last executing test programs: 12.263643984s ago: executing program 4 (id=1776): prlimit64(0x0, 0xb, 0x0, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) r3 = dup2(r1, r2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20000, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) r4 = syz_io_uring_setup(0x497, &(0x7f00000001c0)={0x0, 0x4a61, 0x1000, 0x3, 0x20000074, 0x0, r3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x8, 0xff00, 0x876, 0x6, {{0x6, 0x4, 0x0, 0x33, 0x18, 0x66, 0x0, 0x58, 0x29, 0x0, @remote, @rand_addr=0x64010101, {[@end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) 11.812358089s ago: executing program 4 (id=1777): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x700}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r1, &(0x7f0000000480)=""/177, 0xb1, 0xe0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x7}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001080), 0x0, 0x28101, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x12c}, 0x1, 0x0, 0x0, 0x4040}, 0x20008004) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f00000002c0)={'ip6gretap0\x00', {0x2, 0x4e22, @empty}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x6c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x16}}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x6c}}, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000040)=0x8) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae01, 0xeb) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142408000700e000000108000a00", @ANYRES32], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r9, 0x84, 0x20, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000240), 0x4) 10.698039973s ago: executing program 1 (id=1780): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='source', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8300, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_io_uring_setup(0x988, &(0x7f0000000280)={0x0, 0x9bee, 0x8, 0xfffffffd, 0x25d}, &(0x7f0000000140)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r5, 0x52de, 0xf62e, 0x8, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 9.959868448s ago: executing program 4 (id=1782): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12014f00000000107d1e38310000e10000010902240001000000000904000002030000000921000000"], 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x404000, 0x1) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r5, 0x300, 0x70bd27, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x8000) sendfile(r3, r3, 0x0, 0x200000) migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000340)=0x13e) 9.754769722s ago: executing program 3 (id=1783): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_print_times', 0x169a82, 0x0) sendfile(r2, r2, 0x0, 0x7) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r3, 0x5420, 0x0) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) msgget$private(0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x8031, r3, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r5, 0x5646, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001180)=@newlink={0x20, 0x10, 0x800, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x11418, 0x4000}}, 0x78}, 0x1, 0x0, 0x0, 0x8800}, 0x40880) 8.268223225s ago: executing program 0 (id=1785): setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000040)={0xbe4, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e21, @remote}}}, 0x108) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000003c0)) (async) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000680)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000000000) fcntl$setstatus(r2, 0x4, 0x2800) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a230000000005000500020000000500010006000000"], 0x4c}}, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000000)={&(0x7f00000006c0)={{@local, 0x3}, {@my=0x1, 0x4}, 0x400, "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"}, 0x418}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000200)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.156301838s ago: executing program 1 (id=1786): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000980)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x3, 0x0, 0x9, 0x0, 0xf3f, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) lremovexattr(0x0, 0x0) write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x200000000004, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x2e) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f00000000c0)={r3}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) socket$inet(0x2, 0x4000000000000001, 0x0) sched_setscheduler(0x0, 0x1, 0x0) 7.474717898s ago: executing program 0 (id=1787): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090480000103010100093700086ce82201000905815f"], 0x0) syz_usb_connect(0x5, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230807000102030109025200010000000009044000000e0100390a240308000b020102082407010500070e11240606060509000600040007000300390c2402050302060254df000a092402050001"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x8, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0xfffffffe, @loopback}, @in6={0xa, 0x0, 0xffffefff, @loopback, 0x2}], 0x38) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00010a00000000000000a42d"], 0x14}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x7, r3, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000002}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = timerfd_create(0x0, 0x800) r10 = syz_io_uring_setup(0x58f7, &(0x7f0000000880)={0x0, 0x0, 0x10100, 0x0, 0x104a}, &(0x7f0000000180)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1a}) io_uring_enter(r10, 0x1f82, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r7, r3, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$unix(0x1, 0x5, 0x0) 7.218708878s ago: executing program 2 (id=1788): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x800c1, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x8) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (async) socket$rds(0x15, 0x5, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket(0xa, 0x3, 0x3a) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socket$inet(0x2, 0x3, 0x9) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) (async) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x60242) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r3, @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_GET_TSC_KHZ_vm(0xffffffffffffffff, 0xaea3) 6.932784261s ago: executing program 2 (id=1789): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x7800, 0x10, 0x0, 0xff, {{0x19, 0x4, 0x0, 0x4, 0x64, 0x66, 0x0, 0x40, 0x572e9e8d13ceb235, 0x0, @private=0xa010100, @multicast1, {[@timestamp_prespec={0x44, 0x24, 0x42, 0x3, 0x9, [{@loopback, 0xc9a}, {@multicast2, 0x6}, {@multicast1, 0x1ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x17, 0x11, [@empty, @remote, @multicast1, @remote, @remote]}, @end, @generic={0x89, 0x10, "f3278844dc51ad1bea9bc25560e1"}]}}}}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2004}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x143340, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x29, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000a80)={&(0x7f0000000180)=@isdn, 0x80, &(0x7f00000009c0)=[{&(0x7f00000004c0)=""/118, 0x76}, {&(0x7f0000000540)=""/87, 0x57}, {&(0x7f0000000800)=""/156, 0x9c}, {&(0x7f0000000200)=""/52, 0x34}, {&(0x7f00000005c0)=""/115, 0x73}, {&(0x7f00000008c0)=""/104, 0x68}, {&(0x7f0000000940)=""/81, 0x51}], 0x7, &(0x7f0000000a40)=""/9, 0x9}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x2000000000000273, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRESDEC, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000008850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000085000000b70000000000000095", @ANYBLOB="daee592bf8ac43f2c5f4eb0b02b86237e85c57a517111d5610cb6927ffcf0543ba3b66fc85b1382eb6b22b417ce1d81e1d1b7dc692b0b72e55d753c7993001aebb2fd69986eacb7ca5f677625b75cbccbdfe15af0f671535f89a4f1f6b3f2a450fca73cfd0aba3fc92c6ca78d7a00446000000e9633789ab4520ff24b400e9600fe4d00a664fcf1163ac087a31f9e49db6df8c8c9c68ee92eb805f2f95d748cd5446fb00"/174], &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 6.5949435s ago: executing program 0 (id=1790): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = epoll_create1(0x0) unshare(0x4000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x400) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000005c0)) r6 = dup(r5) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000000)={0x1, r6}) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x52800, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000014c0)={0xffffffffffffffff, 0x101}, 0xc) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) 6.305583338s ago: executing program 2 (id=1791): socket$kcm(0xa, 0x1, 0x106) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0x5}) mprotect(&(0x7f00009cd000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) read$FUSE(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x9, r1) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000180)=r1) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0, 0xffffffffffffffee}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) setuid(0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'team_slave_1\x00'}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000c402258ebeee2a00000f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x21, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d00), 0x0, 0x0, 0x0, 0x44000}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x20000004, 0x7f, 0x4233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0x2000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xf, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x200000000) dup(0xffffffffffffffff) 5.906779825s ago: executing program 3 (id=1792): socket$kcm(0x10, 0x0, 0x4) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r5, 0xb702, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x98, r7, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x80, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000003280)={'fscrypt:', @desc4}, 0x0, 0x0, 0xfffffffffffffffb) r8 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) unshare(0x28040600) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r8, 0x627, 0xc1040000, 0x43, 0x0, 0x0) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, r10, 0x331, 0x70bd2a, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x2d, 0x9, 0x70bd27, 0x0, {0x5}, [@typed={0x14, 0xa, 0x0, 0x0, @ipv6=@loopback={0x900000000000000}}]}, 0x28}}, 0x84) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000002c40)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000400)={r12, &(0x7f00000007c0), &(0x7f0000000100)}) 5.738540595s ago: executing program 4 (id=1793): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='source\x00\xb5\x838\x8d\xbd\xdf\xfe\x9a\xf2RM\xb6\xe0\xf9\xac\xa2\x06\x1cD\xe7C\xa5<\xd1=\x93\xf7\xf7Sn\xcb\xd5\xa7\xc9@D\x81\xff\xaar\xc8\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000001c0)='.\n#)|.\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKAq\x9bf\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x9aM\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n://\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997AOJ=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='source\x00\xb5\x838\x8d\xbd\xdf\xfe\x9a\xf2RM\xb6\xe0\xf9\xac\xa2\x06\x1cD\xe7C\xa5<\xd1=\x93\xf7\xf7Sn\xcb\xd5\xa7\xc9@D\x81\xff\xaar\xc8\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000001c0)='.\n#)|.\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKAq\x9bf\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x9aM\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n://\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997AOJ=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c', 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) syz_emit_ethernet(0x86, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x50, 0x6, 0x0, @local, @local, {[@dstopts={0x3a, 0x8, '\x00', [@generic={0x5, 0x3e, "60c5bcb0c833aa7af0a81beed348236a9b5d23bca9bfa48870ba8af06e54c8d8c5d51887b0a0f6fb6389b07dc9a1b232061d187b4d045b4ad9263d834a87"}, @padn]}]}}}}}, 0x0) (async) syz_emit_ethernet(0x86, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x50, 0x6, 0x0, @local, @local, {[@dstopts={0x3a, 0x8, '\x00', [@generic={0x5, 0x3e, "60c5bcb0c833aa7af0a81beed348236a9b5d23bca9bfa48870ba8af06e54c8d8c5d51887b0a0f6fb6389b07dc9a1b232061d187b4d045b4ad9263d834a87"}, @padn]}]}}}}}, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0xc8300, 0x0) (async) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0xc8300, 0x0) ioctl$SW_SYNC_IOC_INC(r3, 0xc0105702, &(0x7f00000001c0)=0xfffffffd) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={0x0}, &(0x7f0000000240)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="440000001a00010028bd7000fedbdf24818080000000000000000000140001000800000000000000000000000000000114000200fe8000000000000000000000000000bb"], 0x44}}, 0x884) futex(&(0x7f0000000000), 0x10b, 0x0, &(0x7f0000000040), &(0x7f0000000080), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)={r4, 0x5}, &(0x7f00000000c0)=0x8) epoll_create(0x0) 5.210796624s ago: executing program 4 (id=1794): bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=ANY=[@ANYBLOB="08200000000000000000000000000004f9ff0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fdffffff0400"/28], 0x50) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000cef8bd08410e424176bc0102030109021b00010000000009040002016a2ff6000905010800020b0d64"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000200)=ANY=[@ANYBLOB="00221000000038abaaacaff6899e1a625e832e08cd0f3e66642e52947084653d2cb36a4500dfa807b51abe8c725c876ab19fa8bb53505ab2257912a7596c169532209b3c9bb4063fe4f6fae0d77728969cc4306d60dc8a604d5480bd84f05701da3174e00a1cfb13f66b7c1efe1eabe05405dedeade33711a3ec4b7ae24d88085a35d88e621d000a763fc3a1f310af8000009f87ae4c4067b9b2b713b1ac8f382d63b1e1a7448eea52279679cfb1604179c91cb7706c202ae5a3806f8c23f7"], &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x15a}}}}, &(0x7f00000006c0)={0x2c, &(0x7f0000000440)={0x20, 0xd}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, 0x0, &(0x7f0000000580)={0x20, 0x1, 0xea, "0bae53d45bd7953bf95a8d77cae003940ea2d9345d04e7abffe074ec0391c5ba428c8535aac0bd5ed99e4e00e68b6f3dacc2751b1392d7108ffaa74b03d9b409c22b88f75180e4665f413938a48f34c27cb62b7a9f904eeeef606c087bf7e673b6f56501ed210321744989abf6f2c4ebd7c12f3b8222283c88497e7354a65a6aa3778f1eb2479a557c044353ebaf3e50b9024fa2773057cff0c1687058ef1f7a35098b751eadbde5270246b8ff1b3a01e3c2b0aa09564bf7fb79ec06ab6fa3f8cfd72e490d4b3cf10f7684d480919c48"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x5}}) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) sysinfo(0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0x5, 0x300, 0x1daf6}, 0x10) (async) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) (async) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) (async) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) (async) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0x1000, 0x118000}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x28, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_TUN_ID={0xc, 0x14}]}, 0x28}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 4.555538917s ago: executing program 2 (id=1795): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e0000000000000000000000000040000000000000000000000000000000000000000000380002"], 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x4000000) 4.532320726s ago: executing program 1 (id=1796): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000001100)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x1000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0xa}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40040c0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffff32, &(0x7f0000000d80)=ANY=[]) r4 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000280)={0x0, 0x3ff, 0xad}) 3.960668746s ago: executing program 2 (id=1797): ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000400)={0x0, 0xff}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000800)={r0, 0x1, 0x0, [0x80000001, 0x7, 0x1b39, 0x1, 0x10000], [0x5, 0x5, 0xbc95fd1, 0x2, 0x4, 0x7, 0xfff, 0x9, 0x7, 0x4, 0x0, 0x9, 0x7f, 0x1000, 0x5, 0xbc2, 0x80000000, 0xfffffffffffffff8, 0xda, 0x3, 0x5, 0x6, 0x0, 0x1, 0xffffffffffdfffff, 0x8, 0x0, 0xfffffffffffffffe, 0x8001, 0x5, 0xffffffffffffffff, 0x3ff, 0x8, 0x8, 0x3, 0x1c, 0x7fff, 0x2, 0x95b, 0x1, 0x495, 0x5, 0x7, 0x60c, 0xfffffffffffeffff, 0xf92, 0x3, 0x6, 0x2, 0x1000, 0x9, 0x7, 0x5, 0x3, 0xb2, 0x81, 0x1, 0x7ff, 0xfffffffffffffffb, 0x9c, 0x798, 0x5, 0x8, 0x0, 0x1, 0x4, 0x0, 0x5, 0xd, 0x5, 0x2c2, 0x8, 0xfffffffffffffff3, 0x401, 0x10001, 0x1, 0x0, 0x6, 0x7, 0x8, 0x1, 0x5, 0x4, 0xda2, 0x8, 0x0, 0x4, 0xb0c, 0xfffffffffffffff7, 0x100000001, 0x10001, 0x7, 0x7, 0x5, 0x8000000000000001, 0x7, 0x7, 0x5, 0x9, 0xffff, 0x3, 0x7ff, 0x7ff, 0x8000, 0x205, 0x80, 0x6, 0x9, 0x8, 0x9, 0x1, 0xd4d9, 0x5, 0x7fff, 0x8, 0x7, 0x1, 0x9, 0x750, 0x2d, 0x6]}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7000000ff000000bfa300000000000007030000f8ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004604000001ed000062030000000000001d440000000000007a0a00fe00ffffffc3030000f1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00a5b4f7e9ad0500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) syz_open_dev$vbi(&(0x7f0000000440), 0x0, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x68b0, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x271b, &(0x7f0000000300)={0x0, 0x800, 0x80, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x3518, 0x0, 0x4, 0x0, 0x56) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000100)=0x1) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000480)={0x6, @capture={0x0, 0x0, {0x3, 0x80000}, 0x0, 0x8}}) socket$qrtr(0x2a, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x80}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) preadv(r9, &(0x7f0000000180)=[{&(0x7f0000000080)=""/8, 0x8}], 0x1, 0x1, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 3.636674759s ago: executing program 2 (id=1798): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x24040084) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) shutdown(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x16, 0x0, 0x0, 0x0, 0x1004, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)={0x20, 0x14, 0x1, 'q'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) socket$kcm(0x11, 0x2, 0x300) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x13}, @multicast2}}}], 0x20}, 0x0) unshare(0x42000000) r3 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$kcm(0x29, 0x5, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x62000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80020001000001}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) pipe(&(0x7f0000000040)) 3.456648886s ago: executing program 3 (id=1799): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async, rerun: 64) socket(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 32) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (rerun: 32) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r6 = socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 64) listen(r7, 0x0) (rerun: 64) connect$unix(r6, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 64) r8 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) connect$unix(r8, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r7, 0x802) (async) socket$netlink(0x10, 0x3, 0x4) 3.370675677s ago: executing program 0 (id=1800): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180)="aff7", 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9ea4318123341cf9d90a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a22a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a19eed87b277be335c75e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436e101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521bc9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d2502000000d9051f22614d1f62734d678039a97d2b74f9e8e97f4e8e7025123e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f23128d743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069f6f24e1e1bc976d965ddabb01085f16bff63a06578d6d184f5de7bfb6aaa75f16996d8d60bd0111a8a237a1536256c02284cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798bbe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e2005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9cde5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde330289d6348d183ed9d3dae3cccf109f7c78e8479a345e805e47dfa82cafc6b64b1f4659834aecbeded44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1b7d5f80c580dc31b0963ff953ce09148e8dfea9d03a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e96c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20c290a1f6c09272dbc3b2c0ab2b5baa1b07b16e81f278e54a479f1a06bc06e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4d57b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce788c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f709294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b132876159972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0598700130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80014ff11d9dbceba41d8dfce410333a054e82b1d050331ce0aeacb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6bb956fac1ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a8263e9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dd18f6148354df7e60a489dc543ccdee1fff9d8f8d78844de27a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d64100cc000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2ceae70922989f66827fe9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168e32d7bd6800000000a21008b8d26dabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2935d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95badaf8ed85cd5b03a7352a0fb83398566d1bc133582ce2d9f601cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353c959fd965702f1cd5bcb3c16d4b8bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef07b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c3355fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538b011cb3928b430630b8ccc800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b314bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c921b090000000000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da22ee9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45b4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d5027e81ceec1a6d7441d0b538d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656d9a28f81f6a9465aec94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be184d4ebb942f99581a6fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bbb4ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855cb18b23517ca935a0fa1b630d70c4ca9acbaf0f08910f327fba506d834029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17ecd996d7dea947ee8ce55fa2dea5a000000000000000000000000006f0143d8d4038ef9f57d9e9336f3559558710d1febe7394cf8b02f59dab24d07db3d3c1ebff58f973ba3fc0c3e2fb2c2a674a188614520ecb1d22b49e3550263bf9d669fba198b65ee3512db0e710d2070b5847face7ada12c83f0aea3a8c9e84e6c7406732c952c5695d43bca33d481ef9d442697875e114f4c759af306b3fc8224fdec89bf199234bff488b81438cbe89e4cabdc007139352b5cb69d7987cdf37ab549b7639eeadafd5315d9c9f0e8c9223102e6deaca4ae9cb943a3ad188bcad95e8f97d7fee7c47ea50d222fe67085b4fb3fecfb67dec23b6ab5ee19a5ca5367bff058149acf90a6c4014dea2b763389f77301ea8574d112625300906f480c36f41f82f84991800c37863de349f7"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r2, 0x18000000000002a0, 0x42, 0x31, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xc0, &(0x7f0000000000), &(0x7f00000001c0)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110", 0x0, 0x0, 0xaac}, 0x48) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000001000)=@newsa={0x138, 0x10, 0x832152701231f605, 0x70bd27, 0x0, {{@in=@loopback, @in=@remote, 0x4e22, 0x0, 0x2}, {@in6=@remote, 0xfffffffc, 0x6c}, @in=@remote, {0x0, 0x8001000000000001}, {}, {0x0, 0x0, 0x20}, 0x3, 0x0, 0x2, 0x4, 0x0, 0x64}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x40080) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r6], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket(0x10, 0x803, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r9, r9, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6}]}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$inet6_tcp(0xa, 0x1, 0x0) r11 = syz_io_uring_setup(0x10d, &(0x7f00000005c0)={0x0, 0x61e9, 0x10, 0x2, 0x31a}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r13, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x10}) io_uring_enter(r11, 0x3516, 0x0, 0x0, 0x0, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r14, @ANYBLOB="01"], 0x3c}}, 0x0) 2.927646697s ago: executing program 3 (id=1801): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f870c0000002a90000709ffbe008300"], 0x0}, 0x0) 2.648473059s ago: executing program 0 (id=1802): r0 = io_uring_setup(0x456e, &(0x7f0000000000)={0x0, 0xe58e, 0x8, 0x3, 0x2a2}) syz_io_uring_setup(0x4d8a, &(0x7f0000000080)={0x0, 0xcfa7, 0x2, 0x3, 0x1c5, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140)) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000180)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x38}, 0x8000}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000001c0)="9f80c761f221eb2456bfaeafa11005250f286ef8365f6f692726e6cc25833dc4b02b46edd54be38fff5014e7c4759fd477263bc92793c209d567c17fdc2076d3eaccd7ff3500f96fb337f8594b65a049223a022d55e8", 0x56}, {&(0x7f0000000240)="d2830481cee189b4f0e7e292dcf32e0baa50688a23c3c212db91f0f8edf5e9a76ee746c7dae16a0a6726346b3036bcc1365c0014c262ec9e0c31e79834abf7834567755a0818823833e17a349290231c59a295e66a627734ee592acc0f4582a8056fc23d566c67b6253d52c62fa0307b3440c2d2a41a988feb96eda9411358c13c35aa4111f558eea0ef49ad052cb8e3c74b906fb3bdcd9f3020ab2136", 0x9d}, {&(0x7f0000000300)="17f009e3e984c924e2178c28c084ab20", 0x10}], 0x3, &(0x7f0000000380)=[@dstopts={{0x50, 0x29, 0x37, {0x8, 0x6, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xf}, @calipso={0x7, 0x28, {0x3, 0x8, 0x5, 0x7ff, [0x2, 0x0, 0x1, 0x7]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x9}}, @rthdr={{0x38, 0x29, 0x39, {0x84, 0x4, 0x1, 0x2e, 0x0, [@private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @dstopts={{0x180, 0x29, 0x37, {0x2, 0x2c, '\x00', [@calipso={0x7, 0x48, {0x3, 0x10, 0x93, 0x8001, [0x4, 0x574f, 0x8, 0x2, 0x2, 0x1, 0x3, 0x7fff]}}, @hao={0xc9, 0x10, @mcast2}, @pad1, @generic={0x2, 0x99, "027e7cc8b772cc8c2037bc2021b1d10cd22add07b551c945fe4f415d7fa669f9bfdfa384d9dee03de2e1238dd320aefc121a96eccd739a67c710621c785543adf59c684ef9d4bbddfef6ac947d04f2c92f04e8776572116b511a51611a0cd6a3a5354eb2617e8c49d313d4c4d1579d1f1a0c51587ce8bc6ba5c1395d48034da54ae99cd40e5c67602a2e59940479e0c8116526ea7e043576de"}, @pad1, @pad1, @ra, @jumbo={0xc2, 0x4, 0x6}, @generic={0x81, 0x49, "7ea0c5f285e33f5d3bc7544ddfddab35a8770e1275cafb7adc30e9ab54ad57cba16b9329d06212519df30cd5f03225f85f70780639ec05c64d8684902509f877f41db9ea970c275c91"}, @hao={0xc9, 0x10, @remote}]}}}, @hopopts_2292={{0x1070, 0x29, 0x36, {0x33, 0x20a, '\x00', [@generic={0x49, 0x1000, "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"}, @calipso={0x7, 0x40, {0x2, 0xe, 0x20, 0x400, [0x2ae1, 0xd4, 0x0, 0x6, 0x926f, 0x1, 0x9]}}, @ra={0x5, 0x2, 0x2}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @dstopts={{0x50, 0x29, 0x37, {0x31, 0x6, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x1}, @calipso={0x7, 0x28, {0x3, 0x8, 0x1, 0x8, [0x210b5f60, 0x4, 0x5, 0x2]}}, @pad1]}}}, @rthdrdstopts={{0xa8, 0x29, 0x37, {0x6f, 0x12, '\x00', [@calipso={0x7, 0x40, {0x3, 0xe, 0x9, 0x8, [0x9, 0x3, 0x1, 0x8000, 0x200, 0xda3, 0xfffffffffffffc01]}}, @ra={0x5, 0x2, 0x8}, @calipso={0x7, 0x48, {0x39c757ba6108cb3b, 0x10, 0x5, 0x0, [0x4, 0x9, 0xd, 0x8, 0x0, 0x401, 0x4, 0x80]}}]}}}], 0x13a0}, 0x4004040) r1 = syz_io_uring_complete(0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001ec0)={'team0\x00', 0x0}) sendmmsg$inet6(r1, &(0x7f00000032c0)=[{{&(0x7f0000001780)={0xa, 0x4e24, 0xa9f, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1000}, 0x1c, &(0x7f0000001b00)=[{&(0x7f00000017c0)="f2c324bb47688297956dc1ee8497d0e27c52", 0x12}, {&(0x7f0000001800)="a98ae411659144507d5955da7c3b938f535f2aeebef6ea068b4abc6f3801124aada6975690ba3f47826f88dc68c506c71a810c4eec9d9c23427cb9a192058e469ea909b06da268f48261a6ea03aeebe651258f176eff0928bd1072c7d13b0ff8910aeaf23b0fe4adc2b71beece60ce3f9a1bd78f86fa1218b29af9caf8ca7296831ec393841e67c570e6ade5900205e7b8ae3240556f229eb932a8964cc1fe35536b", 0xa2}, {&(0x7f00000018c0)="637111e4613c51541bbd4020d75ac9d815648fec5f0e1f8c973d4bc9447ac8e646a7c7cdd48d7e6a3539d4ee5684e95a148668d8583973c838697490e7cf87be0e47681d28bc63c7dc9172cc6242db3fd1245757c74546685e36f894edc84cc8ce3155154f5d342da4fe239ad4d04501", 0x70}, {&(0x7f0000001940)="b0ade34c51ee95aa68956160e9e4668ec91afd0ce8ae15fef5b371f001b5697a1e907e383097b705833584f916c521f1dadf02680348837a272898fde99f9cf2bb84dfd22588f9eaa09d77449657def64530c4f70d809ae6dc44f294077046533632cbc78a3b535286fb758d0835325744a5a66fc55fc28ae4c3bbad4790f2f121", 0x81}, {&(0x7f0000001a00)="182c3b39d9c91f83f5927ce10659f5f4704c93ad93074bc2e8f5a3e25b0bf2ed12f1c0f58ba6286f2bc45caa476293b67bbf61a30f84c485b305a9ddde76546701448251d9a594d3d6d489d1476639315072ac322f1b8aa7ade14905c4668957c364f691eabefe607411f92afbeae67fa8070c25736e98b99da051774fc63551998787c896047fd1092f61b43689f7ade39fb17c5742ab2f385c4b1d2eec95a5eb85bd172d57a4462c7e50f1823082425debdf20871acbf2bb0549b8c1bd5b54a73ceb2d040c3afe", 0xc8}], 0x5}}, {{&(0x7f0000001b80)={0xa, 0x4e23, 0xee, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x9}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000001bc0)="348c91036ed4934a622ba55975d3", 0xe}], 0x1}}, {{&(0x7f0000001c40)={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x2b}, 0xc}, 0x1c, &(0x7f0000001e80)=[{&(0x7f0000001c80)="c72f804524b87dfa86d2cda2669a77fac14de0305a116336af6a3edd0f44402d8b", 0x21}, {&(0x7f0000001cc0)="e5c1d31749a41acb19c38b5ce56a062b3aff0be5ea43f8724204f0fd86f24fa8009daa2bfb0b1ff32d6600b8de7281a516684487d776d9a0e68a09097317e652d669ee367e0045681e4bdd459f87d35c761f1aeed9e6", 0x56}, {&(0x7f0000001d40)="0d6ffcbfe54d13426326ca693e80c56946ea4f5c827df88a7a6f33e31751d6a7b9c877eba093e4740e4f6693c0ec5a5e071ff189f8a55f8601d5", 0x3a}, {&(0x7f0000001d80)="c6afa0c72f5db04ba26280e2ab2b751ba00e27843d0d88ab0e1dc0fbff649c38b8c1d55941f73ecc449686a3588c61274c963454d6664a81f8cecd89cdea5dc7eba240f83299fc7870efb22ad5ac77e461f4006bb7702e48c9672269aa1202f71820d999663e85fda133b75686f13ee49c9522b4ebb0f3eb43783aa87c805ed9960bec06af537411a53f04041e8fda7cc0da789cfae56ed286fc3b08e96d13f0af024e3959edcacf337730bd91b3b39cd283e8491dc084337989625a2e73ea84a9224695a04546e30924351bb3edc4ae6f62e0a146a04d32927f425deecd784b878589d0cf4213c1780ee24878d0a8f5117bd192a0481f", 0xf7}], 0x4, &(0x7f0000001f00)=[@hopopts={{0x28, 0x29, 0x36, {0x2f, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x9}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r2}}}, @hopopts_2292={{0x58, 0x29, 0x36, {0x5c, 0x7, '\x00', [@pad1, @ra={0x5, 0x2, 0x2}, @jumbo={0xc2, 0x4, 0x5}, @calipso={0x7, 0x30, {0x2, 0xa, 0x5, 0x0, [0x1ff, 0x6, 0x7, 0x3, 0x7fff]}}]}}}], 0xc0}}, {{&(0x7f0000001fc0)={0xa, 0x4e22, 0x10, @mcast2, 0x81}, 0x1c, &(0x7f0000002200)=[{&(0x7f0000002000)="1de33d116920fc24254791a4ad281ca5d00e5e0b5eb4de9eca7923329d6ce4ab12d937facdf1bdc114ef17abb4b9026f3fe193159dc6341a3bab008e8894f3401ef179e2c82876a94172895f4b367177170450c3e5d2f185af4c0f442341019d31bd20b266d19fcd939cda931ced89e9d8983eb5ec8988aeb594668f7627cf4f468196f705db9b135f0545832246192609499d30b0876addf85e6df58c10785a8dec04948755257dc38e643e82e08df819e497d005276376657606f39fba4b825de2f130630c7dc724e80e20736e08030a34c1cf0d77e23a23b3e6f227a92a00c33f3b58cd1daf08", 0xe8}, {&(0x7f0000002100)="10a0e5a72c2787066a4f720f9460766bd30cf3fba06519", 0x17}, {&(0x7f0000002140)="248fe76810ad87b35fd702106a7971663f8647a51d165e2e7b13796cbcb09f03914eda173a68d65d73195c9073ce37668461eb09de5639145fcb", 0x3a}, {&(0x7f0000002180)="016caf0405b917dcdeb7e50f863224ba879b97b4d8699484ebc307c8b7d051ae103dc994256696548c144842d1db1af198994e60b60d9f1999159b055b9cd9889a8dee4676537ee80b974c07db83eb19057e40229c2047d9", 0x58}], 0x4, &(0x7f0000002240)=[@rthdrdstopts={{0x30, 0x29, 0x37, {0x33, 0x2, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0xfff8, [0x674]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}], 0x48}}, {{&(0x7f00000022c0)={0xa, 0x4e20, 0x2, @mcast1, 0x8}, 0x1c, &(0x7f00000028c0)=[{&(0x7f0000002300)="c204549db9d1a166021b780c371c996bf44ae86d4ba221dc7ca850866c1dba22818bfaf159d768d1d32fc10bff8f46437e695608a2c99cb5ebab398dbbeec44f8a16a8e3111476cc2922a91f68806fd163166a95cd1143ea38f2468c0524c29ef15b21f58fa6f8a25314800054d33f03387239ca391cef4bd1188c2c4e153ae504579fd0d018ebe60285f8a31562ccf0bb93d8feb1262998eb236d87deafb96ff2a733efdfba8729812dede3b551ec658a0c21cafdb7c54ecf9e759b7d6d9d38532260", 0xc3}, {&(0x7f0000002400)="77942b3f47f97565fbcda6b7ccde92d038dadd4fc8d108fc7651b6b7d67bfcd047a6e512de2ffb29afb4b5d59b8a0f8ae92a942559879e815557aa29831e0c9d6dfb100b68d1750e66639f5e18b4a2ff54c4ac1c418155d54c49f25e28e1cbb898adecf503de7270b24277a709be7fbd16eab26127daf0965f4c6be2dfbc", 0x7e}, {&(0x7f0000002480)="3b70372e976fad1f275b08decccc2034ea3a3125b454294f7c4945508d48b4036a9363f30acc417c8fbca163fb3ea7b79987fa41a8885a3e8f7647079a41a4f0fb3fccb8f2465a99740a933e07e17da09e45d988080d8fd3333042da7d1cc7855713fe9dda438f4fbd0040824b2a4891e59d9a897e57848852eaecf82ba954f1d9ad9aa3dcf37fd94d3c58dc788dde355ca3b1716cb3fc0192827f2060637d933fa29420197f193940e6dc1d6dd089e48fe8b6eef82093c2fe146ce33b", 0xbd}, {&(0x7f0000002540)="842ff0c2330f390f449d207c01071734ba02eb8f54eb7a8ca7863b7e5f8d31a63215661fec35c1b9129abf0ee9e34e5ca9eeea320cdbc055e8116e1ab8148d64b35a60676b7b5ab70021d45a169a0392f954fb2ba606cd71e12bb0a5989d6e873705b23d5dd1ee9444c732b39c306a908013e3e95f288663fe1ab792bdd3a7798bc948064037cf9ebdf8cd50a963dd5adba6785974e10aa9248bb277501c57", 0x9f}, {&(0x7f0000002600)="eff9f0897d6137499ad8a88e5fb1bd495a8ba3fe052e4018213511f223ebe4f91d9ade529687c1c524b63248989fc2f23ac6f1f22d65dea5dc29ac9179c437e29b5587ce80edbd265a7dd2868c167f630f1cffc939882ce71accfd2858b265bdd599a34a0df94d0b3636e0f269f66e22a58b40a0ad716267fed27c7f7fac60f94ae404b9e648335e521a102fc50c8482de3828e8ab1270c9713b0bba2af441bbcc1a2d358a740bbeacf92942fdb7f9d9b4e705edd1b16229a4f366b308ffa305bc", 0xc1}, {&(0x7f0000002700)="6d30103f43644897f2323453473493321d3887a2ef137f55c8177d7516c25bd0dac8dba52375117ae9912becf123f7d7961b09a0d789cf522119ca12d40fc9220031052c6a7e4471504184fbe6a44e19d8f9ab7c9a27205c92ca45203c6557e47b95eae17c1d74b9a9bd72df3bc623399125fe09ccbef7d63893de8fab2d0c4b8ba26f72e3e40a2a32170a116aa36217a2b31dff00d79a9a0ce32a7e01e95f8e18f6886c6a65f746b93d50004754f127d260e339", 0xb4}, {&(0x7f00000027c0)="34e343a409c5817fc07afaadbb4377605ab5dc4f126bb79801ba79cab27fb27d8ec305ae18a2f7b74122ebf94de7de0c949fbadcf7aac43ac1f8898977a1e89dd1e281e6e99ce8f63efc164f83a6a5fb7ee8c2028e9410b71a4014b74cbea3f17a3d24489a73336954ec30d347b1d9f7cdb1720568a8229d1c26c2da4abfdc899edf9dec8b545c9f518f973cdefaee23d3e51a6dc53e7b169793e25db5d1021cb2f88846373944753cae1dc1dd3036588aed13dd290a9c8dde4879b0a17339f01c323486bbe57bfdf2d74e1dcb5a7622d430133a57e91f0e16f5af2e22e93400", 0xe0}], 0x7, &(0x7f0000002940)=[@dstopts_2292={{0x80, 0x29, 0x4, {0x0, 0xc, '\x00', [@pad1, @calipso={0x7, 0x38, {0x2, 0xc, 0x1c, 0xfffb, [0x4, 0x8, 0x4, 0x100000001, 0x7fffffff, 0x5]}}, @jumbo={0xc2, 0x4, 0x2}, @jumbo={0xc2, 0x4, 0x3}, @calipso={0x7, 0x18, {0x3, 0x4, 0x7, 0x4, [0xd, 0x2]}}, @ra={0x5, 0x2, 0x9}]}}}, @hopopts={{0x148, 0x29, 0x36, {0x3c, 0x25, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x1, 0x8, [0x0]}}, @calipso={0x7, 0x28, {0x2, 0x8, 0x8, 0xd, [0xc78e, 0x7, 0x100, 0x1]}}, @hao={0xc9, 0x10, @remote}, @pad1, @pad1, @generic={0xf8, 0xd9, "76a07359497003f1c0e0d160a22bd288202992de2f83c8a322a11a1a990ee52ddb8d6ccd77937536bfb1f0af8b20a26b89f4eb666d67a7231ed41685b4daad5e2177dfdc53940de1eef55429c943eefb260f66b2410f48fbdc98a12ea551a2f9f8bf9e597406d9245697dff806f9c491ea6aea618963fba73a8bc8173500d7a47c7234be5e38adae9ef2c6e80ce10cb235e10bdc03ff4f95ca836eee1b3bf128ff298fc90a28cc0b77a0fccaec45ecd0c16ba89530d8e752bb3d78102bbfa29805bf078275e1a89e7f98208eb6be4a6b5b6a0df49d039e5e1a"}]}}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x4, 0x2, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x4, 0x5, [0x6]}}]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x33, 0xa, 0x0, 0x0, 0x0, [@mcast2, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty]}}}, @dstopts_2292={{0xb8, 0x29, 0x4, {0x6, 0x13, '\x00', [@generic={0x6, 0x94, "d7322dc74fc1d62263c3487d718ae87d3c92a8d332168982932a816ddeb09f24947899e975d37e2ee22b4abfe9e478fdae5e5bc0648a7c49d4f2a6b1ae9bbde09ed9e9313103139623239b0186ce3783f30da2baf406783fd1ddab48aec5b93367355d6062ee32b13687cb79f868e8bd3cf546091e001af3f9af7eb8b4b86e509037ca220a84bca98401cac44f4963c4380f1955"}, @ra={0x5, 0x2, 0x8000}]}}}, @hopopts={{0x118, 0x29, 0x36, {0x16, 0x1f, '\x00', [@pad1, @hao={0xc9, 0x10, @private0}, @padn={0x1, 0x1, [0x0]}, @generic={0x6, 0xc3, "5c3ee8feb1ce909bc91565c11b892588fdb8525745f6ed02d927f410ebdf7ca78ed474c4c629f3993854517b26a605529546d957a34ae78154adc838ef120e48a503a0c989ac4708d2a9218a4e03e85ce40b8856af17c31b99d9549aeadeeb89c1be8cff2e1e0a3f2fc17b56086eb113c4aa08b1c6d0267a6dee3a5dce1dee32d3ec2b914986a4cf367e855243ba0012781448cbc834cbc6cbb5779dff7ba70b59e24cf2365a58265f9696a65a73dfe7f5fc7f5f337993e1c556d53f3f41c7bf1776c1"}, @hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x81a6}, @jumbo={0xc2, 0x4, 0x7}, @ra={0x5, 0x2, 0x3}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x79}}, @hopopts_2292={{0x40, 0x29, 0x36, {0x87, 0x4, '\x00', [@pad1, @pad1, @pad1, @jumbo={0xc2, 0x4, 0x6}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @local}}]}}}, @flowinfo={{0x14}}], 0x4b8}}, {{&(0x7f0000002e00)={0xa, 0x4e21, 0x4, @mcast2, 0x14d263db}, 0x1c, &(0x7f0000003040)=[{&(0x7f0000002e40)="c3c83ff48b26b1f29475584e22313cd9d39b929ca51cb764f94a12ecd4f1e995323d1358fe9b87adf015defae65a0832edaf17d62c8c16ada7bfc5657f06879e822cd12596e988018a0cff45390cad805074237225c81eedea6b9faf8e8051e7de199912149fbe632d6dcc779180d32fb63101c3c7676375854753b25e271192a4", 0x81}, {&(0x7f0000002f00)="9c3d2a989168f48dd65d0cfef39304397321df6b53d753d7dab397ebcf33c8ad2fdd06096863da30ff580d0c7aafcba8be6d24f209d65fa5471fe08a06f881e0ed1a171ce3a539b216c3fd99ddba628ed4f91de51ea9de30dbcc436a2b84ee8ab96d6bd2a1dd1a477ea9570560613b3a6e10796d824d0c28541517a25946b86270fb1e306f11dc7ac43e5d414ce6d2c3b135aab3bc58c4a2b2e7694bf32967a22d9f0ae95af6a9ccbc004e466e38dff80608c0fe7b9685acc5ede46db237", 0xbe}, {&(0x7f0000002fc0)="ce5072eb8fbe77330fa151b3e7eeecafbb7286b9dc63443b260f86a744840f51a16fadc25e2f66d8811a893b2f95bfb819f254a907c570c1790127dc7f69f1d6d6b009792511dc5ea630e43cc6d783c2859a0fa41abea4a4", 0x58}], 0x3, &(0x7f0000003080)=[@hopopts={{0x120, 0x29, 0x36, {0x16, 0x20, '\x00', [@generic={0x9, 0xe5, "f3c7ac4a89d01ce1f0cbb47014a10025d27bfbb50d9ac6ad9ff7df3568a82cebef16098b4bc59aed2c90302b7002e7e289c84e545761097b0476c86b9c158b34f3a200c22a49fe995460ce213c4ec0118b1d5c35a07a7c35cf90e3431c2e5a80c14fbeafb688a49a3812bc866abfd88431e671d6a636bd73b8520b1efc0df10f7033457769943b21969e55ddbb1fbb8d034f20ba743e3becbf94123b03de8771002107148de25ed9bea999ade5ac443d916519f2dc791361ad07fb122b86767700e2213ae1292c090568f7d54b0457c1164cc74f87935a40c7e2698802abcacaabeed6f355"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x38}}, @jumbo={0xc2, 0x4, 0x7}, @ra={0x5, 0x2, 0x1}, @enc_lim={0x4, 0x1, 0x1}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @multicast2}}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}, @rthdrdstopts={{0xc0, 0x29, 0x37, {0x62, 0x14, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @pad1, @calipso={0x7, 0x18, {0x0, 0x4, 0x7f, 0x2, [0x4, 0x9]}}, @ra={0x5, 0x2, 0x748}, @generic={0x40, 0x22, "1fc2d6c96f5a2604a2bcc3a9513ba6ce1e05cc27de5ee8a028d96742e9634d3b0ac7"}, @generic={0xa2, 0x38, "8183d51d0fa1d3657b30da58d7fcea4fd8da35799bb834022302a6f4377b6f2439c9129363b05bf5e24fb55a41e11f6458f39f135968bf76"}, @hao={0xc9, 0x10, @mcast1}]}}}], 0x220}}], 0x6, 0x8001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000003440)={0x20000004}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000003480), &(0x7f00000034c0)=0x14) exit_group(0x401) exit_group(0x1ff6060a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x810, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000003500)=0x6) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000003580), r1) r4 = getpgrp(0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000003700)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000036c0)={&(0x7f00000035c0)={0xdc, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4008000}, 0x4008000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f00000038c0)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003880)={&(0x7f0000003780)={0xcc, r3, 0x200, 0x70bd25, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x68631c957a6ff6d8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003940), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000003a00)={&(0x7f0000003900)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000039c0)={&(0x7f0000003980)={0x30, r7, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x91cb}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000003f00)={&(0x7f0000003a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003ec0)={&(0x7f0000003a80)={0x434, 0x3f4, 0x400, 0x70bd2c, 0x25dfdbfc, {0x5, 0x1, 0x14, [0x0, 0xffff, 0x3, 0x2, 0x0, 0x3d2, 0xdd, 0xfff, 0x80000000, 0x81, 0x1, 0x1, 0x4, 0x5, 0x9, 0x5, 0x9, 0x80000001, 0x4, 0x4, 0xfffffffb, 0x5, 0x4, 0xc, 0x7f, 0x3, 0x4, 0x4, 0x81, 0xffff, 0xb1, 0xcc0, 0xffff, 0x3000000, 0x7, 0x400, 0x78351646, 0x6, 0xb5b, 0x1ff, 0xe, 0x9, 0xd, 0x10001, 0x2, 0x1, 0xd, 0xfff, 0x0, 0x5, 0x0, 0x101, 0x7, 0x0, 0x2a7, 0x6, 0x200, 0x751, 0x6, 0x3, 0x10001, 0x6, 0x7], [0x0, 0xfff, 0x7, 0xd313, 0xfffffffb, 0xfff, 0x1834, 0x1000, 0x2, 0x4, 0xfffffffc, 0x2, 0x2, 0xca, 0x8, 0x0, 0x2, 0x7f, 0x1, 0xfff, 0x1, 0x1e, 0x8, 0xfeb, 0x400, 0x3, 0x35, 0x8, 0x7, 0x1, 0x6, 0xad06, 0x100000, 0x903, 0x5, 0x800, 0xff, 0xffff, 0x8, 0x3, 0x5, 0x7, 0x8, 0x929, 0x8, 0x7, 0x3, 0x1, 0x200, 0x9, 0xb0c, 0x3, 0xff, 0x9, 0xffffffff, 0xfffffffd, 0x7, 0x2, 0x7, 0xfffffffc, 0x7, 0x480, 0xb], [0x8001, 0x2, 0x8, 0xff, 0x75, 0x2, 0x7, 0x3ff, 0x800, 0x9, 0x7, 0xd, 0x1942, 0xb9c, 0x9, 0x7ff, 0x4e, 0x8, 0xca, 0x7f, 0x2, 0x2, 0x1000, 0x9, 0x8, 0x5, 0x200, 0x7fff, 0xa470, 0x400, 0xffffff01, 0x6aa, 0x6, 0x9, 0x3eb2, 0x9000, 0x8000, 0x8dfe, 0x2fbee21e, 0x7f, 0x0, 0x6, 0x100, 0x7ff, 0x7, 0x3, 0x8, 0x5c6c2bae, 0x2, 0x8, 0x1ff, 0x0, 0x7, 0x93, 0x8, 0x6, 0xffffffff, 0x0, 0x5a80b90b, 0x48e, 0x40, 0x800, 0x3ff, 0x7], [0xfffffffd, 0x9, 0x7f, 0x7, 0xd6, 0x0, 0x1, 0x2, 0xfffffff7, 0x0, 0x6, 0x4, 0x8, 0x8000, 0x1fc00000, 0x7, 0x2, 0x1, 0x1, 0x10001, 0x3, 0x12, 0x5, 0x9, 0x7, 0x9, 0x6, 0xb, 0x4, 0xffff8000, 0x7f, 0x0, 0x2, 0x4, 0x6063, 0x4, 0x8, 0x273b358, 0x8, 0x4, 0x8, 0x8, 0x93, 0x0, 0x2, 0x2, 0x10000, 0xd, 0x2b, 0xaa43, 0x7, 0x0, 0x2, 0x1, 0x9, 0xe, 0xffff3223, 0x401, 0xc, 0x3ff, 0x40, 0x0, 0x5, 0x5dc1], 0x13, ['\x00', 'secondname\x00', '\xff\xff', '\'@#p\x00']}, ["", "", "", "", "", "", "", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x20008090}, 0x8040) fchdir(r0) socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000003f40), r1) io_uring_enter(r1, 0x3020, 0xb0df, 0x31, &(0x7f0000003f80)={[0xfffffffffffffff9]}, 0x8) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000004000)={@rand_addr, @loopback, 0x0}, &(0x7f0000004040)=0xc) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000004080)={@multicast1, @multicast1, 0x0}, &(0x7f00000040c0)=0xc) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r6, &(0x7f00000041c0)={&(0x7f0000003fc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000004180)={&(0x7f0000004100)={0x70, r7, 0x603, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x4c800) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000004280)={0x4, 0x35, {r4}, {0xee01}, 0x6, 0xffffffffffffff80}) mount$fuse(0x0, &(0x7f0000004200)='./file0\x00', &(0x7f0000004240), 0x20000, &(0x7f00000042c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r10}, 0x2c, {}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x3}}, {@allow_other}, {@default_permissions}, {@allow_other}], [{@dont_appraise}, {@obj_type={'obj_type', 0x3d, 'mptcp_pm\x00'}}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@appraise_type}, {@measure}, {@subj_user={'subj_user', 0x3d, 'mptcp_pm\x00'}}]}}) 2.34698284s ago: executing program 0 (id=1803): r0 = syz_open_dev$dri(0x0, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x50, 0x6, 0x29}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x3, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfe", 0x12, 0x1, 0x0, 0x0) splice(r7, 0x0, r6, 0x0, 0x406f413, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r6, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000fc6e6300d52b105b61ea36a52109b27766f26b04fc965ed3740797bbbdc7fcaf0ff870dae5643d5f49ea95de0c406e24d218c8fc3d2525157a1483b9cd80401359adaee0cd5310aeda921e5b3f66167d4c670aa3e50edea8e7d8dab014647d8b13b2b7e50b9617cc8308fc3cb95f9020c872a25aa9daf8e68b0509d8ef126f54ab1ad2661fe62a26921d52f6cb8fd04c5ca7ec107d9895ee6d792b0733ab043af1d2676b33205e7c6c43893d38", @ANYRES16=r8, @ANYBLOB="000126bd7000fbdbdf253800000008000300", @ANYRES32=r10, @ANYBLOB="0c00990009000000500000000c00580054000000000000000c0058000a00000000000000"], 0x40}}, 0x4) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000620014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) 2.22873674s ago: executing program 4 (id=1804): socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x88}}], 0x2, 0x40840) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) add_key(0x0, 0x0, &(0x7f0000000100)='[', 0x1, 0xffffffffffffffff) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) getpgid(r5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) socket$nl_route(0x10, 0x3, 0x0) 2.099224812s ago: executing program 1 (id=1805): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000002c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 566.813564ms ago: executing program 1 (id=1806): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES16=r1], 0x54}}, 0x20000000) 290.960866ms ago: executing program 3 (id=1807): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x7, r1, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000002}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r3, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) pwritev2(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="9f9f7fa64f0d7aa5ba22f5a3931f5a334da1c152ddbda48f9cf07d3374bc7b7d1c94983227e1348ee82ca02f821e13489ede0598b445884bd8cc1bff98709af051d7f90ed9a98cd2c4a2f2660cb965ed2640f0466e0b84f48e7377a0e02ba61304acecc04ec542c6a641c2f46e4e1809c0f69bd1caac36a4bae90266b63a38d745a04629d78fd71ef7980e277672fa314d3ea4daaefc453314e287f6d2316eb9c8ea772416450022d33e0dc7f2f337a031edc01c41cd9726c06e21285a0afcc0fb8d89a95310979e3d96c47fece703310907f811a5641dbd6b955d0243c8a1fd622cdfdd6fc2c989edc5e9f362bea1d6484d", 0xf2}, {&(0x7f0000000300)="c0d565c19fe3845e0977562e96317c8e46d2a36ceaf805042c5ecf18622e627a32a4ee30b4be4312c2d86f324b97dadab1a671b54f5135982bf047465e0bb0bd3e45280ab0d6d8a3f6a5caff3eea35ed8c2f59892727f75047f895f404f7d065ccc941211a27c4f4c67765bc4029ba321e645f46317eaa21bcbcb415008ea38cdc0229f18f1c4112f9ad376f884644a2753ef5048d6c019b3ae0859e0e37af5b2cfe53dd709bcc382e663479fc6d70a1caa182c2c36a3b19b073f70d24679b3f52c4853277ef4840583097086e", 0xcd}], 0x2, 0x7, 0x3, 0x10) 50.412185ms ago: executing program 3 (id=1808): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f00000003c0)) syz_usb_connect(0x2, 0x4f, &(0x7f0000000080)=ANY=[@ANYBLOB="1201510329fbf04038074045cec60102030109023d0002020610780907d40901786d3d400905010000020904020904e20002b22618bb0905010000027c9e09070585e3"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0) r3 = syz_usb_connect$uac1(0x3, 0x134, &(0x7f0000000600)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x122, 0x3, 0x1, 0x2, 0x40, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x245, 0x6}, [@extension_unit={0x8, 0x24, 0x8, 0x1, 0xfffe, 0x2, 'D'}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x1, 0x2, [0x0, 0x2], 0x10}, @selector_unit={0x8, 0x24, 0x5, 0x3, 0x2, "46fdc8"}, @feature_unit={0x11, 0x24, 0x6, 0x4, 0x5, 0x5, [0x9, 0x1, 0x2, 0x5, 0x9], 0x1}, @mixer_unit={0x7, 0x24, 0x4, 0x4, 0x6, "b551"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x201, 0x5, 0xb, 0x5, 0x1, 0xfa}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x2, 0xfff8, 0x7, "36271abaded6"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x2, 0x5, 0x5, "9d64"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x0, 0x5, 0x4, "38f7a7ce"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x9c, 0x3}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x6, 0x2, 0x5, 0x1, "6ad8fe", '|'}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x4, 0x1, 0x2, "b923ece7eff6b649ec"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xf, 0xad, 0xe, {0x7, 0x25, 0x1, 0x80, 0x7, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x2, 0x6, 0x2, "", "28d6a3"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x7b, 0x1001}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x3, 0x0, 0x3, 'R'}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x7, 0x3, 0x6, 0x3, "a72af8", "c426"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x9, 0x3}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x5, 0x3, 0x2, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xde, 0x4, 0x1, {0x7, 0x25, 0x1, 0x80, 0x7}}}}}}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x200, 0x2, 0xd, 0x7, 0x8, 0x9}, 0xc1, &(0x7f0000000740)={0x5, 0xf, 0xc1, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x6}, @wireless={0xb, 0x10, 0x1, 0x4, 0x50, 0xf, 0xe1, 0x7fff, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x9, 0x4, 0x1}, @generic={0x9d, 0x10, 0x2, "f1c3847362ebb000ec8d8622b00beba2bad71a96953ef2fec108956e9477bca1a728c47d668bd772784808900c30fa72397633f79ce6057fb648bea06399e61f52c365fbfe2e76288a946bbfe04a69e6938954969871bb2b99a31af3b28aed97d5252d7aadba7c0ca11ccdd8310d6621599bf2bbd752d04ca1dc412a337f5c03c89142b652031034774a333db97a9aca3ef0fc61496dfc51a20b"}]}, 0x5, [{0x95, &(0x7f0000000840)=@string={0x95, 0x3, "fabb9c8865f80e836b855dce2e23771a96bfc4ba494a61e3d3ec4a737153f26f89e1da7afa826028a9a680d36c42aab109503d7e5a1ef7f148234b191e7d9e4825131c8aa5aeaf5a206735fecd0c372c33b74967213d682250fc2baedd12a4a3849cd876ab045d35991e14f9c6f993022a5a7f35a07be5ba22c383309ad1c2ed8384af3e7f98617d302d8b9c65dfdb78313548"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x1c09}}, {0xa, &(0x7f0000000580)=@string={0xa, 0x3, "edc1cccca83ff57f"}}, {0xe9, &(0x7f0000000900)=@string={0xe9, 0x3, "88cc7ce0a651251ea98aa2381b64f9574ccb8be15aa986efd68c93a4040883ae7dc33f8121a733ed6ea1b68521f45e7fdc020e62200e63e77f668409756d670893abf071e76b038c43ebbadcda5e7cfcc271420e5aa239b6688287b783672326afd929e681231e41d294827c2f4bd3b26a4cc92a9a1ab5d167c5c887ef50f4995ace632f44ddac2a36ec4857505a14e8c00e709af571c70d920c70905e786098f2f414893f8d9a83b90e5b055ed82fd492471b0a2054813a5389f0ae58e98898d5ae519e589c6d47349a5d632e04d9cd3ec80465849f69e4d2b9ce83199cb12c4bc6bd16f6512e"}}, {0xa1, &(0x7f0000000a00)=ANY=[@ANYBLOB="a1037fe1865f756705fbb7f93b6b27e99a484e1872f2244f598ad1e0ba000852ae99670d72f090fe99a37fbd5e90500f6d0f169a0615f944da52ad91669529a9ada72a3a43fa81708659ae169964d495966634d5adcbd0f8250b9e6e5008d520f69a7ba55b73e6bfdb6a91d4815223df0751b6da09d5a48656dc01efa40b1f4af2d61e4ff5234fbf52f31c990c11b516f7c2fc2ae9c8df54871aa15ba781d62a02"]}]}) modify_ldt$write2(0x11, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000140)={0x0, 0x31, 0xa4, "0368edb658aec6f64591296a233b7c876961b69b962b24baf6b0eb9c07bdac1125bf25e83ef7a1cdd177bb4a6be875a3731dc4df384744bfb46b86dfe9dcb33699e5640c7baebefdf612320f44bcccd05e9a45e500d5bf380fabdfa8cd55eb724bac94d6bb624277936b3479feeac2e6055afa61d012e9e76e6f4f0c9143b73c3a1c449d904c4b8f62396591a20c753cb1749d2036037e996db0e29a4311e773c3ddcf6c"}, 0x0, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000280)={0x20, 0x81, 0x3, "da91d3"}, &(0x7f00000002c0)={0x20, 0x82, 0x2, "db38"}, &(0x7f0000000300)={0x20, 0x83, 0x2, "d463"}, &(0x7f0000000440)=ANY=[@ANYBLOB="2084010000002f41eeefb3ef1a82a49f2401d2b0960ba194607e13518b65670a90d111dcc62aa34ddb10f1ef36e56718c5dc496ef222b35766b871785ec5217101e395992abed3ec318baec597e5e0fbef6c51b0bd1b454ed3a8918f6d735a2f4b83de122df83242d20ef9bee98c5daafa4bca8c2d5ec5138760f2911c1a0998375f479108a66d6bc0f58981673ea960132418520d46c4ee7547a8828e2c0ce45fc6e2b1cac56f0f66a2cd989eb62a1ebffe7b99fabbe62e"], &(0x7f0000000380)={0x20, 0x85, 0x3, "5afce4"}}) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000240)='.\x00', 0x5) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x1) fsmount(r6, 0x0, 0x8) r7 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x1010c0, 0x8) sendmsg$AUDIT_LIST_RULES(r7, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x3f5, 0x400, 0x70bd2b, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10004041}, 0x0) 0s ago: executing program 1 (id=1809): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x0, 0x0, 0x39, 0x0, "8ba56b4963c948c0889e5a17639f7776b46931babed9f61f32493dbf38675f8c65915a9fccefe22ad564e3883d5c52d11056a5988c9c9fcf4742bb2cfde8e3f8dea3861999b332decfd4e49ff9df15e3"}, 0xd8) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x183c40, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) r2 = fcntl$dupfd(r0, 0x406, r0) socket$kcm(0x29, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000030c0)="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", 0x1000}, {&(0x7f00000006c0)="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", 0x112}], 0x3, &(0x7f0000001e80)=[@op={0x18}, @iv={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x80}], 0x60, 0x20000001}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="48ad0073b15889ea4c5a42831b0aa9806c1a180c14cf1f610d7a3be1a1ec2cacd6f161400fe5", 0x26}], 0x1, 0x0, 0x0, 0x84}], 0x2, 0x800) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) kernel console output (not intermixed with test programs): usb 5-1: config 0 interface 126 has no altsetting 0 [ 711.140125][ T5984] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 711.159055][ T5984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.172576][ T5984] usb 5-1: Product: syz [ 711.195988][ T5984] usb 5-1: Manufacturer: syz [ 711.200738][ T5984] usb 5-1: SerialNumber: syz [ 711.286832][ T6055] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 711.298237][ T5984] usb 5-1: config 0 descriptor?? [ 711.309864][T11076] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 711.322488][T11076] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 711.474474][ T6055] usb 4-1: Using ep0 maxpacket: 32 [ 711.492140][ T6055] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 711.605600][ T6055] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 711.615915][ T6055] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.632800][ T6055] usb 4-1: Product: syz [ 711.694462][ T6055] usb 4-1: Manufacturer: syz [ 711.711015][ T6055] usb 4-1: SerialNumber: syz [ 711.736624][ T6055] usb 4-1: config 0 descriptor?? [ 711.785218][ T5984] ir_usb 5-1:0.126: IR Dongle converter detected [ 711.800501][ T5984] usb 5-1: IRDA class descriptor not found, device not bound [ 711.973636][ T6055] usb 4-1: bad CDC descriptors [ 712.014384][ T5984] usb 5-1: USB disconnect, device number 75 [ 712.019161][ T6055] usb 4-1: unsupported MDLM descriptors [ 712.704085][ T5984] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 712.986419][ T5984] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 713.055022][ T5984] usb 5-1: config 1 has no interface number 0 [ 713.080026][ T5984] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 64 [ 713.102495][ T5984] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 8 [ 713.156615][ T5984] usb 5-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 713.195403][ T5984] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 713.205653][ T5984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.213745][ T5984] usb 5-1: Product: syz [ 713.232963][ T5984] usb 5-1: Manufacturer: syz [ 713.239443][ T5984] usb 5-1: SerialNumber: syz [ 713.262901][T11101] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 713.270690][T11101] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 713.388942][ T5984] usb 5-1: Expected 3 endpoints, found: 2 [ 713.594809][ T6055] usb 5-1: USB disconnect, device number 76 [ 714.533553][ T6087] usb 4-1: USB disconnect, device number 74 [ 714.919672][T11118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.942310][T11118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.814015][ T6087] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 715.986040][ T6087] usb 2-1: device descriptor read/64, error -71 [ 716.319341][ T6087] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 716.483951][ T6087] usb 2-1: device descriptor read/64, error -71 [ 716.594292][ T6087] usb usb2-port1: attempt power cycle [ 716.944090][ T6087] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 716.989806][ T6087] usb 2-1: device descriptor read/8, error -71 [ 717.274292][ T6087] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 717.360128][ T6087] usb 2-1: device descriptor read/8, error -71 [ 717.517051][ T6087] usb usb2-port1: unable to enumerate USB device [ 717.954798][T11156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1383'. [ 718.054945][T11161] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1383'. [ 719.725088][ T979] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 719.887739][ T979] usb 5-1: Using ep0 maxpacket: 16 [ 719.903067][ T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 719.947666][ T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.052336][ T979] usb 5-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 720.100972][T11208] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1398'. [ 720.118003][ T979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.150168][ T979] usb 5-1: config 0 descriptor?? [ 720.158830][T11208] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1398'. [ 720.599924][ T979] saitek 0003:06A3:0621.0019: item fetching failed at offset 4/5 [ 720.617697][ T979] saitek 0003:06A3:0621.0019: parse failed [ 720.659017][ T979] saitek 0003:06A3:0621.0019: probe with driver saitek failed with error -22 [ 720.805658][ T979] usb 5-1: USB disconnect, device number 77 [ 720.814339][ T6087] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 720.995918][ T6087] usb 2-1: Using ep0 maxpacket: 16 [ 721.007688][ T6087] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 721.032932][ T6087] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 721.042635][ T6087] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.088322][ T6087] usb 2-1: Product: syz [ 721.092569][ T6087] usb 2-1: Manufacturer: syz [ 721.100542][ T6087] usb 2-1: SerialNumber: syz [ 721.118309][ T6087] usb 2-1: config 0 descriptor?? [ 721.134105][ T44] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 721.147500][ T6087] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 721.163137][ T6087] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 721.318371][ T44] usb 4-1: unable to get BOS descriptor or descriptor too short [ 721.348803][ T44] usb 4-1: not running at top speed; connect to a high speed hub [ 721.363710][ T44] usb 4-1: config 4 has an invalid interface number: 201 but max is 0 [ 721.383241][ T44] usb 4-1: config 4 has no interface number 0 [ 721.399194][ T44] usb 4-1: config 4 interface 201 has no altsetting 0 [ 721.430227][ T44] usb 4-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice=c0.e3 [ 721.448981][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.462294][ T44] usb 4-1: Product: syz [ 721.468081][ T44] usb 4-1: Manufacturer: syz [ 721.475820][ T44] usb 4-1: SerialNumber: syz [ 721.541170][T11211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.550929][T11211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.587185][ T6087] em28xx 2-1:0.0: unknown em28xx chip ID (123) [ 721.694399][ T6087] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 721.721397][ T44] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:4.201/input/input36 [ 721.734047][ T6087] em28xx 2-1:0.0: board has no eeprom [ 721.761640][ T5221] bcm5974 4-1:4.201: could not read from device [ 721.800426][ T44] usb 4-1: USB disconnect, device number 75 [ 721.801102][ T5221] bcm5974 4-1:4.201: could not read from device [ 721.826934][ T6087] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 721.868990][ T6087] em28xx 2-1:0.0: dvb set to bulk mode. [ 721.897005][ T5989] em28xx 2-1:0.0: Binding DVB extension [ 721.944091][ T6087] usb 2-1: USB disconnect, device number 84 [ 721.971920][ T6087] em28xx 2-1:0.0: Disconnecting em28xx [ 721.990361][ T30] audit: type=1326 audit(1758412213.730:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.1.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86c98ec29 code=0x7ffc0000 [ 722.064964][ T30] audit: type=1326 audit(1758412213.730:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.1.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86c98ec29 code=0x7ffc0000 [ 722.098287][ T30] audit: type=1326 audit(1758412213.730:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.1.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc86c98ec29 code=0x7ffc0000 [ 722.150778][ T5989] em28xx 2-1:0.0: Registering input extension [ 722.234910][T11246] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1410'. [ 722.241302][ T30] audit: type=1326 audit(1758412213.730:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.1.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86c98ec29 code=0x7ffc0000 [ 722.253904][ T6087] em28xx 2-1:0.0: Closing input extension [ 722.306366][T11246] dvmrp8: entered allmulticast mode [ 722.342596][ T30] audit: type=1326 audit(1758412213.730:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.1.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86c98ec29 code=0x7ffc0000 [ 722.353937][T11246] dvmrp8: left allmulticast mode [ 722.410322][ T6087] em28xx 2-1:0.0: Freeing device [ 722.413610][ T30] audit: type=1326 audit(1758412213.730:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.1.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc86c98ec29 code=0x7ffc0000 [ 722.493643][ T30] audit: type=1326 audit(1758412213.730:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.1.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86c98ec29 code=0x7ffc0000 [ 722.523195][T11252] tipc: Enabled bearer , priority 0 [ 722.533199][T11251] syzkaller0: entered promiscuous mode [ 722.538512][ T30] audit: type=1326 audit(1758412213.730:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.1.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86c98ec29 code=0x7ffc0000 [ 722.558996][T11251] syzkaller0: entered allmulticast mode [ 722.573245][ T30] audit: type=1326 audit(1758412213.730:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.1.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc86c98ec29 code=0x7ffc0000 [ 722.600016][ T30] audit: type=1326 audit(1758412213.730:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.1.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86c98ec29 code=0x7ffc0000 [ 722.812055][T11262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.826658][T11251] tipc: Resetting bearer [ 722.850739][T11262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.867378][T11250] tipc: Resetting bearer [ 722.902723][T11250] tipc: Disabling bearer [ 723.853883][ T5895] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 724.037151][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.050841][ T5895] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 724.096219][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.117033][ T5895] usb 5-1: config 0 descriptor?? [ 724.147040][ T6087] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 724.176664][T11283] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1422'. [ 724.324258][ T6087] usb 3-1: Using ep0 maxpacket: 16 [ 724.334509][ T6087] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.340890][T11286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1423'. [ 724.357334][ T6087] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 724.357364][T11286] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1423'. [ 724.398514][ T6087] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 724.411524][ T6087] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.430493][ T6087] usb 3-1: config 0 descriptor?? [ 724.851182][ T6087] playstation 0003:054C:05C4.001A: unbalanced delimiter at end of report description [ 724.868244][ T6087] playstation 0003:054C:05C4.001A: Parse failed [ 724.882984][ T6087] playstation 0003:054C:05C4.001A: probe with driver playstation failed with error -22 [ 725.183983][ T6087] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 725.243306][ T979] usb 3-1: USB disconnect, device number 66 [ 725.349216][ T6087] usb 2-1: config 0 has an invalid interface number: 23 but max is 0 [ 725.364482][ T6087] usb 2-1: config 0 has no interface number 0 [ 725.378081][ T6087] usb 2-1: New USB device found, idVendor=27c6, idProduct=5395, bcdDevice=eb.bb [ 725.390842][ T6087] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.408827][ T6087] usb 2-1: Product: syz [ 725.413147][ T6087] usb 2-1: Manufacturer: syz [ 725.418540][ T6087] usb 2-1: SerialNumber: syz [ 725.429373][ T6087] usb 2-1: config 0 descriptor?? [ 725.689753][ T6087] usb 2-1: USB disconnect, device number 85 [ 726.026629][T11312] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 726.804329][ T5895] usbhid 5-1:0.0: can't add hid device: -71 [ 726.812215][ T5895] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 726.854106][ T5895] usb 5-1: USB disconnect, device number 78 [ 727.398592][T11335] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1433'. [ 730.953158][T11387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.975372][ T5909] hid_parser_main: 49 callbacks suppressed [ 730.975439][ T5909] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 731.086300][ T5909] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 731.909506][T11409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1453'. [ 731.922601][T11409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1453'. [ 731.944118][ T2997] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 731.959634][ T2997] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 731.974631][T11409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1453'. [ 732.125298][T11409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1453'. [ 732.254562][ T2997] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.267994][ T2997] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.343328][ T5909] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 732.514553][ T5909] usb 3-1: Using ep0 maxpacket: 16 [ 732.527731][ T5909] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 732.545013][ T5909] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.559393][ T5909] usb 3-1: too many endpoints for config 1 interface 1 altsetting 48: 49, using maximum allowed: 30 [ 732.573909][ T5909] usb 3-1: config 1 interface 1 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 49 [ 732.622325][ T5909] usb 3-1: config 1 interface 1 has no altsetting 0 [ 732.640771][ T5909] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 732.654150][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.669037][ T5909] usb 3-1: Product: syz [ 732.678922][ T5909] usb 3-1: Manufacturer: syz [ 732.695758][ T5909] usb 3-1: SerialNumber: syz [ 732.768180][ T5909] usb 3-1: selecting invalid altsetting 1 [ 732.778047][ T5909] usb 3-1: selecting invalid altsetting 0 [ 732.803868][ T5909] usb 3-1: selecting invalid altsetting 0 [ 732.824774][ T5909] cdc_ncm 3-1:1.0: bind() failure [ 732.981300][T11409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.995321][T11409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.054982][ T5909] usb 3-1: selecting invalid altsetting 0 [ 733.082035][ T5909] usbtest 3-1:1.1: probe with driver usbtest failed with error -22 [ 733.124815][ T5909] usb 3-1: USB disconnect, device number 67 [ 734.077293][T11435] netlink: 'syz.2.1458': attribute type 10 has an invalid length. [ 734.139906][T11435] team0: Device hsr_slave_0 failed to register rx_handler [ 734.700525][T11447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1462'. [ 734.734506][ T5909] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 734.948816][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 735.060033][ T5909] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 735.104809][ T979] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 735.131037][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.154917][T11457] FAULT_INJECTION: forcing a failure. [ 735.154917][T11457] name failslab, interval 1, probability 0, space 0, times 0 [ 735.208025][T11457] CPU: 1 UID: 0 PID: 11457 Comm: syz.2.1464 Not tainted syzkaller #0 PREEMPT(full) [ 735.208053][T11457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 735.208064][T11457] Call Trace: [ 735.208072][T11457] [ 735.208081][T11457] dump_stack_lvl+0x189/0x250 [ 735.208111][T11457] ? __pfx____ratelimit+0x10/0x10 [ 735.208133][T11457] ? __pfx_dump_stack_lvl+0x10/0x10 [ 735.208157][T11457] ? __pfx__printk+0x10/0x10 [ 735.208190][T11457] ? __pfx___might_resched+0x10/0x10 [ 735.208208][T11457] ? fs_reclaim_acquire+0x7d/0x100 [ 735.208232][T11457] should_fail_ex+0x414/0x560 [ 735.208267][T11457] should_failslab+0xa8/0x100 [ 735.208297][T11457] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 735.208324][T11457] ? __pfx_nf_tables_abort+0x10/0x10 [ 735.208347][T11457] ? __alloc_skb+0x112/0x2d0 [ 735.208373][T11457] __alloc_skb+0x112/0x2d0 [ 735.208399][T11457] netlink_ack+0x146/0xa50 [ 735.208442][T11457] nfnetlink_rcv+0x2290/0x2520 [ 735.208504][T11457] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 735.208582][T11457] ? netlink_deliver_tap+0x2e/0x1b0 [ 735.208619][T11457] netlink_unicast+0x82c/0x9e0 [ 735.208657][T11457] ? __pfx_netlink_unicast+0x10/0x10 [ 735.208703][T11457] ? netlink_sendmsg+0x642/0xb30 [ 735.208714][ T5909] usb 5-1: config 0 descriptor?? [ 735.208722][T11457] ? skb_put+0x11b/0x210 [ 735.208748][T11457] netlink_sendmsg+0x805/0xb30 [ 735.208776][T11457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 735.208802][T11457] ? aa_sock_msg_perm+0xf1/0x1d0 [ 735.208827][T11457] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 735.208852][T11457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 735.208880][T11457] __sock_sendmsg+0x21c/0x270 [ 735.208916][T11457] ____sys_sendmsg+0x505/0x830 [ 735.208952][T11457] ? __pfx_____sys_sendmsg+0x10/0x10 [ 735.208990][T11457] ? import_iovec+0x74/0xa0 [ 735.209024][T11457] ___sys_sendmsg+0x21f/0x2a0 [ 735.209056][T11457] ? __pfx____sys_sendmsg+0x10/0x10 [ 735.209123][T11457] ? __fget_files+0x2a/0x420 [ 735.209142][T11457] ? __fget_files+0x3a0/0x420 [ 735.209175][T11457] __x64_sys_sendmsg+0x19b/0x260 [ 735.209224][T11457] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 735.209266][T11457] ? __pfx_ksys_write+0x10/0x10 [ 735.209294][T11457] ? rcu_is_watching+0x15/0xb0 [ 735.209323][T11457] ? do_syscall_64+0xbe/0x3b0 [ 735.209353][T11457] do_syscall_64+0xfa/0x3b0 [ 735.209377][T11457] ? lockdep_hardirqs_on+0x9c/0x150 [ 735.209399][T11457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.209423][T11457] ? clear_bhb_loop+0x60/0xb0 [ 735.209449][T11457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.209470][T11457] RIP: 0033:0x7f8793d8ec29 [ 735.209494][T11457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 735.209513][T11457] RSP: 002b:00007f8794cdc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 735.209537][T11457] RAX: ffffffffffffffda RBX: 00007f8793fd5fa0 RCX: 00007f8793d8ec29 [ 735.209553][T11457] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 735.209569][T11457] RBP: 00007f8794cdc090 R08: 0000000000000000 R09: 0000000000000000 [ 735.209582][T11457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 735.209596][T11457] R13: 00007f8793fd6038 R14: 00007f8793fd5fa0 R15: 00007f87940ffa28 [ 735.209632][T11457] [ 735.457252][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 735.457274][ T30] audit: type=1326 audit(1758412227.200:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.1.1465" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc86c98ec29 code=0x0 [ 735.660830][ T979] usb 4-1: Using ep0 maxpacket: 8 [ 735.774704][ T979] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 735.792516][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.222204][ T979] usb 4-1: Product: syz [ 736.240650][ T979] usb 4-1: Manufacturer: syz [ 736.289516][ T979] usb 4-1: SerialNumber: syz [ 736.357104][ T979] usb 4-1: config 0 descriptor?? [ 736.422087][T11444] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 736.459465][ T979] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 736.904347][ T5909] elan 0003:04F3:0755.001C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 737.132117][T11443] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1460'. [ 737.143143][T11443] [U] v3f"S/4:XTzWtlW= [ 737.150152][T11443] [U] J"e:" [ 737.513293][T11454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.525989][T11454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.054484][ T979] usb 5-1: reset full-speed USB device number 79 using dummy_hcd [ 738.202842][T11486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1470'. [ 738.734622][ T6087] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 739.063915][ T6087] usb 3-1: Using ep0 maxpacket: 16 [ 739.135216][ T5909] usb 5-1: USB disconnect, device number 79 [ 739.161216][ T6087] usb 3-1: config 0 has no interfaces? [ 739.251056][ T6087] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 739.290212][ T6087] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.303605][ T5895] usb 4-1: USB disconnect, device number 76 [ 739.678909][ T6087] usb 3-1: Product: syz [ 739.683128][ T6087] usb 3-1: Manufacturer: syz [ 739.723941][ T6087] usb 3-1: SerialNumber: syz [ 739.751747][ T6087] usb 3-1: config 0 descriptor?? [ 740.230663][T11508] FAULT_INJECTION: forcing a failure. [ 740.230663][T11508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 740.246901][T11508] CPU: 1 UID: 0 PID: 11508 Comm: syz.1.1475 Not tainted syzkaller #0 PREEMPT(full) [ 740.246938][T11508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 740.246952][T11508] Call Trace: [ 740.246960][T11508] [ 740.246970][T11508] dump_stack_lvl+0x189/0x250 [ 740.247001][T11508] ? __pfx____ratelimit+0x10/0x10 [ 740.247023][T11508] ? __pfx_dump_stack_lvl+0x10/0x10 [ 740.247047][T11508] ? __pfx__printk+0x10/0x10 [ 740.247090][T11508] should_fail_ex+0x414/0x560 [ 740.247126][T11508] _copy_to_user+0x31/0xb0 [ 740.247156][T11508] simple_read_from_buffer+0xe1/0x170 [ 740.247191][T11508] proc_fail_nth_read+0x1b3/0x220 [ 740.247219][T11508] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 740.247245][T11508] ? rw_verify_area+0x2a6/0x4d0 [ 740.247271][T11508] ? __lock_acquire+0xab9/0xd20 [ 740.247298][T11508] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 740.247336][T11508] vfs_read+0x200/0xa30 [ 740.247360][T11508] ? fdget_pos+0x247/0x320 [ 740.247382][T11508] ? __pfx___mutex_lock+0x10/0x10 [ 740.247405][T11508] ? __pfx_vfs_read+0x10/0x10 [ 740.247432][T11508] ? __fget_files+0x2a/0x420 [ 740.247454][T11508] ? __fget_files+0x3a0/0x420 [ 740.247470][T11508] ? __fget_files+0x2a/0x420 [ 740.247497][T11508] ksys_read+0x145/0x250 [ 740.247530][T11508] ? __pfx_ksys_read+0x10/0x10 [ 740.247552][T11508] ? rcu_is_watching+0x15/0xb0 [ 740.247578][T11508] ? do_syscall_64+0xbe/0x3b0 [ 740.247604][T11508] do_syscall_64+0xfa/0x3b0 [ 740.247624][T11508] ? lockdep_hardirqs_on+0x9c/0x150 [ 740.247644][T11508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.247663][T11508] ? clear_bhb_loop+0x60/0xb0 [ 740.247687][T11508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.247713][T11508] RIP: 0033:0x7fc86c98d63c [ 740.247730][T11508] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 740.247747][T11508] RSP: 002b:00007fc86d816030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 740.247768][T11508] RAX: ffffffffffffffda RBX: 00007fc86cbd5fa0 RCX: 00007fc86c98d63c [ 740.247783][T11508] RDX: 000000000000000f RSI: 00007fc86d8160a0 RDI: 0000000000000004 [ 740.247794][T11508] RBP: 00007fc86d816090 R08: 0000000000000000 R09: 0000000000000000 [ 740.247806][T11508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 740.247817][T11508] R13: 00007fc86cbd6038 R14: 00007fc86cbd5fa0 R15: 00007fc86ccffa28 [ 740.247848][T11508] [ 740.560075][T11510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1476'. [ 740.643924][ T5895] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 740.828033][ T5895] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 740.838399][ T5895] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 740.876481][ T5895] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 740.885844][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.911705][ T5895] usb 4-1: Product: syz [ 740.929333][ T5895] usb 4-1: Manufacturer: syz [ 740.934114][ T5895] usb 4-1: SerialNumber: syz [ 741.199666][T11506] netlink: 'syz.3.1474': attribute type 3 has an invalid length. [ 741.437325][T11506] netlink: 'syz.3.1474': attribute type 3 has an invalid length. [ 741.445775][T11506] netlink: 'syz.3.1474': attribute type 3 has an invalid length. [ 741.453889][T11506] netlink: 'syz.3.1474': attribute type 3 has an invalid length. [ 741.498027][T11506] netlink: 'syz.3.1474': attribute type 3 has an invalid length. [ 741.604007][T11506] netlink: 'syz.3.1474': attribute type 3 has an invalid length. [ 741.612163][T11506] netlink: 'syz.3.1474': attribute type 3 has an invalid length. [ 741.620867][T11506] netlink: 'syz.3.1474': attribute type 3 has an invalid length. [ 741.637165][T11506] netlink: 'syz.3.1474': attribute type 3 has an invalid length. [ 741.666670][T11506] netlink: 'syz.3.1474': attribute type 3 has an invalid length. [ 741.704054][ T5984] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 741.789474][ T5895] usb 4-1: 0:2 : does not exist [ 741.842867][ T5895] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 741.954274][ T5984] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 742.031031][ T5895] usb 4-1: USB disconnect, device number 77 [ 742.031546][ T6055] usb 3-1: USB disconnect, device number 68 [ 742.103320][ T6063] udevd[6063]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such device [ 742.181917][ T5984] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 742.240535][ T5984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.259081][ T5984] usb 2-1: Product: syz [ 742.270210][ T5984] usb 2-1: Manufacturer: syz [ 742.276384][ T5984] usb 2-1: SerialNumber: syz [ 742.285686][ T5984] usb 2-1: config 0 descriptor?? [ 742.599647][T11528] syzkaller0: entered promiscuous mode [ 742.622753][T11528] syzkaller0: entered allmulticast mode [ 743.347909][ T5984] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 743.495056][ T5895] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 743.525909][ T5984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 743.535874][ T5984] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 743.549882][ T5984] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 743.559967][ T5984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.571235][ T5984] usb 4-1: config 0 descriptor?? [ 743.671016][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 743.682208][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 743.692835][ T5895] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 743.702084][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.719803][ T5895] usb 3-1: config 0 descriptor?? [ 744.008968][ T5984] kovaplus 0003:1E7D:2D50.001D: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 744.153705][ T5895] cm6533_jd 0003:0D8C:0022.001E: unknown main item tag 0x0 [ 744.162175][ T5895] cm6533_jd 0003:0D8C:0022.001E: unknown main item tag 0x0 [ 744.191337][ T5895] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.001E/input/input39 [ 744.246267][ T5895] cm6533_jd 0003:0D8C:0022.001E: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 744.356105][ T5895] usb 3-1: USB disconnect, device number 69 [ 744.389954][T11549] fido_id[11549]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 744.674582][ T5909] usb 2-1: USB disconnect, device number 86 [ 745.226796][T11555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 745.256406][T11555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.309359][ T5984] kovaplus 0003:1E7D:2D50.001D: couldn't init struct kovaplus_device [ 745.334835][ T5984] kovaplus 0003:1E7D:2D50.001D: couldn't install mouse [ 745.408836][ T5984] kovaplus 0003:1E7D:2D50.001D: probe with driver kovaplus failed with error -71 [ 745.453455][ T5984] usb 4-1: USB disconnect, device number 78 [ 745.488986][ T30] audit: type=1326 audit(1758412237.230:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11559 comm="syz.2.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8793d8ec29 code=0x7ffc0000 [ 745.556918][ T30] audit: type=1326 audit(1758412237.230:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11559 comm="syz.2.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8793d8ec29 code=0x7ffc0000 [ 745.628699][ T30] audit: type=1326 audit(1758412237.230:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11559 comm="syz.2.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8793d8ec29 code=0x7ffc0000 [ 745.702843][ T30] audit: type=1326 audit(1758412237.230:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11559 comm="syz.2.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8793d8ec29 code=0x7ffc0000 [ 745.785753][ T5989] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 745.813145][ T30] audit: type=1326 audit(1758412237.230:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11559 comm="syz.2.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8793d8ec29 code=0x7ffc0000 [ 745.850456][ T30] audit: type=1326 audit(1758412237.230:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11559 comm="syz.2.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8793d8ec29 code=0x7ffc0000 [ 745.881963][ T30] audit: type=1326 audit(1758412237.230:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11559 comm="syz.2.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8793d8ec29 code=0x7ffc0000 [ 745.933641][ T30] audit: type=1326 audit(1758412237.260:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11559 comm="syz.2.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8793d8ec29 code=0x7ffc0000 [ 745.964563][T11564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1490'. [ 745.964587][ T5989] usb 3-1: Using ep0 maxpacket: 16 [ 746.031411][ T5989] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 746.031440][ T5989] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 746.031460][ T5989] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 746.031726][ T30] audit: type=1326 audit(1758412237.260:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11559 comm="syz.2.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8793d8ec29 code=0x7ffc0000 [ 746.031833][ T30] audit: type=1326 audit(1758412237.260:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11559 comm="syz.2.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8793d8ec29 code=0x7ffc0000 [ 746.061078][ T5989] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 746.061112][ T5989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.061134][ T5989] usb 3-1: Product: syz [ 746.061151][ T5989] usb 3-1: Manufacturer: syz [ 746.061167][ T5989] usb 3-1: SerialNumber: syz [ 746.137840][ C0] vkms_vblank_simulate: vblank timer overrun [ 746.535233][ T5989] usb 3-1: 0:2 : does not exist [ 746.807500][T11546] validate_nla: 40 callbacks suppressed [ 746.807522][T11546] netlink: 'syz.0.1485': attribute type 3 has an invalid length. [ 746.821061][T11546] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1485'. [ 747.356161][ T5895] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 747.442007][T11576] netlink: 'syz.0.1493': attribute type 11 has an invalid length. [ 747.450629][T11576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1493'. [ 747.507956][T11560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.518602][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 747.524584][T11560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.541316][ T5895] usb 5-1: config 0 has an invalid interface number: 217 but max is 0 [ 747.559881][ T5895] usb 5-1: config 0 has no interface number 0 [ 747.566631][ T5984] usb 3-1: USB disconnect, device number 70 [ 747.596287][ T5895] usb 5-1: config 0 interface 217 has no altsetting 0 [ 747.882544][ T5895] usb 5-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=ce.a8 [ 747.965828][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.986309][ T5895] usb 5-1: Product: syz [ 747.990798][ T5895] usb 5-1: Manufacturer: syz [ 747.999720][ T5895] usb 5-1: SerialNumber: syz [ 748.018768][ T5895] usb 5-1: config 0 descriptor?? [ 748.070328][T11579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1494'. [ 748.231395][ T5895] usb 5-1: USB disconnect, device number 80 [ 748.434721][T11590] tipc: Enabled bearer , priority 0 [ 748.459744][T11590] syzkaller0: entered promiscuous mode [ 748.466527][T11590] syzkaller0: entered allmulticast mode [ 748.570795][T11590] tipc: Resetting bearer [ 748.602348][T11588] tipc: Resetting bearer [ 748.685828][T11588] tipc: Disabling bearer [ 749.068687][T11606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.084541][T11606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.109244][T11606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.118169][T11606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.230607][T11606] block device autoloading is deprecated and will be removed. [ 749.381851][T11605] syzkaller0: entered promiscuous mode [ 749.464402][T11605] syzkaller0: entered allmulticast mode [ 750.360067][T11626] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1506'. [ 750.986735][T11632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1507'. [ 752.471740][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.480129][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.647798][T11644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1511'. [ 753.631506][T11626] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1506'. [ 753.643534][T11626] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1506'. [ 753.688447][T11644] bridge0: entered promiscuous mode [ 753.704236][T11644] macsec2: entered allmulticast mode [ 753.709668][T11644] bridge0: entered allmulticast mode [ 753.732233][T11644] bridge0: port 3(macsec2) entered blocking state [ 753.758093][T11644] bridge0: port 3(macsec2) entered disabled state [ 753.832594][T11644] bridge0: left allmulticast mode [ 753.858401][T11644] bridge0: left promiscuous mode [ 753.882143][T11654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1514'. [ 754.758087][T11667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1517'. [ 754.767858][T11667] chnl_net:caif_netlink_parms(): no params data found [ 754.887651][ T5895] usb 5-1: new low-speed USB device number 81 using dummy_hcd [ 755.097043][ T5895] usb 5-1: unable to get BOS descriptor or descriptor too short [ 755.121383][ T5895] usb 5-1: config 7 has an invalid interface number: 67 but max is 0 [ 755.136482][ T5895] usb 5-1: config 7 has no interface number 0 [ 755.143904][ T44] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 755.195370][T11673] netlink: 'syz.0.1519': attribute type 5 has an invalid length. [ 755.297171][ T5895] usb 5-1: string descriptor 0 read error: -22 [ 755.303733][ T5895] usb 5-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 755.356602][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.367336][ T44] usb 4-1: config index 0 descriptor too short (expected 8192, got 77) [ 755.378577][ T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 755.406331][T11677] bridge0: port 3(macsec0) entered blocking state [ 755.413547][T11677] bridge0: port 3(macsec0) entered disabled state [ 755.422284][T11677] macsec0: entered allmulticast mode [ 755.427966][T11677] veth1_macvtap: entered allmulticast mode [ 755.440872][T11677] macsec0: entered promiscuous mode [ 755.449390][T11677] bridge0: port 3(macsec0) entered blocking state [ 755.456245][T11677] bridge0: port 3(macsec0) entered forwarding state [ 755.471977][ T44] usb 4-1: config 0 has no interfaces? [ 755.580024][ T44] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 755.605126][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.623496][ T44] usb 4-1: Product: syz [ 755.638830][ T44] usb 4-1: Manufacturer: syz [ 755.650306][ T44] usb 4-1: SerialNumber: syz [ 755.662776][ T44] usb 4-1: config 0 descriptor?? [ 755.845017][ T5895] usb 5-1: USB disconnect, device number 81 [ 756.904412][ T5895] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 757.066517][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 757.076972][ T5895] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 757.339243][ T5895] usb 2-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 757.411788][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.494776][ T5895] usb 2-1: config 0 descriptor?? [ 757.508630][T11699] netlink: 'syz.2.1527': attribute type 2 has an invalid length. [ 757.546226][T11699] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1527'. [ 757.781897][ T44] usb 4-1: USB disconnect, device number 79 [ 757.825363][ T5895] logitech 0003:046D:CA03.001F: unknown main item tag 0x6 [ 757.858965][ T5895] logitech 0003:046D:CA03.001F: hidraw0: USB HID vff.fa Device [HID 046d:ca03] on usb-dummy_hcd.1-1/input0 [ 757.899877][ T5895] logitech 0003:046D:CA03.001F: no inputs found [ 757.909858][T11706] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1528'. [ 758.081520][T11712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1530'. [ 758.115806][T11712] chnl_net:caif_netlink_parms(): no params data found [ 758.322704][T11718] netlink: 'syz.0.1532': attribute type 21 has an invalid length. [ 758.371412][T11718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1532'. [ 758.404889][ T979] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 758.638053][ T5984] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 758.686296][ T5909] usb 2-1: USB disconnect, device number 87 [ 758.697882][ T979] usb 4-1: config index 0 descriptor too short (expected 8192, got 77) [ 758.738074][ T979] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.787214][ T979] usb 4-1: config 0 has no interfaces? [ 758.811046][ T979] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 758.826030][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.835403][ T979] usb 4-1: Product: syz [ 758.839620][ T979] usb 4-1: Manufacturer: syz [ 758.843897][ T5984] usb 3-1: device descriptor read/64, error -71 [ 758.845536][ T979] usb 4-1: SerialNumber: syz [ 758.871484][ T979] usb 4-1: config 0 descriptor?? [ 758.900079][T11723] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1534'. [ 759.091913][T11729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1536'. [ 759.147349][ T5984] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 759.294049][ T5984] usb 3-1: device descriptor read/64, error -71 [ 759.404592][ T5984] usb usb3-port1: attempt power cycle [ 759.755817][ T5984] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 759.817428][ T5984] usb 3-1: device descriptor read/8, error -71 [ 760.094099][ T5984] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 760.116552][ T5984] usb 3-1: device descriptor read/8, error -71 [ 760.208983][T11751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.238972][ T5984] usb usb3-port1: unable to enumerate USB device [ 760.266353][T11751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.506563][T11751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.550869][T11752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.560305][T11752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.578908][T11751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.852984][T11758] tipc: Enabled bearer , priority 0 [ 760.937101][T11759] syzkaller0: entered promiscuous mode [ 760.944286][T11759] syzkaller0: entered allmulticast mode [ 761.002773][T11758] tipc: Resetting bearer [ 761.021081][ T979] usb 4-1: USB disconnect, device number 80 [ 761.496429][ T979] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 761.575942][T11755] tipc: Resetting bearer [ 761.593280][T11755] tipc: Disabling bearer [ 761.685922][ T979] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 761.697651][ T979] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 761.711022][ T979] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 761.744450][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 762.252207][ T979] usb 4-1: SerialNumber: syz [ 762.261855][T11773] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 762.270885][T11773] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 762.287425][ T6055] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 762.464601][ T6055] usb 3-1: Using ep0 maxpacket: 16 [ 762.478277][ T6055] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 762.631864][ T979] usb 4-1: 0:2 : does not exist [ 762.650526][ T979] usb 4-1: unit 5: unexpected type 0x0d [ 762.656810][ T6055] usb 3-1: config 1 has no interface number 0 [ 762.665060][ T6055] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 762.687922][ T6055] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 762.707352][ T979] usb 4-1: USB disconnect, device number 81 [ 762.751395][ T6055] usb 3-1: config 1 interface 105 has no altsetting 0 [ 762.772678][ T6063] udevd[6063]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 762.800203][ T6055] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 762.810410][ T6055] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.832119][ T6055] usb 3-1: Product: syz [ 762.854623][ T6055] usb 3-1: Manufacturer: syz [ 762.859275][ T6055] usb 3-1: SerialNumber: syz [ 762.928782][T11769] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 762.952318][T11769] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 763.360059][T11781] @: renamed from bond_slave_0 (while UP) [ 763.397627][T11781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1549'. [ 763.424620][T11781] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1549'. [ 763.529684][T11791] loop2: detected capacity change from 0 to 7 [ 763.531855][ T5895] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 763.599113][T11791] Dev loop2: unable to read RDB block 7 [ 763.599152][T11791] loop2: AHDI p1 p2 p3 [ 763.599177][T11791] loop2: partition table partially beyond EOD, truncated [ 763.599377][T11791] loop2: p1 start 1601398130 is beyond EOD, truncated [ 763.599394][T11791] loop2: p2 start 1702059890 is beyond EOD, truncated [ 763.803962][ T5895] usb 5-1: Using ep0 maxpacket: 32 [ 763.819699][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 763.819735][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 763.819777][ T5895] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 763.819801][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.822667][ T5895] usb 5-1: config 0 descriptor?? [ 763.857847][ T5895] hub 5-1:0.0: USB hub found [ 763.861250][T11791] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 763.861396][T11791] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 764.393278][ T5895] hub 5-1:0.0: 2 ports detected [ 764.589909][ T5895] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 764.589972][ T5895] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 764.653894][ T5895] usbhid 5-1:0.0: can't add hid device: -71 [ 764.654017][ T5895] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 764.704833][ T5895] usb 5-1: USB disconnect, device number 82 [ 765.063762][T11787] tty tty21: ldisc open failed (-12), clearing slot 20 [ 765.896907][T11817] netlink: 'syz.0.1556': attribute type 21 has an invalid length. [ 766.076788][ T6055] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 766.223339][ T6055] aqc111 3-1:1.105: probe with driver aqc111 failed with error -71 [ 766.271198][T11829] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1559'. [ 766.301686][T11832] tipc: Enabling of bearer rejected, failed to enable media [ 766.529335][ T6055] usb 3-1: USB disconnect, device number 75 [ 767.130094][T11844] netlink: 'syz.0.1562': attribute type 39 has an invalid length. [ 767.582481][T11852] gretap1: entered promiscuous mode [ 767.894569][ T6055] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 767.993966][T11856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.067129][T11856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.069403][ T6055] usb 2-1: Using ep0 maxpacket: 16 [ 768.131222][ T6055] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.170408][T11854] ip6tnl2: entered promiscuous mode [ 768.174472][ T6055] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 768.206436][T11854] ip6tnl2: entered allmulticast mode [ 768.214572][ T6055] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 768.252522][ T6055] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 768.309246][ T6055] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.354728][ T6055] usb 2-1: config 0 descriptor?? [ 768.380893][ T30] kauditd_printk_skb: 89 callbacks suppressed [ 768.380908][ T30] audit: type=1326 audit(1758412260.120:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11857 comm="syz.3.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb52d8ec29 code=0x7ffc0000 [ 768.893578][ T30] audit: type=1326 audit(1758412260.260:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11857 comm="syz.3.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fbb52d8ec29 code=0x7ffc0000 [ 768.915909][ C0] vkms_vblank_simulate: vblank timer overrun [ 768.945168][T11866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.996395][T11866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 769.042839][ T30] audit: type=1326 audit(1758412260.260:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11857 comm="syz.3.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb52d8ec29 code=0x7ffc0000 [ 769.065316][ C0] vkms_vblank_simulate: vblank timer overrun [ 769.377184][T11868] fuse: Unknown parameter 'root ^u0000000' [ 769.418471][T11873] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1571'. [ 769.455620][ T30] audit: type=1326 audit(1758412260.260:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11857 comm="syz.3.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fbb52d8ec29 code=0x7ffc0000 [ 769.542173][ T30] audit: type=1326 audit(1758412260.260:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11857 comm="syz.3.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb52d8ec29 code=0x7ffc0000 [ 769.565499][ C0] vkms_vblank_simulate: vblank timer overrun [ 769.573699][ T30] audit: type=1326 audit(1758412260.260:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11857 comm="syz.3.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb52d8ec29 code=0x7ffc0000 [ 769.600559][ T30] audit: type=1326 audit(1758412261.150:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.4.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc920d8ec29 code=0x7ffc0000 [ 769.784788][ T979] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 769.844618][ T30] audit: type=1326 audit(1758412261.150:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.4.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc920d8ec29 code=0x7ffc0000 [ 769.867006][ C0] vkms_vblank_simulate: vblank timer overrun [ 769.893342][ T30] audit: type=1326 audit(1758412261.150:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.4.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fc920d8ec29 code=0x7ffc0000 [ 769.915745][ C0] vkms_vblank_simulate: vblank timer overrun [ 769.954457][ T979] usb 4-1: Using ep0 maxpacket: 32 [ 769.985930][ T979] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 770.037111][ T30] audit: type=1326 audit(1758412261.150:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.4.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc920d8ec29 code=0x7ffc0000 [ 770.197913][ T979] usb 4-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=ce.6f [ 770.208567][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.240922][ T979] usb 4-1: Product: syz [ 770.276665][ T979] usb 4-1: Manufacturer: syz [ 770.320010][ T979] usb 4-1: SerialNumber: syz [ 770.365198][ T979] usb 4-1: config 0 descriptor?? [ 770.393086][ T979] quatech2 4-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 770.649302][T11875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 770.693256][T11875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 770.798662][ T979] usb 4-1: qt2_attach - failed to power on unit: -71 [ 770.823417][ T979] quatech2 4-1:0.0: probe with driver quatech2 failed with error -71 [ 770.984000][ T979] usb 4-1: USB disconnect, device number 82 [ 771.140786][ T6055] usbhid 2-1:0.0: can't add hid device: -71 [ 771.150984][ T6055] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 771.186644][ T6055] usb 2-1: USB disconnect, device number 88 [ 771.688992][T11893] FAULT_INJECTION: forcing a failure. [ 771.688992][T11893] name failslab, interval 1, probability 0, space 0, times 0 [ 771.707830][T11893] CPU: 1 UID: 0 PID: 11893 Comm: syz.1.1578 Not tainted syzkaller #0 PREEMPT(full) [ 771.707861][T11893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 771.707875][T11893] Call Trace: [ 771.707884][T11893] [ 771.707894][T11893] dump_stack_lvl+0x189/0x250 [ 771.707926][T11893] ? __pfx____ratelimit+0x10/0x10 [ 771.707950][T11893] ? __pfx_dump_stack_lvl+0x10/0x10 [ 771.707985][T11893] ? __pfx__printk+0x10/0x10 [ 771.708018][T11893] ? __lock_acquire+0xab9/0xd20 [ 771.708060][T11893] should_fail_ex+0x414/0x560 [ 771.708097][T11893] should_failslab+0xa8/0x100 [ 771.708130][T11893] kmem_cache_alloc_noprof+0x73/0x3c0 [ 771.708159][T11893] ? skb_clone+0x212/0x3a0 [ 771.708192][T11893] skb_clone+0x212/0x3a0 [ 771.708225][T11893] __netlink_deliver_tap+0x404/0x850 [ 771.708262][T11893] ? netlink_deliver_tap+0x2e/0x1b0 [ 771.708286][T11893] netlink_deliver_tap+0x19c/0x1b0 [ 771.708311][T11893] netlink_unicast+0x7fa/0x9e0 [ 771.708354][T11893] ? __pfx_netlink_unicast+0x10/0x10 [ 771.708389][T11893] ? netlink_sendmsg+0x642/0xb30 [ 771.708410][T11893] ? skb_put+0x11b/0x210 [ 771.708438][T11893] netlink_sendmsg+0x805/0xb30 [ 771.708472][T11893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 771.708499][T11893] ? aa_sock_msg_perm+0xf1/0x1d0 [ 771.708524][T11893] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 771.708547][T11893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 771.708572][T11893] __sock_sendmsg+0x21c/0x270 [ 771.708608][T11893] ____sys_sendmsg+0x505/0x830 [ 771.708640][T11893] ? __pfx_____sys_sendmsg+0x10/0x10 [ 771.708679][T11893] ? import_iovec+0x74/0xa0 [ 771.708711][T11893] ___sys_sendmsg+0x21f/0x2a0 [ 771.708741][T11893] ? __pfx____sys_sendmsg+0x10/0x10 [ 771.708808][T11893] ? __fget_files+0x2a/0x420 [ 771.708827][T11893] ? __fget_files+0x3a0/0x420 [ 771.708858][T11893] __x64_sys_sendmsg+0x19b/0x260 [ 771.708888][T11893] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 771.708926][T11893] ? __pfx_ksys_write+0x10/0x10 [ 771.708952][T11893] ? rcu_is_watching+0x15/0xb0 [ 771.708986][T11893] ? do_syscall_64+0xbe/0x3b0 [ 771.709015][T11893] do_syscall_64+0xfa/0x3b0 [ 771.709037][T11893] ? lockdep_hardirqs_on+0x9c/0x150 [ 771.709058][T11893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.709079][T11893] ? clear_bhb_loop+0x60/0xb0 [ 771.709113][T11893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.709134][T11893] RIP: 0033:0x7fc86c98ec29 [ 771.709153][T11893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 771.709172][T11893] RSP: 002b:00007fc86d816038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 771.709195][T11893] RAX: ffffffffffffffda RBX: 00007fc86cbd5fa0 RCX: 00007fc86c98ec29 [ 771.709211][T11893] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 771.709225][T11893] RBP: 00007fc86d816090 R08: 0000000000000000 R09: 0000000000000000 [ 771.709239][T11893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 771.709251][T11893] R13: 00007fc86cbd6038 R14: 00007fc86cbd5fa0 R15: 00007fc86ccffa28 [ 771.709285][T11893] [ 771.709347][T11893] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1578'. [ 772.144009][ T44] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 772.241742][T11901] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1581'. [ 772.254229][T11901] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1581'. [ 772.344074][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 772.352334][ T44] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.364588][ T44] usb 3-1: config 0 interface 0 has no altsetting 0 [ 772.364588][ T6055] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 772.380698][ T44] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 772.400226][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.434869][ T44] usb 3-1: config 0 descriptor?? [ 772.513969][ T5984] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 772.529198][ T6055] usb 5-1: unable to get BOS descriptor or descriptor too short [ 772.594626][ T6087] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 772.629517][ T6055] usb 5-1: config 1 interface 0 altsetting 102 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 772.649173][T11890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.658505][T11890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.696809][ T5984] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 772.705797][ T5984] usb 4-1: config 0 has no interface number 0 [ 772.711928][ T5984] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 37, changing to 9 [ 772.726691][T11890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.745639][ T5984] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 51199, setting to 1024 [ 772.765744][T11890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.770929][ T5984] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 772.778829][ T6055] usb 5-1: config 1 interface 0 has no altsetting 0 [ 772.784641][ T6087] usb 2-1: Using ep0 maxpacket: 8 [ 772.819773][ T5984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.828723][ T5984] usb 4-1: Product: syz [ 772.838462][ T6087] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 772.848318][ T6087] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.867942][ T5984] usb 4-1: Manufacturer: syz [ 772.891018][ T6087] pvrusb2: Hardware description: Terratec Grabster AV400 [ 772.917784][ T5984] usb 4-1: SerialNumber: syz [ 772.922831][ T6087] pvrusb2: ********** [ 772.928620][T11890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.948593][ T5984] usb 4-1: config 0 descriptor?? [ 772.954191][ T6087] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 772.971508][T11890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.975641][T11901] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 772.991818][ T6087] pvrusb2: Important functionality might not be entirely working. [ 773.007133][T11890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.011615][ T5984] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 773.043659][ T6055] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 773.076408][ T6087] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 773.077890][T11890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.096601][ T6055] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.123833][ T6087] pvrusb2: ********** [ 773.144449][ T2345] pvrusb2: Invalid write control endpoint [ 773.155913][T11890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.205102][T11890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.216882][ T6055] usb 5-1: Product: syz [ 773.221099][ T6055] usb 5-1: Manufacturer: syz [ 773.228407][T11906] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1581'. [ 773.252415][ T6087] usb 4-1: USB disconnect, device number 83 [ 773.277021][ T6087] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 773.315036][ T6055] usb 5-1: SerialNumber: syz [ 773.546374][ T2345] pvrusb2: Invalid write control endpoint [ 773.552738][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 773.592635][T11897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.603488][T11897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.615201][T11897] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1579'. [ 773.636257][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 773.645404][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 773.656423][ T2345] pvrusb2: Device being rendered inoperable [ 773.665868][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 773.674950][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 773.706864][ T2345] pvrusb2: Attached sub-driver cx25840 [ 773.712646][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 773.728622][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 773.808704][ T44] usbhid 3-1:0.0: can't add hid device: -71 [ 773.852441][ T44] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 773.928973][ T44] usb 3-1: USB disconnect, device number 76 [ 774.184005][ T979] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 774.397287][ T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 774.408309][ T979] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 774.426941][ T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 774.449362][ T979] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 774.463337][ T979] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 774.474519][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.572986][ T979] usb 4-1: config 0 descriptor?? [ 774.864812][ T979] hdpvr 4-1:0.0: firmware version 0x69 dated ̫SLٸi:hݤDju7~?belOz [ 774.884081][ T6087] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 774.901233][ T979] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 775.049658][ T6087] usb 3-1: config 0 has an invalid interface number: 46 but max is 0 [ 775.171855][T11926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.186975][T11926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.659561][ T6087] usb 3-1: config 0 has no interface number 0 [ 775.677339][ T5965] usb 2-1: USB disconnect, device number 89 [ 775.801143][ T6087] usb 3-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 775.822424][ T6087] usb 3-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 775.860006][ T6087] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 775.870856][ T6087] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.881594][ T6087] usb 3-1: Product: syz [ 775.887043][ T6087] usb 3-1: Manufacturer: syz [ 775.891706][ T6087] usb 3-1: SerialNumber: syz [ 775.899040][ T979] hdpvr 4-1:0.0: Could not setup controls [ 775.947374][ T6087] usb 3-1: config 0 descriptor?? [ 775.999632][ T979] hdpvr 4-1:0.0: registering videodev failed [ 776.009486][ T6087] ums-karma 3-1:0.46: USB Mass Storage device detected [ 776.053133][ T6055] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input40 [ 776.088233][ T979] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -71 [ 776.129512][ T6087] ums-karma 3-1:0.46: probe with driver ums-karma failed with error -5 [ 776.220242][T11918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.232553][ T6055] usb 5-1: USB disconnect, device number 83 [ 776.232573][ C1] pxrc 5-1:1.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 776.248734][ T979] usb 4-1: USB disconnect, device number 84 [ 776.264991][T11918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.431324][T11941] FAULT_INJECTION: forcing a failure. [ 776.431324][T11941] name failslab, interval 1, probability 0, space 0, times 0 [ 776.431360][T11941] CPU: 0 UID: 0 PID: 11941 Comm: syz.1.1590 Not tainted syzkaller #0 PREEMPT(full) [ 776.431384][T11941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 776.431397][T11941] Call Trace: [ 776.431405][T11941] [ 776.431415][T11941] dump_stack_lvl+0x189/0x250 [ 776.431446][T11941] ? __pfx____ratelimit+0x10/0x10 [ 776.431470][T11941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 776.431496][T11941] ? __pfx__printk+0x10/0x10 [ 776.431533][T11941] ? __pfx___might_resched+0x10/0x10 [ 776.431553][T11941] ? fs_reclaim_acquire+0x7d/0x100 [ 776.431589][T11941] should_fail_ex+0x414/0x560 [ 776.431624][T11941] should_failslab+0xa8/0x100 [ 776.431657][T11941] __kmalloc_cache_noprof+0x70/0x3d0 [ 776.431687][T11941] ? rtnl_newlink+0xed/0x1c70 [ 776.431708][T11941] ? kasan_save_free_info+0x46/0x50 [ 776.431735][T11941] rtnl_newlink+0xed/0x1c70 [ 776.431756][T11941] ? netlink_sendmsg+0x805/0xb30 [ 776.431778][T11941] ? __sock_sendmsg+0x21c/0x270 [ 776.431806][T11941] ? ____sys_sendmsg+0x505/0x830 [ 776.431830][T11941] ? ___sys_sendmsg+0x21f/0x2a0 [ 776.431855][T11941] ? __x64_sys_sendmsg+0x19b/0x260 [ 776.431879][T11941] ? do_syscall_64+0xfa/0x3b0 [ 776.431901][T11941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.431930][T11941] ? __pfx_rtnl_newlink+0x10/0x10 [ 776.431978][T11941] ? kasan_quarantine_put+0xdd/0x220 [ 776.432008][T11941] ? lockdep_hardirqs_on+0x9c/0x150 [ 776.432036][T11941] ? nlmon_xmit+0xb0/0x100 [ 776.432060][T11941] ? kmem_cache_free+0x18f/0x400 [ 776.432096][T11941] ? __local_bh_enable_ip+0x12d/0x1c0 [ 776.432117][T11941] ? lockdep_hardirqs_on+0x9c/0x150 [ 776.432140][T11941] ? __local_bh_enable_ip+0x12d/0x1c0 [ 776.432161][T11941] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 776.432186][T11941] ? __dev_queue_xmit+0x27b/0x3b50 [ 776.432215][T11941] ? __dev_queue_xmit+0x27b/0x3b50 [ 776.432241][T11941] ? __dev_queue_xmit+0x27b/0x3b50 [ 776.432270][T11941] ? __dev_queue_xmit+0x1d79/0x3b50 [ 776.432303][T11941] ? __lock_acquire+0xab9/0xd20 [ 776.432360][T11941] ? __pfx_rtnl_newlink+0x10/0x10 [ 776.432382][T11941] rtnetlink_rcv_msg+0x7cc/0xb70 [ 776.432407][T11941] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 776.432429][T11941] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 776.432448][T11941] ? ref_tracker_free+0x63a/0x7d0 [ 776.432468][T11941] ? __asan_memcpy+0x40/0x70 [ 776.432490][T11941] ? __pfx_ref_tracker_free+0x10/0x10 [ 776.432507][T11941] ? __skb_clone+0x63/0x7a0 [ 776.432543][T11941] netlink_rcv_skb+0x208/0x470 [ 776.432567][T11941] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 776.432601][T11941] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 776.432635][T11941] ? netlink_deliver_tap+0x2e/0x1b0 [ 776.432665][T11941] netlink_unicast+0x82c/0x9e0 [ 776.432705][T11941] ? __pfx_netlink_unicast+0x10/0x10 [ 776.432740][T11941] ? netlink_sendmsg+0x642/0xb30 [ 776.432760][T11941] ? skb_put+0x11b/0x210 [ 776.432788][T11941] netlink_sendmsg+0x805/0xb30 [ 776.432821][T11941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 776.432848][T11941] ? aa_sock_msg_perm+0xf1/0x1d0 [ 776.432872][T11941] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 776.432895][T11941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 776.432919][T11941] __sock_sendmsg+0x21c/0x270 [ 776.432954][T11941] ____sys_sendmsg+0x505/0x830 [ 776.432987][T11941] ? __pfx_____sys_sendmsg+0x10/0x10 [ 776.433024][T11941] ? import_iovec+0x74/0xa0 [ 776.433056][T11941] ___sys_sendmsg+0x21f/0x2a0 [ 776.433086][T11941] ? __pfx____sys_sendmsg+0x10/0x10 [ 776.433151][T11941] ? __fget_files+0x2a/0x420 [ 776.433170][T11941] ? __fget_files+0x3a0/0x420 [ 776.433201][T11941] __x64_sys_sendmsg+0x19b/0x260 [ 776.433231][T11941] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 776.433269][T11941] ? __pfx_ksys_write+0x10/0x10 [ 776.433295][T11941] ? rcu_is_watching+0x15/0xb0 [ 776.433323][T11941] ? do_syscall_64+0xbe/0x3b0 [ 776.433350][T11941] do_syscall_64+0xfa/0x3b0 [ 776.433372][T11941] ? lockdep_hardirqs_on+0x9c/0x150 [ 776.433393][T11941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.433414][T11941] ? clear_bhb_loop+0x60/0xb0 [ 776.433440][T11941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.433461][T11941] RIP: 0033:0x7fc86c98ec29 [ 776.433480][T11941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 776.433497][T11941] RSP: 002b:00007fc86d816038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 776.433519][T11941] RAX: ffffffffffffffda RBX: 00007fc86cbd5fa0 RCX: 00007fc86c98ec29 [ 776.433535][T11941] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 776.433549][T11941] RBP: 00007fc86d816090 R08: 0000000000000000 R09: 0000000000000000 [ 776.433562][T11941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 776.433575][T11941] R13: 00007fc86cbd6038 R14: 00007fc86cbd5fa0 R15: 00007fc86ccffa28 [ 776.433615][T11941] [ 776.537303][T11945] fuse: Bad value for 'rootmode' [ 777.723123][ T6087] usb 3-1: USB disconnect, device number 77 [ 777.819984][T11977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1600'. [ 777.962444][T11977] chnl_net:caif_netlink_parms(): no params data found [ 778.307557][ T6055] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 779.267299][ T6055] usb 4-1: config index 0 descriptor too short (expected 8192, got 77) [ 779.276537][ T6055] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 779.305632][ T6055] usb 4-1: config 0 has no interfaces? [ 779.451872][ T6055] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 779.461914][ T6055] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.470635][ T6055] usb 4-1: Product: syz [ 779.478271][ T6055] usb 4-1: Manufacturer: syz [ 779.482891][ T6055] usb 4-1: SerialNumber: syz [ 779.490948][ T6055] usb 4-1: config 0 descriptor?? [ 779.970929][T12008] netlink: 'syz.4.1608': attribute type 39 has an invalid length. [ 780.379801][T12012] lo: entered allmulticast mode [ 781.094153][ T6087] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 781.268122][ T6087] usb 3-1: config 252 has an invalid interface number: 254 but max is 0 [ 781.350712][ T6087] usb 3-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 781.418596][ T6087] usb 3-1: config 252 has no interface number 0 [ 781.466461][T12015] lo: left allmulticast mode [ 781.486494][ T6087] usb 3-1: config 252 interface 254 has no altsetting 0 [ 781.577891][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 781.577908][ T30] audit: type=1326 audit(1758412273.320:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12023 comm="syz.1.1611" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc86c98ec29 code=0x0 [ 781.672455][ T6087] usb 3-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=46.29 [ 781.676918][ T6055] usb 4-1: USB disconnect, device number 85 [ 781.777930][ T6087] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.815402][ T6087] usb 3-1: Product: syz [ 781.833834][ T6087] usb 3-1: Manufacturer: syz [ 781.838484][ T6087] usb 3-1: SerialNumber: syz [ 781.895885][ T6087] bfusb 3-1:252.254: probe with driver bfusb failed with error -5 [ 781.967317][T12032] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1613'. [ 782.900385][ T30] audit: type=1326 audit(1758412274.640:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12049 comm="syz.3.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb52d8ec29 code=0x7ffc0000 [ 783.008269][ T30] audit: type=1326 audit(1758412274.640:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12049 comm="syz.3.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fbb52d8ec29 code=0x7ffc0000 [ 783.203208][ T30] audit: type=1326 audit(1758412274.640:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12049 comm="syz.3.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb52d8ec29 code=0x7ffc0000 [ 783.253359][ T30] audit: type=1326 audit(1758412274.640:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12049 comm="syz.3.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbb52d8ec29 code=0x7ffc0000 [ 783.316246][ T30] audit: type=1326 audit(1758412274.640:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12049 comm="syz.3.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb52d8ec29 code=0x7ffc0000 [ 783.352873][ T30] audit: type=1326 audit(1758412274.640:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12049 comm="syz.3.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbb52d8ec29 code=0x7ffc0000 [ 783.468157][ T30] audit: type=1326 audit(1758412274.640:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12049 comm="syz.3.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb52d8ec29 code=0x7ffc0000 [ 783.498348][ T30] audit: type=1326 audit(1758412274.640:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12049 comm="syz.3.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb52d8ec29 code=0x7ffc0000 [ 783.550490][T12063] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1621'. [ 783.561069][ T30] audit: type=1326 audit(1758412274.640:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12049 comm="syz.3.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbb52d8ec29 code=0x7ffc0000 [ 784.321458][T12085] lo: entered promiscuous mode [ 784.331517][T12085] tunl0: entered promiscuous mode [ 784.342998][T12085] gre0: entered promiscuous mode [ 784.355527][T12085] erspan0: entered promiscuous mode [ 784.362128][T12085] ip_vti0: entered promiscuous mode [ 784.370459][T12085] ip6_vti0: entered promiscuous mode [ 784.380848][T12085] sit0: entered promiscuous mode [ 784.402443][T12085] ip6tnl0: entered promiscuous mode [ 784.586659][T12085] ip6gre0: entered promiscuous mode [ 784.595335][T12085] syz_tun: entered promiscuous mode [ 784.603320][T12085] ip6gretap0: entered promiscuous mode [ 784.612134][T12085] bridge0: entered promiscuous mode [ 784.618863][T12085] vcan0: entered promiscuous mode [ 784.625610][T12085] bond0: entered promiscuous mode [ 784.641122][T12085] bond_slave_0: entered promiscuous mode [ 784.651547][T12085] bond_slave_1: entered promiscuous mode [ 784.856875][ T44] usb 3-1: USB disconnect, device number 78 [ 784.937576][T12085] dummy0: entered promiscuous mode [ 784.948850][T12085] nlmon0: entered promiscuous mode [ 784.956144][T12085] caif0: entered promiscuous mode [ 785.116173][T12092] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1627'. [ 785.263387][T12085] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 785.507615][T12092] netlink: 'syz.2.1627': attribute type 10 has an invalid length. [ 786.017976][T12092] team0: Device ipvlan1 failed to register rx_handler [ 786.133436][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1632'. [ 786.444496][ T5965] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 786.594639][ T5965] usb 5-1: device descriptor read/64, error -71 [ 786.639204][T12121] loop4: detected capacity change from 0 to 2560 [ 786.659246][ T6063] Buffer I/O error on dev loop4, logical block 0, async page read [ 786.674346][ T6063] Buffer I/O error on dev loop4, logical block 0, async page read [ 786.683007][ T6063] Buffer I/O error on dev loop4, logical block 0, async page read [ 786.693333][ T6063] Buffer I/O error on dev loop4, logical block 0, async page read [ 786.713569][ T6063] Buffer I/O error on dev loop4, logical block 0, async page read [ 786.845263][ T5965] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 786.994462][ T5965] usb 5-1: device descriptor read/64, error -71 [ 787.004827][ T6055] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 787.120893][ T5965] usb usb5-port1: attempt power cycle [ 787.174527][ T6055] usb 2-1: Using ep0 maxpacket: 16 [ 787.187129][ T6055] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 787.205854][ T6055] usb 2-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 787.230881][ T6055] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 787.248794][ T6055] usb 2-1: config 8 has no interface number 0 [ 787.257775][ T6055] usb 2-1: config 8 interface 223 altsetting 2 bulk endpoint 0xC has invalid maxpacket 32 [ 787.271657][ T6055] usb 2-1: config 8 interface 223 altsetting 2 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 787.287953][ T6055] usb 2-1: config 8 interface 223 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 787.317693][ T6055] usb 2-1: config 8 interface 223 has no altsetting 0 [ 787.329624][ T6055] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 787.342399][ T6055] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.352203][ T6055] usb 2-1: Product: syz [ 787.358245][ T6055] usb 2-1: Manufacturer: syz [ 787.362880][ T6055] usb 2-1: SerialNumber: syz [ 787.371241][T12123] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 787.474491][ T5965] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 787.516098][ T5965] usb 5-1: device descriptor read/8, error -71 [ 787.554492][ T979] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 787.586180][T12123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 787.598347][T12123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 787.620404][ T6055] usb 2-1: USB disconnect, device number 90 [ 787.684380][ T979] usb 4-1: device descriptor read/64, error -71 [ 787.754526][ T5965] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 787.784732][ T5965] usb 5-1: device descriptor read/8, error -71 [ 787.906771][ T5965] usb usb5-port1: unable to enumerate USB device [ 787.935822][ T979] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 788.094683][ T979] usb 4-1: device descriptor read/64, error -71 [ 788.226499][ T979] usb usb4-port1: attempt power cycle [ 788.594666][ T6055] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 788.602399][ T979] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 788.625185][ T979] usb 4-1: device descriptor read/8, error -71 [ 788.754515][ T6055] usb 2-1: Using ep0 maxpacket: 8 [ 788.761488][ T6055] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 788.773067][ T6055] usb 2-1: config 0 interface 0 has no altsetting 0 [ 788.782241][ T6055] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 788.792313][ T6055] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.801975][ T6055] usb 2-1: Product: syz [ 788.808136][ T6055] usb 2-1: Manufacturer: syz [ 788.812782][ T6055] usb 2-1: SerialNumber: syz [ 788.823431][ T6055] usb 2-1: config 0 descriptor?? [ 788.837054][ T6055] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 788.864547][ T979] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 788.895887][ T979] usb 4-1: device descriptor read/8, error -71 [ 789.004901][ T979] usb usb4-port1: unable to enumerate USB device [ 789.078723][ T6055] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 789.109623][ T6055] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 789.121539][ T6055] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 789.386488][ T6087] usb 2-1: USB disconnect, device number 91 [ 789.448557][T12162] IPv6: NLM_F_CREATE should be specified when creating new route [ 789.449394][T12163] IPv6: NLM_F_CREATE should be specified when creating new route [ 789.514590][T12165] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 789.575469][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 789.575489][ T30] audit: type=1326 audit(1758412281.320:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12166 comm="syz.0.1650" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f42d8ec29 code=0x0 [ 790.644286][ T44] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 790.826001][ T44] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 790.836721][ T44] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 790.848995][ T44] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 790.858641][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.881283][ T44] usb 4-1: Product: syz [ 790.891289][ T44] usb 4-1: Manufacturer: syz [ 790.907338][ T44] usb 4-1: SerialNumber: syz [ 791.130939][T12190] mmap: syz.3.1655 (12190): VmData 37478400 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 791.290984][T12190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1655'. [ 791.508207][ T44] usb 4-1: 0:2 : does not exist [ 791.542416][ T44] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 791.697825][ T44] usb 4-1: USB disconnect, device number 90 [ 791.848573][T12213] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1661'. [ 791.851778][ T6063] udevd[6063]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 793.824013][ T6055] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 793.997515][ T6055] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 794.017653][ T6055] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 794.038876][ T6055] usb 5-1: config 220 interface 0 has no altsetting 0 [ 794.070877][ T6055] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 794.088769][ T6055] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.106647][ T6055] usb 5-1: Product: syz [ 794.116398][ T6055] usb 5-1: Manufacturer: syz [ 794.126642][ T6055] usb 5-1: SerialNumber: syz [ 794.530764][ T6055] usb 5-1: Found UVC 0.00 device syz (8086:0b07) [ 794.584534][ T6055] usb 5-1: No valid video chain found. [ 794.660320][ T6055] usb 5-1: USB disconnect, device number 88 [ 794.844680][ T44] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 794.887648][T12247] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1669'. [ 795.097812][ T44] usb 3-1: unable to get BOS descriptor or descriptor too short [ 795.151672][ T44] usb 3-1: not running at top speed; connect to a high speed hub [ 795.182895][T12260] geneve3: entered allmulticast mode [ 795.222773][ T44] usb 3-1: config 7 has an invalid interface number: 180 but max is 0 [ 795.253984][ T44] usb 3-1: config 7 has no interface number 0 [ 795.260923][ T44] usb 3-1: config 7 interface 180 has no altsetting 0 [ 795.332789][ T44] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=3c.f2 [ 795.354698][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.365582][ T44] usb 3-1: Product: syz [ 795.369783][ T44] usb 3-1: Manufacturer: ᆊ罾柵枨톐㉁띎뼱瑲ほ웒ຘ䭡듺늿=ሬ㻔㬚遧畾헍⹙雐羚⨁ᗩ堓툭ጃ㾋יⅤ㩩層ᗼ揣꘣㐌룋瀂商羹띀ꇶ䭌溩桳ꠈ줖伟핶⥦珅囧唵뮺㼑鍢嫥㗓뙼凳鼫俧拌᱓践 [ 795.393946][ C1] vkms_vblank_simulate: vblank timer overrun [ 795.473928][ T44] usb 3-1: SerialNumber: syz [ 795.655538][T12269] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1673'. [ 796.123469][T12276] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1675'. [ 796.473982][ T5984] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 796.652854][ T5984] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 796.662436][ T5984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.689637][ T5984] usb 5-1: config 0 descriptor?? [ 796.714023][ T5895] usb 2-1: new low-speed USB device number 92 using dummy_hcd [ 796.730842][ T5984] cp210x 5-1:0.0: cp210x converter detected [ 796.863950][ T5895] usb 2-1: device descriptor read/64, error -71 [ 796.932760][ T5984] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 796.940818][ T5984] cp210x 5-1:0.0: querying part number failed [ 796.997075][ T5984] usb 5-1: cp210x converter now attached to ttyUSB0 [ 797.154052][ T5895] usb 2-1: new low-speed USB device number 93 using dummy_hcd [ 797.303945][ T5895] usb 2-1: device descriptor read/64, error -71 [ 797.438886][ T5895] usb usb2-port1: attempt power cycle [ 797.704220][ T44] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 797.783318][ T44] gspca_topro: reg_w err -71 [ 797.784861][ T979] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 797.824186][ T44] gspca_topro: Sensor soi763a [ 797.835266][ T44] usb 3-1: USB disconnect, device number 79 [ 797.873894][ T5895] usb 2-1: new low-speed USB device number 94 using dummy_hcd [ 797.964422][ T979] usb 4-1: Using ep0 maxpacket: 16 [ 797.973359][ T979] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 797.989045][ T979] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 798.002904][ T979] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 798.023099][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.073492][ T979] usb 4-1: Product: syz [ 798.095973][ T5895] usb 2-1: device descriptor read/8, error -71 [ 798.102530][ T979] usb 4-1: Manufacturer: syz [ 798.119920][ T979] usb 4-1: SerialNumber: syz [ 798.248733][T12291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1680'. [ 798.277113][T12291] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 798.291731][T12291] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 798.374087][ T5895] usb 2-1: new low-speed USB device number 95 using dummy_hcd [ 798.390451][T12288] input: syz1 as /devices/virtual/input/input43 [ 798.424781][ T5895] usb 2-1: device descriptor read/8, error -71 [ 798.629024][ T5895] usb usb2-port1: unable to enumerate USB device [ 799.364127][ T5895] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 799.387166][ T5965] usb 5-1: USB disconnect, device number 89 [ 799.435994][ T5965] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 799.506815][ T5965] cp210x 5-1:0.0: device disconnected [ 799.547004][ T5895] usb 3-1: Using ep0 maxpacket: 16 [ 799.583189][ T5895] usb 3-1: config 143 has too many interfaces: 181, using maximum allowed: 32 [ 799.631371][ T5895] usb 3-1: config 143 has 1 interface, different from the descriptor's value: 181 [ 799.659418][ T5895] usb 3-1: config 143 has no interface number 0 [ 799.701054][T12311] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1685'. [ 799.730076][ T5895] usb 3-1: config 143 interface 8 altsetting 0 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 799.789541][ T5895] usb 3-1: config 143 interface 8 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 799.822826][ T5895] usb 3-1: config 143 interface 8 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 799.864915][ T5895] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 799.882445][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 799.908746][ T5895] usb 3-1: Product: syz [ 799.913112][ T5895] usb 3-1: SerialNumber: syz [ 799.917393][T12316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 799.934841][T12316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.143403][ T5895] cm109 3-1:143.8: invalid payload size 0, expected 4 [ 800.167350][ T5895] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:143.8/input/input44 [ 800.184734][ C1] cm109 3-1:143.8: cm109_urb_ctl_callback: urb status -71 [ 800.195050][ C1] cm109 3-1:143.8: cm109_urb_ctl_callback: urb status -71 [ 800.202899][ C1] cm109 3-1:143.8: cm109_urb_ctl_callback: urb status -71 [ 800.211747][ C1] cm109 3-1:143.8: cm109_urb_ctl_callback: urb status -71 [ 800.220730][ C1] cm109 3-1:143.8: cm109_urb_ctl_callback: urb status -71 [ 800.228130][ C1] cm109 3-1:143.8: cm109_urb_ctl_callback: urb status -71 [ 800.235560][ C1] cm109 3-1:143.8: cm109_urb_ctl_callback: urb status -71 [ 800.242954][ C1] cm109 3-1:143.8: cm109_urb_ctl_callback: urb status -71 [ 800.252244][ C1] cm109 3-1:143.8: cm109_urb_ctl_callback: urb status -71 [ 800.263973][ C1] cm109 3-1:143.8: cm109_urb_ctl_callback: urb status -71 [ 800.271760][ T5895] usb 3-1: USB disconnect, device number 80 [ 800.277800][ C1] cm109 3-1:143.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 800.301706][ T5895] cm109 3-1:143.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 800.532035][ T979] usb 4-1: 0:2 : does not exist [ 800.566154][ T979] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 800.671477][ T979] usb 4-1: USB disconnect, device number 91 [ 800.690081][T12332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.721161][T12332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.831599][ T6063] udevd[6063]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 802.192506][T12354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.201290][T12354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.334469][ T979] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 802.484462][ T979] usb 2-1: Using ep0 maxpacket: 8 [ 802.519496][ T979] usb 2-1: config 0 has an invalid interface number: 176 but max is 2 [ 802.538234][ T979] usb 2-1: config 0 has no interface number 1 [ 802.548847][ T979] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 802.560033][ T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.586479][ T979] usb 2-1: config 0 descriptor?? [ 802.800939][ T979] qcserial 2-1:0.2: Qualcomm USB modem converter detected [ 803.012831][ T979] usb 2-1: USB disconnect, device number 96 [ 803.039213][ T979] qcserial 2-1:0.2: device disconnected [ 803.171493][T12376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.202648][T12376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.394201][T12382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1706'. [ 803.415516][T12382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1706'. [ 803.732709][T12395] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1708'. [ 805.184612][ T5984] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 805.322575][ T30] audit: type=1800 audit(1758412297.060:372): pid=12409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1710" name="bus" dev="ramfs" ino=50699 res=0 errno=0 [ 805.485145][ T5984] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.506553][ T5984] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.539586][ T5984] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 805.726589][ T5984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.776907][ T5984] usb 2-1: config 0 descriptor?? [ 806.206885][ T5984] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 806.382302][ T5984] cp2112 0003:10C4:EA90.0020: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 806.406251][ T30] audit: type=1326 audit(1758412298.150:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12430 comm="syz.4.1717" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc920d8ec29 code=0x0 [ 806.595496][ T5984] cp2112 0003:10C4:EA90.0020: Part Number: 0x82 Device Version: 0xFE [ 807.146929][ T979] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 807.158713][T12415] cp2112 0003:10C4:EA90.0020: Multi-message I2C transactions not supported [ 807.170583][T12415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.181028][ T5984] cp2112 0003:10C4:EA90.0020: error reading lock byte: -32 [ 807.189062][T12415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 807.225431][ T5984] usb 2-1: USB disconnect, device number 97 [ 807.307434][ T979] usb 4-1: Using ep0 maxpacket: 8 [ 807.329309][T12454] netlink: 'syz.1.1723': attribute type 39 has an invalid length. [ 807.330661][ T979] usb 4-1: config 12 has an invalid interface number: 212 but max is 0 [ 807.369387][ T979] usb 4-1: config 12 has no interface number 0 [ 807.404022][ T44] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 807.406476][ T979] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db98, bcdDevice=30.0c [ 807.450916][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.482323][ T979] usb 4-1: Product: syz [ 807.488943][ T979] usb 4-1: Manufacturer: syz [ 807.493596][ T979] usb 4-1: SerialNumber: syz [ 807.517687][ T979] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' in warm state. [ 807.533594][ T979] dvb-usb: bulk message failed: -22 (2/0) [ 807.623656][ T979] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 807.684214][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 807.800405][T12444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.816609][ T44] usb 3-1: unable to get BOS descriptor or descriptor too short [ 807.823168][T12444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 807.830324][T12466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.868519][ T44] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 807.900797][ T979] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)) [ 807.917361][T12466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 807.930562][ T979] usb 4-1: media controller created [ 807.933925][ T5984] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 807.945616][T12444] dvb-usb: bulk message failed: -22 (4/0) [ 807.949370][ T44] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 807.999453][ T44] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 808.002878][T12444] cxusb: i2c read failed [ 808.055882][ T44] usb 3-1: config 128 has no interface number 0 [ 808.062823][ T44] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 808.430416][ T44] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 808.471362][ T44] usb 3-1: config 128 interface 127 has no altsetting 0 [ 808.501838][ T44] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 808.513822][ T5984] usb 5-1: Using ep0 maxpacket: 16 [ 808.542224][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.560236][ T44] usb 3-1: Product: syz [ 808.573544][ T979] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 808.591320][ T44] usb 3-1: Manufacturer: syz [ 808.673926][ T44] usb 3-1: SerialNumber: syz [ 809.172575][T12450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 809.183540][ T979] cxusb: set interface failed [ 809.306450][T12450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 809.377193][ T979] dvb-usb: bulk message failed: -22 (1/0) [ 809.383730][ T979] dvb-usb: bulk message failed: -22 (3/0) [ 809.467351][ T44] usb 3-1: USB disconnect, device number 81 [ 809.554752][ T979] usb 4-1: bluebird_gpio_write failed. [ 809.594733][ T979] dvb-usb: bulk message failed: -22 (3/0) [ 809.604622][ T979] usb 4-1: bluebird_gpio_write failed. [ 809.757663][ T5907] udevd[5907]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 810.225484][ T979] DVB: Unable to find symbol dib7000p_attach() [ 810.231801][ T979] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' [ 810.529674][T12483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1730'. [ 810.684827][ T979] rc_core: IR keymap rc-dvico-mce not found [ 810.705696][ T979] Registered IR keymap rc-empty [ 810.751850][ T979] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 810.843232][ T979] input: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input45 [ 810.922968][ T979] dvb-usb: schedule remote query interval to 100 msecs. [ 810.962835][ T979] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) successfully initialized and connected. [ 811.067692][ T5965] dvb-usb: bulk message failed: -22 (1/0) [ 811.085677][ T979] usb 4-1: USB disconnect, device number 92 [ 811.184716][ T6055] dvb-usb: bulk message failed: -22 (1/0) [ 811.497510][ T979] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 ( successfully deinitialized and disconnected. [ 811.623053][ T30] audit: type=1326 audit(1758412303.360:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12494 comm="syz.0.1734" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f42d8ec29 code=0x0 [ 811.828004][ T5984] usb 5-1: unable to get BOS descriptor or descriptor too short [ 811.846517][ T5984] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 811.883223][ T5984] usb 5-1: can't read configurations, error -71 [ 811.924151][ T44] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 811.977886][T12501] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 812.009931][T12501] FAULT_INJECTION: forcing a failure. [ 812.009931][T12501] name failslab, interval 1, probability 0, space 0, times 0 [ 812.037975][T12501] CPU: 0 UID: 0 PID: 12501 Comm: syz.4.1735 Not tainted syzkaller #0 PREEMPT(full) [ 812.038007][T12501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 812.038022][T12501] Call Trace: [ 812.038031][T12501] [ 812.038042][T12501] dump_stack_lvl+0x189/0x250 [ 812.038072][T12501] ? __pfx____ratelimit+0x10/0x10 [ 812.038097][T12501] ? __pfx_dump_stack_lvl+0x10/0x10 [ 812.038122][T12501] ? __pfx__printk+0x10/0x10 [ 812.038154][T12501] ? __pfx___might_resched+0x10/0x10 [ 812.038184][T12501] ? fs_reclaim_acquire+0x7d/0x100 [ 812.038209][T12501] should_fail_ex+0x414/0x560 [ 812.038245][T12501] should_failslab+0xa8/0x100 [ 812.038281][T12501] __kmalloc_noprof+0xcb/0x4f0 [ 812.038309][T12501] ? tomoyo_encode+0x28b/0x550 [ 812.038337][T12501] tomoyo_encode+0x28b/0x550 [ 812.038363][T12501] tomoyo_realpath_from_path+0x58d/0x5d0 [ 812.038399][T12501] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 812.038431][T12501] tomoyo_path_number_perm+0x1e8/0x5a0 [ 812.038465][T12501] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 812.038515][T12501] ? __lock_acquire+0xab9/0xd20 [ 812.038569][T12501] ? __fget_files+0x2a/0x420 [ 812.038591][T12501] ? __fget_files+0x2a/0x420 [ 812.038609][T12501] ? __fget_files+0x3a0/0x420 [ 812.038626][T12501] ? __fget_files+0x2a/0x420 [ 812.038650][T12501] security_file_ioctl+0xcb/0x2d0 [ 812.038682][T12501] __se_sys_ioctl+0x47/0x170 [ 812.038712][T12501] do_syscall_64+0xfa/0x3b0 [ 812.038735][T12501] ? lockdep_hardirqs_on+0x9c/0x150 [ 812.038757][T12501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.038779][T12501] ? clear_bhb_loop+0x60/0xb0 [ 812.038805][T12501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.038826][T12501] RIP: 0033:0x7fc920d8ec29 [ 812.038845][T12501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 812.038863][T12501] RSP: 002b:00007fc921b33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 812.038885][T12501] RAX: ffffffffffffffda RBX: 00007fc920fd5fa0 RCX: 00007fc920d8ec29 [ 812.038901][T12501] RDX: 0000200000000000 RSI: 0000000000003b89 RDI: 0000000000000003 [ 812.038915][T12501] RBP: 00007fc921b33090 R08: 0000000000000000 R09: 0000000000000000 [ 812.038928][T12501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 812.038941][T12501] R13: 00007fc920fd6038 R14: 00007fc920fd5fa0 R15: 00007fc9210ffa28 [ 812.038975][T12501] [ 812.039124][T12501] ERROR: Out of memory at tomoyo_realpath_from_path. [ 812.164117][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 812.286396][ T44] usb 3-1: config 4 has an invalid interface number: 51 but max is 0 [ 812.378453][ T44] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 812.389524][ T44] usb 3-1: config 4 has no interface number 0 [ 812.396213][ T44] usb 3-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 812.410493][ T44] usb 3-1: config 4 interface 51 has no altsetting 0 [ 812.422122][ T44] usb 3-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 812.434940][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.443350][ T44] usb 3-1: Product: syz [ 812.448111][ T44] usb 3-1: Manufacturer: syz [ 812.452792][ T44] usb 3-1: SerialNumber: syz [ 812.661607][T12508] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1736'. [ 812.704799][T12510] netlink: 'syz.4.1737': attribute type 39 has an invalid length. [ 812.853015][ T44] cdc_wdm 3-1:4.51: invalid descriptor buffer length [ 812.903843][ T44] cdc_wdm 3-1:4.51: probe with driver cdc_wdm failed with error -22 [ 812.965220][ T44] usb 3-1: USB disconnect, device number 82 [ 813.285298][T12518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.298547][T12518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.409617][ T30] audit: type=1326 audit(1758412305.150:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12516 comm="syz.0.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f42d8ec29 code=0x7ffc0000 [ 813.460341][ T30] audit: type=1326 audit(1758412305.150:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12516 comm="syz.0.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f1f42d8ec29 code=0x7ffc0000 [ 813.592643][ T30] audit: type=1326 audit(1758412305.150:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12516 comm="syz.0.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f42d8ec29 code=0x7ffc0000 [ 813.661574][ T30] audit: type=1326 audit(1758412305.150:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12516 comm="syz.0.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1f42d8ec29 code=0x7ffc0000 [ 813.741533][ T30] audit: type=1326 audit(1758412305.150:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12516 comm="syz.0.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f42d8ec29 code=0x7ffc0000 [ 813.860437][ T30] audit: type=1326 audit(1758412305.150:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12516 comm="syz.0.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f1f42d8ec29 code=0x7ffc0000 [ 813.919897][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.928387][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.945064][ T30] audit: type=1326 audit(1758412305.150:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12516 comm="syz.0.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f42d8ec29 code=0x7ffc0000 [ 813.970549][ T30] audit: type=1326 audit(1758412305.150:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12516 comm="syz.0.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f1f42d8ec29 code=0x7ffc0000 [ 814.102433][ T30] audit: type=1326 audit(1758412305.150:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12516 comm="syz.0.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f42d8ec29 code=0x7ffc0000 [ 814.614911][T12546] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 814.640857][T12546] FAULT_INJECTION: forcing a failure. [ 814.640857][T12546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 814.658441][ T5984] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 814.668733][T12546] CPU: 1 UID: 0 PID: 12546 Comm: syz.3.1747 Not tainted syzkaller #0 PREEMPT(full) [ 814.668756][T12546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 814.668766][T12546] Call Trace: [ 814.668773][T12546] [ 814.668780][T12546] dump_stack_lvl+0x189/0x250 [ 814.668803][T12546] ? __pfx____ratelimit+0x10/0x10 [ 814.668819][T12546] ? __pfx_dump_stack_lvl+0x10/0x10 [ 814.668837][T12546] ? __pfx__printk+0x10/0x10 [ 814.668858][T12546] ? __might_fault+0xb0/0x130 [ 814.668887][T12546] should_fail_ex+0x414/0x560 [ 814.668913][T12546] _copy_from_user+0x2d/0xb0 [ 814.668934][T12546] iommufd_fops_ioctl+0x411/0x580 [ 814.668961][T12546] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 814.668980][T12546] ? __fget_files+0x2a/0x420 [ 814.668999][T12546] ? __fget_files+0x2a/0x420 [ 814.669014][T12546] ? bpf_lsm_file_ioctl+0x9/0x20 [ 814.669034][T12546] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 814.669049][T12546] __se_sys_ioctl+0xfc/0x170 [ 814.669069][T12546] do_syscall_64+0xfa/0x3b0 [ 814.669086][T12546] ? lockdep_hardirqs_on+0x9c/0x150 [ 814.669101][T12546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.669116][T12546] ? clear_bhb_loop+0x60/0xb0 [ 814.669134][T12546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.669149][T12546] RIP: 0033:0x7fbb52d8ec29 [ 814.669162][T12546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 814.669177][T12546] RSP: 002b:00007fbb53c41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 814.669201][T12546] RAX: ffffffffffffffda RBX: 00007fbb52fd5fa0 RCX: 00007fbb52d8ec29 [ 814.669217][T12546] RDX: 0000200000000000 RSI: 0000000000003b89 RDI: 0000000000000003 [ 814.669232][T12546] RBP: 00007fbb53c41090 R08: 0000000000000000 R09: 0000000000000000 [ 814.669245][T12546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 814.669258][T12546] R13: 00007fbb52fd6038 R14: 00007fbb52fd5fa0 R15: 00007fbb530ffa28 [ 814.669289][T12546] [ 815.150669][ T5984] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 815.185328][ T5984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.198642][T12548] sock: sock_set_timeout: `syz.3.1749' (pid 12548) tries to set negative timeout [ 815.215903][ T5984] usb 5-1: config 0 descriptor?? [ 815.223108][ T5984] cp210x 5-1:0.0: cp210x converter detected [ 815.440410][ T5984] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 815.452159][ T5984] usb 5-1: cp210x converter now attached to ttyUSB0 [ 815.649682][T12543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.658706][T12543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.738993][ T979] usb 5-1: USB disconnect, device number 92 [ 815.784397][ T979] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 815.875851][ T979] cp210x 5-1:0.0: device disconnected [ 816.371841][T12569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1752'. [ 817.816155][T12591] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 817.824937][T12591] FAULT_INJECTION: forcing a failure. [ 817.824937][T12591] name fail_iommufd, interval 1, probability 0, space 0, times 1 [ 817.842002][T12591] CPU: 1 UID: 0 PID: 12591 Comm: syz.0.1759 Not tainted syzkaller #0 PREEMPT(full) [ 817.842023][T12591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 817.842033][T12591] Call Trace: [ 817.842039][T12591] [ 817.842046][T12591] dump_stack_lvl+0x189/0x250 [ 817.842068][T12591] ? __pfx____ratelimit+0x10/0x10 [ 817.842084][T12591] ? __pfx_dump_stack_lvl+0x10/0x10 [ 817.842101][T12591] ? __pfx__printk+0x10/0x10 [ 817.842131][T12591] should_fail_ex+0x414/0x560 [ 817.842156][T12591] iommufd_get_object+0x78/0x4b0 [ 817.842173][T12591] ? __pfx_iommufd_get_object+0x10/0x10 [ 817.842195][T12591] iommufd_hwpt_alloc+0x236/0xb60 [ 817.842218][T12591] ? __pfx_iommufd_hwpt_alloc+0x10/0x10 [ 817.842246][T12591] iommufd_fops_ioctl+0x45b/0x580 [ 817.842265][T12591] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 817.842283][T12591] ? __fget_files+0x2a/0x420 [ 817.842300][T12591] ? __fget_files+0x2a/0x420 [ 817.842315][T12591] ? bpf_lsm_file_ioctl+0x9/0x20 [ 817.842333][T12591] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 817.842348][T12591] __se_sys_ioctl+0xfc/0x170 [ 817.842367][T12591] do_syscall_64+0xfa/0x3b0 [ 817.842383][T12591] ? lockdep_hardirqs_on+0x9c/0x150 [ 817.842397][T12591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.842411][T12591] ? clear_bhb_loop+0x60/0xb0 [ 817.842429][T12591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.842442][T12591] RIP: 0033:0x7f1f42d8ec29 [ 817.842455][T12591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 817.842468][T12591] RSP: 002b:00007f1f43c89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 817.842483][T12591] RAX: ffffffffffffffda RBX: 00007f1f42fd5fa0 RCX: 00007f1f42d8ec29 [ 817.842494][T12591] RDX: 0000200000000000 RSI: 0000000000003b89 RDI: 0000000000000003 [ 817.842504][T12591] RBP: 00007f1f43c89090 R08: 0000000000000000 R09: 0000000000000000 [ 817.842513][T12591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 817.842522][T12591] R13: 00007f1f42fd6038 R14: 00007f1f42fd5fa0 R15: 00007f1f430ffa28 [ 817.842544][T12591] [ 818.514486][ T6055] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 818.576215][T12602] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 818.676876][ T6055] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 818.733037][ T6055] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 818.757160][ T6055] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 818.774420][ T6055] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.782733][ T6055] usb 4-1: Product: syz [ 818.788559][ T6055] usb 4-1: Manufacturer: syz [ 818.793348][ T6055] usb 4-1: SerialNumber: syz [ 819.860401][T12615] syzkaller0: entered promiscuous mode [ 819.866557][T12615] syzkaller0: entered allmulticast mode [ 819.873514][T12620] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1767'. [ 820.699795][ T6055] usb 4-1: cannot find UAC_HEADER [ 820.752840][ T6055] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 820.765375][T12625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 820.796823][ T6063] udevd[6063]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 820.814596][ T6055] usb 4-1: USB disconnect, device number 93 [ 820.816192][T12625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.887323][T12625] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1768'. [ 821.266271][T12630] qrtr: Invalid version 0 [ 822.593483][T12639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1771'. [ 822.885521][ T5965] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 823.023926][T12642] netlink: 'syz.4.1772': attribute type 39 has an invalid length. [ 823.119917][ T5965] usb 4-1: config index 0 descriptor too short (expected 8192, got 77) [ 823.150377][ T5965] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 823.223254][ T5965] usb 4-1: config 0 has no interfaces? [ 823.265947][ T5965] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 823.301829][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.341449][ T5965] usb 4-1: Product: syz [ 823.371940][ T5965] usb 4-1: Manufacturer: syz [ 823.384430][ T5965] usb 4-1: SerialNumber: syz [ 823.410343][ T5965] usb 4-1: config 0 descriptor?? [ 825.406742][T12639] chnl_net:caif_netlink_parms(): no params data found [ 825.695107][T12666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.729005][T12666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 826.497337][ T5965] usb 4-1: USB disconnect, device number 94 [ 827.043868][ T44] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 827.229486][ T979] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 827.451551][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 827.485445][ T979] usb 4-1: Using ep0 maxpacket: 32 [ 827.496983][ T979] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 827.522824][ T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 827.539690][ T44] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 827.588089][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.611621][ T44] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 827.651381][ T979] usb 4-1: Product: syz [ 827.656614][ T44] usb 5-1: New USB device strings: Mfr=225, Product=0, SerialNumber=0 [ 827.691004][ T44] usb 5-1: Manufacturer: syz [ 827.691026][ T979] usb 4-1: Manufacturer: syz [ 827.691046][ T979] usb 4-1: SerialNumber: syz [ 827.732014][ T979] usb 4-1: config 0 descriptor?? [ 827.777283][ T979] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 827.863114][ T44] usb 5-1: config 0 descriptor?? [ 827.887437][ T44] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 828.177577][T12693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 828.206707][T12693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 828.581491][T12700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 828.792209][T12706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 828.864772][T12706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 828.867099][ T5965] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 828.955362][T12706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 828.975067][T12706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.008092][T12706] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 829.056586][ T5965] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 829.099627][ T5965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.149840][ T5965] usb 2-1: config 0 descriptor?? [ 829.172765][ T5965] cp210x 2-1:0.0: cp210x converter detected [ 829.381496][ T5965] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 829.424788][ T5965] cp210x 2-1:0.0: querying part number failed [ 829.460637][ T5965] usb 2-1: cp210x converter now attached to ttyUSB0 [ 829.545095][ T979] gspca_topro: reg_w err -110 [ 829.574484][ T979] gspca_topro: Sensor soi763a [ 829.877799][ T979] usb 5-1: USB disconnect, device number 93 [ 829.920059][T12719] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1790'. [ 830.335662][ T5965] usb 4-1: USB disconnect, device number 95 [ 830.802623][T12730] libceph: resolve '. [ 830.802623][T12730] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 830.802623][T12730] ' (ret=-3): failed [ 830.821049][ C0] vkms_vblank_simulate: vblank timer overrun [ 831.564085][ T44] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 831.648818][ T6087] usb 2-1: USB disconnect, device number 98 [ 831.662081][ T6087] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 831.723854][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 831.797880][ T44] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 831.827924][ T6087] cp210x 2-1:0.0: device disconnected [ 832.106423][ T44] usb 5-1: config 0 interface 0 has no altsetting 0 [ 832.187096][ T44] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 832.203845][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.219302][ T44] usb 5-1: Product: syz [ 832.224440][ T44] usb 5-1: Manufacturer: syz [ 832.235857][ T44] usb 5-1: SerialNumber: syz [ 832.257166][ T44] usb 5-1: config 0 descriptor?? [ 832.300235][ T44] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 832.424028][ T6087] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 832.494235][ T44] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 832.520035][ T44] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 832.543070][ T44] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 832.593943][ T6087] usb 2-1: Using ep0 maxpacket: 32 [ 832.610892][ T6087] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 832.619527][ T6087] usb 2-1: config 0 has no interface number 0 [ 832.659000][ T6087] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 832.721435][ T6087] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.753696][ T6087] usb 2-1: Product: syz [ 832.769049][ T6087] usb 2-1: Manufacturer: syz [ 832.781065][ T6087] usb 2-1: SerialNumber: syz [ 832.803340][ T6087] usb 2-1: config 0 descriptor?? [ 832.888259][ T6087] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 832.937617][T12754] netlink: 'syz.0.1800': attribute type 1 has an invalid length. [ 833.184317][ T6087] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 833.222173][ T6087] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 833.238357][ T44] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 833.256909][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 833.256924][ T30] audit: type=1326 audit(1758412325.000:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12753 comm="syz.0.1800" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f42d8ec29 code=0x0 [ 833.309980][T12757] bond2: (slave geneve2): making interface the new active one [ 833.359991][T12757] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 833.411900][ T6183] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 833.413904][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 833.476423][ T44] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 833.478924][ T6183] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 833.485434][ T44] usb 3-1: config 0 has no interface number 0 [ 833.509961][ T44] usb 3-1: config 0 interface 89 has no altsetting 0 [ 833.550062][ T44] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 833.559636][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.569114][ T44] usb 3-1: Product: syz [ 833.575032][ T6183] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 833.601937][T12743] program syz.1.1796 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 833.620773][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 833.629719][ T6087] usb 2-1: USB disconnect, device number 99 [ 833.649780][ T44] usb 3-1: Manufacturer: syz [ 833.655496][ T6087] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 833.670180][ T44] usb 3-1: SerialNumber: syz [ 833.678868][ T6183] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 833.701428][ T44] usb 3-1: config 0 descriptor?? [ 833.728043][ T6087] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 833.747559][ T44] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 833.760035][ T6087] quatech2 2-1:0.51: device disconnected [ 833.768280][ T44] em28xx 3-1:0.89: Video interface 89 found: bulk [ 833.905431][ T5965] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 834.018135][ T6087] usb 5-1: USB disconnect, device number 94 [ 834.078558][ T5965] usb 4-1: Using ep0 maxpacket: 16 [ 834.111840][ T5965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 834.149637][ T5965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.288014][ T5965] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 834.336743][ T5965] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 834.344233][ T44] em28xx 3-1:0.89: chip ID is em28174 [ 834.370866][ T5965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.415997][ T5965] usb 4-1: config 0 descriptor?? [ 835.124715][ T5965] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 835.132966][ T5965] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 835.154593][ T5965] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 835.161907][ T5965] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 835.169950][ T5965] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 835.177948][ T5965] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 835.185996][ T5965] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 835.194743][ T5965] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 835.242719][ T5965] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 835.254609][ T5965] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 835.271322][ T5965] microsoft 0003:045E:07DA.0021: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 835.371436][ T5965] microsoft 0003:045E:07DA.0021: no inputs found [ 835.392790][ T5965] microsoft 0003:045E:07DA.0021: could not initialize ff, continuing anyway [ 835.437383][ T5965] usb 4-1: USB disconnect, device number 96 [ 835.539429][T12784] fido_id[12784]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 835.647511][ T44] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 835.667320][ T44] em28xx 3-1:0.89: board has no eeprom [ 835.748912][ T44] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 835.760453][ T44] em28xx 3-1:0.89: analog set to bulk mode. [ 835.768831][T12786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1806'. [ 835.770317][ T5984] em28xx 3-1:0.89: Registering V4L2 extension [ 835.998980][ T5984] em28xx 3-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 836.018452][ T5984] em28xx 3-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 836.032948][ T5984] em28xx 3-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 836.062737][T12789] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 836.072486][ T5984] em28xx 3-1:0.89: reading from i2c device at 0x40 failed (error=-5) [ 836.132869][ T5984] usb 3-1: Decoder not found [ 836.255152][ T5984] em28xx 3-1:0.89: failed to create media graph [ 836.283088][ T5984] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 836.372467][ T5984] em28xx 3-1:0.89: Registering snapshot button... [ 836.375287][T12790] ================================================================== [ 836.387014][T12790] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 836.394398][T12790] Read of size 8 at addr ffff888055c6c740 by task v4l_id/12790 [ 836.401942][T12790] [ 836.404279][T12790] CPU: 0 UID: 0 PID: 12790 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 836.404306][T12790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 836.404320][T12790] Call Trace: [ 836.404333][T12790] [ 836.404341][T12790] dump_stack_lvl+0x189/0x250 [ 836.404361][T12790] ? rcu_is_watching+0x15/0xb0 [ 836.404376][T12790] ? __kasan_check_byte+0x12/0x40 [ 836.404398][T12790] ? __pfx_dump_stack_lvl+0x10/0x10 [ 836.404415][T12790] ? rcu_is_watching+0x15/0xb0 [ 836.404429][T12790] ? lock_release+0x4b/0x3e0 [ 836.404452][T12790] ? __virt_addr_valid+0x1c8/0x5c0 [ 836.404472][T12790] ? __virt_addr_valid+0x4a5/0x5c0 [ 836.404491][T12790] print_report+0xca/0x240 [ 836.404506][T12790] ? v4l2_fh_open+0xc7/0x430 [ 836.404520][T12790] kasan_report+0x118/0x150 [ 836.404542][T12790] ? v4l2_fh_open+0xc7/0x430 [ 836.404559][T12790] v4l2_fh_open+0xc7/0x430 [ 836.404577][T12790] em28xx_v4l2_open+0x157/0x9a0 [ 836.404604][T12790] v4l2_open+0x20f/0x360 [ 836.404622][T12790] chrdev_open+0x4c9/0x5e0 [ 836.404636][T12790] ? __pfx_chrdev_open+0x10/0x10 [ 836.404650][T12790] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 836.404676][T12790] ? __pfx_chrdev_open+0x10/0x10 [ 836.404689][T12790] do_dentry_open+0x950/0x13f0 [ 836.404710][T12790] vfs_open+0x3b/0x340 [ 836.404723][T12790] ? path_openat+0x2ecd/0x3830 [ 836.404742][T12790] path_openat+0x2ee5/0x3830 [ 836.404760][T12790] ? arch_stack_walk+0xfc/0x150 [ 836.404784][T12790] ? stack_depot_save_flags+0x40/0x860 [ 836.404813][T12790] ? __pfx_path_openat+0x10/0x10 [ 836.404830][T12790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.404854][T12790] do_filp_open+0x1fa/0x410 [ 836.404871][T12790] ? __lock_acquire+0xab9/0xd20 [ 836.404893][T12790] ? __pfx_do_filp_open+0x10/0x10 [ 836.404919][T12790] ? _raw_spin_unlock+0x28/0x50 [ 836.404941][T12790] ? alloc_fd+0x64c/0x6c0 [ 836.404966][T12790] do_sys_openat2+0x121/0x1c0 [ 836.404983][T12790] ? __pfx_do_sys_openat2+0x10/0x10 [ 836.405000][T12790] ? exc_page_fault+0x76/0xf0 [ 836.405016][T12790] ? do_user_addr_fault+0xc8a/0x1390 [ 836.405040][T12790] __x64_sys_openat+0x138/0x170 [ 836.405058][T12790] do_syscall_64+0xfa/0x3b0 [ 836.405074][T12790] ? lockdep_hardirqs_on+0x9c/0x150 [ 836.405088][T12790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.405109][T12790] ? clear_bhb_loop+0x60/0xb0 [ 836.405126][T12790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.405141][T12790] RIP: 0033:0x7fe96eca7407 [ 836.405155][T12790] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 836.405169][T12790] RSP: 002b:00007fff31adc1d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 836.405185][T12790] RAX: ffffffffffffffda RBX: 00007fe96f34d880 RCX: 00007fe96eca7407 [ 836.405197][T12790] RDX: 0000000000000000 RSI: 00007fff31addf1c RDI: ffffffffffffff9c [ 836.405207][T12790] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 836.405216][T12790] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 836.405226][T12790] R13: 00007fff31adc420 R14: 00007fe96f452000 R15: 00005654af6b44d8 [ 836.405243][T12790] [ 836.405249][T12790] [ 836.713253][T12790] Allocated by task 5984: [ 836.717595][T12790] kasan_save_track+0x3e/0x80 [ 836.722279][T12790] __kasan_kmalloc+0x93/0xb0 [ 836.726883][T12790] __kmalloc_cache_noprof+0x230/0x3d0 [ 836.732264][T12790] em28xx_v4l2_init+0x10b/0x2e70 [ 836.737214][T12790] em28xx_init_extension+0x120/0x1c0 [ 836.742504][T12790] process_scheduled_works+0xae1/0x17b0 [ 836.748055][T12790] worker_thread+0x8a0/0xda0 [ 836.752646][T12790] kthread+0x70e/0x8a0 [ 836.756723][T12790] ret_from_fork+0x439/0x7d0 [ 836.761328][T12790] ret_from_fork_asm+0x1a/0x30 [ 836.766119][T12790] [ 836.768449][T12790] Freed by task 5984: [ 836.772443][T12790] kasan_save_track+0x3e/0x80 [ 836.777136][T12790] kasan_save_free_info+0x46/0x50 [ 836.782170][T12790] __kasan_slab_free+0x5b/0x80 [ 836.786944][T12790] kfree+0x18e/0x440 [ 836.790851][T12790] em28xx_v4l2_init+0x1683/0x2e70 [ 836.795885][T12790] em28xx_init_extension+0x120/0x1c0 [ 836.801268][T12790] process_scheduled_works+0xae1/0x17b0 [ 836.806814][T12790] worker_thread+0x8a0/0xda0 [ 836.811421][T12790] kthread+0x70e/0x8a0 [ 836.815494][T12790] ret_from_fork+0x439/0x7d0 [ 836.820085][T12790] ret_from_fork_asm+0x1a/0x30 [ 836.824862][T12790] [ 836.827192][T12790] The buggy address belongs to the object at ffff888055c6c000 [ 836.827192][T12790] which belongs to the cache kmalloc-8k of size 8192 [ 836.841250][T12790] The buggy address is located 1856 bytes inside of [ 836.841250][T12790] freed 8192-byte region [ffff888055c6c000, ffff888055c6e000) [ 836.855249][T12790] [ 836.857575][T12790] The buggy address belongs to the physical page: [ 836.863995][T12790] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55c68 [ 836.872763][T12790] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 836.881262][T12790] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 836.889329][T12790] page_type: f5(slab) [ 836.893321][T12790] raw: 00fff00000000040 ffff88801a442280 ffffea0001f7f200 dead000000000002 [ 836.901912][T12790] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 836.910501][T12790] head: 00fff00000000040 ffff88801a442280 ffffea0001f7f200 dead000000000002 [ 836.919186][T12790] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 836.927861][T12790] head: 00fff00000000003 ffffea0001571a01 00000000ffffffff 00000000ffffffff [ 836.936535][T12790] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 836.945238][T12790] page dumped because: kasan: bad access detected [ 836.951656][T12790] page_owner tracks the page as allocated [ 836.957379][T12790] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10912, tgid 10911 (syz.2.1318), ts 697560905017, free_ts 697558414280 [ 836.978924][T12790] post_alloc_hook+0x240/0x2a0 [ 836.983755][T12790] get_page_from_freelist+0x21e4/0x22c0 [ 836.989314][T12790] __alloc_frozen_pages_noprof+0x181/0x370 [ 836.995128][T12790] alloc_pages_mpol+0x232/0x4a0 [ 836.999994][T12790] allocate_slab+0x8a/0x370 [ 837.004499][T12790] ___slab_alloc+0xbeb/0x1420 [ 837.009188][T12790] __kmalloc_cache_noprof+0x296/0x3d0 [ 837.014583][T12790] audit_log_d_path+0xb5/0x190 [ 837.019350][T12790] audit_log_d_path_exe+0x42/0x70 [ 837.024384][T12790] audit_log_task+0x2b3/0x3c0 [ 837.029062][T12790] audit_seccomp+0x86/0x190 [ 837.033575][T12790] __seccomp_filter+0x9aa/0x1a40 [ 837.038515][T12790] syscall_trace_enter+0xaa/0x160 [ 837.043553][T12790] do_syscall_64+0xd3/0x3b0 [ 837.048069][T12790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.053989][T12790] page last free pid 10912 tgid 10911 stack trace: [ 837.060481][T12790] __free_frozen_pages+0xbc4/0xd30 [ 837.065602][T12790] __put_partials+0x156/0x1a0 [ 837.070280][T12790] put_cpu_partial+0x17c/0x250 [ 837.075056][T12790] __slab_free+0x2d5/0x3c0 [ 837.079482][T12790] qlist_free_all+0x97/0x140 [ 837.084080][T12790] kasan_quarantine_reduce+0x148/0x160 [ 837.089556][T12790] __kasan_slab_alloc+0x22/0x80 [ 837.094428][T12790] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 837.099909][T12790] audit_log_start+0x126/0x870 [ 837.104692][T12790] audit_seccomp+0x64/0x190 [ 837.109205][T12790] __seccomp_filter+0x9aa/0x1a40 [ 837.114160][T12790] syscall_trace_enter+0xaa/0x160 [ 837.119201][T12790] do_syscall_64+0xd3/0x3b0 [ 837.123714][T12790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.129633][T12790] [ 837.131964][T12790] Memory state around the buggy address: [ 837.137599][T12790] ffff888055c6c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 837.145661][T12790] ffff888055c6c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 837.153717][T12790] >ffff888055c6c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 837.161787][T12790] ^ [ 837.167934][T12790] ffff888055c6c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 837.176000][T12790] ffff888055c6c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 837.184059][T12790] ================================================================== [ 837.224042][ T5984] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input49 [ 837.260209][T12790] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 837.267446][T12790] CPU: 0 UID: 0 PID: 12790 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 837.276468][T12790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 837.286519][T12790] Call Trace: [ 837.289795][T12790] [ 837.292760][T12790] dump_stack_lvl+0x99/0x250 [ 837.297354][T12790] ? __asan_memcpy+0x40/0x70 [ 837.301963][T12790] ? __pfx_dump_stack_lvl+0x10/0x10 [ 837.307161][T12790] ? __pfx__printk+0x10/0x10 [ 837.311763][T12790] vpanic+0x281/0x750 [ 837.315766][T12790] ? preempt_schedule+0xae/0xc0 [ 837.320638][T12790] ? __pfx_vpanic+0x10/0x10 [ 837.325140][T12790] ? preempt_schedule_common+0x83/0xd0 [ 837.330597][T12790] ? preempt_schedule+0xae/0xc0 [ 837.335443][T12790] ? __pfx_preempt_schedule+0x10/0x10 [ 837.340813][T12790] panic+0xb9/0xc0 [ 837.344534][T12790] ? __pfx_panic+0x10/0x10 [ 837.349143][T12790] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 837.355047][T12790] ? v4l2_fh_open+0xc7/0x430 [ 837.359632][T12790] check_panic_on_warn+0x89/0xb0 [ 837.364572][T12790] ? v4l2_fh_open+0xc7/0x430 [ 837.369168][T12790] end_report+0x78/0x160 [ 837.373417][T12790] kasan_report+0x129/0x150 [ 837.377940][T12790] ? v4l2_fh_open+0xc7/0x430 [ 837.382541][T12790] v4l2_fh_open+0xc7/0x430 [ 837.386957][T12790] em28xx_v4l2_open+0x157/0x9a0 [ 837.391844][T12790] v4l2_open+0x20f/0x360 [ 837.396092][T12790] chrdev_open+0x4c9/0x5e0 [ 837.400506][T12790] ? __pfx_chrdev_open+0x10/0x10 [ 837.405436][T12790] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 837.411767][T12790] ? __pfx_chrdev_open+0x10/0x10 [ 837.416698][T12790] do_dentry_open+0x950/0x13f0 [ 837.421469][T12790] vfs_open+0x3b/0x340 [ 837.425533][T12790] ? path_openat+0x2ecd/0x3830 [ 837.430297][T12790] path_openat+0x2ee5/0x3830 [ 837.434903][T12790] ? arch_stack_walk+0xfc/0x150 [ 837.439762][T12790] ? stack_depot_save_flags+0x40/0x860 [ 837.445250][T12790] ? __pfx_path_openat+0x10/0x10 [ 837.450186][T12790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.456257][T12790] do_filp_open+0x1fa/0x410 [ 837.460756][T12790] ? __lock_acquire+0xab9/0xd20 [ 837.465612][T12790] ? __pfx_do_filp_open+0x10/0x10 [ 837.470651][T12790] ? _raw_spin_unlock+0x28/0x50 [ 837.475523][T12790] ? alloc_fd+0x64c/0x6c0 [ 837.479858][T12790] do_sys_openat2+0x121/0x1c0 [ 837.484530][T12790] ? __pfx_do_sys_openat2+0x10/0x10 [ 837.489723][T12790] ? exc_page_fault+0x76/0xf0 [ 837.494402][T12790] ? do_user_addr_fault+0xc8a/0x1390 [ 837.499694][T12790] __x64_sys_openat+0x138/0x170 [ 837.504546][T12790] do_syscall_64+0xfa/0x3b0 [ 837.509047][T12790] ? lockdep_hardirqs_on+0x9c/0x150 [ 837.514248][T12790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.520330][T12790] ? clear_bhb_loop+0x60/0xb0 [ 837.525015][T12790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.530907][T12790] RIP: 0033:0x7fe96eca7407 [ 837.535323][T12790] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 837.554938][T12790] RSP: 002b:00007fff31adc1d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 837.563364][T12790] RAX: ffffffffffffffda RBX: 00007fe96f34d880 RCX: 00007fe96eca7407 [ 837.571334][T12790] RDX: 0000000000000000 RSI: 00007fff31addf1c RDI: ffffffffffffff9c [ 837.579299][T12790] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 837.587263][T12790] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 837.595238][T12790] R13: 00007fff31adc420 R14: 00007fe96f452000 R15: 00005654af6b44d8 [ 837.603228][T12790] [ 837.606400][T12790] Kernel Offset: disabled [ 837.610730][T12790] Rebooting in 86400 seconds..