last executing test programs: 12.486419333s ago: executing program 0 (id=436): r0 = syz_io_uring_setup(0x618c, &(0x7f0000000780)={0x0, 0xbdd6, 0x4000, 0x2, 0x27c}, &(0x7f0000000300)=0x0, &(0x7f0000000740)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) prlimit64(0x0, 0xa, &(0x7f0000000180)={0x8, 0x3}, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x3, 0x0) r2 = getpid() setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setscheduler(r2, 0x6, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, r0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x7, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000940)=[{{&(0x7f0000000440)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000680)=[{&(0x7f00000006c0)="0b6e17b2d3c423899f8a2b704298c9218e20116d21af485b4bc68b32fa2504593668ede65a61e7936e8c1ba83d49c708c08d18fd48e4fb304a73d8a0de676e34e850f4589a07e1ff58aa4592c39847438182ff4acfba1cbaff5dcbe097bb699b5487a1432d6be361d70fec8325e78cf383325fe61301cf00125a", 0x7a}, {&(0x7f00000004c0)="8338eb66d8491feadb142bdb46c91b8a25cac15e015dc2b2ace6d6b2d8aa35e654adcabc17d59dd2d9b886f05b2680838ea9aef319d470e89b5667cc5f4a6fcc459f2b3272b065e5d483b06a1e40af973f61dc91b4963c0fd6104d6f760fd93103e0526e11da005719972f66e16caf0d994c7771ae8ad5aab467cc6b909d8d400144fb6c10c8a8ea3f11a1770296eac15e6179bd153fc679", 0x98}, {&(0x7f0000000580)="6bddd2a5662286168f94d025d3af2e29b516e037ed6c36897b4a2e26f5584ef73690728050ecd93bd89e3a17304081f9afac63ffee94314bf62635c4f94993c07a9fafe164e1489eb2bc87a81b89d577ae3418b2253ae4d927f93cb5963bdaa2c2aa02b4618064d59a65df70afc3e9c6f86981904180f2adf2da55ecf52166cca41f833d58a36aa3e73a83199a05ead75d3cd044a22a57684d94c8437f31df5d67e5bda0d93d2b108a7a0dddb0a4e727810e70c3558de9629272e8ead54689f4ea18d0a56c29fe110615c67b39608a25cb3f8916c92922", 0xd7}], 0x3, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c}}], 0x40, 0x20000000}}], 0x1, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) (async) r6 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f00000003c0)=0x2603, 0x4) (async) sendmsg$can_bcm(r6, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={0x0}, 0x8}, 0x0) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs2/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) dup3(r8, r7, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) 11.514547429s ago: executing program 2 (id=442): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x2, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x40000, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x80}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x1000005, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0x11}, {0xffe6, 0xb}, {0x0, 0xc}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x2, 0x4, 0x10001, 0x0, 0x3ff, 0x10fb}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2402c8e1}, 0x4000000) 11.433326906s ago: executing program 0 (id=443): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x5, 0x0, 0x200000b49, 0x9, 0xa, 0x0, 0x400003}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x141a00, 0x0) close_range(r2, r0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x21a3c4) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(r3, r4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r6 = socket(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000003000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) write$apparmor_exec(r5, &(0x7f00000000c0)=ANY=[], 0x149) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f00000008c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x700, 0x20}}) socket(0x22, 0x80000, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) link(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket(0x2, 0x80805, 0x0) recvmmsg$unix(r2, &(0x7f0000000780)=[{{&(0x7f0000000400), 0x6e, &(0x7f0000002d40)=[{&(0x7f0000002e00)=""/180, 0xb4}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000580)=""/201, 0xc9}, {&(0x7f0000000680)=""/192, 0xc0}, {&(0x7f00000000c0)=""/24, 0x18}, {&(0x7f0000001a40)=""/226, 0xe2}, {&(0x7f0000000280)=""/10, 0xa}, {&(0x7f0000001b40)=""/251, 0xfb}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/235, 0xeb}], 0xa, &(0x7f0000000940)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0xf8}}], 0x1, 0x2, &(0x7f0000000800)={0x77359400}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 10.526096356s ago: executing program 2 (id=445): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000000)=[@uexit={0x0, 0x18, 0xea}, @in_dx={0x82, 0x20, {0x7b75, 0x4}}, @wr_drn={0x6e, 0x20, {0x6, 0xef}}, @wrmsr={0x1e, 0x20, {0x979, 0xffffffff}}, @wr_drn={0x6e, 0x20, {0x5, 0x3}}, @wr_drn={0x6e, 0x20, {0x3, 0xb}}, @rdmsr={0x32, 0x18, {0xa09}}, @wr_crn={0x46, 0x20, {0x2, 0x5}}, @wr_crn={0x46, 0x20, {0x2}}, @wr_drn={0x6e, 0x20, {0x3, 0x6}}, @out_dx={0xaa, 0x28, {0x994, 0x0, 0x7}}, @rdmsr={0x32, 0x18, {0xb41}}, @rdmsr={0x32, 0x18, {0xafc}}, @wr_crn={0x46, 0x20, {0x4, 0x8}}], 0x1a8}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000000200)={0xeeef0000, 0xd000, 0x9, 0x9, 0x7}) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000240)="15820e85a6dfebf026f7193dcfeee474bfd3ed1a464d77c0011a7b6db58185c952854d15adc5acfdd81bb08c46cd16853fcb6a13d2298f77884287f442d82de0313305ec5c59d4ac93c947c595d059d3fbe31c757a0ea70099d2db", 0x5b) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f00000002c0)={0x2, {{0xa, 0x4e22, 0x80000000, @empty, 0xbee}}, {{0xa, 0x4e23, 0x3, @local, 0x3}}}, 0x108) unlinkat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x200) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000440)={0xcc, 0x0, 0x1}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000580)='\x00', 0x1) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0xa) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0xb0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r3) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x59}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x6f}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4006) sendmsg$inet6(r3, &(0x7f0000000e00)={&(0x7f0000000740)={0xa, 0x4e21, 0xb8, @local, 0x7}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000780)="75569c6865131ce8f9ff1dc643808bf96a20a45f333352d94b6952acdcb9d8ce8adcab0c61dd8e95d9a55b43fc4d92a02b33e6ece4523439d03900e10f78a5d78f8416c6c44be63bf6dbb8509bd673", 0x4f}, {&(0x7f0000000800)="6df0b6b5a9fe6e003c5e3cf71807c8cad587e923c675c6c121ad6a25b24b9e913334f694cdde577d93a2a7eb43ffe8cc7d5be85dd963328e8d7e5b18ed279ebdf8a2a1b7aa5414cc54dc3bd53a637e8c7296ce19cdcb34a570f8dc612bca8cc26371d05c28e966ebe4d459a00f135cf86d53901e6b7983d678a4462a1b64b3edf0c83c3a525141005c8fbdf0db5b0d929f5988f29733de7d87445c109f1c161616e3a3c75bf06e22673a32616706ec", 0xaf}, {&(0x7f00000008c0)="ec9ab6091fbd5d2b729ada211baa16084370162ecfe06024037e046fe072cdc40318a7f87beb33117a4792bd3d", 0x2d}, {&(0x7f0000000900)="609716e1e99d78b5639ae09ef177ee82e91b6a756a42003b92b4b443ac0e6d2478ad118ae9087d57ab3c2d5d8df1af907dbc5f1a33f466a899fd69a94dd4118197f0602a609c37c2f4556b65094bfc968337665bf163d88d6837e74dec782b81eb5554b2f7f0dbb990865945950c3af401541a51a0f26e3c8e179f200ca64e2bb61bd6a6826bb7178fb79930186abf01451bb18558a9b745305c9389c23d14a36d684164da6ffaa79ff410d636b58a10809330621ae504", 0xb7}, {&(0x7f00000009c0)="e3b430e56178e15b11bb9551b4098536766a664a188427186e73e72734bad285bb44f8d2aab6139ccb0734af57c29ad975ac6256a083440e724b1f4bca2771e603548846b8e72f55c6f27ad3ebeaddeacadf8c5b609aba7d09552cae55ca7469eededd5c16de22dc8b0fc1903a327d3a04299a4877d33794950b8907cec1d73636987e3250e3c4cf95ab8486a1426172cbf485f9e0725f268539cfbbdf330f86f59699f038e1e8b7703795f244e7060d0e76d2023ef0ccd1914a8daf417790045225f502fcf1a9aa538851dd51ab34a71f68ebe12e374f7c919c67a319213c420338c24b9fb69613fa0803ec4c5f31745c7b55", 0xf3}, {&(0x7f0000000ac0)="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", 0xfc}, {&(0x7f0000000bc0)="23edfc6feb6bdb79b49618c248f481c0845255f8c364ce217fdc19d2b1bace225980e27c89379dab5057d4fb63098fcf314c6854a9b0181cd94803e1196deccb010492d5597f16112debee6b5b56510993a316e2f0bed854f392fd8c74de24649e70eef87a9950db7a7bfb0172f649a1819cea811ef7240b9d7e72e76d2b0f28661bd089569fac4ebc0ce72068ae59ae9d9f44e01b5b24e156864104be75743595c9b599e1afb6119db942312e5dc43326a9c25e42e481a2740654d4bc64a7c56bbe13cc341d2c12e5acbdcf0243236695fe8862ee6bb4c8aa11a0e4ec03fc135d", 0xe1}], 0x7, &(0x7f0000000d40)=[@hopopts_2292={{0x30, 0x29, 0x36, {0x33, 0x2, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x3e}}]}}}, @rthdrdstopts={{0x58, 0x29, 0x37, {0x89, 0x7, '\x00', [@padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x38, {0x0, 0xc, 0x79, 0x4, [0x1, 0x1, 0xffff, 0x6, 0x2b, 0x1]}}]}}}], 0x88}, 0x20000000) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000001, 0x1010, r2, 0xa83db000) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x30, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x6b7134df, @bearer=@l2={'ib', 0x3a, 'pim6reg\x00'}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x811) r6 = syz_open_dev$vcsu(&(0x7f0000000f40), 0x0, 0x145040) write$binfmt_elf32(r6, &(0x7f0000000f80)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0xe, 0x8, 0x7, 0xfffffffffffffffc, 0x3, 0x6, 0x7ff, 0x39c, 0x38, 0x118, 0xf, 0x247d, 0x20, 0x3, 0x800, 0x9, 0xfffe}, [{0x6474e551, 0x0, 0xffff5c79, 0x7fffffff, 0x9, 0x2, 0xf, 0x2}, {0x6474e551, 0x2, 0xff, 0x2, 0xb, 0xf, 0x4, 0x7bbb}, {0x3, 0xe4e, 0x6, 0xffffffff, 0x3, 0x5, 0xfffffffb, 0xa5000000}], "9afda751971da356cb983949c27533c1e124a403353804b926eb6d4961f87ea1f86e525ef24f9b4710d97a61da8809c6f80a832bf116c2", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5cf) r7 = openat$incfs(0xffffffffffffff9c, &(0x7f0000001580)='.pending_reads\x00', 0x24040, 0x1) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000001600), r3) sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x14, r8, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000004) r9 = syz_open_dev$sndpcmp(&(0x7f0000001700), 0x0, 0x731101) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r9, 0xc0984124, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) openat$tun(0xffffffffffffff9c, &(0x7f0000001800), 0x48220, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) fcntl$setsig(r4, 0xa, 0x26) 8.906385513s ago: executing program 1 (id=449): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) dup(r0) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (rerun: 64) r1 = syz_open_dev$radio(&(0x7f0000000580), 0x3, 0x2) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000004a257f6d8cf5de74701516ee5693bdebc036950b1d648eaee154216ec350464756ed27ae1bad6e3648a8c3cfa0d1c8ecb8141a83523a192eb5a82170393983cea9f84a4471d75c1fbf5aba5cc02db5a0cb5d2bace4", @ANYRES16, @ANYBLOB="010025bd7000fddbdf25050000000c000180080001", @ANYRES32=r4, @ANYBLOB="14000380040004000400050008000200000000000800050010270800"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r5) (async) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) (async, rerun: 64) syz_io_uring_setup(0x17093, &(0x7f0000000600)={0x0, 0x1a14, 0x4, 0x3, 0x3}, &(0x7f0000000200)=0x0, &(0x7f0000000340)=0x0) (async, rerun: 64) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r8, &(0x7f00000003c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r8, &(0x7f0000000080), 0x4) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x18, 0x0, @fd=r5, 0x9, &(0x7f0000000180), 0x0, 0x1, 0x1}) (async) syz_io_uring_setup(0x4850, &(0x7f0000000880)={0x0, 0x0, 0x80}, 0x0, 0x0) (async, rerun: 64) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) preadv(r9, &(0x7f0000000380)=[{&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000500)=""/240, 0xf0}, {&(0x7f0000000100)}, {&(0x7f0000000300)=""/55, 0x37}], 0x4, 0x4, 0x1) (async) r10 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async, rerun: 64) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) bind$tipc(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1500000885f59071e4d400784d036f71e4ff179478d9867e57cc98539600000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) (async, rerun: 64) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r10, 0x80045104, &(0x7f00000002c0)) (rerun: 64) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f910, 0x8000, '\x00', @p_u8=&(0x7f0000000080)}}) 8.868931196s ago: executing program 0 (id=450): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv2(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x867, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) r3 = socket(0xa, 0x2, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x3) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x2b9, &(0x7f0000000740)={0x0, 0xb1e9, 0x10100, 0x0, 0x0, 0x0, r0}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r7, 0x227b, &(0x7f00000000c0)=0x1) readv(r7, &(0x7f0000000240)=[{&(0x7f0000000100)=""/48, 0x30}], 0x1) syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x400, 0x14, 0x800e2}, &(0x7f0000000000)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 8.784826646s ago: executing program 1 (id=451): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x21c0, 0xc) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103302) r2 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x0, 0x1, 0x7}) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), &(0x7f0000000280)=0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWCHAIN={0xd4, 0x3, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffff8}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x40}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x704dd6aa}, @NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5d84b63c}, @NFTA_HOOK_DEV={0x14, 0x3, 'caif0\x00'}]}]}], {0x14, 0x10}}, 0x158}}, 0x8084) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r6, 0x0, &(0x7f0000001c80)={0x84, &(0x7f0000001840)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020400) sendmsg$NFT_BATCH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000058d0c30000000000000100000008000b4000000000300004802c0001800b000100736f63eb657400001c0002800800014000000003080002400000000b08000300000000230900010073797a3000000000140000001100010000000000000000000000000a00000000000000"], 0xcc}}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000700)={0x0, 0x14, 0xd3, "c4210fd4881a3f98736bfa105ea5a91a1068f8ab79fd29c437715185e09e3152c22c9e50012a94431041957bd7bd8319befb9868189e59639c624f0e4e31660048079f3955e7b12ae772d38076da440dc433e16b6566135b9808d854ad4305046d34d9b641e1970889f15520db983bbab497a5b9dd37cf51a472d3710994b5bab8d0149157faeaf898dc596a4a568e64754cd3cd395755eec0d6251610c58a012f890c6adf4a2b2ef31b860f8094fcd9fc3035bc42029f2b1ccabd51566ca420f7692ace47158cd5ede23497f860fcb0fc50ce"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0xab}, &(0x7f0000000580)={0xc0, 0x5, 0x4, "700e3bb3"}, &(0x7f0000000640)={0x40, 0x5, 0x2, "138b"}}) write$tun(r5, &(0x7f0000000400)={@val={0x1c, 0x800}, @val={0x1, 0x3, 0x0, 0x14, 0x14, 0x1}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x0, 0x84, 0x0, @rand_addr=0x640100fd, @local}, {{0x200, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x40, 0x1, 0x0, 0x1c, {[@mptcp=@generic={0xa3, 0x9, "0fe0e8cb896776"}]}}}}}}, 0x42) socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r4, &(0x7f0000000840)=[{{&(0x7f0000000a00)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x80, 0x0, 0x0, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x80}}], 0x18}}], 0x1, 0xc5) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x6, 0x0, @scatter={0x18, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xcc}, {0x0}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = fanotify_init(0x200, 0x0) fanotify_mark(r9, 0x201, 0x4800003e, r0, 0x0) unlink(&(0x7f00000000c0)='./file0\x00') r10 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000003000/0x1000)=nil, 0x101f, 0x0, 0x11, r10, 0x82000000) r11 = socket$xdp(0x2c, 0x3, 0x0) bind(r11, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r11, {0x2, 0x4e21, @broadcast}, 0x4, 0x3, 0x0, 0x4}}, 0x80) 8.612719708s ago: executing program 2 (id=453): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = epoll_create(0x80) r3 = syz_io_uring_setup(0x239, &(0x7f0000001080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x1a38, 0x0, 0x0, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r6, &(0x7f0000000080)) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x400c895}, 0x20000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) recvmmsg(r7, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000002, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0xf}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xa}}]}, 0x1c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000000c0)=0x40) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="1400000052001000"/20], 0x14}, 0x1, 0x0, 0x0, 0x40085}, 0x4054) 8.234592352s ago: executing program 2 (id=455): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)=0xfc) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x8031, 0xffffffffffffffff, 0x6a855000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000000000010000000a000000090002008d001f106f194eb3050001"], 0x30}}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000550000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b7030000000000008500000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) chown(0x0, 0xee00, 0x0) 7.906441797s ago: executing program 0 (id=456): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b"], 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x101001a, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0, @ANYBLOB=',allow_othe'], 0xfb, 0x0, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f00000000c0)="ff02040000ffffffffecffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x6e23, 0xfffffdff, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001840), 0x3b, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket$inet(0x2, 0x3, 0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0xfffffffc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r9, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0) 6.26648705s ago: executing program 1 (id=461): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @empty}, {0x20000010304, @broadcast}, 0xc, {0x2, 0x4e20, @rand_addr=0x64010101}}) (async, rerun: 32) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) (rerun: 32) r1 = syz_usb_connect$uac1(0x0, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206"], 0x0) syz_usb_control_io(r1, &(0x7f0000001bc0)={0x2c, 0x0, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000001140)=""/4151, 0x1037}], 0x1, 0x8b3, 0x1) (async) syz_usb_control_io(r1, &(0x7f0000000680)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) 5.568552417s ago: executing program 4 (id=463): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x200000, 0x0) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) getresuid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bind$packet(r3, &(0x7f0000000640)={0x11, 0x3, r4, 0x1, 0x1, 0x6, @remote}, 0x14) read$FUSE(r6, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r8, r9, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x460, &(0x7f0000000380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0x400}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@uid_lt={'uid<', r8}}, {@pcr={'pcr', 0x3d, 0x2a}}]}}, 0x1, 0x0, &(0x7f0000000240)="646c1dc0677531f5009a9aec9319ec4e762461a854cb902ac1938aabc8f2b03c3d8fc90338f05efe0c6a28cbabc8690c240b2a5947f07308e4c1767b2936f132f9ff204345efba4f746199255b60176116bf90e6a8b0c95c64a15df52f7fbd") r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, 0x1, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) 5.308916836s ago: executing program 4 (id=465): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000), 0x0) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) lseek(0xffffffffffffffff, 0x80000000, 0x4) r4 = syz_io_uring_setup(0x88f, &(0x7f00000010c0)={0x0, 0xc941, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) r8 = fcntl$getown(r2, 0x9) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000540)={{{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000640)=0xe8) (async) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f00000007c0)={{{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000680)=0xe8) stat(&(0x7f00000006c0)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000940)={'\x00', 0x3872, 0xf77, 0x3, 0x100000001, 0x3, 0xffffffffffffffff}) (async) getgroups(0x5, &(0x7f00000009c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xee00, 0xee01]) sendmmsg$unix(r2, &(0x7f0000000a80)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000300)="aac3db11797313d84f87a22375209723f89954898e9e983159832a2912fe58dce37b8bb6cabe8fb6c3ecac47a65b63f9594ded05d6ff8b6b87f1c5c6e1754021334efcd6a76af6e1aa53aa76ef715624eaeb3ddfbc4a9539c0219ffa8d5c41c2d950c90d24607a55b9a6be8c6a79b51f7659a86de188cd0248991293bfd7225abb68075e8310eb6ac7577740b9b4748b9b8bc6f003b70c7dbdfc631c4dfec869cf67fe34cc8f1d0b16a7be0eb5d63bfc0717a7701fe417a0a39d24b0472098303e4bc3ace93faaa408bc2dd7c63b824a9868a38c", 0xd4}, {&(0x7f00000001c0)="f8ad033eff5fd2fe234edc60447bf977340f255bae73b5ae53a56843341b063a9191298edee617ba716ec35b2e02b9a28e3bf691984e1b5f52f07ee5918b07fd43d5a7ac4c5e478369ab692f0e87f9fc4d63a6ba99a8b16779969465e6accac38cb21f28131d7a76959dc081b7617e3d2a1cbc017ec550ec386f7c8111f79944fb6ce666a11bde39d08cde1749b7403ffbb7736b0fff5d52380facf2f8f64658958bd060eb2b99bf8e2fd941e93924", 0xaf}, {&(0x7f0000000400)="1777b229bbc491f3d0c087ef253521def33555abf4dd663a27f651c3d705d72557330fab2377815fb95974d12f9df9b1630bd28a73011c1c2764950c", 0x3c}, {&(0x7f0000000440)="08d4cdb1705a25e31d8592d25b46b43f2952c58e8c3cfd32b8830840e228a3b95791632ed3841bca5032e3770e00687e75eed0469861980a92e84d58e65d7288c2efb8c7a31c6f8cb33d29d434aa35d420b7cd39f7ff6e390b5840b7be7f250ac3d42b4c1b288adb4b6fccaeb2b36ff87e5eb763449f9bc096fd32d66eabe58a9eccd63cb04754688bb7189ee0b032", 0x8f}], 0x4, &(0x7f0000000a00)=[@cred={{0x1c, 0x1, 0x2, {r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @cred={{0x1c, 0x1, 0x2, {r13, 0xffffffffffffffff, r14}}}], 0x60, 0x8000}}], 0x1, 0x4000851) sendmmsg$inet(r7, 0x0, 0x0, 0xf00) (async) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/73, 0x49}, 0x0, 0x2, 0x1, {0x1}}) io_uring_enter(r4, 0x47f6, 0x0, 0x4, 0x0, 0x0) 5.247158455s ago: executing program 3 (id=466): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, &(0x7f0000000140)) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000980)={0x1, 0x80000000}, 0x8) bind$inet(r7, &(0x7f0000000700)={0x2, 0x0, @multicast2}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000240)={@remote, @remote, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r6}) 4.538543878s ago: executing program 0 (id=467): pipe(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="4011270000002378589f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) userfaultfd(0x801) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000005, 0x6031, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000240)={0x2}) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r7, 0x1000006) fcntl$addseals(r7, 0x409, 0x7) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0x0, 0x0, 0x1000000}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) 4.442812226s ago: executing program 2 (id=468): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair(0x15, 0x800, 0x5, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r3, 0x80000) r5 = fanotify_init(0x200, 0x40000) fanotify_mark(r5, 0x1, 0x8000018, r3, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r6 = syz_open_dev$loop(&(0x7f0000000140), 0x4048000000000000, 0x10f282) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000000)={r6, 0x1, {0x0, 0x0, 0x0, 0x8001, 0x1, 0x0, 0x12, 0x5, 0x15, "de0c2dea1061a1db869ed552804127f9ba6226d3e30e89d8d3d3f2889bc1248c7210eb14d2e4d7e5d7f957fdcdb8a7cd2a8d24cee5c0043b1eae0b181d2a9c65", "f25c6bf857339c73a535b0ab568c7f7e15003cda37db33c12515eba545bbdb3217940e8e827a2a04871b510a7592b2906064586f333178a7fd36d37943a574aa", "8b5a9a0103626ecc385bf85f5411ea95b333f029fcf13b31caa8e8056f00e590", [0x2, 0xad]}}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="81100c00fcffffff180000000100000000da005c2d929d7a48e8ffea0df93d0000000000f27d66706a3d77180ab5ab7d7b8f9c77133397b43d9c6f53f6b545a268096a2269afe69a0fbda70e5ce9a18e824b84e88f00317f0592501cae11f5022f5de22b0f53ad4fb027ff7f3ea84b83570fb6f6d3e8b9d5fbdd3aab49fb8ed4fe8a1db197e0cc22927f1af29adfb811fe224ae86eab5a4e526b04fafbc746d5b5"], &(0x7f00000000c0)='GPL\x00', 0x7}, 0x94) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r11, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r10, &(0x7f0000000180)="282fa8c2", 0x4, 0x5}]) sendfile(r7, r8, 0x0, 0x20000023896) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 3.67939108s ago: executing program 1 (id=469): r0 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r0, 0x2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x40, 0x7, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x8000, 0x8, 0x2, 0x7}}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_AIE_ON(r1, 0x7001) ioctl$RTC_AIE_OFF(r1, 0x7002) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x11, &(0x7f0000000000)=0x7f, 0x4) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {0xffffffffffffffff, r4, 0x2}}, 0x18) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r5, 0xc0945662, &(0x7f00000003c0)={0x8000001, 0x0, '\x00', {0x0, @bt={0x9, 0x10001ff, 0x4, 0x3, 0x8000000000000001, 0x1, 0x8, 0x6000005, 0x8, 0x8, 0x1, 0x9, 0x1, 0x7c, 0x10, 0x1d, {0x7, 0xd}, 0x1, 0x9}}}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r7, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x104}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001f40)=""/186, 0xba}, {&(0x7f00000006c0)=""/44, 0x2c}, {0x0}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f0000000500)=""/240, 0xf0}, {&(0x7f0000000740)=""/251, 0xfb}], 0x6}, 0x7ffffffd}], 0x4, 0x4022, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000003200)={'ip6_vti0\x00', &(0x7f0000003180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x6}, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x40, 0x0, 0x0, 0x80000001}, {0x6}]}, 0x10) socket$netlink(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) connect$packet(r9, &(0x7f0000000240)={0x11, 0x5, 0x0, 0x1, 0x4, 0x6, @broadcast}, 0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 3.446439319s ago: executing program 4 (id=470): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x8f) move_mount(r2, 0x0, r1, 0x0, 0x46) connect$unix(r1, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket(0x2a, 0x2, 0x13) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="040028bd7000fcdbdf251c00000008000300", @ANYRES32=0x0, @ANYBLOB="9db0e4861fbdab1de9dec06a7897dff7e1945dab28f526f6f5b9d45e33b9825353178156d630f851aa0fb95159c405dcd52edc635a8c46fbed2488fb1ca2f4522592d08dff04499e4238b19b200d956fb53a1036acddd43f090845401c586589a5677868726237c79ec64ef0695c675a40ab7854cb43e5a2c89f8f48969b73a849"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x480c0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) r8 = fanotify_init(0x200, 0x0) write$fb(0xffffffffffffffff, &(0x7f00000004c0)="d9660029542be60a8ac5ebe4e3a47a3e48b4c4ee91d35fc6493e417a", 0x1c) fanotify_mark(r8, 0x1, 0x40000008, r7, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) tee(r9, r11, 0x4e, 0x0) write$binfmt_script(r10, &(0x7f0000000800)={'#! ', './file0'}, 0xb) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) futex(&(0x7f00000003c0)=0x1, 0x0, 0x0, &(0x7f0000000440)={r12, r13+60000000}, &(0x7f0000000480)=0x1, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) close(0x4) socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="24000000190000022bf2000049050002000008000f000200"/36], 0x24}}, 0x4000080) 3.23724769s ago: executing program 3 (id=471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x11, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x12}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) 3.021912637s ago: executing program 3 (id=472): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @empty, 0x80040}, 0x1c) memfd_secret(0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60000000020601020000000000000000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000040008001240fffffffa11000300686173683a6e65742c6e657400000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001740)=""/4096, 0x1000}], 0x1}, 0x8}], 0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x10, 0x803, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xfffffffffffffff1, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) (async) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @empty, 0x80040}, 0x1c) (async) memfd_secret(0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60000000020601020000000000000000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000040008001240fffffffa11000300686173683a6e65742c6e657400000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async) syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) recvmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001740)=""/4096, 0x1000}], 0x1}, 0x8}], 0x2, 0x2, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) socket(0x10, 0x803, 0x0) (async) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xfffffffffffffff1, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) (async) 2.582476888s ago: executing program 1 (id=473): rseq(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x2, "1c13ebdaf2f20d55806ba058e8edb1439bfcc1000000efffffffffffffff00", 0x59555956}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'lo\x00', &(0x7f0000000180)=@ethtool_ts_info}) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0xa, 0x1, 0x3, 0x1000}}}, 0x9) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 2.518228069s ago: executing program 4 (id=474): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newlink={0x98, 0x10, 0x403, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x647e4, 0x64da0}, [@IFLA_LINKINFO={0x70, 0x12, 0x0, 0x1, @vti={{0x8}, {0x64, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x4}, @IFLA_VTI_LINK={0x8, 0x1, r4}, @IFLA_VTI_IKEY={0x8, 0x2, 0x7}, @IFLA_VTI_LINK={0x8, 0x1, r4}, @IFLA_VTI_FWMARK={0x8}, @IFLA_VTI_OKEY={0x8, 0x3, 0x1}], @IFLA_VTI_REMOTE={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x3}, @IFLA_VTI_OKEY={0x8, 0x3, 0x7fff}, @IFLA_VTI_LINK={0x8, 0x1, r4}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x80000001}]]}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x9}]}, 0x98}, 0x1, 0xba01}, 0x0) 1.83209846s ago: executing program 1 (id=475): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000f00)=ANY=[@ANYBLOB="1201500200000020ac055202400001020301090224000101b580f70904000901030102070921ff07020122e4f308058103bf03d00804"], &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0}) 1.734610905s ago: executing program 3 (id=476): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x9, 0x2) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f00000002c0)={0xbe, 0x0, 0x1}) socket$nl_route(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000980)={0x3, 0x4, 0x6, 0x800}) write$vhost_msg_v2(r1, &(0x7f0000000100)={0x2, 0x0, {&(0x7f0000000040)=""/15, 0xf, &(0x7f0000000080)=""/69, 0x3, 0x2}}, 0x48) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x65, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @dest_unreach={0x3, 0x2e350c5e64209fb5, 0x0, 0x0, 0x5, 0x9143, {0x5, 0x4, 0x3, 0x32, 0x9, 0x66, 0x7, 0x7f, 0x1, 0x4, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) write$tun(r0, &(0x7f0000000340)={@val={0x6f01, 0x806}, @val={0x0, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@udp={{0x11, 0x4, 0x1, 0xc, 0xa8, 0x64, 0x0, 0x1, 0x11, 0x0, @private=0xa010100, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x24, 0x7d, 0x1, 0x7, [{@empty, 0x100}, {@multicast1, 0x2}, {@remote, 0x2}, {@broadcast, 0x2}]}, @timestamp={0x44, 0x4, 0x92, 0x0, 0xa}, @generic={0x89, 0x4, "91a7"}, @end, @noop]}}, {0x4e20, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x2, "fa65708c1081dceab845a618f9109a11f95d6bf12b9d8aabbd6115908a7093b6", "3edaa1729ce1ad645472f41503f37ae9", {"54c4f51b2f565ac074a4a45bf3d0286b", "0a74a5bba92b28e5e27c30b041e59cd7"}}}}}}, 0xb6) 1.665480708s ago: executing program 4 (id=477): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, r1, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2a, 0x1}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010102}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x3}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3ff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x59}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) close(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d40)={&(0x7f0000000240)={0xaec, r3, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0xab4, 0x8, 0x0, 0x1, [{0x170, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "88028d12af76c59226fcffb4c0e5f51b2dba74e0793172a0994ac59cb9501930"}, @WGPEER_A_ALLOWEDIPS={0x138, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x10}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}, {0x340, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xd}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a8d32810daf4231053e68a81e1f9545f29b3e92b48309310ea31695b0545eb0f"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "494fc893d342440ceb0fc66637582e74599ffc70f7a626f6022380eaa85ed4d9"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @remote, 0x2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}}, @WGPEER_A_ALLOWEDIPS={0x280, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc4}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @empty}}]}, {0x1d8, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "efa9b47920dad53f2fee4ad06c7ba8ee3af6fd209df7065228915dfec0afdd3f"}, @WGPEER_A_ALLOWEDIPS={0x1b0, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}]}]}, {0x410, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "df01689b33932d1d87bb7cf04cbdfe32cbc5956971c0d2c32bc9ad2829156392"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ALLOWEDIPS={0x3a8, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x4}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x20}}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x41}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}]}]}]}, 0xaec}, 0x1, 0x0, 0x0, 0x840}, 0x0) r4 = socket(0x28, 0x1, 0x9) ioctl$CEC_G_MODE(0xffffffffffffffff, 0x80046108, &(0x7f0000000dc0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={0xffffffffffffffff, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9b, &(0x7f0000000f00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000f40), &(0x7f0000000f80), 0x8, 0xcc, 0x8, 0x8, &(0x7f0000000fc0)}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8200000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)=@getchain={0x44, 0x66, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x8, 0xd}, {0x1, 0xc}, {0xfff1, 0xb}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x200}, {0x8, 0xb, 0x1}]}, 0x44}}, 0x4044811) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000001240)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast1, 0x4e24, 0x3, 0x4e21, 0x3, 0x2, 0x80, 0xa0, 0x32, 0x0, 0xffffffffffffffff}, {0x2, 0x6, 0x0, 0x1, 0x57e, 0x4, 0x4c}, {0xa210, 0x1, 0xaa5, 0xffffffffffffd913}, 0x5, 0x6e6bb8, 0x1, 0x1, 0x1, 0x2}, {{@in=@multicast1, 0x4d4, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x3500, 0x2, 0x2, 0x3, 0x4, 0x4, 0x7}}, 0xe8) fcntl$setlease(r0, 0x400, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0xe0, 0x16, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x74, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x800}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'batadv0\x00'}]}]}]}, @NFT_MSG_DELSETELEM={0xc4, 0xe, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x80, 0x3, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6d}, @NFTA_SET_ELEM_DATA={0x6c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x34, 0x1, "0effb30b460dc9b728d3bffae44093482bd8f539c28134c43b3c2d2662c35328e736707aa712052b58cb89ab75d4c446"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}]}]}, @NFT_MSG_DELTABLE={0x1c8, 0x2, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x7c, 0x6, "6817ef7d791806815a59323d400faa66b387c37e4469d2a3e5ba2dc7658fc0d2219867a5d8f70aa76a48a05e2285550c398a107b5c72431e6495a300c4513cbb44b0f18ccef7ca515888e85caa82f6321f3c08425b57ea4eea60164c6a1ac4cfe121f4c02ff53ff29c25f3f44c30f854df350142d120cae2"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xf2, 0x6, "44c3facd4c600960eba52cebe7268ae7859ceddbff67b528c549c424af2e906f936dabd6eecf41464f1a4cf33f5bb2b9cc9759751003b09e7708444825c5d2011b2331e1abce4be85168881084038a7c1eed4ccca670dd6caab5fe5f0b76bb39d55827d7079da07abb7f5f51d80bf53846e6f92f4ff2a6e85dbc31c581a5253a68396eaa6996878bb1a1b1bea35d2e16b16cdc9711ccec6b70155affd4986bf55515ea68c568573e881d94b04c7d3ed8c8e41f3f6310eb6f1bae55b62b41c5d5b3c75124ec7fd070bf9b01e0c651f66c94d464ffda948c99f62e2a5a677ab8d7177ee103ae6150fbace32c614ed7"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELRULE={0x70, 0x8, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf5}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8847}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x5c}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6002}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xfbfb}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x348, 0xc, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x32c, 0x3, 0x0, 0x1, [{0x328, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x81}, @NFTA_SET_ELEM_KEY_END={0x118, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xed, 0x1, "5722cc0979aa381748a887595aa2162ccdc0715d877a2d405b269c8772bcec3c8e69cbaa40f7962c45317b22d93af11a226b7453c509b0f53cc506bd1bb5d68574591a4ca56557909af71ab3559e8ef927e2c0fa37657fd76fa1b355a8ed1635b5c0fc2f067b0f75505026d20cd506da6b4c9c86cde925d0a60265b3cdf640951a3846e05debaf52c3803fc0662f9f1ea2db07351397c60017b7ec45179b2c1d38d18e0e2cbdc8af9264ce3da6c9c6d59ffb7b17c9d8cb3b54b50be398ed6f0adf9a94cc4d4fad665716791d70e10361aa905247e978fd08d67c2afa1f9a7d1c5fa73b958784cb3047"}]}, @NFTA_SET_ELEM_KEY_END={0x1e0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x91, 0x1, "bd225ec649d829f04978a3d898914d1d110daede6cf4698a6e7597dabdf08dc15e8e94a1dcb100c6e17737c7784aff49256c996ca36b120ba22112a368cf2ea05d0849bb19c402ebe1743cd2e07361e0e8996db0cfd152a0b449df31ecee11f26323475a3ffc47155f39caef48ff152feeedaf291684d051de4ed87f3b0dc5388183cfb4217b5f0f6b9f0f14a4"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x60, 0x1, "6dd410242d175e65e9b39f590d38442784a141cb326d97a7975cf6422080c6d972e28fc413c6f0efb75ff969d4b0d970107c6213a2e5b3d544abda4a94f4f8b5086005c1062d4ee6883f53a571c50fafd88f2817cb4485431eaed844"}, @NFTA_DATA_VALUE={0xb3, 0x1, "7eaabe547a1eba968f7014b271cb04ad978e5d722b5c151be4acffd20dd58b9d1c266401448b264d69443a9658bb24179078e78a5d7f5dd9defb696ff1e7d403b32ff5952eefcfb1dd90323653b9f78a9c9c3a9002c755a2b8766597b0b95c9da91b2d0a4fb30b430dcb8b66e906b8062f17b014e69d9d39495db931801891e07cc87b596d82cb4e817676c9a66098be42ad5d2ade5735eb8940348a705467527d558d74c796a33de55ac43ff9088c"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @target={{0xb}, @void}}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x1c, 0x16, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_DELSET={0x188, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @lookup={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xc}]}}}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x13}, @NFTA_SET_USERDATA={0xeb, 0xd, 0x1, 0x0, "62bfad641f6ef33518a7150e79d2c9d9e9887eae852f99a4e2f9797aea784a2ac0237f9861a863b7b852fce18a079d27266d942453307d898583563f2d7ea4f897e7818bbdda004cbe400df71ed4bcf8c894a49598bbd8b7a053c5d7a70e18e6a3c9fb55a7841e88d1ea109c5e265358dd1a6259f1261be3a5f97cda194ef60731985eead13f7329335bd4594ae5cfff7bd1c3881552bf38452b086d9b61eac790ec1ef9bcc8168d475945d311f20105215335944c42aa2f54407502c87a4a083302317f4a56c01481a970d32814a592e301afe4b6bfbb8499c371f90432c374813548eb26bcb6"}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1b}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @reject={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xa2}]}}}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1a}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x958}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$nl_route(r4, &(0x7f0000001e40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)=@ipv4_getroute={0x1c, 0x1a, 0x400, 0x70bd2d, 0x25dfdbff, {0x2, 0x0, 0x0, 0x7, 0x0, 0x7, 0xff, 0x4, 0x700}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000002000)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0xc8, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x74}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffd}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x18}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0x10}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff2}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40}, 0x8000) openat$kvm(0xffffffffffffff9c, &(0x7f0000002040), 0xc2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000002080), r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000002100)={{r6}, "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"}) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000003100)='./file0\x00', 0x191000, 0x80) r8 = signalfd4(r7, &(0x7f0000003140)={[0x2]}, 0x8, 0x80000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000031c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000003200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r8, &(0x7f00000032c0)={&(0x7f0000003180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003280)={&(0x7f0000003240)={0x30, r9, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x3, 0x2d}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) pwritev(r8, &(0x7f0000005480)=[{&(0x7f0000003300)="b204c7099165c9200d62035604fab61f08c04f1eb0d4f71c0e6e6df0bf4edfb8893393b293e84d1532761f83e97894dbf949c4470d45501b9dd459cd7710ac", 0x3f}, {&(0x7f0000003340)="c547a377dd8fe30208240cae30ce93f18274f8d6db34355ba65cd9edaabf56b2922da9b19cb5ec2ff14bc694d04ea6c64df498e16d2f82360227c3750ce18252406fe6df73de1b33d0ab47648156088b94e7da8abff1967e0af97f1e3311b35246954a90decf00117ee37af0b71366d899410376246bc2d25237577f36fb07871dddcdcedba48a7740b5eeff19c70632a5039afb34b5f8e7d327510be5da8e8332ab38b2e05309906b0751e87709dec296c70458966aa4", 0xb7}, {&(0x7f0000003400)="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", 0x1000}, {&(0x7f0000004400)="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", 0x1000}, {&(0x7f0000005400)="c3c1f62acca118418291ea19c86cecff1b6bb77651d1556ea773c4ac0b73e3d2b951903c611e5baaeaf0db1fd52a63edb3668f202004937ba0a3e13dc37408535b8980ed22f53829187baac7b00077bea31a0146c2d78c5657ec96f4be2f3e804dccb40a03b1", 0x66}], 0x5, 0x4, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000005600)={&(0x7f0000005500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000055c0)={&(0x7f0000005540)={0x6c, r1, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffc}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7fffffff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffeff}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004010}, 0x40) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000005700)={&(0x7f0000005640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000056c0)={&(0x7f0000005680)={0x20, r9, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$SNDCTL_SEQ_SYNC(r8, 0x5101) syz_open_dev$sndctrl(&(0x7f0000005740), 0xff, 0x430282) 1.595460339s ago: executing program 4 (id=478): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x10, 0x8, 0x11}, 0x2c) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = eventfd2(0x5, 0x1) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000100)={0x3, r6}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r10, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r8, 0x3ba0, &(0x7f00000001c0)={0x48, 0x7, r11, 0x0, 0x1, 0x0, 0x1000, 0x0, 0x749bc}) 910.450239ms ago: executing program 3 (id=479): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00'], 0x28}}], 0x1, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000440)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0x45, 0x66, 0x0, 0x3, 0x73, 0x0, @rand_addr=0x64010120, @broadcast, {[@ra={0x94, 0x4}]}}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c"}}, 0x53) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x20000004, 0x7f, 0x4233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0x2000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) syz_clone3(&(0x7f0000000340)={0x42107480, &(0x7f00000003c0), 0x0, 0x0, {0x38}, 0x0, 0x0, 0x0, 0x0}, 0x58) 907.934667ms ago: executing program 3 (id=480): socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000040c41090ea00000000000109022400010000002009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2001d4"], 0x0}) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r3, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000180)={0x0, 0x18, 0x3, &(0x7f0000000240)={0x91, "a52422ffd60775c221c4031d467d6648a97569b7d49cc4492d050600000000ff00"}}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) 464.114039ms ago: executing program 2 (id=481): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, 0x0, 0x0, 0x1, 0x4, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xbd1, 0x2, 0x3}, {0x81, 0x2}, 0x1fffffc, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x4, 0x0}, 0x8000, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x0, 0x0, 0x7, 0x7, 0x0, 0x2}}, 0xe8) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) r4 = socket(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) ioctl$INCFS_IOC_FILL_BLOCKS(r4, 0x80106720, &(0x7f00000000c0)={0x7ffff7b, &(0x7f00000004c0)}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) recvmsg$can_j1939(r4, 0x0, 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xe) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffe0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000000a1e613d7d7f28399df073a4f5b39d0aea3b6c4f85466a60bd22511af95e4376e87235130e4b322a337e72cbc7626492860221dbeab4076cfa8c7580c7fa35334ea", @ANYRES32=0x0, @ANYBLOB="00000000000408001c00128009000100626f6e64000000000c00028008001a000a010102"], 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 0 (id=482): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x12, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x12}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) kernel console output (not intermixed with test programs): error -71 [ 100.783400][ T5964] usb 5-1: USB disconnect, device number 7 [ 100.868278][ T5965] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 100.888952][ T5965] usb 3-1: device descriptor read/8, error -71 [ 100.998870][ T5965] usb usb3-port1: unable to enumerate USB device [ 101.120501][ T5874] apple 0003:05AC:0247.0001: unexpected long global item [ 101.130694][ T5874] apple 0003:05AC:0247.0001: parse failed [ 101.136508][ T5874] apple 0003:05AC:0247.0001: probe with driver apple failed with error -22 [ 101.306794][ T6214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.316378][ T6214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.037977][ T5874] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 102.206603][ T5874] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 102.217372][ T5874] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 102.227977][ T5874] usb 5-1: config 1 interface 0 has no altsetting 0 [ 102.241837][ T5874] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 102.264327][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.281448][ T5874] usb 5-1: Product: syz [ 102.289742][ T5874] usb 5-1: Manufacturer: syz [ 102.297800][ T5874] usb 5-1: SerialNumber: syz [ 102.318558][ T6234] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 102.326332][ T6234] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 102.478137][ T5965] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 102.552739][ T6231] netlink: 'syz.4.66': attribute type 11 has an invalid length. [ 102.628005][ T5965] usb 3-1: Using ep0 maxpacket: 16 [ 102.634792][ T5965] usb 3-1: config 2 has an invalid interface number: 142 but max is 0 [ 102.644054][ T5965] usb 3-1: config 2 has no interface number 0 [ 102.650251][ T5965] usb 3-1: config 2 interface 142 altsetting 0 has an endpoint descriptor with address 0xEA, changing to 0x8A [ 102.673164][ T5965] usb 3-1: config 2 interface 142 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 102.684849][ T5965] usb 3-1: config 2 interface 142 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 102.695410][ T5965] usb 3-1: config 2 interface 142 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 102.724695][ T5965] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c6.6e [ 102.734009][ T5965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.742090][ T5965] usb 3-1: Product: syz [ 102.746294][ T5965] usb 3-1: Manufacturer: syz [ 102.754175][ T5965] usb 3-1: SerialNumber: syz [ 102.770165][ T5965] usb 3-1: NFC: intf ffff8880598f8000 id ffffffff8eb55080 [ 102.982045][ T6236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.998223][ T6236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.012702][ T6236] netlink: 28 bytes leftover after parsing attributes in process `syz.2.67'. [ 103.036396][ T6236] netlink: 24 bytes leftover after parsing attributes in process `syz.2.67'. [ 103.053457][ T5928] usb 3-1: USB disconnect, device number 7 [ 103.205727][ T43] usb 1-1: USB disconnect, device number 3 [ 103.698084][ T43] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 103.761020][ T6261] netlink: 'syz.2.76': attribute type 4 has an invalid length. [ 103.774325][ T6261] veth1_macvtap: left promiscuous mode [ 103.791374][ T5928] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.848087][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 103.864822][ T43] usb 1-1: config 0 has an invalid interface number: 225 but max is 0 [ 103.877966][ T43] usb 1-1: config 0 has no interface number 0 [ 103.887159][ T43] usb 1-1: config 0 interface 225 has no altsetting 0 [ 103.899670][ T43] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 103.920956][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.949867][ T43] usb 1-1: config 0 descriptor?? [ 103.957990][ T5928] usb 4-1: Using ep0 maxpacket: 16 [ 103.978076][ T5928] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 103.989033][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.997267][ T5928] usb 4-1: Product: syz [ 104.002536][ T5928] usb 4-1: Manufacturer: syz [ 104.007264][ T5928] usb 4-1: SerialNumber: syz [ 104.012415][ T43] usbhid 1-1:0.225: couldn't find an input interrupt endpoint [ 104.053017][ T5928] r8152-cfgselector 4-1: Unknown version 0x0000 [ 104.059419][ T5928] r8152-cfgselector 4-1: config 0 descriptor?? [ 104.188895][ T5964] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 104.371177][ T5964] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 104.421634][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.434121][ T5964] usb 3-1: Product: syz [ 104.438916][ T5964] usb 3-1: Manufacturer: syz [ 104.446020][ T5964] usb 3-1: SerialNumber: syz [ 104.472908][ T5964] usb 3-1: config 0 descriptor?? [ 104.490941][ T5928] r8152-cfgselector 4-1: Unknown version 0x0000 [ 104.509428][ T5928] r8152-cfgselector 4-1: bad CDC descriptors [ 104.549154][ T5928] r8152-cfgselector 4-1: USB disconnect, device number 2 [ 104.580901][ T5874] rtl8150 5-1:1.0: couldn't reset the device [ 104.605049][ T5874] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 104.636487][ T5874] usb 5-1: USB disconnect, device number 8 [ 104.709051][ T5964] cx82310_eth 3-1:0.0: probe with driver cx82310_eth failed with error -22 [ 105.157455][ T5964] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 105.190734][ T6283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.82'. [ 105.371078][ T6263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.383198][ T6263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.396532][ T43] usb 3-1: USB disconnect, device number 8 [ 106.137854][ T6297] input: syz1 as /devices/virtual/input/input6 [ 106.330287][ T5874] usb 1-1: USB disconnect, device number 4 [ 106.955201][ T6313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.88'. [ 107.842153][ T6324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.93'. [ 108.054276][ T6326] netlink: 24 bytes leftover after parsing attributes in process `syz.4.94'. [ 108.345929][ T6328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.96'. [ 108.728787][ T6338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.99'. [ 108.829597][ T43] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 108.838359][ T6346] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 109.001591][ T43] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 109.040581][ T6348] input: syz0 as /devices/virtual/input/input7 [ 109.043269][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.604009][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.659129][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 109.756734][ T43] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 109.794265][ T43] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 109.823349][ T43] usb 4-1: Manufacturer: syz [ 109.842914][ T43] usb 4-1: config 0 descriptor?? [ 110.235935][ T6338] team0 (unregistering): Port device team_slave_0 removed [ 110.273056][ T43] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 110.298866][ T6338] team0 (unregistering): Port device team_slave_1 removed [ 110.332755][ T43] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 110.548378][ T5942] usb 4-1: USB disconnect, device number 3 [ 111.059844][ T6375] tipc: Started in network mode [ 111.065154][ T6375] tipc: Node identity 362db9bd0bf5, cluster identity 4711 [ 111.075265][ T6375] tipc: Enabled bearer , priority 0 [ 111.167206][ T6375] syzkaller0: entered promiscuous mode [ 111.172791][ T6375] syzkaller0: entered allmulticast mode [ 111.497584][ T6385] netlink: 20 bytes leftover after parsing attributes in process `syz.3.111'. [ 111.521188][ T6385] netlink: 20 bytes leftover after parsing attributes in process `syz.3.111'. [ 111.569736][ T6382] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 111.802235][ T6372] netlink: 16 bytes leftover after parsing attributes in process `syz.4.108'. [ 111.977927][ T5874] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 112.189236][ T43] tipc: Node number set to 1037613501 [ 112.296841][ T6373] tipc: Resetting bearer [ 112.398406][ T5874] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 112.456320][ T6373] tipc: Disabling bearer [ 112.475874][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.518734][ T5874] usb 2-1: config 0 descriptor?? [ 112.592822][ T5874] cp210x 2-1:0.0: cp210x converter detected [ 112.797299][ T5874] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 112.811853][ T5874] cp210x 2-1:0.0: querying part number failed [ 112.865578][ T5874] usb 2-1: cp210x converter now attached to ttyUSB0 [ 112.885753][ T5874] usb 2-1: USB disconnect, device number 7 [ 112.910223][ T5874] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 112.954496][ T5874] cp210x 2-1:0.0: device disconnected [ 113.479768][ T6416] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 113.498097][ T43] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 113.698055][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 113.719521][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 113.743712][ T43] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 113.764124][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.780847][ T43] usb 3-1: Product: syz [ 113.803232][ T43] usb 3-1: Manufacturer: syz [ 113.814685][ T43] usb 3-1: SerialNumber: syz [ 113.859471][ T43] usb 3-1: config 0 descriptor?? [ 113.919200][ T6430] netlink: 16 bytes leftover after parsing attributes in process `syz.3.121'. [ 114.228946][ T6436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.122'. [ 114.308879][ T43] gs_usb 3-1:0.0: Configuring for 2 interfaces [ 114.488316][ T5964] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 114.678184][ T5964] usb 5-1: Using ep0 maxpacket: 16 [ 114.688805][ T5964] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 114.738054][ T43] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 114.798005][ T5964] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 114.837773][ T5964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.919809][ T5964] usb 5-1: config 0 descriptor?? [ 114.984196][ T5964] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input8 [ 115.018929][ T43] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 115.089521][ T43] usb 3-1: USB disconnect, device number 9 [ 115.183743][ T5226] bcm5974 5-1:0.0: could not read from device [ 115.266142][ T5964] bcm5974 5-1:0.0: could not read from device [ 115.314755][ T5226] bcm5974 5-1:0.0: could not read from device [ 115.583094][ T5964] input: failed to attach handler mousedev to device input8, error: -5 [ 115.631347][ T5226] bcm5974 5-1:0.0: could not read from device [ 115.644036][ T5964] usb 5-1: USB disconnect, device number 9 [ 115.811361][ T6466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.131'. [ 115.856184][ T6466] netlink: 16 bytes leftover after parsing attributes in process `syz.1.131'. [ 116.185424][ T6477] vivid-001: ================= START STATUS ================= [ 116.229626][ T6477] vivid-001: Radio HW Seek Mode: Bounded [ 116.238708][ T5942] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 116.277020][ T6477] vivid-001: Radio Programmable HW Seek: false [ 116.335477][ T6477] vivid-001: RDS Rx I/O Mode: Block I/O [ 116.351770][ T6477] vivid-001: Generate RBDS Instead of RDS: false [ 116.388007][ T6477] vivid-001: RDS Reception: true [ 116.418631][ T6477] vivid-001: RDS Program Type: 0 inactive [ 116.465604][ T6477] vivid-001: RDS PS Name: inactive [ 116.485921][ T6477] vivid-001: RDS Radio Text: inactive [ 116.486294][ T5942] usb 3-1: Using ep0 maxpacket: 8 [ 116.509552][ T5942] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.567308][ T5942] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.605604][ T5942] usb 3-1: config 0 interface 0 has no altsetting 0 [ 116.643050][ T5942] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 116.654430][ T6477] vivid-001: RDS Traffic Announcement: false inactive [ 116.698101][ T6477] vivid-001: RDS Traffic Program: false inactive [ 116.709838][ T6477] vivid-001: RDS Music: false inactive [ 116.715764][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.729058][ T6477] vivid-001: ================== END STATUS ================== [ 116.760722][ T5942] usb 3-1: config 0 descriptor?? [ 116.908339][ T5928] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 117.072326][ T5928] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 117.081818][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.100797][ T5928] usb 2-1: config 0 descriptor?? [ 117.208667][ T6471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.217496][ T6471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.227218][ T5928] cp210x 2-1:0.0: cp210x converter detected [ 117.246069][ T6496] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 117.328395][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 117.331903][ T5942] kye 0003:0458:4018.0003: unknown main item tag 0x0 [ 117.366396][ T5942] kye 0003:0458:4018.0003: reserved main item tag 0xe [ 117.386934][ T5942] kye 0003:0458:4018.0003: item fetching failed at offset 15/133 [ 117.402033][ T5942] kye 0003:0458:4018.0003: parse failed [ 117.419057][ T6496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.456477][ T5942] kye 0003:0458:4018.0003: probe with driver kye failed with error -22 [ 117.471629][ T24] usb 1-1: device descriptor read/64, error -71 [ 117.487577][ T5942] usb 3-1: USB disconnect, device number 10 [ 117.672733][ T5928] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -121 [ 117.718436][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 117.847988][ T24] usb 1-1: device descriptor read/64, error -71 [ 117.892051][ T5928] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -32 [ 117.906625][ T5928] cp210x 2-1:0.0: GPIO initialisation failed: -32 [ 117.920761][ T5928] usb 2-1: cp210x converter now attached to ttyUSB0 [ 118.008430][ T24] usb usb1-port1: attempt power cycle [ 118.358788][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 118.368124][ T5942] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 118.418358][ T24] usb 1-1: device descriptor read/8, error -71 [ 118.528775][ T5942] usb 3-1: Using ep0 maxpacket: 16 [ 118.536384][ T5942] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 118.553204][ T5942] usb 3-1: config 0 has no interface number 0 [ 118.576088][ T5942] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 118.600613][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.658210][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 118.689781][ T24] usb 1-1: device descriptor read/8, error -71 [ 118.693036][ T5942] usb 3-1: Product: syz [ 118.703939][ T5942] usb 3-1: Manufacturer: syz [ 118.712790][ T5942] usb 3-1: SerialNumber: syz [ 118.753238][ T5942] usb 3-1: config 0 descriptor?? [ 118.777456][ T5942] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 118.808486][ T24] usb usb1-port1: unable to enumerate USB device [ 118.978009][ T5874] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 118.997369][ T5942] gspca_spca1528: reg_w err -71 [ 119.018058][ T5942] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 119.040512][ T5942] usb 3-1: USB disconnect, device number 11 [ 119.048260][ T5928] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 119.158120][ T5874] usb 5-1: Using ep0 maxpacket: 16 [ 119.164950][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 119.178184][ T5874] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 119.188093][ T5874] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 119.204008][ T5874] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 119.214962][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.219982][ T5928] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.223064][ T5874] usb 5-1: Product: syz [ 119.237779][ T5874] usb 5-1: Manufacturer: syz [ 119.243141][ T5874] usb 5-1: SerialNumber: syz [ 119.252455][ T5874] usb 5-1: config 0 descriptor?? [ 119.257777][ T5928] usb 4-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=60.d9 [ 119.273901][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.285043][ T5928] usb 4-1: Product: syz [ 119.290258][ T5928] usb 4-1: Manufacturer: syz [ 119.293555][ T6519] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 119.303957][ T5928] usb 4-1: SerialNumber: syz [ 119.317821][ T5928] usb 4-1: config 0 descriptor?? [ 119.331691][ T5874] mcba_usb 5-1:0.0 can0: failed tx_urb -90 [ 119.338582][ T5874] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 119.345939][ T5874] mcba_usb 5-1:0.0 can0: failed tx_urb -90 [ 119.352318][ T5874] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 119.359173][ T5874] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 119.555943][ T6521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.565016][ T6521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.743109][ T6519] bridge0: port 3(macsec0) entered blocking state [ 119.752393][ T6519] bridge0: port 3(macsec0) entered disabled state [ 119.764214][ T6519] macsec0: entered allmulticast mode [ 119.770963][ T6519] veth1_macvtap: entered allmulticast mode [ 119.805505][ T6519] macsec0: entered promiscuous mode [ 119.818332][ T6519] bridge0: port 3(macsec0) entered blocking state [ 119.825078][ T6519] bridge0: port 3(macsec0) entered forwarding state [ 119.918431][ T24] usb 2-1: USB disconnect, device number 8 [ 119.934163][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 119.943006][ T24] cp210x 2-1:0.0: device disconnected [ 119.964047][ T5874] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 120.137373][ T5874] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 120.154534][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.242846][ T5874] usb 3-1: config 0 descriptor?? [ 120.306921][ T5874] pwc: Samsung MPC-C10 USB webcam detected. [ 120.376644][ T6541] syz.0.153 uses obsolete (PF_INET,SOCK_PACKET) [ 120.998100][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 121.150245][ T24] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 121.159011][ T24] usb 1-1: config 0 has no interface number 0 [ 121.199659][ T24] usb 1-1: config 0 interface 85 altsetting 151 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.238560][ T24] usb 1-1: config 0 interface 85 altsetting 151 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.277241][ T24] usb 1-1: config 0 interface 85 has no altsetting 0 [ 121.297254][ T24] usb 1-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 121.343862][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.383379][ T24] usb 1-1: config 0 descriptor?? [ 121.434316][ T5536] mcba_usb 5-1:0.0 can0: bit-timing not yet defined [ 121.854146][ T5928] usb 4-1: probing VID:PID(2201:012C) [ 121.903543][ T24] hid-led 0003:1D34:0004.0004: unknown main item tag 0x0 [ 121.912837][ T5928] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 121.921196][ T24] hid-led 0003:1D34:0004.0004: unknown main item tag 0x0 [ 121.928370][ T5928] vub300 4-1:0.0: probe with driver vub300 failed with error -22 [ 121.936204][ T24] hid-led 0003:1D34:0004.0004: unknown main item tag 0x0 [ 122.036802][ T24] hid-led 0003:1D34:0004.0004: unknown main item tag 0x0 [ 122.044248][ T5928] usb 4-1: USB disconnect, device number 4 [ 122.072718][ T24] hid-led 0003:1D34:0004.0004: unknown main item tag 0x0 [ 122.084900][ T24] hid-led 0003:1D34:0004.0004: unknown main item tag 0x0 [ 122.093973][ T24] hid-led 0003:1D34:0004.0004: unknown main item tag 0x0 [ 122.135927][ T24] hid-led 0003:1D34:0004.0004: probe with driver hid-led failed with error -71 [ 122.155287][ T24] usb 1-1: USB disconnect, device number 9 [ 122.344225][ T5964] usb 5-1: USB disconnect, device number 10 [ 122.356261][ T5964] mcba_usb 5-1:0.0 can0: device disconnected [ 122.397976][ T5928] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 122.618268][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.662445][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.710718][ T5874] pwc: recv_control_msg error -71 req 02 val 2b00 [ 122.729120][ T5928] usb 4-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00 [ 122.743694][ T5874] pwc: recv_control_msg error -71 req 02 val 2700 [ 122.788080][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.788098][ T5874] pwc: recv_control_msg error -71 req 04 val 1700 [ 122.868536][ T5874] pwc: recv_control_msg error -71 req 02 val 2c00 [ 122.870392][ T5928] usb 4-1: config 0 descriptor?? [ 122.889599][ T6573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'. [ 122.893693][ T6574] netlink: 'syz.2.160': attribute type 10 has an invalid length. [ 122.906381][ T5874] pwc: recv_control_msg error -71 req 04 val 1000 [ 122.958094][ T5874] pwc: recv_control_msg error -71 req 04 val 1300 [ 123.000561][ T5874] pwc: recv_control_msg error -71 req 04 val 1400 [ 123.011972][ T5874] pwc: recv_control_msg error -71 req 02 val 2000 [ 123.020776][ T5874] pwc: recv_control_msg error -71 req 02 val 2100 [ 123.027555][ T5874] pwc: recv_control_msg error -71 req 02 val 2200 [ 123.035874][ T5874] pwc: recv_control_msg error -71 req 06 val 0600 [ 123.046009][ T5874] pwc: recv_control_msg error -71 req 04 val 1500 [ 123.070655][ T5874] pwc: recv_control_msg error -71 req 02 val 2500 [ 123.105141][ T5874] pwc: recv_control_msg error -71 req 02 val 2400 [ 123.114437][ T6574] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 123.135810][ T5874] pwc: recv_control_msg error -71 req 02 val 2600 [ 123.145901][ T5874] pwc: recv_control_msg error -71 req 02 val 2900 [ 123.155508][ T5874] pwc: recv_control_msg error -71 req 02 val 2800 [ 123.183398][ T5874] pwc: recv_control_msg error -71 req 04 val 1100 [ 123.254616][ T5874] pwc: recv_control_msg error -71 req 04 val 1200 [ 123.316028][ T5874] pwc: Registered as video103. [ 123.318116][ T5958] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 123.378641][ T5874] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 123.439768][ T5928] itetech 0003:06CB:2968.0005: hidraw0: USB HID v0.00 Device [HID 06cb:2968] on usb-dummy_hcd.3-1/input0 [ 123.493877][ T5874] usb 3-1: USB disconnect, device number 12 [ 123.512678][ T5958] usb 5-1: Using ep0 maxpacket: 16 [ 123.546177][ T5958] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.590715][ T5958] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.607162][ T6560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.627662][ T5958] usb 5-1: config 0 interface 0 has no altsetting 0 [ 123.638404][ T6560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.658058][ T5928] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 123.687710][ T5958] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 123.699007][ T6560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.156'. [ 123.746603][ T5958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.773745][ T6577] netlink: 'syz.3.156': attribute type 10 has an invalid length. [ 123.855688][ T6595] netlink: 'syz.3.156': attribute type 10 has an invalid length. [ 123.865420][ T5928] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 123.883157][ T5958] usb 5-1: config 0 descriptor?? [ 123.889282][ T5928] usb 1-1: config 0 has no interface number 0 [ 123.895463][ T5928] usb 1-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 123.926910][ T5928] usb 1-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 123.996423][ T5928] usb 1-1: config 0 interface 113 has no altsetting 0 [ 124.005195][ T6577] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.013528][ T6577] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.035203][ T5928] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 124.045754][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.112007][ T5928] usb 1-1: Product: syz [ 124.129425][ T6577] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.136708][ T6577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.144959][ T6577] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.152238][ T6577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.178036][ T5928] usb 1-1: Manufacturer: syz [ 124.187942][ T5928] usb 1-1: SerialNumber: syz [ 124.212121][ T5928] usb 1-1: config 0 descriptor?? [ 124.230556][ C1] usb 1-1: NFC: Urb failure (status -71) [ 124.236990][ T5928] usb 1-1: NFC: Unable to get FW version [ 124.244933][ T6577] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 124.257652][ T5928] pn533_usb 1-1:0.113: probe with driver pn533_usb failed with error -90 [ 124.277619][ T6595] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.284911][ T6595] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.323642][ T5958] hid (null): global environment stack underflow [ 124.402199][ T5958] cougar 0003:060B:500A.0006: usage count exceeds max: fixing up report descriptor [ 124.467508][ T5958] cougar 0003:060B:500A.0006: unexpected long global item [ 124.477549][ T5928] usb 4-1: USB disconnect, device number 5 [ 124.516636][ T5958] cougar 0003:060B:500A.0006: parse failed [ 124.567093][ T5958] cougar 0003:060B:500A.0006: probe with driver cougar failed with error -22 [ 124.637737][ T5958] usb 5-1: USB disconnect, device number 11 [ 124.710453][ T6609] FAULT_INJECTION: forcing a failure. [ 124.710453][ T6609] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 124.747179][ T6609] CPU: 1 UID: 0 PID: 6609 Comm: syz.3.166 Not tainted syzkaller #0 PREEMPT(full) [ 124.747206][ T6609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 124.747224][ T6609] Call Trace: [ 124.747239][ T6609] [ 124.747247][ T6609] dump_stack_lvl+0x189/0x250 [ 124.747282][ T6609] ? __pfx____ratelimit+0x10/0x10 [ 124.747302][ T6609] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.747322][ T6609] ? __pfx__printk+0x10/0x10 [ 124.747365][ T6609] should_fail_ex+0x414/0x560 [ 124.747398][ T6609] strncpy_from_user+0x36/0x290 [ 124.747430][ T6609] getname_flags+0xf3/0x540 [ 124.747454][ T6609] __x64_sys_mknodat+0x96/0xc0 [ 124.747480][ T6609] do_syscall_64+0xfa/0x3b0 [ 124.747501][ T6609] ? lockdep_hardirqs_on+0x9c/0x150 [ 124.747521][ T6609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.747540][ T6609] ? clear_bhb_loop+0x60/0xb0 [ 124.747563][ T6609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.747581][ T6609] RIP: 0033:0x7fe46bf8eec9 [ 124.747603][ T6609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.747619][ T6609] RSP: 002b:00007fe46cee5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 124.747640][ T6609] RAX: ffffffffffffffda RBX: 00007fe46c1e5fa0 RCX: 00007fe46bf8eec9 [ 124.747654][ T6609] RDX: 0000000000000400 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 124.747667][ T6609] RBP: 00007fe46cee5090 R08: 0000000000000000 R09: 0000000000000000 [ 124.747679][ T6609] R10: 0000000000000103 R11: 0000000000000246 R12: 0000000000000001 [ 124.747689][ T6609] R13: 00007fe46c1e6038 R14: 00007fe46c1e5fa0 R15: 00007fe46c30fa28 [ 124.747718][ T6609] [ 125.313684][ T6616] batadv_slave_0: entered promiscuous mode [ 125.345434][ T6615] batadv_slave_0: left promiscuous mode [ 125.368040][ T5958] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 125.573125][ T6622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.170'. [ 125.583476][ T5958] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.585351][ T6622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.170'. [ 125.655577][ T5958] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.750550][ T5958] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 125.806817][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 125.845854][ T5958] usb 4-1: SerialNumber: syz [ 126.084435][ T6631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.096297][ T6633] netlink: 16 bytes leftover after parsing attributes in process `syz.1.173'. [ 126.107669][ T6631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.157008][ T6633] sctp: [Deprecated]: syz.1.173 (pid 6633) Use of int in max_burst socket option deprecated. [ 126.157008][ T6633] Use struct sctp_assoc_value instead [ 126.180624][ T5958] usb 4-1: 0:2 : does not exist [ 126.248341][ T5958] usb 4-1: USB disconnect, device number 6 [ 126.391342][ T43] usb 1-1: USB disconnect, device number 10 [ 126.450210][ T5972] udevd[5972]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.637303][ T6645] FAULT_INJECTION: forcing a failure. [ 126.637303][ T6645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.658226][ T5964] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 126.681866][ T6645] CPU: 1 UID: 0 PID: 6645 Comm: syz.0.177 Not tainted syzkaller #0 PREEMPT(full) [ 126.681891][ T6645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 126.681902][ T6645] Call Trace: [ 126.681909][ T6645] [ 126.681918][ T6645] dump_stack_lvl+0x189/0x250 [ 126.681947][ T6645] ? __pfx____ratelimit+0x10/0x10 [ 126.681966][ T6645] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.681988][ T6645] ? __pfx__printk+0x10/0x10 [ 126.682034][ T6645] should_fail_ex+0x414/0x560 [ 126.682065][ T6645] _copy_to_user+0x31/0xb0 [ 126.682091][ T6645] simple_read_from_buffer+0xe1/0x170 [ 126.682122][ T6645] proc_fail_nth_read+0x1b3/0x220 [ 126.682148][ T6645] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 126.682172][ T6645] ? rw_verify_area+0x2a6/0x4d0 [ 126.682195][ T6645] ? __lock_acquire+0xab9/0xd20 [ 126.682221][ T6645] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 126.682244][ T6645] vfs_read+0x1fd/0xa30 [ 126.682268][ T6645] ? fdget_pos+0x247/0x320 [ 126.682290][ T6645] ? __pfx___mutex_lock+0x10/0x10 [ 126.682313][ T6645] ? __pfx_vfs_read+0x10/0x10 [ 126.682339][ T6645] ? __fget_files+0x2a/0x420 [ 126.682359][ T6645] ? __fget_files+0x3a0/0x420 [ 126.682374][ T6645] ? __fget_files+0x2a/0x420 [ 126.682399][ T6645] ksys_read+0x145/0x250 [ 126.682425][ T6645] ? __pfx_ksys_read+0x10/0x10 [ 126.682450][ T6645] ? __secure_computing+0xe2/0x2a0 [ 126.682477][ T6645] do_syscall_64+0xfa/0x3b0 [ 126.682497][ T6645] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.682516][ T6645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.682533][ T6645] ? clear_bhb_loop+0x60/0xb0 [ 126.682554][ T6645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.682572][ T6645] RIP: 0033:0x7f07c3b8d8dc [ 126.682590][ T6645] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 126.682604][ T6645] RSP: 002b:00007f07c4a18030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 126.682622][ T6645] RAX: ffffffffffffffda RBX: 00007f07c3de5fa0 RCX: 00007f07c3b8d8dc [ 126.682636][ T6645] RDX: 000000000000000f RSI: 00007f07c4a180a0 RDI: 0000000000000004 [ 126.682648][ T6645] RBP: 00007f07c4a18090 R08: 0000000000000000 R09: 0000000000000000 [ 126.682659][ T6645] R10: 0000000000000103 R11: 0000000000000246 R12: 0000000000000001 [ 126.682670][ T6645] R13: 00007f07c3de6038 R14: 00007f07c3de5fa0 R15: 00007f07c3f0fa28 [ 126.682698][ T6645] [ 127.000801][ T5964] usb 5-1: Using ep0 maxpacket: 16 [ 127.008349][ T5964] usb 5-1: config 0 has an invalid descriptor of length 168, skipping remainder of the config [ 127.023311][ T5964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 66, changing to 10 [ 127.048085][ T5942] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 127.065300][ T5964] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 127.099126][ T6647] binfmt_misc: register: failed to install interpreter file ./file0 [ 127.113043][ T5964] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 127.132331][ T5964] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 127.153359][ T5964] usb 5-1: Manufacturer: syz [ 127.181157][ T5964] usb 5-1: config 0 descriptor?? [ 127.218899][ T5942] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 127.232719][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.265555][ T5942] usb 3-1: config 0 descriptor?? [ 127.275178][ T5942] gspca_main: spca508-2.14.0 probing 8086:0110 [ 127.288150][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 127.458110][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 127.465708][ T24] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.484374][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 127.493824][ T24] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 127.503523][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.515982][ T24] usb 1-1: config 0 descriptor?? [ 127.560935][ T6663] fuse: Unknown parameter '0x0000000000000003' [ 127.813946][ T5942] gspca_spca508: reg_read err -71 [ 127.834437][ T5942] gspca_spca508: reg_read err -71 [ 127.840653][ T5942] gspca_spca508: reg_read err -71 [ 127.849779][ T5942] gspca_spca508: reg_read err -71 [ 127.858153][ T5942] gspca_spca508: reg write: error -71 [ 127.863763][ T5942] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 127.881476][ T5942] usb 3-1: USB disconnect, device number 13 [ 127.940919][ T24] aquacomputer_d5next 0003:0C70:F00E.0007: hidraw0: USB HID v4.06 Device [HID 0c70:f00e] on usb-dummy_hcd.0-1/input0 [ 128.333868][ T6650] warning: `syz.0.180' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 128.357645][ T6650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.386526][ T6650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.409610][ T24] usb 1-1: USB disconnect, device number 11 [ 128.686348][ T6674] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 128.715188][ T6674] team0: Port device batadv1 added [ 128.871995][ T5964] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 129.008332][ T6676] hub 9-0:1.0: USB hub found [ 129.021351][ T6676] hub 9-0:1.0: 1 port detected [ 129.039482][ T5964] usb 2-1: device descriptor read/64, error -71 [ 129.245140][ T5874] usb 5-1: USB disconnect, device number 12 [ 129.307973][ T5964] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 129.458671][ T5964] usb 2-1: device descriptor read/64, error -71 [ 129.476429][ T6688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'. [ 129.488947][ T6688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.189'. [ 129.661998][ T5964] usb usb2-port1: attempt power cycle [ 129.780568][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.192'. [ 129.810902][ T6695] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 129.820317][ T6695] macvtap1: entered allmulticast mode [ 129.826348][ T6695] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 129.914836][ T24] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 130.018108][ T5964] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 130.059757][ T5964] usb 2-1: device descriptor read/8, error -71 [ 130.082824][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 130.108340][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 130.148009][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 130.166058][ T5942] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 130.170469][ T24] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 130.201323][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.241414][ T24] usb 5-1: Product: syz [ 130.245751][ T24] usb 5-1: Manufacturer: syz [ 130.251556][ T24] usb 5-1: SerialNumber: syz [ 130.265763][ T24] usb 5-1: config 0 descriptor?? [ 130.281825][ T24] streamzap 5-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 130.297974][ T5964] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 130.330461][ T5964] usb 2-1: device descriptor read/8, error -71 [ 130.365636][ T5942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.386508][ T5942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.398640][ T5942] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 130.412702][ T5942] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 130.421883][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.432569][ T5942] usb 4-1: config 0 descriptor?? [ 130.440745][ T5942] hub 4-1:0.0: USB hub found [ 130.471333][ T5964] usb usb2-port1: unable to enumerate USB device [ 130.645706][ T5942] hub 4-1:0.0: 9 ports detected [ 130.686978][ T5942] hub 4-1:0.0: config failed, can't get hub status (err -5) [ 130.742153][ T5942] usb 4-1: USB disconnect, device number 7 [ 130.845565][ T30] audit: type=1800 audit(1758898914.782:2): pid=6714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.196" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 130.977524][ T24] usb 5-1: USB disconnect, device number 13 [ 131.878148][ T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 132.057968][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 132.338049][ T6739] netlink: 'syz.4.203': attribute type 4 has an invalid length. [ 132.355686][ T24] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 132.356400][ T6739] netlink: 'syz.4.203': attribute type 4 has an invalid length. [ 132.402252][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.434158][ T24] usb 2-1: config 0 has no interface number 0 [ 132.454418][ T24] usb 2-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 132.484035][ T24] usb 2-1: config 0 interface 133 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 132.510539][ T24] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 132.553926][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.567113][ T24] usb 2-1: Product: syz [ 132.576475][ T24] usb 2-1: Manufacturer: syz [ 132.605104][ T6743] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=196629122 (12584263808 ns) > initial count (5377998080 ns). Using initial count to start timer. [ 132.617683][ T24] usb 2-1: SerialNumber: syz [ 132.639219][ T5964] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 132.665771][ T6747] kvm: MONITOR instruction emulated as NOP! [ 132.684574][ T24] usb 2-1: config 0 descriptor?? [ 132.730381][ T6729] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 132.874096][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.881039][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.892162][ T6750] loop6: detected capacity change from 0 to 2560 [ 132.951531][ T24] usb 2-1: probing VID:PID(0424:012C) [ 132.962026][ T6753] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 132.976139][ T24] usb 2-1: vub300 testing BULK OUT EndPoint(0) 0B [ 132.985066][ T24] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 132.989255][ T5964] usb 5-1: Using ep0 maxpacket: 8 [ 133.002693][ T24] vub300 2-1:0.133: probe with driver vub300 failed with error -22 [ 133.018755][ T6753] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 133.038828][ T6753] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 133.052239][ T6753] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 133.078436][ T24] usb 2-1: USB disconnect, device number 13 [ 133.086426][ T5964] usb 5-1: unable to get BOS descriptor or descriptor too short [ 133.094806][ T5964] usb 5-1: no configurations [ 133.101998][ T5964] usb 5-1: can't read configurations, error -22 [ 133.120163][ T5972] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.152113][ T5972] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.168992][ T5972] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.179298][ T5972] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.187316][ T5972] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.196647][ T5972] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.204914][ T5972] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.254751][ T5972] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.292293][ T5972] ldm_validate_partition_table(): Disk read failed. [ 133.320597][ T5972] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.498107][ T5972] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.545597][ T5972] Dev loop6: unable to read RDB block 0 [ 133.570722][ T5972] loop6: unable to read partition table [ 133.670525][ T6765] netlink: 40 bytes leftover after parsing attributes in process `syz.1.208'. [ 134.643204][ T6798] netlink: 4400 bytes leftover after parsing attributes in process `syz.4.216'. [ 134.867410][ T6798] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+` [ 135.302077][ T43] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 135.470577][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 135.524260][ T43] usb 2-1: unable to get BOS descriptor or descriptor too short [ 135.561774][ T43] usb 2-1: config 129 has an invalid interface number: 249 but max is 0 [ 135.605553][ T43] usb 2-1: config 129 has no interface number 0 [ 135.628246][ T43] usb 2-1: config 129 interface 249 altsetting 247 bulk endpoint 0x81 has invalid maxpacket 32 [ 135.708565][ T43] usb 2-1: config 129 interface 249 altsetting 247 bulk endpoint 0xA has invalid maxpacket 164 [ 135.758212][ T43] usb 2-1: config 129 interface 249 has no altsetting 0 [ 135.804232][ T43] usb 2-1: New USB device found, idVendor=0424, idProduct=9908, bcdDevice=2e.38 [ 135.833702][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.873375][ T43] usb 2-1: Product: syz [ 135.921400][ T43] usb 2-1: Manufacturer: syz [ 135.954810][ T43] usb 2-1: SerialNumber: syz [ 135.985848][ T6811] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 136.034439][ T6811] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 136.076576][ T6824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.225'. [ 136.127805][ T6824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.225'. [ 136.201387][ T6824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.225'. [ 136.211204][ T6824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.225'. [ 136.246613][ T6828] pim6reg: entered allmulticast mode [ 136.281939][ T43] smsc95xx v2.0.0 [ 136.289461][ T43] smsc95xx 2-1:129.249 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 136.302915][ T43] smsc95xx 2-1:129.249: probe with driver smsc95xx failed with error -71 [ 136.316464][ T3565] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.331726][ T43] usb 2-1: USB disconnect, device number 14 [ 136.393853][ T49] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.433470][ T49] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.458521][ T5942] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 136.492098][ T49] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.628051][ T5942] usb 4-1: Using ep0 maxpacket: 8 [ 136.635182][ T5942] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 136.652371][ T5942] usb 4-1: can't read configurations, error -22 [ 136.660832][ T6837] tipc: Enabled bearer , priority 0 [ 136.667756][ T6836] tipc: Enabling of bearer rejected, already enabled [ 136.677308][ T6838] syzkaller0: entered promiscuous mode [ 136.683963][ T6838] syzkaller0: entered allmulticast mode [ 136.764423][ T6838] tipc: Resetting bearer [ 136.781242][ T6838] tipc: Disabling bearer [ 136.788696][ T5942] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 136.801500][ T5964] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 136.939022][ T5942] usb 4-1: Using ep0 maxpacket: 8 [ 136.954927][ T5942] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 136.969030][ T5964] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 136.978985][ T5942] usb 4-1: can't read configurations, error -22 [ 136.985713][ T5942] usb usb4-port1: attempt power cycle [ 136.991272][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.001719][ T5964] usb 3-1: Product: syz [ 137.005970][ T5964] usb 3-1: Manufacturer: syz [ 137.011820][ T5964] usb 3-1: SerialNumber: syz [ 137.288000][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 137.438675][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 137.445960][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 137.456312][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 137.498246][ T5942] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 137.584828][ T9] usb 1-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice= 9.75 [ 137.594761][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.615713][ T5942] usb 4-1: Using ep0 maxpacket: 8 [ 137.624578][ T9] usb 1-1: Product: syz [ 137.631701][ T5942] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 137.640016][ T5942] usb 4-1: can't read configurations, error -22 [ 137.646441][ T9] usb 1-1: Manufacturer: syz [ 137.652569][ T9] usb 1-1: SerialNumber: syz [ 137.664804][ T9] usb 1-1: config 0 descriptor?? [ 137.778322][ T5942] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 137.840185][ T5942] usb 4-1: Using ep0 maxpacket: 8 [ 137.848234][ T5942] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 137.856588][ T5942] usb 4-1: can't read configurations, error -22 [ 137.886496][ T5942] usb usb4-port1: unable to enumerate USB device [ 138.016076][ T6855] input: syz1 as /devices/virtual/input/input11 [ 138.227055][ T6859] capability: warning: `syz.1.236' uses deprecated v2 capabilities in a way that may be insecure [ 138.271923][ T6858] kvm: pic: non byte write [ 138.279819][ T5964] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 138.286369][ T5964] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 138.528963][ T5942] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 138.678152][ T5942] usb 5-1: Using ep0 maxpacket: 16 [ 138.685314][ T5942] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 138.692995][ T5942] usb 5-1: can't read configurations, error -61 [ 138.712225][ T5964] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 138.838351][ T5958] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 138.858452][ T5942] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 138.915764][ T5965] usb 3-1: USB disconnect, device number 14 [ 138.931664][ T5965] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 139.017328][ T5958] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 139.028076][ T5942] usb 5-1: Using ep0 maxpacket: 16 [ 139.038248][ T5958] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 139.048893][ T5942] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 139.049905][ T5958] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.077096][ T5942] usb 5-1: can't read configurations, error -61 [ 139.077494][ T5958] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 139.096596][ T5958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.107404][ T5942] usb usb5-port1: attempt power cycle [ 139.123897][ T5958] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 139.141315][ T5958] usb 2-1: invalid MIDI out EP 0 [ 139.293179][ T5972] udevd[5972]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.342471][ T5958] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 139.468360][ T5942] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 139.500437][ T5942] usb 5-1: Using ep0 maxpacket: 16 [ 139.513227][ T5942] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 139.528376][ T5942] usb 5-1: can't read configurations, error -61 [ 139.618414][ T5958] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 139.668791][ T5942] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 139.700369][ T5942] usb 5-1: Using ep0 maxpacket: 16 [ 139.709979][ T5942] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 139.717838][ T5942] usb 5-1: can't read configurations, error -61 [ 139.732099][ T5942] usb usb5-port1: unable to enumerate USB device [ 139.811757][ T5958] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 139.845122][ T5958] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 139.916066][ T9] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 139.916157][ T5958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 139.953141][ T5958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 139.967039][ T9] peak_usb 1-1:0.0: unable to read PCAN-USB Pro FD firmware info (err -71) [ 139.985464][ T5958] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 140.046774][ T5958] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 140.059251][ T9] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 140.083052][ T9] usb 1-1: USB disconnect, device number 12 [ 140.097494][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.130834][ T5958] usb 4-1: Product: syz [ 140.150207][ T5958] usb 4-1: Manufacturer: syz [ 140.201426][ T5958] usb 4-1: SerialNumber: syz [ 140.223405][ T5958] usb 4-1: config 0 descriptor?? [ 140.250893][ T5958] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 140.488028][ T5958] imon 4-1:0.0: unable to initialize intf0, err -90 [ 140.598634][ T5958] imon:imon_probe: failed to initialize context! [ 140.605159][ T5958] imon 4-1:0.0: unable to register, err -19 [ 140.629707][ T5958] usb 4-1: USB disconnect, device number 12 [ 141.475805][ T5964] usb 2-1: USB disconnect, device number 15 [ 141.488216][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 141.608221][ T5965] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 141.658259][ T9] usb 4-1: device descriptor read/64, error -71 [ 141.738999][ T6913] tipc: Enabling of bearer rejected, failed to enable media [ 141.839555][ T5965] usb 5-1: unable to get BOS descriptor or descriptor too short [ 141.864996][ T5965] usb 5-1: not running at top speed; connect to a high speed hub [ 141.920171][ T5965] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.937947][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 141.969125][ T5965] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 142.005511][ T5965] usb 5-1: string descriptor 0 read error: -22 [ 142.032304][ T5958] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 142.137596][ T5965] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 142.161238][ T5965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.182485][ T5965] usb 5-1: 0:2 : does not exist [ 142.191033][ T9] usb 4-1: device descriptor read/64, error -71 [ 142.298478][ T9] usb usb4-port1: attempt power cycle [ 142.325364][ T5958] usb 1-1: config 0 has an invalid interface number: 175 but max is 0 [ 142.345521][ T5958] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.366288][ T5958] usb 1-1: config 0 has no interface number 0 [ 142.376075][ T5958] usb 1-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 142.396642][ T5958] usb 1-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 142.416266][ T5958] usb 1-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 142.466270][ T5958] usb 1-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 142.499453][ T5958] usb 1-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 142.518874][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.527338][ T5958] usb 1-1: Product: syz [ 142.544814][ T5958] usb 1-1: Manufacturer: syz [ 142.558177][ T5958] usb 1-1: SerialNumber: syz [ 142.582716][ T5958] usb 1-1: config 0 descriptor?? [ 142.678126][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 142.680463][ T5958] symbolserial 1-1:0.175: symbol converter detected [ 142.713990][ T5958] usb 1-1: symbol converter now attached to ttyUSB0 [ 142.801352][ T9] usb 4-1: device descriptor read/8, error -71 [ 142.868006][ T5874] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 142.952174][ T5958] usb 1-1: USB disconnect, device number 13 [ 143.086471][ T5874] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 143.097572][ T5874] usb 2-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 143.109128][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 143.118718][ T5874] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 143.150777][ T9] usb 4-1: device descriptor read/8, error -71 [ 143.171486][ T5958] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 143.173861][ T5965] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 143.202474][ T5958] symbolserial 1-1:0.175: device disconnected [ 143.288325][ T9] usb usb4-port1: unable to enumerate USB device [ 143.298480][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.346240][ T5965] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 143.376716][ T5965] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 143.418863][ T5965] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 143.428080][ T5874] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 143.435507][ T5874] usb 2-1: invalid MIDI out EP 0 [ 143.443085][ T5965] usb 5-1: USB disconnect, device number 20 [ 143.904560][ T5874] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 143.972198][ T5874] usb 2-1: USB disconnect, device number 16 [ 144.328534][ T5965] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 144.464138][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.252'. [ 144.542503][ T5965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.564275][ T5965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.605223][ T5965] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 144.640876][ T5874] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 144.704408][ T5965] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 144.731386][ T5965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.790490][ T5965] usb 5-1: config 0 descriptor?? [ 144.888328][ T5874] usb 4-1: Using ep0 maxpacket: 8 [ 144.904488][ T5874] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 144.922298][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.941272][ T5874] usb 4-1: Product: syz [ 144.959917][ T5874] usb 4-1: Manufacturer: syz [ 144.964771][ T5874] usb 4-1: SerialNumber: syz [ 145.058713][ T5874] usb 4-1: config 0 descriptor?? [ 145.129816][ T5874] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 145.251850][ T5965] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 145.287991][ T5965] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 145.319281][ T5965] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 145.347620][ T5965] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 145.370813][ T5965] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 145.382902][ T5965] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 145.397072][ T5965] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 145.418258][ T5965] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 145.425842][ T5965] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 145.454127][ T5965] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 146.188603][ T43] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 146.252082][ T5874] gspca_sonixj: reg_w1 err -71 [ 146.341201][ T5874] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 146.362774][ T5874] usb 4-1: USB disconnect, device number 17 [ 146.366877][ T43] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 146.383275][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.424044][ T43] usb 2-1: Product: syz [ 146.446005][ T43] usb 2-1: Manufacturer: syz [ 146.463848][ T43] usb 2-1: SerialNumber: syz [ 147.033241][ T5958] usb 5-1: USB disconnect, device number 21 [ 147.040683][ T43] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 147.132994][ T43] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 147.190237][ T43] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 147.225868][ T6982] lo: entered allmulticast mode [ 147.328547][ T43] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 148.137320][ T6996] loop7: detected capacity change from 0 to 1 [ 148.216293][ T6996] Dev loop7: unable to read RDB block 1 [ 148.257137][ T6996] loop7: unable to read partition table [ 148.285060][ T6996] loop7: partition table beyond EOD, truncated [ 148.298690][ T6996] loop_reread_partitions: partition scan of loop7 (îÝ·ÂU@™:ÖB$Œ{W) failed (rc=-5) [ 148.338835][ T7002] bond0: entered promiscuous mode [ 148.343914][ T7002] bond_slave_0: entered promiscuous mode [ 148.368681][ T7002] bond_slave_1: entered promiscuous mode [ 148.374665][ T7002] bridge0: entered promiscuous mode [ 148.387987][ T5942] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 148.412333][ T7002] dummy0: entered promiscuous mode [ 148.424617][ T7002] hsr1: entered promiscuous mode [ 148.430887][ T7002] hsr1: entered allmulticast mode [ 148.436017][ T7002] bond0: entered allmulticast mode [ 148.463265][ T7002] bond_slave_0: entered allmulticast mode [ 148.471172][ T7002] bond_slave_1: entered allmulticast mode [ 148.502464][ T7002] bridge0: entered allmulticast mode [ 148.511369][ T7002] dummy0: entered allmulticast mode [ 148.567510][ T5942] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 148.605528][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.639081][ T5942] usb 3-1: Product: syz [ 148.643643][ T5942] usb 3-1: Manufacturer: syz [ 148.663134][ T5942] usb 3-1: SerialNumber: syz [ 148.698654][ T5942] usb 3-1: config 0 descriptor?? [ 148.780443][ T7004] fuse: Unknown parameter 'grup_id' [ 148.831940][ T43] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 148.912135][ T5942] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 149.168243][ T5958] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 149.240583][ T7023] netlink: 12 bytes leftover after parsing attributes in process `syz.4.273'. [ 149.341464][ T5958] usb 4-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 149.359647][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.401888][ T5958] pwc: Logitech/Cisco VT Camera webcam detected. [ 149.486569][ T7035] netlink: 16 bytes leftover after parsing attributes in process `syz.4.277'. [ 149.592047][ T5958] pwc: Failed to set LED on/off time (-71) [ 149.606460][ T5958] pwc: send_video_command error -71 [ 149.614194][ T5958] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 149.626127][ T5958] Philips webcam 4-1:127.0: probe with driver Philips webcam failed with error -71 [ 149.648601][ T5958] usb 4-1: USB disconnect, device number 18 [ 149.884841][ T5958] usb 2-1: USB disconnect, device number 17 [ 150.288004][ T43] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 150.380060][ T5942] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 150.410553][ T5942] usb 3-1: USB disconnect, device number 15 [ 150.492424][ T43] usb 5-1: config 0 has an invalid interface number: 207 but max is 0 [ 150.547092][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.569686][ T43] usb 5-1: config 0 has no interface number 0 [ 150.580639][ T43] usb 5-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 150.608825][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.645938][ T43] usb 5-1: Product: syz [ 150.655965][ T43] usb 5-1: Manufacturer: syz [ 150.683273][ T43] usb 5-1: SerialNumber: syz [ 150.729302][ T43] usb 5-1: config 0 descriptor?? [ 150.963249][ T43] qmi_wwan 5-1:0.207: probe with driver qmi_wwan failed with error -22 [ 151.009080][ T43] usb 5-1: USB disconnect, device number 23 [ 151.018360][ T5942] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 151.228327][ T5942] usb 4-1: Using ep0 maxpacket: 8 [ 151.279963][ T5942] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 151.322398][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.334754][ T5942] usb 4-1: Product: syz [ 151.342194][ T5942] usb 4-1: Manufacturer: syz [ 151.353608][ T5942] usb 4-1: SerialNumber: syz [ 151.363863][ T5942] usb 4-1: config 0 descriptor?? [ 151.607816][ T5942] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 151.666821][ T30] audit: type=1326 audit(1758898935.602:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12bdb8eec9 code=0x7ffc0000 [ 151.722875][ T30] audit: type=1326 audit(1758898935.632:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f12bdb8eec9 code=0x7ffc0000 [ 151.812675][ T30] audit: type=1326 audit(1758898935.632:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12bdb8eec9 code=0x7ffc0000 [ 151.836941][ T30] audit: type=1326 audit(1758898935.632:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f12bdb8eec9 code=0x7ffc0000 [ 151.919153][ T30] audit: type=1326 audit(1758898935.642:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12bdb8eec9 code=0x7ffc0000 [ 151.948768][ T30] audit: type=1326 audit(1758898935.642:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f12bdb8eec9 code=0x7ffc0000 [ 152.027107][ T30] audit: type=1326 audit(1758898935.642:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12bdb8eec9 code=0x7ffc0000 [ 152.051947][ T30] audit: type=1326 audit(1758898935.642:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f12bdb8eacb code=0x7ffc0000 [ 152.076000][ T30] audit: type=1326 audit(1758898935.692:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f12bdb8eacb code=0x7ffc0000 [ 152.101685][ T30] audit: type=1326 audit(1758898935.692:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f12bdb8eacb code=0x7ffc0000 [ 152.248152][ T43] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 152.444934][ T43] usb 2-1: unable to get BOS descriptor or descriptor too short [ 152.455337][ T43] usb 2-1: not running at top speed; connect to a high speed hub [ 152.474884][ T43] usb 2-1: config 1 has an invalid interface number: 138 but max is 0 [ 152.492782][ T43] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.543845][ T43] usb 2-1: config 1 has no interface number 0 [ 152.552696][ T43] usb 2-1: config 1 interface 138 altsetting 252 endpoint 0x7 has invalid wMaxPacketSize 0 [ 152.564466][ T43] usb 2-1: config 1 interface 138 has no altsetting 0 [ 152.655546][ T43] usb 2-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 152.678460][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.694687][ T43] usb 2-1: Product: syz [ 152.701076][ T43] usb 2-1: Manufacturer: syz [ 152.832896][ T5958] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 152.845123][ T43] usb 2-1: SerialNumber: syz [ 153.000282][ T5958] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 153.018143][ T5958] usb 5-1: config 0 has no interface number 0 [ 153.037824][ T5958] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice=fe.ea [ 153.047324][ T5958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.094451][ T5958] usb 5-1: Product: syz [ 153.105171][ T5958] usb 5-1: Manufacturer: syz [ 153.114835][ T5958] usb 5-1: SerialNumber: syz [ 153.219325][ T5958] usb 5-1: config 0 descriptor?? [ 153.247500][ T5958] usb 5-1: unknown interface protocol 0xf6, assuming v1 [ 153.256398][ T5958] usb 5-1: cannot find UAC_HEADER [ 153.304876][ T5942] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 153.331710][ T5942] usb 4-1: USB disconnect, device number 19 [ 153.419570][ T5958] snd-usb-audio 5-1:0.143: probe with driver snd-usb-audio failed with error -22 [ 153.437449][ T5958] usb 5-1: USB disconnect, device number 24 [ 154.305866][ T5972] udevd[5972]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.143/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 154.716190][ T43] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 154.967998][ T43] usb 2-1: USB disconnect, device number 18 [ 155.181329][ T5990] udevd[5990]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.138/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 155.181705][ T7138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.303'. [ 155.326478][ T7138] veth0_macvtap: left promiscuous mode [ 155.388586][ T5958] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 155.457962][ T43] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 155.569541][ T5958] usb 1-1: unable to get BOS descriptor or descriptor too short [ 155.585773][ T5958] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 155.603276][ T5958] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 155.657394][ T5958] usb 1-1: config 1 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 155.674568][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 155.708166][ T5958] usb 1-1: config 1 interface 0 has no altsetting 0 [ 155.716290][ T43] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 155.727581][ T43] usb 2-1: config 0 has no interface number 0 [ 155.734299][ T5958] usb 1-1: config 1 interface 0 has no altsetting 1 [ 155.742568][ T43] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 155.755992][ T5958] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 155.766070][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.779552][ T43] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 155.804210][ T5958] usb 1-1: Product: syz [ 155.809406][ T43] usb 2-1: config 0 interface 41 has no altsetting 0 [ 155.816419][ T5958] usb 1-1: Manufacturer: syz [ 155.825774][ T5958] usb 1-1: SerialNumber: syz [ 155.833808][ T43] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 155.844775][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.875284][ T43] usb 2-1: Product: syz [ 155.880244][ T43] usb 2-1: Manufacturer: syz [ 155.884932][ T43] usb 2-1: SerialNumber: syz [ 155.939564][ T43] usb 2-1: config 0 descriptor?? [ 155.959239][ T7134] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 155.966742][ T7134] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 156.083336][ T5958] smsusb:smsusb_probe: board id=8, interface number 0 [ 156.091555][ T5958] usb 1-1: selecting invalid altsetting 0 [ 156.097710][ T5958] smsusb:smsusb_probe: usb_set_interface failed, rc -22 [ 156.136850][ T5958] smsusb 1-1:1.0: probe with driver smsusb failed with error -22 [ 156.179109][ T7172] netlink: 20 bytes leftover after parsing attributes in process `syz.3.311'. [ 156.221100][ T5958] usb 1-1: USB disconnect, device number 14 [ 156.313407][ T7134] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 156.328038][ T5942] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 156.336004][ T7134] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 156.488525][ T5942] usb 3-1: Using ep0 maxpacket: 32 [ 156.505729][ T5942] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 156.525719][ T5942] usb 3-1: config 0 has no interface number 0 [ 156.544936][ T5942] usb 3-1: config 0 interface 184 has no altsetting 0 [ 156.585143][ T5942] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 156.622897][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.647074][ T5942] usb 3-1: Product: syz [ 156.656690][ T5942] usb 3-1: Manufacturer: syz [ 156.671641][ T5942] usb 3-1: SerialNumber: syz [ 156.745604][ T5942] usb 3-1: config 0 descriptor?? [ 156.772902][ T5942] smsc75xx v1.0.0 [ 156.808384][ T43] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 157.170635][ T43] dm9601 2-1:0.41 (unnamed net_device) (uninitialized): Error reading chip ID [ 157.184548][ T43] sr9700 2-1:0.41: probe with driver sr9700 failed with error -71 [ 157.268019][ T43] usb 2-1: USB disconnect, device number 19 [ 157.890493][ T7182] netlink: 16 bytes leftover after parsing attributes in process `syz.1.315'. [ 157.928321][ T7182] IPv6: NLM_F_CREATE should be specified when creating new route [ 157.978008][ T43] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 157.983322][ T7182] netlink: 16 bytes leftover after parsing attributes in process `syz.1.315'. [ 158.015635][ T5942] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 158.029415][ T5942] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 158.059469][ T5942] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 158.075508][ T5965] IPVS: starting estimator thread 0... [ 158.082237][ T7182] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 158.098240][ T5942] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 158.112896][ T5942] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 158.134273][ T5942] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 158.178271][ T7186] IPVS: using max 30 ests per chain, 72000 per kthread [ 158.189124][ T5942] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 158.204305][ T43] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 158.227978][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.261462][ T43] usb 5-1: config 0 descriptor?? [ 158.269357][ T5942] usb 3-1: USB disconnect, device number 16 [ 158.350880][ T7193] input: syz0 as /devices/virtual/input/input13 [ 158.493779][ T7179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.528273][ T7179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.627987][ T5965] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 158.809787][ T5965] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 158.841459][ T5965] usb 2-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 158.856955][ T43] ath6kl: Failed to submit usb control message: -71 [ 158.862561][ T5965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.872276][ T43] ath6kl: unable to send the bmi data to the device: -71 [ 158.887185][ T43] ath6kl: Unable to send get target info: -71 [ 158.914566][ T5965] usb 2-1: config 0 descriptor?? [ 158.936403][ T43] ath6kl: Failed to init ath6kl core: -71 [ 158.969906][ T43] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 159.017811][ T43] usb 5-1: USB disconnect, device number 25 [ 159.379007][ T5965] sigmamicro 0003:1C4F:0059.0009: item fetching failed at offset 0/5 [ 159.419403][ T5965] sigmamicro 0003:1C4F:0059.0009: probe with driver sigmamicro failed with error -22 [ 159.620422][ T5958] usb 2-1: USB disconnect, device number 20 [ 159.769370][ T7231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.328'. [ 159.831184][ T3565] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.846564][ T7231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.328'. [ 159.865060][ T3565] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.882515][ T3565] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.904260][ T3565] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.528482][ T5942] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 160.691491][ T5942] usb 2-1: config 0 has an invalid interface number: 74 but max is 1 [ 160.708863][ T5942] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.738159][ T5942] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 160.753522][ T5942] usb 2-1: config 0 has no interface number 0 [ 160.767977][ T5942] usb 2-1: config 0 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 160.813359][ T5942] usb 2-1: config 0 interface 74 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 160.846013][ T5942] usb 2-1: config 0 interface 74 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 160.857427][ T5965] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 160.881519][ T5942] usb 2-1: config 0 interface 74 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 160.899671][ T5942] usb 2-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66 [ 160.914181][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.924363][ T5942] usb 2-1: Product: syz [ 160.929165][ T5942] usb 2-1: Manufacturer: syz [ 160.933948][ T5942] usb 2-1: SerialNumber: syz [ 160.971731][ T5942] usb 2-1: config 0 descriptor?? [ 161.030192][ T5965] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.051912][ T5965] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.084551][ T5965] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 161.098640][ T5965] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 161.107739][ T5965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.123696][ T5965] usb 1-1: config 0 descriptor?? [ 161.168239][ T5958] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 161.196395][ T5942] cypress_m8 2-1:0.74: HID->COM RS232 Adapter converter detected [ 161.242664][ T5942] usb 2-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 161.258480][ T5942] usb 2-1: USB disconnect, device number 21 [ 161.274428][ T5942] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 161.291735][ T5942] cypress_m8 2-1:0.74: device disconnected [ 161.317954][ T5958] usb 3-1: Using ep0 maxpacket: 8 [ 161.326019][ T5958] usb 3-1: config 252 has an invalid interface number: 3 but max is 0 [ 161.334368][ T5958] usb 3-1: config 252 has no interface number 0 [ 161.362997][ T5958] usb 3-1: too many endpoints for config 252 interface 3 altsetting 0: 48, using maximum allowed: 30 [ 161.374338][ T5958] usb 3-1: config 252 interface 3 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 161.390389][ T5958] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 161.399722][ T5958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.548951][ T5965] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 161.661747][ T5958] usb 3-1: string descriptor 0 read error: -71 [ 161.779745][ T5958] pvrusb2: Hardware description: Terratec Grabster AV400 [ 161.801812][ T5958] pvrusb2: ********** [ 161.811654][ T5958] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 161.858253][ T5958] pvrusb2: Important functionality might not be entirely working. [ 161.868323][ T5958] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 161.912570][ T5958] pvrusb2: ********** [ 161.921833][ T5958] usb 3-1: USB disconnect, device number 17 [ 161.929419][ T5958] pvrusb2: Device being rendered inoperable [ 162.172467][ T7280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.212211][ T7280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.302975][ T5965] usb 1-1: USB disconnect, device number 15 [ 162.338091][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 162.378310][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 162.378326][ T30] audit: type=1326 audit(1758898946.312:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7278 comm="syz.4.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12bdb8eec9 code=0x7ffc0000 [ 162.537982][ T30] audit: type=1326 audit(1758898946.312:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7278 comm="syz.4.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12bdb8eec9 code=0x7ffc0000 [ 162.570672][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 162.584479][ T30] audit: type=1326 audit(1758898946.312:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7278 comm="syz.4.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f12bdb8eec9 code=0x7ffc0000 [ 162.615870][ T24] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 162.626199][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.724994][ T24] usb 4-1: config 0 descriptor?? [ 162.731784][ T30] audit: type=1326 audit(1758898946.362:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7278 comm="syz.4.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12bdb8eec9 code=0x7ffc0000 [ 162.837210][ T30] audit: type=1326 audit(1758898946.362:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7278 comm="syz.4.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f12bdb8eec9 code=0x7ffc0000 [ 162.863375][ T7300] openvswitch: netlink: Missing key (keys=40, expected=80) [ 162.919152][ T30] audit: type=1326 audit(1758898946.362:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7278 comm="syz.4.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12bdb8eec9 code=0x7ffc0000 [ 163.094272][ T30] audit: type=1326 audit(1758898946.362:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7278 comm="syz.4.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f12bdb8eec9 code=0x7ffc0000 [ 163.126661][ T30] audit: type=1326 audit(1758898946.362:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7278 comm="syz.4.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f12bdb2af79 code=0x7ffc0000 [ 163.161473][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 163.167703][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 163.227453][ T24] usb 4-1: USB disconnect, device number 20 [ 163.245671][ T30] audit: type=1326 audit(1758898946.362:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7278 comm="syz.4.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12bdb8eec9 code=0x7ffc0000 [ 163.312304][ T30] audit: type=1326 audit(1758898946.362:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7278 comm="syz.4.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12bdb8eec9 code=0x7ffc0000 [ 164.137981][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 164.293764][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 164.303712][ T9] usb 5-1: config 0 has an invalid interface number: 125 but max is 0 [ 164.313042][ T5965] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 164.321267][ T9] usb 5-1: config 0 has no interface number 0 [ 164.332827][ T9] usb 5-1: New USB device found, idVendor=04e8, idProduct=a100, bcdDevice=b2.9d [ 164.342964][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.358020][ T5942] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 164.374401][ T9] usb 5-1: Product: syz [ 164.379548][ T9] usb 5-1: Manufacturer: syz [ 164.384161][ T9] usb 5-1: SerialNumber: syz [ 164.395729][ T9] usb 5-1: config 0 descriptor?? [ 164.404035][ T9] ax88179_178a 5-1:0.125: probe with driver ax88179_178a failed with error -22 [ 164.458726][ T5965] usb 4-1: device descriptor read/64, error -71 [ 164.549384][ T5942] usb 1-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 164.564405][ T5942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.576440][ T5942] usb 1-1: config 0 descriptor?? [ 164.578114][ T5958] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 164.649531][ T7329] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 164.668344][ T7329] block device autoloading is deprecated and will be removed. [ 164.718677][ T5942] usb 1-1: selecting invalid altsetting 1 [ 164.768365][ T5965] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 164.825325][ T5972] udevd[5972]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory [ 164.848261][ T5958] usb 2-1: Using ep0 maxpacket: 8 [ 164.850118][ T5942] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 164.874793][ T5958] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 164.884406][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.900672][ T5958] usb 2-1: Product: syz [ 164.914551][ T5958] usb 2-1: Manufacturer: syz [ 164.933293][ T5958] usb 2-1: SerialNumber: syz [ 164.976105][ T5958] usb 2-1: config 0 descriptor?? [ 165.004095][ T5958] gspca_main: se401-2.14.0 probing 047d:5003 [ 165.067019][ T5965] usb 4-1: device descriptor read/64, error -71 [ 165.078759][ T5972] udevd[5972]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 165.097118][ T5942] usb 1-1: USB disconnect, device number 16 [ 165.166639][ T9] usb 5-1: USB disconnect, device number 26 [ 165.199575][ T5965] usb usb4-port1: attempt power cycle [ 165.448894][ T5958] gspca_se401: Wrong descriptor type [ 165.548534][ T5965] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 165.568889][ T5965] usb 4-1: device descriptor read/8, error -71 [ 165.794993][ T5958] usb 2-1: USB disconnect, device number 22 [ 165.808429][ T5965] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 165.861041][ T5965] usb 4-1: device descriptor read/8, error -71 [ 165.988592][ T5965] usb usb4-port1: unable to enumerate USB device [ 166.038117][ T7348] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 166.038117][ T7348] The task syz.2.358 (7348) triggered the difference, watch for misbehavior. [ 166.328460][ T7354] binder: 7352:7354 ioctl 541b 0 returned -22 [ 166.858051][ T5958] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 167.009492][ T5965] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 167.085987][ T5958] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.116519][ T5958] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 167.141348][ T5958] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 167.154018][ T5958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.166419][ T5958] usb 2-1: config 0 descriptor?? [ 167.178181][ T5965] usb 3-1: Using ep0 maxpacket: 16 [ 167.190083][ T5965] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 167.207486][ T5965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 167.232126][ T5965] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 167.247955][ T5965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.271476][ T5965] usb 3-1: Product: syz [ 167.275685][ T5965] usb 3-1: Manufacturer: syz [ 167.287147][ T5965] usb 3-1: SerialNumber: syz [ 167.295769][ T5965] usb 3-1: config 0 descriptor?? [ 167.304404][ T5965] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 167.314043][ T5965] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 167.380701][ T7360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.390829][ T7360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.478354][ T43] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 167.563537][ T9] usb 2-1: USB disconnect, device number 23 [ 167.641270][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.651735][ T43] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 167.661527][ T43] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 167.671093][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.682714][ T43] usb 4-1: config 0 descriptor?? [ 167.701124][ T43] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 167.706624][ T5965] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 167.710036][ T43] dvb-usb: bulk message failed: -22 (3/0) [ 167.726298][ T43] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 167.743974][ T5965] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 167.752340][ T5965] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 167.752365][ T43] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 167.752523][ T43] usb 4-1: media controller created [ 167.772741][ T5965] em28xx 3-1:0.0: No AC97 audio processor [ 167.784259][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 167.811789][ T43] dvb-usb: bulk message failed: -22 (6/0) [ 167.830792][ T43] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 167.850899][ T43] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 167.872925][ T43] dvb-usb: schedule remote query interval to 150 msecs. [ 167.895434][ T5965] usb 3-1: USB disconnect, device number 18 [ 167.898860][ T43] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 167.904063][ T7367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.961641][ T7367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.975078][ T5965] em28xx 3-1:0.0: Disconnecting em28xx [ 168.007701][ T5965] em28xx 3-1:0.0: Freeing device [ 168.049943][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 168.063655][ T43] dvb-usb: error while querying for an remote control event. [ 168.227956][ T5958] dvb-usb: bulk message failed: -22 (1/0) [ 168.233887][ T5958] dvb-usb: error while querying for an remote control event. [ 168.367959][ T5965] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 168.410387][ T5958] dvb-usb: bulk message failed: -22 (1/0) [ 168.430365][ T5958] dvb-usb: error while querying for an remote control event. [ 168.569157][ T5965] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 168.576850][ T5965] usb 3-1: can't read configurations, error -71 [ 168.598225][ T5958] dvb-usb: bulk message failed: -22 (1/0) [ 168.604197][ T5958] dvb-usb: error while querying for an remote control event. [ 168.742706][ T7397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.752713][ T7406] netlink: 104 bytes leftover after parsing attributes in process `syz.2.374'. [ 168.771910][ T7397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.788383][ T5958] dvb-usb: bulk message failed: -22 (1/0) [ 168.804158][ T9] usb 4-1: USB disconnect, device number 25 [ 168.805741][ T5958] dvb-usb: error while querying for an remote control event. [ 168.885456][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 169.106296][ T7406] pim6reg: entered allmulticast mode [ 169.311386][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 169.488045][ T5964] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 169.510524][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 169.520207][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.543884][ T9] usb 4-1: config 0 descriptor?? [ 169.571240][ T9] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 169.586747][ T7406] pim6reg: left allmulticast mode [ 169.732546][ T5964] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 169.751813][ T5964] usb 2-1: New USB device strings: Mfr=1, Product=9, SerialNumber=3 [ 169.772875][ T5964] usb 2-1: Product: syz [ 169.777104][ T5964] usb 2-1: Manufacturer: syz [ 169.791754][ T5964] usb 2-1: SerialNumber: syz [ 169.804737][ T5964] usb 2-1: config 0 descriptor?? [ 169.828716][ T5964] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 170.404041][ T7430] block device autoloading is deprecated and will be removed. [ 170.490595][ T7432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.542478][ T7432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.826814][ T5958] usb 2-1: USB disconnect, device number 24 [ 171.095401][ T9] gspca_stv06xx: HDCS-1020 sensor detected [ 171.142199][ T7442] netlink: 52 bytes leftover after parsing attributes in process `syz.2.382'. [ 171.152080][ T3596] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 171.305655][ T7412] netlink: 'syz.3.375': attribute type 30 has an invalid length. [ 171.307229][ T7445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.384'. [ 171.314827][ T7412] netlink: 32 bytes leftover after parsing attributes in process `syz.3.375'. [ 171.948278][ T5964] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 172.114302][ T9] STV06xx 4-1:0.0: probe with driver STV06xx failed with error -71 [ 172.142967][ T9] usb 4-1: USB disconnect, device number 26 [ 172.244195][ T5964] usb 2-1: unable to get BOS descriptor or descriptor too short [ 172.270526][ T5964] usb 2-1: config 7 has an invalid interface number: 67 but max is 0 [ 172.318065][ T5964] usb 2-1: config 7 has no interface number 0 [ 172.371340][ T5964] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 172.389323][ T7458] binder: BINDER_SET_CONTEXT_MGR already set [ 172.395520][ T7458] binder: 7457:7458 ioctl 4018620d 200000004a80 returned -16 [ 172.411453][ T5964] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.426067][ T5964] usb 2-1: Product: 㯑 [ 172.467420][ T7461] pim6reg: entered allmulticast mode [ 173.173665][ T7477] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 173.248323][ T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 173.418464][ T5964] usb 2-1: USB disconnect, device number 25 [ 173.428816][ T24] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 173.442562][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.452045][ T24] usb 3-1: Product: syz [ 173.456300][ T24] usb 3-1: Manufacturer: syz [ 173.462393][ T24] usb 3-1: SerialNumber: syz [ 173.474261][ T24] usb 3-1: config 0 descriptor?? [ 173.738211][ T5965] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 173.908248][ T5965] usb 5-1: Using ep0 maxpacket: 8 [ 173.913027][ T24] usb 3-1: USB disconnect, device number 21 [ 173.929501][ T5965] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 174.120747][ T5965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.129844][ T5965] usb 5-1: Product: syz [ 174.134030][ T5965] usb 5-1: Manufacturer: syz [ 174.201355][ T5965] usb 5-1: SerialNumber: syz [ 174.257797][ T5965] usb 5-1: config 0 descriptor?? [ 174.295740][ T30] kauditd_printk_skb: 85 callbacks suppressed [ 174.295758][ T30] audit: type=1326 audit(1758898958.232:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7492 comm="syz.1.398" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a76d8eec9 code=0x0 [ 174.483557][ T5965] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 174.807190][ T7501] program syz.2.399 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.569102][ T7483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.579355][ T7483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.588016][ T9] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 175.692959][ T5965] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 175.710366][ T5965] usb 5-1: USB disconnect, device number 27 [ 175.769839][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.808185][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 175.860473][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 175.869851][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.892504][ T9] usb 2-1: Product: syz [ 175.915349][ T9] usb 2-1: Manufacturer: syz [ 175.936528][ T9] usb 2-1: SerialNumber: syz [ 176.188924][ T9] usb 2-1: 0:2 : does not exist [ 176.242670][ T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 176.318899][ T9] usb 2-1: USB disconnect, device number 26 [ 176.452633][ T5972] udevd[5972]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.644756][ T24] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 176.743361][ T7530] netlink: 28 bytes leftover after parsing attributes in process `syz.1.408'. [ 176.798425][ T7532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.407'. [ 176.836888][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 176.846115][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 176.856766][ T24] usb 4-1: config 0 has an invalid interface number: 165 but max is 0 [ 176.865415][ T24] usb 4-1: config 0 has no interface number 0 [ 177.169045][ T24] usb 4-1: config 0 interface 165 has no altsetting 0 [ 177.208192][ T24] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=9b.2e [ 177.557912][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.591483][ T24] usb 4-1: Product: syz [ 177.597597][ T24] usb 4-1: Manufacturer: syz [ 177.617418][ T7536] kAFS: unable to lookup cell '/,' [ 177.665693][ T24] usb 4-1: SerialNumber: syz [ 177.714852][ T24] usb 4-1: config 0 descriptor?? [ 177.725550][ T7545] netlink: 16 bytes leftover after parsing attributes in process `syz.0.411'. [ 177.951469][ T7516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.974981][ T7516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.050719][ T24] comedi comedi5: Wrong number of endpoints [ 178.056666][ T24] ni6501 4-1:0.165: driver 'ni6501' failed to auto-configure device. [ 178.065089][ T7555] FAULT_INJECTION: forcing a failure. [ 178.065089][ T7555] name failslab, interval 1, probability 0, space 0, times 1 [ 178.133122][ T24] usb 4-1: USB disconnect, device number 27 [ 178.201429][ T7555] CPU: 0 UID: 0 PID: 7555 Comm: syz.0.414 Not tainted syzkaller #0 PREEMPT(full) [ 178.201458][ T7555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 178.201470][ T7555] Call Trace: [ 178.201478][ T7555] [ 178.201487][ T7555] dump_stack_lvl+0x189/0x250 [ 178.201516][ T7555] ? __pfx____ratelimit+0x10/0x10 [ 178.201537][ T7555] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.201561][ T7555] ? __pfx__printk+0x10/0x10 [ 178.201594][ T7555] ? __pfx___might_resched+0x10/0x10 [ 178.201612][ T7555] ? fs_reclaim_acquire+0x7d/0x100 [ 178.201636][ T7555] should_fail_ex+0x414/0x560 [ 178.201671][ T7555] should_failslab+0xa8/0x100 [ 178.201701][ T7555] __kmalloc_noprof+0xcb/0x4f0 [ 178.201726][ T7555] ? kfree+0x4d/0x440 [ 178.201748][ T7555] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 178.201776][ T7555] tomoyo_realpath_from_path+0xe3/0x5d0 [ 178.201799][ T7555] ? tomoyo_domain+0xd9/0x130 [ 178.201826][ T7555] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 178.201853][ T7555] tomoyo_path_number_perm+0x1e8/0x5a0 [ 178.201880][ T7555] ? register_lock_class+0x51/0x320 [ 178.201910][ T7555] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 178.201939][ T7555] ? __lock_acquire+0xab9/0xd20 [ 178.202010][ T7555] ? __pfx_current_check_access_path+0x10/0x10 [ 178.202039][ T7555] tomoyo_path_mknod+0x142/0x190 [ 178.202065][ T7555] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 178.202090][ T7555] ? __pfx_filename_create+0x10/0x10 [ 178.202125][ T7555] security_path_mknod+0x17e/0x3a0 [ 178.202148][ T7555] do_mknodat+0x274/0x4d0 [ 178.202171][ T7555] ? __pfx_do_mknodat+0x10/0x10 [ 178.202193][ T7555] ? getname_flags+0x1e5/0x540 [ 178.202214][ T7555] __x64_sys_mknodat+0xa7/0xc0 [ 178.202238][ T7555] do_syscall_64+0xfa/0x3b0 [ 178.202257][ T7555] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.202277][ T7555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.202295][ T7555] ? clear_bhb_loop+0x60/0xb0 [ 178.202319][ T7555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.202337][ T7555] RIP: 0033:0x7f07c3b8eec9 [ 178.202355][ T7555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.202371][ T7555] RSP: 002b:00007f07c4a18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 178.202392][ T7555] RAX: ffffffffffffffda RBX: 00007f07c3de5fa0 RCX: 00007f07c3b8eec9 [ 178.202407][ T7555] RDX: 0000000000000400 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 178.202421][ T7555] RBP: 00007f07c4a18090 R08: 0000000000000000 R09: 0000000000000000 [ 178.202432][ T7555] R10: 0000000000000103 R11: 0000000000000246 R12: 0000000000000001 [ 178.202448][ T7555] R13: 00007f07c3de6038 R14: 00007f07c3de5fa0 R15: 00007f07c3f0fa28 [ 178.202478][ T7555] [ 178.269189][ T7555] ERROR: Out of memory at tomoyo_realpath_from_path. [ 178.272335][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.483507][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.489503][ C0] hrtimer: interrupt took 281651099 ns [ 178.589552][ C0] vkms_vblank_simulate: vblank timer overrun [ 179.113109][ T7584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.423'. [ 179.166423][ T7586] kAFS: unable to lookup cell '/,' [ 179.188387][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 179.318120][ T9] usb 4-1: device descriptor read/64, error -71 [ 179.562017][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 179.717329][ T9] usb 4-1: device descriptor read/64, error -71 [ 179.766384][ T7595] netlink: 24 bytes leftover after parsing attributes in process `syz.0.424'. [ 179.839262][ T9] usb usb4-port1: attempt power cycle [ 180.037291][ T7604] FAULT_INJECTION: forcing a failure. [ 180.037291][ T7604] name failslab, interval 1, probability 0, space 0, times 0 [ 180.053462][ T7604] CPU: 1 UID: 0 PID: 7604 Comm: syz.2.429 Not tainted syzkaller #0 PREEMPT(full) [ 180.053490][ T7604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 180.053502][ T7604] Call Trace: [ 180.053509][ T7604] [ 180.053517][ T7604] dump_stack_lvl+0x189/0x250 [ 180.053546][ T7604] ? __pfx____ratelimit+0x10/0x10 [ 180.053568][ T7604] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.053592][ T7604] ? __pfx__printk+0x10/0x10 [ 180.053622][ T7604] ? __pfx___might_resched+0x10/0x10 [ 180.053642][ T7604] ? fs_reclaim_acquire+0x7d/0x100 [ 180.053666][ T7604] should_fail_ex+0x414/0x560 [ 180.053701][ T7604] should_failslab+0xa8/0x100 [ 180.053732][ T7604] __kmalloc_noprof+0xcb/0x4f0 [ 180.053758][ T7604] ? tomoyo_encode+0x28b/0x550 [ 180.053784][ T7604] tomoyo_encode+0x28b/0x550 [ 180.053811][ T7604] tomoyo_realpath_from_path+0x58d/0x5d0 [ 180.053845][ T7604] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 180.053873][ T7604] tomoyo_path_number_perm+0x1e8/0x5a0 [ 180.053900][ T7604] ? register_lock_class+0x51/0x320 [ 180.053939][ T7604] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 180.053969][ T7604] ? __lock_acquire+0xab9/0xd20 [ 180.054043][ T7604] ? __pfx_current_check_access_path+0x10/0x10 [ 180.054072][ T7604] tomoyo_path_mknod+0x142/0x190 [ 180.054100][ T7604] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 180.054128][ T7604] ? __pfx_filename_create+0x10/0x10 [ 180.054159][ T7604] security_path_mknod+0x17e/0x3a0 [ 180.054185][ T7604] do_mknodat+0x274/0x4d0 [ 180.054213][ T7604] ? __pfx_do_mknodat+0x10/0x10 [ 180.054238][ T7604] ? getname_flags+0x1e5/0x540 [ 180.054262][ T7604] __x64_sys_mknodat+0xa7/0xc0 [ 180.054290][ T7604] do_syscall_64+0xfa/0x3b0 [ 180.054310][ T7604] ? lockdep_hardirqs_on+0x9c/0x150 [ 180.054331][ T7604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.054351][ T7604] ? clear_bhb_loop+0x60/0xb0 [ 180.054376][ T7604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.054395][ T7604] RIP: 0033:0x7f58d598eec9 [ 180.054412][ T7604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.054430][ T7604] RSP: 002b:00007f58d67a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 180.054451][ T7604] RAX: ffffffffffffffda RBX: 00007f58d5be5fa0 RCX: 00007f58d598eec9 [ 180.054467][ T7604] RDX: 0000000000000400 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 180.054481][ T7604] RBP: 00007f58d67a4090 R08: 0000000000000000 R09: 0000000000000000 [ 180.054493][ T7604] R10: 0000000000000103 R11: 0000000000000246 R12: 0000000000000001 [ 180.054505][ T7604] R13: 00007f58d5be6038 R14: 00007f58d5be5fa0 R15: 00007f58d5d0fa28 [ 180.054538][ T7604] [ 180.054559][ T7604] ERROR: Out of memory at tomoyo_realpath_from_path. [ 180.178133][ T5874] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 180.181606][ T43] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 180.208425][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 180.373506][ T43] usb 2-1: device descriptor read/64, error -71 [ 180.378644][ T9] usb 4-1: device descriptor read/8, error -71 [ 180.393228][ T30] audit: type=1326 audit(1758898964.322:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz.2.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d598eec9 code=0x7ffc0000 [ 180.418056][ T30] audit: type=1326 audit(1758898964.322:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz.2.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f58d598eec9 code=0x7ffc0000 [ 180.438027][ T5874] usb 5-1: Using ep0 maxpacket: 32 [ 180.449539][ T5874] usb 5-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.452228][ T30] audit: type=1326 audit(1758898964.322:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz.2.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d598eec9 code=0x7ffc0000 [ 180.461951][ T5874] usb 5-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.484315][ T30] audit: type=1326 audit(1758898964.322:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz.2.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f58d598eec9 code=0x7ffc0000 [ 180.516115][ T30] audit: type=1326 audit(1758898964.322:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz.2.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d598eec9 code=0x7ffc0000 [ 180.539059][ T5874] usb 5-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 180.539095][ T5874] usb 5-1: config 0 interface 0 has no altsetting 0 [ 180.539132][ T5874] usb 5-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 180.539156][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.569753][ T5874] usb 5-1: config 0 descriptor?? [ 180.608143][ T30] audit: type=1326 audit(1758898964.322:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz.2.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f58d598eec9 code=0x7ffc0000 [ 180.630585][ T30] audit: type=1326 audit(1758898964.322:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz.2.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d598eec9 code=0x7ffc0000 [ 180.648148][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 180.654098][ T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 180.669960][ T30] audit: type=1326 audit(1758898964.322:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz.2.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f58d598eec9 code=0x7ffc0000 [ 180.693273][ T30] audit: type=1326 audit(1758898964.322:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz.2.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d598eec9 code=0x7ffc0000 [ 180.718359][ T30] audit: type=1326 audit(1758898964.322:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz.2.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f58d598eec9 code=0x7ffc0000 [ 180.722357][ T9] usb 4-1: device descriptor read/8, error -71 [ 180.741847][ T43] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 180.837962][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 180.846597][ T24] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 180.855257][ T24] usb 1-1: config 0 has no interface number 0 [ 180.861523][ T24] usb 1-1: config 0 interface 12 has no altsetting 0 [ 180.873295][ T24] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 180.882535][ T24] usb 1-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 180.892605][ T9] usb usb4-port1: unable to enumerate USB device [ 180.895351][ T43] usb 2-1: device descriptor read/64, error -71 [ 180.905606][ T24] usb 1-1: Product: syz [ 180.911138][ T24] usb 1-1: Manufacturer: syz [ 180.915948][ T24] usb 1-1: SerialNumber: syz [ 180.923340][ T24] usb 1-1: config 0 descriptor?? [ 181.008285][ T43] usb usb2-port1: attempt power cycle [ 181.019549][ T5874] logitech-hidpp-device 0003:046D:C262.000B: hidraw0: USB HID v0.00 Device [HID 046d:c262] on usb-dummy_hcd.4-1/input0 [ 181.361793][ T7617] input: syz1 as /devices/virtual/input/input15 [ 181.378044][ T43] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 181.420524][ T43] usb 2-1: device descriptor read/8, error -71 [ 181.678060][ T43] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 181.701272][ T43] usb 2-1: device descriptor read/8, error -71 [ 181.818633][ T43] usb usb2-port1: unable to enumerate USB device [ 182.118151][ T5874] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 182.332265][ T5874] usb 3-1: Using ep0 maxpacket: 8 [ 182.349925][ T5874] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 182.358335][ T5874] usb 3-1: config 0 has no interface number 0 [ 182.364711][ T5874] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 182.383670][ T5874] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 182.406952][ T5874] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 182.432065][ T5874] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 182.453096][ T5874] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 182.497680][ T5874] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 182.526568][ T24] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 182.539941][ T24] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 182.547336][ T24] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 182.555082][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.570308][ T24] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 182.609366][ T5874] usb 3-1: config 0 descriptor?? [ 182.617498][ T24] usb 1-1: USB disconnect, device number 17 [ 182.651643][ T5874] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 182.850447][ T7620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.875573][ T7620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.915636][ T5964] usb 3-1: USB disconnect, device number 22 [ 182.933139][ T5964] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 183.042518][ T7624] syz.3.435 (7624): drop_caches: 2 [ 183.052184][ T24] usb 5-1: USB disconnect, device number 28 [ 183.208000][ T5874] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 183.484481][ T5874] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 183.494424][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.565272][ T5874] usb 2-1: config 0 descriptor?? [ 183.580063][ T5874] cp210x 2-1:0.0: cp210x converter detected [ 183.983199][ T5874] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 183.991286][ T5874] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 184.001841][ T5874] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 184.014594][ T5874] usb 2-1: cp210x converter now attached to ttyUSB0 [ 184.095623][ T43] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 184.100371][ T5874] usb 2-1: USB disconnect, device number 31 [ 184.114491][ T5874] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 184.124675][ T5874] cp210x 2-1:0.0: device disconnected [ 184.260341][ T43] usb 4-1: config index 0 descriptor too short (expected 165, got 18) [ 184.294083][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.326467][ T43] usb 4-1: config 0 has no interfaces? [ 184.384131][ T43] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 184.418822][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.429875][ T43] usb 4-1: Product: syz [ 184.434780][ T43] usb 4-1: Manufacturer: syz [ 184.446379][ T43] usb 4-1: SerialNumber: syz [ 184.465069][ T43] usb 4-1: config 0 descriptor?? [ 184.977964][ T24] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 185.171014][ T7667] netlink: 20 bytes leftover after parsing attributes in process `syz.1.446'. [ 185.226650][ T7653] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.235961][ T7653] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.242870][ T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 185.265938][ T7668] vim2m vim2m.0: vidioc_s_fmt queue busy [ 185.316461][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.362296][ T7669] vlan2: entered allmulticast mode [ 185.369430][ T7669] hsr0: entered allmulticast mode [ 185.374779][ T24] usb 3-1: Product: syz [ 185.436345][ T24] usb 3-1: Manufacturer: syz [ 185.450274][ T24] usb 3-1: SerialNumber: syz [ 185.492185][ T7669] hsr_slave_0: entered allmulticast mode [ 185.513863][ T24] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 185.536913][ T7669] hsr_slave_1: entered allmulticast mode [ 185.618787][ T5958] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 185.894887][ T43] usb 3-1: USB disconnect, device number 23 [ 186.039483][ T1221] usb 4-1: USB disconnect, device number 32 [ 186.607926][ T1221] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 186.689164][ T5958] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 186.774307][ T5958] ath9k_htc: Failed to initialize the device [ 187.120746][ T1221] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 187.136264][ T43] usb 3-1: ath9k_htc: USB layer deinitialized [ 187.153178][ T1221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.161988][ T1221] usb 2-1: Product: syz [ 187.168065][ T1221] usb 2-1: Manufacturer: syz [ 187.172676][ T1221] usb 2-1: SerialNumber: syz [ 187.221970][ T1221] usb 2-1: config 0 descriptor?? [ 187.633774][ T1221] airspy 2-1:0.0: Board ID: 00 [ 187.644177][ T1221] airspy 2-1:0.0: Firmware version: [ 187.728237][ T43] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 187.973078][ T43] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 187.994575][ T43] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 188.115777][ T43] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 188.171808][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.273889][ T7724] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 188.663266][ T1221] airspy 2-1:0.0: usb_control_msg() failed -71 request 0e [ 188.722745][ T1221] airspy 2-1:0.0: Registered as swradio24 [ 188.791667][ T1221] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 188.929253][ T1221] usb 2-1: USB disconnect, device number 32 [ 189.559862][ T5958] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 189.799522][ T5958] usb 2-1: Using ep0 maxpacket: 16 [ 189.823167][ T5958] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 189.851282][ T5958] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.875068][ T5958] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 189.895853][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.920493][ T5958] usb 2-1: Product: syz [ 189.930573][ T5958] usb 2-1: Manufacturer: syz [ 189.940863][ T5958] usb 2-1: SerialNumber: syz [ 190.222623][ T7763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.466'. [ 190.470746][ T5958] usb 2-1: 0:2 : does not exist [ 190.516641][ T5874] usb 1-1: USB disconnect, device number 18 [ 190.683084][ T5958] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 190.725153][ T5958] usb 2-1: USB disconnect, device number 33 [ 190.970351][ T5972] udevd[5972]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.278226][ T1221] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 191.447662][ T1221] usb 1-1: Using ep0 maxpacket: 32 [ 191.470186][ T1221] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 191.488195][ T1221] usb 1-1: config 0 has no interface number 0 [ 191.515036][ T1221] usb 1-1: config 0 interface 89 has no altsetting 0 [ 191.551914][ T1221] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 191.578352][ T1221] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.623168][ T1221] usb 1-1: Product: syz [ 191.641064][ T1221] usb 1-1: Manufacturer: syz [ 191.657686][ T1221] usb 1-1: SerialNumber: syz [ 191.687117][ T1221] usb 1-1: config 0 descriptor?? [ 191.720916][ T1221] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 191.761665][ T1221] em28xx 1-1:0.89: Video interface 89 found: bulk [ 192.323126][ T1221] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 192.534626][ T7789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.472'. [ 192.605388][ T7792] netlink: 'syz.1.473': attribute type 16 has an invalid length. [ 192.660315][ T7791] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.686634][ T7792] netlink: 'syz.1.473': attribute type 17 has an invalid length. [ 192.724806][ T7791] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.748328][ T1221] em28xx 1-1:0.89: AC97 command still being executed: not handled properly! [ 192.801543][ T7796] netlink: 'syz.4.474': attribute type 1 has an invalid length. [ 192.884523][ T7792] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.958771][ T7768] binder: 7765:7768 ioctl c018620c 200000000240 returned -1 [ 193.242208][ T1221] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 193.278653][ T1221] em28xx 1-1:0.89: board has no eeprom [ 193.299251][ T7796] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.337454][ T7798] vti0: entered promiscuous mode [ 193.638365][ T9] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 193.864451][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 193.875331][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 194.261312][ T9] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 194.274188][ T9] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 959, setting to 64 [ 194.281779][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.290175][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 194.291730][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.305851][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.40 [ 194.317133][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.334299][ T9] usb 2-1: Product: syz [ 194.408455][ T9] usb 2-1: Manufacturer: syz [ 194.420789][ T9] usb 2-1: SerialNumber: syz [ 194.430034][ T1221] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 194.432085][ T7802] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 194.457041][ T1221] em28xx 1-1:0.89: analog set to bulk mode. [ 194.464399][ T43] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 194.478461][ T5928] em28xx 1-1:0.89: Registering V4L2 extension [ 194.630146][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.663650][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.671716][ T5928] em28xx 1-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 194.697346][ T43] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 194.714777][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.747659][ T5928] em28xx 1-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 194.747928][ T9] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input16 [ 194.763119][ T43] usb 4-1: config 0 descriptor?? [ 194.796502][ T5928] em28xx 1-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 194.887214][ T5928] em28xx 1-1:0.89: reading from i2c device at 0x40 failed (error=-5) [ 194.911487][ T5226] bcm5974 2-1:1.0: could not read from device [ 194.918298][ T5928] em28xx 1-1:0.89: Config register raw data: 0xfffffffb [ 194.941839][ T7818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.481'. [ 194.963836][ T5928] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 194.998739][ T7818] netlink: 24 bytes leftover after parsing attributes in process `syz.2.481'. [ 195.005573][ T5964] usb 1-1: USB disconnect, device number 19 [ 195.013114][ T5928] em28xx 1-1:0.89: No AC97 audio processor [ 195.016445][ T5964] em28xx 1-1:0.89: Disconnecting em28xx [ 195.034236][ T9] usb 2-1: USB disconnect, device number 34 [ 195.119768][ T5928] usb 1-1: Decoder not found [ 195.159087][ T5928] em28xx 1-1:0.89: failed to create media graph [ 195.260085][ T5928] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 195.312208][ T7822] ================================================================== [ 195.320323][ T7822] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 195.322049][ T5928] em28xx 1-1:0.89: Registering snapshot button... [ 195.327702][ T7822] Read of size 8 at addr ffff888057160740 by task v4l_id/7822 [ 195.327720][ T7822] [ 195.327731][ T7822] CPU: 0 UID: 0 PID: 7822 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 195.327753][ T7822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 195.327763][ T7822] Call Trace: [ 195.327769][ T7822] [ 195.327779][ T7822] dump_stack_lvl+0x189/0x250 [ 195.327803][ T7822] ? rcu_is_watching+0x15/0xb0 [ 195.327822][ T7822] ? __kasan_check_byte+0x12/0x40 [ 195.327848][ T7822] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.327868][ T7822] ? rcu_is_watching+0x15/0xb0 [ 195.327885][ T7822] ? lock_release+0x4b/0x3e0 [ 195.327913][ T7822] ? __virt_addr_valid+0x1c8/0x5c0 [ 195.327937][ T7822] ? __virt_addr_valid+0x4a5/0x5c0 [ 195.327961][ T7822] print_report+0xca/0x240 [ 195.327978][ T7822] ? v4l2_fh_open+0xc7/0x430 [ 195.327996][ T7822] kasan_report+0x118/0x150 [ 195.328022][ T7822] ? v4l2_fh_open+0xc7/0x430 [ 195.328043][ T7822] v4l2_fh_open+0xc7/0x430 [ 195.328064][ T7822] em28xx_v4l2_open+0x157/0x9a0 [ 195.328097][ T7822] v4l2_open+0x20c/0x360 [ 195.328119][ T7822] chrdev_open+0x4c9/0x5e0 [ 195.328136][ T7822] ? __pfx_chrdev_open+0x10/0x10 [ 195.328153][ T7822] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 195.328184][ T7822] ? __pfx_chrdev_open+0x10/0x10 [ 195.328199][ T7822] do_dentry_open+0x950/0x13f0 [ 195.328224][ T7822] vfs_open+0x3b/0x340 [ 195.328247][ T7822] ? path_openat+0x2ecd/0x3830 [ 195.328270][ T7822] path_openat+0x2ee5/0x3830 [ 195.328291][ T7822] ? arch_stack_walk+0xfc/0x150 [ 195.328320][ T7822] ? stack_depot_save_flags+0x40/0x860 [ 195.328354][ T7822] ? __pfx_path_openat+0x10/0x10 [ 195.328375][ T7822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.328402][ T7822] do_filp_open+0x1fa/0x410 [ 195.328423][ T7822] ? __lock_acquire+0xab9/0xd20 [ 195.328449][ T7822] ? __pfx_do_filp_open+0x10/0x10 [ 195.328480][ T7822] ? _raw_spin_unlock+0x28/0x50 [ 195.328497][ T7822] ? alloc_fd+0x64c/0x6c0 [ 195.328526][ T7822] do_sys_openat2+0x121/0x1c0 [ 195.328547][ T7822] ? __pfx_do_sys_openat2+0x10/0x10 [ 195.328572][ T7822] __x64_sys_openat+0x138/0x170 [ 195.328595][ T7822] do_syscall_64+0xfa/0x3b0 [ 195.328615][ T7822] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.328634][ T7822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.328652][ T7822] ? clear_bhb_loop+0x60/0xb0 [ 195.328672][ T7822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.328691][ T7822] RIP: 0033:0x7f074cea7407 [ 195.328708][ T7822] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 195.328724][ T7822] RSP: 002b:00007fff88a17480 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 195.328744][ T7822] RAX: ffffffffffffffda RBX: 00007f074d576880 RCX: 00007f074cea7407 [ 195.328758][ T7822] RDX: 0000000000000000 RSI: 00007fff88a18f1c RDI: ffffffffffffff9c [ 195.328772][ T7822] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 195.328783][ T7822] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 195.328794][ T7822] R13: 00007fff88a176d0 R14: 00007f074d67b000 R15: 000055dfa946d4d8 [ 195.328815][ T7822] [ 195.328822][ T7822] [ 195.375355][ T5928] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input17 [ 195.378411][ T7822] Allocated by task 5928: [ 195.378422][ T7822] kasan_save_track+0x3e/0x80 [ 195.378447][ T7822] __kasan_kmalloc+0x93/0xb0 [ 195.378466][ T7822] __kmalloc_cache_noprof+0x230/0x3d0 [ 195.378496][ T7822] em28xx_v4l2_init+0x10b/0x2e70 [ 195.378520][ T7822] em28xx_init_extension+0x11d/0x1c0 [ 195.680484][ T7822] process_scheduled_works+0xae1/0x17b0 [ 195.686019][ T7822] worker_thread+0x8a0/0xda0 [ 195.690593][ T7822] kthread+0x70e/0x8a0 [ 195.694667][ T7822] ret_from_fork+0x439/0x7d0 [ 195.699244][ T7822] ret_from_fork_asm+0x1a/0x30 [ 195.704001][ T7822] [ 195.706304][ T7822] Freed by task 5928: [ 195.710263][ T7822] kasan_save_track+0x3e/0x80 [ 195.714927][ T7822] kasan_save_free_info+0x46/0x50 [ 195.719942][ T7822] __kasan_slab_free+0x5b/0x80 [ 195.724710][ T7822] kfree+0x18e/0x440 [ 195.728603][ T7822] em28xx_v4l2_init+0x1683/0x2e70 [ 195.733622][ T7822] em28xx_init_extension+0x11d/0x1c0 [ 195.738911][ T7822] process_scheduled_works+0xae1/0x17b0 [ 195.744456][ T7822] worker_thread+0x8a0/0xda0 [ 195.749035][ T7822] kthread+0x70e/0x8a0 [ 195.753093][ T7822] ret_from_fork+0x439/0x7d0 [ 195.757671][ T7822] ret_from_fork_asm+0x1a/0x30 [ 195.762434][ T7822] [ 195.764750][ T7822] The buggy address belongs to the object at ffff888057160000 [ 195.764750][ T7822] which belongs to the cache kmalloc-8k of size 8192 [ 195.778793][ T7822] The buggy address is located 1856 bytes inside of [ 195.778793][ T7822] freed 8192-byte region [ffff888057160000, ffff888057162000) [ 195.792753][ T7822] [ 195.795074][ T7822] The buggy address belongs to the physical page: [ 195.801480][ T7822] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57160 [ 195.810235][ T7822] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 195.818725][ T7822] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 195.826261][ T7822] page_type: f5(slab) [ 195.830230][ T7822] raw: 00fff00000000040 ffff88801a442280 ffffea0001eeec00 0000000000000002 [ 195.838801][ T7822] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 195.847376][ T7822] head: 00fff00000000040 ffff88801a442280 ffffea0001eeec00 0000000000000002 [ 195.856042][ T7822] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 195.864876][ T7822] head: 00fff00000000003 ffffea00015c5801 00000000ffffffff 00000000ffffffff [ 195.873534][ T7822] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 195.882186][ T7822] page dumped because: kasan: bad access detected [ 195.888671][ T7822] page_owner tracks the page as allocated [ 195.894392][ T7822] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 7611, tgid 7607 (syz.2.432), ts 180797612502, free_ts 179797795541 [ 195.917050][ T7822] post_alloc_hook+0x240/0x2a0 [ 195.921819][ T7822] get_page_from_freelist+0x21e4/0x22c0 [ 195.927358][ T7822] __alloc_frozen_pages_noprof+0x181/0x370 [ 195.933153][ T7822] alloc_pages_mpol+0x232/0x4a0 [ 195.937999][ T7822] allocate_slab+0x8a/0x370 [ 195.942490][ T7822] ___slab_alloc+0xbeb/0x1420 [ 195.947159][ T7822] __kmalloc_cache_noprof+0x296/0x3d0 [ 195.952522][ T7822] audit_log_d_path+0xb5/0x190 [ 195.957274][ T7822] audit_log_d_path_exe+0x42/0x70 [ 195.962285][ T7822] audit_log_task+0x2b3/0x3c0 [ 195.966948][ T7822] audit_seccomp+0x86/0x190 [ 195.971447][ T7822] __seccomp_filter+0x9aa/0x1a40 [ 195.976384][ T7822] syscall_trace_enter+0xaa/0x160 [ 195.981417][ T7822] do_syscall_64+0xd3/0x3b0 [ 195.985912][ T7822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.991801][ T7822] page last free pid 5972 tgid 5972 stack trace: [ 195.998116][ T7822] __free_frozen_pages+0xbc4/0xd30 [ 196.003242][ T7822] __put_partials+0x156/0x1a0 [ 196.007999][ T7822] put_cpu_partial+0x17c/0x250 [ 196.012760][ T7822] __slab_free+0x2d5/0x3c0 [ 196.017164][ T7822] qlist_free_all+0x97/0x140 [ 196.021748][ T7822] kasan_quarantine_reduce+0x148/0x160 [ 196.027202][ T7822] __kasan_slab_alloc+0x22/0x80 [ 196.032045][ T7822] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 196.037934][ T7822] __alloc_skb+0x112/0x2d0 [ 196.042358][ T7822] alloc_skb_with_frags+0xca/0x890 [ 196.047489][ T7822] sock_alloc_send_pskb+0x857/0x990 [ 196.052678][ T7822] unix_dgram_sendmsg+0x461/0x1850 [ 196.057774][ T7822] __sock_sendmsg+0x219/0x270 [ 196.062443][ T7822] sock_write_iter+0x258/0x330 [ 196.067207][ T7822] vfs_write+0x5c9/0xb30 [ 196.071447][ T7822] ksys_write+0x145/0x250 [ 196.075770][ T7822] [ 196.078079][ T7822] Memory state around the buggy address: [ 196.083686][ T7822] ffff888057160600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 196.091728][ T7822] ffff888057160680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 196.099782][ T7822] >ffff888057160700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 196.107831][ T7822] ^ [ 196.113965][ T7822] ffff888057160780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 196.122014][ T7822] ffff888057160800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 196.130059][ T7822] ================================================================== [ 196.141253][ T5928] em28xx 1-1:0.89: Remote control support is not available for this card. [ 196.178120][ T5964] em28xx 1-1:0.89: Closing input extension [ 196.185073][ T5964] em28xx 1-1:0.89: Deregistering snapshot button [ 196.232292][ T43] usbhid 4-1:0.0: can't add hid device: -32 [ 196.247990][ T43] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 196.272452][ T43] usb 4-1: USB disconnect, device number 34 [ 196.364985][ T7822] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 196.372203][ T7822] CPU: 0 UID: 0 PID: 7822 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 196.381124][ T7822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 196.391171][ T7822] Call Trace: [ 196.394441][ T7822] [ 196.397352][ T7822] dump_stack_lvl+0x99/0x250 [ 196.401928][ T7822] ? __asan_memcpy+0x40/0x70 [ 196.406501][ T7822] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.411687][ T7822] ? __pfx__printk+0x10/0x10 [ 196.416265][ T7822] vpanic+0x281/0x750 [ 196.420235][ T7822] ? preempt_schedule+0xae/0xc0 [ 196.425090][ T7822] ? __pfx_vpanic+0x10/0x10 [ 196.429609][ T7822] ? preempt_schedule_common+0x83/0xd0 [ 196.435070][ T7822] ? preempt_schedule+0xae/0xc0 [ 196.439919][ T7822] ? __pfx_preempt_schedule+0x10/0x10 [ 196.445274][ T7822] panic+0xb9/0xc0 [ 196.448979][ T7822] ? __pfx_panic+0x10/0x10 [ 196.453374][ T7822] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 196.459247][ T7822] ? v4l2_fh_open+0xc7/0x430 [ 196.463816][ T7822] check_panic_on_warn+0x89/0xb0 [ 196.468737][ T7822] ? v4l2_fh_open+0xc7/0x430 [ 196.473308][ T7822] end_report+0x78/0x160 [ 196.477535][ T7822] kasan_report+0x129/0x150 [ 196.482020][ T7822] ? v4l2_fh_open+0xc7/0x430 [ 196.486617][ T7822] v4l2_fh_open+0xc7/0x430 [ 196.491013][ T7822] em28xx_v4l2_open+0x157/0x9a0 [ 196.495848][ T7822] v4l2_open+0x20c/0x360 [ 196.500070][ T7822] chrdev_open+0x4c9/0x5e0 [ 196.504465][ T7822] ? __pfx_chrdev_open+0x10/0x10 [ 196.509382][ T7822] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 196.515699][ T7822] ? __pfx_chrdev_open+0x10/0x10 [ 196.520619][ T7822] do_dentry_open+0x950/0x13f0 [ 196.525364][ T7822] vfs_open+0x3b/0x340 [ 196.529418][ T7822] ? path_openat+0x2ecd/0x3830 [ 196.534164][ T7822] path_openat+0x2ee5/0x3830 [ 196.538738][ T7822] ? arch_stack_walk+0xfc/0x150 [ 196.543575][ T7822] ? stack_depot_save_flags+0x40/0x860 [ 196.549022][ T7822] ? __pfx_path_openat+0x10/0x10 [ 196.553939][ T7822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.559988][ T7822] do_filp_open+0x1fa/0x410 [ 196.564480][ T7822] ? __lock_acquire+0xab9/0xd20 [ 196.569329][ T7822] ? __pfx_do_filp_open+0x10/0x10 [ 196.574343][ T7822] ? _raw_spin_unlock+0x28/0x50 [ 196.579175][ T7822] ? alloc_fd+0x64c/0x6c0 [ 196.583495][ T7822] do_sys_openat2+0x121/0x1c0 [ 196.588169][ T7822] ? __pfx_do_sys_openat2+0x10/0x10 [ 196.593380][ T7822] __x64_sys_openat+0x138/0x170 [ 196.598216][ T7822] do_syscall_64+0xfa/0x3b0 [ 196.602701][ T7822] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.607884][ T7822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.613946][ T7822] ? clear_bhb_loop+0x60/0xb0 [ 196.618604][ T7822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.624474][ T7822] RIP: 0033:0x7f074cea7407 [ 196.628867][ T7822] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 196.648460][ T7822] RSP: 002b:00007fff88a17480 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 196.656858][ T7822] RAX: ffffffffffffffda RBX: 00007f074d576880 RCX: 00007f074cea7407 [ 196.664808][ T7822] RDX: 0000000000000000 RSI: 00007fff88a18f1c RDI: ffffffffffffff9c [ 196.672763][ T7822] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 196.680718][ T7822] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 196.688679][ T7822] R13: 00007fff88a176d0 R14: 00007f074d67b000 R15: 000055dfa946d4d8 [ 196.696641][ T7822] [ 196.699900][ T7822] Kernel Offset: disabled [ 196.704207][ T7822] Rebooting in 86400 seconds..