last executing test programs: 4m28.652464348s ago: executing program 3 (id=255): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000880)={0x40, r1, 0x1, 0x0, 0x25dfdbfa, {{0x2, 0x0, 0x17}, {@val={0x8, 0x3, r3}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1008}]]}, 0x40}}, 0x4004044) 4m27.93317433s ago: executing program 3 (id=257): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x1800, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/228, 0xe4}], 0x1, 0x7, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) unshare(0x2a020400) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace$setopts(0xffffffffffffffff, r2, 0x2, 0x65) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = userfaultfd(0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r5, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000840)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000001c0)={{0xdddd0000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0xa, 0x4f}, {0x5000, 0x2, 0x4, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x1, 0x2, 0x0, 0x4, 0x1, 0x81, 0x0, 0xc4, 0x5}, {0x8000000, 0x60000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0xfc, 0x2e, 0x4b}, {0x6000, 0x0, 0xb, 0x0, 0x3, 0x1, 0x1, 0xbf, 0x4, 0x90, 0x1, 0xfc}, {0x6000, 0x2, 0xf, 0xff, 0x3, 0xff, 0x0, 0xb, 0x5, 0x3, 0x9, 0xfd}, {0xffff1000, 0xe000, 0xf, 0x5, 0x28, 0x3, 0x83, 0x8, 0x54, 0x1, 0xff, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0x60000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x400, 0x7, 0xc5]}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x22882, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) readv(r3, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00') sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1cc}, 0x1, 0x0, 0x0, 0xc090}, 0x4000800) 4m26.756904588s ago: executing program 3 (id=261): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfff5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_TPROXY_FAMILY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa4}}, 0x0) 4m26.410879057s ago: executing program 3 (id=262): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x4) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0) r3 = socket(0xa, 0x3, 0x3a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100766c616e000000000cc40002800600050088a800000a000100aaaaaaaaaa4200"], 0x48}, 0x1, 0x0, 0x0, 0x28001}, 0x818) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) sendmsg$tipc(r5, &(0x7f0000002b80)={&(0x7f0000000340)=@name={0x1e, 0x2, 0x3, {{0x40, 0x3}, 0x4}}, 0xfffffe32, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x44000001) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000014c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000004c0)=""/98) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_open_dev$vim2m(&(0x7f0000000140), 0xdd57, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) mremap(&(0x7f000007e000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000001c0)={0xe84, 0x0, 0x4, 0x0, 0x9}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 4m25.751931013s ago: executing program 3 (id=266): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x2e, 0x9, 0x70bd27, 0x3, {0x4, 0x0, 0x41}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 4m25.487851549s ago: executing program 3 (id=268): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3b0, 0xffffffff, 0xffffffff, 0x3b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x3], 0x5, 0x14, 0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2c, r3, 0x10, 0x70bd28, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24044884) 4m24.952199565s ago: executing program 32 (id=268): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3b0, 0xffffffff, 0xffffffff, 0x3b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x3], 0x5, 0x14, 0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2c, r3, 0x10, 0x70bd28, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24044884) 9.524700517s ago: executing program 4 (id=1408): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xffff}}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 9.28344958s ago: executing program 4 (id=1410): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket(0xa, 0x800, 0x6d090cb3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x5, 0x7fc00002}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000fc0)) syz_usb_control_io(r0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404000000c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a3449abe802f5ab3e89cf6cfdffffffb8580218ce740068720000074e8b1715807ea0ca469e46968eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000000000000005335000000143ea70c2ab40c7cb70c943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a33e680846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2200af6c7784a1975fa807de38a3a61e44a9ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf652e28e700000000000000b24478a78a0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8ff7e7d1c94c450503009688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0000f5e1671bc5eb7739daa7820a91cb0e732df2ae1d39c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b4cbaf5a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13e434aae9df81ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a384002421d898913c45a9ac091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c045a17e9a61c3b064e679508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd911e0e5f00019be25b5910a3193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4218cea744b332ab232a09cf1ec375627074ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b8840558b3f918d675a79907a72a8252cd3fbaea5d3006a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbdf6ad488f43f46b2536f175f46dfb27d522946727024de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc856df00000000000000000000dfa4c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5d00f26126d4cf2c73e5f94030000000000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d0e68d7eef5d32d5fcc7923d7544fa492aa38717481c55e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62fc9dfffeb13b4858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1ef90ed4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1af45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d78429d358aa54b4b49926c4be9ee4659153d9f9f5d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000d0267ac40d1130a9000000000045f50812a1a0530b02baed19f4c977ac0d397ed6371ec589bf5943690250bdfa5b676d5d53d2ab3aeee1a6910c1a33b6c06c93386768f8b1bb27ec31cffbd4f5c7b0c2e14e4fc6c2f089ab08567254e93780afdddefb3f0d2143ad73c0bf2467859049d46dc5aa91f918a307e7dcaaccd6cbe66e8a04d201392a487f681f82528a800e27d65200ae10e1b5d39a29d8a2c8ed2dfa77e21249b45806733e674a9e8e72ad1cb0d3bfadb00a18a5008ea1e4c8fb93d311f52a476c576a3f65c9bdd4e4b870aed4cb9906a8aa25986e6e30be249d9911114b42b2fb51168e56000a62b794c193f7797ebeb7f8b91c70b6e720af06ecfcfb89a2d5a25f"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x18000000000002a0, 0x160, 0x0, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x7ec, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 6.300153015s ago: executing program 2 (id=1424): r0 = socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f00000001c0)='iso9660\x00', 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x4c, 0x0, &(0x7f0000000080)=0x21) 6.126501616s ago: executing program 2 (id=1425): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x1000000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4c}}], 0x6}}], 0x4000114, 0x40500f0) 6.123718472s ago: executing program 4 (id=1426): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="12e01b"], 0x1000f) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="12e01b"], 0x1000f) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r3) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, r5, 0x1, 0x70bd2d, 0xffffffff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x1, 0x7, 0x2, 0x71c, 0x6, 0x1]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, r5, 0x1, 0x70bd2d, 0xffffffff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x1, 0x7, 0x2, 0x71c, 0x6, 0x1]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000240)=@ethernet={0x0, @remote}, &(0x7f0000000080)=0xfffffeb1) (async) getpeername(0xffffffffffffffff, &(0x7f0000000240)=@ethernet={0x0, @remote}, &(0x7f0000000080)=0xfffffeb1) 5.947320427s ago: executing program 2 (id=1427): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 5.774590669s ago: executing program 2 (id=1428): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) syz_emit_ethernet(0x17, &(0x7f00000001c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@generic={0x8864, "118b9041ce8e89864b"}}}, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000200)={{@any, 0xffffffff}, 0x0, 0x1, 0x3}) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x6, 0x6, @remote}, 0x14) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r4, &(0x7f00000004c0)="49d948e72b8fb5ee4fa6f8c61bc786924542021424838697f770e2392977e76ec11340711d43858518e608d33fcd50fbec2668ef2aa5bd78832dbf05f5ee857ca99d7de499d2acf3e3ef7b89f6971b2f4240e88ca4da47cf0723e003b8c7b6b63ad694475da95be0883f7ad4fb11b953f5e09fdc0dbe6945664b2f00b4ada8a0dc126a89f3f5ff10d6c34a28c953fb4f01d2f6ea433eea35e380f4bf9e390ff94f4c7758aca1f42ef16b8141d48e2f632e2587d357d3a955843263cdc842360a8afde00646af4127f39d2614572eb4e3471145", 0xd3, 0x2000c000, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newsa={0x140, 0x10, 0x1, 0x70bd2a, 0x40, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@loopback, 0x0, 0xecdf, 0x0, 0x58}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, @in6=@loopback, {0x0, 0x0, 0x4, 0x20000000, 0x1, 0x2, 0x0, 0xa2b}, {0x0, 0x0, 0x80000000}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_crypt={0x4e, 0x2, {{'cbc(serpent)\x00'}, 0x30, "0a15fcedb93d"}}]}, 0x140}, 0x1, 0x0, 0x0, 0xc0}, 0x77c1816f4f559e4e) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x1000000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4c}}], 0x6}}], 0x4000114, 0x40500f0) 5.773970063s ago: executing program 0 (id=1429): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$cgroup_int(r0, &(0x7f0000000040)=0x1f00, 0x12) 5.463414752s ago: executing program 0 (id=1430): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000481c) sendmsg$sock(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)='oeN', 0xffffff83}], 0x1, &(0x7f0000000100)=[@timestamping={{0x14, 0x1, 0x25, 0x12}}, @txtime={{0xa00, 0x1, 0x3d, 0x3}}], 0x18}, 0x4000081) 5.287678416s ago: executing program 0 (id=1431): syz_usb_connect$uac1(0x5, 0x72, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x8084) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x2e000c80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000140)='./file0\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x815, 0x13, 0xfffffffd, 0x4}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="10"], 0x454680) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) syz_usb_connect(0x2, 0x440, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000c1b2fd40861246206fc10000000109022e040108004000090450000eff040100da0fe42101caf61f785b7bd6f9a40324b2b8253d68e955dd65abfed59c829185881ffcf5071e69d83a94cccf753dd12f7dafdf5b2d4e3c8bf7d1851b891f21b183913d49bf953bab3ee777ab2030fd27eea9c11becf582bd1b62acc0c22b85cc4a21fdf944da65c501f2bcfe60009f9f"], 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 5.028172481s ago: executing program 4 (id=1433): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x1) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f00000001c0)='./file0\x00', r2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sync() r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2b) r6 = syz_usb_connect(0x5, 0x24, &(0x7f0000000500)=ANY=[@ANYRES64, @ANYRES8=r0, @ANYRESOCT=0x0, @ANYRESOCT=r5, @ANYRES64=r3, @ANYRES64=r1], 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5}, 0x94) syz_usb_control_io$uac2(r6, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) unshare(0x26020480) epoll_wait(r8, 0x0, 0x0, 0x1) syz_usb_control_io$hid(r6, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="40084f0000003a45444db441ba8f87f2de0e4872fc8bf45a40f05ee2dd90695e964d4c32c89580d16e26665c3cb71de602a74a933006000000000000009e550e6cce756bd0fcb4d76e82557a2a3105786e85061901"], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000480)={0x20, 0x3, 0x1, 0x8}}) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000140)={0x0, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 4.787811652s ago: executing program 2 (id=1434): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r2, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000200)={0xfffffffe, 0x3, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010001ffffcffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000100000000002c0012800b00010067726574617000001c00028006000e000200000006000f000700000008000700ac14142808000a00", @ANYRES32=r7, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f00000005c0)={0x48, 0x5, r10, 0x0, 0xffffffffffffffff, 0x1}) 4.501433781s ago: executing program 5 (id=1437): r0 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x67, "6201ea51a5d2382b528b3d0d77aa797355cc50fe59154b9ea4eba6ebfc68f7cb3fa806c5e9e885c0f3d0ddb0ad7886e0bc81b4b62c8f510d8b3b5f5ab68fffd7d87217b8ca5812992eaa103904b8ad23544e2a1026b563490b73b8e82f3b584c1276a7712b4cb4"}, &(0x7f0000000080)=0x6f) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000000c0)={0x1, @raw_data="99f089d4a2a8d8e7f1f8a236a5d9feb8432dd42113cc6b673ad2a7e44038eee89f50ce6637aa22be51d2843c3dd11f683f5318fbd071158c2fba17c8381ac4c6507b0e725770e232fa15e6d8106de4507ece601b130892c3af34c35c0c138d79aad4d37464c31a884c2143dd7d1c6edfb78a0270dc08e0451c85bf457dff81d1372b21d8df0af06b5e19d164fbb2c2abd2662d3175b6d411a30e02a00f8724924148dcf19b78c2ceb13fd6242e393df6658b39481e72566b677e88251e34b8eb48a83cc428cdcb79"}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x2f, 0x78, 0x9, 0x3, 0x67, @mcast2, @local, 0x10, 0x7, 0x5, 0x1}}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newchain={0x34, 0x64, 0x400, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x4, 0x7}, {0x5, 0x7}, {0xffe0, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xa}}, @TCA_RATE={0x6, 0x5, {0x1}}]}, 0x34}}, 0x10) r4 = syz_open_dev$usbmon(&(0x7f0000000380), 0x22, 0x191f01) ioctl$MON_IOCX_GET(r4, 0x40189206, &(0x7f0000000500)={&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000400)=""/209, 0xd1}) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000540), 0x800, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000580)=0x100000) ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f00000005c0)={0x9e, "ab18f354b05b719aa2e330c09b9e1bc2e41ec4a51d1e79ba53930b754b00a456256bbf6330c0ea4987e73f15a8377f6381ec4da83ecc081162a4f5ad3b7582c5d110fee677030acb57bad5ced522a10f31a00d400b63f73f74b32adb9adcd5f39c7f6fa1bd2e8b3341b5da367ae217432c4ca0397686bdb7db564c8d0e3bd378dc6b4d72a678e4e4100e8e5dce57d4d22990c07d31b432d66e5f2526780a423785290c7f79b73e8aa7f3c34b44f4818d835589e7eb0dce5c36c1e98a99b9c767d1c0951bfe09b7bbf9bc542b5c02b0cb92f19c592ad66154f62eb15643c924559201f3b34b3abaf706d8841efdd6ea3d9ab9116a75faaa6aa1f336b9ee90b90de5246b9e32513d15c9c3ecc737c6b0c1fe4e26f5f5c0e3962de32c0cb23616dd91965d9aca4c58b7b0b81f45bd6973fac18de947894ef4a235cf907bdad1054bdc14e01693f9bca459c323b76dd6955dabae16e1e5bdd99efebe40274bf31b19e8da5534ee850e85850016a5bffd3163025336a8ab4934bebc2acec0a85227a5361efa6d6aae754bf4be39b075a462d23dbf2aa3591c8174a9b72e4db5d216bcf73a60cb285eb23e8f1fad4db0047cf0128b957fbfee40ef800b7d6ed1d8c5294887c8bfc09fc98bb739fb82b53aae42bca0306826e461831c826a9832c3c507b9683e1053125c22294d4184ed588ffc8f8d3d6d21b6796e673a21a82e74cd10"}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000800)={{0x1, 0x5, 0x7f, 0xfffffffb, 'syz1\x00'}, 0x0, [0x10000, 0x6, 0x1, 0x7, 0x4, 0x1, 0x400, 0x7fffffffffffffff, 0x6, 0x7, 0x6, 0x200, 0xcfe4, 0x0, 0x8, 0x36, 0xd9, 0xfffffffffffffffb, 0x1, 0x7, 0x7, 0x2, 0xffffffffffff8001, 0x0, 0x8, 0x80000000, 0x8, 0x4, 0x0, 0x9, 0xd, 0x7, 0x7, 0x401, 0xba, 0x4, 0x800, 0x4, 0x1505, 0x6, 0x9, 0xf1, 0x740, 0x100000001, 0x6, 0x7fffffff, 0x9, 0xa3, 0x8, 0x1ff, 0x1000, 0x1, 0x6, 0x3, 0x0, 0xb7, 0xfffffffffffffff9, 0x0, 0x8, 0x8, 0xfffffffffffffff7, 0x7, 0x1d98d36100000000, 0x9, 0x7, 0x9, 0x0, 0x8, 0x51, 0x3, 0x3, 0x4, 0x100000000, 0x7, 0x40, 0xe63, 0x1ff, 0x3, 0x9, 0x4, 0x8, 0x100000001, 0x2, 0x6, 0x3b0868dd, 0x100000000, 0x3e3, 0x4, 0x8, 0x5, 0xfffffffffffffffc, 0x9, 0xa, 0x1, 0x2, 0xfffffffffffffffc, 0x9, 0x1c4b, 0x100, 0xfff, 0x100000000, 0x0, 0xfd, 0x5, 0x6, 0xfbb, 0xc, 0xc6, 0x2, 0x4, 0x7, 0x9, 0x8, 0x8001, 0xffff, 0x8f8, 0x100000001, 0x9, 0x9, 0x3ff, 0xa, 0xf1c1, 0x2, 0x9, 0x80000001, 0xffffffffffffbb03, 0xfff, 0x7]}) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x30, 0x7, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004019) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000e00)='highspeed', 0x9) ioctl$UI_BEGIN_FF_UPLOAD(r5, 0xc06855c8, &(0x7f0000000e40)={0xc, 0x40, {0x56, 0x30, 0x8, {0x3, 0xe8}, {0x4, 0x8}, @cond=[{0x8, 0xf, 0x8000, 0x9, 0x4, 0xa}, {0x2, 0x0, 0x0, 0x4, 0xfeff, 0x3}]}, {0x52, 0x878, 0x2, {0x0, 0xdb45}, {0x4, 0x66}, @const={0x9, {0x3, 0x3, 0x8906, 0x8}}}}) setsockopt$sock_int(r2, 0x1, 0x26, &(0x7f0000000ec0)=0x6, 0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000f00)={r1, 0x4, 0x20, 0x0, 0x3}, &(0x7f0000000f40)=0x18) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000f80)={0x400, {{0xa, 0x4e24, 0xc13, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, 0x16}}, {{0xa, 0x4e24, 0xbe8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}}}, 0x108) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f00000010c0)={0x2, 0x0, 0x6, 0xfffffff7, 0x85, "091da2789115dea604e4b54a27d62d59cc426d", 0x3, 0x7e}) r6 = gettid() r7 = syz_open_procfs(r6, &(0x7f0000001100)='net/ip6_mr_cache\x00') r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001180), r7) sendmsg$TIPC_NL_NET_GET(r7, &(0x7f0000001400)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000013c0)={&(0x7f00000011c0)={0x1dc, r8, 0x400, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x150, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ID={0x48, 0x3, "612f358bc31598fd8c8f9c5ff319c7d999ce813ab073262df7d4915327dae89356e11df9a55f90d259d7eb6605ba6a7d073114fb5be18b5194445f2893bf56d04a6db245"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xec, 0x3, "133e9403b510a9777fc1ca1aa2f3150e965d193aecd8d4cddfdb601f2cb3cbaf40ecc1f1e9c20366d5a76e7f4f4e2e8078268b7962d27033f8387d22e4b8948fb3f2e14fbfca0460535e5758af46acefa550460e8922b703331501eb7a4d8f698e886c826456348682a0ef41dc0a3ac6997b9ac060911609b8fbbc076b2fbfafe6bcf5e11924b54d8b5e9077697fb72c075fd667193f848f439c6c2d4a9a5a051cb4b1740f37c9d1680a3ba6f7b576c3d5c88bbe8a98bda536de8809085da42bad57abe3aa79308b91b550366bcbb151454f9df616dc28b820be28fd421f2fce2e8d2733c14f385f"}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x4008000}, 0xc000) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000001440)={0x3, {{0xa, 0x4e20, 0x9, @remote, 0x5}}, 0x0, 0x3, [{{0xa, 0x4e22, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}, {{0xa, 0x4e23, 0x8, @remote, 0x1}}, {{0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1000}}]}, 0x210) accept4$unix(0xffffffffffffffff, &(0x7f0000001680)=@abs, &(0x7f0000001700)=0x6e, 0x800) sendmsg$NFT_BATCH(r7, &(0x7f0000001b00)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x44, 0x2, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0xc4, 0x2, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x46, 0x6, "6249fa201c90e73e1c8af63f0a2d6ce3ea914639ff1b869d44298d19d293248ebe7f0ee2319182be09d74405ddff95a690fdba842944ee382bfcaa80c14d48e7c83b"}, @NFTA_TABLE_USERDATA={0x29, 0x6, "87fee1ec563d14f2111159643fabb5d8002fe906bcca5f1ce460f105c5297dbda44d55cfcd"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x9c, 0x18, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x58, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x900, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x14c, 0x14, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0xa6, 0x8, "16765f81eb554d1a4d7ff004edb6dc8f69f1e9206941a7359b348bd89a27c2f03d698358c7a03f847a55c8d23f02c2bf46d44cf6d6dba65e61939466e898fc741ae0880d6dffe7bac711f95693c29c04b96899417066b6a3ac734e82d52847b61cb5ebf7d36af4fefb5f5963285b43f1359415b1f89c488d385e53bee5e58a8ebb43627fc847a7b0fd3fd89d4de9fd7b2f41c107edbe0546d1f597cb4726e353caf7"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0x48, 0x8, "8712552f3f926564affb8016662488e28a0adf10833ec189ad7a3daaaed12dd5a3b01ffe9f1a79a50c652f09df13f3509186d6ee668fcd5f0c763a3a8906cb2d2f5eab64"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x338}, 0x1, 0x0, 0x0, 0x20040040}, 0x4000000) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000001b40)={0x8, [0x3ff, 0xda, 0x80, 0x0, 0xe01d, 0x3, 0x2b78, 0xa080]}, 0x14) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000001b80), 0x20000, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r9, 0xc02054a5, &(0x7f0000001bc0)={0x2, r7, 'id0\x00'}) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000001e00)={0x14, &(0x7f0000001c80)={0x20, 0x22, 0x1a, {0x1a, 0x4, "f506c7bcb622073d46888083c47fe8b7b896ff6d2cd8bc80"}}, &(0x7f0000001cc0)={0x0, 0x3, 0xfb, @string={0xfb, 0x3, "86e97e153fa72486750ce4bedbdf8d989bc96c7e7ca0d4099361b0d024cfe5d502e25feb347a0068dd9e5c72473fdd15c854be02c7678287aec45206994b3963f28902c935b7988e923b3b813032561076bb6a7931e83e08f734ee2b38ac610c55e9d81f40c415284d976360a1ba2e402be690045ec5448ff7ab8205f82a895e68697ef92e8a08877628098d848062d8a42a2a301dbc3972ef4627fe825c46c8eb293685f125ebe423c88f6e7b405d0269b1621bcd531fece9430626e228cc45c774147ed4d1903f87a771339211c11a7ed13c525f959edd3a73d75c56200ce7754079ac056d22fa28d9fd6da0b5ffddb53d29cf48c4ada240"}}}, &(0x7f0000001fc0)={0x2c, &(0x7f0000001e40)={0x0, 0x1, 0x59, "4d562a53ebc12318137ad8ccba74ac0aee4b6ac9d7db9e120acb66482386536eb7c690a5b6df10b7344985fe6375525902e2f3e77d6df5850067c3439268b09894572b5ee351a6b3c4de6f57b90ca949abe920181229e8bf00"}, &(0x7f0000001ec0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000001f00)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001f40)={0xc0, 0x5, 0x5, "01142da9cf"}, &(0x7f0000001f80)={0x40, 0x5, 0x3, "130ec7"}}) 4.331687411s ago: executing program 1 (id=1438): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 4.104521706s ago: executing program 1 (id=1439): r0 = socket$kcm(0xa, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x5, &(0x7f0000000180)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r1, 0x0}]) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4f23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xb00}, 0x0) 3.691871772s ago: executing program 1 (id=1440): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="002205", @ANYRES64=r0, @ANYRES16=r0, @ANYRESHEX=r0, @ANYBLOB="38e54477b553c060e325cb190e2e72bf6988a25763f42dd7c7930a2c33358fb2d34a8dd88b1ddd7bc61a0bac3841657db22c0ac788eeab4fc9646761fe80759fae60dd6b7980064caf20b8425cb6e3a213b6d6bd73f6bffe1fcb0c87407b3ac99de71b39fee8ebe71208164fea8a6b4d70fe097f9da60a6746bec84f8713d7b91783b87f31d1226336b8c3d766902daaf37996453d21ff3e50a1d558512a9a69055a52c729", @ANYRES16=r0], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001080)={0x14, 0x0, &(0x7f0000000fc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 3.520031396s ago: executing program 5 (id=1441): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) fdatasync(r0) syz_open_dev$loop(&(0x7f0000000080), 0x8000000000000001, 0x1c1280) socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x45c, 0x40103) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffde6}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.417408963s ago: executing program 5 (id=1442): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x1200, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b3325fe80000000000000dc8b850f238466ccfc007a000000ad6e911b51818462b4003b80", 0x2a}], 0x1}, 0x0) 2.158072193s ago: executing program 5 (id=1443): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sendmsg$NFT_BATCH(r0, 0x0, 0x20000080) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) syz_io_uring_setup(0x6901, &(0x7f0000000080)={0x0, 0x6526, 0x0, 0x2, 0x1008, 0x0, r0}, 0x0, 0x0, 0x0) userfaultfd(0x801) pipe2$watch_queue(&(0x7f0000000040), 0x80) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[]) 1.976329755s ago: executing program 0 (id=1444): r0 = userfaultfd(0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)={0x128, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@nested={0x104, 0x8, 0x0, 0x1, [@typed={0x8, 0x13, 0x0, 0x0, @u32}, @typed={0x8, 0x10b, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0xc, 0xb2, 0x0, 0x0, @u64=0x9}, @nested={0xe1, 0x3f, 0x0, 0x1, [@nested={0x4, 0x127}, @generic="ffb84017de4be626085c717cd68df496d047cb5cbc438412a6bfb086c914273579dbb6ec5f516a86b4f4828ee6f66a7ae8fd2bf14ff9fb1b8681e8079580a55b0dbadcb1b50668132e84f1985324b05d06406eccd3c9bf09ae30443225d1808c25f22a46cfff0eb72e205dfb0f84a35c3ab4ae4d6042f21dbca8470f78ac356544e589f91a40b04df302b3fde069aa5423ccf24633529b00ec17c5f906bf06bd819e759d9e7a6def3c5669ea272b16a424fc824287321d6ee2c01e8724c73042ab24bb3ac11dae9c8fbaf9a5e0b5281138faf7593a7cce4f41"]}]}]}]}, @typed={0x4, 0x8}]}, 0x128}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f00003a8000/0x3000)=nil, 0x3000, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1e0}}, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000080)={0x0, 0x7f}, 0x8) r5 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') read$FUSE(r5, &(0x7f0000002a40)={0x2020}, 0x2020) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) read$FUSE(r5, &(0x7f0000000a00)={0x2020}, 0x2020) r7 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[@cpuid={0x64, 0x18, {0x40000000, 0x9cdeff16}}], 0x18}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r9, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)={0x4c, r10, 0x1, 0x0, 0x25dfdbfe, {0x21}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1.801294478s ago: executing program 5 (id=1445): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000000c0)=0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x2, [{}, {}]}, 0x48) 1.455809412s ago: executing program 0 (id=1446): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001ec0)={0x7c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x100, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) 1.14850644s ago: executing program 1 (id=1447): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000300)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) 1.094524209s ago: executing program 0 (id=1448): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) r5 = syz_usb_connect(0x5, 0x36, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) 1.004679172s ago: executing program 4 (id=1449): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180)=0x8, 0x4) sendmmsg$inet_sctp(r0, &(0x7f00000046c0)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000580)=[{&(0x7f00000001c0)="8b9591634f34bf40df1172bc0e1d687a340b0aa0a412a309abcd4f2cbba02321e38b3b36b6ba9dc1ec3ea6dc613e27d98595dfac4173f2e896c3d4dfb1911e51b4cd27b66883644a3ae7742053525c1840245952f2443afe9fd725b5808db7349270fcbadd29882891488cf8c681", 0x6e}, {&(0x7f0000000280)="d6c0b7", 0x3}, {&(0x7f00000002c0)="6a47f4012357543956b2287d5ed785ec78f759a0263df242762c4bb1492a507257ed2c3d226c04233ff87078bda6050762c35956eb9753abe51ec3ac614c35cb0b31830221e34cbabf5655ef2f8280d52ccee52231daa845e2970981267d06e8eb6b90ec7e7053287953eabc894f8153175cf82ab745e8aa5a15e24c96981c0d725777e3c27d4935079c7c45f950690a69d4a3a678d686a453428a356548969615858f1cc49c97629d6bd38d7d21a02bad153d40903d01d844dcb1eb5d527ffc9af60fe54fb0b712544f048a160e9249e58beb035b6efa94bf3f58c5fe4ade6c056d64064df7172a68a2f0f466f57d16a3", 0xf1}], 0x3, &(0x7f0000000480)=ANY=[@ANYRES64=r0, @ANYRES32=0x0], 0x80, 0x4000084}, {&(0x7f0000000400)=@in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000000a80)=[{&(0x7f0000000500)}, {&(0x7f0000000600)="2b4074d80ca5793dc7151d32205482492dedccc86a0a59b86b313f1b944e5b93144758dc1acb28368aacc22d31e521fdc3cc7d7f098c0d5c2643e0520defa7e7fb8a5edfbc17162951861f93e6b3a687561a82e512a7c5a6e607f4c52d82de9ce293d4941568c179b46006deedc82cb6487b83c94d8a10341a65c4a01d95b865d039794c2a4939c580283bdaa2b773b1719b97f414dd5c5d18ddbd2ed3422e5e", 0xa0}, {&(0x7f00000006c0)="7ee64cbd078bdd24e54613b8ed3290ea8291b855ccfd313dbba6af7d8040271012a830d6a3de", 0x26}, {&(0x7f0000000700)="9af63ba38d76d4b4963f838b35558759fbedba1797cab72d5ab860290f1c31be4540b9702b302cb6f0e4d15d160e09db48af343a2e9c1a79a39ebcca5dc3b5d09b292651b873c78ed0356a48a022c5444273d41d86759a7a01bd594a72e63ac9ec3e8ef349ed008e07db7b690d97", 0x6e}, {&(0x7f0000000780)="7cf8f410ffe1c53fd70728dcfc223892e6a0dd4217a8bacc5406f1bb1fe2536a8286116fdb3273c381cd31c1687e93b2f780fb0c4461dd69fcead0f835a7d496e0d2aa0bf9afd7babbc003cae90c837f44d3966a9d99da33b367d14e02", 0x5d}, {&(0x7f0000000800)="1e5f1748d7089aa04e2fd4a89f7cd381989e62ddf4794b734800d39f6ba541cbcef1ec1891b905ef9f", 0x29}, {&(0x7f0000000880)="aa18d2ba76b5a61ca92bdde6df087d1b53337d060c2bfee16e059e9f0650516068534c01c66b557db7bec5b4d347438fcfc2081b1f39d7e3c289227131d714fff75f2b897209eaef00fcf0f996ad48e7d661a26184d0673b30844eae47f988f5a1f467ef2e8435fc13bc838d583287422f76eb91b7f3c006b452f8e9d35c80cf6aa06e678a20", 0x86}, {0x0}, {&(0x7f00000009c0)="a190fd6026831d3797bf0b863756eb4070fae09d4998a01da5514eb681bbb0d203234113e5ce6b5cb4bd135bd6beb25c9485f9ce291c3569be7dab18c97d5c1df8299abd712ff0e4fffe3374a0201e2a28142092f6c3510e4b50b89eb429894c27da8519274ea86d5d3c191c40aa43844a14aaae05a2d424e17489b3fa3ed9d5684d213aa2afcd7a58c18f1dabe0f82826dd3d83ac4608e8b522bfa671c94b63ad589675096f2eb0e50a72e2a652f1655184019482e63db1e25f8a0ded05", 0xbe}], 0x9, &(0x7f0000004800)=ANY=[@ANYBLOB="180000000000000084000000060000000000000000000000180000000000000084000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="20000000000000008400000002000000020003000d00000002000000", @ANYRES32=0x0], 0xa0, 0x20000000}, {0x0, 0x0, &(0x7f0000001340), 0x0, 0x0, 0xa0, 0x2}, {&(0x7f00000004c0)=@in6={0xa, 0x4e21, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000004640)=[{&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000002480)="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", 0x7f0}, {&(0x7f0000003480)="785a9e534987ba0e4e0b400de21d65f4262f0480a5aaa1fcc846342bfcdd74b0d1d305f884", 0x25}, {&(0x7f0000003500)="e28c342d236ee95a263e52d433708ecacfcc334f1c1dac7801315a5a016915f4bf06a4e57a385fbcf8d90fe94cdb0bd51252c3cd56071de3cb8cac6c6893a4878c2ec445204ecc3b94aad782caf840ddc989e1f70fdd1e5afb02602ff183a15e8511e25104eda0ce9fedfc64646b34670f500ee2279ccc4c7f39eb34", 0x7c}, {&(0x7f0000003580)="a1ddd9ec48309794f50cf94a0a05f2f90abae884f1b3fd78cda18c4ebe5ceb6618b4b67f676c1d47b4f3b7c709afd476336b8e0ffb2bc2e56a0297616f846b5e1c04e7bc70b73681d23607499f93e515326b7417e9c08eb3bb7de5a618409847e0aa9720b0c807e3560afb17cc7af1bc286b1e1c77f9f5e6e16cfb79f122ffd7c92780dc69c0abd491e5fa42858a9b53998132caa878fa764d1f4e4c2b39fa2262cf3ee352f0e6e7b7fc396afea11dc92700df75d60e705341f5fa2089f3cc89da10b1e04d3d347f4c0a05550e0c9be841450835725a35ddbce40e085819d85ebfeda5fd31da0fa01c8700bac8f1833aa8b1cece678b33c61b29c4cfd155fe9ae4bdd71d65b59beebf12d17c4c65c2d962f23aa7d63be4672fefb40b0b53c49674e366add878476d9770b439507d089cb11edc4890a58ccf48e6f7bdf85dbcd00a586ce36fd38bfa74f76d23fb478128f91ef12940b714d9663840186170eb275fd2f399da3eae106541087e8044862f0245688533ff512edcb638db49bb7e6d490b6a20b4fb7d292ed48b8feb9d717732687bca6324cef9dfd1f3dd5feb7fc2829e02d8754a74c3bd824b4b2a9feaccf568c7c2507b1dbd23b97d58aba88bf71bf5a414aa21da36ca3a6c4482f25744e4fd53ee1d4b7d4431b8de2658749a18cacd7a3658e0448f03fa36e23bc9a8a32d8c21f41a4e8687a14de25bbc310777faae55b4489feaf0bef438ad1bac61d4ac3680a5736dd27fb94cbf3ee5df09496590b67fc824081ffcdac736d60394a15ffdc45dbcb596a1699ad0e42ad41f6621c3012d4d7d465b6f36e35b22639124df5b674f0a0c9fd779aee2a29ab90b2206d30b3a5ad74c0ae55f824a1d5469f5e14757e44dd8b77bb1f190c6da6baa9fe3b8c4d0f151460522937d428b1d31b2d9d71b654b76e0e82cc636fb1356fc8e7c1924eb819aa6a02fe61a93704400b12df6b6eb9803fd3041a229638bc3e6ca768d88788b575e73c81ed149d29d65b46339121b0da008bba2c6b45d6681ca216c65d9bdaec81f0f292cfa63b0f4c7349afd9823ae535792ae5247611c36eb0b726b6f74e400363e83dbb8e0fcd9fb2e78d9242bc3b8f22ce6b915c1a1e8353be45e17cee2a7ec1f89bfa1cd4a81c74b8f6ec529dafd02c5030ae21f50af62538e04fbf638cc56b3296a5598d6ad0fc718f09168b9814461843305b4b121fd75e1b778cc04a6fa5fea4b2b2e075c926e14407ae1753e3f7cfa9a6b8d9ee1ebded948f42f5d94464eec662ae143e2075cbec00155767e208eec1951769f48ee3b0b45bb8b38d67155e09ae93243957ff6ac6d4364a396730cd870ff7c035c6b5f842090912a471362724920a9a712f2e80fdf12bc77dc863a2900fa1a04510aaebfcd5ac7178bca37902e559ffbd8f9fc89e72f3de27cc2fee01d095a4e30b649d29dd60d6d23171415fa9d72010602e173392ebfef02be59f80133638888d016241cedcf4d9defbd6753fd98b3f82c1a39374c341a60eb1ed868e5f941e59992190aa41e0a1f8c06bf3aed1ee9f8528fdfb0f91545bf53f7010cc511cadd2509756da4da07a4720255bce1206112f5aaac625ceb3ad725b4aba989100e10a6f7fecbc043057e5e3c57c1d0419132834adb9ea6b1e5f436afe9bc4b55b662492820bfed4ed2bcda90c4d07574d9316ccd967294c697d8aeeb03c23c84eb4fb785c9b7a89d3cf0a1596c5bba1dd16d514da7db05dd69e2c2c554020ffb1451b1d6a1d4af040dbde2a8cea74386383603e486db32a53ef773f6fdc72a69f5f8667516add3b0d7891df2e5fbb07a9e4fe2e34089896e106a5458b63e5d2935e8d1796efbb1b9174d758678c94a0601ee3c34503638fb6f555991841bb164197d19997f12f4fbfc396f154bd3cb96ed0919348fb12d537161b13b58079c0954d404c4fb4f25de157bfdd7d3b9ecc2ebc50c9de399996893fad058bc6b7d8208964ed908c3313f9226f6af734c77d491d65c3665c3f49b400843614639e121f0f386114fd794de7d3ba760193e552102c52a6118b127a7cf171d5ec3ca852695d7a74d850e3f996c923898362ef143e07ebdccc644981ddb7c6d9bf3d7e958ffbc4b2a959b0b6272af30af2c7fe353de1cae7096a22925822e4ccfc11f1de3ce27710f2a41666b7cb04c5390e7fa6efe75ee12e3591277474b95f662e478b3d60aaf6604d01ab3b624cdc6a1d7e7053c27d1e05880b828969d889f8773e44f570c9cfc01aafe4f863a8ceac0d9baad3c1279a280ae50d777bf375032542d1ac6a452ecd165bf9a778976c635f6799d1057b577fd2a0e14e0d4d5f6d8061d754abcdb30b9d068e60682b837acb903317b35b1871154f74b9f7e45cf175846b8b92b6875400ae1febacc0e039c3358ca1a428366c249ecda9dd132a96cdf4f1ffe28ce9fcfbd8c2e4b4219731ba5ebe6398a8153afe2fa79709246e342c03fff548776bb9787879e9c39b8c45dc4197b8b820727c93b4df056a95f196b77d49ab62745ce2f84f1fce15cbe109f3793f7143af40881be07fe442a9b5016cc6be6bdb5fab7ca8bf64f67e9a402511d024921285856420aae839579e921c9b1d2fc57eefd72b50785c5e678455647caf91d865bf022d834503d46fa308ab2eb42b0a5a2888f50545f276095b21d4ce2cfcc6aa88792755ad4d005cbe12c059320af85e2d02473afe42562565a4dbf230d1e6386f02c67f1ccd83c5f143c535d1d1daf94ce309a064ff4840f9490a2e3ee34c2d35ff8276e5e53606c08670b383dac9f1e067fb5e72702559ba8056358a13be50bc5b13969261f291b9bd5de9927f37d87648917e1218da06741b930b994d0d6b1bddc7f8c22c7a6e09bfffd3fe6096f119457fe5e19ca2bfe097858c198d75fe0895e80562bc113ffbb82db255d28cebc887a17c15774917cc3d27f07104b647b82c0fc63a9d1cbd48498da3b7601066c53edf24d6c2033c62816a1ac05b018055e9315de2d07f33248077664aec744f86b1a643ea0cced934ec071ac59412593b56be962cba673f68b1402c496a6d7190f8c63900e8bf4d2918304ec995dd656c328a42bd87ac2ebf6e1c0a373652aff83f2d665405212c94ad5160e0a5a2f29374fdeeaddc7b3bc5fc6e5d0fdb5d814bf315ee608d5dcd6333e5d85d64e03559604a9c3fc08d62a91800c80ceebf7c13b7e82a24f2ca2e153478fe1caa2292e0e76de0e2cc10be536591277724efc3e26fde6618bdd94b5e438335609004bf37757a0eb38b79b5ea87657a8e197ff2e80581b0c8576032d72d627c60b97b34f10385c113ac806d7600592be0765d3db371a478301450b8498e25df3b701830d941c283f3dc3ca93e0948d7547bbd85dd48d1806db0f64b243e83e095cc3023900ecd96c3de4f788e4648ddc9217f6204b7ff6dfb1328f17f8dd32040eb7ce2f7051961113a304def45a34d6e8f04bd4c978302af1bef308413dacbac0f9c11b225b2627a3874c4353fcc059beaffdb8b888a33d123d5c66d9aba9b59d675e60a7358c33b60ea0be0338d17e345b30d47909b48de95f5f307851a41a9f3172e7eda2704e7b8c8cb61ea6a4adfe7a37f85ea97c2d03b0d09f75d93c01ac34215c374d6b44b5eb499d1cef707002a91f52722d3ec8ed8d5344640bcff9e3c6a2c5dfbac1422bae929e03506f4eba881e18d827197d9eda2f489191bf278edd1690b7b7a66a4ba826a783962143fd26131864937a420a69c2d30c3855264da69c62bb54e443c8ef0e1f341e0d9c322a7f8bb318ad31e0ce61bb5a636c9e28f79279e047e2a0b17d0714b0d318a8061424221c629f0332476a2cf49507398701f6aa68de575d31e5f13b0fb7a25a8205f12c35879ac6f3901b9a04c4a9199ae443b223a1ea6ee48534e87adb6f3f5b74816ded0ac59abeabe0324107246adb0ab2f3fd1e358d07ab4a551239f4177fc931f5d9c408b1a18e56d68b35b5af072ea36f473c935af5b76d2f665baa3ab68549e18d9534741a92c17ddb7a7446bf06feb5571bf03bd0c4b8e4c5718b9de4da87de43625c116ecd90e5e592323af1e3b62d8eb736453faabf65a1a40931758b1c3d8d9e193247df5e0adfb7ec2b4448198b6f057eb2faa5c76a4a63e036be4dd41cbad76069b9cb1c80f65be41833e57a8fc30f29e8f9e7a6c2c0ed217404fbd2ca9428cae4e5bd029ff60dc7cfa98921b83f45a1ddc6fcda4bc0820b4ef5605eca3780e5326c969734234ec1fe1d853ef2190ef3d8abeb19ffff92a13b3191048e321a819ca1749d2cc5ace07df72aa4f1bf831cd93ec289d48d75dd0d5b27de7c6c2d", 0xc00}, {&(0x7f0000004580)="f93310d2b36c5941ef6200d2d25a6ff5f0bb62809901709fa869b5aa477bac73c299dfa1db4398b40423c6eab212f391c8382ddc141073a3e5047ab8aa0666566e7295fdd5", 0x45}, {&(0x7f0000004600)}], 0x7, 0x0, 0x0, 0x200400d0}], 0x4, 0x200000d4) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x7d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x400000000010, 0x4, 0x1) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfff2}, {0xb}, {0xc}}}, 0x24}}, 0x4000) r2 = syz_clone(0x21100, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000200)}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x8000080}, 0x1) close_range(r3, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r2, 0x0, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r9, 0x65, 0x6, 0x0, 0x4) write$RDMA_USER_CM_CMD_DESTROY_ID(r8, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) 962.792192ms ago: executing program 1 (id=1450): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xc01, 0x3, 0x2298, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x2200, 0x3c8, 0x3c8, 0x2200, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x110, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x6, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x1, './cgroup.net/syz1\x00', 0x2, {0x5}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc9, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x22f8) 779.921986ms ago: executing program 1 (id=1451): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x680) ioctl$NBD_SET_BLKSIZE(r5, 0xab01, 0x5) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x1c, 0x15, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x24040808) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ustat(0x40, 0x0) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r8, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000280)="dac2aa12c75c02af57fec7d7f2469e27425921bfc3841f8e961e515c1cf5036c307ee9ec2c2d0f8a1645c6e8bf408aafb60deba8cca294e2a6dd38ab728091f25d822a402588b36a32960c8f27a86893f1e3dbe7f2ac625f14876c73acbeb5c13b97389baa3ab5b9970298e23c56b8d9d0c62a", 0x73}, {&(0x7f0000000580)="88dc03e1172e3b72e115e3168aeb54d710b3c8499d21fd2dab5a154fa47d4abfac13780a7cdaebf116b791fe754f685b74c852a08dc61a9a34ee9994fd804be50877c63320feb24ae2977dbdc5251bcd22ccb45aeeb6e676f0cb3ccdd6ec9bc7b67581ded3f1b4990cacff453f41994562047cf4814cd4e20ea6bb2deb22520fcf36def67cdf5fcf87632107c0e0a8910b835954a73df0828277ffc4e6a103a7346708b3a661d4abcbc37fd613a8fe6cbfbb04b6c741cbd5a021b242f639700ffd0fda9bd248c09c", 0xc8}], 0x2, &(0x7f00000006c0)=[@flowinfo={{0x14, 0x29, 0xb, 0xa2}}, @tclass={{0x14, 0x29, 0x43, 0x8}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}, @rthdr={{0x38, 0x29, 0x39, {0x5c, 0x4, 0x2, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x42}]}}}], 0x80}, 0x10) mmap(&(0x7f0000994000/0x9000)=nil, 0x9000, 0x1000003, 0x13, r9, 0x40000) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 579.519726ms ago: executing program 5 (id=1452): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) fdatasync(r0) syz_open_dev$loop(&(0x7f0000000080), 0x8000000000000001, 0x1c1280) socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x45c, 0x40103) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffde6}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 12.912763ms ago: executing program 4 (id=1453): socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x80000) epoll_create1(0x80000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "d025907c76129912", "b73f1da249f70c251c43ac8a4957b04307dd377f0713b3d1910ff528829861ed", "07ec6ab6", "821e88e47e4902f1"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400ad45, &(0x7f0000000080)={0xa, 0x4c24, 0x4, @mcast2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0xfffffe66, &(0x7f0000000540)=[{&(0x7f0000000300)="b3ab70", 0x3}], 0x1}, 0xb00}], 0x1, 0x4000091) r2 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x7fff, 0x300) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000340)={0xa00000, 0x4, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0xa2093d, 0x619, '\x00', @ptr=0x3}}) sendfile(r0, r1, 0x0, 0xffffffff004) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x20880, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3848b25", 0x6}], 0x1}}], 0x1, 0x20008000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0xea, 0xffffffffffffffff, 0x8, 0x80000000000, 0x0, 0xfffffffffffff30c, 0x5}, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000140)={@remote, r5}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="e271bc9ca39aa20694ae1e206cbc678f48cf4ffd4c35365f02c68c44e8b74b987ab5411a879c36048e982fa539791695435e05fe291288fe5ab391a5439b6f8f551bf534708faf64652364bccaeb1931a537885386039f"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x39) 0s ago: executing program 2 (id=1454): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r5, 0x0, 0x0, 0x20004041, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0), 0x0, 0x0, 0x0, 0x2663}, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000100)) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r7) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, 0x0) writev(r10, 0x0, 0x0) sendto$inet(r3, &(0x7f00000000c0), 0x0, 0x6000000000000000, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000700), 0x9, 0x0) unshare(0x62040200) syz_usb_connect(0x2, 0x24, &(0x7f0000001380)=ANY=[@ANYBLOB="1201100132337a084406218078470102030109021200010207300e090401"], 0x0) kernel console output (not intermixed with test programs): r 15 [ 303.449277][ T926] usb 6-1: Using ep0 maxpacket: 32 [ 303.465728][ T926] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 303.502690][ T926] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 303.561100][ T926] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 303.591121][ T926] usb 6-1: Product: syz [ 303.605764][ T926] usb 6-1: Manufacturer: syz [ 303.632955][ T926] usb 6-1: SerialNumber: syz [ 303.663284][ T926] usb 6-1: config 0 descriptor?? [ 303.681935][ T9021] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 303.880114][ T926] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 304.069404][ T926] usb 3-1: Using ep0 maxpacket: 32 [ 304.085543][ T5946] usb 6-1: USB disconnect, device number 16 [ 304.095721][ T926] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 304.127109][ T926] usb 3-1: config 0 has no interface number 0 [ 304.161436][ T926] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 304.198468][ T926] usb 3-1: config 0 interface 85 has no altsetting 0 [ 304.230709][ T926] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 304.232781][ T9034] netlink: 'syz.4.844': attribute type 46 has an invalid length. [ 304.276306][ T926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.311734][ T926] usb 3-1: Product: syz [ 304.327529][ T926] usb 3-1: Manufacturer: syz [ 304.342399][ T926] usb 3-1: SerialNumber: syz [ 304.367585][ T926] usb 3-1: config 0 descriptor?? [ 304.533214][ T5917] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 304.582422][ T9044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.845'. [ 304.586004][ T9045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.846'. [ 304.601068][ T9044] netlink: 24 bytes leftover after parsing attributes in process `syz.1.845'. [ 304.624510][ T9044] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 304.637153][ T9044] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 304.647728][ T9045] netlink: 24 bytes leftover after parsing attributes in process `syz.0.846'. [ 304.752036][ T5917] usb 5-1: unable to get BOS descriptor or descriptor too short [ 304.763881][ T5917] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 135, changing to 7 [ 304.813141][ T5917] usb 5-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 304.828073][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.838784][ T5917] usb 5-1: Product: syz [ 304.845203][ T5917] usb 5-1: Manufacturer: syz [ 304.852047][ T5917] usb 5-1: SerialNumber: syz [ 305.305776][ T5917] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 305.415699][ T926] appletouch 3-1:0.85: Failed to read mode from device. [ 305.452757][ T926] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 305.590095][ T926] usb 3-1: USB disconnect, device number 41 [ 305.704985][ T5917] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 305.956404][ T5917] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 306.026328][ T5917] usb 5-1: USB disconnect, device number 16 [ 306.161892][ T6358] udevd[6358]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 306.712107][ T9065] netlink: 'syz.4.850': attribute type 1 has an invalid length. [ 306.767943][ T9065] gretap1: entered allmulticast mode [ 307.189081][ T9072] netlink: 64 bytes leftover after parsing attributes in process `syz.4.852'. [ 307.808600][ T9092] gretap1: entered allmulticast mode [ 307.891902][ T9096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.862'. [ 309.041889][ T926] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 309.169699][ T9136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.875'. [ 309.288000][ T9141] netlink: 'syz.5.876': attribute type 1 has an invalid length. [ 310.619217][ T5963] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 310.856239][ T5963] usb 5-1: Using ep0 maxpacket: 16 [ 310.911208][ T5963] usb 5-1: config 0 has no interfaces? [ 310.943912][ T5963] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 311.007446][ T5963] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 311.060949][ T5963] usb 5-1: Manufacturer: syz [ 311.126704][ T5963] usb 5-1: config 0 descriptor?? [ 312.034466][ T9165] netlink: 'syz.4.882': attribute type 1 has an invalid length. [ 312.327944][ T9165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.347058][ T9183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.888'. [ 312.535158][ T9192] netlink: 104 bytes leftover after parsing attributes in process `syz.2.890'. [ 312.596486][ T9168] bond0: (slave gretap1): making interface the new active one [ 312.625802][ T9168] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 312.830718][ T5963] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 312.989170][ T5963] usb 3-1: Using ep0 maxpacket: 16 [ 313.002822][ T5963] usb 3-1: config 0 interface 0 has no altsetting 0 [ 313.020114][ T5963] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice=f2.d7 [ 313.040302][ T5963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.055158][ T5963] usb 3-1: Product: syz [ 313.070668][ T5963] usb 3-1: Manufacturer: syz [ 313.081450][ T5963] usb 3-1: SerialNumber: syz [ 313.111509][ T5963] usb 3-1: config 0 descriptor?? [ 313.725075][ T5963] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 313.747922][ T5963] usb 3-1: USB disconnect, device number 42 [ 313.781391][ T6358] udevd[6358]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 314.400292][ T9215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.897'. [ 314.614584][ T5946] usb 5-1: USB disconnect, device number 17 [ 314.821139][ T8230] bond0 (unregistering): (slave gretap1): Releasing active interface [ 314.883765][ T8230] bond0 (unregistering): Released all slaves [ 315.252412][ T9231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.900'. [ 315.769295][ T5963] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 315.949750][ T5963] usb 1-1: Using ep0 maxpacket: 8 [ 315.972472][ T5963] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.014210][ T5963] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 316.067735][ T5963] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 316.105380][ T5963] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 316.154813][ T5963] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 316.195552][ T5963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.243528][ T5963] usb 1-1: config 0 descriptor?? [ 316.470414][ T5963] usb 1-1: USB disconnect, device number 27 [ 316.666274][ T9251] syzkaller1: entered promiscuous mode [ 316.676985][ T9251] syzkaller1: entered allmulticast mode [ 316.839412][ T5946] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 317.001777][ T5946] usb 5-1: Using ep0 maxpacket: 8 [ 317.017271][ T5946] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.063441][ T5946] usb 5-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 317.090582][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.107980][ T5946] usb 5-1: Product: syz [ 317.118623][ T5946] usb 5-1: Manufacturer: syz [ 317.125163][ T5946] usb 5-1: SerialNumber: syz [ 317.162813][ T5946] ti_usb_3410_5052 5-1:1.0: required endpoints missing [ 317.183883][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.190895][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.365524][ T5946] usb 5-1: USB disconnect, device number 18 [ 317.573097][ T9276] Cannot find del_set index 1 as target [ 317.587716][ T9276] netlink: 4 bytes leftover after parsing attributes in process `syz.5.915'. [ 317.603567][ T9276] openvswitch: netlink: Key 0 has unexpected len 8 expected 0 [ 318.451502][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 318.619701][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 318.658802][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.687669][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 318.728896][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 318.765278][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 318.812264][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 318.837796][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.882718][ T9] usb 5-1: config 0 descriptor?? [ 319.131235][ T9] usb 5-1: USB disconnect, device number 19 [ 319.565043][ T9302] netlink: 'syz.0.925': attribute type 1 has an invalid length. [ 320.777162][ T9344] netlink: 24 bytes leftover after parsing attributes in process `syz.1.936'. [ 321.059511][ T5843] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 321.071321][ T5963] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 321.262248][ T5843] usb 5-1: Using ep0 maxpacket: 16 [ 321.290529][ T5963] usb 3-1: Using ep0 maxpacket: 16 [ 321.303078][ T5843] usb 5-1: config 0 has no interfaces? [ 321.322265][ T5843] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 321.343859][ T5843] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 321.353648][ T5963] usb 3-1: config 0 has no interfaces? [ 321.374529][ T5843] usb 5-1: Manufacturer: syz [ 321.405116][ T5843] usb 5-1: config 0 descriptor?? [ 321.420379][ T5963] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 321.463419][ T5963] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 321.527827][ T5963] usb 3-1: Manufacturer: syz [ 321.565216][ T5963] usb 3-1: config 0 descriptor?? [ 321.651364][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 321.785315][ T9345] netlink: 'syz.4.934': attribute type 1 has an invalid length. [ 321.804957][ T9360] netlink: 'syz.0.941': attribute type 1 has an invalid length. [ 321.869678][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 321.879080][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.890935][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 321.915805][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 321.934008][ T9347] netlink: 'syz.2.935': attribute type 1 has an invalid length. [ 321.939685][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 321.964476][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 321.987978][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.012138][ T9] usb 2-1: config 0 descriptor?? [ 322.181653][ T9345] 8021q: adding VLAN 0 to HW filter on device bond3 [ 322.369259][ T9363] bond3: (slave gretap1): making interface the new active one [ 322.382466][ T9363] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 322.673977][ T9347] 8021q: adding VLAN 0 to HW filter on device bond3 [ 322.759138][ T5917] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 322.867026][ T9367] bond3: (slave gretap1): making interface the new active one [ 322.907834][ T9367] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 322.925808][ T5917] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 322.946477][ T5917] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 322.988277][ T5917] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 323.004340][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.027141][ T5917] usb 1-1: Product: syz [ 323.035426][ T5917] usb 1-1: Manufacturer: syz [ 323.045022][ T5917] usb 1-1: SerialNumber: syz [ 323.058667][ T5917] usb 1-1: config 0 descriptor?? [ 323.080238][ T5917] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 324.394693][ T5917] usb 2-1: USB disconnect, device number 36 [ 325.039332][ T9] usb 5-1: USB disconnect, device number 20 [ 325.446457][ T29] usb 3-1: USB disconnect, device number 43 [ 325.596392][ T5963] usb 1-1: USB disconnect, device number 28 [ 325.707694][ T9408] FAULT_INJECTION: forcing a failure. [ 325.707694][ T9408] name failslab, interval 1, probability 0, space 0, times 0 [ 325.748804][ T9408] CPU: 1 UID: 0 PID: 9408 Comm: syz.5.953 Tainted: G L syzkaller #0 PREEMPT(full) [ 325.748838][ T9408] Tainted: [L]=SOFTLOCKUP [ 325.748847][ T9408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 325.748859][ T9408] Call Trace: [ 325.748868][ T9408] [ 325.748877][ T9408] dump_stack_lvl+0xe8/0x150 [ 325.748920][ T9408] should_fail_ex+0x412/0x560 [ 325.748948][ T9408] should_failslab+0xa8/0x100 [ 325.748975][ T9408] __kmalloc_cache_noprof+0x88/0x660 [ 325.748996][ T9408] ? sctp_v6_to_sk_saddr+0x100/0x1c0 [ 325.749027][ T9408] ? sctp_association_new+0x89/0x25e0 [ 325.749050][ T9408] ? __asan_memcpy+0x40/0x70 [ 325.749083][ T9408] sctp_association_new+0x89/0x25e0 [ 325.749107][ T9408] ? sctp_do_bind+0x661/0x9d0 [ 325.749135][ T9408] ? __ipv6_addr_type+0x247/0x2f0 [ 325.749176][ T9408] sctp_connect_new_asoc+0x2e4/0x6b0 [ 325.749202][ T9408] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 325.749232][ T9408] ? __local_bh_enable_ip+0xd0/0x130 [ 325.749278][ T9408] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 325.749303][ T9408] ? security_sctp_bind_connect+0x7e/0x2c0 [ 325.749337][ T9408] sctp_sendmsg+0x1528/0x2c10 [ 325.749375][ T9408] ? __pfx_sctp_sendmsg+0x10/0x10 [ 325.749401][ T9408] ? aa_sk_perm+0x6d5/0x900 [ 325.749421][ T9408] ? __might_fault+0xaf/0x130 [ 325.749469][ T9408] ? __pfx_aa_sk_perm+0x10/0x10 [ 325.749494][ T9408] ? sock_rps_record_flow+0x19/0x350 [ 325.749521][ T9408] ? __pfx_inet_sendmsg+0x10/0x10 [ 325.749549][ T9408] ? inet_sendmsg+0x2f4/0x370 [ 325.749576][ T9408] ? __pfx_inet_sendmsg+0x10/0x10 [ 325.749603][ T9408] __sys_sendto+0x5de/0x710 [ 325.749632][ T9408] ? __pfx___sys_sendto+0x10/0x10 [ 325.749654][ T9408] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 325.749702][ T9408] ? __fget_files+0x3a0/0x420 [ 325.749743][ T9408] ? ksys_write+0x242/0x270 [ 325.749768][ T9408] ? __pfx_ksys_write+0x10/0x10 [ 325.749808][ T9408] __x64_sys_sendto+0xde/0x100 [ 325.749833][ T9408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.749856][ T9408] do_syscall_64+0x15f/0xf80 [ 325.749886][ T9408] ? trace_irq_disable+0x3b/0x140 [ 325.749910][ T9408] ? clear_bhb_loop+0x40/0x90 [ 325.749935][ T9408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.749956][ T9408] RIP: 0033:0x7f7b3cf9c819 [ 325.749975][ T9408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.749993][ T9408] RSP: 002b:00007f7b3dec6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 325.750016][ T9408] RAX: ffffffffffffffda RBX: 00007f7b3d215fa0 RCX: 00007f7b3cf9c819 [ 325.750032][ T9408] RDX: 000000000000fef4 RSI: 0000200000000180 RDI: 0000000000000003 [ 325.750045][ T9408] RBP: 00007f7b3dec6090 R08: 0000200000000040 R09: 000000000000001c [ 325.750059][ T9408] R10: 00000000000048d8 R11: 0000000000000246 R12: 0000000000000001 [ 325.750072][ T9408] R13: 00007f7b3d216038 R14: 00007f7b3d215fa0 R15: 00007f7b3d33fa48 [ 325.750105][ T9408] [ 326.256793][ T9418] netlink: 'syz.5.957': attribute type 1 has an invalid length. [ 326.363295][ T9422] gretap1: entered allmulticast mode [ 326.741633][ T9433] netlink: 24 bytes leftover after parsing attributes in process `syz.0.962'. [ 327.102646][ T9447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.967'. [ 327.710512][ T9468] netlink: 24 bytes leftover after parsing attributes in process `syz.1.975'. [ 328.970720][ T9496] FAULT_INJECTION: forcing a failure. [ 328.970720][ T9496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.985416][ T9496] CPU: 0 UID: 0 PID: 9496 Comm: syz.0.986 Tainted: G L syzkaller #0 PREEMPT(full) [ 328.985450][ T9496] Tainted: [L]=SOFTLOCKUP [ 328.985459][ T9496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 328.985473][ T9496] Call Trace: [ 328.985481][ T9496] [ 328.985490][ T9496] dump_stack_lvl+0xe8/0x150 [ 328.985529][ T9496] should_fail_ex+0x412/0x560 [ 328.985558][ T9496] _copy_to_user+0x31/0xb0 [ 328.985588][ T9496] simple_read_from_buffer+0xe1/0x170 [ 328.985623][ T9496] proc_fail_nth_read+0x1bb/0x230 [ 328.985658][ T9496] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 328.985693][ T9496] ? rw_verify_area+0x2a6/0x4d0 [ 328.985712][ T9496] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 328.985750][ T9496] vfs_read+0x20c/0xa70 [ 328.985779][ T9496] ? __pfx_vfs_read+0x10/0x10 [ 328.985803][ T9496] ? do_sys_openat2+0x14c/0x200 [ 328.985830][ T9496] ? kmem_cache_free+0x182/0x650 [ 328.985851][ T9496] ? fd_install+0x94/0x3d0 [ 328.985881][ T9496] ? unix_setsockopt+0x158/0x2a0 [ 328.985921][ T9496] ksys_read+0x150/0x270 [ 328.985943][ T9496] ? __pfx_ksys_read+0x10/0x10 [ 328.985981][ T9496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.986004][ T9496] do_syscall_64+0x15f/0xf80 [ 328.986034][ T9496] ? trace_irq_disable+0x3b/0x140 [ 328.986060][ T9496] ? clear_bhb_loop+0x40/0x90 [ 328.986087][ T9496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.986108][ T9496] RIP: 0033:0x7f05afd5d04e [ 328.986128][ T9496] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 328.986147][ T9496] RSP: 002b:00007f05b0d18fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 328.986170][ T9496] RAX: ffffffffffffffda RBX: 00007f05b0d196c0 RCX: 00007f05afd5d04e [ 328.986186][ T9496] RDX: 000000000000000f RSI: 00007f05b0d190a0 RDI: 0000000000000004 [ 328.986199][ T9496] RBP: 00007f05b0d19090 R08: 0000000000000000 R09: 0000000000000000 [ 328.986213][ T9496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.986225][ T9496] R13: 00007f05b0016038 R14: 00007f05b0015fa0 R15: 00007f05b013fa48 [ 328.986256][ T9496] [ 329.477102][ T9505] netlink: 'syz.0.990': attribute type 10 has an invalid length. [ 329.486189][ T9505] bond0: (slave wlan1): Opening slave failed [ 330.063072][ T9526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.995'. [ 330.072932][ T9526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.995'. [ 330.364265][ T9531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.996'. [ 330.375401][ T9531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.996'. [ 330.439322][ T5904] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 330.604370][ T5904] usb 5-1: config 2 has an invalid interface number: 1 but max is 0 [ 330.650452][ T5904] usb 5-1: config 2 has no interface number 0 [ 330.696188][ T5904] usb 5-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=47.78 [ 330.710211][ T5963] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 330.744527][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.779961][ T5904] usb 5-1: Product: syz [ 330.794171][ T5904] usb 5-1: Manufacturer: syz [ 330.803693][ T5904] usb 5-1: SerialNumber: syz [ 330.909139][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 330.923453][ T5963] usb 2-1: config 2 has an invalid interface number: 1 but max is 0 [ 330.949143][ T5963] usb 2-1: config 2 has no interface number 0 [ 330.993123][ T5963] usb 2-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=47.78 [ 331.012753][ T5963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.033501][ T5963] usb 2-1: Product: syz [ 331.052198][ T5963] usb 2-1: Manufacturer: syz [ 331.061907][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 331.085397][ T9] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 331.103261][ T5963] usb 2-1: SerialNumber: syz [ 331.120525][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.176904][ T9] usb 1-1: config 0 descriptor?? [ 331.227033][ T9] gspca_main: sunplus-2.14.0 probing 041e:400b [ 333.224492][ T9558] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 333.360081][ T9] gspca_sunplus: reg_w_riv err -110 [ 333.391302][ T9] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 333.403420][ T9563] netlink: 'syz.2.1007': attribute type 10 has an invalid length. [ 333.421318][ T9562] fuse: Unknown parameter 'ˆ…^]!ˆ«áÒUÖ›¯Kûœ' [ 333.517509][ T9563] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 333.578368][ T9563] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 333.647778][ T9563] team0: Port device netdevsim0 added [ 333.681060][ T5904] usb 5-1: selecting invalid altsetting 1 [ 333.693320][ T9564] netlink: 'syz.2.1007': attribute type 10 has an invalid length. [ 333.729368][ T5904] snd-usb-us122l 5-1:2.1: usb_set_interface error [ 333.753718][ T5904] snd-usb-us122l 5-1:2.1: probe with driver snd-usb-us122l failed with error -22 [ 333.827654][ T5904] usb 5-1: USB disconnect, device number 21 [ 334.219482][ T5963] usb 2-1: selecting invalid altsetting 1 [ 334.237694][ T5963] snd-usb-us122l 2-1:2.1: usb_set_interface error [ 334.289631][ T5963] snd-usb-us122l 2-1:2.1: probe with driver snd-usb-us122l failed with error -22 [ 334.333489][ T5963] usb 2-1: USB disconnect, device number 37 [ 334.640725][ T5946] usb 1-1: USB disconnect, device number 29 [ 334.759109][ T5963] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 334.942929][ T5963] usb 2-1: Using ep0 maxpacket: 8 [ 334.970822][ T5963] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 334.987415][ T5963] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 335.015066][ T5963] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 335.047336][ T5963] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 335.081512][ T5963] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 335.099430][ T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 335.113670][ T5963] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 335.135263][ T5963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.189396][ T5946] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 335.255211][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1018'. [ 335.268988][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 335.278796][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1018'. [ 335.288875][ T9] usb 6-1: config 0 has no interfaces? [ 335.309150][ T9] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 335.319891][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.329302][ T5946] usb 5-1: device descriptor read/64, error -71 [ 335.336843][ T9] usb 6-1: Product: syz [ 335.351338][ T9] usb 6-1: Manufacturer: syz [ 335.361133][ T9] usb 6-1: SerialNumber: syz [ 335.392022][ T5963] usb 2-1: usb_control_msg returned -32 [ 335.405379][ T5963] usbtmc 2-1:16.0: can't read capabilities [ 335.405379][ T9] usb 6-1: config 0 descriptor?? [ 335.579547][ T5946] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 335.616951][ T9588] netlink: 'syz.5.1015': attribute type 17 has an invalid length. [ 335.670475][ T9588] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1015'. [ 335.719497][ T5946] usb 5-1: device descriptor read/64, error -71 [ 335.746679][ T9588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.769342][ T9] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 335.787705][ T5963] usb 6-1: USB disconnect, device number 18 [ 335.860446][ T5946] usb usb5-port1: attempt power cycle [ 335.972582][ T9] usb 1-1: config 2 has an invalid interface number: 1 but max is 0 [ 335.985148][ T9] usb 1-1: config 2 has no interface number 0 [ 335.994333][ T9577] syzkaller0: entered promiscuous mode [ 336.000785][ T9577] syzkaller0: entered allmulticast mode [ 336.013282][ T9] usb 1-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=47.78 [ 336.023806][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.039545][ T9] usb 1-1: Product: syz [ 336.046060][ T9] usb 1-1: Manufacturer: syz [ 336.054013][ T9] usb 1-1: SerialNumber: syz [ 336.181068][ T926] usb 2-1: USB disconnect, device number 38 [ 336.199133][ T5843] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 336.209083][ T5946] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 336.256476][ T5946] usb 5-1: device descriptor read/8, error -71 [ 336.372181][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.395697][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.409687][ T5843] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 336.427455][ T9606] xt_CT: You must specify a L4 protocol and not use inversions on it [ 336.437255][ T5843] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 336.452106][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.475824][ T5843] usb 3-1: config 0 descriptor?? [ 336.509466][ T5946] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 336.553362][ T5946] usb 5-1: device descriptor read/8, error -71 [ 336.680290][ T5946] usb usb5-port1: unable to enumerate USB device [ 336.929277][ T5843] plantronics 0003:047F:FFFF.0009: item 0 0 0 8 parsing failed [ 336.937511][ T9611] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 336.946204][ T5843] plantronics 0003:047F:FFFF.0009: parse failed [ 336.955656][ T5843] plantronics 0003:047F:FFFF.0009: probe with driver plantronics failed with error -22 [ 337.133503][ T5843] usb 3-1: USB disconnect, device number 44 [ 337.901766][ T9615] syzkaller0: entered promiscuous mode [ 337.908012][ T9615] syzkaller0: entered allmulticast mode [ 338.383534][ T9] usb 1-1: selecting invalid altsetting 1 [ 338.418239][ T9] snd-usb-us122l 1-1:2.1: usb_set_interface error [ 338.454615][ T9] snd-usb-us122l 1-1:2.1: probe with driver snd-usb-us122l failed with error -22 [ 338.515241][ T9] usb 1-1: USB disconnect, device number 30 [ 340.193762][ T9648] syz.2.1031 (9648) used obsolete PPPIOCDETACH ioctl [ 342.016989][ T9689] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 342.302165][ T9698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1047'. [ 342.338472][ T9698] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1047'. [ 342.352949][ T9698] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 342.373681][ T9698] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 342.519441][ T5946] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 342.689023][ T5946] usb 5-1: Using ep0 maxpacket: 32 [ 342.703755][ T5946] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 342.719579][ T5946] usb 5-1: config 0 has no interface number 0 [ 342.761095][ T5946] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 342.820084][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.852644][ T5946] usb 5-1: Product: syz [ 342.858343][ T5946] usb 5-1: Manufacturer: syz [ 342.863727][ T5946] usb 5-1: SerialNumber: syz [ 342.912680][ T5946] usb 5-1: config 0 descriptor?? [ 342.938519][ T5946] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 342.954632][ T5946] usb 5-1: selecting invalid altsetting 1 [ 342.961926][ T5946] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 342.975544][ T5946] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 342.989643][ T5946] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 343.000883][ T5946] usb 5-1: media controller created [ 343.067469][ T9709] No such timeout policy "syz1" [ 343.082672][ T5946] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 343.254625][ T5946] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 343.274809][ T5946] zl10353_read_register: readreg error (reg=127, ret==-71) [ 343.310650][ T5946] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 343.478494][ T5946] usb 5-1: USB disconnect, device number 26 [ 346.299134][ T5963] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 346.480363][ T5963] usb 2-1: Using ep0 maxpacket: 16 [ 346.523109][ T5963] usb 2-1: config 0 has no interfaces? [ 346.541369][ T5963] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 346.568589][ T9757] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1063'. [ 346.594448][ T5963] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 346.612800][ T5963] usb 2-1: Manufacturer: syz [ 346.644803][ T5963] usb 2-1: config 0 descriptor?? [ 346.761807][ T9762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1064'. [ 346.798678][ T9762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1064'. [ 346.922430][ T9748] netlink: 'syz.1.1060': attribute type 1 has an invalid length. [ 347.249052][ T5963] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 347.292766][ T9748] 8021q: adding VLAN 0 to HW filter on device bond2 [ 347.360101][ T5946] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 347.452500][ T5963] usb 1-1: config 2 has an invalid interface number: 1 but max is 0 [ 347.490406][ T5963] usb 1-1: config 2 has no interface number 0 [ 347.527564][ T5963] usb 1-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=47.78 [ 347.558831][ T5963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.570210][ T5946] usb 3-1: Using ep0 maxpacket: 32 [ 347.583175][ T5963] usb 1-1: Product: syz [ 347.592249][ T5946] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.602423][ T5963] usb 1-1: Manufacturer: syz [ 347.602449][ T5963] usb 1-1: SerialNumber: syz [ 347.660828][ T5946] usb 3-1: config 0 has no interfaces? [ 347.683243][ T5946] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 347.704217][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.728078][ T5946] usb 3-1: Product: syz [ 347.743517][ T5946] usb 3-1: Manufacturer: syz [ 347.756405][ T5946] usb 3-1: SerialNumber: syz [ 347.759410][ T5903] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 347.796180][ T5946] usb 3-1: config 0 descriptor?? [ 347.939522][ T5903] usb 5-1: Using ep0 maxpacket: 32 [ 347.955779][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.001053][ T5903] usb 5-1: config 0 has no interfaces? [ 348.030082][ T5903] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 348.076625][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.096726][ T9774] fuse: Unknown parameter 'user_id00000000000000000000' [ 348.116781][ T5903] usb 5-1: Product: syz [ 348.125175][ T5903] usb 5-1: Manufacturer: syz [ 348.136604][ T5903] usb 5-1: SerialNumber: syz [ 348.161944][ T5903] usb 5-1: config 0 descriptor?? [ 348.210251][ T5903] usb 3-1: USB disconnect, device number 45 [ 348.381694][ T9772] FAULT_INJECTION: forcing a failure. [ 348.381694][ T9772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.400315][ T9772] CPU: 0 UID: 0 PID: 9772 Comm: syz.4.1067 Tainted: G L syzkaller #0 PREEMPT(full) [ 348.400353][ T9772] Tainted: [L]=SOFTLOCKUP [ 348.400359][ T9772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 348.400369][ T9772] Call Trace: [ 348.400375][ T9772] [ 348.400383][ T9772] dump_stack_lvl+0xe8/0x150 [ 348.400445][ T9772] should_fail_ex+0x412/0x560 [ 348.400485][ T9772] _copy_from_user+0x2d/0xb0 [ 348.400515][ T9772] ___sys_sendmsg+0x1c6/0x360 [ 348.400535][ T9772] ? __lock_acquire+0x6b5/0x2cf0 [ 348.400578][ T9772] ? __pfx____sys_sendmsg+0x10/0x10 [ 348.400641][ T9772] ? __fget_files+0x2a/0x420 [ 348.400673][ T9772] ? __fget_files+0x3a0/0x420 [ 348.400701][ T9772] __x64_sys_sendmsg+0x1bd/0x2a0 [ 348.400752][ T9772] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 348.400789][ T9772] ? __pfx_ksys_write+0x10/0x10 [ 348.400818][ T9772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.400844][ T9772] do_syscall_64+0x15f/0xf80 [ 348.400867][ T9772] ? trace_irq_disable+0x3b/0x140 [ 348.400887][ T9772] ? clear_bhb_loop+0x40/0x90 [ 348.400927][ T9772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.400948][ T9772] RIP: 0033:0x7f4d10b9c819 [ 348.400967][ T9772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.400984][ T9772] RSP: 002b:00007f4d11a99028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.401008][ T9772] RAX: ffffffffffffffda RBX: 00007f4d10e15fa0 RCX: 00007f4d10b9c819 [ 348.401019][ T9772] RDX: 0000000000000080 RSI: 0000200000001000 RDI: 0000000000000004 [ 348.401030][ T9772] RBP: 00007f4d11a99090 R08: 0000000000000000 R09: 0000000000000000 [ 348.401039][ T9772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.401063][ T9772] R13: 00007f4d10e16038 R14: 00007f4d10e15fa0 R15: 00007f4d10f3fa48 [ 348.401097][ T9772] [ 348.404741][ T5904] usb 5-1: USB disconnect, device number 27 [ 349.597753][ T5946] usb 2-1: USB disconnect, device number 39 [ 349.619279][ T5903] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 349.795023][ T5903] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 349.804997][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.823792][ T5903] usb 5-1: Product: syz [ 349.839226][ T5903] usb 5-1: Manufacturer: syz [ 349.857469][ T5903] usb 5-1: SerialNumber: syz [ 349.896145][ T9788] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1073'. [ 349.959648][ T9788] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1073'. [ 350.068228][ T9788] gretap0: entered promiscuous mode [ 350.076490][ T9788] erspan0: entered promiscuous mode [ 350.086224][ T9788] hsr1: Slave A (gretap0) is not up; please bring it up to get a fully working HSR network [ 350.097273][ T9788] hsr1: Slave B (erspan0) is not up; please bring it up to get a fully working HSR network [ 350.325283][ T5903] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 350.384110][ T5903] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 350.878591][ T5963] usb 1-1: selecting invalid altsetting 1 [ 350.923071][ T5963] snd-usb-us122l 1-1:2.1: usb_set_interface error [ 350.941502][ T5963] snd-usb-us122l 1-1:2.1: probe with driver snd-usb-us122l failed with error -22 [ 350.982581][ T5963] usb 1-1: USB disconnect, device number 31 [ 351.633790][ T5903] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 351.913987][ T9783] netlink: 'syz.4.1071': attribute type 15 has an invalid length. [ 351.954851][ T9783] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1071'. [ 352.683023][ T5903] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -EPROTO [ 352.735657][ T5903] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 352.763871][ T5903] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 352.787531][ T5903] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 352.826711][ T5903] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 352.902163][ T5903] usb 5-1: USB disconnect, device number 28 [ 353.286668][ T9836] gretap2: entered allmulticast mode [ 353.428842][ T9838] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1089'. [ 353.548787][ T9838] 8021q: adding VLAN 0 to HW filter on device bond4 [ 354.349923][ T5903] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 354.521538][ T5903] usb 5-1: Using ep0 maxpacket: 8 [ 354.542474][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.596480][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 354.636112][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 354.720287][ T5903] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 354.747574][ T9874] gretap2: entered allmulticast mode [ 354.793088][ T5903] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 354.817153][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.897385][ T5903] usb 5-1: config 0 descriptor?? [ 355.144042][ T5903] usb 5-1: USB disconnect, device number 29 [ 355.312112][ T9886] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 355.369102][ T5946] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 355.531090][ T5946] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.550651][ T5946] usb 2-1: config 0 has no interfaces? [ 355.556379][ T5946] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 355.567669][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.582949][ T5946] usb 2-1: config 0 descriptor?? [ 355.804856][ T9882] FAULT_INJECTION: forcing a failure. [ 355.804856][ T9882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.822318][ T9882] CPU: 0 UID: 0 PID: 9882 Comm: syz.1.1103 Tainted: G L syzkaller #0 PREEMPT(full) [ 355.822353][ T9882] Tainted: [L]=SOFTLOCKUP [ 355.822361][ T9882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 355.822374][ T9882] Call Trace: [ 355.822383][ T9882] [ 355.822392][ T9882] dump_stack_lvl+0xe8/0x150 [ 355.822429][ T9882] should_fail_ex+0x412/0x560 [ 355.822458][ T9882] _copy_from_iter+0x1d3/0x1670 [ 355.822486][ T9882] ? rcu_is_watching+0x15/0xb0 [ 355.822525][ T9882] ? __pfx__copy_from_iter+0x10/0x10 [ 355.822559][ T9882] ? netlink_sendmsg+0x650/0xb40 [ 355.822582][ T9882] ? skb_put+0x11b/0x210 [ 355.822609][ T9882] netlink_sendmsg+0x6c0/0xb40 [ 355.822648][ T9882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.822676][ T9882] ? aa_sock_msg_perm+0xf1/0x1b0 [ 355.822701][ T9882] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 355.822727][ T9882] ____sys_sendmsg+0x972/0x9f0 [ 355.822755][ T9882] ? __might_fault+0xaf/0x130 [ 355.822792][ T9882] ? __pfx_____sys_sendmsg+0x10/0x10 [ 355.822827][ T9882] ? import_iovec+0x73/0xa0 [ 355.822856][ T9882] ___sys_sendmsg+0x2a5/0x360 [ 355.822881][ T9882] ? __lock_acquire+0x6b5/0x2cf0 [ 355.822915][ T9882] ? __pfx____sys_sendmsg+0x10/0x10 [ 355.822978][ T9882] ? __fget_files+0x2a/0x420 [ 355.823005][ T9882] ? __fget_files+0x3a0/0x420 [ 355.823043][ T9882] __x64_sys_sendmsg+0x1bd/0x2a0 [ 355.823073][ T9882] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 355.823110][ T9882] ? __pfx_ksys_write+0x10/0x10 [ 355.823139][ T9882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.823161][ T9882] do_syscall_64+0x15f/0xf80 [ 355.823199][ T9882] ? trace_irq_disable+0x3b/0x140 [ 355.823225][ T9882] ? clear_bhb_loop+0x40/0x90 [ 355.823250][ T9882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.823270][ T9882] RIP: 0033:0x7fac1679c819 [ 355.823290][ T9882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.823308][ T9882] RSP: 002b:00007fac1771b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.823330][ T9882] RAX: ffffffffffffffda RBX: 00007fac16a15fa0 RCX: 00007fac1679c819 [ 355.823346][ T9882] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 355.823360][ T9882] RBP: 00007fac1771b090 R08: 0000000000000000 R09: 0000000000000000 [ 355.823373][ T9882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.823385][ T9882] R13: 00007fac16a16038 R14: 00007fac16a15fa0 R15: 00007fac16b3fa48 [ 355.823417][ T9882] [ 355.825579][ T9894] x_tables: duplicate entry at hook 1 [ 355.876313][ T5903] usb 2-1: USB disconnect, device number 40 [ 356.241915][ T5917] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 356.401402][ T5917] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 356.424595][ T5917] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 356.450354][ T5917] usb 3-1: config 220 interface 0 has no altsetting 0 [ 356.469468][ T5917] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 356.552488][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.586447][ T5917] usb 3-1: Product: syz [ 356.594696][ T5917] usb 3-1: Manufacturer: syz [ 356.620555][ T5917] usb 3-1: SerialNumber: syz [ 356.856098][ T9897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.861559][ T5963] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 356.890193][ T5843] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 356.912745][ T9896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.949511][ T9897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.989764][ T9896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.045258][ T5963] usb 2-1: Using ep0 maxpacket: 32 [ 357.053902][ T5963] usb 2-1: config 0 has no interfaces? [ 357.091460][ T5843] usb 5-1: Using ep0 maxpacket: 16 [ 357.114471][ T5963] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 357.130526][ T5843] usb 5-1: config 0 has no interfaces? [ 357.155688][ T5963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.181730][ T5843] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 357.193326][ T5963] usb 2-1: Product: syz [ 357.212059][ T5843] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 357.229101][ T5963] usb 2-1: Manufacturer: syz [ 357.238864][ T5963] usb 2-1: SerialNumber: syz [ 357.263369][ T5843] usb 5-1: Manufacturer: syz [ 357.293311][ T5963] usb 2-1: config 0 descriptor?? [ 357.302442][ T5843] usb 5-1: config 0 descriptor?? [ 357.425389][ T5917] usb 3-1: USB disconnect, device number 46 [ 357.507010][ T9911] netlink: 'syz.1.1114': attribute type 17 has an invalid length. [ 357.527260][ T9911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1114'. [ 357.570169][ T5946] usb 2-1: USB disconnect, device number 41 [ 357.789143][ T9906] netlink: 'syz.4.1111': attribute type 1 has an invalid length. [ 358.016147][ T9928] sctp: [Deprecated]: syz.2.1118 (pid 9928) Use of struct sctp_assoc_value in delayed_ack socket option. [ 358.016147][ T9928] Use struct sctp_sack_info instead [ 358.304952][ T9906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.406632][ T9908] bond0: (slave gretap1): making interface the new active one [ 358.499014][ T5904] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 358.510829][ T9908] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 358.529125][ T5963] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 358.659248][ T5904] usb 6-1: Using ep0 maxpacket: 8 [ 358.668595][ T5904] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 358.687476][ T5904] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 358.705241][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.713638][ T5963] usb 3-1: Using ep0 maxpacket: 8 [ 358.724205][ T5963] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.744206][ T5904] usb 6-1: Product: syz [ 358.751543][ T5963] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 358.763458][ T5904] usb 6-1: Manufacturer: syz [ 358.772872][ T5904] usb 6-1: SerialNumber: syz [ 358.780632][ T5963] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 358.798358][ T5904] usb 6-1: config 0 descriptor?? [ 358.809265][ T5963] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 358.831546][ T5904] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 358.846445][ T5904] usb 6-1: setting power ON [ 358.853809][ T5963] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 358.870850][ T5904] dvb-usb: bulk message failed: -22 (2/0) [ 358.886092][ T5963] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.926407][ T5963] usb 3-1: config 0 descriptor?? [ 358.932124][ T5904] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 358.962765][ T5904] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 358.981335][ T5904] usb 6-1: media controller created [ 359.022178][ T5904] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 359.048850][ T9934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.077491][ T9934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.101497][ T5904] usb 6-1: selecting invalid altsetting 6 [ 359.126756][ T5904] usb 6-1: digital interface selection failed (-22) [ 359.145465][ T9934] dvb-usb: bulk message failed: -22 (3/0) [ 359.154146][ T5904] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 359.169306][ T5963] usb 3-1: USB disconnect, device number 47 [ 359.193967][ T5904] usb 6-1: setting power OFF [ 359.208149][ T9934] dvb-usb: bulk message failed: -22 (3/0) [ 359.249084][ T5904] dvb-usb: bulk message failed: -22 (2/0) [ 359.266735][ T9934] MPI: mpi too large (113288 bits) [ 359.280206][ T5904] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 359.306807][ T5904] (NULL device *): no alternate interface [ 359.396554][ T5904] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 359.443727][ T5904] usb 6-1: USB disconnect, device number 19 [ 359.775775][ T9949] hsr0: entered promiscuous mode [ 359.801903][ T9946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1124'. [ 359.916384][ T9951] gretap2: entered allmulticast mode [ 360.341754][ T9960] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1129'. [ 360.389933][ T5904] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 360.447996][ T5963] usb 5-1: USB disconnect, device number 30 [ 360.560870][ T5904] usb 1-1: config 0 interface 0 has no altsetting 0 [ 360.584253][ T5904] usb 1-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 360.603965][ T9964] binder: 9962:9964 ioctl c02054a5 2000000006c0 returned -22 [ 360.618413][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.687845][ T5904] usb 1-1: config 0 descriptor?? [ 360.795173][ T8242] bond0 (unregistering): (slave gretap1): Releasing active interface [ 360.864172][ T8242] bond0 (unregistering): Released all slaves [ 361.154483][ T5904] hid_parser_main: 14 callbacks suppressed [ 361.154504][ T5904] hid_mf 0003:0079:1846.000A: unknown main item tag 0x0 [ 361.207318][ T5904] hid_mf 0003:0079:1846.000A: unknown main item tag 0x0 [ 361.231468][ T5904] hid_mf 0003:0079:1846.000A: unknown main item tag 0x0 [ 361.263618][ T5904] hid_mf 0003:0079:1846.000A: unknown main item tag 0x0 [ 361.289316][ T5904] hid_mf 0003:0079:1846.000A: unknown main item tag 0x0 [ 361.297675][ T5904] hid_mf 0003:0079:1846.000A: unknown main item tag 0x0 [ 361.306456][ T5904] hid_mf 0003:0079:1846.000A: unknown main item tag 0x0 [ 361.315366][ T5904] hid_mf 0003:0079:1846.000A: unknown main item tag 0x0 [ 361.324405][ T5904] hid_mf 0003:0079:1846.000A: unknown main item tag 0x0 [ 361.334301][ T5904] hid_mf 0003:0079:1846.000A: unknown main item tag 0x0 [ 361.371677][ T5904] hid_mf 0003:0079:1846.000A: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.0-1/input0 [ 361.400313][ T5904] hid_mf 0003:0079:1846.000A: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 361.442039][ T5904] usb 1-1: USB disconnect, device number 32 [ 361.570803][ T9978] fido_id[9978]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 361.679333][ T5843] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 361.704095][ T9982] openvswitch: netlink: IPv4 tunnel dst address is zero [ 361.888193][ T5843] usb 5-1: Using ep0 maxpacket: 8 [ 361.917046][ T5843] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.957642][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 361.992168][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 362.031596][ T5843] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 362.083301][ T5843] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 362.118308][ T9990] FAULT_INJECTION: forcing a failure. [ 362.118308][ T9990] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 362.165901][ T9990] CPU: 1 UID: 0 PID: 9990 Comm: syz.1.1137 Tainted: G L syzkaller #0 PREEMPT(full) [ 362.165937][ T9990] Tainted: [L]=SOFTLOCKUP [ 362.165945][ T9990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 362.165963][ T9990] Call Trace: [ 362.165977][ T9990] [ 362.165986][ T9990] dump_stack_lvl+0xe8/0x150 [ 362.166026][ T9990] should_fail_ex+0x412/0x560 [ 362.166055][ T9990] prepare_alloc_pages+0x22a/0x650 [ 362.166091][ T9990] __alloc_frozen_pages_noprof+0x12f/0x380 [ 362.166123][ T9990] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 362.166158][ T9990] ? __pfx_policy_nodemask+0x10/0x10 [ 362.166179][ T9990] ? __lock_acquire+0x6b5/0x2cf0 [ 362.166204][ T9990] alloc_pages_mpol+0x235/0x490 [ 362.166226][ T9990] folio_alloc_mpol_noprof+0x39/0x160 [ 362.166246][ T9990] vma_alloc_folio_noprof+0xe1/0x1e0 [ 362.166266][ T9990] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 362.166285][ T9990] ? __pte_offset_map+0x29/0x240 [ 362.166308][ T9990] ? __pte_offset_map+0x29/0x240 [ 362.166333][ T9990] do_pte_missing+0x159d/0x33f0 [ 362.166358][ T9990] ? handle_mm_fault+0xee/0x3170 [ 362.166383][ T9990] handle_mm_fault+0x1bd7/0x3170 [ 362.166416][ T9990] ? handle_mm_fault+0xee/0x3170 [ 362.166472][ T9990] ? __pfx_handle_mm_fault+0x10/0x10 [ 362.166513][ T9990] ? follow_page_pte+0x6b5/0xe50 [ 362.166557][ T9990] ? __pfx_follow_page_pte+0x10/0x10 [ 362.166588][ T9990] __get_user_pages+0x1683/0x2720 [ 362.166633][ T9990] __gup_longterm_locked+0xdcf/0x1630 [ 362.166663][ T9990] ? lock_acquire+0x106/0x350 [ 362.166687][ T9990] ? sanity_check_pinned_pages+0x7a8/0x870 [ 362.166715][ T9990] gup_fast_fallback+0x1d84/0x20d0 [ 362.166765][ T9990] ? __pfx_gup_fast_fallback+0x10/0x10 [ 362.166819][ T9990] ? blkg_tryget+0x20/0x250 [ 362.166845][ T9990] ? is_valid_gup_args+0x11f/0x200 [ 362.166868][ T9990] ? pin_user_pages_fast+0x4d/0xb0 [ 362.166891][ T9990] iov_iter_extract_pages+0x37b/0x5f0 [ 362.166918][ T9990] iov_iter_extract_bvecs+0xb1/0x920 [ 362.166946][ T9990] ? bio_associate_blkg+0x6d/0x230 [ 362.166971][ T9990] bio_iov_iter_get_pages+0x346/0x930 [ 362.166998][ T9990] __blkdev_direct_IO+0x677/0xfa0 [ 362.167037][ T9990] ? __pfx___blkdev_direct_IO+0x10/0x10 [ 362.167068][ T9990] ? iov_npages+0x170/0x290 [ 362.167088][ T9990] blkdev_direct_IO+0x121a/0x1790 [ 362.167110][ T9990] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 362.167139][ T9990] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 362.167160][ T9990] ? current_time+0x22a/0x370 [ 362.167176][ T9990] ? __pfx_current_time+0x10/0x10 [ 362.167198][ T9990] ? atime_needs_update+0x56b/0x6d0 [ 362.167216][ T9990] ? touch_atime+0xf1/0x6b0 [ 362.167229][ T9990] ? __pfx_aa_file_perm+0x10/0x10 [ 362.167249][ T9990] ? kiocb_write_and_wait+0xad/0x1b0 [ 362.167268][ T9990] blkdev_read_iter+0x23d/0x440 [ 362.167295][ T9990] do_iter_readv_writev+0x619/0x8c0 [ 362.167314][ T9990] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 362.167334][ T9990] ? bpf_lsm_file_permission+0x9/0x20 [ 362.167351][ T9990] ? security_file_permission+0x75/0x260 [ 362.167375][ T9990] ? rw_verify_area+0x2a6/0x4d0 [ 362.167392][ T9990] vfs_readv+0x288/0x840 [ 362.167418][ T9990] ? __pfx_vfs_readv+0x10/0x10 [ 362.167471][ T9990] ? __fget_files+0x2a/0x420 [ 362.167500][ T9990] ? __fget_files+0x3a0/0x420 [ 362.167521][ T9990] ? __fget_files+0x2a/0x420 [ 362.167548][ T9990] __se_sys_preadv2+0x184/0x2a0 [ 362.167567][ T9990] ? __pfx___se_sys_preadv2+0x10/0x10 [ 362.167589][ T9990] ? __x64_sys_preadv2+0x20/0xc0 [ 362.167605][ T9990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.167621][ T9990] do_syscall_64+0x15f/0xf80 [ 362.167644][ T9990] ? trace_irq_disable+0x3b/0x140 [ 362.167663][ T9990] ? clear_bhb_loop+0x40/0x90 [ 362.167682][ T9990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.167697][ T9990] RIP: 0033:0x7fac1679c819 [ 362.167712][ T9990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.167725][ T9990] RSP: 002b:00007fac176d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 362.167744][ T9990] RAX: ffffffffffffffda RBX: 00007fac16a16180 RCX: 00007fac1679c819 [ 362.167755][ T9990] RDX: 0000000000000002 RSI: 0000200000000080 RDI: 0000000000000005 [ 362.167765][ T9990] RBP: 00007fac176d9090 R08: 0000000000000000 R09: 0000000000000000 [ 362.167774][ T9990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 362.167783][ T9990] R13: 00007fac16a16218 R14: 00007fac16a16180 R15: 00007fac16b3fa48 [ 362.167807][ T9990] [ 362.611050][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.818414][ T5843] usb 5-1: config 0 descriptor?? [ 363.012492][ T9999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1141'. [ 363.037260][ T9999] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1141'. [ 363.052088][ T9] usb 5-1: USB disconnect, device number 31 [ 363.120515][ T9999] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1141'. [ 363.149888][ T5843] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 363.249976][T10001] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1142'. [ 363.327724][ T5843] usb 6-1: unable to get BOS descriptor or descriptor too short [ 363.342769][ T5843] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 363.368404][ T5843] usb 6-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 363.391178][ T5843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.407489][ T5843] usb 6-1: Product: syz [ 363.420083][ T5843] usb 6-1: Manufacturer: syz [ 363.428494][ T5843] usb 6-1: SerialNumber: syz [ 363.959228][ T5903] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 364.139026][ T5903] usb 5-1: Using ep0 maxpacket: 16 [ 364.151367][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.171893][ T5903] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 364.195659][ T5903] usb 5-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 364.205356][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.231844][ T5903] usb 5-1: config 0 descriptor?? [ 364.456281][T10013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.471525][T10013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.713799][ T5903] logitech 0003:046D:C295.000B: hidraw0: USB HID v0.fe Device [HID 046d:c295] on usb-dummy_hcd.4-1/input0 [ 364.753488][ T5903] logitech 0003:046D:C295.000B: no inputs found [ 364.903606][ T926] usb 5-1: USB disconnect, device number 32 [ 364.933063][T10019] fido_id[10019]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 365.119399][ T9] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 365.224391][ T5843] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 365.246848][ T5843] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 365.281016][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 365.301148][ T9] usb 3-1: config 0 has no interfaces? [ 365.325014][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 365.351011][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.370632][ T9] usb 3-1: Product: syz [ 365.385307][ T9] usb 3-1: Manufacturer: syz [ 365.400530][ T5843] usb 6-1: USB disconnect, device number 20 [ 365.412999][ T9] usb 3-1: SerialNumber: syz [ 365.456639][ T9] usb 3-1: config 0 descriptor?? [ 365.708372][T10021] netlink: 'syz.2.1148': attribute type 17 has an invalid length. [ 365.729131][T10021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1148'. [ 365.769969][ T9] usb 3-1: USB disconnect, device number 48 [ 365.999088][ T5843] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 366.186818][ T5843] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 366.225492][ T5843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.271331][ T5843] usb 6-1: Product: syz [ 366.280299][ T5843] usb 6-1: Manufacturer: syz [ 366.298137][ T5843] usb 6-1: SerialNumber: syz [ 366.623421][T10032] syz.4.1152 (10032): drop_caches: 2 [ 366.739329][ T5903] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 366.908994][ T5903] usb 3-1: Using ep0 maxpacket: 8 [ 366.929582][ T5903] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.959268][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 366.978183][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 366.994388][ T5903] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 367.013211][ T5903] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 367.028767][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.070045][ T5903] usb 3-1: config 0 descriptor?? [ 367.124567][T10053] netlink: 'syz.1.1159': attribute type 2 has an invalid length. [ 367.234609][T10056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.260396][T10056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.303129][ T5904] usb 3-1: USB disconnect, device number 49 [ 367.312863][ T5843] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 367.351988][T10059] FAULT_INJECTION: forcing a failure. [ 367.351988][T10059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.366368][ T5843] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 367.385922][ T5843] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 367.416548][ T5843] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 367.429917][T10059] CPU: 0 UID: 0 PID: 10059 Comm: syz.1.1161 Tainted: G L syzkaller #0 PREEMPT(full) [ 367.429956][T10059] Tainted: [L]=SOFTLOCKUP [ 367.429964][T10059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 367.429977][T10059] Call Trace: [ 367.429985][T10059] [ 367.429995][T10059] dump_stack_lvl+0xe8/0x150 [ 367.430034][T10059] should_fail_ex+0x412/0x560 [ 367.430064][T10059] _copy_from_iter+0x1d3/0x1670 [ 367.430101][T10059] ? rcu_is_watching+0x15/0xb0 [ 367.430141][T10059] ? __pfx__copy_from_iter+0x10/0x10 [ 367.430173][T10059] ? netlink_sendmsg+0x650/0xb40 [ 367.430197][T10059] ? skb_put+0x11b/0x210 [ 367.430226][T10059] netlink_sendmsg+0x6c0/0xb40 [ 367.430260][T10059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.430289][T10059] ? aa_sock_msg_perm+0xf1/0x1b0 [ 367.430315][T10059] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 367.430342][T10059] ____sys_sendmsg+0x972/0x9f0 [ 367.430368][T10059] ? __might_fault+0xaf/0x130 [ 367.430408][T10059] ? __pfx_____sys_sendmsg+0x10/0x10 [ 367.430444][T10059] ? import_iovec+0x73/0xa0 [ 367.430474][T10059] ___sys_sendmsg+0x2a5/0x360 [ 367.430501][T10059] ? __lock_acquire+0x6b5/0x2cf0 [ 367.430535][T10059] ? __pfx____sys_sendmsg+0x10/0x10 [ 367.430597][T10059] ? __fget_files+0x2a/0x420 [ 367.430626][T10059] ? __fget_files+0x3a0/0x420 [ 367.430667][T10059] __x64_sys_sendmsg+0x1bd/0x2a0 [ 367.430696][T10059] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 367.430734][T10059] ? __pfx_ksys_write+0x10/0x10 [ 367.430764][T10059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.430787][T10059] do_syscall_64+0x15f/0xf80 [ 367.430818][T10059] ? trace_irq_disable+0x3b/0x140 [ 367.430844][T10059] ? clear_bhb_loop+0x40/0x90 [ 367.430871][T10059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.430892][T10059] RIP: 0033:0x7fac1679c819 [ 367.430912][T10059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.430930][T10059] RSP: 002b:00007fac1771b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.430953][T10059] RAX: ffffffffffffffda RBX: 00007fac16a15fa0 RCX: 00007fac1679c819 [ 367.430969][T10059] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 367.430982][T10059] RBP: 00007fac1771b090 R08: 0000000000000000 R09: 0000000000000000 [ 367.430994][T10059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.431007][T10059] R13: 00007fac16a16038 R14: 00007fac16a15fa0 R15: 00007fac16b3fa48 [ 367.431040][T10059] [ 367.490178][ T5917] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 367.504458][ T5843] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 367.692565][ T5917] usb 5-1: config 171 has an invalid interface number: 109 but max is 0 [ 367.733627][ T5843] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 367.755328][ T5843] usb 6-1: USB disconnect, device number 21 [ 367.768189][ T5917] usb 5-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 367.789138][ T5917] usb 5-1: config 171 has no interface number 0 [ 367.797219][ T5917] usb 5-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 367.819882][ T5917] usb 5-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 367.840463][ T5917] usb 5-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 368.016839][ T5917] usb 5-1: string descriptor 0 read error: -71 [ 368.017042][ T5917] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 368.083008][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.131834][ T5917] usb 5-1: can't set config #171, error -71 [ 368.164277][ T5917] usb 5-1: USB disconnect, device number 33 [ 368.409819][ T5843] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 368.601472][T10092] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1171'. [ 368.629306][ T5843] usb 6-1: Using ep0 maxpacket: 32 [ 368.636320][ T5843] usb 6-1: config 0 has no interfaces? [ 368.650504][ T5843] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 368.674144][ T5843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.689261][ T5843] usb 6-1: Product: syz [ 368.699770][ T5843] usb 6-1: Manufacturer: syz [ 368.708986][ T5843] usb 6-1: SerialNumber: syz [ 368.735674][ T5843] usb 6-1: config 0 descriptor?? [ 368.971039][T10076] netlink: 'syz.5.1166': attribute type 17 has an invalid length. [ 368.989436][T10076] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1166'. [ 369.030623][ T5917] usb 6-1: USB disconnect, device number 22 [ 370.229302][ T5917] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 370.351493][ T5904] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 370.399381][ T5917] usb 6-1: Using ep0 maxpacket: 8 [ 370.408313][ T5917] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.420744][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 370.472049][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 370.506794][ T5917] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 370.538024][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.557400][ T5917] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 370.568340][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.578421][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.589580][ T5904] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 370.601419][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.612686][ T5917] usb 6-1: config 0 descriptor?? [ 370.672071][ T5904] usb 3-1: config 0 descriptor?? [ 371.026866][ T5904] hid-steam 0003:28DE:1142.000C: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 371.115369][ T5904] hid-steam 0003:28DE:1142.000C: Steam wireless receiver connected [ 371.233523][ T5904] hid-steam 0003:28DE:1142.000D: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 371.291267][ T5904] usb 3-1: USB disconnect, device number 50 [ 371.393397][ T5904] hid-steam 0003:28DE:1142.000C: Steam wireless receiver disconnected [ 371.480884][T10117] fido_id[10117]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 371.589105][ T5903] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 371.771312][ T5903] usb 1-1: Using ep0 maxpacket: 16 [ 371.785334][T10122] netlink: 2268 bytes leftover after parsing attributes in process `syz.1.1181'. [ 371.800855][ T5903] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.823776][ T5903] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.833754][ T5903] usb 1-1: config 0 interface 0 has no altsetting 0 [ 371.840556][ T5903] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 371.849725][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.862949][ T5903] usb 1-1: config 0 descriptor?? [ 371.943771][T10125] xt_hashlimit: size too large, truncated to 1048576 [ 371.961009][T10123] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 371.967696][T10123] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 371.980547][T10123] vhci_hcd vhci_hcd.0: Device attached [ 372.005819][T10128] binder: 10126:10128 unknown command 1077961494 [ 372.005847][T10128] binder: 10126:10128 ioctl c0306201 200000000100 returned -22 [ 372.021909][T10128] syzkaller1: entered promiscuous mode [ 372.041838][T10128] syzkaller1: entered allmulticast mode [ 372.052881][T10130] fuse: Bad value for 'fd' [ 372.125414][ T30] audit: type=1326 audit(1776417310.631:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.1.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1679c819 code=0x7ffc0000 [ 372.161658][ T30] audit: type=1326 audit(1776417310.641:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.1.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1679c819 code=0x7ffc0000 [ 372.191612][T10127] vhci_hcd: connection closed [ 372.204112][ T149] vhci_hcd vhci_hcd.4: stop threads [ 372.215122][ T149] vhci_hcd vhci_hcd.4: release socket [ 372.218731][ T30] audit: type=1326 audit(1776417310.661:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.1.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fac1679c819 code=0x7ffc0000 [ 372.220769][ T30] audit: type=1326 audit(1776417310.661:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.1.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1679c819 code=0x7ffc0000 [ 372.220818][ T30] audit: type=1326 audit(1776417310.661:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.1.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1679c819 code=0x7ffc0000 [ 372.220868][ T30] audit: type=1326 audit(1776417310.661:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.1.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fac1679c819 code=0x7ffc0000 [ 372.220914][ T30] audit: type=1326 audit(1776417310.661:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.1.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1679c819 code=0x7ffc0000 [ 372.220958][ T30] audit: type=1326 audit(1776417310.661:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.1.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1679c819 code=0x7ffc0000 [ 372.221006][ T30] audit: type=1326 audit(1776417310.661:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.1.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fac1679c819 code=0x7ffc0000 [ 372.221052][ T30] audit: type=1326 audit(1776417310.661:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.1.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1679c819 code=0x7ffc0000 [ 372.309259][ T5843] usb 42-1: SetAddress Request (2) to port 0 [ 372.413019][ T5903] hid (null): unknown global tag 0xd [ 372.418426][ T5903] hid (null): unknown global tag 0xe [ 372.437021][ T5903] hid_parser_main: 66 callbacks suppressed [ 372.437053][ T5903] cougar 0003:060B:500A.000E: unknown main item tag 0x0 [ 372.459307][ T5903] cougar 0003:060B:500A.000E: unknown main item tag 0x0 [ 372.466484][ T149] vhci_hcd vhci_hcd.4: disconnect device [ 372.472492][ T5903] cougar 0003:060B:500A.000E: unknown main item tag 0x0 [ 372.479872][ T5903] cougar 0003:060B:500A.000E: unknown main item tag 0x0 [ 372.486967][ T5903] cougar 0003:060B:500A.000E: unknown main item tag 0x0 [ 372.495176][ T5843] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 372.506587][ T5903] cougar 0003:060B:500A.000E: unknown main item tag 0x0 [ 372.515392][ T5903] cougar 0003:060B:500A.000E: unknown main item tag 0x0 [ 372.525528][ T5903] cougar 0003:060B:500A.000E: unknown main item tag 0x0 [ 372.532581][ T5843] usb 42-1: enqueue for inactive port 0 [ 372.538830][ T5903] cougar 0003:060B:500A.000E: unknown main item tag 0x0 [ 372.548579][ T5903] cougar 0003:060B:500A.000E: unknown main item tag 0x0 [ 372.558008][ T5903] cougar 0003:060B:500A.000E: unexpected long global item [ 372.566027][ T5903] cougar 0003:060B:500A.000E: parse failed [ 372.572323][ T5903] cougar 0003:060B:500A.000E: probe with driver cougar failed with error -22 [ 372.616777][ T5903] usb 1-1: USB disconnect, device number 33 [ 372.829551][ T5903] usb 6-1: USB disconnect, device number 23 [ 372.930353][ T5843] usb usb42-port1: attempt power cycle [ 373.531264][ T5843] usb usb42-port1: unable to enumerate USB device [ 374.076732][T10162] fuse: Unknown parameter '0x0000000000000004' [ 374.760563][ T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 374.930220][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 374.949024][ T5903] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 374.958683][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.998301][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.026535][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 375.065897][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.106902][ T9] usb 2-1: config 0 descriptor?? [ 375.136418][ T9] hub 2-1:0.0: USB hub found [ 375.139181][ T5903] usb 1-1: Using ep0 maxpacket: 16 [ 375.149517][ T5843] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 375.176369][ T5903] usb 1-1: config 0 has no interfaces? [ 375.224026][ T5903] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 375.256727][ T5903] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 375.286136][ T5903] usb 1-1: Manufacturer: syz [ 375.305232][ T5903] usb 1-1: config 0 descriptor?? [ 375.339293][ T9] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 375.347329][ T5843] usb 3-1: Using ep0 maxpacket: 16 [ 375.358007][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.372358][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.384720][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 375.394837][ T5843] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 375.407986][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 375.436783][ T5843] usb 3-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 375.447295][ T9] usb 2-1: USB disconnect, device number 42 [ 375.466397][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.488054][ T5843] usb 3-1: config 0 descriptor?? [ 375.519211][ T5904] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 375.559897][T10184] netlink: 'syz.0.1195': attribute type 1 has an invalid length. [ 375.683025][T10184] 8021q: adding VLAN 0 to HW filter on device bond9 [ 375.692265][ T5904] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 375.710101][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.725181][ T5904] usb 5-1: Product: syz [ 375.733562][ T5904] usb 5-1: Manufacturer: syz [ 375.745541][ T5904] usb 5-1: SerialNumber: syz [ 375.771940][ T5904] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 375.850373][ T9] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 375.983102][ T5917] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 376.027518][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 376.036670][T10181] bond9: (slave gretap2): making interface the new active one [ 376.063025][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.095187][T10181] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 376.129198][T10187] fuse: Invalid rootmode [ 376.137019][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.158280][ T5843] sony 0003:1345:3008.000F: hiddev0,hidraw0: USB HID v80.00 Device [HID 1345:3008] on usb-dummy_hcd.2-1/input0 [ 376.182542][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 376.193523][ T5843] sony 0003:1345:3008.000F: failed to claim input [ 376.200666][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.253699][ T9] usb 2-1: config 0 descriptor?? [ 376.269561][ T5843] usb 3-1: USB disconnect, device number 51 [ 376.283681][ T9] hub 2-1:0.0: USB hub found [ 376.400199][T10196] fido_id[10196]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 376.483330][ T9] hub 2-1:0.0: config failed, hub has too many ports! (err -19) [ 376.687439][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 376.696466][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 376.750110][ T9] usb 2-1: USB disconnect, device number 43 [ 376.801355][T10192] netlink: 'syz.4.1201': attribute type 12 has an invalid length. [ 376.823405][T10192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.848397][T10192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.915008][ T5946] usb 5-1: USB disconnect, device number 34 [ 377.273693][T10212] FAULT_INJECTION: forcing a failure. [ 377.273693][T10212] name failslab, interval 1, probability 0, space 0, times 0 [ 377.288222][T10212] CPU: 1 UID: 0 PID: 10212 Comm: syz.5.1206 Tainted: G L syzkaller #0 PREEMPT(full) [ 377.288261][T10212] Tainted: [L]=SOFTLOCKUP [ 377.288270][T10212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 377.288289][T10212] Call Trace: [ 377.288299][T10212] [ 377.288309][T10212] dump_stack_lvl+0xe8/0x150 [ 377.288374][T10212] should_fail_ex+0x412/0x560 [ 377.288427][T10212] should_failslab+0xa8/0x100 [ 377.288466][T10212] __kmalloc_cache_noprof+0x88/0x660 [ 377.288494][T10212] ? tcf_ife_init+0x234/0xd80 [ 377.288545][T10212] tcf_ife_init+0x234/0xd80 [ 377.288588][T10212] ? __pfx_tcf_ife_init+0x10/0x10 [ 377.288656][T10212] tcf_action_init_1+0x4ba/0x740 [ 377.288705][T10212] ? __pfx_tcf_action_init_1+0x10/0x10 [ 377.288738][T10212] ? _raw_read_unlock+0x28/0x50 [ 377.288769][T10212] ? tc_action_load_ops+0x247/0x540 [ 377.288849][T10212] ? __nla_parse+0x40/0x60 [ 377.288887][T10212] tcf_action_init+0x31e/0xb40 [ 377.288936][T10212] ? __kernel_text_address+0xd/0x30 [ 377.288969][T10212] ? __pfx_tcf_action_init+0x10/0x10 [ 377.289035][T10212] ? __mutex_trylock_common+0x158/0x260 [ 377.289069][T10212] ? __pfx___mutex_trylock_common+0x10/0x10 [ 377.289133][T10212] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 377.289175][T10212] tcf_exts_validate_ex+0x246/0x540 [ 377.289212][T10212] ? __pfx_tcf_exts_validate_ex+0x10/0x10 [ 377.289274][T10212] mall_change+0x452/0x8a0 [ 377.289313][T10212] ? __pfx_mall_change+0x10/0x10 [ 377.289356][T10212] tc_new_tfilter+0xff8/0x1780 [ 377.289440][T10212] ? __pfx_tc_new_tfilter+0x10/0x10 [ 377.289489][T10212] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 377.289532][T10212] ? __pfx_tc_new_tfilter+0x10/0x10 [ 377.289561][T10212] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 377.289584][T10212] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 377.289621][T10212] ? netlink_sendmsg+0x5d4/0xb40 [ 377.289651][T10212] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 377.289675][T10212] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 377.289702][T10212] ? __lock_acquire+0x6b5/0x2cf0 [ 377.289749][T10212] netlink_rcv_skb+0x232/0x4b0 [ 377.289778][T10212] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 377.289805][T10212] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 377.289848][T10212] ? netlink_deliver_tap+0x2e/0x1b0 [ 377.289875][T10212] ? netlink_deliver_tap+0x2e/0x1b0 [ 377.289910][T10212] netlink_unicast+0x75c/0x8e0 [ 377.289946][T10212] netlink_sendmsg+0x813/0xb40 [ 377.289986][T10212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.290019][T10212] ? aa_sock_msg_perm+0xf1/0x1b0 [ 377.290047][T10212] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 377.290078][T10212] ____sys_sendmsg+0x972/0x9f0 [ 377.290108][T10212] ? __might_fault+0xaf/0x130 [ 377.290153][T10212] ? __pfx_____sys_sendmsg+0x10/0x10 [ 377.290195][T10212] ? import_iovec+0x73/0xa0 [ 377.290230][T10212] ___sys_sendmsg+0x2a5/0x360 [ 377.290258][T10212] ? __lock_acquire+0x6b5/0x2cf0 [ 377.290297][T10212] ? __pfx____sys_sendmsg+0x10/0x10 [ 377.290378][T10212] ? __fget_files+0x2a/0x420 [ 377.290410][T10212] ? __fget_files+0x3a0/0x420 [ 377.290455][T10212] __x64_sys_sendmsg+0x1bd/0x2a0 [ 377.290489][T10212] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 377.290530][T10212] ? __pfx_ksys_write+0x10/0x10 [ 377.290565][T10212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.290591][T10212] do_syscall_64+0x15f/0xf80 [ 377.290626][T10212] ? trace_irq_disable+0x3b/0x140 [ 377.290656][T10212] ? clear_bhb_loop+0x40/0x90 [ 377.290686][T10212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.290709][T10212] RIP: 0033:0x7f7b3cf9c819 [ 377.290733][T10212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.290753][T10212] RSP: 002b:00007f7b3dec6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.290778][T10212] RAX: ffffffffffffffda RBX: 00007f7b3d215fa0 RCX: 00007f7b3cf9c819 [ 377.290795][T10212] RDX: 00000000000000c0 RSI: 0000200000000580 RDI: 0000000000000007 [ 377.290811][T10212] RBP: 00007f7b3dec6090 R08: 0000000000000000 R09: 0000000000000000 [ 377.290826][T10212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 377.290840][T10212] R13: 00007f7b3d216038 R14: 00007f7b3d215fa0 R15: 00007f7b3d33fa48 [ 377.290878][T10212] [ 377.720083][T10216] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1207'. [ 377.732724][T10216] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1207'. [ 377.919158][ T5963] usb 1-1: USB disconnect, device number 34 [ 377.927543][ T5917] usb 5-1: Service connection timeout for: 258 [ 377.934639][ T5917] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 377.948215][ T5917] ath9k_htc: Failed to initialize the device [ 377.960958][ T5946] usb 5-1: ath9k_htc: USB layer deinitialized [ 378.062849][T10221] program syz.0.1209 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 378.079070][ T5904] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 378.127741][ T9] IPVS: starting estimator thread 0... [ 378.163906][T10216] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 378.181798][T10216] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 378.229647][ T5904] usb 3-1: no configurations [ 378.252206][T10223] IPVS: using max 37 ests per chain, 88800 per kthread [ 378.266326][ T5904] usb 3-1: can't read configurations, error -22 [ 378.358605][T10227] fuse: Unknown parameter '0x0000000000000004' [ 378.429110][ T5904] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 378.623381][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.633593][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.640413][ T5904] usb 3-1: no configurations [ 378.645673][ T5904] usb 3-1: can't read configurations, error -22 [ 378.669758][ T5904] usb usb3-port1: attempt power cycle [ 378.789005][ T5946] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 378.951994][ T5946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 378.975501][ T5946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 379.002439][ T5946] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 379.028806][ T5904] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 379.053691][ T5946] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 379.071211][ T5904] usb 3-1: no configurations [ 379.078690][ T5904] usb 3-1: can't read configurations, error -22 [ 379.090879][ T5946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.132987][ T5946] usb 1-1: config 0 descriptor?? [ 379.160320][T10231] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 379.186733][T10231] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 379.239863][ T5904] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 379.294979][ T5904] usb 3-1: no configurations [ 379.309077][ T5904] usb 3-1: can't read configurations, error -22 [ 379.329809][ T5904] usb usb3-port1: unable to enumerate USB device [ 379.465782][T10235] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 379.615919][T10240] IPVS: set_ctl: invalid protocol: 60 172.20.20.49:20004 [ 379.628070][ T5946] kye 0003:0458:5011.0010: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 379.641424][ T5946] hid_parser_main: 216 callbacks suppressed [ 379.641447][ T5946] kye 0003:0458:5011.0010: unknown main item tag 0x0 [ 379.657085][ T5946] kye 0003:0458:5011.0010: unknown main item tag 0x0 [ 379.664201][ T5946] kye 0003:0458:5011.0010: unknown main item tag 0x0 [ 379.692041][ T5946] kye 0003:0458:5011.0010: unknown main item tag 0x0 [ 379.699427][ T5946] kye 0003:0458:5011.0010: unknown main item tag 0x0 [ 379.706458][ T5946] kye 0003:0458:5011.0010: unknown main item tag 0x0 [ 379.724823][ T5946] kye 0003:0458:5011.0010: unknown main item tag 0x0 [ 379.736597][ T5946] kye 0003:0458:5011.0010: unknown main item tag 0x0 [ 379.743866][ T9] usb 6-1: new low-speed USB device number 24 using dummy_hcd [ 379.759147][ T5946] kye 0003:0458:5011.0010: unknown main item tag 0x0 [ 379.767581][ T5946] kye 0003:0458:5011.0010: unknown main item tag 0x0 [ 379.792850][ T5946] kye 0003:0458:5011.0010: hidraw0: USB HID v0.20 Device [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 379.817519][ T5946] kye 0003:0458:5011.0010: tablet-enabling feature report not found [ 379.838639][ T5946] kye 0003:0458:5011.0010: tablet enabling failed [ 379.921418][ T9] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 379.934376][ T5946] usb 1-1: USB disconnect, device number 35 [ 379.963225][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 379.991299][ T9] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 380.022930][ T9] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 380.035213][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 380.078569][ T9] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 380.098753][ T9] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 380.125298][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 380.144148][ T9] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 380.188373][ T9] usb 6-1: string descriptor 0 read error: -22 [ 380.225810][ T9] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 380.293828][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.354662][ T9] adutux 6-1:168.0: interrupt endpoints not found [ 380.558422][T10235] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1212'. [ 381.009770][ T5963] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 381.170258][ T5963] usb 1-1: Using ep0 maxpacket: 32 [ 381.184956][ T5963] usb 1-1: config 0 has no interfaces? [ 381.201555][ T5963] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 381.228433][ T5963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.251011][ T5963] usb 1-1: Product: syz [ 381.262324][ T5963] usb 1-1: Manufacturer: syz [ 381.274863][ T5963] usb 1-1: SerialNumber: syz [ 381.302190][ T5963] usb 1-1: config 0 descriptor?? [ 381.530773][T10262] netlink: 'syz.0.1220': attribute type 17 has an invalid length. [ 381.553192][T10262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1220'. [ 381.598225][ T5963] usb 1-1: USB disconnect, device number 36 [ 382.521717][ T5946] usb 6-1: USB disconnect, device number 24 [ 382.981535][ T926] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 382.998786][T10287] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 383.179233][ T926] usb 2-1: Using ep0 maxpacket: 16 [ 383.191049][ T926] usb 2-1: config index 0 descriptor too short (expected 12592, got 56) [ 383.200409][ T926] usb 2-1: config 55 has too many interfaces: 55, using maximum allowed: 32 [ 383.209712][ T926] usb 2-1: config 55 has an invalid descriptor of length 55, skipping remainder of the config [ 383.221418][ T926] usb 2-1: config 55 has 0 interfaces, different from the descriptor's value: 55 [ 383.242595][ T926] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 383.257285][ T926] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 383.273961][ T5904] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 383.284952][ T926] usb 2-1: Manufacturer: syz [ 383.421985][ T5904] usb 5-1: no configurations [ 383.433066][ T5904] usb 5-1: can't read configurations, error -22 [ 383.580570][ T5904] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 383.749910][ T5904] usb 5-1: no configurations [ 383.763591][ T5904] usb 5-1: can't read configurations, error -22 [ 383.782297][ T5904] usb usb5-port1: attempt power cycle [ 384.164503][ T5904] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 384.200650][ T5904] usb 5-1: no configurations [ 384.213853][ T5904] usb 5-1: can't read configurations, error -22 [ 384.360002][ T5904] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 384.405906][ T5904] usb 5-1: no configurations [ 384.419444][ T5904] usb 5-1: can't read configurations, error -22 [ 384.438499][ T5904] usb usb5-port1: unable to enumerate USB device [ 385.228194][T10315] netlink: 212336 bytes leftover after parsing attributes in process `syz.5.1237'. [ 385.509146][T10326] fuse: Bad value for 'fd' [ 385.562448][ T926] usb 2-1: USB disconnect, device number 44 [ 385.620494][ T5946] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 385.811659][ T5946] usb 1-1: Using ep0 maxpacket: 32 [ 385.833085][ T5946] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.852471][ T5946] usb 1-1: config 0 has no interfaces? [ 385.899452][ T9] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 385.963337][ T5946] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 385.982478][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.003499][ T5946] usb 1-1: Product: syz [ 386.034208][ T5946] usb 1-1: Manufacturer: syz [ 386.050324][ T5946] usb 1-1: SerialNumber: syz [ 386.083031][ T5946] usb 1-1: config 0 descriptor?? [ 386.094695][ T9] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 386.125252][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.156831][ T9] usb 3-1: Product: syz [ 386.176030][ T9] usb 3-1: Manufacturer: syz [ 386.193637][ T9] usb 3-1: SerialNumber: syz [ 386.237016][ T9] usb 3-1: config 0 descriptor?? [ 386.259968][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 386.270031][ T9] hub 3-1:0.0: probe with driver hub failed with error -5 [ 386.333955][T10337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1245'. [ 386.364418][ T5917] usb 1-1: USB disconnect, device number 37 [ 386.412895][T10337] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1245'. [ 386.446045][T10337] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 386.459127][T10337] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 386.478455][ T9] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 386.550681][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 386.571713][ T9] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 386.593070][ T9] usb 3-1: media controller created [ 386.723731][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 386.957030][ T9] DVB: Unable to find symbol dib7000p_attach() [ 386.978943][ T9] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 387.043404][T10356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1250'. [ 387.222232][T10356] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1250'. [ 387.311131][ T9] rc_core: IR keymap rc-dib0700-rc5 not found [ 387.324732][T10356] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 387.337807][ T9] Registered IR keymap rc-empty [ 387.398484][ T9] dvb-usb: could not initialize remote control. [ 387.406262][T10356] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 387.451414][T10361] input: syz0 as /devices/virtual/input/input19 [ 387.457831][ T9] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 387.502966][ T5917] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 387.649370][ T5917] usb 1-1: Using ep0 maxpacket: 8 [ 387.650202][ T5917] usb 1-1: too many configurations: 129, using maximum allowed: 8 [ 387.681151][ T5917] usb 1-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d9.40 [ 387.681176][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 387.681192][ T5917] usb 1-1: Product: syz [ 387.681204][ T5917] usb 1-1: Manufacturer: syz [ 387.681216][ T5917] usb 1-1: SerialNumber: syz [ 387.703730][ T5917] usb 1-1: config 0 descriptor?? [ 388.467051][ T5917] usb 1-1: USB disconnect, device number 38 [ 388.529093][ T5903] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 388.679774][ T5903] usb 6-1: device descriptor read/64, error -71 [ 388.960807][ T5903] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 388.978794][ T5946] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 389.160427][ T5903] usb 6-1: device descriptor read/64, error -71 [ 389.179363][ T5946] usb 5-1: Using ep0 maxpacket: 16 [ 389.219999][ T5946] usb 5-1: config 0 has no interfaces? [ 389.251305][ T5946] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 389.281177][ T5903] usb usb6-port1: attempt power cycle [ 389.294085][ T5946] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 389.314826][ T5946] usb 5-1: Manufacturer: syz [ 389.334974][ T926] usb 3-1: USB disconnect, device number 56 [ 389.384189][ T5946] usb 5-1: config 0 descriptor?? [ 389.458369][ T926] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 389.696614][T10374] netlink: 'syz.4.1255': attribute type 1 has an invalid length. [ 389.698238][ T5903] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 389.735070][T10388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1262'. [ 389.759824][ T5903] usb 6-1: device descriptor read/8, error -71 [ 389.905821][T10374] 8021q: adding VLAN 0 to HW filter on device bond5 [ 389.999061][ T5903] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 390.033014][ T5903] usb 6-1: device descriptor read/8, error -71 [ 390.051586][T10397] vlan0: entered allmulticast mode [ 390.060491][T10397] bond5: entered allmulticast mode [ 390.154820][ T5903] usb usb6-port1: unable to enumerate USB device [ 390.219591][ T926] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 390.414051][ T926] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 390.425299][ T926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.445964][T10405] netlink: 'syz.2.1266': attribute type 17 has an invalid length. [ 390.454374][ T926] usb 2-1: Product: syz [ 390.458792][T10405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1266'. [ 390.468120][ T926] usb 2-1: Manufacturer: syz [ 390.468144][ T926] usb 2-1: SerialNumber: syz [ 391.480802][ T926] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 391.507970][ T926] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 391.565937][ T926] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 391.599237][ T926] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 391.662774][ T926] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 391.709764][ T926] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 391.812420][ T926] usb 2-1: USB disconnect, device number 45 [ 391.897108][T10422] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1273'. [ 391.923109][T10416] bond10: entered promiscuous mode [ 392.012616][T10424] gretap2: entered allmulticast mode [ 392.197498][ T5917] usb 5-1: USB disconnect, device number 39 [ 392.216848][T10425] ucma_write: process 586 (syz.5.1272) changed security contexts after opening file descriptor, this is not allowed. [ 392.435895][ T926] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 392.602327][ T926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 392.622669][ T926] usb 1-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 392.647955][ T926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.672863][ T926] usb 1-1: config 0 descriptor?? [ 392.698805][T10427] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 393.164308][ T926] hid_parser_main: 27 callbacks suppressed [ 393.164327][ T926] asus 0003:0B05:1ABE.0011: unknown main item tag 0x0 [ 393.210881][ T926] asus 0003:0B05:1ABE.0011: unknown main item tag 0x0 [ 393.243194][ T926] asus 0003:0B05:1ABE.0011: unknown main item tag 0x0 [ 393.277666][ T926] asus 0003:0B05:1ABE.0011: unknown main item tag 0x0 [ 393.312797][ T926] asus 0003:0B05:1ABE.0011: unknown main item tag 0x0 [ 393.338530][ T926] asus 0003:0B05:1ABE.0011: unknown main item tag 0x0 [ 393.360264][ T926] asus 0003:0B05:1ABE.0011: unknown main item tag 0x0 [ 393.384290][T10451] team0: entered allmulticast mode [ 393.388166][ T926] asus 0003:0B05:1ABE.0011: unknown main item tag 0x0 [ 393.425085][ T926] asus 0003:0B05:1ABE.0011: unknown main item tag 0x0 [ 393.444608][ T926] asus 0003:0B05:1ABE.0011: unknown main item tag 0x0 [ 393.460088][T10451] team_slave_0: entered allmulticast mode [ 393.484525][T10451] team_slave_1: entered allmulticast mode [ 393.503158][T10451] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 393.541775][ T926] asus 0003:0B05:1ABE.0011: unexpected long global item [ 393.567351][ T926] asus 0003:0B05:1ABE.0011: Asus hid parse failed: -22 [ 393.605081][ T926] asus 0003:0B05:1ABE.0011: probe with driver asus failed with error -22 [ 393.659010][ T926] usb 1-1: USB disconnect, device number 39 [ 394.734361][T10459] fuse: Unknown parameter 'default_permission' [ 396.832079][T10501] fuse: Unknown parameter 'default_permission' [ 397.225441][ T926] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 397.399047][ T926] usb 2-1: Using ep0 maxpacket: 8 [ 397.415471][ T926] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 397.433206][ T926] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 397.445086][ T926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.455581][ T926] usb 2-1: Product: syz [ 397.460471][ T926] usb 2-1: Manufacturer: syz [ 397.465613][ T926] usb 2-1: SerialNumber: syz [ 397.479656][ T926] usb 2-1: config 0 descriptor?? [ 397.499542][ T926] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 397.776793][T10523] input: syz0 as /devices/virtual/input/input20 [ 398.349394][ T5946] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 398.519057][ T5946] usb 3-1: Using ep0 maxpacket: 32 [ 398.540281][ T5946] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.583175][ T5946] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.636481][ T5946] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 398.653311][ T5946] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 398.675592][ T5946] usb 3-1: Product: syz [ 398.688460][ T5946] usb 3-1: Manufacturer: syz [ 398.730152][ T5946] hub 3-1:4.0: USB hub found [ 398.828108][T10546] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1314'. [ 398.842293][T10546] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1314'. [ 398.928821][ T5946] hub 3-1:4.0: 2 ports detected [ 399.477113][T10558] fuse: Unknown parameter 'default_permission' [ 399.842444][ T926] gspca_zc3xx: reg_r err -110 [ 399.957675][T10533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.969703][T10533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.181702][ T5946] hub 3-1:4.0: activate --> -90 [ 400.429000][ T926] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 400.435499][ T926] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 400.474725][ T926] usb 2-1: USB disconnect, device number 46 [ 400.592437][ T5919] usb 3-1: USB disconnect, device number 57 [ 400.819178][ T5946] usb 3-1-port2: config error [ 401.509339][ T5917] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 401.522902][T10582] netlink: 'syz.5.1325': attribute type 19 has an invalid length. [ 401.552793][T10582] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1325'. [ 401.635553][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.636027][T10582] netlink: 'syz.5.1325': attribute type 19 has an invalid length. [ 401.672732][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.689057][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 401.694355][T10582] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1325'. [ 401.694766][ T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.716337][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.732438][ T5917] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 401.743218][ T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.753410][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.784893][ T5917] usb 3-1: config 0 descriptor?? [ 402.228430][ T5917] corsair 0003:1B1C:1B02.0012: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 402.392720][T10592] fuse: Bad value for 'group_id' [ 402.420333][ T5917] corsair 0003:1B1C:1B02.0012: Failed to get K90 initial state (error -32). [ 402.481906][T10592] fuse: Bad value for 'group_id' [ 402.533649][ T5917] usb 3-1: USB disconnect, device number 58 [ 402.722266][T10597] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1329'. [ 402.875061][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 402.875081][ T30] audit: type=1326 audit(1776417341.381:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10596 comm="syz.4.1329" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d10b9c819 code=0x0 [ 403.086773][T10604] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1331'. [ 403.197367][T10604] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 403.233014][T10604] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 403.649002][ T5963] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 403.809323][ T5963] usb 3-1: Using ep0 maxpacket: 8 [ 403.830759][ T5963] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.856617][ T5963] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 403.887167][ T5963] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.958210][ T5963] usb 3-1: config 0 descriptor?? [ 403.988531][ T5963] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 404.159497][ T5903] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 404.281217][T10630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1338'. [ 404.316617][T10630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1338'. [ 404.351933][ T5903] usb 1-1: Using ep0 maxpacket: 16 [ 404.384072][ T5903] usb 1-1: config 0 has no interfaces? [ 404.394393][ T5903] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 404.404498][ T5903] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 404.412883][ T5903] usb 1-1: Manufacturer: syz [ 404.432077][ T5903] usb 1-1: config 0 descriptor?? [ 404.456294][T10634] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1339'. [ 404.506605][T10634] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1339'. [ 404.879074][ T5903] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 405.001605][ T5917] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 405.009633][T10619] netlink: 'syz.0.1335': attribute type 1 has an invalid length. [ 405.092307][ T5903] usb 2-1: config 2 has an invalid interface number: 1 but max is 0 [ 405.110020][ T5903] usb 2-1: config 2 has no interface number 0 [ 405.135059][ T5903] usb 2-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=47.78 [ 405.167421][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.190434][ T5917] usb 6-1: config 2 has an invalid interface number: 1 but max is 0 [ 405.198870][ T5903] usb 2-1: Product: syz [ 405.214429][ T5903] usb 2-1: Manufacturer: syz [ 405.219261][ T5917] usb 6-1: config 2 has no interface number 0 [ 405.229078][ T5903] usb 2-1: SerialNumber: syz [ 405.244124][ T5917] usb 6-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=47.78 [ 405.272510][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.312801][ T5917] usb 6-1: Product: syz [ 405.329661][ T5917] usb 6-1: Manufacturer: syz [ 405.347553][ T5917] usb 6-1: SerialNumber: syz [ 405.411597][ T5963] gspca_vc032x: reg_w err -71 [ 405.416447][ T5963] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 405.454896][ T5963] usb 3-1: USB disconnect, device number 59 [ 405.684275][T10619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.082501][T10646] netlink: 'syz.2.1342': attribute type 2 has an invalid length. [ 406.095733][T10622] bond0: (slave gretap1): making interface the new active one [ 406.239788][T10622] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 406.264712][T10648] fuse: Bad value for 'group_id' [ 406.283980][T10648] fuse: Bad value for 'group_id' [ 406.839427][ T926] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 406.978999][ T926] usb 3-1: device descriptor read/64, error -71 [ 407.250706][ T926] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 407.419992][ T926] usb 3-1: device descriptor read/64, error -71 [ 407.551138][ T926] usb usb3-port1: attempt power cycle [ 407.909108][ T926] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 407.971697][ T926] usb 3-1: device descriptor read/8, error -71 [ 408.249714][ T926] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 408.309943][ T926] usb 3-1: device descriptor read/8, error -71 [ 408.449018][ T24] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 408.451181][ T926] usb usb3-port1: unable to enumerate USB device [ 408.514058][ T5946] usb 1-1: USB disconnect, device number 40 [ 408.588339][ T5903] usb 2-1: selecting invalid altsetting 1 [ 408.618054][ T5903] snd-usb-us122l 2-1:2.1: usb_set_interface error [ 408.643859][ T5903] snd-usb-us122l 2-1:2.1: probe with driver snd-usb-us122l failed with error -22 [ 408.679594][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 408.701347][ T24] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 408.715380][ T5903] usb 2-1: USB disconnect, device number 47 [ 408.734826][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.773143][ T24] usb 5-1: Product: syz [ 408.792740][T10666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1349'. [ 408.795658][ T24] usb 5-1: Manufacturer: syz [ 408.825367][ T24] usb 5-1: SerialNumber: syz [ 408.877884][ T24] usb 5-1: config 0 descriptor?? [ 408.903492][T10666] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1349'. [ 408.936851][ T24] gspca_main: se401-2.14.0 probing 047d:5003 [ 408.975153][T10666] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 409.006837][T10666] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 409.062203][ T5917] usb 6-1: selecting invalid altsetting 1 [ 409.079989][ T5917] snd-usb-us122l 6-1:2.1: usb_set_interface error [ 409.101198][ T5917] snd-usb-us122l 6-1:2.1: probe with driver snd-usb-us122l failed with error -22 [ 409.124496][T10663] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1348'. [ 409.211303][T10676] fuse: Unknown parameter 'fe' [ 409.236237][ T5917] usb 6-1: USB disconnect, device number 29 [ 409.551343][ T3534] bond0 (unregistering): (slave gretap1): Releasing active interface [ 409.594193][ T3534] bond0 (unregistering): Released all slaves [ 409.851398][T10688] fuse: Bad value for 'group_id' [ 409.858166][T10688] fuse: Bad value for 'group_id' [ 410.165018][ T24] gspca_se401: read req failed req 0x06 error -19 [ 410.183468][ T24] usb 5-1: USB disconnect, device number 40 [ 410.241095][T10706] openvswitch: netlink: Multiple metadata blocks provided [ 410.253113][T10706] fuse: Unknown parameter '&d' [ 410.379919][ T5946] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 410.425368][T10709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1362'. [ 410.529220][ T5946] usb 6-1: Using ep0 maxpacket: 8 [ 410.536700][ T5946] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.547156][ T5946] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 410.558576][ T5946] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 410.569318][ T5946] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 410.583699][ T5946] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 410.593299][ T5946] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.605459][ T5946] usb 6-1: config 0 descriptor?? [ 410.915148][ T30] audit: type=1800 audit(1776417349.421:73): pid=10703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1360" name="/" dev="fuse" ino=2 res=0 errno=0 [ 411.008996][ T5946] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 411.149109][ T5946] usb 2-1: device descriptor read/64, error -71 [ 411.399413][ T5946] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 411.549048][ T5946] usb 2-1: device descriptor read/64, error -71 [ 411.659660][ T5946] usb usb2-port1: attempt power cycle [ 411.809016][ T926] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 411.991303][ T926] usb 1-1: Using ep0 maxpacket: 8 [ 412.007714][ T926] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 412.031996][ T926] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 412.050832][ T5946] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 412.062105][ T926] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 412.084268][ T926] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 412.100743][ T5946] usb 2-1: device descriptor read/8, error -71 [ 412.108065][ T926] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 412.117436][ T926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.200075][T10733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1371'. [ 412.229764][T10733] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1371'. [ 412.241654][T10733] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 412.251049][T10733] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 412.336659][ T926] usb 1-1: GET_CAPABILITIES returned 0 [ 412.343096][ T5946] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 412.351045][ T926] usbtmc 1-1:16.0: can't read capabilities [ 412.381014][ T5946] usb 2-1: device descriptor read/8, error -71 [ 412.499767][ T5946] usb usb2-port1: unable to enumerate USB device [ 412.731480][ T24] usb 1-1: USB disconnect, device number 41 [ 413.055902][ T24] usb 6-1: USB disconnect, device number 30 [ 413.205501][T10743] team0: left allmulticast mode [ 413.225452][T10743] team_slave_0: left allmulticast mode [ 413.245198][T10743] team_slave_1: left allmulticast mode [ 413.271038][T10743] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 413.546870][T10743] hsr0: left promiscuous mode [ 413.702019][T10743] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 413.721558][T10743] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 413.838627][ T149] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.872291][ T149] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.891943][ T149] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.913893][ T149] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.193488][T10787] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1384'. [ 414.252106][T10787] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1384'. [ 414.316490][T10787] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 414.370910][T10787] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 414.422977][T10797] tipc: Started in network mode [ 414.430501][T10797] tipc: Node identity , cluster identity 4711 [ 414.436926][T10797] tipc: Failed to obtain node identity [ 414.443140][T10797] tipc: Enabling of bearer rejected, failed to enable media [ 414.619180][T10773] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 414.652816][T10806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.779248][T10773] usb 6-1: Using ep0 maxpacket: 8 [ 414.786736][T10773] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.797216][T10773] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 414.808576][T10773] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 414.818443][T10773] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 414.832472][T10773] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 414.843054][T10773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.855012][T10773] usb 6-1: config 0 descriptor?? [ 414.962437][T10756] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 415.129627][T10756] usb 2-1: Using ep0 maxpacket: 32 [ 415.136770][T10756] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.148347][T10756] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.158738][T10756] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 415.168337][T10756] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.180184][T10756] usb 2-1: config 0 descriptor?? [ 415.192913][T10756] hub 2-1:0.0: USB hub found [ 415.388473][T10756] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 415.896384][T10808] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.1391'. [ 415.967355][T10821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1396'. [ 415.981307][T10821] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 416.001293][T10756] usbhid 2-1:0.0: can't add hid device: -71 [ 416.010950][T10756] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 416.023468][T10823] input: syz0 as /devices/virtual/input/input21 [ 416.069228][T10756] usb 2-1: USB disconnect, device number 52 [ 416.519495][T10756] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 416.689375][T10756] usb 2-1: Using ep0 maxpacket: 32 [ 416.725395][T10756] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.760986][T10756] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.779519][T10756] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 416.795793][T10756] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.808745][T10773] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 416.845284][T10756] usb 2-1: config 0 descriptor?? [ 416.864413][T10756] hub 2-1:0.0: USB hub found [ 416.999025][T10773] usb 1-1: Using ep0 maxpacket: 16 [ 417.037054][T10773] usb 1-1: config 0 has no interfaces? [ 417.067829][T10756] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 417.085349][T10773] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 417.111478][T10773] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 417.135911][T10773] usb 1-1: Manufacturer: syz [ 417.157363][T10756] usbhid 2-1:0.0: can't add hid device: -71 [ 417.178059][T10773] usb 1-1: config 0 descriptor?? [ 417.194865][T10756] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 417.262717][T10773] usb 6-1: USB disconnect, device number 31 [ 417.269882][T10756] usb 2-1: USB disconnect, device number 53 [ 417.810619][T10854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1405'. [ 417.833202][T10852] gretap2: entered allmulticast mode [ 417.885639][T10852] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 418.050122][T10837] netlink: 'syz.0.1400': attribute type 1 has an invalid length. [ 418.248810][T10859] netlink: 'syz.2.1406': attribute type 4 has an invalid length. [ 418.352730][T10869] netlink: 'syz.2.1406': attribute type 4 has an invalid length. [ 418.375276][T10868] input: syz0 as /devices/virtual/input/input22 [ 418.400008][T10837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.673245][T10876] xt_CT: You must specify a L4 protocol and not use inversions on it [ 418.706954][T10838] bond0: (slave gretap1): making interface the new active one [ 418.826452][T10838] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 420.368289][T10900] sctp: [Deprecated]: syz.2.1418 (pid 10900) Use of int in max_burst socket option deprecated. [ 420.368289][T10900] Use struct sctp_assoc_value instead [ 420.729602][T10773] usb 1-1: USB disconnect, device number 42 [ 421.009958][ T8242] bond0 (unregistering): (slave gretap1): Releasing active interface [ 421.103826][ T8242] bond0 (unregistering): Released all slaves [ 422.559070][T10773] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 422.709906][T10773] usb 1-1: Using ep0 maxpacket: 32 [ 422.722379][T10773] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 422.747735][T10773] usb 1-1: config 1 has an invalid descriptor of length 61, skipping remainder of the config [ 422.777641][T10954] fuse: Bad value for 'fd' [ 422.819458][T10773] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 422.875767][T10773] usb 1-1: config 1 has an invalid descriptor of length 61, skipping remainder of the config [ 422.917086][T10773] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 422.919902][T10773] usb 1-1: config 1 has an invalid descriptor of length 61, skipping remainder of the config [ 422.983062][T10773] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 422.984930][T10773] usb 1-1: config 1 has an invalid descriptor of length 61, skipping remainder of the config [ 422.985019][T10773] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 422.987144][T10773] usb 1-1: config 1 has an invalid descriptor of length 61, skipping remainder of the config [ 423.067300][T10773] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 423.228061][T10773] usb 1-1: config 1 has an invalid descriptor of length 61, skipping remainder of the config [ 423.244638][T10773] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 423.271597][T10773] usb 1-1: config 1 has an invalid descriptor of length 61, skipping remainder of the config [ 423.304000][T10773] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 423.369041][ T5963] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 423.384458][T10773] usb 1-1: config 1 has an invalid descriptor of length 61, skipping remainder of the config [ 423.425716][T10773] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 423.489118][T10773] usb 1-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 423.509026][ T5963] usb 5-1: device descriptor read/64, error -71 [ 423.516165][T10773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.535554][T10773] usb 1-1: Product: syz [ 423.544984][T10773] usb 1-1: Manufacturer: syz [ 423.556976][T10773] usb 1-1: SerialNumber: syz [ 423.619667][T10756] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 423.759957][ T5963] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 423.799366][T10756] usb 3-1: Using ep0 maxpacket: 16 [ 423.826804][T10756] usb 3-1: config 0 has no interfaces? [ 423.883231][T10756] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 423.909025][ T5963] usb 5-1: device descriptor read/64, error -71 [ 423.927152][T10756] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 423.985324][T10756] usb 3-1: Manufacturer: syz [ 424.034058][T10756] usb 3-1: config 0 descriptor?? [ 424.044318][ T5963] usb usb5-port1: attempt power cycle [ 424.240871][T10757] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 424.409202][ T5963] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 424.422658][T10757] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.463860][T10757] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.489543][ T5963] usb 5-1: device descriptor read/8, error -71 [ 424.500747][T10757] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 424.525003][T10757] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 424.551466][T10757] usb 2-1: Manufacturer: syz [ 424.576477][T10757] usb 2-1: config 0 descriptor?? [ 424.724932][T10971] netlink: 'syz.2.1434': attribute type 1 has an invalid length. [ 424.779062][ T5963] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 424.806309][ T5963] usb 5-1: device descriptor read/8, error -71 [ 424.963520][ T5963] usb usb5-port1: unable to enumerate USB device [ 424.971126][T10971] 8021q: adding VLAN 0 to HW filter on device bond4 [ 425.444414][T10757] uclogic 0003:256C:006D.0013: interface is invalid, ignoring [ 425.627788][T10773] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 425.708635][ T5963] usb 2-1: USB disconnect, device number 54 [ 425.764122][T10997] netlink: 'syz.0.1444': attribute type 1 has an invalid length. [ 426.037019][T10773] usb 1-1: USB disconnect, device number 43 [ 427.529824][ T9] usb 3-1: USB disconnect, device number 64 [ 427.896868][T11035] ------------[ cut here ]------------ [ 427.903984][T11035] RTNL: assertion failed at net/core/dev.c (9603) [ 427.910713][T11035] WARNING: net/core/dev.c:9603 at __dev_set_promiscuity+0x530/0x710, CPU#0: syz.4.1453/11035 [ 427.920976][T11035] Modules linked in: [ 427.925153][T11035] CPU: 0 UID: 0 PID: 11035 Comm: syz.4.1453 Tainted: G L syzkaller #0 PREEMPT(full) [ 427.936184][T11035] Tainted: [L]=SOFTLOCKUP [ 427.940577][T11035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 427.950867][T11035] RIP: 0010:__dev_set_promiscuity+0x53c/0x710 [ 427.956985][T11035] Code: 41 ff d3 e9 06 fc ff ff e8 c1 a2 43 f8 e9 fc fb ff ff e8 b7 a2 43 f8 48 8d 3d 60 68 c0 06 48 c7 c6 e0 00 de 8c ba 83 25 00 00 <67> 48 0f b9 3a e9 22 fb ff ff e8 95 a2 43 f8 48 8b 7c 24 08 48 c7 [ 427.976675][T11035] RSP: 0018:ffffc900079276a0 EFLAGS: 00010287 [ 427.982799][T11035] RAX: ffffffff89817109 RBX: ffff8880355ec000 RCX: 0000000000080000 [ 427.990848][T11035] RDX: 0000000000002583 RSI: ffffffff8cde00e0 RDI: ffffffff9041d970 [ 427.998857][T11035] RBP: 0000000000000000 R08: ffffffff8fddb9e7 R09: 1ffffffff1fbb73c [ 428.008452][T11035] R10: dffffc0000000000 R11: fffffbfff1fbb73d R12: 00000000ffffffff [ 428.016496][T11035] R13: 0000000000000000 R14: ffff8880355ec0b0 R15: 1ffff11006abd816 [ 428.024626][T11035] FS: 00007f4d11a576c0(0000) GS:ffff888125231000(0000) knlGS:0000000000000000 [ 428.033610][T11035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 428.040324][T11035] CR2: 00002000001ce000 CR3: 000000003aedc000 CR4: 00000000003526f0 [ 428.048417][T11035] Call Trace: [ 428.051746][T11035] [ 428.054699][T11035] ? __hw_addr_add_ex+0x361/0x650 [ 428.059795][T11035] __dev_set_rx_mode+0x17c/0x260 [ 428.064773][T11035] dev_mc_add+0xc8/0x120 [ 428.069087][T11035] igmp6_group_added+0x234/0x820 [ 428.074050][T11035] ? __pfx_igmp6_group_added+0x10/0x10 [ 428.079561][T11035] ? mld_del_delrec+0x1af/0xcd0 [ 428.084424][T11035] ? __ipv6_dev_mc_inc+0x548/0xa50 [ 428.089582][T11035] __ipv6_dev_mc_inc+0x897/0xa50 [ 428.094554][T11035] addrconf_join_solict+0x104/0x190 [ 428.099798][T11035] ? __pfx_addrconf_join_solict+0x10/0x10 [ 428.105535][T11035] ? do_raw_spin_unlock+0xf5/0x210 [ 428.110719][T11035] __ipv6_dev_ac_inc+0x87b/0xaf0 [ 428.115685][T11035] ipv6_sock_ac_join+0x6a8/0x880 [ 428.120679][T11035] ? __pfx_ipv6_sock_ac_join+0x10/0x10 [ 428.126163][T11035] ? _copy_from_user+0x94/0xb0 [ 428.130980][T11035] do_ipv6_setsockopt+0x203a/0x3150 [ 428.136306][T11035] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 428.141891][T11035] ? futex_private_hash_put+0x13b/0x170 [ 428.147476][T11035] ? futex_wake+0x4ac/0x580 [ 428.152021][T11035] ? __pfx_futex_wake+0x10/0x10 [ 428.156906][T11035] ? aa_sk_perm+0x6d5/0x900 [ 428.161465][T11035] ? __pfx_aa_sk_perm+0x10/0x10 [ 428.166345][T11035] ? __se_sys_futex+0x3a8/0x450 [ 428.171237][T11035] ? aa_sock_opt_perm+0xff/0x1a0 [ 428.176206][T11035] ipv6_setsockopt+0x59/0x170 [ 428.180921][T11035] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 428.186833][T11035] do_sock_setsockopt+0x17c/0x1b0 [ 428.191918][T11035] __x64_sys_setsockopt+0x13d/0x1b0 [ 428.197131][T11035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.203239][T11035] do_syscall_64+0x15f/0xf80 [ 428.207847][T11035] ? trace_irq_disable+0x3b/0x140 [ 428.212920][T11035] ? clear_bhb_loop+0x40/0x90 [ 428.217613][T11035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.223556][T11035] RIP: 0033:0x7f4d10b9c819 [ 428.227981][T11035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.247723][T11035] RSP: 002b:00007f4d11a57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 428.256201][T11035] RAX: ffffffffffffffda RBX: 00007f4d10e16180 RCX: 00007f4d10b9c819 [ 428.264241][T11035] RDX: 000000000000001b RSI: 0000000000000029 RDI: 000000000000000a [ 428.272349][T11035] RBP: 00007f4d10c32c91 R08: 0000000000000014 R09: 0000000000000000 [ 428.280357][T11035] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 428.288349][T11035] R13: 00007f4d10e16218 R14: 00007f4d10e16180 R15: 00007f4d10f3fa48 [ 428.296370][T11035] [ 428.299423][T11035] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 428.306709][T11035] CPU: 0 UID: 0 PID: 11035 Comm: syz.4.1453 Tainted: G L syzkaller #0 PREEMPT(full) [ 428.317741][T11035] Tainted: [L]=SOFTLOCKUP [ 428.322066][T11035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 428.332121][T11035] Call Trace: [ 428.335407][T11035] [ 428.338343][T11035] vpanic+0x56c/0xa60 [ 428.342338][T11035] ? __pfx__printk+0x10/0x10 [ 428.346929][T11035] ? __pfx_vpanic+0x10/0x10 [ 428.351447][T11035] ? is_bpf_text_address+0x292/0x2b0 [ 428.356742][T11035] ? is_bpf_text_address+0x26/0x2b0 [ 428.361957][T11035] panic+0xc5/0xd0 [ 428.365691][T11035] ? __pfx_panic+0x10/0x10 [ 428.370130][T11035] __warn+0x315/0x4c0 [ 428.374124][T11035] ? __dev_set_promiscuity+0x530/0x710 [ 428.379597][T11035] ? __dev_set_promiscuity+0x530/0x710 [ 428.385075][T11035] __report_bug+0x29a/0x540 [ 428.389591][T11035] ? __ipv6_dev_mc_inc+0x897/0xa50 [ 428.394828][T11035] ? addrconf_join_solict+0x104/0x190 [ 428.400212][T11035] ? __ipv6_dev_ac_inc+0x87b/0xaf0 [ 428.405336][T11035] ? __dev_set_promiscuity+0x530/0x710 [ 428.410859][T11035] ? __pfx___report_bug+0x10/0x10 [ 428.415950][T11035] report_bug_entry+0x19a/0x290 [ 428.420821][T11035] ? __dev_set_promiscuity+0x53c/0x710 [ 428.426287][T11035] ? __dev_set_promiscuity+0x541/0x710 [ 428.431765][T11035] handle_bug+0xce/0x200 [ 428.436012][T11035] exc_invalid_op+0x1a/0x50 [ 428.440533][T11035] asm_exc_invalid_op+0x1a/0x20 [ 428.445398][T11035] RIP: 0010:__dev_set_promiscuity+0x53c/0x710 [ 428.451482][T11035] Code: 41 ff d3 e9 06 fc ff ff e8 c1 a2 43 f8 e9 fc fb ff ff e8 b7 a2 43 f8 48 8d 3d 60 68 c0 06 48 c7 c6 e0 00 de 8c ba 83 25 00 00 <67> 48 0f b9 3a e9 22 fb ff ff e8 95 a2 43 f8 48 8b 7c 24 08 48 c7 [ 428.471302][T11035] RSP: 0018:ffffc900079276a0 EFLAGS: 00010287 [ 428.477479][T11035] RAX: ffffffff89817109 RBX: ffff8880355ec000 RCX: 0000000000080000 [ 428.485465][T11035] RDX: 0000000000002583 RSI: ffffffff8cde00e0 RDI: ffffffff9041d970 [ 428.493454][T11035] RBP: 0000000000000000 R08: ffffffff8fddb9e7 R09: 1ffffffff1fbb73c [ 428.501467][T11035] R10: dffffc0000000000 R11: fffffbfff1fbb73d R12: 00000000ffffffff [ 428.509545][T11035] R13: 0000000000000000 R14: ffff8880355ec0b0 R15: 1ffff11006abd816 [ 428.517546][T11035] ? __dev_set_promiscuity+0x529/0x710 [ 428.523117][T11035] ? __hw_addr_add_ex+0x361/0x650 [ 428.528158][T11035] __dev_set_rx_mode+0x17c/0x260 [ 428.533112][T11035] dev_mc_add+0xc8/0x120 [ 428.537369][T11035] igmp6_group_added+0x234/0x820 [ 428.542324][T11035] ? __pfx_igmp6_group_added+0x10/0x10 [ 428.547803][T11035] ? mld_del_delrec+0x1af/0xcd0 [ 428.552677][T11035] ? __ipv6_dev_mc_inc+0x548/0xa50 [ 428.557811][T11035] __ipv6_dev_mc_inc+0x897/0xa50 [ 428.562777][T11035] addrconf_join_solict+0x104/0x190 [ 428.568013][T11035] ? __pfx_addrconf_join_solict+0x10/0x10 [ 428.573762][T11035] ? do_raw_spin_unlock+0xf5/0x210 [ 428.578926][T11035] __ipv6_dev_ac_inc+0x87b/0xaf0 [ 428.583901][T11035] ipv6_sock_ac_join+0x6a8/0x880 [ 428.588862][T11035] ? __pfx_ipv6_sock_ac_join+0x10/0x10 [ 428.594377][T11035] ? _copy_from_user+0x94/0xb0 [ 428.599157][T11035] do_ipv6_setsockopt+0x203a/0x3150 [ 428.604389][T11035] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 428.609970][T11035] ? futex_private_hash_put+0x13b/0x170 [ 428.615636][T11035] ? futex_wake+0x4ac/0x580 [ 428.620152][T11035] ? __pfx_futex_wake+0x10/0x10 [ 428.625027][T11035] ? aa_sk_perm+0x6d5/0x900 [ 428.629545][T11035] ? __pfx_aa_sk_perm+0x10/0x10 [ 428.634402][T11035] ? __se_sys_futex+0x3a8/0x450 [ 428.639267][T11035] ? aa_sock_opt_perm+0xff/0x1a0 [ 428.644245][T11035] ipv6_setsockopt+0x59/0x170 [ 428.648972][T11035] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 428.654929][T11035] do_sock_setsockopt+0x17c/0x1b0 [ 428.660006][T11035] __x64_sys_setsockopt+0x13d/0x1b0 [ 428.665249][T11035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.671356][T11035] do_syscall_64+0x15f/0xf80 [ 428.675998][T11035] ? trace_irq_disable+0x3b/0x140 [ 428.681135][T11035] ? clear_bhb_loop+0x40/0x90 [ 428.685830][T11035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.691738][T11035] RIP: 0033:0x7f4d10b9c819 [ 428.696190][T11035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.715838][T11035] RSP: 002b:00007f4d11a57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 428.724328][T11035] RAX: ffffffffffffffda RBX: 00007f4d10e16180 RCX: 00007f4d10b9c819 [ 428.732328][T11035] RDX: 000000000000001b RSI: 0000000000000029 RDI: 000000000000000a [ 428.740404][T11035] RBP: 00007f4d10c32c91 R08: 0000000000000014 R09: 0000000000000000 [ 428.748497][T11035] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 428.756517][T11035] R13: 00007f4d10e16218 R14: 00007f4d10e16180 R15: 00007f4d10f3fa48 [ 428.764519][T11035] [ 428.767733][T11035] Kernel Offset: disabled [ 428.772068][T11035] Rebooting in 86400 seconds..