfd4332ea4ae203e95e51fe3018d92005a79f511b84ec4db029b6cb4dc663daf3b38fbd7b7d558e613277e69efb72b71229dc05a177dbec9ea7a4459b5b847466c905deb369f633f08b15e4a4eab2f2a64b67521819584074ca4e24296e21d8d325d50dc7e8250fac0a0a612833441aa631d2f84b237b0b0e792754ff86e53a5e81834f2fa8d46c44f4e32d0cc2d49a6780d4804760461232eeb671713294fdb3d7f8ebbb683eb621b1992d76f2ce959cf632ba174086a1054f7b297a50682bb68973897938cce1ef6389d08333812efe9514b808b661a2bd276b4b9cd64edcb83870d44f9c77cc2c97ec72c88da5806ffedaeca42255d9eda9f2927141afe135c43aa805018faad0fb6e865d78a8c1f7196f4d5cb707a546d8158eab818a89d6f36bff631fc2da4bf672fdb49dae520614699de017782560f8d5d796534945cfcc7259cde8d99df20d3a613c64b1a82f9b5310df75db39b3bb2a47b30f979b56a898f543f50da0caf165b3da476cb352ad74b4fe4a7b723720ffcfd1f3e0317f5a2774c3bb85bb190607129d70c229e291b4f7a6901b685c32a590e59fe280f662b10810f001798638f8e9f5b48f95f0dbbeaef35ab2bfda43605803d806791c78bcc3cf7da6952c96e8ebeef5b8343c01e2a11fba7ded22d9be98d9af0e40bef2efcc1b50e461263cc1ac087ae72b864b76cb52f31f6bf8fa13a6f46c0993a7d50b22c875336df81e2058d6e1336012fbc6ba80033ab31076ac7205ea056b5fb4650ee4127601a69c3204bfbe1100fcc14436c59c8aaf0160419ca4bd1666375ead1989c09d69b39a60f53848ae9a2d2c05c2720cee07c30ded44b4c31f7e9562de4d5bc179b48805a95a509c3f9d42f609b47a3032cdda81cca38a4e126066e26ae03253c8dcb4bf179ecb44aaf25b4b6fd8ecafa82462cd5b926e21f538e2f8606861acc40bf362174a8b988288dc6db4d92179407643d46d2248178d62bbd5e98687285a5eb9e4b4989b47e2acaaef60f7e73a88a50e43fbe862c43016c5cf511259e426b2e205f6bb5bbe3965c19383272c5173274fecbe32dead68aaf38f27222391b9312d82278aa9c3019699da9f12634f2648bd6347aaa94f1ce9e986753ff35cf52a26aa472fa59708f3f0746c7dc545b5333911e7deeafe9ac9396d9583c34d68a746ede31a2a4a3d7655024b414befaa7b13a62cd236d829d46e57c40ad401a7cf0321844abd6d95068804a02af46366b08cad8444ebdb261690bee56cd43d1a8eb45d7f814128a02874d0704b07aa8939d58a86adf2048a6abedda52dc1b64d9a219d3e88071fca14d446094fde3cd677c71da9da5a1333e931755308ce2f2a1b77a9984769b4dae010308ad7c0f2aa917fb9a4868c7b795206d25434b37cf591bb1566895934ee12a87ac6f7a2755c72e587a6dc5b4e4f2fc8829b94272ddaf96048c6a3e76e336986a23e2a7cd64183849dea2b62b03c1e0f46ae5e8009e452dfa65f2690618348fbdc3784ea713a17f3e53320dea3d7c7f6d03087ceb9b6eb700acdf059d21a1104a038f886e2b951a15a94e78623ede55b502503c68f4d929933ff03c37a484cd02512541e1eb4b835bf938a34c2c8f4cafd13943d7a751d5cceb24402fcec12d7e4e5ab095eec1bff05fa243e578ed77721fa0a1ba5043cc4367fbef690aea786b4a0273aafce00981ed1f35b269e6f77a283650157f16e8d6067fa7689b076df3b29cd4900ecf49d345d12858c1541c27b10cd3b99df5f4097486fcb277dd4ad66bb40e45b91586f06a7c4ab5e6dd11b18e3389476814fe50cc23274ddd71b8d8d5bbd1d67a41eddcd7b1ecb74c0ff3f6028b542d7350b6849267573455ce70d704e959908bef2a6db8eb1ead08849184cee917911241c2dea908edf0819995b79f75ce941d106c82e4dac9db28d1da03bd25c8a3023d6e3c8e54eaa87ca77cfea729852fcc80b05d0dea852d06431d3455505b11338eb528cef49114dc6c969377ae8e9f2adbe2f349d9d329dc625807d78a8f862062309e210146e7bdde3d9b27335f9b62027e2f118b69720750d0f5acf7428e27ed1321c699f50f03d266427dd77d878187e0c01b543c59c905135b4a7fe0a539fa1521cb59e3b25a49a1242b62867b4c3a4d9d7453a7455922ca252847cf721e5c2e5ad9ebee4756332171458b1757aee485d8ee71c45a8c70880d09629ec37832bc86614e4d39654e12fca47f9b7fd68a4b51ccfb2f0eca753c961b4f2028eaa6a080d64e7f6d8f330b3ef449106c58419a3d4c6ebdd1e37e21be71e1e8ac44b414f9ec2350ac12c03cfde564f32dbc3a874cde447fed6a5d9ce6e390292375fa7a155077f19d629500e0ada4f86eb3b2cc095adbdfce905cd99a9cf499290de1db8fd24e77f5caecac5c9660f9bb1c3b78daec996485c5129440ec649b54758b95bd1f4ec30ef6d452211aeed92edaaa480d5a69e5219e4f81377bc1ae25d85653cbe45b840b1bf78361b6fb15ce67f9eb74c30e3f5c9fd2bcc0c5cd1cd7be197eb59863bdb130d28e14279cf2cc5327dd1c790e9d572d4eae4aa896a1966d96ba8b5895da6062f9643baaddf3ad93c205015789a70e8d8275c40877383974cb94c0d8c9ada6ec154ba74a2994da3d71970bfd2103654aa0e49a717e9078805791666073bc9a439c57f77943b863ee3191ecaad9da9dbc06b73f893a92667d73bf19b33679d4bcdb35a1cf3c21b4139f6733016e24f921f41acecac5350ab07690761148cb6168261479106b88b7397964bf699c2a9fc7a5f06a815f04fbf98a77062ed742e12c41113c69729368d425e8a3a8a47bc9511409a87275000cbc8fd21602ec7ec28d35e3f9e50960d900bb4a9da5b884606d73fe5bec4682363197970d750af5fd3add6ee3f324697ed93c48904102d6c40200c73b0c6a2a19b96749a3b56e1da02994902b21251d221d4d57d6e095eea4657554aebb8b832da7a8e3d05b3b3c01582fa6a1278ff38574c26808137f0f07c8b63b74ef1a9bb3366ccb70f6eb685a996c122a2688d53f5d062f80d825cd480bccaa605a18063195aab7f23af71240ebcf025bbf24b968f1c8c48c14e245444af87150f1f0640c5bb3203d8180dcb42c2d320f17da318e4c4ab3dde4cf19aedf8ae5855bf817cc6b4e7250e2b9493d6003a2d5cf758cc03580d7564baec4ad3ec928f4cc939608624f3b381a9942de5f51f5b64c6ae4b3bf88992df1e1bb0f1e67cf80ed7f336ebbdb4b1dec1dad4f4d1ad095bbe5019e71aa7184a7da8fbb10ce1e5a478f78de0a6ffa68de0410cc985421e22ae59804c40174a30d9b90bcf0abcc0cecd04bf67971193c3164a0099be9d70ba9d059ea26931ca7df9a97dcd414ef6b6e4367b19ff278016cd1313fd957ca6310e2e7efda1488447f944396a847b6bac0c71f42d618918815b38530416f08543e4ec599f39bab0f7be206a0c261930bd3f75e2e3485889c55c289315995a0bc7985cba27ef2bf1e5f85e6275410c7a38da753b2e5deb11350a1695d4b37825fc8145c05fdfd3a1d2abd57054317432c1061db0a33f5998b8cc4838088736af731ee48a9a8ca823ca73f9263d2791fbf7b8275952950feaa75bd43233532e1dfeb75366ce81f9bb4b917bd74f43d8451f4bfe0fa29e8b0a05beabbbcfc210a88cddbf74c03f312a30d59ce61e0a1fd94582af154949717768f8b5d1ef2d3a4b2164daa4bb2c30ebff4b5c40d7d9a44c3512b078b82bea191b2d598d1b942f8e390d7c241eee882ba0342953340a093d7cd3bfca05623b73eb39d346c2b3972d8e0dee93c902dee721d0357eaa6961dc3e0c27b6d41d76b064ab8e35ecf6902ba9bc67dd2f09c8e9c1c65c951e795098fd71538020f4962b60ac7e07f94673bed2c63e7b0b8155e8a381eea7429f598dc77cf45f2afb5ef75153dfd42d446730250cacacdd2f781ae6ed108cd79fac35be896fba35dc90804bd84f4bf900589379aad11c1e0dd2de37a8f6b23ae1ab83cd80241a2ba5b707e6d03541d78971353c7817f167b003ffc4e2097f9852416d71b63e45a9c3e2c2d3d4f382db2d55849fe3ddeb0dd2dc409584a9a7c86c254913149bb6527fde1fbdca20511274d2fffa853ca7835f442486c4290a8a0d89d407308b6ccb1e95060be130f2e886283bdbc663fc1a2cbc7c4d943592417f7465fa92bd563aeaa691fd6bd0cf3d37da2c7943aada2005e7f4ba1e294b873bfd471fe03781cc4699efa6d4da5a3a9b2f81a72be051316978ee14a4d5e89c74a21fbb44ba5bdc84a9d733ebe4e2ce43149d62b3c69388d5bc46b571bddc0a4685246faaff8fe525b94d771f702626219b63de1b33879951ce8678aa3ab48cf58a816dfee60f79f92f07d85e3ecb65a307a815035083f9ff5789a3bc5089835bcc323b4a38bb30b158bcbc0d2a0206df01c47c6630c8d241e7bd36dcfb30aa7d295d4cc73d20801dcd839c69c6ecfae67a13f0768b6a385c3b19b129917f94fab9f24bf894df361e6949d3327fe8dcaab606a1c6a55b9bfc38d5dba8d75f0cf85f6dce7aebbd458ba42574f36624bf8bcaa5dac54778827bd695ed59bcb8a8d1840f3f39bc53060a1f0312039b34efa6ca36449c04466054723a13d0381e5443c89c5556e5f5b37ced6427e7eba89c23a2302da9e8836eab7bdbb7795a9f4c302f52a99a6a9aa0ff9610f233b7aad29a722ee0d7881e99be1f8b03c3a49eaf86ca88e531ab648c3f8d3f22f6a233faf0a45d579c69e180cfd1c299b6f5816acf20df1509628b8f48f6a8ed73908dddea9be14ee7e705eaa8cc3f99dc99f1a1a314c05ddc10769572c233858618f440f30092f82dd34b3e52ec052c832bf1cea66a37a42480a70fff5411f9e66b78f9162fe66a63e9fc9f3a0e2e3bdca2184b2e0827ccd00c4f1f8ecf1caadf2ba28c628cff419c65e98011cc39ba1e9b2e80d4c4ddba768b99e8508b84500daadf2d7bd17e946bd13fb24a2ea5c73b1e2542698ac166d008df55055a7e2b54c310947c7f9452b952f0127fe93af85d8a3d281099acd2eaf0136e054d6937984887c7265c989644648a9098e4403f1b7f3ee6dfe1921f18595455239db65fee1def29df0871b4c582ecde052da1d408df3eb8ad106fa201f836763aa715ae7ea9b3c48f6c9382db9ceb513b8fbc2aab5faac4531efb8c3e67cc3ba3f6334f09f2c0233d16f2db9163a9d863f94addc04aa5f9cb846e91de2d4d445d5ab4536b4e9194c64e7f4b04a87aa65788f7ce4a7feed4b5486b30a32f1abde7f6ba3b55eea8f75ce2848dfda8ee91074c05e9a60fd61fa5bfd9b68ecce6075da558a3710b9614faf8b54435d0c3e6137a3cadf17d4fc9e77e2d77394b075e1b9401d83723eadff8702c880c2b94db9ddb3626f2a3d018f3da3e1f3e66988bc6955e3e6e8249c8e2b664621a53728f44ab2ac2f440e1695b258bc242977a94bf9c0653ca505ee5a106363e136ec9a8d75da196980c7222f26b6dd89abb4659bb694599cfa16b625aed3e198a9566e1e2066e8f090df5e3e3d2062dfd764deaf75c81efe25632353681ffd3144cf18a4b2f0a06f398a246edc5fc2486f5efe955932c317ff445a6ae28ec0afbcfbe1d262ff47b48fcb950b5a56388ad8027c39d00667b6ec84dd960a6874317a909c38a179086d557805c0c1d3060ae644e51633ac18bf29a50d92048b7f789c9fb38e352c1ebcf62ca4c8f32acd9d4ecd0b34a357423197a7655e9ddd8815135da415c49d", 0x1000}, {&(0x7f0000002e80)="f6f08d8103d0c945b4b239aba86155295203295e32bda7527f6ba47f04f7cd99d032e8dc060daeda44bd31ad90b386dc36e6d4ad9c9f7a38249b4c365533161ff92c860726d0636f2c3def345790659a890ee9296ce272b9addb642f651a3240cc97c0bf7b02919ae036c3f5b4df6c790d51c308c684a928816d6df478b9d6f113d0226d891182c68a22518018ee814d2c2715f6f7ac1b763c3f50707772500beace2b70dc", 0xa5}, {&(0x7f0000002f40)="1c6a8841c6d9eda9624d70e4893a7a63d3a60f7909b0e7db1825f83383c31f3ce93084f3b9e450e8ba07be3b248167535dd3346cbfb5cae3aa572fc426f90a42c2528b4d5f27fa9aa975b2f445fa0a3b0886fa1fe274314a6abb19a6f5d5786fca5ad9d55db6840f332bae06558c54d9a655ccf8b389d0a7931dbce61aa397c6", 0x80}, {&(0x7f0000003000)="6944b9124c0256dc5bc227069ca7c9c3d48176a1e4237a8fa3041cc5ebae20d1cc662d59b55edcdf6ee185d06b476e6017972c9a816e48705b4ecbd38158cfdbd8", 0x41}], 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r6, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB, @ANYRES32=r6, @ANYRES32=r0], 0x110, 0x40}}], 0x2, 0x0) read(r6, &(0x7f0000000080)=""/186, 0xba) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x230, 0x0, 0x8, 0xfa04, 0x98, 0x6c02, 0x198, 0x194, 0x194, 0x198, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x32}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@rand_addr=0x64010102, @broadcast, 0xffffffff, 0xffffffff, 'geneve1\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x0, 0x3, 0x8}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x5a5, 0xc20, 0x1, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, 0x1, 0x10, [0x18, 0x2f, 0x22, 0x8, 0x1d, 0x18, 0x15, 0x2e, 0x25, 0xd, 0xe, 0x2, 0x1a, 0x2d, 0x39, 0x3f], 0x0, 0x8a, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r10, {0x2, 0x0, @local}, 0x2}}, 0x26) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r11, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 10.917149198s ago: executing program 2 (id=1006): syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x1b5}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ad1c00105080"], 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='!'], 0x14}}, 0x0) io_uring_enter(r0, 0x80002219, 0x7721, 0x16, 0x0, 0x0) 10.107718035s ago: executing program 1 (id=1008): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$poke(0x4, r2, &(0x7f00000011c0), 0xfffffffffffffffe) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000040)="f3f36566460f860f1b0cf666b8af0066ba410066b8000066eff30f1dac4d91f148780165f30fc7760064f043803590000000c166dc7790470f796100f3f0816500cc041a08", 0xfffffffffffffe84}], 0x1, 0x15, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) mq_open(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r9, @ANYBLOB="24005a8020000180140009"], 0x40}}, 0x0) memfd_secret(0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r10, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010"], 0x10}], 0x1}, 0x0) 10.031985994s ago: executing program 3 (id=1009): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x2, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'erspan0\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x35, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket(0xf, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r6, @ANYBLOB="0800320000000000050033"], 0x2c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="576332f56236be7cfa73a36e5e436485a425bc1b921f22ca2d2a337eadf8319fe6a960f0f3b068e86c81441ebd2df73b1face8317ea70caa41f5e55b8523aabbbcdf1da83f227ae1208115de48e2a3fb3d4e4fd419b77a9b8c34a78300e6faa7a8362f89116b85ec1441bd2a13b9cce2ccfc334aba8b9cf61e3061b4b6f93b6ee030ce3a7e5f386f60059793878ca0df7398efba666be33efb40dfcf4a30d81e151d4e9bb23b8440047b2d849f7582e803", 0xb1}, {&(0x7f0000000480)="7540d8d901cb197301018595109be3b8ac14f3059416511cb78798420e7d084d41e734b66c98e3c9aa439b165519a6c55a3c86993e31ad1e667453deeed34482f1bf0d167c1d96209b7a374155a9f136133042ae77c8f58b6baa259d7fd86fe401723eae2826cd9111d7ccba45724c3ed6ef156a7200ef9dfe0399771f6ba6e21b3566efdd19d5d0923261f97c9c6798628817a9c585c1769ffe3f5e03180d30c1a12f3426fb06215cdad006b8d1b0259864de5e393e5032185430d8e114b0b9449ee7fc45158fce125bcce91e39be6adaefe096c433c5dc24f27cba1feb", 0xde}, {&(0x7f0000000680)="6125358b15cfd1b7424c9e026a766ce3b8a4d5bbf0f78ee9c3b094e0c9d272479e798bf977e94be9f42cef87292cbd0c9be18fc48fb0f00fd841aa51a584228890bba345d617e165c3fac9723e53765adc8c13fe93245e4a7e08c5645773b400c755e91dc0af29f46715267afb7947afc0addf510da112fa8b654757a5020f411ed2656909a86fdc6c9ea745882e029f4cefe31858b1facf0c08ea2c59f629dc17b7c3658802215a6f05a9f1", 0xac}, {&(0x7f00000003c0)="49f417814105a46aac87547e8a344dfb0996ec95076a3d12e699218ca98f4bffcfad38993d93bb646043", 0x2a}, {&(0x7f0000000780)="f318b45a3d8aed513e90235d54300a6373f775e36a58ca0f53e3ddcd8b8dccb6a2fc05b6d6f9ecba74e748a991ffbf264467e94b4622db20df0382c1ff1ca8dc6a9f6e05a36e6261f8b9e13e1b8753dd636e8f239d1de3b3f326ef84075a654a454e9f764f190397daee88879aafaa6b81a213802075e23b5dae233523677cbb255ff674afad254ed56fead3035b7bfc225c3d6b235d04d21e516562b0f5f513a7", 0xa1}, {&(0x7f0000000840)="4df37d3624c065eee5f80b7203eb165997617c9d9c98453a7b12458794916e34c2306f321a10e2a52e4651755b7c3b327ba4e778b3c2325b25a00c7909bb00c4c11383282420d9d19c646d545bc67f5d031389fc9fcdc529905ea64d202e493f2eb151a66d555d94946942bcc350f28561f55b9d77d7f402bc8d6f5a958c4ca6bc4c6d7bc99782c5c9d1a35c84b557d29ff533aa244ed6284055338502695a6605660d5763c464a8f68b3178ae21", 0xae}], 0x6, &(0x7f0000000900)=[{0x88, 0x10a, 0x9, "4a6c4c313fb87ee7b5253ac5691001d14e962f43cc66d6432f54e68969165e3f5b5b917b552b721a675ee63edfd8693e949c8a23f03e22eb79c4304c77e701ef9f5b6ddb463087b577861f18bb4ccdb5a43c9bd0acd5c7eff67ed38113ce3706ac84fe777ba0ef077eacdeb6189fe51beef770fe0cdc08b8"}, {0x78, 0x10e, 0x96, "441ca7fddda290dae91e8b290f9a642b066eb2b552ce05ee55be7847bcf07d1d8c31ae790e11969960a62268cb112e53fad6f0e76016d4d57bbf3c33ac20281251fa8c6a47e0bc92230f46f92c58c0d540bd3e8d721f33440919485bd7aa80bfeebf34fc9ee837"}, {0x50, 0x112, 0x24, "99030750f6ddb8744a9be51ac55291b7179d901b69d68583c345dcc2770692fa6ae1a83efb8145a8330b90c65fa083e333a66f67ff3adf520dea91"}, {0x28, 0x116, 0x5, "b118faf3db121fc5d85fc9e5065a1bc379a2874f98"}, {0x10, 0x3a, 0x40}, {0x28, 0x116, 0x24, "18b8c31bbf03e8598596534166b293f904e0"}, {0x58, 0x10e, 0xb, "319c6bae61c5cfef1b1ff11a4066b9f04611f5705cb9113068ef7583e8dd15a12d6dee5ef5f6532579cf788e88ece806fe56d31bc8d122993a3d29a26d850ff8fdb605edc5d0709d"}], 0x208}, 0x40000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x34}}, 0x0) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r8, 0x2000000000000004) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r8, 0x2a) keyctl$unlink(0x9, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000861a1820830447370200010203010902120001000000000904d9"], 0x0) 10.026868895s ago: executing program 4 (id=1010): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x5, 0x6, 0x7}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x28}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x134}}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="0500000000000000800006000000080003001b7a36249d48551aca7fca3cea71f0f3e3b33728b31bfc316a9a4ffbc78a3596fa4213568eb26643bccf39f790e17c79cd5f18b1b9b0f5ab93dc0b4c672424f949f9ee798b9b9221a9a572bce30eef7dbb1c3184d2caaefc204049a1b846d2e9714685b5883731df4d26c707000000b23179768df29e5b8feae8780617a2b2105f4586056cb7ed351c4e1a133f6cda03072aaa3bb87990827541c3fbc1767a86448de69ab8c69b", @ANYRES32=r7, @ANYBLOB="0800050007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r8 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='test_dummy_encryption', 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 9.857860154s ago: executing program 2 (id=1012): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x5, 0xb5, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x1, 0x1, 0x8, 0x80, 0x64, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x2, {{0x9, 0x24, 0x6, 0x0, 0x0, "eda3e884"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xfff, 0xfff7, 0xce12, 0x5}, [@mdlm_detail={0x58, 0x24, 0x13, 0x0, "4bae94c9d253a0260404dc49b86da4b149ace767de0e704b0f0edf76c06b0e12c53ad257e609c707df9d402941f1e6c68ad5f22b9140b6dfa3b83474295100439be29d77fa9a243812e62eb2efdc9353ae38324a"}, @mbim={0xc, 0x24, 0x1b, 0x800, 0x6, 0x65, 0x9, 0x20ef, 0x9}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x7df, 0x5, 0xa, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x2, 0x8, 0x80}}}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x9, 0x9, 0xfc, 0x8, 0x1}, 0x24, &(0x7f0000000100)={0x5, 0xf, 0x24, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x9, 0x0, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x5, 0x3, 0x52d4}, @wireless={0xb, 0x10, 0x1, 0xe, 0x40, 0x1, 0x5, 0xffff, 0x5}]}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000009c0)={0x1c, &(0x7f0000000840)={0x0, 0x5, 0x3, "e16b03"}, 0x0, 0x0}) 9.035428871s ago: executing program 0 (id=1014): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="0c00000004000000040000000c00000004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async, rerun: 64) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (rerun: 64) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000140)={0x13}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0xf, 0xffffffff}}, './file0\x00'}) (async, rerun: 64) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 64) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {0xffffffffffffffff, 0xffffffffffffffff, 0x2}}, 0x18) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = fanotify_init(0x200, 0x0) (async, rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async, rerun: 32) ioctl$EXT4_IOC_GETFSUUID(r3, 0x8008662c, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) (async) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000680)={0x12, 0x0, {0x0, @struct={0x7, 0x3}, 0x0, 0x3, 0x8, 0x4, 0x9, 0x7, 0x0, @usage=0x8, 0x3, 0x0, [0x8, 0x5a2f28c, 0x6, 0xffffffffffffffff, 0xffffffff, 0xfffffffffffffffa]}, {0x9, @struct={0x5, 0x800}, 0x0, 0x57e, 0x8, 0x585b387b, 0xbd4f, 0x3, 0x24, @struct={0x8, 0x86d7}, 0x7fff, 0x800, [0xfffffffffffffffb, 0x6, 0x239c, 0xc2, 0x2, 0x8000000000000000]}, {0xa, @struct={0x3ff, 0x9}, 0x0, 0x200, 0x3, 0xc8c, 0x40, 0x80000001, 0x402, @usage=0x401, 0x6, 0x1, [0x436, 0x1, 0x1, 0x76, 0x2, 0x200]}, {0x7, 0x1, 0x3}}) (async, rerun: 64) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000a80)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0}}) (async, rerun: 64) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000001240)={0x0, "047d9b535fafbcd5c9d32d1017c62b5c"}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000002240)={0x4, 0x4, {0x0, @struct={0xf3, 0xd}, r8, 0x1000, 0x7f, 0x9, 0x5, 0x1, 0x4ac, @usage=0xff, 0xfffffffb, 0x8, [0x3, 0x4, 0x9, 0x6, 0x2, 0xc]}, {0x3, @usage=0xa, r9, 0x8, 0x6, 0x4, 0x800, 0x7d600000000, 0x50, @usage=0xfc2, 0xffffffff, 0x9, [0x5, 0xcf, 0x0, 0x8, 0x81, 0xfff]}, {0x6, @struct={0x6, 0xb8}, r10, 0xffffffff, 0x7, 0x4, 0x1ff, 0x101, 0x0, @usage=0xaa0d, 0x0, 0x9ee, [0x7, 0x31, 0x99, 0xfffffffffffffff0, 0x8729, 0x80000001]}, {0x7baca963, 0x3, 0x6}}) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r7, 0x0, 0x1, 0x4}}, 0x20) (async, rerun: 32) fanotify_mark(r5, 0x21, 0x40000856, r6, 0x0) (async, rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c030000808f7de8706331cf0004aa8e5f7d4f3be58c5393a93fc981e39ce3799213b12cbd70c14e17ca430bc85abac4397fa7d463751a5b31aaca587c272572728106c5ace02074d5c74542447b1853e4cbfd4e3415b3a34594cc8e4d68395cec57a0491e10b16a30789b8dea8f5de353", @ANYRES64=0x0, @ANYBLOB="13f1965784800000140003006c657464657673696d30000000000000140014006970366772657461703000000000000034001680300001802c000c8014000100e4d84d74fbc2f7f435fc703a8c39421ce50a989252447d755c85b77a55c2d0b2a9d149322156b466ee3a9ad4ae8909aa0a17a40d9cb80e29181c5779ff3abc02c93a320c62b3cd9788594af412083147c21f1a32326bbaddb308cfc3508cfacfe83b609dea1d55a6b0a5f5d2a7d623bd0d958f0a23b3df294fe3f90b4b2233e33cbdfb24a5e0774f7eb33a8f2aa7ad11d900004607"], 0x7c}}, 0x0) 8.115962722s ago: executing program 0 (id=1015): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31000000000000000008000ac3", @ANYRES32, @ANYBLOB="e8001a8048000a8014000700ff02000000000000000000000000000114000700fe8000000000000000000000000000aa050008000000000014000700fe8000000000000000000000000000bb9c0002"], 0x15c}}, 0x0) 8.079583172s ago: executing program 1 (id=1016): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000100001000000000000efffffff00000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) 7.795369576s ago: executing program 1 (id=1017): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='ne'], 0x2d, 0x0) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r4, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x108}}], 0x2, 0xc040) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r6 = socket(0x27, 0x2, 0xe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'lo\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@deltaction={0x1b0, 0x31, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x74, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x14, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffa}}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x2000010}, 0x40000) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) write$vga_arbiter(r3, &(0x7f0000000180), 0xf) read$FUSE(r5, &(0x7f0000004100)={0x2020}, 0x2020) write$vga_arbiter(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='targe'], 0x14) socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$kcm(0xa, 0x2, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r7, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 7.794817364s ago: executing program 0 (id=1018): openat$iommufd(0xffffffffffffff9c, 0x0, 0x64c842, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x5, 0x8, 0x0, 0xb}, 0x0) r2 = io_uring_setup(0x664c, &(0x7f0000000500)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x2, 0x1, 0x0, 0x3, 0xa, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd28, 0x3503}]}, 0x50}, 0x1, 0x7}, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) accept(r6, 0x0, 0x0) r7 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_WKALM_SET(r7, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x16, 0x16, 0x0, 0x8000}}) close_range(r2, 0xffffffffffffffff, 0x0) r8 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r8, 0x29, 0x17, &(0x7f0000000080)=0x4, 0x4) shutdown(r8, 0x1) r9 = socket$alg(0x26, 0x5, 0x0) r10 = accept4(r9, 0x0, 0x0, 0x800) recvmmsg$unix(r10, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 7.708100801s ago: executing program 4 (id=1019): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x4, 0x0, {{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x2, 0x8000000000000000, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x4}, 0x1000, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000087ffffff6401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fe"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 7.463897467s ago: executing program 2 (id=1020): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) unshare(0x20040600) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x88600, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r1, 0x3b87, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x7fff}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r2, 0x0, 0x0, 0x20004000, 0xfffffffffffffffe, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100e3"], 0x7c}, 0x1, 0x0, 0x0, 0x804}, 0x40000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x8c1f, 0x0, 0x0, 0x0, 0x400, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0xffffffffffff2ea6, 0xfffffffffffffffc, 0x1, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x8029, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240), 0x4000095, 0x0) getpeername$qrtr(r0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r8 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICES(r8, 0x0, 0x482, &(0x7f0000000000)=""/125, &(0x7f00000000c0)=0x7d) 7.328087644s ago: executing program 4 (id=1021): mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f9404010014000000000000000006000002000000020000000000000048000000000000000000000001"], 0x80}}], 0x1, 0x4000004) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000150001030000000000"], 0x14}}, 0x0) r7 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1e) sendmmsg$unix(r2, &(0x7f0000004680)=[{{&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f00000001c0)="3c0121c2ffddf1f67a99e150c3df39887c28b1320b58341801359f98e4bed839bcc6e0011057c538aa53a5aca7222e74537b106a80e722072f7dbb35cc9d", 0x3e}], 0x1, &(0x7f0000000940)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r5]}}, @rights={{0x2c, 0x1, 0x1, [r1, r1, r0, r4, r5, r3, r3]}}, @rights={{0x24, 0x1, 0x1, [r2, r3, r6, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0xd0, 0x1}}, {{&(0x7f0000000a40)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000003080)=[{&(0x7f0000000ac0)="f3d9c8c023d5e127b2804652e14c23", 0xf}, {&(0x7f0000000b80)="e0d505c032b745dab8ff5aec38e0725f6f43cfa6f769efb66e7f5c787d386ea2e1f2aad958624c1e5f1321d605188e64f69846da992875c1c849275b4a85aabd366262fbef6c572f3c66b4e2b1fe4b232b1c3cb7e9cc1447bfcb8d2ca14ef32f1c6f1c81", 0x64}, {&(0x7f0000000c00)="f587d1daff2aecd6c5ffb383cf211081b450af89ad004375d0903fa23bbb4b931c376b8e4e3a630243ae220119251d286eaad16cafcfe2d59e632e70dca38a1fde9fed1a182a1bbb55e7d63fe87f73705841b7269e967b864690", 0x5a}, {&(0x7f0000002d80)="a9f21de6aace864025d8df1dce4587a7cab65b61e0e8179da4eeff072935d2784f5b560cbacfd54b3f591cb6062301e078dfb38713b44a833237457606283efeda0bdb8932fbc6bfb302390b8a13364061a3374335cf10317d6a6179f4a712421bebed66103ba76dbc6910556661e7b819960b58b67cc105b693d9641351030ea4b0f091bcabf90044aa763582dff837faa40ccde10ecb9833e5a8eb372e43cdd7bca81a37bfe27650c47ebd101181e207666446ff1c031b5f28fe80e39336595a1137f8c9cb29dcd5baf96b5cefa015569ff31128f8672ea40cad6397aec27245b19a6f878c7d55888bffbe075f18e29681f60b24b50d75c39501", 0xfb}, {&(0x7f0000003480)="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", 0x1000}, {&(0x7f0000002e80)="f6f08d8103d0c945b4b239aba86155295203295e32bda7527f6ba47f04f7cd99d032e8dc060daeda44bd31ad90b386dc36e6d4ad9c9f7a38249b4c365533161ff92c860726d0636f2c3def345790659a890ee9296ce272b9addb642f651a3240cc97c0bf7b02919ae036c3f5b4df6c790d51c308c684a928816d6df478b9d6f113d0226d891182c68a22518018ee814d2c2715f6f7ac1b763c3f50707772500beace2b70dc", 0xa5}, {&(0x7f0000002f40)="1c6a8841c6d9eda9624d70e4893a7a63d3a60f7909b0e7db1825f83383c31f3ce93084f3b9e450e8ba07be3b248167535dd3346cbfb5cae3aa572fc426f90a42c2528b4d5f27fa9aa975b2f445fa0a3b0886fa1fe274314a6abb19a6f5d5786fca5ad9d55db6840f332bae06558c54d9a655ccf8b389d0a7931dbce61aa397c6", 0x80}, {&(0x7f0000003000)="6944b9124c0256dc5bc227069ca7c9c3d48176a1e4237a8fa3041cc5ebae20d1cc662d59b55edcdf6ee185d06b476e6017972c9a816e48705b4ecbd38158cfdbd8", 0x41}], 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r6, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB, @ANYRES32=r6, @ANYRES32=r0], 0x110, 0x40}}], 0x2, 0x0) read(r6, &(0x7f0000000080)=""/186, 0xba) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x230, 0x0, 0x8, 0xfa04, 0x98, 0x6c02, 0x198, 0x194, 0x194, 0x198, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x32}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@rand_addr=0x64010102, @broadcast, 0xffffffff, 0xffffffff, 'geneve1\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x0, 0x3, 0x8}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x5a5, 0xc20, 0x1, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, 0x1, 0x10, [0x18, 0x2f, 0x22, 0x8, 0x1d, 0x18, 0x15, 0x2e, 0x25, 0xd, 0xe, 0x2, 0x1a, 0x2d, 0x39, 0x3f], 0x0, 0x8a, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r10, {0x2, 0x0, @local}, 0x2}}, 0x26) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r11, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 6.568396661s ago: executing program 2 (id=1022): syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x1b5}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ad1c00105080"], 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='!'], 0x14}}, 0x0) io_uring_enter(r0, 0x80002219, 0x7721, 0x16, 0x0, 0x0) 6.220003152s ago: executing program 3 (id=1023): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x28, r1, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 5.928424886s ago: executing program 3 (id=1024): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x2b, 0x2, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) bpf$MAP_CREATE(0xc00000000000018, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x0, 0xffffffffffffffff, 0x1e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x11}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="7400000000080101000000000000000000000004440004800800024000000002080001400000010808000240fffff658080002400000010008000240000000000800024000000eb20800014000000004080002400000000706000240600600000900010073797a3100000000050003"], 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x40) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x40) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@multicast1, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffff2, 0x3fc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}]}, 0x140}}, 0x40) r5 = socket$kcm(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000002500)={{0x12, 0x1, 0x0, 0xeb, 0xe4, 0x45, 0x20, 0x93a, 0x2603, 0x5301, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x96, 0xf3, 0x0, 0xd, 0x80, 0xde}}]}}]}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r6 = socket$kcm(0x29, 0x2, 0x0) writev(r6, &(0x7f0000000480)=[{&(0x7f00000001c0)="13", 0x1}], 0x1) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r5}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000340)={r5}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r7, 0x0, 0x4010) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 5.370374175s ago: executing program 2 (id=1025): openat$iommufd(0xffffffffffffff9c, 0x0, 0x64c842, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x5, 0x8, 0x0, 0xb}, 0x0) r2 = io_uring_setup(0x664c, &(0x7f0000000500)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x2, 0x1, 0x0, 0x3, 0xa, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd28, 0x3503}]}, 0x50}, 0x1, 0x7}, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) accept(r6, 0x0, 0x0) r7 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_WKALM_SET(r7, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x16, 0x16, 0x0, 0x8000}}) close_range(r2, 0xffffffffffffffff, 0x0) r8 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r8, 0x29, 0x17, &(0x7f0000000080)=0x4, 0x4) shutdown(r8, 0x1) r9 = socket$alg(0x26, 0x5, 0x0) r10 = accept4(r9, 0x0, 0x0, 0x800) recvmmsg$unix(r10, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 4.13091701s ago: executing program 4 (id=1026): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0xc00000000000018, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x200401c0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800050001040f0f080003000000080008000f00f7ffffff0800060004000000080011000900000008"], 0x5c}}, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x6}}) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0x80000000, 0xffff, 0x0, 0x3, 0x0, 0x10, 0x6, 0x0, 0x2, 0x0, 0xa, 0x0, 0x4}, {0xa, 0x0, 0x0, 0x0, 0x40, 0x2, 0x10, 0xfb, 0x7, 0x0, 0x4, 0x0, 0xfffffffffffffff7}, {0x200000, 0xa, 0x21, 0x5, 0x80, 0x2, 0x0, 0x0, 0x55, 0xb, 0x1, 0x0, 0x8080}], 0x3fd}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20048810) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x2000018c) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x3ef, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)=0x8000) socket$tipc(0x1e, 0x5, 0x0) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) syz_usb_ep_write$ath9k_ep2(r7, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 3.94489389s ago: executing program 0 (id=1027): openat$iommufd(0xffffffffffffff9c, 0x0, 0x64c842, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x5, 0x8, 0x0, 0xb}, 0x0) r2 = io_uring_setup(0x664c, &(0x7f0000000500)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x2, 0x1, 0x0, 0x3, 0x2, 0x0, 0x70bd2c, 0x25dfdbfb}, 0x10}, 0x1, 0x7}, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) accept(r6, 0x0, 0x0) r7 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_WKALM_SET(r7, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x16, 0x16, 0x0, 0x8000}}) close_range(r2, 0xffffffffffffffff, 0x0) r8 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r8, 0x29, 0x17, &(0x7f0000000080)=0x4, 0x4) shutdown(r8, 0x1) socket$alg(0x26, 0x5, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 2.745815502s ago: executing program 1 (id=1028): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8004, 0x0, 0x2, 0x8, 0xfffffe0000000008, 0x3, 0xffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000600), 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) listen(r4, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0xffffffff, 0x3, 0x22}, 0x7}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000540)=ANY=[]) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, &(0x7f0000000680)=""/4096, 0x0, 0x0, 0x2}, 0x38) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) r9 = eventfd(0xffffffff) ioctl$VHOST_SET_VRING_KICK(r8, 0x4008af20, &(0x7f0000000040)={0x1, r9}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) fanotify_init(0x202, 0x0) syz_io_uring_setup(0x498, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x4, 0x125}, &(0x7f0000000000), &(0x7f0000000280)) 2.593117296s ago: executing program 2 (id=1029): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x5, 0x6, 0x7}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x28}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x134}}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="0500000000000000800006000000080003001b7a36249d48551aca7fca3cea71f0f3e3b33728b31bfc316a9a4ffbc78a3596fa4213568eb26643bccf39f790e17c79cd5f18b1b9b0f5ab93dc0b4c672424f949f9ee798b9b9221a9a572bce30eef7dbb1c3184d2caaefc204049a1b846d2e9714685b5883731df4d26c707000000b23179768df29e5b8feae8780617a2b2105f4586056cb7ed351c4e1a133f6cda03072aaa3bb87990827541c3fbc1767a86448de69ab8c69b", @ANYRES32=r7, @ANYBLOB="0800050007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r8 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='test_dummy_encryption', 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 581.231471ms ago: executing program 0 (id=1030): socket$nl_route(0x10, 0x3, 0x0) (async) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) (async) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) (async, rerun: 64) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) (rerun: 64) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r1, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x4d, 0x5a, 0x1, 0x20, 0x7b8, 0x401a, 0x108f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x25, 0x2, 0x1, 0x60, 0x83, 0x46, 0x0, [], [{{0x9, 0x5, 0x2, 0x4, 0x200, 0x2}}]}}]}}]}}, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000280)={0x48, 0x7, r5, 0x0, 0x10001, 0x0, 0x3, 0x3901c8, 0x330fdc}) syz_usb_connect$uac1(0x5, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r2], 0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x18, 0x500}}], 0x2, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x1000}) (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip6_mr_cache\x00') read$FUSE(r7, &(0x7f00000005c0)={0x2020}, 0x2020) (async) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r7, 0x3ba0, &(0x7f0000000200)={0x48, 0x8, r5, 0x0, 0x1, 0xa7621, 0xc6, &(0x7f0000000400)="f45ee3c9b41899232b312ce51840e0cde709cab38dcfb5756a1314d27f359d0c86080327f9326cd0edacf1b7d19440e7b5ab132c197854ec433be5675a7d90b294e351b45eebf9ec54ec1875b2d470a20eb0b6d721138cac629c52717cc423d03e534b6d4dd6f5a494de3b3109e25f052466ba790628f678489a90956e93b60190ecaab1d7990eb5dfaf3479b920ce063df42e76724a5d8ae9ecce789470eff58164c9df19e66bf13fc855b6197782a67f751f7730f397d8c1953292f78148e106a84133c255", 0x10000}) (async) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000300)=0x10) 365.658075ms ago: executing program 3 (id=1031): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x4, 0x0, {{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x2, 0x8000000000000000, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x4}, 0x1000, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000088ffffff6401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fe"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 83.437107ms ago: executing program 1 (id=1032): bpf$MAP_CREATE(0x0, 0x0, 0x50) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000440)=[{&(0x7f0000000cc0)="aac84dd7bfeccc2fcdc1aa2f2377151420826b16", 0x14}], 0x1, 0x6) (async) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="05000000000000006111"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) (async) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) (async) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) (async) r4 = syz_open_dev$media(&(0x7f0000000040), 0x5, 0x141800) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000100)) (async) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0xa}}]}, 0x40}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000a00)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) recvmmsg$unix(r9, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, &(0x7f0000000080)={@host, 0x45b85ce6}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000740)="0b4e92bfc3ff", 0x6}, {&(0x7f0000000080)="001500000000000000", 0x9}], 0x2) 0s ago: executing program 0 (id=1033): socket$nl_netfilter(0x10, 0x3, 0xc) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) mq_timedsend(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="04000400000000002c0012800800010067747000000002805ab20800200100002b07db1cb447ab9866c359684fd2cd5500000000000000000205000500000000009d105c6009ba0a30911ae5722f7ea4adaf9a6d37"], 0x4c}}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2000001bbbbbbbbbbbb86dd6700000100303afffe8000000000000000000000000000aaff02000000000000000000000000000102009078000000036d50a2a800052c01fe7d00000000000000000000000000aa00000000000000000000ffffac1e0001"], 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x20004084) r4 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="ea973618f8cf718d3d94cc2cb08579e433b020c9e310b9534a3f228d37d41d401af72dc7354d136cac8aa44a45e6f2163b96e8d40b73f832910765b190", 0x3d}, {&(0x7f00000003c0)="a4b0877a46ca765fbde5fe9109b1e99c9bd0f61becbb84975c7ff8abfd6f93c1f70bbe2413c61af397cba51b49e75b285b9b758e053cd937a0dfc4b4c6b0ea18c2", 0x41}, {&(0x7f0000000480)="b9f03a5514be9eb7ef6c9c0b76b22890f5d37d9cc5f4044f56d14abeed115a2bc1bef8978cdcc069957b89b0569b2012608da23ea73dd8b8442b3de77367d705e44612f211edce5324d3270f990ef71e47081d3f2408b055ceedf82ba6b7c33d0466abbe8cfd147817a972a4ad49ca0d2c3ec73324348f35064675c79e09f7b3a1c1689be12bac11b149bccedba4f83be6d5c0b26bdbd3e1a2d10b2c634fc6c5cbfea38a10081221e02520697a963faaa7", 0xb1}], 0x3}, 0x80) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') pwritev(r7, &(0x7f0000000a40)=[{&(0x7f0000000100)='x', 0x1}, {0x0}], 0x2, 0x800, 0xfffffffb) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c00ee4894b4582ef43c00ab060000000900020073797a3000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x804) kernel console output (not intermixed with test programs): -71 [ 214.972257][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 215.054126][ T10] usb usb2-port1: unable to enumerate USB device [ 215.141892][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 215.149404][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 215.162229][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 215.178728][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 215.187986][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.196080][ T9] usb 5-1: Product: syz [ 215.200332][ T9] usb 5-1: Manufacturer: syz [ 215.205101][ T9] usb 5-1: SerialNumber: syz [ 215.224175][ T7532] F2FS-fs: Conflicting test_dummy_encryption options [ 215.236490][ T9] usb 5-1: config 0 descriptor?? [ 215.246264][ T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 215.433276][ T9] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 215.676531][ T7537] xt_TCPMSS: Only works on TCP SYN packets [ 215.909374][ T7543] xt_TCPMSS: Only works on TCP SYN packets [ 215.973328][ T9] em28xx 5-1:0.0: chip ID is em2874 [ 216.191678][ T9] usb 5-1: USB disconnect, device number 19 [ 216.207135][ T9] em28xx 5-1:0.0: Disconnecting em28xx [ 216.217795][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 216.227613][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 216.240830][ T9] em28xx 5-1:0.0: Freeing device [ 217.421108][ T5930] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 217.794516][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.961057][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.154954][ T5930] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 218.172694][ T7562] program syz.0.441 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.232465][ T5930] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 218.376892][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.418426][ T7569] xt_bpf: check failed: parse error [ 218.436663][ T5930] usb 4-1: config 0 descriptor?? [ 218.899628][ T7577] F2FS-fs: Conflicting test_dummy_encryption options [ 218.981432][ T10] delete_channel: no stack [ 219.421550][ T5839] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 219.623853][ T5839] usb 5-1: Using ep0 maxpacket: 32 [ 219.642290][ T5839] usb 5-1: config 0 has no interfaces? [ 219.655752][ T5839] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 219.669643][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.693606][ T5839] usb 5-1: Product: syz [ 219.702371][ T5839] usb 5-1: Manufacturer: syz [ 219.710398][ T5839] usb 5-1: SerialNumber: syz [ 219.727507][ T5839] usb 5-1: config 0 descriptor?? [ 219.941877][ T5839] usb 5-1: USB disconnect, device number 20 [ 220.406410][ T5930] usbhid 4-1:0.0: can't add hid device: -71 [ 220.412842][ T5930] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 220.481618][ T7591] xt_TCPMSS: Only works on TCP SYN packets [ 220.505792][ T5930] usb 4-1: USB disconnect, device number 17 [ 221.241057][ T10] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 221.403495][ T10] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 221.447940][ T10] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 221.549418][ T10] usb 2-1: config 8 has no interface number 0 [ 221.555977][ T10] usb 2-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 221.569710][ T10] usb 2-1: config 8 interface 177 has no altsetting 0 [ 221.579713][ T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 221.589808][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.856676][ T7615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.459'. [ 221.916636][ T7616] netlink: 32 bytes leftover after parsing attributes in process `syz.0.459'. [ 222.050822][ T7616] netlink: 152 bytes leftover after parsing attributes in process `syz.0.459'. [ 222.097964][ T7616] netlink: 152 bytes leftover after parsing attributes in process `syz.0.459'. [ 222.420301][ T7627] F2FS-fs: Conflicting test_dummy_encryption options [ 222.614295][ T7630] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 222.981083][ T5930] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 223.178388][ T5930] usb 4-1: Using ep0 maxpacket: 32 [ 223.187827][ T5930] usb 4-1: config 0 has no interfaces? [ 223.196326][ T5930] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 223.205615][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.217348][ T5930] usb 4-1: Product: syz [ 223.770061][ T5930] usb 4-1: Manufacturer: syz [ 223.778732][ T5930] usb 4-1: SerialNumber: syz [ 223.788746][ T5930] usb 4-1: config 0 descriptor?? [ 223.794586][ T10] usb 2-1: string descriptor 0 read error: -71 [ 223.817792][ T10] ir_toy 2-1:8.177: required endpoints not found [ 223.849841][ T10] usb 2-1: USB disconnect, device number 27 [ 224.205829][ T10] usb 4-1: USB disconnect, device number 18 [ 224.611059][ T5930] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 224.781126][ T5930] usb 5-1: Using ep0 maxpacket: 8 [ 224.787800][ T5930] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 224.796689][ T5930] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 224.810268][ T5930] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 224.837247][ T5930] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 224.878919][ T5930] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.919828][ T5930] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 224.946773][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.188906][ T5930] usb 5-1: USB disconnect, device number 21 [ 225.812996][ T7667] xt_TCPMSS: Only works on TCP SYN packets [ 226.071040][ T5930] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 226.241650][ T5930] usb 5-1: Using ep0 maxpacket: 32 [ 226.249608][ T5930] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 226.258988][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.322016][ T5930] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 226.752740][ T7661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.031085][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 227.198936][ T5930] gspca_nw80x: reg_r err -32 [ 227.206075][ T5930] nw80x 5-1:3.0: probe with driver nw80x failed with error -32 [ 227.233247][ T5930] usb 5-1: USB disconnect, device number 22 [ 227.253331][ T10] usb 2-1: config 0 has no interfaces? [ 227.267761][ T10] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 227.276919][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.284983][ T10] usb 2-1: Product: syz [ 227.307073][ T10] usb 2-1: Manufacturer: syz [ 227.318460][ T10] usb 2-1: SerialNumber: syz [ 227.332116][ T7683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.477'. [ 227.341850][ T10] usb 2-1: config 0 descriptor?? [ 227.385486][ T7683] vim2m vim2m.0: vidioc_s_fmt queue busy [ 227.751286][ T7676] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 227.826056][ T7677] nvme_fabrics: missing parameter 'transport=%s' [ 227.839636][ T7677] nvme_fabrics: missing parameter 'nqn=%s' [ 228.152020][ T7692] netlink: 'syz.0.480': attribute type 5 has an invalid length. [ 228.684531][ T5910] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 228.947273][ T5910] usb 3-1: Using ep0 maxpacket: 32 [ 228.961923][ T5910] usb 3-1: config 0 has no interfaces? [ 228.971441][ T5910] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 228.980735][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.989262][ T5910] usb 3-1: Product: syz [ 228.997752][ T5910] usb 3-1: Manufacturer: syz [ 229.011961][ T5910] usb 3-1: SerialNumber: syz [ 229.041542][ T5910] usb 3-1: config 0 descriptor?? [ 229.182673][ T5930] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 229.268760][ T7695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.481'. [ 229.447115][ T5839] usb 2-1: USB disconnect, device number 28 [ 229.514400][ T5930] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 229.529250][ T9] usb 3-1: USB disconnect, device number 28 [ 229.582048][ T5930] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 229.610167][ T5930] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 229.642602][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.785669][ T7705] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 229.815541][ T5930] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 230.091715][ T9] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 230.241064][ T9] usb 2-1: device descriptor read/64, error -71 [ 230.401302][ T7713] xt_TCPMSS: Only works on TCP SYN packets [ 230.488293][ T9] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 230.641192][ T9] usb 2-1: device descriptor read/64, error -71 [ 230.752129][ T9] usb usb2-port1: attempt power cycle [ 231.111054][ T9] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 231.175704][ T9] usb 2-1: device descriptor read/8, error -71 [ 231.551047][ T9] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 231.621660][ T9] usb 2-1: device descriptor read/8, error -71 [ 231.731594][ T9] usb usb2-port1: unable to enumerate USB device [ 231.820346][ T7728] sctp: [Deprecated]: syz.4.491 (pid 7728) Use of int in maxseg socket option. [ 231.820346][ T7728] Use struct sctp_assoc_value instead [ 231.963272][ T5910] usb 4-1: USB disconnect, device number 19 [ 232.208721][ T7732] kernel profiling enabled (shift: 17) [ 232.482114][ T9] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 233.408028][ T7749] dlm: Unknown command passed to DLM device : 15 [ 233.408028][ T7749] [ 233.621293][ T5910] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 233.753541][ T7757] random: crng reseeded on system resumption [ 233.801364][ T5910] usb 5-1: Using ep0 maxpacket: 32 [ 233.808755][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 233.821680][ T5910] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 233.933335][ T5910] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 233.942852][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.965362][ T5910] usb 5-1: config 0 descriptor?? [ 234.241381][ T7750] kvm: apic: phys broadcast and lowest prio [ 234.537864][ T5910] uclogic 0003:145F:0212.0006: interface is invalid, ignoring [ 234.842805][ T5930] usb 5-1: USB disconnect, device number 23 [ 234.910247][ T7771] xt_TCPMSS: Only works on TCP SYN packets [ 237.435559][ T7797] 8021q: VLANs not supported on ip6tnl0 [ 237.463922][ T7797] xt_CT: You must specify a L4 protocol and not use inversions on it [ 237.731158][ T5839] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 237.802575][ T7801] syzkaller1: entered promiscuous mode [ 237.811705][ T7801] syzkaller1: entered allmulticast mode [ 237.834424][ T7801] ptrace attach of "./syz-executor exec"[5852] was attempted by "./syz-executor exec"[7801] [ 237.911067][ T5839] usb 3-1: Using ep0 maxpacket: 8 [ 237.922559][ T5839] usb 3-1: config 6 has an invalid interface number: 113 but max is 0 [ 237.930750][ T5839] usb 3-1: config 6 has no interface number 0 [ 237.946704][ T5839] usb 3-1: config 6 interface 113 has no altsetting 0 [ 238.087498][ T5839] usb 3-1: New USB device found, idVendor=03f0, idProduct=070c, bcdDevice= 0.00 [ 238.098305][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.121400][ T5839] usb 3-1: Product: syz [ 238.125588][ T5839] usb 3-1: Manufacturer: syz [ 238.150561][ T5839] usb 3-1: SerialNumber: syz [ 238.523815][ T7816] loop6: detected capacity change from 0 to 7 [ 238.532703][ T7816] Dev loop6: unable to read RDB block 7 [ 238.538855][ T7816] loop6: unable to read partition table [ 238.545449][ T7816] loop6: partition table beyond EOD, truncated [ 238.585010][ T7817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.594004][ T7817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.630463][ T7816] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 238.941044][ T5930] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 239.101204][ T5930] usb 5-1: Using ep0 maxpacket: 8 [ 239.126648][ T5930] usb 5-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 239.159030][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.246796][ T5930] usb 5-1: config 0 descriptor?? [ 239.290170][ T5930] usblcd 5-1:0.0: USBLCD model not supported. [ 239.350414][ T7820] : renamed from bond_slave_0 (while UP) [ 239.490446][ T5910] usb 5-1: USB disconnect, device number 24 [ 240.000234][ T7829] random: crng reseeded on system resumption [ 240.571954][ T5910] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 240.682474][ T5839] usb-storage 3-1:6.113: USB Mass Storage device detected [ 240.865164][ T5910] usb 5-1: config 0 has no interfaces? [ 240.870709][ T5910] usb 5-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 240.901120][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.910424][ T5839] usb-storage 3-1:6.113: Quirks match for vid 03f0 pid 070c: 8000 [ 241.067937][ T5910] usb 5-1: config 0 descriptor?? [ 241.333572][ T7831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.350826][ T5839] usb 3-1: USB disconnect, device number 30 [ 241.365320][ T7831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.446941][ T5930] usb 5-1: USB disconnect, device number 25 [ 241.901120][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 242.102822][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 242.122913][ T9] usb 5-1: config index 0 descriptor too short (expected 72, got 36) [ 242.139162][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 242.198247][ T9] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 1.08 [ 242.211393][ T7863] xt_bpf: check failed: parse error [ 242.222127][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.240378][ T9] usb 5-1: Product: syz [ 242.269112][ T9] usb 5-1: Manufacturer: syz [ 242.306629][ T9] usb 5-1: SerialNumber: syz [ 242.376207][ T7861] vlan2: entered promiscuous mode [ 242.376232][ T7861] bond0: entered promiscuous mode [ 242.376241][ T7861] bond_slave_0: entered promiscuous mode [ 242.376438][ T7861] bond_slave_1: entered promiscuous mode [ 242.391395][ T5935] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 242.558604][ T5935] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 242.558634][ T5935] usb 4-1: config 0 interface 0 has no altsetting 0 [ 242.560576][ T5935] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 242.560602][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 242.560621][ T5935] usb 4-1: Product: syz [ 242.560635][ T5935] usb 4-1: Manufacturer: syz [ 242.560649][ T5935] usb 4-1: SerialNumber: syz [ 242.564843][ T5935] usb 4-1: config 0 descriptor?? [ 242.637830][ T5935] usb 4-1: selecting invalid altsetting 0 [ 242.893807][ T5935] usb 4-1: USB disconnect, device number 20 [ 242.911228][ T9] usb 5-1: USB disconnect, device number 26 [ 242.982513][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.048672][ T5823] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 243.401530][ T5823] usb 3-1: Using ep0 maxpacket: 32 [ 243.422263][ T5823] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.496354][ T5823] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 243.586760][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.814237][ T7884] xt_TCPMSS: Only works on TCP SYN packets [ 243.993334][ T5823] usb 3-1: config 0 descriptor?? [ 244.068231][ T5823] gspca_main: spca501-2.14.0 probing 0000:0000 [ 244.297591][ T7889] random: crng reseeded on system resumption [ 245.051271][ T5823] gspca_spca501: reg write: error -110 [ 245.056851][ T5823] spca501 3-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 245.084583][ T5823] spca501 3-1:0.0: probe with driver spca501 failed with error -22 [ 245.256881][ T7896] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 245.483036][ T7899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.535'. [ 245.782063][ T5935] usb 3-1: USB disconnect, device number 31 [ 245.877341][ T7907] xt_bpf: check failed: parse error [ 245.897324][ T7908] netlink: 12 bytes leftover after parsing attributes in process `syz.3.538'. [ 246.461069][ T5823] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 246.615707][ T5823] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 246.626177][ T5823] usb 2-1: config 0 has no interface number 0 [ 246.639139][ T5823] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 246.651139][ T5823] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 246.678146][ T5823] usb 2-1: config 0 interface 11 has no altsetting 0 [ 246.693314][ T7938] xt_TCPMSS: Only works on TCP SYN packets [ 246.709133][ T5823] usb 2-1: New USB device found, idVendor=06cd, idProduct=012a, bcdDevice=d5.1b [ 246.730580][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.786614][ T5823] usb 2-1: config 0 descriptor?? [ 246.801982][ T7924] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 246.820382][ T5823] keyspan 2-1:0.11: Keyspan 4 port adapter converter detected [ 246.842950][ T5823] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 81 [ 246.976306][ T5823] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 1 [ 246.996533][ T5823] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 247.042301][ T5823] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 82 [ 247.088544][ T7940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.097397][ T7940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.106262][ T5823] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 2 [ 247.127175][ T5823] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 247.240088][ T5823] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 83 [ 247.259728][ T5823] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 3 [ 247.292449][ T5823] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 247.328777][ T5823] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 84 [ 247.363502][ T5823] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 4 [ 247.400677][ T5823] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 248.358964][ T7962] rtc_cmos 00:00: Alarms can be up to one day in the future [ 248.941968][ T5839] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 249.331502][ T9] usb 2-1: USB disconnect, device number 33 [ 249.357859][ T5839] usb 3-1: device descriptor read/64, error -71 [ 249.393828][ T9] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 249.408151][ T9] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 249.419757][ T9] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 249.496158][ T9] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 249.507102][ T9] keyspan 2-1:0.11: device disconnected [ 249.522554][ T7971] xt_hashlimit: overflow, try lower: 17592186044416/11 [ 249.601265][ T5839] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 249.731159][ T5839] usb 3-1: device descriptor read/64, error -71 [ 249.842798][ T5839] usb usb3-port1: attempt power cycle [ 249.891216][ T5823] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 250.063364][ T5823] usb 5-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 250.072487][ T5823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.083409][ T5823] usb 5-1: config 0 descriptor?? [ 250.181079][ T5839] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 250.202170][ T5839] usb 3-1: device descriptor read/8, error -71 [ 250.441171][ T5839] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 250.461749][ T5839] usb 3-1: device descriptor read/8, error -71 [ 250.506669][ T7978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.515511][ T7978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.528545][ T7978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.540823][ T7978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.555488][ T5823] kye 0003:0458:0153.0007: collection stack underflow [ 250.563043][ T5823] kye 0003:0458:0153.0007: item 0 4 0 12 parsing failed [ 250.571938][ T5839] usb usb3-port1: unable to enumerate USB device [ 250.581274][ T5823] kye 0003:0458:0153.0007: parse failed [ 250.588219][ T5823] kye 0003:0458:0153.0007: probe with driver kye failed with error -22 [ 250.771827][ T5839] usb 5-1: USB disconnect, device number 27 [ 251.217573][ T7999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.565'. [ 252.022667][ T8013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.567'. [ 252.676011][ T8025] ptrace attach of "./syz-executor exec"[5853] was attempted by "./syz-executor exec"[8025] [ 252.951423][ T5930] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 253.002880][ T8032] ALSA: seq fatal error: cannot create timer (-22) [ 253.196205][ T5930] usb 4-1: config 4 has an invalid interface number: 156 but max is 0 [ 253.210022][ T5930] usb 4-1: config 4 has no interface number 0 [ 253.348451][ T5930] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e [ 253.348482][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.348501][ T5930] usb 4-1: Product: syz [ 253.348515][ T5930] usb 4-1: Manufacturer: syz [ 253.348530][ T5930] usb 4-1: SerialNumber: syz [ 253.472353][ T5930] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state. [ 253.472412][ T5930] usb 4-1: setting power ON [ 253.472701][ T5930] dvb-usb: bulk message failed: -22 (2/0) [ 253.477662][ T5930] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 253.483491][ T5930] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware error while loading driver (-19) [ 253.484301][ T5930] dvb_usb_cxusb 4-1:4.156: probe with driver dvb_usb_cxusb failed with error -22 [ 253.587142][ T5930] usb 4-1: USB disconnect, device number 21 [ 254.156714][ T8057] netlink: 48 bytes leftover after parsing attributes in process `syz.0.581'. [ 255.405846][ T8067] rtc_cmos 00:00: Alarms can be up to one day in the future [ 255.981307][ T5935] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 255.991110][ T5930] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 256.151050][ T5935] usb 4-1: Using ep0 maxpacket: 16 [ 256.156280][ T5930] usb 2-1: Using ep0 maxpacket: 8 [ 256.163622][ T5935] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 256.174260][ T8081] netlink: 28 bytes leftover after parsing attributes in process `syz.4.588'. [ 256.183240][ T5935] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.183710][ T5935] usb 4-1: config 0 has no interface number 0 [ 256.183862][ T5930] usb 2-1: unable to get BOS descriptor or descriptor too short [ 256.207796][ T5935] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 256.217714][ T5935] usb 4-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 256.233773][ T5935] usb 4-1: New USB device found, idVendor=0742, idProduct=200a, bcdDevice=7e.46 [ 256.243414][ T5930] usb 2-1: config 0 has an invalid interface number: 237 but max is 1 [ 256.253837][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.261907][ T5930] usb 2-1: config 0 has an invalid interface number: 146 but max is 1 [ 256.270094][ T5930] usb 2-1: config 0 has no interface number 0 [ 256.278099][ T5935] usb 4-1: Product: syz [ 256.282395][ T5935] usb 4-1: Manufacturer: syz [ 256.287017][ T5935] usb 4-1: SerialNumber: syz [ 256.291652][ T5930] usb 2-1: config 0 has no interface number 1 [ 256.298897][ T5930] usb 2-1: config 0 interface 237 has no altsetting 0 [ 256.306748][ T5935] usb 4-1: config 0 descriptor?? [ 256.311980][ T5930] usb 2-1: config 0 interface 146 has no altsetting 0 [ 256.322545][ T5930] usb 2-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=eb.3f [ 256.332543][ T5935] HFC-S_USB 4-1:0.4: probe with driver HFC-S_USB failed with error -5 [ 256.341458][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.351504][ T5930] usb 2-1: Product: syz [ 256.356270][ T5930] usb 2-1: Manufacturer: syz [ 256.360885][ T5930] usb 2-1: SerialNumber: syz [ 256.376751][ T5930] usb 2-1: config 0 descriptor?? [ 256.461038][ T5839] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 256.527703][ T5935] usb 4-1: USB disconnect, device number 22 [ 256.591175][ T5839] usb 3-1: device descriptor read/64, error -71 [ 256.602971][ T5930] usb 2-1: USB disconnect, device number 34 [ 256.831039][ T5839] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 256.973136][ T5839] usb 3-1: device descriptor read/64, error -71 [ 257.091587][ T5839] usb usb3-port1: attempt power cycle [ 257.156372][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 257.156389][ T30] audit: type=1800 audit(1761766869.998:216): pid=8094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.593" name="file0" dev="tmpfs" ino=584 res=0 errno=0 [ 257.471738][ T5839] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 257.631728][ T5839] usb 3-1: device descriptor read/8, error -71 [ 257.741159][ T5823] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 257.871070][ T5839] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 257.891176][ T5823] usb 2-1: Using ep0 maxpacket: 32 [ 257.897183][ T5839] usb 3-1: device descriptor read/8, error -71 [ 257.905021][ T5823] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.915745][ T5823] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 257.925056][ T5823] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 257.987240][ T5823] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 258.014293][ T5839] usb usb3-port1: unable to enumerate USB device [ 258.020736][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.047889][ T5823] usb 2-1: Product: syz [ 258.052935][ T5823] usb 2-1: Manufacturer: syz [ 258.057558][ T5823] usb 2-1: SerialNumber: syz [ 258.085170][ T5823] cdc_ncm 2-1:1.0: skipping garbage [ 258.091138][ T5823] cdc_ncm 2-1:1.0: invalid descriptor buffer length [ 258.097853][ T5823] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 258.105732][ T5823] cdc_ncm 2-1:1.0: bind() failure [ 258.307568][ T5839] usb 2-1: USB disconnect, device number 35 [ 258.586883][ T8130] syzkaller0: entered promiscuous mode [ 258.592608][ T8130] syzkaller0: entered allmulticast mode [ 258.604821][ T8130] tipc: Started in network mode [ 258.609716][ T8130] tipc: Node identity c216cc336097, cluster identity 4711 [ 258.617642][ T8130] tipc: Enabled bearer , priority 0 [ 258.627739][ T8129] tipc: Resetting bearer [ 258.644378][ T8129] tipc: Disabling bearer [ 258.761270][ T5935] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 258.920079][ T8135] random: crng reseeded on system resumption [ 258.991207][ T5935] usb 5-1: Using ep0 maxpacket: 8 [ 259.171118][ T5935] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 259.181073][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.199777][ T5935] usb 5-1: Product: syz [ 259.213458][ T5935] usb 5-1: Manufacturer: syz [ 259.249448][ T5935] usb 5-1: SerialNumber: syz [ 259.324771][ T5935] usb 5-1: config 0 descriptor?? [ 259.533944][ T5935] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 259.571120][ T5823] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 259.731195][ T5823] usb 2-1: Using ep0 maxpacket: 8 [ 259.738506][ T5823] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 259.755532][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.782083][ T5823] usb 2-1: config 0 descriptor?? [ 259.831665][ T8142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.608'. [ 259.999154][ T5823] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 260.139010][ T8125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.161861][ T8125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.003852][ T8172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.021505][ T8172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.031391][ T8138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.155700][ T5935] usb write operation failed. (-71) [ 261.167876][ T8138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.308713][ T5935] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 261.341686][ T5935] dvbdev: DVB: registering new adapter (Terratec H7) [ 261.436107][ T5935] usb 5-1: media controller created [ 261.450542][ T5935] usb read operation failed. (-71) [ 261.461191][ T5935] usb write operation failed. (-71) [ 261.481410][ T5935] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 261.513537][ T5935] usb 5-1: USB disconnect, device number 28 [ 261.844322][ T5823] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 261.854474][ T5823] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 261.865399][ T5823] asix 2-1:0.0: probe with driver asix failed with error -71 [ 261.915507][ T5823] usb 2-1: USB disconnect, device number 36 [ 262.027331][ T8189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.620'. [ 262.091954][ T8192] netlink: 20 bytes leftover after parsing attributes in process `syz.2.619'. [ 262.641259][ T8203] input: syz0 as /devices/virtual/input/input9 [ 263.669883][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 263.676621][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.859984][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 263.869779][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 264.358999][ T8226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.624'. [ 264.390256][ T8223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.624'. [ 265.544807][ T8242] netlink: 'syz.1.629': attribute type 7 has an invalid length. [ 265.972738][ T8251] binder: 8250:8251 ioctl c0189379 2000000001c0 returned -22 [ 266.015253][ T8251] binder: 8250:8251 ioctl b703 0 returned -22 [ 266.022574][ T8251] binder_alloc: 8250: binder_alloc_buf size -624 failed, no address space [ 266.032754][ T8251] binder_alloc: allocated: 16 (num: 2 largest: 8), free: 8176 (num: 1 largest: 8176) [ 266.074725][ T5935] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 266.229828][ T8259] xt_bpf: check failed: parse error [ 266.286189][ T5935] usb 5-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 266.319104][ T5935] usb 5-1: config 0 interface 0 has no altsetting 0 [ 266.370247][ T5935] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 266.384851][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 266.427235][ T5935] usb 5-1: Product: syz [ 266.431881][ T5930] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 266.464402][ T5935] usb 5-1: Manufacturer: syz [ 266.557459][ T5935] usb 5-1: SerialNumber: syz [ 266.573407][ T5935] usb 5-1: config 0 descriptor?? [ 266.599929][ T5935] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 266.623682][ T5930] usb 2-1: unable to get BOS descriptor or descriptor too short [ 266.638366][ T5930] usb 2-1: config 3 has an invalid interface number: 221 but max is 0 [ 266.647633][ T5930] usb 2-1: config 3 has no interface number 0 [ 266.658614][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 266.678284][ T5930] usb 2-1: config 3 interface 221 has no altsetting 0 [ 266.695492][ T5930] usb 2-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=e7.b4 [ 266.767639][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.830086][ T5930] usb 2-1: Product: syz [ 266.847886][ T8249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.871529][ T8249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.965377][ T5930] usb 2-1: Manufacturer: syz [ 266.970055][ T5930] usb 2-1: SerialNumber: syz [ 267.083367][ T5839] usb 5-1: USB disconnect, device number 29 [ 267.098516][ T8249] input: syz0 as /devices/virtual/input/input10 [ 267.299746][ T5930] belkin_sa 2-1:3.221: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 267.372129][ T5930] usb 2-1: bcdDevice: e7b4, bfc: 0 [ 267.449371][ T5930] usb 2-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 267.498514][ T5930] usb 2-1: USB disconnect, device number 37 [ 267.603892][ T5930] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 267.637570][ T5930] belkin_sa 2-1:3.221: device disconnected [ 268.066457][ T8287] loop6: detected capacity change from 0 to 7 [ 268.094496][ T8287] Dev loop6: unable to read RDB block 7 [ 268.102150][ T8287] loop6: unable to read partition table [ 268.108708][ T8287] loop6: partition table beyond EOD, truncated [ 268.115186][ T8287] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 269.811671][ T5930] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 269.970992][ T5930] usb 3-1: Using ep0 maxpacket: 32 [ 270.001752][ T5930] usb 3-1: config 0 has an invalid interface number: 150 but max is 0 [ 270.010558][ T5930] usb 3-1: config 0 has no interface number 0 [ 270.016712][ T5930] usb 3-1: config 0 interface 150 has no altsetting 0 [ 270.076540][ T5930] usb 3-1: New USB device found, idVendor=093a, idProduct=2603, bcdDevice=53.01 [ 270.086275][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.094856][ T5930] usb 3-1: Product: syz [ 270.099147][ T5930] usb 3-1: Manufacturer: syz [ 270.109317][ T5930] usb 3-1: SerialNumber: syz [ 270.145682][ T5930] usb 3-1: config 0 descriptor?? [ 270.176304][ T5930] gspca_main: pac7311-2.14.0 probing 093a:2603 [ 270.271064][ T10] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 270.441666][ T10] usb 4-1: Invalid ep0 maxpacket: 32 [ 270.571289][ T10] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 270.673894][ T5935] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 270.692102][ T5930] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -110 [ 270.700331][ T5930] pac7311 3-1:0.150: probe with driver pac7311 failed with error -110 [ 270.743520][ T10] usb 4-1: Invalid ep0 maxpacket: 32 [ 270.754723][ T10] usb usb4-port1: attempt power cycle [ 270.811653][ T5935] usb 2-1: device descriptor read/64, error -71 [ 271.061022][ T5935] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 271.114531][ T10] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 271.172235][ T10] usb 4-1: Invalid ep0 maxpacket: 32 [ 271.221003][ T5935] usb 2-1: device descriptor read/64, error -71 [ 271.303278][ T10] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 271.348767][ T5935] usb usb2-port1: attempt power cycle [ 271.354571][ T10] usb 4-1: Invalid ep0 maxpacket: 32 [ 271.360466][ T10] usb usb4-port1: unable to enumerate USB device [ 271.574865][ T8352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.645'. [ 271.635179][ T8352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.645'. [ 271.702921][ T5935] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 271.775016][ T5935] usb 2-1: device descriptor read/8, error -71 [ 272.041056][ T5935] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 272.081785][ T5935] usb 2-1: device descriptor read/8, error -71 [ 272.192489][ T5935] usb usb2-port1: unable to enumerate USB device [ 272.430043][ T5839] usb 3-1: USB disconnect, device number 40 [ 272.829288][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 272.839167][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 273.162502][ T8382] sctp: [Deprecated]: syz.0.651 (pid 8382) Use of int in maxseg socket option. [ 273.162502][ T8382] Use struct sctp_assoc_value instead [ 273.421074][ T8386] loop6: detected capacity change from 0 to 7 [ 273.451153][ T8386] Dev loop6: unable to read RDB block 7 [ 273.457867][ T8386] loop6: unable to read partition table [ 273.467560][ T8386] loop6: partition table beyond EOD, truncated [ 273.486891][ T8386] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 273.839317][ T8391] netlink: 24 bytes leftover after parsing attributes in process `syz.2.654'. [ 273.981067][ T5839] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 274.171108][ T5839] usb 2-1: device descriptor read/64, error -71 [ 274.345389][ T5823] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 274.591128][ T5839] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 274.748764][ T8402] random: crng reseeded on system resumption [ 274.761057][ T5839] usb 2-1: device descriptor read/64, error -71 [ 274.775287][ T5823] usb 3-1: Using ep0 maxpacket: 8 [ 274.821894][ T5823] usb 3-1: unable to get BOS descriptor or descriptor too short [ 274.832340][ T5823] usb 3-1: config 127 has an invalid interface number: 1 but max is 0 [ 274.852110][ T5823] usb 3-1: config 127 has no interface number 0 [ 274.858400][ T5823] usb 3-1: config 127 interface 1 has no altsetting 0 [ 274.875350][ T5823] usb 3-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=c4.a4 [ 274.885308][ T5839] usb usb2-port1: attempt power cycle [ 274.901169][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.921016][ T5823] usb 3-1: Product: syz [ 274.925289][ T5823] usb 3-1: Manufacturer: syz [ 274.929919][ T5823] usb 3-1: SerialNumber: syz [ 275.349484][ T5823] usb 3-1: selecting invalid altsetting 2 [ 275.355986][ T5823] i2c-cp2615 3-1:127.1: probe with driver i2c-cp2615 failed with error -22 [ 275.371039][ T5839] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 275.389890][ T5823] usb 3-1: USB disconnect, device number 41 [ 275.399443][ T5839] usb 2-1: device descriptor read/8, error -71 [ 275.671038][ T5839] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 275.692225][ T5839] usb 2-1: device descriptor read/8, error -71 [ 275.721029][ T5910] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 275.801377][ T5839] usb usb2-port1: unable to enumerate USB device [ 275.874246][ T5910] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.885102][ T5910] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 275.908575][ T5910] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 275.918089][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 275.952039][ T5910] usb 4-1: SerialNumber: syz [ 276.187698][ T5910] usb 4-1: 0:2 : does not exist [ 276.216683][ T5839] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 276.263060][ T5910] usb 4-1: USB disconnect, device number 27 [ 276.441005][ T5839] usb 3-1: Using ep0 maxpacket: 32 [ 276.452098][ T5839] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 276.460417][ T5839] usb 3-1: config 0 has no interface number 0 [ 276.466805][ T5839] usb 3-1: config 0 interface 89 has no altsetting 0 [ 276.480294][ T5839] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 276.501420][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.517327][ T5839] usb 3-1: Product: syz [ 276.527156][ T5839] usb 3-1: Manufacturer: syz [ 276.551151][ T5839] usb 3-1: SerialNumber: syz [ 276.591650][ T5839] usb 3-1: config 0 descriptor?? [ 276.601835][ T5839] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 276.618420][ T5839] em28xx 3-1:0.89: Video interface 89 found: bulk [ 277.005142][ T8410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.021462][ T8410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.034432][ T8410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.044393][ T8410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.053946][ T984] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 277.211049][ T984] usb 4-1: Using ep0 maxpacket: 8 [ 277.223080][ T984] usb 4-1: config 0 has an invalid descriptor of length 91, skipping remainder of the config [ 277.250854][ T984] usb 4-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 277.271241][ T984] usb 4-1: config 0 interface 0 has no altsetting 0 [ 277.278059][ T984] usb 4-1: New USB device found, idVendor=17ef, idProduct=61ae, bcdDevice= 0.00 [ 277.287430][ T984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.295691][ T5839] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 277.313905][ T984] usb 4-1: config 0 descriptor?? [ 277.344307][ T984] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 277.545628][ T8423] 8021q: VLANs not supported on vcan0 [ 277.615986][ T8428] netlink: 'syz.0.664': attribute type 10 has an invalid length. [ 277.624751][ T8428] bond0: (slave wlan1): Opening slave failed [ 277.658778][ T8428] kAFS: unable to lookup cell '' [ 278.433995][ T5839] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 278.461716][ T5839] em28xx 3-1:0.89: board has no eeprom [ 278.613478][ T5839] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 278.620790][ T5839] em28xx 3-1:0.89: analog set to bulk mode. [ 278.628303][ T5823] em28xx 3-1:0.89: Registering V4L2 extension [ 278.661150][ T5839] usb 3-1: USB disconnect, device number 42 [ 278.700929][ T5839] em28xx 3-1:0.89: Disconnecting em28xx [ 278.729898][ T8453] random: crng reseeded on system resumption [ 278.897646][ T8454] netlink: 12 bytes leftover after parsing attributes in process `syz.3.660'. [ 278.936899][ T5823] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 278.970630][ T5823] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 279.273848][ T5823] em28xx 3-1:0.89: No AC97 audio processor [ 279.291745][ T5823] usb 3-1: Decoder not found [ 279.301553][ T5823] em28xx 3-1:0.89: failed to create media graph [ 279.314871][ T5823] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 279.513742][ T5823] em28xx 3-1:0.89: Registering snapshot button... [ 279.544089][ T5823] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input11 [ 279.589066][ T5823] em28xx 3-1:0.89: Remote control support is not available for this card. [ 279.630326][ T5839] em28xx 3-1:0.89: Closing input extension [ 279.720978][ T5839] em28xx 3-1:0.89: Deregistering snapshot button [ 279.793787][ T8467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.672'. [ 279.866863][ T5839] em28xx 3-1:0.89: Freeing device [ 280.255503][ T8470] netlink: 16 bytes leftover after parsing attributes in process `syz.2.673'. [ 280.512481][ T10] usb 4-1: USB disconnect, device number 28 [ 280.523581][ T8475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.574367][ T8475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.761155][ T5935] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 280.911061][ T5935] usb 2-1: device descriptor read/64, error -71 [ 281.071031][ T5930] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 281.168499][ T5935] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 281.303573][ T5930] usb 4-1: unable to get BOS descriptor or descriptor too short [ 281.313581][ T5930] usb 4-1: too many configurations: 50, using maximum allowed: 8 [ 281.328269][ T5930] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 281.338026][ T5930] usb 4-1: can't read configurations, error -61 [ 281.344771][ T5935] usb 2-1: device descriptor read/64, error -71 [ 281.465621][ T5935] usb usb2-port1: attempt power cycle [ 281.481756][ T5930] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 281.633275][ T5930] usb 4-1: unable to get BOS descriptor or descriptor too short [ 281.641249][ T5930] usb 4-1: too many configurations: 50, using maximum allowed: 8 [ 281.675459][ T5930] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 281.694333][ T5930] usb 4-1: can't read configurations, error -61 [ 281.724417][ T5930] usb usb4-port1: attempt power cycle [ 281.841041][ T5935] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 281.899509][ T5935] usb 2-1: device descriptor read/8, error -71 [ 282.081020][ T5930] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 282.105028][ T5930] usb 4-1: unable to get BOS descriptor or descriptor too short [ 282.113436][ T5930] usb 4-1: too many configurations: 50, using maximum allowed: 8 [ 282.135005][ T5930] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 282.142999][ T5930] usb 4-1: can't read configurations, error -61 [ 282.151002][ T5935] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 282.191800][ T5935] usb 2-1: device descriptor read/8, error -71 [ 282.302890][ T5935] usb usb2-port1: unable to enumerate USB device [ 282.323057][ T5930] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 282.355292][ T8498] bridge0: entered promiscuous mode [ 282.379888][ T8498] vlan3: entered promiscuous mode [ 282.381106][ T5930] usb 4-1: unable to get BOS descriptor or descriptor too short [ 282.415501][ T5930] usb 4-1: too many configurations: 50, using maximum allowed: 8 [ 282.443520][ T5930] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 282.452223][ T5930] usb 4-1: can't read configurations, error -61 [ 282.464461][ T5930] usb usb4-port1: unable to enumerate USB device [ 282.472085][ T8499] vlan3: entered promiscuous mode [ 282.849251][ T8507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.684'. [ 282.877604][ T8507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.684'. [ 282.951046][ T5839] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 283.111118][ T5839] usb 3-1: Using ep0 maxpacket: 8 [ 283.120519][ T5839] usb 3-1: config 6 has an invalid interface number: 75 but max is 3 [ 283.136661][ T5839] usb 3-1: config 6 has an invalid interface number: 149 but max is 3 [ 283.150725][ T5839] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 283.168139][ T5839] usb 3-1: config 6 has 2 interfaces, different from the descriptor's value: 4 [ 283.184761][ T5839] usb 3-1: config 6 has no interface number 0 [ 283.196048][ T5839] usb 3-1: config 6 has no interface number 1 [ 283.206663][ T5839] usb 3-1: config 6 interface 75 altsetting 12 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 283.220986][ T5839] usb 3-1: config 6 interface 75 altsetting 12 has an endpoint descriptor with address 0x4C, changing to 0xC [ 283.233106][ T5839] usb 3-1: config 6 interface 75 altsetting 12 endpoint 0xC has invalid maxpacket 3068, setting to 64 [ 283.244309][ T5839] usb 3-1: config 6 interface 75 altsetting 12 bulk endpoint 0x5 has invalid maxpacket 32 [ 283.258907][ T5839] usb 3-1: config 6 interface 75 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 283.269931][ T5839] usb 3-1: config 6 interface 75 altsetting 12 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 283.283303][ T5839] usb 3-1: config 6 interface 149 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 283.296741][ T5839] usb 3-1: config 6 interface 75 has no altsetting 0 [ 283.303824][ T5839] usb 3-1: config 6 interface 149 has no altsetting 0 [ 283.313357][ T5839] usb 3-1: string descriptor 0 read error: -22 [ 283.319796][ T5839] usb 3-1: New USB device found, idVendor=12d1, idProduct=f7e0, bcdDevice=fc.fa [ 283.331911][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.346439][ T8503] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 283.449980][ T5839] option 3-1:6.75: GSM modem (1-port) converter detected [ 283.695329][ T30] audit: type=1326 audit(1761766896.538:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8502 comm="syz.2.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2678efc9 code=0x7ffc0000 [ 283.736875][ T5910] usb 3-1: USB disconnect, device number 43 [ 283.786488][ T5910] option 3-1:6.75: device disconnected [ 283.826198][ T30] audit: type=1326 audit(1761766896.538:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8502 comm="syz.2.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2678efc9 code=0x7ffc0000 [ 283.880565][ T30] audit: type=1326 audit(1761766896.538:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8502 comm="syz.2.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f3d2678efc9 code=0x7ffc0000 [ 283.923422][ T30] audit: type=1326 audit(1761766896.548:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8502 comm="syz.2.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2678efc9 code=0x7ffc0000 [ 283.955087][ T30] audit: type=1326 audit(1761766896.548:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8502 comm="syz.2.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2678efc9 code=0x7ffc0000 [ 284.633274][ T8530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.689'. [ 284.711149][ T5930] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 284.913917][ T5930] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 284.921694][ T5930] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 284.936545][ T8530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.689'. [ 285.104783][ T5930] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 285.116910][ T5930] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 285.216164][ T5930] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 285.238424][ T5930] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 285.245960][ T5930] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 285.256987][ T5930] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 285.300347][ T5930] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 285.338629][ T5930] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 285.373176][ T5930] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 285.441758][ T5930] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 285.590995][ T5930] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 285.611238][ T5930] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 285.652452][ T5930] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 285.704351][ T5930] usb 4-1: string descriptor 0 read error: -22 [ 285.710620][ T5930] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 285.740186][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.772440][ T5930] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 286.012707][ T5910] usb 4-1: USB disconnect, device number 33 [ 286.905135][ T8555] netlink: 16 bytes leftover after parsing attributes in process `syz.4.698'. [ 286.941059][ T5930] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 287.185808][ T5930] usb 4-1: unable to get BOS descriptor or descriptor too short [ 287.218221][ T5930] usb 4-1: not running at top speed; connect to a high speed hub [ 287.376158][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.699'. [ 287.392121][ T5930] usb 4-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 287.461294][ T5930] usb 4-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=f4.4a [ 287.513688][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.575674][ T5930] usb 4-1: Product: syz [ 287.576397][ T5930] usb 4-1: Manufacturer: syz [ 287.576422][ T5930] usb 4-1: SerialNumber: syz [ 287.824255][ T5930] usbsevseg 4-1:129.0: USB 7 Segment device now attached [ 287.954336][ T5930] usb 4-1: USB disconnect, device number 34 [ 288.027440][ T5930] usbsevseg 4-1:129.0: USB 7 Segment now disconnected [ 288.422064][ T5910] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 288.925691][ T5910] usb 5-1: config 0 has an invalid interface number: 172 but max is 0 [ 288.934692][ T5910] usb 5-1: config 0 has no interface number 0 [ 288.965208][ T5910] usb 5-1: New USB device found, idVendor=2304, idProduct=020f, bcdDevice=3b.de [ 288.974453][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.077617][ T5910] usb 5-1: Product: syz [ 289.084734][ T5910] usb 5-1: Manufacturer: syz [ 289.098485][ T5910] usb 5-1: SerialNumber: syz [ 289.118017][ T5910] usb 5-1: config 0 descriptor?? [ 289.135393][ T5910] dvb-usb: found a 'Pinnacle 400e DVB-S USB2.0' in warm state. [ 289.144008][ T5910] dvb-usb: bulk message failed: -22 (4/0) [ 289.149780][ T5910] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 289.211344][ T5910] dvb-usb: bulk message failed: -22 (5/0) [ 289.217163][ T5910] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 289.236993][ T5910] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 289.558361][ T8588] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 289.627685][ T5910] dvb-usb: Pinnacle 400e DVB-S USB2.0 error while loading driver (-19) [ 289.642450][ T5910] usb 5-1: USB disconnect, device number 30 [ 289.871982][ T8594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.886194][ T8594] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.112115][ T8597] netlink: 'syz.0.710': attribute type 29 has an invalid length. [ 290.165657][ T8594] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 290.264468][ T8597] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 290.272784][ T8597] macvlan2: entered promiscuous mode [ 290.638102][ T8612] xt_bpf: check failed: parse error [ 290.731190][ T5839] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 290.907157][ T8621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.719'. [ 290.962349][ T5839] usb 5-1: device descriptor read/64, error -71 [ 291.063632][ T8621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.719'. [ 291.221234][ T5839] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 291.448832][ T5839] usb 5-1: device descriptor read/64, error -71 [ 291.583580][ T5839] usb usb5-port1: attempt power cycle [ 292.021282][ T5839] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 292.138347][ T5839] usb 5-1: device descriptor read/8, error -71 [ 292.391102][ T5839] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 292.439369][ T5839] usb 5-1: device descriptor read/8, error -71 [ 292.581533][ T5839] usb usb5-port1: unable to enumerate USB device [ 292.850120][ T8645] netlink: 20 bytes leftover after parsing attributes in process `syz.3.726'. [ 293.341623][ T5839] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 293.571385][ T5839] usb 2-1: Using ep0 maxpacket: 16 [ 293.596142][ T5839] usb 2-1: unable to get BOS descriptor or descriptor too short [ 293.607798][ T5839] usb 2-1: config 8 has an invalid interface number: 132 but max is 0 [ 293.621019][ T5839] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 293.917167][ T5839] usb 2-1: config 8 has no interface number 0 [ 293.979899][ T8656] netlink: 'syz.2.730': attribute type 4 has an invalid length. [ 294.018738][ T5839] usb 2-1: config 8 interface 132 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 294.041998][ T5839] usb 2-1: config 8 interface 132 has no altsetting 0 [ 294.064463][ T5839] usb 2-1: string descriptor 0 read error: -22 [ 294.070769][ T5839] usb 2-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8f.8b [ 294.080232][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.094129][ T5839] usb-storage 2-1:8.132: USB Mass Storage device detected [ 294.165420][ T5839] usb-storage 2-1:8.132: Quirks match for vid 07cf pid 1001: a [ 294.203245][ T8660] netlink: 'syz.2.730': attribute type 4 has an invalid length. [ 294.741524][ T10] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 294.934530][ T10] usb 5-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 294.966225][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 294.982902][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 294.993840][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 295.006770][ T10] usb 5-1: SerialNumber: syz [ 295.203920][ T5930] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 295.236127][ T10] usb 5-1: 0:2 : does not exist [ 295.283071][ T10] usb 5-1: unit 5 not found! [ 295.325349][ T10] usb 5-1: USB disconnect, device number 35 [ 295.362500][ T5930] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 295.371057][ T5930] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 295.408953][ T5930] usb 3-1: config 8 has no interface number 0 [ 295.433903][ T5930] usb 3-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 295.474701][ T5930] usb 3-1: config 8 interface 177 has no altsetting 0 [ 295.487723][ T5910] usb 2-1: USB disconnect, device number 50 [ 295.555151][ T5930] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 295.581358][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.241058][ T5935] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 296.381798][ T5935] usb 2-1: device descriptor read/64, error -71 [ 296.642048][ T5935] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 296.762630][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 296.772524][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 296.798097][ T5935] usb 2-1: device descriptor read/64, error -71 [ 296.911940][ T5935] usb usb2-port1: attempt power cycle [ 297.281084][ T5935] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 297.771348][ T5910] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 297.782256][ T5935] usb 2-1: device descriptor read/8, error -71 [ 298.049089][ T5930] usb 3-1: string descriptor 0 read error: -71 [ 298.092132][ T5935] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 298.138029][ T5930] ir_toy 3-1:8.177: required endpoints not found [ 298.192818][ T5935] usb 2-1: device descriptor read/8, error -71 [ 298.217816][ T5910] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 298.251504][ T5930] usb 3-1: USB disconnect, device number 44 [ 298.269217][ T5910] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 298.307138][ T5935] usb usb2-port1: unable to enumerate USB device [ 298.338741][ T5910] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 298.351154][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.513084][ T8707] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 298.526590][ T5910] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 299.061097][ T5910] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 299.389281][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.389307][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.389342][ T5910] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 299.389373][ T5910] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 299.389391][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.473252][ T5910] usb 4-1: config 0 descriptor?? [ 299.518540][ T8711] delete_channel: no stack [ 299.915212][ T5839] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 299.956098][ T5910] plantronics 0003:047F:FFFF.0008: unbalanced delimiter at end of report description [ 299.975412][ T5910] plantronics 0003:047F:FFFF.0008: parse failed [ 299.989188][ T5910] plantronics 0003:047F:FFFF.0008: probe with driver plantronics failed with error -22 [ 300.052178][ T5839] usb 2-1: device descriptor read/64, error -71 [ 300.158748][ T8719] netlink: 16 bytes leftover after parsing attributes in process `syz.3.750'. [ 300.301433][ T5839] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 300.373024][ T8719] bond2: option resend_igmp: invalid value (511) [ 300.388416][ T8719] bond2: option resend_igmp: allowed values 0 - 255 [ 300.462751][ T8719] bond2 (unregistering): Released all slaves [ 300.566888][ T5930] usb 4-1: USB disconnect, device number 35 [ 300.681062][ T5839] usb 2-1: device descriptor read/64, error -71 [ 300.711041][ T984] usb 5-1: USB disconnect, device number 36 [ 300.808535][ T5839] usb usb2-port1: attempt power cycle [ 301.214576][ T8740] rtc_cmos 00:00: Alarms can be up to one day in the future [ 301.246970][ T5839] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 301.306098][ T5839] usb 2-1: device descriptor read/8, error -71 [ 301.342489][ T984] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 301.551586][ T8745] random: crng reseeded on system resumption [ 301.565972][ T984] usb 3-1: Using ep0 maxpacket: 8 [ 301.597328][ T5839] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 301.619541][ T984] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 301.634894][ T5839] usb 2-1: device descriptor read/8, error -71 [ 301.661990][ T984] usb 3-1: config 0 has no interface number 0 [ 301.680993][ T984] usb 3-1: config 0 interface 132 altsetting 3 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 301.769533][ T984] usb 3-1: config 0 interface 132 altsetting 3 bulk endpoint 0x7 has invalid maxpacket 16 [ 301.985100][ T5839] usb usb2-port1: unable to enumerate USB device [ 301.994803][ T984] usb 3-1: config 0 interface 132 has no altsetting 0 [ 302.009762][ T984] usb 3-1: New USB device found, idVendor=1199, idProduct=6802, bcdDevice=fe.e3 [ 302.023565][ T984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.120446][ T984] usb 3-1: Product: syz [ 302.129344][ T984] usb 3-1: Manufacturer: syz [ 302.142747][ T984] usb 3-1: SerialNumber: syz [ 302.233026][ T984] usb 3-1: config 0 descriptor?? [ 302.252546][ T8736] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 303.096582][ T8763] random: crng reseeded on system resumption [ 303.191027][ T5935] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 303.503054][ T5935] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 303.521163][ T5935] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 303.567897][ T5935] usb 2-1: config 8 has no interface number 0 [ 303.631757][ T5935] usb 2-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 303.676652][ T5935] usb 2-1: config 8 interface 177 has no altsetting 0 [ 303.851030][ T5935] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 303.870479][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.994470][ T984] sierra 3-1:0.132: Sierra USB modem converter detected [ 304.043488][ T984] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 304.158502][ T8755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.169931][ T8755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.305672][ T984] usb 3-1: Sierra USB modem converter now attached to ttyUSB1 [ 304.364840][ T984] usb 3-1: Sierra USB modem converter now attached to ttyUSB2 [ 304.434340][ T984] usb 3-1: USB disconnect, device number 45 [ 304.497892][ T984] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 304.603720][ T984] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 304.654763][ T984] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 304.666839][ T984] sierra 3-1:0.132: device disconnected [ 304.864559][ T8778] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication [ 304.982270][ T984] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 305.131045][ T984] usb 3-1: Using ep0 maxpacket: 32 [ 305.152037][ T984] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 305.179680][ T984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.199400][ T984] usb 3-1: Product: syz [ 305.210680][ T984] usb 3-1: Manufacturer: syz [ 305.221294][ T984] usb 3-1: SerialNumber: syz [ 305.243290][ T984] usb 3-1: config 0 descriptor?? [ 305.688306][ T5935] usb 2-1: string descriptor 0 read error: -71 [ 305.698841][ T5935] ir_toy 2-1:8.177: required endpoints not found [ 305.717039][ T5935] usb 2-1: USB disconnect, device number 59 [ 305.841174][ T10] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 305.939768][ T984] peak_usb 3-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 305.951037][ T984] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 305.958529][ T984] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 306.012806][ T984] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -22 [ 306.112025][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 306.130345][ T10] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 306.146519][ T5910] usb 3-1: USB disconnect, device number 46 [ 306.171030][ T10] usb 4-1: config 0 has no interface number 0 [ 306.187833][ T10] usb 4-1: config 0 interface 89 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 306.198174][ T10] usb 4-1: config 0 interface 89 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 306.217839][ T10] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0114, bcdDevice= 4.be [ 306.227232][ T8799] netlink: 20 bytes leftover after parsing attributes in process `syz.1.771'. [ 306.241086][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.252074][ T10] usb 4-1: Product: syz [ 306.256278][ T10] usb 4-1: Manufacturer: syz [ 306.271280][ T10] usb 4-1: SerialNumber: syz [ 306.299953][ T10] usb 4-1: config 0 descriptor?? [ 306.312505][ T8785] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 306.323863][ T10] kvaser_usb 4-1:0.89: error -ENODEV: Cannot get usb endpoint(s) [ 306.639073][ T8780] netlink: 'syz.3.766': attribute type 13 has an invalid length. [ 306.888857][ T8806] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 306.903408][ T8808] capability: warning: `syz.3.766' uses 32-bit capabilities (legacy support in use) [ 307.071899][ T5935] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 307.386161][ T8812] bridge4: entered promiscuous mode [ 307.462917][ T5935] usb 2-1: Using ep0 maxpacket: 16 [ 307.539201][ T5935] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 307.558615][ T5935] usb 2-1: can't read configurations, error -61 [ 307.732913][ T5935] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 308.003883][ T8827] loop6: detected capacity change from 0 to 7 [ 308.067997][ T8827] Dev loop6: unable to read RDB block 7 [ 308.073793][ T5935] usb 2-1: Using ep0 maxpacket: 16 [ 308.079384][ T8827] loop6: unable to read partition table [ 308.087066][ T8827] loop6: partition table beyond EOD, truncated [ 308.093672][ T8827] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 308.130143][ T5935] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 308.138200][ T5935] usb 2-1: can't read configurations, error -61 [ 308.147202][ T5935] usb usb2-port1: attempt power cycle [ 308.531157][ T5935] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 308.594112][ T5935] usb 2-1: Using ep0 maxpacket: 16 [ 308.608959][ T5935] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 308.625501][ T5935] usb 2-1: can't read configurations, error -61 [ 308.687930][ T5910] usb 4-1: USB disconnect, device number 36 [ 308.918958][ T5935] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 308.986874][ T5935] usb 2-1: Using ep0 maxpacket: 16 [ 309.010625][ T5935] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 309.053799][ T5935] usb 2-1: can't read configurations, error -61 [ 309.079184][ T5935] usb usb2-port1: unable to enumerate USB device [ 310.292202][ T8854] xt_bpf: check failed: parse error [ 311.422139][ T30] audit: type=1804 audit(1761766924.258:222): pid=8879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.792" name="/newroot/187/file1" dev="fuse" ino=1 res=1 errno=0 [ 311.444992][ T8875] fuse: Bad value for 'group_id' [ 311.449956][ T8875] fuse: Bad value for 'group_id' [ 311.597480][ T8880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.622633][ T8880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.651558][ T5910] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 311.801069][ T5910] usb 4-1: Using ep0 maxpacket: 32 [ 311.857525][ T8884] ALSA: seq fatal error: cannot create timer (-22) [ 311.939748][ T5910] usb 4-1: config 0 has no interfaces? [ 312.020088][ T5910] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 312.068138][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.094968][ T5910] usb 4-1: Product: syz [ 312.117785][ T5910] usb 4-1: Manufacturer: syz [ 312.137464][ T5910] usb 4-1: SerialNumber: syz [ 312.149794][ T8888] vlan0: entered promiscuous mode [ 312.156560][ T8888] batadv0: entered promiscuous mode [ 312.206652][ T5910] usb 4-1: config 0 descriptor?? [ 312.479666][ T5935] usb 4-1: USB disconnect, device number 37 [ 312.721114][ T5910] usb 2-1: new low-speed USB device number 64 using dummy_hcd [ 312.882169][ T8902] netlink: 'syz.0.799': attribute type 27 has an invalid length. [ 313.236446][ T5910] usb 2-1: config 7 has an invalid interface number: 112 but max is 1 [ 313.245062][ T5910] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 313.301983][ T5910] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 313.338335][ T5910] usb 2-1: config 7 has no interface number 0 [ 313.382081][ T5910] usb 2-1: config 7 interface 112 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 313.520245][ T5910] usb 2-1: config 7 interface 112 has no altsetting 0 [ 313.796843][ T8902] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.804587][ T8902] bridge0: port 1() entered disabled state [ 313.902868][ T8902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.915786][ T8902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.030374][ T8902] macvlan2: left promiscuous mode [ 314.050417][ T3516] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.095337][ T3516] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 314.136922][ T3516] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.198403][ T3516] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 314.284829][ T3516] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.363038][ T3516] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 314.401472][ T3516] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.410492][ T3516] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 314.491166][ T984] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 314.641067][ T984] usb 5-1: Using ep0 maxpacket: 32 [ 314.648753][ T984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.700573][ T984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.727015][ T984] usb 5-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 314.751297][ T984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.770136][ T984] usb 5-1: config 0 descriptor?? [ 315.009103][ T8932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.804'. [ 315.064762][ T8934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.117001][ T8934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.127215][ T8932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.804'. [ 315.272510][ T30] audit: type=1326 audit(1761766928.118:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.4.802" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff30ab8efc9 code=0x0 [ 315.379295][ T8942] xt_TCPMSS: Only works on TCP SYN packets [ 315.486133][ T5910] usb 2-1: New USB device found, idVendor=046d, idProduct=089b, bcdDevice=ff.2b [ 315.505546][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.609151][ T5910] usb 2-1: can't set config #7, error -71 [ 315.859254][ T5910] usb 2-1: USB disconnect, device number 64 [ 316.099669][ T8952] netlink: 20 bytes leftover after parsing attributes in process `syz.3.809'. [ 316.342773][ T984] redragon 0003:0C45:760B.0009: hidraw0: USB HID v0.02 Device [HID 0c45:760b] on usb-dummy_hcd.4-1/input0 [ 317.751778][ T5935] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 317.827800][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.815'. [ 317.922934][ T5935] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.934440][ T5935] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 317.948578][ T5935] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 317.967666][ T5935] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 317.986150][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.994505][ T5935] usb 4-1: Product: syz [ 318.001316][ T5935] usb 4-1: Manufacturer: syz [ 318.008284][ T5935] usb 4-1: SerialNumber: syz [ 318.024894][ T5935] cdc_mbim 4-1:1.0: skipping garbage [ 318.218409][ T8979] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 318.435477][ T8969] loop2: detected capacity change from 0 to 7 [ 318.450193][ T8969] loop2: [POWERTEC] p1 p2 p3 p4 p5 [ 318.541571][ T8969] loop2: p1 start 3716547587 is beyond EOD, truncated [ 318.548830][ T8969] loop2: p2 size 1114112 extends beyond EOD, truncated [ 318.607116][ T8969] loop2: p3 size 4294901760 extends beyond EOD, truncated [ 318.687455][ T8969] loop2: p4 start 604307456 is beyond EOD, truncated [ 318.699924][ T8969] loop2: p5 start 201326592 is beyond EOD, truncated [ 318.786169][ T5935] cdc_mbim 4-1:1.0: bind() failure [ 319.019703][ T5935] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 319.050304][ T5856] udevd[5856]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 319.104089][ T5844] udevd[5844]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 319.124266][ T5935] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 319.169636][ T5935] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 319.193240][ T984] usb 5-1: USB disconnect, device number 37 [ 319.365845][ T5935] usb 4-1: USB disconnect, device number 38 [ 319.552887][ T9006] xt_TCPMSS: Only works on TCP SYN packets [ 319.569881][ T9007] netlink: 'syz.1.821': attribute type 4 has an invalid length. [ 319.580407][ T9007] netlink: 152 bytes leftover after parsing attributes in process `syz.1.821'. [ 319.684275][ T9007] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 321.851943][ T9024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.827'. [ 321.871708][ T9024] netlink: 12 bytes leftover after parsing attributes in process `syz.4.827'. [ 322.111123][ T984] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 322.902792][ T984] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 322.922327][ T984] usb 3-1: config 0 interface 0 has no altsetting 0 [ 322.956767][ T984] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 322.966090][ T984] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 322.981066][ T984] usb 3-1: Product: syz [ 322.993165][ T984] usb 3-1: Manufacturer: syz [ 322.998205][ T984] usb 3-1: SerialNumber: syz [ 323.016234][ T984] usb 3-1: config 0 descriptor?? [ 323.090460][ T984] usb 3-1: selecting invalid altsetting 0 [ 323.349678][ T9021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.363899][ T9021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.394352][ T5935] usb 3-1: USB disconnect, device number 47 [ 323.461931][ T9] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 323.571145][ T984] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 323.651027][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 323.659787][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 323.681369][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.705529][ T9] usb 2-1: config 0 descriptor?? [ 323.718069][ T9049] xt_TCPMSS: Only works on TCP SYN packets [ 323.739324][ T984] usb 5-1: device descriptor read/64, error -71 [ 323.750197][ T9] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 323.991036][ T984] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 324.126536][ T9052] xt_bpf: check failed: parse error [ 324.141197][ T984] usb 5-1: device descriptor read/64, error -71 [ 324.261553][ T984] usb usb5-port1: attempt power cycle [ 324.617429][ T984] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 324.671792][ T984] usb 5-1: device descriptor read/8, error -71 [ 325.059454][ T984] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 325.088690][ T984] usb 5-1: device descriptor read/8, error -71 [ 325.131609][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 325.137949][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.211439][ T984] usb usb5-port1: unable to enumerate USB device [ 326.159758][ T9074] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 326.166330][ T9074] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 326.181806][ T9074] vhci_hcd vhci_hcd.0: Device attached [ 326.330245][ T9074] sctp: [Deprecated]: syz.0.841 (pid 9074) Use of int in maxseg socket option. [ 326.330245][ T9074] Use struct sctp_assoc_value instead [ 326.421188][ T984] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 326.808384][ T9077] vhci_hcd: connection reset by peer [ 326.828040][ T57] vhci_hcd: stop threads [ 326.835735][ T57] vhci_hcd: release socket [ 326.845875][ T57] vhci_hcd: disconnect device [ 326.853894][ T9] gspca_sonixj: reg_w err -71 [ 326.858671][ T9] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 326.881263][ T9] usb 2-1: USB disconnect, device number 65 [ 327.002284][ T9083] input: syz1 as /devices/virtual/input/input13 [ 327.061392][ T5935] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 327.107606][ T30] audit: type=1326 audit(1761766939.938:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.2.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2678efc9 code=0x7ffc0000 [ 327.143889][ T30] audit: type=1326 audit(1761766939.938:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.2.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2678efc9 code=0x7ffc0000 [ 327.255465][ T5935] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 327.275441][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.299193][ T5935] usb 5-1: config 0 descriptor?? [ 327.405770][ T9093] fuse: Unknown parameter 'rootmo٪de' [ 327.446987][ T9094] xt_bpf: check failed: parse error [ 327.949056][ T9101] rtc_cmos 00:00: Alarms can be up to one day in the future [ 328.314960][ T5930] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 328.670971][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.684140][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.704605][ T5930] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 328.742568][ T5930] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 328.775515][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.812712][ T5930] usb 3-1: config 0 descriptor?? [ 329.271883][ T9114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.852'. [ 329.301069][ T9114] netlink: 24 bytes leftover after parsing attributes in process `syz.3.852'. [ 329.321330][ T9114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.852'. [ 329.330150][ T9114] netlink: 24 bytes leftover after parsing attributes in process `syz.3.852'. [ 329.485005][ T5930] usbhid 3-1:0.0: can't add hid device: -71 [ 329.515560][ T5930] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 329.652617][ T5930] usb 3-1: USB disconnect, device number 48 [ 329.745149][ T30] audit: type=1326 audit(1761766942.588:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9117 comm="syz.3.854" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f644f18efc9 code=0x0 [ 329.941803][ T9130] vlan0: entered promiscuous mode [ 330.101023][ T5839] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 330.117495][ T9136] xt_bpf: check failed: parse error [ 330.163975][ T9137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.858'. [ 330.795552][ T5839] usb 4-1: Using ep0 maxpacket: 32 [ 330.811276][ T5839] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.814348][ T5935] usb 5-1: Cannot set autoneg [ 330.829331][ T5935] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 330.841362][ T5839] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 330.864348][ T5935] usb 5-1: USB disconnect, device number 42 [ 330.942325][ T5839] usb 4-1: config 0 interface 0 has no altsetting 0 [ 330.953569][ T5839] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=bd.e9 [ 330.963462][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.195943][ T5839] usb 4-1: Product: syz [ 331.200546][ T5839] usb 4-1: Manufacturer: syz [ 331.205263][ T5839] usb 4-1: SerialNumber: syz [ 331.302644][ T5839] usb 4-1: config 0 descriptor?? [ 331.436633][ T5839] gs_usb 4-1:0.0: Required endpoints not found [ 331.562144][ T984] vhci_hcd: vhci_device speed not set [ 331.891063][ T5935] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 332.120280][ T5935] usb 5-1: Using ep0 maxpacket: 16 [ 332.143595][ T5935] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 332.176912][ T5935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 332.198646][ T5935] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 332.210520][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.228149][ T5935] usb 5-1: Product: syz [ 332.238991][ T5935] usb 5-1: Manufacturer: syz [ 332.250195][ T5935] usb 5-1: SerialNumber: syz [ 332.267751][ T5935] usb 5-1: config 0 descriptor?? [ 332.284502][ T5935] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 332.307292][ T5935] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 332.314724][ T9] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 332.501181][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 332.509389][ T9] usb 2-1: config 0 has an invalid interface number: 150 but max is 0 [ 332.517803][ T9] usb 2-1: config 0 has no interface number 0 [ 332.524870][ T9] usb 2-1: config 0 interface 150 has no altsetting 0 [ 332.536691][ T9] usb 2-1: New USB device found, idVendor=093a, idProduct=2603, bcdDevice=53.01 [ 332.545918][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.554043][ T9] usb 2-1: Product: syz [ 332.558253][ T9] usb 2-1: Manufacturer: syz [ 332.562973][ T9] usb 2-1: SerialNumber: syz [ 332.592833][ T9] usb 2-1: config 0 descriptor?? [ 332.636863][ T9] gspca_main: pac7311-2.14.0 probing 093a:2603 [ 332.717330][ T984] usb 4-1: USB disconnect, device number 39 [ 332.885448][ T5935] em28xx 5-1:0.0: chip ID is em2710 [ 333.082525][ T9168] tun0: tun_chr_ioctl cmd 1074025675 [ 333.091922][ T5935] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 333.106070][ T5935] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 333.116491][ T9168] tun0: persist enabled [ 333.121857][ T5935] em28xx 5-1:0.0: No AC97 audio processor [ 333.137332][ T9168] tun0: tun_chr_ioctl cmd 1074025675 [ 333.160420][ T5935] usb 5-1: USB disconnect, device number 43 [ 333.167004][ T9168] tun0: persist enabled [ 333.191999][ T5935] em28xx 5-1:0.0: Disconnecting em28xx [ 333.244444][ T9169] netdevsim netdevsim3: Direct firmware load for . [ 333.244444][ T9169] failed with error -2 [ 333.256425][ T9169] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 333.256425][ T9169] [ 333.301319][ T9] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -110 [ 333.322378][ T9] pac7311 2-1:0.150: probe with driver pac7311 failed with error -110 [ 333.336476][ T5935] em28xx 5-1:0.0: Freeing device [ 333.621165][ T5839] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 333.670487][ T9173] vlan3: entered promiscuous mode [ 333.675805][ T9173] batadv0: entered promiscuous mode [ 333.777920][ T5839] usb 4-1: Using ep0 maxpacket: 16 [ 333.787307][ T5839] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 333.798108][ T5839] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.820691][ T5839] usb 4-1: config 0 has no interface number 0 [ 333.852373][ T5839] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 333.863244][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.872551][ T5839] usb 4-1: Product: syz [ 333.876799][ T5839] usb 4-1: Manufacturer: syz [ 333.885518][ T5839] usb 4-1: SerialNumber: syz [ 333.903263][ T5839] usb 4-1: config 0 descriptor?? [ 333.957858][ T5839] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 333.978969][ T5839] uvcvideo 4-1:0.105: No valid video chain found. [ 334.086951][ T9180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.870'. [ 334.135378][ T9180] netlink: 20 bytes leftover after parsing attributes in process `syz.4.870'. [ 335.737702][ T5839] usb 2-1: USB disconnect, device number 66 [ 336.007467][ T9204] loop6: detected capacity change from 0 to 7 [ 336.032671][ T9204] Dev loop6: unable to read RDB block 7 [ 336.084353][ T9204] loop6: unable to read partition table [ 336.124658][ T9204] loop6: partition table beyond EOD, truncated [ 336.184833][ T9210] tipc: Failed to remove unknown binding: 66,1,1/0:4173549192/4173549194 [ 336.206179][ T9204] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 336.220248][ T10] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 336.342974][ T9210] tipc: Failed to remove unknown binding: 66,1,1/0:4173549192/4173549194 [ 336.381659][ T9210] tipc: Failed to remove unknown binding: 66,1,1/0:4173549192/4173549194 [ 336.445758][ T10] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 336.465119][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.487777][ T10] usb 3-1: Product: syz [ 336.502133][ T10] usb 3-1: Manufacturer: syz [ 336.518360][ T10] usb 3-1: SerialNumber: syz [ 336.548995][ T10] usb 3-1: config 0 descriptor?? [ 336.576256][ T10] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 336.853994][ T9] usb 4-1: USB disconnect, device number 40 [ 336.911135][ T5935] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 336.973120][ T9205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.990184][ T9205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.063448][ T5935] usb 2-1: device descriptor read/64, error -71 [ 337.361046][ T5935] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 337.521299][ T5935] usb 2-1: device descriptor read/64, error -71 [ 337.632408][ T5935] usb usb2-port1: attempt power cycle [ 337.981140][ T5935] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 338.021797][ T5935] usb 2-1: device descriptor read/8, error -71 [ 338.031037][ T9] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 338.114473][ T10] gspca_sunplus: reg_w_riv err -71 [ 338.119709][ T10] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 338.158783][ T10] usb 3-1: USB disconnect, device number 49 [ 338.220973][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 338.235295][ T9] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 338.250975][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.271024][ T5935] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 338.290660][ T9] usb 5-1: config 0 descriptor?? [ 338.313399][ T9] gspca_main: sq930x-2.14.0 probing 041e:403c [ 338.323341][ T5935] usb 2-1: device descriptor read/8, error -71 [ 338.451562][ T5935] usb usb2-port1: unable to enumerate USB device [ 338.721702][ T5839] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 338.881016][ T5839] usb 4-1: Using ep0 maxpacket: 16 [ 338.889160][ T5839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.921189][ T5839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.983223][ T5839] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 339.077292][ T24] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 339.097292][ T5839] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 339.110956][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.125435][ T5839] usb 4-1: config 0 descriptor?? [ 339.211225][ T9] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 339.227869][ T9] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 339.280124][ T9] usb 5-1: USB disconnect, device number 44 [ 339.281548][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 339.301069][ T24] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 339.316186][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 339.338370][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.369529][ T9230] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 339.390801][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 339.779169][ T5839] microsoft 0003:045E:07DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 339.838772][ T5839] microsoft 0003:045E:07DA.000A: no inputs found [ 339.874821][ T5839] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway [ 339.932048][ T30] audit: type=1326 audit(1761766952.778:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9235 comm="syz.4.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30ab8efc9 code=0x7ffc0000 [ 339.982262][ T5839] usb 4-1: USB disconnect, device number 41 [ 340.027610][ T30] audit: type=1326 audit(1761766952.778:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9235 comm="syz.4.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30ab8efc9 code=0x7ffc0000 [ 340.138209][ T30] audit: type=1326 audit(1761766952.808:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9235 comm="syz.4.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff30ab8efc9 code=0x7ffc0000 [ 340.253423][ T30] audit: type=1326 audit(1761766952.808:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9235 comm="syz.4.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30ab8efc9 code=0x7ffc0000 [ 340.327166][ T30] audit: type=1326 audit(1761766952.808:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9235 comm="syz.4.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30ab8efc9 code=0x7ffc0000 [ 340.426181][ T30] audit: type=1326 audit(1761766952.808:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9235 comm="syz.4.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff30ab8efc9 code=0x7ffc0000 [ 340.513894][ T30] audit: type=1326 audit(1761766952.808:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9235 comm="syz.4.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30ab8efc9 code=0x7ffc0000 [ 340.650715][ T9250] loop6: detected capacity change from 0 to 7 [ 340.684088][ T30] audit: type=1326 audit(1761766952.808:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9235 comm="syz.4.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30ab8efc9 code=0x7ffc0000 [ 340.731896][ T30] audit: type=1326 audit(1761766952.808:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9235 comm="syz.4.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7ff30ab8efc9 code=0x7ffc0000 [ 340.759955][ T9250] Dev loop6: unable to read RDB block 7 [ 340.785373][ T9250] loop6: unable to read partition table [ 340.848366][ T30] audit: type=1326 audit(1761766952.808:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9235 comm="syz.4.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30ab8efc9 code=0x7ffc0000 [ 340.919545][ T9250] loop6: partition table beyond EOD, truncated [ 341.031105][ T9250] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 341.225609][ T9267] xt_TCPMSS: Only works on TCP SYN packets [ 341.293838][ T9268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.898'. [ 341.425805][ T9274] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 341.577164][ T9274] bond1 (unregistering): Released all slaves [ 342.571919][ T24] usb 3-1: USB disconnect, device number 50 [ 342.991759][ T5839] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 343.151099][ T5839] usb 4-1: Using ep0 maxpacket: 16 [ 343.168041][ T5839] usb 4-1: New USB device found, idVendor=26b1, idProduct=dd3a, bcdDevice= f.38 [ 343.177487][ T5839] usb 4-1: New USB device strings: Mfr=10, Product=6, SerialNumber=102 [ 343.195118][ T5839] usb 4-1: Product: syz [ 343.204041][ T5839] usb 4-1: Manufacturer: syz [ 343.208670][ T5839] usb 4-1: SerialNumber: syz [ 343.265884][ T5839] usb 4-1: config 0 descriptor?? [ 343.304866][ T9304] loop6: detected capacity change from 0 to 7 [ 343.322610][ T9304] Dev loop6: unable to read RDB block 7 [ 343.328244][ T9304] loop6: unable to read partition table [ 343.340147][ T9304] loop6: partition table beyond EOD, truncated [ 343.350379][ T9304] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 343.371094][ T24] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 343.483583][ T9286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.522505][ T9286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.534765][ T9] usb 4-1: USB disconnect, device number 42 [ 343.542504][ T24] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 343.554318][ T24] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 343.615303][ T24] usb 3-1: config 8 has no interface number 0 [ 343.630354][ T24] usb 3-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 343.688107][ T24] usb 3-1: config 8 interface 177 has no altsetting 0 [ 343.706195][ T24] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 343.727824][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.864402][ T9316] ALSA: seq fatal error: cannot create timer (-22) [ 344.238485][ T9324] syzkaller1: entered promiscuous mode [ 344.415849][ T9324] syzkaller1: entered allmulticast mode [ 344.700116][ T9337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.917'. [ 344.784002][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.917'. [ 345.239924][ T9] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 345.401770][ T9] usb 4-1: device descriptor read/64, error -71 [ 345.641017][ T9] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 345.824993][ T9] usb 4-1: device descriptor read/64, error -71 [ 345.962621][ T9] usb usb4-port1: attempt power cycle [ 346.277405][ T9347] random: crng reseeded on system resumption [ 346.857200][ T24] usb 3-1: string descriptor 0 read error: -71 [ 346.925941][ T9] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 347.001404][ T24] ir_toy 3-1:8.177: required endpoints not found [ 347.018540][ T24] usb 3-1: USB disconnect, device number 51 [ 347.051995][ T9] usb 4-1: device descriptor read/8, error -71 [ 347.259775][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 347.259796][ T30] audit: type=1326 audit(1761766960.098:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9353 comm="syz.1.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a3eb8efc9 code=0x7ffc0000 [ 347.311009][ T9] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 347.344484][ T30] audit: type=1326 audit(1761766960.098:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9353 comm="syz.1.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f0a3eb8efc9 code=0x7ffc0000 [ 347.387399][ T9] usb 4-1: device descriptor read/8, error -71 [ 347.394450][ T9354] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 347.425996][ T30] audit: type=1326 audit(1761766960.098:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9353 comm="syz.1.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a3eb8efc9 code=0x7ffc0000 [ 347.480898][ T30] audit: type=1326 audit(1761766960.138:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9353 comm="syz.1.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f0a3eb8efc9 code=0x7ffc0000 [ 347.521361][ T9] usb usb4-port1: unable to enumerate USB device [ 347.525908][ T30] audit: type=1326 audit(1761766960.138:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9353 comm="syz.1.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a3eb8efc9 code=0x7ffc0000 [ 347.641150][ T30] audit: type=1326 audit(1761766960.138:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9353 comm="syz.1.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a3eb8efc9 code=0x7ffc0000 [ 347.713687][ T30] audit: type=1326 audit(1761766960.138:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9353 comm="syz.1.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0a3eb8efc9 code=0x7ffc0000 [ 347.802628][ T30] audit: type=1326 audit(1761766960.138:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9353 comm="syz.1.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a3eb8efc9 code=0x7ffc0000 [ 347.857327][ T30] audit: type=1326 audit(1761766960.138:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9353 comm="syz.1.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0a3eb8efc9 code=0x7ffc0000 [ 347.912206][ T5839] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 347.957660][ T30] audit: type=1326 audit(1761766960.138:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9353 comm="syz.1.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a3eb8efc9 code=0x7ffc0000 [ 348.093980][ T5839] usb 2-1: Using ep0 maxpacket: 8 [ 348.105713][ T5839] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 348.122975][ T5839] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 348.139878][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.154855][ T5839] usb 2-1: Product: syz [ 348.159432][ T5839] usb 2-1: Manufacturer: syz [ 348.165199][ T5839] usb 2-1: SerialNumber: syz [ 348.208273][ T5839] usb 2-1: config 0 descriptor?? [ 348.301058][ T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 348.461479][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 348.473944][ T9] usb 4-1: descriptor type invalid, skip [ 348.481666][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 348.489986][ T9379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.930'. [ 348.503052][ T9] usb 4-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.40 [ 348.503453][ T9359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.520157][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.532571][ T9359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.540704][ T9] usb 4-1: Product: syz [ 348.547691][ T9] usb 4-1: Manufacturer: 터譽ތᡮ츝쟣࿅ᦘ蚒⏛鿑신቙כֿﰆ莒琌㽇Ṭ衞㨠얓瞾ꁐꄼ魪㧜鎅䋒᤮냰鵛캳䒢䀛恘퍄穩갧磰픐㙗㝙Ṡ炡뿞㤨땍姉ꥃຼ쇱箍楻ᶚ蕩庪즽꛻ﵲ墍寺橔偣鉫랕꼜ᗤ꓃昋Я뙵懗뽸찕ꝩꨏ칪韏⧾ㄾ篦㩶麑᠌쭉꼯ﻟꅚ [ 348.585880][ T5839] usb 2-1: USB disconnect, device number 71 [ 348.790097][ T9] usb 4-1: SerialNumber: syz [ 349.034664][ T9369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.044070][ T9369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.353679][ T9] usbhid 4-1:1.0: can't add hid device: -71 [ 349.367017][ T9] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 349.582581][ T9] usb 4-1: USB disconnect, device number 47 [ 349.831143][ T5839] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 350.002556][ T5839] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 350.041698][ T5839] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 350.062811][ T5839] usb 2-1: config 8 has no interface number 0 [ 350.082093][ T5839] usb 2-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 350.121741][ T5839] usb 2-1: config 8 interface 177 has no altsetting 0 [ 350.139428][ T5839] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 350.151107][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.529925][ T9410] fuse: Bad value for 'fd' [ 350.614807][ T9412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.938'. [ 350.758681][ T9412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.938'. [ 350.970534][ T24] IPVS: starting estimator thread 0... [ 351.061297][ T9418] IPVS: using max 24 ests per chain, 57600 per kthread [ 351.312211][ T9420] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 351.318832][ T9420] PKCS7: Only support pkcs7_signedData type [ 351.346843][ T9420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.941'. [ 351.512623][ T9425] random: crng reseeded on system resumption [ 352.524939][ T5839] usb 2-1: string descriptor 0 read error: -71 [ 352.538292][ T5839] ir_toy 2-1:8.177: required endpoints not found [ 352.592141][ T5839] usb 2-1: USB disconnect, device number 72 [ 353.111224][ T5839] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 353.475652][ T5839] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 353.507233][ T5839] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 353.517199][ T24] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 353.538246][ T5839] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 353.550954][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.595945][ T9435] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 353.646979][ T5839] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 353.752253][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 353.781266][ T24] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 353.791866][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 353.801524][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.905660][ T9440] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 353.918277][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 355.111026][ T24] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 355.261195][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 355.296753][ T24] usb 4-1: config index 0 descriptor too short (expected 63524, got 36) [ 355.306761][ T24] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 355.325934][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 355.350485][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 355.367606][ T24] usb 4-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 355.397849][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.435879][ T24] usb 4-1: config 0 descriptor?? [ 355.860346][ T9459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.873351][ T9459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.907857][ T24] hid (null): bogus close delimiter [ 355.925747][ T24] hid (null): unknown global tag 0xc [ 355.932942][ T24] hid (null): unknown global tag 0xc [ 355.938602][ T24] hid (null): invalid report_count 16962 [ 355.945626][ T24] hid (null): invalid report_size 11155 [ 355.964975][ T24] hid-generic 0003:0DFC:0101.000B: unknown main item tag 0x0 [ 355.973613][ T24] hid-generic 0003:0DFC:0101.000B: unknown main item tag 0x0 [ 355.985065][ T24] hid-generic 0003:0DFC:0101.000B: unknown main item tag 0x0 [ 355.994918][ T24] hid-generic 0003:0DFC:0101.000B: unknown main item tag 0x0 [ 356.002835][ T24] hid-generic 0003:0DFC:0101.000B: unknown main item tag 0x0 [ 356.012382][ T24] hid-generic 0003:0DFC:0101.000B: unknown main item tag 0x0 [ 356.022338][ T24] hid-generic 0003:0DFC:0101.000B: unknown main item tag 0x0 [ 356.040866][ T24] hid-generic 0003:0DFC:0101.000B: unknown main item tag 0x0 [ 356.124102][ T24] hid-generic 0003:0DFC:0101.000B: unknown main item tag 0x0 [ 356.134234][ T24] hid-generic 0003:0DFC:0101.000B: unknown main item tag 0x0 [ 356.210649][ T24] hid-generic 0003:0DFC:0101.000B: collection stack underflow [ 356.220079][ T24] hid-generic 0003:0DFC:0101.000B: item 0 0 0 12 parsing failed [ 356.229736][ T24] hid-generic 0003:0DFC:0101.000B: probe with driver hid-generic failed with error -22 [ 356.253486][ T24] usb 4-1: USB disconnect, device number 48 [ 356.408608][ T5935] usb 3-1: USB disconnect, device number 52 [ 356.479530][ T5839] usb 2-1: USB disconnect, device number 73 [ 356.925712][ T9486] random: crng reseeded on system resumption [ 357.654934][ T9496] loop6: detected capacity change from 0 to 7 [ 357.669387][ T9496] Dev loop6: unable to read RDB block 7 [ 357.675225][ T9496] loop6: unable to read partition table [ 357.685794][ T9496] loop6: partition table beyond EOD, truncated [ 357.694335][ T9496] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 358.304872][ T9502] ALSA: seq fatal error: cannot create timer (-22) [ 359.314013][ T9516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.967'. [ 359.363068][ T9516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.967'. [ 360.521657][ T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 360.655690][ T9526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.970'. [ 360.701918][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 360.911746][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.948766][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.963799][ T9526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.970'. [ 360.992017][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 361.008103][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 361.024085][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.046799][ T9] usb 5-1: config 0 descriptor?? [ 361.779197][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000C/input/input14 [ 362.013412][ T9] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 362.072656][ T9] usb 5-1: USB disconnect, device number 45 [ 362.259399][ T9538] fido_id[9538]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 363.703876][ T9542] hsr0: entered promiscuous mode [ 363.709955][ T9542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.974'. [ 363.757775][ T9542] hsr_slave_0: left promiscuous mode [ 363.790742][ T9542] hsr_slave_1: left promiscuous mode [ 363.900396][ T9542] hsr0 (unregistering): left promiscuous mode [ 365.099310][ T9567] binder: 9566:9567 ioctl c0306201 200000000080 returned -14 [ 365.109105][ T9567] binder: BINDER_SET_CONTEXT_MGR already set [ 365.119940][ T9567] binder: 9566:9567 ioctl 4018620d 200000000000 returned -16 [ 365.158065][ T9567] warning: `syz.1.978' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 367.078695][ T9597] netlink: 28 bytes leftover after parsing attributes in process `syz.2.986'. [ 367.120108][ T9598] rtc_cmos 00:00: Alarms can be up to one day in the future [ 367.251218][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 368.315370][ T9616] rtc_cmos 00:00: Alarms can be up to one day in the future [ 370.095405][ T9629] random: crng reseeded on system resumption [ 371.332473][ T5839] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 371.541557][ T5839] usb 3-1: Using ep0 maxpacket: 8 [ 371.552504][ T5839] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 371.581829][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.686501][ T5839] pvrusb2: Hardware description: Terratec Grabster AV400 [ 371.739246][ T5839] pvrusb2: ********** [ 371.771192][ T5839] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 371.816439][ T5839] pvrusb2: Important functionality might not be entirely working. [ 371.835969][ T5839] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 371.869088][ T5839] pvrusb2: ********** [ 371.902344][ T2345] pvrusb2: Invalid write control endpoint [ 372.138052][ T9634] pvrusb2: Invalid write control endpoint [ 372.161375][ T5839] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 372.168193][ T9650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1001'. [ 372.324859][ T2345] pvrusb2: Invalid write control endpoint [ 372.330800][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 372.345247][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 372.414490][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 372.428586][ T5839] usb 4-1: Using ep0 maxpacket: 32 [ 372.428876][ T2345] pvrusb2: Device being rendered inoperable [ 372.444702][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 372.454843][ T5839] usb 4-1: config 0 has an invalid interface number: 9 but max is 0 [ 372.455997][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 372.539808][ T5839] usb 4-1: config 0 has no interface number 0 [ 372.549123][ T5839] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 372.573843][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.593443][ T5839] usb 4-1: Product: syz [ 372.597654][ T5839] usb 4-1: Manufacturer: syz [ 372.600560][ T2345] pvrusb2: Attached sub-driver cx25840 [ 372.696874][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 372.713264][ T5839] usb 4-1: SerialNumber: syz [ 372.723033][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 372.738688][ T5839] usb 4-1: config 0 descriptor?? [ 372.873777][ T5839] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 373.395431][ T9667] rtc_cmos 00:00: Alarms can be up to one day in the future [ 374.121371][ T9674] xt_TCPMSS: Only works on TCP SYN packets [ 374.144668][ T9645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1000'. [ 374.154271][ T9645] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1000'. [ 374.247589][ T9645] bond2: Removing last arp target with arp_interval on [ 374.303441][ T9645] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 374.411376][ T5839] gspca_topro: reg_w err -110 [ 374.433030][ T984] usb 3-1: USB disconnect, device number 53 [ 374.451538][ T5839] gspca_topro: Sensor soi763a [ 374.527173][ T9645] bond2 (unregistering): Released all slaves [ 374.962223][ T10] usb 4-1: USB disconnect, device number 49 [ 375.888552][ T10] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 376.011043][ T9698] netlink: 'syz.3.1009': attribute type 10 has an invalid length. [ 376.105654][ T9698] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 376.115012][ T5839] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 376.196218][ T10] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 376.224016][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.280406][ T9698] wg1: entered promiscuous mode [ 376.286116][ T9698] wg1: entered allmulticast mode [ 376.344365][ T5839] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 376.356363][ T5839] usb 3-1: config 0 has no interface number 0 [ 376.422573][ T10] usb 2-1: config 0 descriptor?? [ 376.449833][ T5839] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 376.470133][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.599735][ T5935] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 376.609266][ T5839] usb 3-1: Product: syz [ 376.631510][ T5839] usb 3-1: Manufacturer: syz [ 376.646788][ T5839] usb 3-1: SerialNumber: syz [ 376.660458][ T5839] usb 3-1: config 0 descriptor?? [ 376.761566][ T5935] usb 4-1: Using ep0 maxpacket: 32 [ 376.802492][ T5935] usb 4-1: config 0 has an invalid interface number: 217 but max is 0 [ 376.851627][ T5935] usb 4-1: config 0 has no interface number 0 [ 376.911737][ T5935] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 376.921778][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.963446][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 376.963463][ T30] audit: type=1326 audit(1761766989.808:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9702 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6238efc9 code=0x7ffc0000 [ 377.025886][ T5935] usb 4-1: Product: syz [ 377.030130][ T5935] usb 4-1: Manufacturer: syz [ 377.086938][ T10] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 377.126954][ T9695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.156120][ T5935] usb 4-1: SerialNumber: syz [ 377.193504][ T9695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.206995][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 377.233049][ T5839] usb 3-1: Firmware: major: 225, minor: 107, hardware type: RZUSB (3) [ 377.268904][ T5935] usb 4-1: config 0 descriptor?? [ 377.373740][ T5935] ftdi_sio 4-1:0.217: FTDI USB Serial Device converter detected [ 377.472241][ T5839] usb 3-1: failed to fetch extended address, random address set [ 377.482147][ T5935] usb 4-1: Detected SIO [ 377.486770][ T10] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 377.498882][ T10] [drm] Initialized udl on minor 2 [ 377.506178][ T5935] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 377.524884][ T10] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 377.585220][ T10] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 377.600102][ T5935] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 377.665884][ T5935] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 377.682934][ T10] usb 2-1: USB disconnect, device number 74 [ 377.693856][ T5839] usb 3-1: USB disconnect, device number 54 [ 377.712145][ T5935] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 378.341593][ T9725] rtc_cmos 00:00: Alarms can be up to one day in the future [ 378.433188][ T984] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 378.618897][ T984] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 378.663913][ T9731] xt_TCPMSS: Only works on TCP SYN packets [ 379.176771][ T984] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 379.186949][ T984] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 379.196113][ T984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.235482][ T9722] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 379.297065][ T10] usb 4-1: USB disconnect, device number 50 [ 379.307354][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 379.370159][ T10] ftdi_sio 4-1:0.217: device disconnected [ 379.382074][ T984] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 380.671619][ T5935] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 380.800193][ T9748] rtc_cmos 00:00: Alarms can be up to one day in the future [ 380.941749][ T5935] usb 4-1: Using ep0 maxpacket: 32 [ 381.078023][ T5935] usb 4-1: config 0 has an invalid interface number: 150 but max is 0 [ 381.086806][ T5935] usb 4-1: config 0 has no interface number 0 [ 381.418430][ T5935] usb 4-1: config 0 interface 150 has no altsetting 0 [ 381.450027][ T5935] usb 4-1: New USB device found, idVendor=093a, idProduct=2603, bcdDevice=53.01 [ 381.459944][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.479529][ T5935] usb 4-1: Product: syz [ 381.484421][ T5935] usb 4-1: Manufacturer: syz [ 381.493881][ T5935] usb 4-1: SerialNumber: syz [ 381.555853][ T5935] usb 4-1: config 0 descriptor?? [ 381.606444][ T5935] gspca_main: pac7311-2.14.0 probing 093a:2603 [ 382.078585][ T9759] rtc_cmos 00:00: Alarms can be up to one day in the future [ 382.163704][ T9756] ip6erspan0: entered promiscuous mode [ 382.188677][ T5935] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -110 [ 382.257048][ T5935] pac7311 4-1:0.150: probe with driver pac7311 failed with error -110 [ 382.531660][ T984] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 382.742410][ T984] usb 5-1: Using ep0 maxpacket: 8 [ 382.751611][ T984] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 382.759944][ T984] usb 5-1: config 179 has no interface number 0 [ 382.766338][ T984] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 382.778471][ T984] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 382.816103][ T5839] usb 2-1: USB disconnect, device number 75 [ 382.837163][ T984] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 382.868906][ T984] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 382.966557][ T984] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 383.014257][ T984] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 383.071083][ T984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.095941][ T9760] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 383.112333][ T9765] ALSA: seq fatal error: cannot create timer (-22) [ 385.201740][ T5839] usb 4-1: USB disconnect, device number 51 [ 385.729262][ T5935] usb 5-1: USB disconnect, device number 46 [ 385.729262][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 385.729325][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 385.753942][ C1] ================================================================== [ 385.762056][ C1] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23d/0x290 [ 385.769980][ C1] Read of size 4 at addr ffff888023aa805c by task syz.1.1032/9783 [ 385.777867][ C1] [ 385.780352][ C1] CPU: 1 UID: 0 PID: 9783 Comm: syz.1.1032 Not tainted syzkaller #0 PREEMPT(full) [ 385.780406][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 385.780469][ C1] Call Trace: [ 385.780507][ C1] [ 385.780540][ C1] dump_stack_lvl+0x189/0x250 [ 385.780624][ C1] ? __kasan_check_byte+0x12/0x40 [ 385.780659][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.780689][ C1] ? lock_release+0x4b/0x3e0 [ 385.780714][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 385.780746][ C1] print_report+0xca/0x240 [ 385.780800][ C1] ? do_raw_spin_lock+0x23d/0x290 [ 385.780828][ C1] kasan_report+0x118/0x150 [ 385.780852][ C1] ? do_raw_spin_lock+0x23d/0x290 [ 385.780887][ C1] do_raw_spin_lock+0x23d/0x290 [ 385.780917][ C1] ? __wake_up_common_lock+0x2f/0x1f0 [ 385.780978][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 385.781014][ C1] _raw_spin_lock_irqsave+0xb3/0xf0 [ 385.781044][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 385.781070][ C1] ? kcov_remote_stop+0x78/0x6d0 [ 385.781096][ C1] __wake_up_common_lock+0x2f/0x1f0 [ 385.781132][ C1] __usb_hcd_giveback_urb+0x3b0/0x540 [ 385.781165][ C1] dummy_timer+0x85f/0x44c0 [ 385.781203][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 385.781249][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 385.781273][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 385.781296][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 385.781318][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 385.781344][ C1] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 385.781388][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 385.781412][ C1] ? read_tsc+0x9/0x20 [ 385.781446][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 385.781475][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 385.781503][ C1] handle_softirqs+0x286/0x870 [ 385.781536][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 385.781562][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 385.781592][ C1] __irq_exit_rcu+0xca/0x1f0 [ 385.781613][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 385.781639][ C1] irq_exit_rcu+0x9/0x30 [ 385.781659][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 385.781688][ C1] [ 385.781723][ C1] [ 385.781755][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 385.781810][ C1] RIP: 0010:kasan_byte_accessible+0x18/0x30 [ 385.781835][ C1] Code: 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df 0f b6 04 07 3c 08 <0f> 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 [ 385.781885][ C1] RSP: 0000:ffffc9001b527a88 EFLAGS: 00000293 [ 385.781907][ C1] RAX: 0000000000000000 RBX: ffffffff84728709 RCX: 04cc918cf0b14e00 [ 385.781925][ C1] RDX: 0000000000000000 RSI: ffffffff84728709 RDI: 1ffffffff1be7a5c [ 385.781940][ C1] RBP: ffffffff847286ed R08: 0000000000000000 R09: 0000000000000000 [ 385.781955][ C1] R10: dffffc0000000000 R11: fffffbfff1ef9a8f R12: 0000000000000002 [ 385.781971][ C1] R13: ffffffff8df3d2e0 R14: ffffffff8df3d2e0 R15: 0000000000000000 [ 385.781989][ C1] ? blk_cgroup_congested+0x1d/0x210 [ 385.782045][ C1] ? blk_cgroup_congested+0x39/0x210 [ 385.782081][ C1] ? blk_cgroup_congested+0x39/0x210 [ 385.782118][ C1] ? rcu_is_watching+0x15/0xb0 [ 385.782143][ C1] __kasan_check_byte+0x12/0x40 [ 385.782164][ C1] lock_acquire+0x8d/0x360 [ 385.782191][ C1] ? blk_cgroup_congested+0x1d/0x210 [ 385.782228][ C1] blk_cgroup_congested+0x39/0x210 [ 385.782262][ C1] ? blk_cgroup_congested+0x1d/0x210 [ 385.782296][ C1] __folio_throttle_swaprate+0x67/0x190 [ 385.782338][ C1] folio_prealloc+0x10d/0x180 [ 385.782377][ C1] __handle_mm_fault+0x2a8b/0x5400 [ 385.782437][ C1] ? lock_vma_under_rcu+0x1a3/0x450 [ 385.782470][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 385.782507][ C1] ? lock_vma_under_rcu+0x3d2/0x450 [ 385.782551][ C1] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 385.782587][ C1] handle_mm_fault+0x40a/0x8e0 [ 385.782623][ C1] do_user_addr_fault+0xa7c/0x1380 [ 385.782650][ C1] ? rcu_is_watching+0x15/0xb0 [ 385.782675][ C1] ? trace_page_fault_user+0x84/0x1e0 [ 385.782700][ C1] exc_page_fault+0x82/0x100 [ 385.782730][ C1] asm_exc_page_fault+0x26/0x30 [ 385.782751][ C1] RIP: 0033:0x7f0a3eb46906 [ 385.782806][ C1] Code: 8d 3c 30 4c 89 de 4c 89 54 24 38 e8 94 87 04 00 4c 8b 54 24 38 85 c0 0f 85 57 01 00 00 48 8b 44 24 28 48 89 df 4c 89 54 24 38 <4c> 89 93 98 06 00 00 48 89 83 90 06 00 00 48 8d 83 10 03 00 00 4c [ 385.782826][ C1] RSP: 002b:00007f0a3ef0f9d0 EFLAGS: 00010246 [ 385.782845][ C1] RAX: 00007f0a3fac0000 RBX: 00007f0a3fae06c0 RCX: 00007f0a3eb8f087 [ 385.782862][ C1] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f0a3fae06c0 [ 385.782878][ C1] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 385.782892][ C1] R10: 0000000000021000 R11: 0000000000000206 R12: 00007f0a3ef0fb20 [ 385.782907][ C1] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 385.782933][ C1] [ 385.782941][ C1] [ 386.254898][ C1] Allocated by task 984: [ 386.259150][ C1] kasan_save_track+0x3e/0x80 [ 386.263837][ C1] __kasan_kmalloc+0x93/0xb0 [ 386.268454][ C1] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 386.273830][ C1] xpad_probe+0x428/0x1fc0 [ 386.278338][ C1] usb_probe_interface+0x668/0xc30 [ 386.283449][ C1] really_probe+0x26d/0x9e0 [ 386.287964][ C1] __driver_probe_device+0x18c/0x2f0 [ 386.293253][ C1] driver_probe_device+0x4f/0x430 [ 386.298282][ C1] __device_attach_driver+0x2ce/0x530 [ 386.303757][ C1] bus_for_each_drv+0x251/0x2e0 [ 386.308613][ C1] __device_attach+0x2b8/0x400 [ 386.313571][ C1] bus_probe_device+0x185/0x260 [ 386.318449][ C1] device_add+0x7b6/0xb50 [ 386.322785][ C1] usb_set_configuration+0x1a87/0x20e0 [ 386.328353][ C1] usb_generic_driver_probe+0x8d/0x150 [ 386.333829][ C1] usb_probe_device+0x1c4/0x390 [ 386.338687][ C1] really_probe+0x26d/0x9e0 [ 386.343200][ C1] __driver_probe_device+0x18c/0x2f0 [ 386.348492][ C1] driver_probe_device+0x4f/0x430 [ 386.353531][ C1] __device_attach_driver+0x2ce/0x530 [ 386.359174][ C1] bus_for_each_drv+0x251/0x2e0 [ 386.364033][ C1] __device_attach+0x2b8/0x400 [ 386.368889][ C1] bus_probe_device+0x185/0x260 [ 386.373955][ C1] device_add+0x7b6/0xb50 [ 386.378300][ C1] usb_new_device+0xa39/0x16f0 [ 386.383108][ C1] hub_event+0x2958/0x4a20 [ 386.387558][ C1] process_scheduled_works+0xae1/0x17b0 [ 386.393140][ C1] worker_thread+0x8a0/0xda0 [ 386.397818][ C1] kthread+0x711/0x8a0 [ 386.401902][ C1] ret_from_fork+0x4bc/0x870 [ 386.406529][ C1] ret_from_fork_asm+0x1a/0x30 [ 386.411313][ C1] [ 386.413681][ C1] Freed by task 5935: [ 386.417694][ C1] kasan_save_track+0x3e/0x80 [ 386.422392][ C1] __kasan_save_free_info+0x46/0x50 [ 386.427604][ C1] __kasan_slab_free+0x5c/0x80 [ 386.432384][ C1] kfree+0x19a/0x6d0 [ 386.436284][ C1] xpad_disconnect+0x350/0x480 [ 386.441057][ C1] usb_unbind_interface+0x26e/0x910 [ 386.446281][ C1] device_release_driver_internal+0x4d9/0x800 [ 386.452407][ C1] bus_remove_device+0x34d/0x410 [ 386.457368][ C1] device_del+0x511/0x8e0 [ 386.461704][ C1] usb_disable_device+0x3e9/0x8a0 [ 386.466750][ C1] usb_disconnect+0x330/0x950 [ 386.471432][ C1] hub_event+0x1cf5/0x4a20 [ 386.475870][ C1] process_scheduled_works+0xae1/0x17b0 [ 386.481421][ C1] worker_thread+0x8a0/0xda0 [ 386.486030][ C1] kthread+0x711/0x8a0 [ 386.490101][ C1] ret_from_fork+0x4bc/0x870 [ 386.494689][ C1] ret_from_fork_asm+0x1a/0x30 [ 386.499455][ C1] [ 386.501774][ C1] The buggy address belongs to the object at ffff888023aa8000 [ 386.501774][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 386.515892][ C1] The buggy address is located 92 bytes inside of [ 386.515892][ C1] freed 1024-byte region [ffff888023aa8000, ffff888023aa8400) [ 386.529704][ C1] [ 386.532031][ C1] The buggy address belongs to the physical page: [ 386.538521][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23aa8 [ 386.547374][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 386.555886][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 386.563475][ C1] page_type: f5(slab) [ 386.567531][ C1] raw: 00fff00000000040 ffff88801a026dc0 ffffea0000bbda00 dead000000000002 [ 386.575849][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 386.576132][ C1] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 386.583854][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.590967][ C1] head: 00fff00000000040 ffff88801a026dc0 ffffea0000bbda00 dead000000000002 [ 386.590989][ C1] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 386.614578][ C1] head: 00fff00000000003 ffffea00008eaa01 00000000ffffffff 00000000ffffffff [ 386.623260][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 386.631927][ C1] page dumped because: kasan: bad access detected [ 386.638432][ C1] page_owner tracks the page as allocated [ 386.644161][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1166, tgid 1166 (kworker/u8:6), ts 96696119360, free_ts 96574893610 [ 386.663623][ C1] post_alloc_hook+0x240/0x2a0 [ 386.668418][ C1] get_page_from_freelist+0x2365/0x2440 [ 386.674017][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 386.679824][ C1] alloc_pages_mpol+0x232/0x4a0 [ 386.684683][ C1] allocate_slab+0x96/0x350 [ 386.689298][ C1] ___slab_alloc+0xe94/0x18a0 [ 386.693980][ C1] __slab_alloc+0x65/0x100 [ 386.698397][ C1] __kmalloc_noprof+0x471/0x7f0 [ 386.703256][ C1] ___neigh_create+0x6d5/0x2260 [ 386.708122][ C1] ip6_finish_output2+0x1175/0x1480 [ 386.713344][ C1] ip6_output+0x340/0x550 [ 386.717698][ C1] ndisc_send_skb+0xbce/0x1510 [ 386.722471][ C1] ndisc_send_ns+0xcb/0x150 [ 386.726980][ C1] addrconf_dad_work+0xaae/0x14b0 [ 386.732006][ C1] process_scheduled_works+0xae1/0x17b0 [ 386.737553][ C1] worker_thread+0x8a0/0xda0 [ 386.742141][ C1] page last free pid 5834 tgid 5834 stack trace: [ 386.748462][ C1] __free_frozen_pages+0xbc4/0xd30 [ 386.753585][ C1] __slab_free+0x2e7/0x390 [ 386.758002][ C1] qlist_free_all+0x97/0x140 [ 386.762595][ C1] kasan_quarantine_reduce+0x148/0x160 [ 386.768056][ C1] __kasan_slab_alloc+0x22/0x80 [ 386.772912][ C1] kmem_cache_alloc_noprof+0x367/0x6e0 [ 386.778370][ C1] getname_flags+0xb8/0x540 [ 386.782870][ C1] do_sys_openat2+0xbc/0x1c0 [ 386.787460][ C1] __x64_sys_openat+0x138/0x170 [ 386.792312][ C1] do_syscall_64+0xfa/0xfa0 [ 386.796819][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.802707][ C1] [ 386.805024][ C1] Memory state around the buggy address: [ 386.810657][ C1] ffff888023aa7f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 386.818729][ C1] ffff888023aa7f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 386.826884][ C1] >ffff888023aa8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 386.834952][ C1] ^ [ 386.841888][ C1] ffff888023aa8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 386.849952][ C1] ffff888023aa8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 386.858008][ C1] ================================================================== [ 386.866085][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 386.873278][ C1] CPU: 1 UID: 0 PID: 9783 Comm: syz.1.1032 Not tainted syzkaller #0 PREEMPT(full) [ 386.882555][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 386.892609][ C1] Call Trace: [ 386.895887][ C1] [ 386.898739][ C1] dump_stack_lvl+0x99/0x250 [ 386.903332][ C1] ? __asan_memcpy+0x40/0x70 [ 386.907940][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 386.913144][ C1] ? __pfx__printk+0x10/0x10 [ 386.917735][ C1] vpanic+0x237/0x6d0 [ 386.921718][ C1] ? __pfx_vpanic+0x10/0x10 [ 386.926266][ C1] panic+0xb9/0xc0 [ 386.929988][ C1] ? __pfx_panic+0x10/0x10 [ 386.934416][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 386.940337][ C1] ? do_raw_spin_lock+0x23d/0x290 [ 386.945367][ C1] check_panic_on_warn+0x89/0xb0 [ 386.950319][ C1] ? do_raw_spin_lock+0x23d/0x290 [ 386.955400][ C1] end_report+0x78/0x160 [ 386.959645][ C1] kasan_report+0x129/0x150 [ 386.964149][ C1] ? do_raw_spin_lock+0x23d/0x290 [ 386.969181][ C1] do_raw_spin_lock+0x23d/0x290 [ 386.974066][ C1] ? __wake_up_common_lock+0x2f/0x1f0 [ 386.979443][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 386.984824][ C1] _raw_spin_lock_irqsave+0xb3/0xf0 [ 386.990034][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 386.996010][ C1] ? kcov_remote_stop+0x78/0x6d0 [ 387.000957][ C1] __wake_up_common_lock+0x2f/0x1f0 [ 387.006224][ C1] __usb_hcd_giveback_urb+0x3b0/0x540 [ 387.011608][ C1] dummy_timer+0x85f/0x44c0 [ 387.016138][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 387.021536][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 387.026578][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 387.031523][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 387.036480][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 387.041693][ C1] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 387.047711][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 387.053452][ C1] ? read_tsc+0x9/0x20 [ 387.057543][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 387.063354][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 387.068478][ C1] handle_softirqs+0x286/0x870 [ 387.073258][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 387.078032][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 387.083324][ C1] __irq_exit_rcu+0xca/0x1f0 [ 387.087918][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 387.093119][ C1] irq_exit_rcu+0x9/0x30 [ 387.097360][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 387.102997][ C1] [ 387.105924][ C1] [ 387.108851][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 387.114835][ C1] RIP: 0010:kasan_byte_accessible+0x18/0x30 [ 387.120734][ C1] Code: 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df 0f b6 04 07 3c 08 <0f> 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 [ 387.140368][ C1] RSP: 0000:ffffc9001b527a88 EFLAGS: 00000293 [ 387.146446][ C1] RAX: 0000000000000000 RBX: ffffffff84728709 RCX: 04cc918cf0b14e00 [ 387.154427][ C1] RDX: 0000000000000000 RSI: ffffffff84728709 RDI: 1ffffffff1be7a5c [ 387.162409][ C1] RBP: ffffffff847286ed R08: 0000000000000000 R09: 0000000000000000 [ 387.170386][ C1] R10: dffffc0000000000 R11: fffffbfff1ef9a8f R12: 0000000000000002 [ 387.178373][ C1] R13: ffffffff8df3d2e0 R14: ffffffff8df3d2e0 R15: 0000000000000000 [ 387.186364][ C1] ? blk_cgroup_congested+0x1d/0x210 [ 387.191722][ C1] ? blk_cgroup_congested+0x39/0x210 [ 387.197038][ C1] ? blk_cgroup_congested+0x39/0x210 [ 387.202382][ C1] ? rcu_is_watching+0x15/0xb0 [ 387.207181][ C1] __kasan_check_byte+0x12/0x40 [ 387.212050][ C1] lock_acquire+0x8d/0x360 [ 387.216474][ C1] ? blk_cgroup_congested+0x1d/0x210 [ 387.221796][ C1] blk_cgroup_congested+0x39/0x210 [ 387.226920][ C1] ? blk_cgroup_congested+0x1d/0x210 [ 387.232224][ C1] __folio_throttle_swaprate+0x67/0x190 [ 387.237787][ C1] folio_prealloc+0x10d/0x180 [ 387.242473][ C1] __handle_mm_fault+0x2a8b/0x5400 [ 387.247597][ C1] ? lock_vma_under_rcu+0x1a3/0x450 [ 387.252799][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 387.258295][ C1] ? lock_vma_under_rcu+0x3d2/0x450 [ 387.263544][ C1] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 387.269116][ C1] handle_mm_fault+0x40a/0x8e0 [ 387.274008][ C1] do_user_addr_fault+0xa7c/0x1380 [ 387.279579][ C1] ? rcu_is_watching+0x15/0xb0 [ 387.284349][ C1] ? trace_page_fault_user+0x84/0x1e0 [ 387.289740][ C1] exc_page_fault+0x82/0x100 [ 387.294345][ C1] asm_exc_page_fault+0x26/0x30 [ 387.299201][ C1] RIP: 0033:0x7f0a3eb46906 [ 387.303618][ C1] Code: 8d 3c 30 4c 89 de 4c 89 54 24 38 e8 94 87 04 00 4c 8b 54 24 38 85 c0 0f 85 57 01 00 00 48 8b 44 24 28 48 89 df 4c 89 54 24 38 <4c> 89 93 98 06 00 00 48 89 83 90 06 00 00 48 8d 83 10 03 00 00 4c [ 387.323241][ C1] RSP: 002b:00007f0a3ef0f9d0 EFLAGS: 00010246 [ 387.329317][ C1] RAX: 00007f0a3fac0000 RBX: 00007f0a3fae06c0 RCX: 00007f0a3eb8f087 [ 387.337291][ C1] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f0a3fae06c0 [ 387.345268][ C1] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 387.353244][ C1] R10: 0000000000021000 R11: 0000000000000206 R12: 00007f0a3ef0fb20 [ 387.361225][ C1] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 387.369409][ C1] [ 387.373071][ C1] Kernel Offset: disabled [ 387.377427][ C1] Rebooting in 86400 seconds..