last executing test programs: 13m2.541962871s ago: executing program 0 (id=2254): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'dummy0\x00', &(0x7f00000000c0)=@ethtool_rxfh={0x46, 0x6, 0xfffffffa, 0x0, 0x96, "70c6ab", 0x9}}) (async, rerun: 64) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x4f2, 0x1236, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xc}}}}}]}}]}}, 0x0) (rerun: 64) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000100)={0x0, 0x10, 0x7, {0x7, 0x6, "4156fbecaf"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001ac0), 0x2, 0x0) (async) r3 = open$dir(&(0x7f0000000180)='.\x00', 0x414280, 0x140) fspick(r3, &(0x7f00000001c0)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x5, 0x1, 0x2, "621aa47a37346cc50088615b2090a35771e9053f2a3d4969290c9fcb76760026", 0x32314247}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x3, [{0x0, 0x9}, {0x2, 0xaa}, {0x7fff, 0x5}]}}) (async) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4001b0d0000000061114800000000001700000000000000956ab556df7b0000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xb59935f959ebd58e, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r4}, 0x94) 13m0.833802154s ago: executing program 0 (id=2260): syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f0000001240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x2, 0xb0, 0x5, [{{0x9, 0x4, 0x0, 0x79, 0xfe, 0x2, 0x6, 0x0, 0x8, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x85, 0x5, 0x0, 0x6}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x2, 0x7, 0x53}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x4, 0xc, 0x40}}}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x28f99f0226d6c3eb, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8f, 0x1c8, 0x9, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x7, 0x1, 0x3, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x2, 0x9, 0x4}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0xb, 0x6, 0xc7, 0x40, 0x95}, 0x31, &(0x7f0000000080)={0x5, 0xf, 0x31, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x5, 0xd, 0x8}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x3, 0xb1, 0x401, 0xfc}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "9970b4373ebb4211fd1e64bd3931f025"}]}, 0x3, [{0xef, &(0x7f00000000c0)=@string={0xef, 0x3, "8241d9cd120708c9942d7fb0a59e257374fe1941473289fe9c151fa4ec7ebd2d3a5486112f0aac62065ca2037d1292b7ce28ac6da34ecb0957d9d0593acc3921e7b1fe16c9a721863b2d72a935ea0227955463f9017de8feba2d796cdddc3b49d4f64025232055fce14bc7fc2bc787eb734cb5cb9ae285d9f243eadefa1bcf2589a6af005f6b73c78a98d1892d66cfcc22206a8de584c20179ea1c0195d3ee50522cf5ce9849fde1952772aa2bb4df93354ae93fd4d32a5b4f4215f24dafa46b1014429c6cced8b5de8c0f6f76adc52d708d2abb02f00c1f76e8876ef9b3540a24856df4919bc7f1597c5b1a12"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x409}}, {0x7f, &(0x7f0000000200)=@string={0x7f, 0x3, "5a943c77276132eb4b839aebcadbfdf2d6d7d94976baef4655201ec3944dc9f9939431f706ac187d555078b7f2fc31c3646bffa5c3028ce8e4859873064a869017a2597e07a9d81402f0ad7b703fe584b2144d79326f8db14cbddda2de4b1a1f99fc9000d064c050f7e44ff368dcc5b0c36277781e2f433125d72b8924"}}]}) 12m59.188724494s ago: executing program 0 (id=2268): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000140)=0x1) write$snddsp(r2, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) r3 = syz_io_uring_setup(0x9ee, &(0x7f0000000180)={0x0, 0xc95c, 0x100, 0x3, 0xfffffffe}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000000ffffffff"]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000003b80)={0x3, 0x1, 0xf000, 0x1000, &(0x7f0000001000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4048aecb, &(0x7f0000000080)) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000040)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x4000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) pipe(&(0x7f0000000300)) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f0000000240)="f20f90a5a6c5db795c0f20e06635000040000f22e0f3a50f1f73fb2e0f2d22660f38818f030066b9800000c00f326635002000000f30660f388153be0f1c9c386b", 0x41}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c20000001704b47cdbde810000000800450000700000000000019078ac1e0001ac1414aa05009078e00000e0450000000000000000110000ac1414aa00000000830300443c00030a010600010000000000000000000000ffffffff00000000ac141400"/130], 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x42}, 0x84) recvmmsg(r7, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}, 0x800da53}], 0x1, 0x2040, 0x0) 12m58.881523342s ago: executing program 0 (id=2270): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents(r1, &(0x7f0000000240)=""/167, 0xa7) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, 0x0) 12m58.679251687s ago: executing program 0 (id=2271): pipe(&(0x7f0000000100)) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010800000000000000000a0000000900010073797a31000000004c000000030a010100000000000000000a0000000a000700766f75746500000014000480080002400000000008000140000000000900010073797a3100000000090003"], 0x94}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xbd1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2, 0xffffffff}, 0x0) (async) r4 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x5, 0x141101) dup(r4) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) mlockall(0x7) (async) shutdown(r5, 0x2) (async) close(r5) (async) close(0xffffffffffffffff) (async) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201010200000010f3b100000000010203010902240001010330050904000801030101000921ff00010122b00b09058103100002ba07424ae89cf7d629f944a4bedd8607e44fa2444b"], 0x0) mlock2(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x14, 0x4, 0x8, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}}, 0x1080) 12m58.410579718s ago: executing program 0 (id=2274): socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) socket$kcm(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x101201) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4084, 0x0, @empty, 0xd}, 0x1c) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0x10}, {0x6, 0xe}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x40010) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r5 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r6], 0x54}}, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x40, 0x0) 12m43.175914713s ago: executing program 32 (id=2274): socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) socket$kcm(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x101201) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4084, 0x0, @empty, 0xd}, 0x1c) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0x10}, {0x6, 0xe}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x40010) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r5 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r6], 0x54}}, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x40, 0x0) 16.466123987s ago: executing program 3 (id=4849): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x2d, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x6c, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', r1, 0x7800, 0x1, 0x8, 0x6, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @private=0xa010100, @multicast2}}}}) request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0xfffffffffffffffa) r2 = syz_open_dev$sg(&(0x7f00000000c0), 0x2, 0x10040) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000100)={0x98, 0x4, 0xd9fa, "6381c3e6e7d8053eb21391302b11d47719f86b213494d36e7dbf9702557c897c5c9c9109ed7608f7b35ff777a990854f24f8170fa298ef5b0477f3449b1973d7162287f77fb95c71b2ea94c0a3f6b65166c7423bbcfa897894161ea29a502fb4ce0018a31a3adf1bb49ba52c9f6b33c1478f7759516bfeba858c1344672af4691d544f1edac32800d5b9b2457d1c9be45b60f7231b3bdf82"}) 16.336728464s ago: executing program 3 (id=4850): rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) pipe(&(0x7f0000000100)) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f00000000c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$packet(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x22, 0x6, @broadcast}, 0x14) r1 = socket(0x11, 0x3, 0xd) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0xc4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) splice(r3, 0x0, r5, 0x0, 0x25a5, 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socket$inet6(0xa, 0x80002, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @random="e5db029ea53c"}) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aac98fba38b633d4f418aaaaaa"], 0x0) 14.384993313s ago: executing program 5 (id=4854): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2a0, 0xffffffff, 0x170, 0x0, 0xa0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0, 0x0, {0x100000000000000}}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x7}, {}, 0xc}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="3232b3c71587", 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x31, 0x0, 0x2f]}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'wlan1\x00', 'team0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) madvise(&(0x7f0000eb3000/0x2000)=nil, 0x2000, 0x3) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000001980)={0x2, 0x1, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000019c0)={0x1814, r2, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CSA_IES={0x64, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0xb48, 0x6c3, 0x7fff, 0x3, 0x8, 0x9, 0x94f4]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x100, 0x0]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0xc, 0x80, [@peer_mgmt={0x75, 0x6, {0x1, 0x4e, @void, @val=0x27, @void}}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x15, 0x6, 0x9, 0x2ae]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x800, 0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x2, 0xffff, 0x4, 0x6, 0x54f5]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x3, 0x32bc, 0x0, 0xc, 0x1, 0x9, 0x1]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x31c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}], @NL80211_ATTR_CSA_IES={0x115c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x18, 0xba, [0x1, 0xf926, 0x7, 0x9, 0xd, 0xf, 0x49, 0x9, 0xadb, 0x1]}, @beacon_params=[@NL80211_ATTR_PROBE_RESP={0x62d, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0x7f, 0x80, [@mesh_id={0x72, 0x6}, @preq={0x82, 0x2b, {{0x1, 0x0, 0x0, 0x0, 0x1}, 0x3d, 0x9, 0x5, @device_a, 0x2, @value=@broadcast, 0x5, 0x40, 0x1, [{{0x0, 0x0, 0x1}, @device_a, 0xbb}]}}, @prep={0x83, 0x1f, {{}, 0x7, 0x4, @device_a, 0x9, @void, 0x100, 0x99d, @broadcast, 0x7ad2}}, @ht={0x2d, 0x1a, {0x2000, 0x3, 0x5, 0x0, {0x7, 0x6, 0x0, 0x265, 0x0, 0x1}, 0x300, 0x3, 0x32}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x61}}]}, @NL80211_ATTR_FTM_RESPONDER={0x210, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x44, 0x3, "d14a70ac951171e5cc6f8ff04096914b129c5650c599b771e63bb9c7f467cd7c95ba2e8dadd10a37585da7b64ebb061020892a0a41daa7dfba9fb3ca5cbc0f27"}, @NL80211_FTM_RESP_ATTR_LCI={0xe1, 0x2, "95a5d9866d01af9482883160163aafdceae8184b854f52513f13c7b3d466b4705f16d293e5e8028e49b9101f3dafa4c57acbf294b12b66a130da74f380bc7557a396fb93612b8b444905eb52b2a740d7927667c352fb94d12b5e73ece13a850f994f1902bb83bddd9256778372e66bba1930f466a4aa4e9e48a2f1dadbe6c5980ccdc762e825d0af21aba96dae7ed82ce21b5200ec6196da9082846e0f7ba9093e16a29304743106708a3ba2898a4ef1b6cebfe7966c922f2f783d2b9e7ec3dcbfc5276b5cbf0d1f159abfa253c20d055adb8082bb4dd75d197011567f"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xe0, 0x2, "99bcb38d5896403c0a8cdeba0d7403ce5291109e26e12aa3e5c01ea9b31a22c744039097d84906a84cce80e5ba3f25df2b26e2400463976a375f6cd1c8550c9af093d5bf3cc2c99679f389560b8d855e8d37e0484de572a7ab422bda67e9c7a7238c94c76264c53ba8cccb806b024c839cd0416986da0dee3ae95a6a867cdc438607bb51ec9206ff5bd4f7af2fcfaf9cf0bed51c825345020a0e46c7e7fde43f352f65a1ac5a61386025c0eaeacca273195589d08c8326887e648fda6d47273730b1c4fdf79431c049b4cab225c74198389e582c5e1506d2a0ef64a1"}]}, @NL80211_ATTR_BEACON_TAIL={0x7, 0xf, [@challenge={0x10, 0x1, 0x2b}]}, @NL80211_ATTR_IE={0x79, 0x2a, [@mesh_chsw={0x76, 0x6, {0x1, 0x10, 0x33, 0x5663}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x1}}, @ibss={0x6, 0x2, 0x9}, @mesh_chsw={0x76, 0x6, {0x4, 0x7, 0x26, 0x4}}, @supported_rates={0x1, 0x6, [{0x60, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x1}]}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x54, 0x24, 0x4}}, @preq={0x82, 0x36, {{0x0, 0x1, 0x0, 0x0, 0x1}, 0x9, 0x4, 0x300, @device_a, 0x5, @value=@broadcast, 0x42aa, 0x401, 0x2, [{{0x1}, @device_b, 0x3}, {{0x1}, @broadcast, 0x5ba9}]}}, @mic={0x8c, 0x10, {0x264, "b15d6a6881ba", @short="1f4158f81b35f4fd"}}]}, @NL80211_ATTR_PROBE_RESP={0x75e, 0x91, "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"}, @NL80211_ATTR_FTM_RESPONDER={0x7c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x75, 0x3, "cdd4dca6edf2af67da89821579b3e541a61b0528f2492c7340310ec84ff36ada58d4dd3610a33709c734279b8190d1c78e4ef1141cfdddb64fcd048248287f6a87ec813d29c6521281b96d5c6807464fefe8daaae6eb85c22e678364f868625fda64395167a4f8e9807a9193c29e653573"}]}, @NL80211_ATTR_BEACON_TAIL={0xc, 0xf, [@challenge={0x10, 0x1, 0x17}, @channel_switch={0x25, 0x3, {0x0, 0x6c, 0x40}}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x14, 0xba, [0x9, 0x3dbb, 0x5, 0xf19, 0x0, 0xb, 0x1, 0x3]}]}, @NL80211_ATTR_CSA_IES={0x60c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x7fff, 0x6, 0xfffd, 0x26d, 0x33, 0x7, 0x8]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x20b, 0x7f, [@tim={0x5, 0xd, {0xf7, 0xcc, 0x2, "a46de4c2be40bc96972d"}}, @ibss={0x6, 0x2, 0x9}, @perr={0x84, 0x8f, {0x5, 0x9, [{{0x0, 0x1}, @device_b, 0x1, @value=@broadcast, 0x35}, {{}, @broadcast, 0x4, @void, 0x2d}, {{}, @device_b, 0x2, @void, 0x2b}, {{}, @broadcast, 0x1000, @void, 0x3f}, {{}, @broadcast, 0x2, @void, 0x38}, {{0x0, 0x1}, @device_b, 0x45, @value=@broadcast, 0x3f}, {{}, @device_b, 0x147, @void, 0x3f}, {{0x0, 0x1}, @device_a, 0x1, @value=@broadcast, 0x34}, {{0x0, 0x1}, @device_b, 0x10, @value, 0x18}]}}, @challenge={0x10, 0x1, 0x51}, @measure_req={0x26, 0xe2, {0x5, 0xf3, 0x8, "e9adbc2b3f5ebfbb143367e42319fd0fbaba1529c6e47c569b8660ec1a8223cb43ba495ce23c107ce910e81dec6cccaba0fe1d156a00baea85edb03c3f0d234f7d948c9d288776adff718c61e558beb5ce7250ac2d6849a7579eb4e64ceb79abd5387c31a24a488838201918cd35224d7331d12368b8a49b51a86e11a735df14f1e8408ea773a5e8623108663d3b8da9bea228b3bdd33e4e807ad18c8518558f5fe73aa73171a91d2419630fe830841d55c64be5840ba874ec30b42e024079b94d07b6288724edcc40be58c06cb7f00f19415a72689d0c7f8c046febb3380c"}}, @supported_rates={0x1, 0x2, [{0x6, 0x1}, {0x6}]}, @measure_req={0x26, 0x18, {0x9, 0xf, 0x7, "dc9403035a04469838fe4a5b1b89c740012c91e41c"}}, @mesh_id={0x72, 0x6}, @mesh_id={0x72, 0x6}, @preq={0x82, 0x4c, {{0x0, 0x1, 0x0, 0x0, 0x1}, 0x5, 0x5, 0x5, @broadcast, 0xc, @value=@device_b, 0xd6a, 0x5, 0x4, [{{0x0, 0x0, 0x1}, @device_b, 0x40af}, {{0x1}, @device_a, 0xffffbd75}, {{0x1, 0x0, 0x1}, @device_b, 0x9}, {{0x1}, @broadcast, 0x8}]}}]}, @NL80211_ATTR_PROBE_RESP={0x3e6, 0x91, "fa405fddca63410a13a64d4ffd69937e3673713841962663c28508602fad79705e3396fc618b01b7ae159a070ec84795d5a833ba633e4e26a0ccf3a75ad3800ee31a0fc2531aa71563bb1c8da6c57a6b98af3f641279f6cb6d08c356cc496750d5b078678a500dce1bee5abadd63f26fae670142ab72f0b911f65de9555cf56561a49417da2699493e585e671e14a37166cb415c1f3548e15797e47b6cd2254f4e2b2436343fedbe7f3619f9542657c665a859ae50654078a5db3df6ad45d1448a76a994145567d00a250ec4f2c139eb33f14e2fd50c96501e72cff368e00932e2c3f0d49b3e29f1dddd22774040c215fcd108237ea8de309c3fecce8fb931bc80669f29b621256ab1ae73d383a0f5714899f44529b5ddece04c237ef247b21cb6578d890676b873d6f3572cc9e75115c107a1a8a4976b15a8975529ae816d30f706b09af89ecbf7e543f4a6642e11cf8f5eeb9c476b7036754af6c3be186f988fb2124f4d42fe14213353a8dbd8f1dc3c0564a669cac9c61c22a583410251bfaf6dbfc1af6363ffd35351d051f26875f266147fcb1333eb8628dc6bd78191cd57317a3ab8dd06852ab04306acfa3e73ab352e68e61e5c6b3fa2d76aca6902ebca69025ef5e89d3ec300f7c7beee46fed66e93546fe447a05674af2af9a3e7a38b57986bb81d6fccce6caaadc86274ccf9d4459f61e3122ec2115762f3773457867f48ca2b18640cb267add4e0182f75fe3158db93777090634cda509018385f5e8a547eb8ae91957277d1c777a74065246e065ee74cb4987838c99734f45e356da9463c6385b61676dafd88e4bd036242bed77901ad81081a0c982c522d1e0c0fee3cb6ff887683dcc299f32d5296a60c01ea54e573a5c1992a94825655484f0fd302c6326b8277dbb72ab44c89972667e3282200fd8903ccc6faaba3d2014c8f01286799722996a6a3b5823152ec2a7c97958cb3afa9748eee060f4f144a1323239db9b9f3ed785a9a5cb5cdbdd9b152cbacaed0e5a2af3421e94d23b454a8a26a866e7b082e85f8b5dbce3e9d144d6fccb4b7a100ffc663b2e7177fedb1c3f71d0a79df4fa29265db0aab894b3e9affdf2e98306c9109e8ef5e5a19b15cb9eba8c56d30fa477bb67111cc11c9046b51adb92a8a4ffeaf08416b3aa880d922291442a29c103e91759bb00ad7f70a5a0776ccc5e542b5525663a88c42167983c8e1e78e9b261733b68ee01ccc489e67a50434656bdd7457cfff418b3adf6e4dfd998bf1cb9ee77cb5f1565d6aa76a0956b07ba75d9e812a0f31e0d935bab98e2c187d20c1cbf56e46c06d5fd9b5a290aa7b9d6fd309a89ee09c67749ba0ea7cdc8fe6e2cfb1c3cba7e297e2e740f1861987ca078382ba099b001e9eb71f7c891e12"}]]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x22}]}, 0x1814}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x810) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 13.289187828s ago: executing program 5 (id=4858): r0 = socket(0xb, 0x80000, 0x10007) r1 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3) recvmmsg(r3, &(0x7f00000086c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c00)=""/4092, 0xffc}, {&(0x7f0000002c40)=""/196, 0xc4}], 0x3}, 0x12}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000540)=""/226, 0xe2}, {&(0x7f00000001c0)=""/37, 0x25}, {&(0x7f0000002d40)=""/4107, 0x100b}, {&(0x7f0000000640)=""/60, 0x3c}, {&(0x7f0000000840)=""/249, 0xf9}], 0x6}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x27}], 0x4, 0x10122, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000440)="2d476538e40bba2b43f8534a05d7d141efc5804eefe008f9bc8a0a9c4ec47a0b130f0764ae9eae3985b0ac4ec284b075a559e0e1bc0604aa7a3cdb2f6b0280756a147184e229484293f2a7658c54f9a9664914f1936f6940302c86b951d2cd4d6d98bc7c0fcce0fe4ab25f54fded9a214cdfd02c5cdd31616e4eec31b4ff6e2ad665015b2ba3d58c0767b5b025d30c440d838c596e6eac2d29fb744447b8acc1267d7aa5fe20451b58d1687c12fc322b801954c55b518b32a157eb2109d727920df3a3c3ef1c2efe9980f816678d2fb8df", 0xd1) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$can_bcm(r1, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES64=r1], 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x440c0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000280)={0x2, 'syzkaller1\x00', {0x8}}) sendmsg$can_bcm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4048884) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000940)=ANY=[@ANYBLOB="ec010000100004000000000000000000ac1e0101000000000000000000000000fe8000000000000000000000000000aa0000000020000000020000005c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb000000146c00000000000000000000000000000000000001feffffffffffffff3b790000000000000000000000000000fefffffff7ffffff01000000000000000000000000000000000000000000001000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000005000000000000000000800635000002000106040000482f52bb7882007b006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000980500009baf07ea5ed1949590218a1d94dc67bbb1a1a18c946545e8b4816897dd70612a743cc812c8bc36556c7999ab2d0d464dd55987a042bc691f270a1060091d9d83edcfde21f1f247ef13762671691274f6eb909486c9ec3a16382db96658c8f828ceed12933e788e6fc9f6e5affd309cc3b531653d83cb1752471299e09890aeac780bb5de887b9f9c7dec0f458b389af31fc1656fe20ac9a75f3983e036679686c63687e3afc22299f41ed7835e0a52fd7293f500"], 0x1ec}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000b40)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="804200000000000014000300776c616e30000000000000000000000008003a00", @ANYRES32=0x0, @ANYBLOB="0400f0962a92760c2d9c5cffcdb9ab55db2828c7b34c74dea0ec13bd041a46febde62a17a24354c4bc6ce24c939379e89a56521213046e2a8e1207e371fce376455155200f260a1d8d1088def97fc63dde0a1c7eb487eecabcac54ebde0165d689822cf157a1ce0d7681ec89ddc7818f0733b7a01fba5882d002815573a700a218db4ae4e926b4e9dc1d353f425e7cfd43aa013a76397f758f0000000000"], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000000680001000000000000000000020000000000000006000700070000000c000880050005000000000008000500", @ANYRES32=r5], 0x34}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000fcc30000000000000000000000c5"], 0x48) 9.143544308s ago: executing program 4 (id=4863): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000300)=0x2) ioctl$PPPIOCSACTIVE(r2, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r3 = syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x6b38, 0x10100, 0x0, 0x1eb}, &(0x7f0000000300), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0xab62, 0x20, 0x5, 0x1da}, &(0x7f0000000080)=0x0, &(0x7f0000001540)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x20001, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {}, 0x20000, 0x1, {0x0}}) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0x23d, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x3, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r10, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) 6.188741761s ago: executing program 3 (id=4865): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000d80)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x807}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1009}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x6, @string={0x6, 0x3, "9fdc678c"}}, 0x0, 0x0}, 0x0) syz_open_dev$media(&(0x7f0000000080), 0x1, 0x280) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x7, @string={0x7, 0x3, "9dd49d5938"}}, 0x0, 0x0, 0x0}, 0x0) 6.12245679s ago: executing program 4 (id=4867): socket$inet6_udplite(0xa, 0x2, 0x88) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001480)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, &(0x7f0000000040), 0x0, &(0x7f0000000940)=ANY=[], 0x590}}], 0x1, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x18b000, 0x160) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, 0x0, &(0x7f0000000040)) r4 = syz_clone(0x80120800, &(0x7f0000000440)="5e44a347c92b49b42e55c2aed9d9b482aa2d6d361e1c0df748b9d61119a5ea6d6c1704138f73245f862504f27275a0d0b5740c86aeda534a6008b9f97443ab84695b2b10cd25c1bca63f2840e5f05fe9eaa9c842b668c8d1a94b22d52921505595c76243701034d6c931b9c7392b79fce745dc7b7e1833d8", 0x78, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="800b4300"/16) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r5, 0x4, 0x42800) close(0x3) socket$inet6_sctp(0xa, 0x801, 0x84) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x100) socket(0x1d, 0x2, 0x6) pselect6(0x40, &(0x7f0000000240)={0x37, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xb, 0xdc}, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000300)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r8, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r8, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in=@initdev, @in=@multicast1}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000000680)=0xe8) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in=@initdev, @in=@multicast1}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000000680)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0, 0x0}, &(0x7f0000000700)=0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000740)) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000740)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000780), &(0x7f00000007c0)=0xc) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000780)={0x0, 0x0, 0x0}, &(0x7f00000007c0)=0xc) sendmmsg$unix(r1, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="68236b3872e0dc5ebf8ed33922ccaa39eb58c14bf70c681211c02360a618ec4ddf", 0x21}, {&(0x7f0000002680)="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", 0x1000}, {&(0x7f00000001c0)="107781996bb4d72d8bf5257f06b05dd7a889ddf0df734c2c038fc74884621f3eb5e6b3aa55903490e6b7f89ae17b6dd842d3a7d602bac115b1dc97bd52477e2b2203920a0e66224118ca821fca0ba56023f98db0fae8f3bf8969da79b81e4bc5e448b779bb246d67a99eb3f56537e04cecff92e2b45955809c9d93ad409e2175fbc427ef8bca23f1fbdf9ad2ed2cafacef832666d8698c40", 0x98}, {&(0x7f00000002c0)="af16012f7942f6cfdc6fe146b93602c6eeea4c1ee8", 0x15}, {&(0x7f0000000300)="630f0e5b577bd81e5f21396e3cead41de310a5ac7941aec95bd4260729431b3569ba12a3c88e12eb82d3c2d62b88cbcb44fc81d32ca66691e5a25941bef6f1d13d4cb8f729585c4b55b0868217f061b65819", 0x52}], 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="43df0000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r9, @ANYRES64=r9, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES8, @ANYRES32=r9, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x88, 0x5}}, {{&(0x7f00000008c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000dc0)="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", 0x14c}, {&(0x7f0000000cc0)="5bdfe5f0b99f95db59e3afef1018ba8ff6e4d5533da3f99234775351c3c05aca6d7cba8f28cb9a0d05840ec5c5e54cf710b9e91aea03d3696936a2fea55d7de8e9e7470f29c3c94b7d3bc851b727e6cb71ddc4eba9bd7e7171b6de2cf2c56dd9893d1604c4099e3638347342d28e505783e69ef8220c1a78f01332e1692728414da6cbe4f7dbaea0421fd108eb2a26003341b819d1d177019344bff560865147b5bbd187bb5031980861b5089f3c65dbac3f5091dbf076de9d6bbc52741667bfff5365264624a30bf60093b3c43f8e7bb25e98930ce5d9c4945741760eafe749ef01b73afb18ba", 0xe7}, {&(0x7f0000000b00)="db182551e6f13d559d37195f9e1d4191c177979fbf9b1da532b5eb4ea3f4c8f18a689c6df47ea4021f0e309f8ff4c5448c7731c6818360a030f72966c449e7c93fb69434d08ea036ad745661f7140aedc9eb4144fe7fd05eca695f34b0044b3a461c170321faf7f52b8a322f3b0048ec6b98ea5381ad8a94c10b33c69dc6a3902175ba3e6c07f0f800c76dd65fb677359129b0f1", 0x94}], 0x3, 0x0, 0x0, 0x800}}], 0x2, 0x20044004) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ptrace(0x10, r12) ptrace$setregs(0xd, r12, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r12, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) (async) ptrace$getregset(0x4205, r12, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) write$binfmt_register(r1, &(0x7f0000000c80)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x3ff, 0x3a, '{}*', 0x3a, '\x00', 0x3a, './file1', 0x3a, [0x46, 0x43, 0x46, 0x4f, 0x46, 0x0, 0x43]}, 0x32) 5.782097646s ago: executing program 4 (id=4870): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = fsopen(&(0x7f0000000140)='ocfs2\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000001c0)='acl\x00JN\xa0\xc3\xcd,\xebl>J\"f\xe7\xe0A\x04%\xb4\xd0\x7fb)\x9f\xd3\xeb\xfe\x8fi\xee\x02\x03\a\xb0p\xe9\xfe_\a0\xee\x82{\xa5\xbc\xb6\x8d\xe8\xe3K{H\xbc\xa0y+\xabL,\x8b^|#x\x85\xacc\xa5\xf3\xa7\x05Y~\xc3\xbag\x1d\x95\xcd\xaf\xd2\xd6\xc7v3\xe1r\xdbL\xcdPu\x91\xce\xa5\x86@vG\xb1t\x0f\xf2gg\xcb\xbc\xe9\x90\x00\xd5\xb2V0yZD/\xa1\x7f\xee{\xd3\xecN\xb1\xee\xb1\xb5\x1bu0=:\x84\xd5N2\xc5\x91\x8d\x12\xf7\xdd\xea\xad\xf8<$b\x8b\x89\x18\xe6\xaa\xf3\xa9\x01_\x9b\x89\x05\xc7\xb9\xac\xf5\xb8\x9d2\x8bt\x16\xe8\x9e\x02*\x8a\x83:\a\xef\xee\xeb\xf9\x96\xe9\b\v7`SN\xd1}s\xa7\x8c\x9bB\x13P\x11\x1fl\xc87\x96\xa2\x8f9\xfe\xb0Y~{=SU\xc8D\xe8(\x1c\xffQ\xa9\xdfY06\x19\xa7\x91&\x03Q\x95\xda\xde\x17\xd4\x954\xf8\xa6\xfad:c\xf4\xaa\x99\xcb\xd2GtO', 0x0, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x12f, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x805}, 0x4000001) socket$inet6_sctp(0xa, 0x5, 0x84) set_mempolicy(0x2, &(0x7f00000000c0)=0x8, 0xf5) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) socket(0x10, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) 5.781510228s ago: executing program 5 (id=4871): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x101, 0x4) sendmmsg$inet6(r1, &(0x7f0000006b80), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) landlock_restrict_self(0xffffffffffffffff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x25, 0x0, &(0x7f0000000040)) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) migrate_pages(0x0, 0x1fc, &(0x7f00000002c0)=0x7, &(0x7f00000003c0)=0x20000000000005) sendmmsg$inet(r5, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)}, {&(0x7f0000000d40)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a12", 0x55}], 0x2}}], 0x1, 0xc0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendto$inet(r5, &(0x7f0000000300)="09268a9234f8b358387f1f6588b94b481241ded8974895abfab7511e6e9532120200000000000086b7c4fff5575470f7385a78182eeaea563a905780232726ffbcb5e8d06ec5161ab4b4317995652dc20915e12a020fe3e2bf05b39e5c14312c2f7efc25b5575a7697a9240b578ac6971c54aec0b1ee3d84056a80e7878b37568b295a57f59a9f599bd5ccf5a12920e47c2d37f9140a41ed0ec9392f997c", 0x9e, 0x4000080, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x64, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x20000000) 3.916591086s ago: executing program 5 (id=4877): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffe5) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) read(r2, &(0x7f0000000b80)=""/215, 0xd7) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000000)={0x32f, @tick=0xfffffffc, 0x0, {0x6}, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f00000006c0)={0x400, 0x2, 0xe}) tkill(r1, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000280)="f56af9363c8b6ce8d7e91aee82200165028ab6097b504dc671a2d7bae2122981057102185ca032a92084239ebf625453d701d1c907f1bb18ba756349a1956a1aa0b7446c57358f783bb31be2ba1766504e211ebe375d98a152de08d618e1eeb6cf954ccd5097f29c5c79dae9d70e8420028df3c4b953b5ec235fea66e3f40114b91953ab07320c0b7229068771226ddc33911bfa1fe51603526a4bbc6ea674958c79c38268bde5ada329cab316bbff6f0d38b4f2d675e79363443e58d21dadd093c7081425900c2e31f8c56daf0a4a237ba178c6a5be4c317ea391f3c198e0dd359a4e6e3e6ba9c35c62ec66f8", 0xed}, {&(0x7f0000000140)="3efcac265bcedbf7044f77e53d584b1f7d5eb05dfd9c2592d2e2bbf5dfaf131c6cefb6f7a148dcf95b9f9edd51ee5b426798b7cde3344db1473b281994fbeb6882b4d6b434caa80a7a23e658baa643bed81e4e903dfd9ead9775ebf63071faf1e5d881131cff542b58794b41be4a216469d7cd7533d08e04e46a", 0x7a}, {&(0x7f0000000480)="d349f896d37fd868d9994bc0ecec2cc203ef4d1fbf676fa64e0ec46eadb2f19499e1f7814cb68fe5a272de372c1a3de22979be35ee7d2abd3c4bd3e19cedfc45347a64d544ba46642700c66434291cde64a5550ff8367faa5ae56d06e3e53be4cb21ba14c9df7fb6695dc8ac36c58195bec7e81180b5f8296a492f2f6523475821174ffb4df937252315f91c064fa2320a61d4cc36ea933511d41ddb9886c0e6bedcfa39a16e75e27c940d8a49e5c9570060c2c238cb926a59978c3d9659145ef66af9dca937001f4e", 0xc9}, {&(0x7f0000000380)="2b763976f2dd36dfb61d4742cd8f2ed001441596ede213a0d7196a1e992fb6ecf64f4d6a065eef5bdf0ebe9f89e72c157267ce62c0b023ee20e049c6809700a7bb24d5d8f2544f6a99ecdc799b82bacfe48aac8e1656c64ef1896e616167c93ad1f75387feb482afc6b80dc5741aae92530fd555487ac8cf54acb48855dec35d3f3f1d", 0x83}, {&(0x7f0000000580)="85a8e302bdf0d3604708cdf149c930e5dfdbd36775e7b1c374d0f1b3be36a3039bfa792c7ad5de3f6d9c997b2191eecdb7a3c9becf62f40ad0b822e7b9665d31796e0d8029c0081da538621af158de948f6fc141b59306eeaac6054fb695d3a124dc", 0x62}, {&(0x7f0000000880)="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", 0xfe}, {&(0x7f0000000600)="fd63b757fccbd04c539b8a355c193328da9ae6ba7a5317e23cc48ecfed8d623d9981c12f9f1521c5796b5539531d1f138aea3ba02c0508cc404bdb4502e0c617939b51b54b7e72422f5d40e402aaa441099d08c0d925c7aeaf27b7dfc0f3a60c12ba76c40ab2573caaaefa3a", 0x6c}, {&(0x7f0000000740)="90ef355075fe22cbd33136e57507fe079f5f9cb5fcf58e73332d23714b7968ef795df446b5e58facf78ed0999a0480f690601c17027f2d79882f2e76971a0b55731567337268d4d8f9f75ae0fe96f1b9d3c4a6aa5f87aed36adc16938c28df98bccea3d234000ce146e8dbe5a12595abde8df1c8c539ab8c559bafb42baefb8ee48b4d520f750a4c", 0x88}, {&(0x7f0000000ac0)="ac6b8b2534d33462f6589d661086ba03db220aaecc063d615704021487732f7133a80aef950461d7ef1168483680359ce4f894b33890634075ed83c84b06af8dbdef57476a39e416597b7ff7f3da62ba7c", 0x51}], 0x9, 0x0, 0x0, 0x2c}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000440)={0x2, &(0x7f0000000980)=[{0x7, 0x67, 0xfc, 0xfffff02c}, {0x6}]}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x440200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000004440)=""/5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3.348900249s ago: executing program 3 (id=4881): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x2, @local, 'ip6_vti0\x00'}}, 0x1e) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_open_dev$usbmon(0x0, 0x6, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000240)={0x94, 0x0, 0x8000000}) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000000)) 3.257400511s ago: executing program 1 (id=4883): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/188, 0xbc) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_disconnect(0xffffffffffffffff) (async) unshare(0x28040680) (async) r2 = timerfd_create(0x0, 0x0) timerfd_gettime(r2, &(0x7f0000000000)) (async) syz_usb_disconnect(r0) 2.988203178s ago: executing program 1 (id=4884): r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x7, 0x109800) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x90, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x67dc291e}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x3c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x37, 0x5, "92fdafe1ecc3b97e13de0182d9554a54cfe21312de35f6ec5db087866d909223a8783879a9fc0013defcab50821bf1397eb7bf"}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) statx(r0, &(0x7f0000000240)='./file0\x00', 0x100, 0x4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x90000, &(0x7f0000000380)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x8}}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions}, {@default_permissions}, {@default_permissions}], [{@dont_measure}, {@appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x37, 0x36, 0x38, 0x39, 0x36, 0x39, 0x39], 0x2d, [0x63, 0x61, 0x33, 0x34], 0x2d, [0x66, 0x31, 0x36, 0x66], 0x2d, [0x36, 0x61, 0x63, 0x66], 0x2d, [0x38, 0x37, 0x67, 0x36, 0x65, 0x62, 0x37, 0x33]}}}, {@seclabel}, {@dont_hash}]}}, 0x0, 0x0, &(0x7f00000004c0)="aae1be0ad4f2a09dbd7365bc2cd27bed78ec8893aecb145c03f6bfa11497bd55aaa307f1990b42c0c27aca0830f1af7033ccfbd0b7ebd7e62c5855c2d029f18c03dd14b18751651382c676b0dd1b94112dd636ba805b6de46b6623b980b3a8da227cbaa3f424738f98d0e90e8e278d2b78c5c3b38b6c53e5912a5247597c47dc6e9ad860b80dfc6bdea2f0e7acb357c66995b239740d75b3a9d1c206d41ecb382b1a09e4956c71982971c9b21ee026b313d3903a8c85f4a00aee19719609b7583f38c8334beb453b111bc34e2585e001b6714cffd2b4f401edd8c7e49a3a597cc8") (async) r2 = syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x90000, &(0x7f0000000380)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x8}}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions}, {@default_permissions}, {@default_permissions}], [{@dont_measure}, {@appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x37, 0x36, 0x38, 0x39, 0x36, 0x39, 0x39], 0x2d, [0x63, 0x61, 0x33, 0x34], 0x2d, [0x66, 0x31, 0x36, 0x66], 0x2d, [0x36, 0x61, 0x63, 0x66], 0x2d, [0x38, 0x37, 0x67, 0x36, 0x65, 0x62, 0x37, 0x33]}}}, {@seclabel}, {@dont_hash}]}}, 0x0, 0x0, &(0x7f00000004c0)="aae1be0ad4f2a09dbd7365bc2cd27bed78ec8893aecb145c03f6bfa11497bd55aaa307f1990b42c0c27aca0830f1af7033ccfbd0b7ebd7e62c5855c2d029f18c03dd14b18751651382c676b0dd1b94112dd636ba805b6de46b6623b980b3a8da227cbaa3f424738f98d0e90e8e278d2b78c5c3b38b6c53e5912a5247597c47dc6e9ad860b80dfc6bdea2f0e7acb357c66995b239740d75b3a9d1c206d41ecb382b1a09e4956c71982971c9b21ee026b313d3903a8c85f4a00aee19719609b7583f38c8334beb453b111bc34e2585e001b6714cffd2b4f401edd8c7e49a3a597cc8") ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0, {r2}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0, {r2}}, './file0\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000600), r0) sendmsg$nl_route(r4, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)=@ipv4_getnetconf={0x44, 0x52, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x2}, @NETCONFA_FORWARDING={0x8, 0x2, 0xfffff013}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x7}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x34c}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004004}, 0x8000) (async) sendmsg$nl_route(r4, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)=@ipv4_getnetconf={0x44, 0x52, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x2}, @NETCONFA_FORWARDING={0x8, 0x2, 0xfffff013}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x7}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x34c}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004004}, 0x8000) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r3) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r5, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x51}}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1cd}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004850}, 0x24000000) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000008c0)={0x6, 0x6}) fstatfs(r7, &(0x7f0000000900)=""/47) (async) fstatfs(r7, &(0x7f0000000900)=""/47) r8 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000940), 0x800, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000a40)={'ip_vti0\x00', &(0x7f00000009c0)={'tunl0\x00', 0x0, 0x1, 0x7800, 0x80, 0x0, {{0xc, 0x4, 0x1, 0x4, 0x30, 0x64, 0x0, 0x8, 0x2f, 0x0, @remote, @empty, {[@generic={0x0, 0xd, "f81d66ca2f88dd2efbf900"}, @timestamp={0x44, 0xc, 0x78, 0x0, 0x2, [0xffffff44, 0x3]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000b00)={'sit0\x00', &(0x7f0000000a80)={'syztnl0\x00', 0x0, 0xd0, 0x90, 0x80000000, 0x101, {{0x10, 0x4, 0x3, 0x9, 0x40, 0x68, 0x0, 0x7, 0x2f, 0x0, @local, @private=0xa010100, {[@timestamp_prespec={0x44, 0x2c, 0x58, 0x3, 0x2, [{@multicast2, 0x100}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x2}, {@remote, 0x8}, {@multicast2, 0x4}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000b00)={'sit0\x00', &(0x7f0000000a80)={'syztnl0\x00', 0x0, 0xd0, 0x90, 0x80000000, 0x101, {{0x10, 0x4, 0x3, 0x9, 0x40, 0x68, 0x0, 0x7, 0x2f, 0x0, @local, @private=0xa010100, {[@timestamp_prespec={0x44, 0x2c, 0x58, 0x3, 0x2, [{@multicast2, 0x100}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x2}, {@remote, 0x8}, {@multicast2, 0x4}]}]}}}}}) sendmsg$nl_route(r9, &(0x7f0000000bc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)=@getnexthop={0x30, 0x6a, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NHA_MASTER={0x8}, @NHA_OIF={0x8, 0x5, r10}, @NHA_OIF={0x8, 0x5, r11}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x4054) (async) sendmsg$nl_route(r9, &(0x7f0000000bc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)=@getnexthop={0x30, 0x6a, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NHA_MASTER={0x8}, @NHA_OIF={0x8, 0x5, r10}, @NHA_OIF={0x8, 0x5, r11}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x4054) r12 = openat(r8, &(0x7f0000000c00)='./file0\x00', 0x640402, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) (async) r13 = socket$inet_smc(0x2b, 0x1, 0x0) r14 = socket$inet(0x2, 0x6, 0x0) recvfrom(r13, &(0x7f0000000c40)=""/107, 0x6b, 0x40002040, &(0x7f0000000cc0)=@pppol2tpin6={0x18, 0x1, {0x0, r14, 0x3, 0x3, 0x4, 0x3, {0xa, 0x4e20, 0xfffffff9, @loopback, 0x6}}}, 0x80) (async) recvfrom(r13, &(0x7f0000000c40)=""/107, 0x6b, 0x40002040, &(0x7f0000000cc0)=@pppol2tpin6={0x18, 0x1, {0x0, r14, 0x3, 0x3, 0x4, 0x3, {0xa, 0x4e20, 0xfffffff9, @loopback, 0x6}}}, 0x80) syz_usb_connect$cdc_ncm(0x6, 0xa0, &(0x7f0000000d40)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x2, 0x1, 0x0, 0x40, 0x55, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "eb8532"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x59a6, 0x4, 0x6, 0x81}, {0x6, 0x24, 0x1a, 0x1ff, 0x4}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0xc1, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x7}, @country_functional={0xa, 0x24, 0x7, 0x81, 0xf, [0x774, 0x4]}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x0, 0x40}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0xf7, 0x0, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf, 0x81, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0xa83ab9cc33adc3d2, 0x20, 0x2, 0x1}}}}}}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000e00)={0xa, 0x6, 0x300, 0x8, 0x7f, 0xf, 0x40, 0x1}, 0x10, &(0x7f0000000e40)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x42, 0x4, 0x4, 0x0, 0x4}]}, 0x3, [{0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x1809}}]}) (async) r15 = syz_usb_connect$cdc_ncm(0x6, 0xa0, &(0x7f0000000d40)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x2, 0x1, 0x0, 0x40, 0x55, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "eb8532"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x59a6, 0x4, 0x6, 0x81}, {0x6, 0x24, 0x1a, 0x1ff, 0x4}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0xc1, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x7}, @country_functional={0xa, 0x24, 0x7, 0x81, 0xf, [0x774, 0x4]}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x0, 0x40}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0xf7, 0x0, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf, 0x81, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0xa83ab9cc33adc3d2, 0x20, 0x2, 0x1}}}}}}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000e00)={0xa, 0x6, 0x300, 0x8, 0x7f, 0xf, 0x40, 0x1}, 0x10, &(0x7f0000000e40)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x42, 0x4, 0x4, 0x0, 0x4}]}, 0x3, [{0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x1809}}]}) syz_usb_control_io(r15, &(0x7f0000001100)={0x2c, &(0x7f0000000f80)={0x0, 0x4, 0x56, {0x56, 0xb, "26a3e09841e9b2cd8e270235529cf1e226067bbb7c08f195027d0b4335f0dfe51da982ab57966c6f87a3f5b6efd603245ea89f184949df5cc5f110c3a938af2636eed1dee88d924c98800722a20888afe8b46ab0"}}, &(0x7f0000001000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x458}}, &(0x7f0000001040)={0x0, 0xf, 0xb, {0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}}, &(0x7f0000001080)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc, 0x0, 0x8f, 0x7, "d5a3e78d", "f311bd52"}}, &(0x7f00000010c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x4, 0x8c, 0x0, 0x2, 0x7, 0x200}}}, &(0x7f0000001600)={0x84, &(0x7f0000001140)={0x20, 0x18, 0xca, "8553ed24b12fde30adf63fbade06b8b42f1966af39fb85a2a5897fc3935435e42ccd7f5b7f3c3319741b00c334231974955d58dff2711c2bbcedcbff02ea2fb3b1258f17b02f98787906f3844d151022b20a8c41687728accb957df3cbe161d0e6286fac1f41443129aa564f3135806b5fee14778829f477c8a80a57ae1e29a92fabae114c6abbc51f4a344117fe55744199cc252db84e214af9250c717326002b426fd2381e3ae72367c11a69376a67dbf602eaae4b43b399558ec8e84a3d40911c07f985beb2e1d212"}, &(0x7f0000001240)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001280)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000012c0)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000001300)={0x20, 0x0, 0x8, {0x40, 0x80, [0xf]}}, &(0x7f0000001340)={0x40, 0x7, 0x2, 0x200}, &(0x7f0000001380)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000013c0)={0x40, 0xb, 0x2, "d282"}, &(0x7f0000001400)={0x40, 0xf, 0x2, 0xd}, &(0x7f0000001440)={0x40, 0x13, 0x6}, &(0x7f0000001480)={0x40, 0x17, 0x6, @local}, &(0x7f00000014c0)={0x40, 0x19, 0x2, "4bbf"}, &(0x7f0000001500)={0x40, 0x1a, 0x2}, &(0x7f0000001540)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000001580)={0x40, 0x1e, 0x1, 0xfa}, &(0x7f00000015c0)={0x40, 0x21, 0x1, 0x9e}}) r16 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r16, 0x8008ae9d, &(0x7f0000001700)=""/4096) bpf$MAP_CREATE(0x0, &(0x7f0000002700)=@base={0x1f, 0x8, 0x0, 0x2c3a, 0x40048, r0, 0x7, '\x00', r11, r12, 0x2, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r13, &(0x7f0000002780)={0x1}) (async) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r13, &(0x7f0000002780)={0x1}) 2.979238431s ago: executing program 5 (id=4885): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x99a8, 0x80, 0x0, 0x34f}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) (async, rerun: 32) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYRES8=r3, @ANYRES32=r0], 0x0) (async, rerun: 32) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0xc0402) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045520, &(0x7f0000000080)=0xffffbf7f) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000002400)=ANY=[@ANYBLOB="0100000000f2ffff00000040"]) (async) recvmmsg(r1, 0x0, 0x0, 0x2020, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) r8 = gettid() (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r10, 0x25, &(0x7f0000000000)={0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r10, 0x26, &(0x7f00000000c0)={0x2, 0x1, 0x10, 0x6}) (async) close_range(r9, 0xffffffffffffffff, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x0, 0x0) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x12, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x4}, 0x0) socket$key(0xf, 0x3, 0x2) (async) ioprio_set$uid(0x3, 0x0, 0x0) (async) r11 = syz_open_dev$loop(&(0x7f0000000000), 0x75f, 0x1e380) sendfile(r11, r11, 0x0, 0x24002de8) (async) mbind(&(0x7f0000069000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x6) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010000304000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="a5f9ad8800000000300012800b000000000000000000aa08000200e000000100"/57], 0x50}}, 0x0) 2.43406003s ago: executing program 2 (id=4886): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002ebd7000fc0000001400000018000180140002006e657464657673696d3000000000000005000b000100000008000d000d000000080009000900000008000a"], 0x4c}}, 0x0) 2.204602821s ago: executing program 4 (id=4887): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x101, 0x4) sendmmsg$inet6(r1, &(0x7f0000006b80), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) landlock_restrict_self(0xffffffffffffffff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x25, 0x0, &(0x7f0000000040)) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) migrate_pages(0x0, 0x1fc, &(0x7f00000002c0)=0x7, &(0x7f00000003c0)=0x20000000000005) sendmmsg$inet(r5, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)}, {&(0x7f0000000d40)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a12", 0x55}], 0x2}}], 0x1, 0xc0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendto$inet(r5, &(0x7f0000000300)="09268a9234f8b358387f1f6588b94b481241ded8974895abfab7511e6e9532120200000000000086b7c4fff5575470f7385a78182eeaea563a905780232726ffbcb5e8d06ec5161ab4b4317995652dc20915e12a020fe3e2bf05b39e5c14312c2f7efc25b5575a7697a9240b578ac6971c54aec0b1ee3d84056a80e7878b37568b295a57f59a9f599bd5ccf5a12920e47c2d37f9140a41ed0ec9392f997c", 0x9e, 0x4000080, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x64, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x20000000) 2.116664865s ago: executing program 2 (id=4888): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) add_key(0x0, 0x0, &(0x7f0000000100)="305c0605e182d1447ad1ad83700398d1c7d7", 0x12, 0xfffffffffffffffe) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES32=0x41424344], 0x0) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xffffffffffffff02, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000d0000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000c2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073797a30"], 0xc0}}, 0x0) openat2(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x400080, 0x61, 0xc}, 0x18) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r8 = syz_pidfd_open(r7, 0x0) pidfd_send_signal(r8, 0x2, 0x0, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r9, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[], 0x2e8}}], 0x2, 0x0) 2.088257063s ago: executing program 1 (id=4889): ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x9, 0x0, 0x2, 0xf, 0xc7, "d6e4ef99f523b6fe18ef5aa5f3d2c3b7d25813", 0xed, 0xcac6}) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000040)="e56e6f5fd774e137e6ea2a97bd76b2e06e5a647c1c2e21bbe55528137d6adb1b2a720d8e43dbd980098c0f49c307ab0c37a50fd2c2f0cca86ad1010d666b11f4de00c21dc05ac04dc39654da513f29341e3803e5cac4ecea1298516d81e7472a2cafb11b17a3222948ce04c7b8ee4827c53b0c7c540c0d941c260248df51c61839fdc0340e796079e376a4490b5c7644176bfaec60ecef56260787667d4e946e8aa942b0e21eb35324088ed3c77b4ec463ca6d7678faad4266296b194873", 0xbe}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010000000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x9, 0x0, 0x2, 0xf, 0xc7, "d6e4ef99f523b6fe18ef5aa5f3d2c3b7d25813", 0xed, 0xcac6}) (async) socket$inet(0x2, 0x2, 0x0) (async) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) (async) socket$netlink(0x10, 0x3, 0x0) (async) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000040)="e56e6f5fd774e137e6ea2a97bd76b2e06e5a647c1c2e21bbe55528137d6adb1b2a720d8e43dbd980098c0f49c307ab0c37a50fd2c2f0cca86ad1010d666b11f4de00c21dc05ac04dc39654da513f29341e3803e5cac4ecea1298516d81e7472a2cafb11b17a3222948ce04c7b8ee4827c53b0c7c540c0d941c260248df51c61839fdc0340e796079e376a4490b5c7644176bfaec60ecef56260787667d4e946e8aa942b0e21eb35324088ed3c77b4ec463ca6d7678faad4266296b194873", 0xbe}], 0x1) (async) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async) socket$inet(0x2, 0x2, 0x0) (async) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) (async) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010000000004"], 0x57) (async) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) (async) 1.874753263s ago: executing program 1 (id=4890): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x88, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x10000000, 0xffffffffffffffff, 0x0, 0x0, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000300)={{@hyper, 0xd}, 0x1}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r6, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xb0, 0x0, 0x0, [{{0x200000000000, 0x0, 0x0, 0x2, 0x0, 0x0, {0x2, 0xfffffffffffffffe, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa000, 0x0, 0x0, 0x0, 0x2000, 0x8000}}, {0x0, 0xfffffffffffffffe, 0x1, 0xf79, '\x00'}}]}, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x21, 0x0, 0x1120081, 0x1, 0x0, 0xfffffffd}}, 0x50) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0xa000, 0x0) readv(r7, &(0x7f0000002540)=[{&(0x7f0000000280)=""/34, 0x22}, {0x0, 0x18}], 0x2) fcntl$lock(r7, 0x26, &(0x7f0000000140)={0x2, 0x3, 0x8, 0x7, r2}) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000000c0)=@rnullb, 0x0, &(0x7f0000000780)='./file0/../file0\x00') r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8100, &(0x7f0000001dc0)={0xf, 0x84, 0x20000}, 0x20) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 1.692632319s ago: executing program 5 (id=4891): r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12015001020000102505a1a440000102030109025c0002010000000904000001020d00000524060001052400a2000d240f01f9fffffffdff08000006241a0000080905810300040000000904010000000000000904010102020d00000905820210000000000905030240"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_disconnect(r1) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000000)={0x20, 0x23, 0xca, {0xca, 0x21, "a83e953289b0fe672c630062c0f3df5c63d792c9a9d76d07b8e519b32d73a9aff50fa42cefa460339ef19c37ad714b04e9cdcdde7606d1e7bd3e95cd7b56fbac0bf31663ade43a90f3dc1aaa20604116ab789d56a1114e15a29507523bd81db1b31bdb01cc9599662118b755f9dc2cc151f298488b72fbd32e124eec5fc872f02a5aff817c20f12e6419c389294de8c6a0994b0a2fb69558ed80f23f0ced146bd2cf5e854d95bd895a605740bd8003709fdac09063bee948ee9035feb3cd20502e1b28290602a7a8"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x411}}, &(0x7f00000001c0)={0x0, 0x22, 0xc, {[@main=@item_4={0x3, 0x0, 0xc, "d285c8f9"}, @main=@item_012={0x1, 0x0, 0xa, "ce"}, @main=@item_4={0x3, 0x0, 0xc, "a5681692"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x800, 0xdc, 0x1, {0x22, 0xd3a}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x20, 0x17, 0x45, "0618c3484c472b4e541242a1466aee5d41ae3916081b4111dc612c9adcd92f1980f68a952ba1b7f54f549650b473232e6a992b882bcd81f6d2707735055d427dfb604d819d"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x1, 0x2d, "11afa4c1e876a92f661268d32ec28d38f848c9366fc633fb92414d14cfca6a6582a3d23e319db2798863b12efe"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x5}}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000002680)={0x44, 0x0, 0x0, 0x0, &(0x7f0000002540)={0x20, 0x80, 0x1c, {0x1, 0x5, 0x6, 0x6, 0x6, 0x0, 0x8a81, 0x5, 0x68, 0x1ff, 0x4, 0x3}}, 0x0, 0x0, 0x0, 0x0}) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="7c010000190001000000000003000000ac141425000000000000000000000000fe8000000000000000000000000000aa00000000fffd00060a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000c4000500fe880000000000000000000000000101000004d62b000000020000000a0101020000000000000000000000000000000004030700080000000400000001000000fe80000000000000000000000000004c000004d66c00000002000000fc0000000000000000000000000000010135000002007300018000000400000006000000ff010000000000000000000000000001000004d43200000002000000fe8000000000000000000000000000bb02350000b901"], 0x17c}}, 0x10) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (rerun: 64) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000c00)={0x14, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1.627863253s ago: executing program 3 (id=4892): unshare(0x68040200) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0xfffe, @local}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @private}, 0xd0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7725, 0x5, 0x2000}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x14, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="24000000200001030000000001000000020000e0"], 0x24}, 0x1, 0x0, 0x0, 0x200480d4}, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000011c0)=[@in={0x2, 0x4e23, @private=0xa010100}]}, &(0x7f0000000180)=0x10) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000001180)) unshare(0x42000000) 1.536633081s ago: executing program 2 (id=4893): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0xac, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8002}, [@IFLA_LINKINFO={0x84, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x74, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x57, 0x1, {0x5, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xfffffdca, 0x1, {0x8, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x8c}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x4}}]}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0xf85a}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff, 0xa3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff}}, @IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0xac}}, 0x0) (async, rerun: 64) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001880)=ANY=[@ANYBLOB="64000000150001002abd7000fbdbdf257f000001000000000000000000000000200100000000000000000000000000014e2200104e2300000a00a0803b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b96b6e00020f0000a4c0e95b030000000a0010000000000000000000"], 0x64}}, 0x0) (rerun: 64) 1.103340651s ago: executing program 2 (id=4894): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) connect$qrtr(r5, &(0x7f0000000100)={0x2a, 0x2, 0x1}, 0xc) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, 0x0, 0xfffffffffffffd69}], 0x1, 0x6fcef00345e8684, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x24000000}, 0x8) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}]}}}]}, 0x40}}, 0x40080) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x850}, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r5, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, 0x6, 0x2, 0x1ed}) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000000)={0xc1, 0x0, 0x3}) 896.712834ms ago: executing program 1 (id=4895): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000057fa3f600"/28], 0x50) write$hidraw(0xffffffffffffffff, &(0x7f0000000ec0)="3de9cbd8eb319cb7e246697fc44873510fd335a0bae715de0b1e324691327169dfad8808ed3fb47c139625163807b9aa81564c9a73eeace6a39876642fd080ef6acdde866a23", 0x46) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000100)="26c2", 0xfffff, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x9, 0x8001, 0x71, @private2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x4df, 0x7, 0x1}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0), 0x40000, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2410004}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x88, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x4}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r5, 0xc038563b, &(0x7f0000000080)={0x3, 0x2, @raw_data=[0x8, 0x0, 0xc, 0x0, 0xc, 0x0, 0x10000, 0x2, 0x0, 0x1, 0xffbfffff, 0x400000, 0x5, 0x1, 0x20, 0xffffffff]}) r6 = syz_io_uring_setup(0x777a, &(0x7f0000000400)={0x0, 0xce83, 0x4001, 0x2, 0x2c4}, &(0x7f0000000300), &(0x7f0000000480)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r0}, 0x38) 704.652492ms ago: executing program 3 (id=4896): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x1, 0x0, 0x0, {[@md5sig={0x13, 0x12, "473ecfd2106a00"}]}}}}}}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfffffff9}]}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203, @void, @value}, 0x94) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x2, 0x2ff7afedf}, 0xc) r7 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r7, 0x80044dfe, &(0x7f0000000300)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000008c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x600}}, {@max_read={'max_read', 0x3d, 0x3}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3}}, {@blksize={'blksize', 0x3d, 0x1400}}, {@blksize}]}}) r8 = socket(0x10, 0x2, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0x80000000, 0x0, 0x0, 0x3, 0x0, 0x10, 0x6, 0x0, 0x2, 0x0, 0xa, 0x0, 0x4}, {0xa, 0x0, 0x0, 0x0, 0x40, 0x1, 0x8, 0xff, 0x7, 0x0, 0x4, 0x0, 0xfffffffffffffff7}, {0x200000, 0xc, 0x21, 0x53, 0x0, 0x2, 0x0, 0x0, 0x58, 0xb, 0x0, 0x0, 0x8080}], 0x3fb}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="2ea8d2811b2a246ba8a8a78787aee7bb20c96807b6d8761f859ec6fa331e777591ed11248a94c0cfc19c61fe7c081ddaf685d4d5b414a01ac8d511cfb5d75e8878514da879142e585b1f9213b0f04d67baae20dd2e742f1286afc7a9bb0ad44aa05e2e3db382651792f2945409e7c6dda83d14fef1fb50a3cb8d0a189d28277f501a04c5d4414479db27bd23c1fbdf28124c317129fe42ebf9", @ANYRES32, @ANYRES8, @ANYRES64, @ANYRESOCT=r2, @ANYRES32, @ANYRES16, @ANYRESDEC=r5], 0x30}, 0x1, 0x0, 0x0, 0xc885}, 0x4000880) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000200)={{r9, r10+10000000}}, &(0x7f0000000880)) 640.533673ms ago: executing program 2 (id=4897): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) openat$audio(0xffffff9c, 0x0, 0x80, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@getneightbl={0x14, 0x42, 0x4, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4840) (async) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000001c0)=@mmap={0x0, 0x1, 0x4, 0x20, 0x0, {0x77359400}, {0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x291d}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000100)=0x1) (async) r5 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) (async, rerun: 64) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) (async, rerun: 64) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c000000000201040000000000000000020000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c0002800500010000000000300001802c000180100003"], 0x8c}}, 0x0) (async) socket$inet6_sctp(0xa, 0x801, 0x84) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x200, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=@newtfilter={0x38, 0x2c, 0xd2b, 0x10000, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x16}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) (async, rerun: 64) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}}], 0x2, 0x0) (async, rerun: 64) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) (rerun: 64) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=@delqdisc={0x260, 0x25, 0x200, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x3, 0x9}, {0x6, 0xffe0}, {0xfff2, 0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0x5, 0x31, 0x8, 0x2, 0x5, 0x5, 0x4}}, {0xc, 0x2, [0x5, 0xd8c, 0x9ef, 0x4000]}}, {{0x1c, 0x1, {0x2, 0x9, 0x1, 0x1, 0x2, 0x8, 0xfffff678, 0x1}}, {0x6, 0x2, [0x3]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x10}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_RATE={0x6, 0x5, {0x2, 0x6}}, @qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x5, 0x8, 0x80000000, 0x2}, 0x1, 0x0, 0xbe, 0x9, 0x1, 0x10, 0x8, 0xc, 0x4, 0x9, {0x0, 0x7, 0x2, 0x8001, 0x4, 0x100}}}}, @TCA_STAB={0x178, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2a, 0x7, 0xffff, 0x7fffffff, 0x1, 0x2, 0xe4, 0x2}}, {0x8, 0x2, [0x3ff, 0xc2da]}}, {{0x1c, 0x1, {0x8d, 0x4, 0x7, 0x5, 0x1, 0xfffffffd, 0x7, 0x4}}, {0xc, 0x2, [0x8001, 0x9, 0x2, 0x1]}}, {{0x1c, 0x1, {0x7f, 0x6, 0x5, 0x1, 0x2, 0x7fffffff, 0x6e25, 0x4}}, {0xc, 0x2, [0x6, 0x9, 0x4, 0x287]}}, {{0x1c, 0x1, {0x8, 0x8, 0x8, 0x6, 0x2, 0x7, 0x36dc, 0xa}}, {0x18, 0x2, [0x0, 0x0, 0x3ff, 0x80, 0x5, 0x6, 0x4, 0x0, 0x8, 0x28]}}, {{0x1c, 0x1, {0x7, 0xc, 0x6, 0x7, 0xdeb11cde4e8803df, 0x58c, 0x0, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0x4, 0x40, 0x8, 0x2, 0x2, 0x7, 0x5, 0x6}}, {0x10, 0x2, [0x2, 0x1, 0x9, 0x6, 0x9, 0x3ff]}}, {{0x1c, 0x1, {0xff, 0x81, 0x4000, 0x8000, 0x0, 0x3, 0x9, 0x4}}, {0xc, 0x2, [0x6, 0x32e, 0x8, 0x5]}}, {{0x1c, 0x1, {0x9, 0x7c, 0x4, 0x6, 0x0, 0xffff, 0x5, 0x8}}, {0x14, 0x2, [0xfff0, 0xd, 0xb26a, 0x7, 0x1, 0xd, 0x94ce, 0x0]}}, {{0x1c, 0x1, {0x6, 0x80, 0x8, 0x6, 0x1, 0x7, 0x3, 0x2}}, {0x8, 0x2, [0x8, 0xfff]}}]}]}, 0x260}, 0x1, 0x0, 0x0, 0x20002000}, 0x40) ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f00000000c0)={0x6, @sliced={0xd, [0x9, 0x4, 0x7, 0x6, 0x7ff, 0x9, 0x72, 0x8, 0x2, 0xea4, 0x9, 0x4, 0x40, 0x4, 0xe, 0x6, 0x4, 0x4, 0xe07, 0xfff, 0x7, 0x5, 0x101, 0x8001, 0xd22e, 0x8000, 0x7ff, 0x8001, 0x5, 0x3, 0x7f, 0x8, 0x1, 0x100, 0x8, 0x5, 0xeea9, 0x9, 0x8, 0x0, 0xe1b, 0x40, 0x6, 0xaf, 0x89, 0x9db7, 0x0, 0x9994]}}) 371.020248ms ago: executing program 4 (id=4898): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002ebd700000fc00001400000018000180140002006e657464657673696d3000000000000005000b000100000008000d000d000000080009000900000008000a"], 0x4c}}, 0x0) 93.387105ms ago: executing program 2 (id=4899): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000c68000/0x3000)=nil, 0x0, 0x0, 0x0, 0x6, 0x0, 0x35, 0x40, 0x46}) 628.833µs ago: executing program 4 (id=4900): ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup=r0, 0xffffffffffffffff, 0x6, 0x10, 0x0, @void, @value=r1}, 0x20) r2 = socket$pppoe(0x18, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = memfd_secret(0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r4, 0x0, 0x2, 0x0, 0xa, 0x8dac5, 0x1a7fec}) socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, &(0x7f0000000200)="0d7e89c59358b18425d06c88a2bab817ee78cf2f4ead35e0acb005b7b2ee30985532ba08dddb10a2612653789f79186350", 0x31) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa8, 0x13, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x88, 0x8, "4f2483fd7ef1a22dd7e97d4c8a11ddecc0e917c57c29ca62980edd096d905ebb394c390321dbd5684e77e56133af06620781ba2f290da87d166c6f1e8859979106a1a3ff52df648e661093fbad58d2c9386cab7fede6c0cb30ab4b4b8b96e26936e161bf373d02e7ebb5361537c74e46e436cb9ae251cdd3e1969ab94aa757b2e667f45a"}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f00000003c0)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x2f, 0xf9, 0x0, 0x68c, 0x4, @dev={0xfe, 0x80, '\x00', 0x10}, @remote, 0x20, 0x80, 0x6}}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x3, 0x1, 0x2, 0x1a72, 0x12000, r4, 0x7, '\x00', r6, r3, 0x5, 0x3, 0x3, 0x0, @void, @value, @value=r4}, 0x50) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000580)='\x00', &(0x7f00000005c0)='%-@.\\@+k-\x00', 0x0) connect$pppoe(r2, &(0x7f0000000600)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'team0\x00'}}, 0x1e) syz_emit_ethernet(0xa2, &(0x7f0000000640)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@val={0x88a8, 0x4, 0x1, 0x2}, {0x8100, 0x5}}, {@generic={0xf6, "5e24807c4a352f5aae9079acfd5516d6b49ff061ff4c4b0a5a8d8d75526a7b01a11a6b61715cb14bec36ad6d2eb2cd96333ec6d7af2bea7aa1123acfe6f9fadcb97d3052ecc3d767860e13f46c3ead3fa761af7a86118a61bce0b1f81c072d5c7938f95d35181f39712e4a3460f8117ace270e99c65b34ac12811aaf361c427310844b60023891ee3ade48bb"}}}, &(0x7f0000000700)={0x1, 0x3, [0xddc, 0x732, 0x59f, 0xc95]}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000740)={'batadv0\x00', 0x1000}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000000780)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000007c0)={0x73622a85, 0x1000, 0x3}) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_usb_connect(0x6, 0x7dc, &(0x7f0000000800)={{0x12, 0x1, 0x200, 0xb2, 0xb0, 0x2e, 0x20, 0x83a, 0xa512, 0x4619, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7ca, 0x3, 0x0, 0x2, 0x80, 0xc, [{{0x9, 0x4, 0x24, 0x40, 0x3, 0x70, 0x7e, 0x2b, 0x8, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "5303a108"}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x200, 0xfff, 0x6}}, @cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "d62be3f8e23e"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xecb, 0xd6, 0x1}, {0x6, 0x24, 0x1a, 0x6, 0x33}}], [{{0x9, 0x5, 0xb, 0x10, 0x20, 0xff, 0x81, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x9}]}}, {{0x9, 0x5, 0x86, 0x0, 0x3ff, 0x0, 0x7, 0x6, [@generic={0xc6, 0x4, "c94f532c1e3435986cba5638ec82b64b52fdd7765e228f929da71b6ceab274040cbb49b822f4efa6f7a3362fc2ea3fe84d1698b5eab51008f14c253480cc3167e25e21aed17a5be94423d7dd9851311ae654b69063a035625e3fde86671d35cfb8e4b67e7e077b54e2d71b12ab038c34603c14958e599c877e1f22b433f9a4ba2059767ec67582e46987a7aa2924ecd9a3a5f701b62c244775e86460d3fe40354a1c32803ab6e767b398e2ba547c0f0d6599ca6d0347864d4d6382280fb1f11fad6006d6"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x8, 0x2, 0x90, 0x6, [@generic={0x39, 0x23, "569d54223e3521b3f4c90db0266dfee42ea7f16d4ede1a7356b7fe4a8572d1b5ce54fb185ee55b97ec411f9c1e260bde9e31713415323b"}, @generic={0x1d, 0x10, "b76d8f75197846b645e0bf84ba94b0deee24fcff7af262b729ca67"}]}}]}}, {{0x9, 0x4, 0xd8, 0x1, 0x1, 0xce, 0x9e, 0x97, 0x6, [], [{{0x9, 0x5, 0xd, 0x2, 0x20, 0xf9, 0xff, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x80, 0xe}]}}]}}, {{0x9, 0x4, 0xf8, 0xb, 0xa, 0x78, 0x7d, 0x47, 0x1, [], [{{0x9, 0x5, 0x4, 0x1, 0x400, 0x7, 0x4, 0x6, [@generic={0xf4, 0x21, "985df3d180e7ed542392cbc9b6846529e007fbe30e1e1487ecb0d3a1cf4cac0dcc0f48c989a06c0e796310b5e5d5a694c10a4597acb8edae7c5a09866a319b0687e752a0abb5f748769f09d4a04bb4bf3cc536e522afc0a627e3356b13adf562cff992ceafb968e8f25a4f2ad6f8f5f26de701c6ce688a74b272cefd8f10d546fe9d93abba893cc6fa2ab8e1c44ab29672928674765f12a9155721d118bf530858d3e16c10ab5341db5fc221200e2658956ccb862d872516b15c22e77b743fa9703af3bf9404e5a3ba5f3d3d30ea45334ce95040f6d0b72f472995bda873c3a03dcdcd8f074eee83bf3843e7f2df85c8e90e"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x397, 0x5, 0x8, 0xb1, [@generic={0x9, 0xc, "c21b3d859cdafd"}]}}, {{0x9, 0x5, 0x80, 0xc, 0x10, 0x49, 0x8d, 0xff}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x6, 0x8, 0xea, [@generic={0xdf, 0xb, "143d91544712368a2b8bb11b55fcf7cbade20c21d367c4fb5e74dc1ac96c52b24f0a67b1915db96aafaac5df5860d2329890b1e5e83d72c1e5847bcb2575cd301d3964f0bf228cadc9794cbafef49254235893deef6109f7d1f6bb69cab25c94ed865fb61ab3444f999682a983393cabdda8ea76b4b7b9a2df1695ef12508435dd8395e18e24b62af517ad749efad65ef23a481d3ec255427a056f0dee6a3f61212e3bf232d2ea3e7b81021ad6e5c471cc44910604ca5554279508791c68d9084ad5fed02def5befc97934a13d9ce4590ed4cdf2ef1d93eaa386d24900"}, @generic={0xa9, 0x21, "3e22a1ab0703308d11459d5d844d7668759f27c9478d5cc5a4db9e4c53cb6c12f4035ab0737b902381854b84e14dd91dd0b3a299a5efc1d13ad19d606eec51b97f20b2aadbcee5a0349deeb8d7f1b9513d13b0b32649ceb4f9ab87f1d556e8ca0bed32680c68b0373822c292ed33f6bf6fdcf496bbd49be5d4ec8746913f94a4bdca936b8369896759c332dbeb24f361d53c801693c03b8a4784ef414f3a71ea2b16cb4cf56db6"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x8, 0x9, 0x9, 0x11, [@generic={0xd1, 0x5, "6adf7e0a92682eb1c7d6d0e235e03f5707cf0aa4182ee147fa9a0c836fbe9e37c5db9da988a2cb60343e497388b17789307b6a21f7e2df987909cac967a0e4b6a394d0ceaab3d85598f3330d7f5134df8d7cdfc770a9e0c9770a1ca27706a7a6ae7c143770d88d8850799f35aee210cd4df97d20b69a35c58c5155c5d4439a486f850717f3702ce16e5d5ada0f4090a3bf8289de3b6ee6718bb336ab43223624ec1c1e4b62033bcc113474fd258e1be8d5af370024427a09f5fa088047d72998dca09a6a52b213fc69b92808479d33"}, @generic={0xfc, 0x3, "511b3fec2adc73199b5c7a1c7ff33422af5dedfc50c7c1922c8e5b2d11a127179ad94d9982b88b746528122d554a659575ad631a7214952c4352ffcc056a4883e1f5176f6765de637994b2acb28f8ee299019d7a23195ed0eebcfab9213e6931f0165e346021fd4f725f8e6ea46a1521a1eebc83d038748f4ff504b6fe099ce5aa40d76eb40f992819a3fe48235976adaa1fcb32b1abf0230f80b7c7ea3540057de33f431969501fadb2a60751eda889535876f4db971e44caaff1f060d88c4b6b040f0962de40cda2e85ddf0e2cb1d65b10b27d7d38a0e7daff8a697217cf162fcf6ce5e778b6b19d6d2133194dfd5f4bbc9793ad6f09a9636a"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x40, 0x3, 0xb, 0xf9, [@uac_iso={0x7, 0x25, 0x1, 0x101, 0x0, 0x70}, @generic={0xf4, 0xb, "40ce9ddb9efd860684dab7295eaa581d762e0327a069abfd83f4fcec00790eb0cce97090d01ffbfd9437f078b6b6d1bf20ca05d792920d7b5c45f54b7fb88dea6a16b032ca6af92e740f4867384ead8111b9a4944ff02fe9aea361523abea7452c4ea26f4928e8eb1d604f8c00a13abc2cb3cccae1d950291cc8ff34cd41035c23405b7c7bd4e75f80c09b13b1e1e45f371c88b312205b1fc7254fb70c7b4d662d55f484df46965714c1d94aa55766a86fa193c98883ff96eb41e9b483c3ec9c125c67f1095118e87191f37a8486daf076f5734468d0fee91e86ff58146d78a79b783734abce132e652fcef610a81061108d"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x40, 0x4, 0x5, 0xec, [@generic={0x6c, 0x5, "b69219c11d54dfafc59809a00a76413bc5251a02e7300fafd6fbac1db13122fcae572aa6d9178f50901e59a282904cf7bb20a8b18f5be1f565f005dc2a465f0dbcf9fb797a91ea1a43c5f0781f83f8c885e1966032f035d3bf45bf4f68014037e4e2a53e9fb8bef0b799"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0xf2, 0x1, 0x9}}, {{0x9, 0x5, 0x1, 0xc, 0x8, 0x3, 0x9, 0x5}}, {{0x9, 0x5, 0x7, 0x1c, 0x40, 0x7, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8d, 0x9}]}}]}}]}}]}}, &(0x7f0000001340)={0xa, &(0x7f0000001000)={0xa, 0x6, 0x300, 0x6, 0xd, 0x49, 0x10, 0x1}, 0x76, &(0x7f0000001040)={0x5, 0xf, 0x76, 0x5, [@generic={0x44, 0x10, 0xa, "1a41d313928c1c15b49e5482a9910cd8c2303c4b6651b4d7292aed4cff4544ea71fe15c65e02adf9d60095486b7866476d663535a6bfa3b7c943e51440d3b3a3d8"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x54, 0x2, 0x81, 0x3, 0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0x0, 0x65, 0xa, 0x88}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "840cfcc7673b4e490d90dbe4ae6e8bf7"}]}, 0x5, [{0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x2401}}, {0xbb, &(0x7f0000001100)=@string={0xbb, 0x3, "6d9d71fdd342333fa3ed696f591c3481c974e51b61aa4ec206828ce6d36c2a808118e3bf2b7bd7ab80189e911eb2dee2607122ebf473e9e71edbc18eb54707b931975522d3a8a771d07b1dc786edccc757dd6ff6d6b72b6e85e3b18913795f47e4555b0387ba7aaf0ac350c083b283e7d86003e96b419e5cf3cc4bac89fa68d35058a1aa13da9645ac2dda79c34d7f348624d7f048da419defd5dfc65dfa772e01f107828701dc425afe6be1fab1cadf0bbdc35be1403f30aa"}}, {0xd4, &(0x7f00000011c0)=@string={0xd4, 0x3, "925f1ff4ad46a6ffad097ae686b05d17487746b3e8eea632d45e7601d78651f6fef5b775f0d01dc96ccdac95f4794397edadd22fb9738c4352bb16cf3d8e81f17380224d2749e87323cff32e816e3ff518f6129fb1c76b030213331cbd753a23084b0094acdf7684661cae32a4681397c6926cffde4876c694708a80fd4680e5fffde1578b730e2f19d57029bfaac4ebeda5f6612993f8ee0b395ec401539c87f7a599c15d35e661a125475997c294ccd5287397068a7406e69ec9bb9a6c4751501ac01efe0f2ae3bee554f9fe941d58ea16"}}, {0xf, &(0x7f00000012c0)=@string={0xf, 0x3, "724eaa726a62af5c1a136a2af8"}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x41c}}]}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f00000013c0)={{0x2, 0x1, 0x1, 0x81, 'syz1\x00', 0x1}, 0x0, [0xe54, 0x401, 0x7, 0x7, 0xbf79, 0x13bb, 0x2, 0x200, 0x80, 0xe, 0x4af7e252, 0x900000000000000, 0x2, 0xffffffffffffffff, 0x100000000, 0x401, 0x7, 0x0, 0xbc85, 0x6, 0x5, 0x6, 0x7, 0x4, 0x2, 0x4, 0x4, 0x3, 0x8000000000000000, 0x8, 0x3, 0x5, 0x5, 0xe, 0x0, 0x10001, 0x4, 0xbda, 0x0, 0x47bb, 0x1, 0x8, 0x2de0, 0xffffffffffff5ab6, 0x5, 0x6, 0xc, 0x8, 0x0, 0x7fffffff, 0x9, 0x8000, 0xfffffffffffffff9, 0xffffffff, 0xd, 0x1, 0x6, 0x699, 0x57b, 0x9, 0x8da1, 0x1, 0x0, 0xfffffffffffffffa, 0x80000001, 0x8000000000000000, 0x2, 0x9, 0x8001, 0x6, 0xfffffffffffffff9, 0x81, 0x4, 0xd, 0x8, 0x7fff, 0x900000000000000, 0x400, 0x4, 0x8, 0xffff, 0x237, 0x4, 0xffff, 0x5, 0x4, 0x89, 0x401, 0x9, 0x0, 0x4, 0x2, 0x7fffffff, 0x2d2b, 0x10001, 0xd, 0x7, 0x0, 0x8, 0x6, 0x1, 0xc, 0x4, 0x9, 0x7fff, 0x9, 0x3, 0x2, 0x10, 0x3, 0x247, 0x0, 0x2, 0x6, 0x5, 0x2, 0x8, 0x3, 0x10001, 0x2, 0x8, 0x2, 0x270, 0x9, 0x2, 0x7ff, 0x2, 0x800]}) r9 = openat$incfs(0xffffffffffffffff, &(0x7f00000018c0)='.log\x00', 0x80, 0x0) openat$cgroup(r9, &(0x7f0000001900)='syz1\x00', 0x200002, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000019c0)="001afca56fdb230e70dcd4343757c0bc0a168352a07856e9fb0965b009d1b723ca8998aded46fe06982b5d1eb54c50277ba77f3a9cbdbe60085caf820b99d0ddf41a0fa071fe8d1c9320d3a8c6d0f2c3b4a827df727d5378a0f1a7d7005983ad3f72b00ecc7dabd5532061fe04bc5e84a47d49f31e3020", 0x77, 0x800, &(0x7f0000001a40)={0x2, 0x4e21, @multicast1}, 0x10) 0s ago: executing program 1 (id=4901): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r2 = syz_open_dev$radio(0x0, 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000000c0)=0x5) (async) socket$netlink(0x10, 0x3, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000300)={0xc, r4}) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r3, 0x3b65, 0x4) (async) r5 = socket(0x10, 0x803, 0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x6, &(0x7f0000000000)={0x12, {{0x29, 0x0, 0x4000000, @empty}}}, 0x88) r7 = msgget(0x1, 0x2b0) msgrcv(r7, 0x0, 0x0, 0x0, 0x0) (async) msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000030"], 0x4, 0x800) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x90) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) kernel console output (not intermixed with test programs): [T23362] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4464'. [ 1526.038153][T23362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4464'. [ 1526.308007][T19180] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1526.501532][T19180] usb 4-1: Using ep0 maxpacket: 8 [ 1526.543679][T19180] usb 4-1: config 150 has an invalid interface number: 204 but max is 0 [ 1526.605740][T19180] usb 4-1: config 150 has no interface number 0 [ 1526.615894][T19180] usb 4-1: config 150 interface 204 has no altsetting 0 [ 1526.643789][T19180] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1526.685642][T19180] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.706809][T19180] usb 4-1: Product: syz [ 1526.727687][T19180] usb 4-1: Manufacturer: syz [ 1526.732529][T19180] usb 4-1: SerialNumber: syz [ 1526.907872][T10534] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1527.068013][T10534] usb 6-1: Using ep0 maxpacket: 16 [ 1527.083554][T10534] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1527.111925][T10534] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1527.145933][T10534] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1527.182843][T10534] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1527.206834][T10534] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1527.255377][T10534] usb 6-1: config 0 descriptor?? [ 1527.657091][ T8543] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1527.804234][T10534] usbhid 6-1:0.0: can't add hid device: -71 [ 1527.820576][T10534] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1527.837207][ T8543] usb 3-1: Using ep0 maxpacket: 32 [ 1527.841293][T10534] usb 6-1: USB disconnect, device number 7 [ 1527.859054][ T8543] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1527.894814][ T8543] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1527.920526][ T8543] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1527.938956][ T8543] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1527.956661][ T8543] usb 3-1: config 0 descriptor?? [ 1528.379610][ T8543] koneplus 0003:1E7D:2D51.0037: unknown main item tag 0x0 [ 1528.402928][ T8543] koneplus 0003:1E7D:2D51.0037: unknown main item tag 0x0 [ 1528.411756][ T8543] koneplus 0003:1E7D:2D51.0037: unknown main item tag 0x0 [ 1528.419587][ T8543] koneplus 0003:1E7D:2D51.0037: unknown main item tag 0x0 [ 1528.427836][ T8543] koneplus 0003:1E7D:2D51.0037: unknown main item tag 0x0 [ 1528.440966][ T8543] koneplus 0003:1E7D:2D51.0037: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0 [ 1528.825200][T10534] usb 3-1: USB disconnect, device number 106 [ 1528.977919][T19180] usb 4-1: USB disconnect, device number 109 [ 1529.102892][T23388] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.4474'. [ 1529.112828][T23388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4474'. [ 1529.122143][T23388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4474'. [ 1529.257123][ T8543] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1529.339012][T23392] netlink: 'syz.5.4475': attribute type 2 has an invalid length. [ 1529.361149][T23392] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4475'. [ 1529.383250][T23392] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4475'. [ 1529.396004][T23392] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4475'. [ 1529.416487][ T8543] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1529.420190][T23392] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4475'. [ 1529.436075][ T8543] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.436107][ T8543] usb 2-1: Product: syz [ 1529.436122][ T8543] usb 2-1: Manufacturer: syz [ 1529.436138][ T8543] usb 2-1: SerialNumber: syz [ 1529.459730][T19180] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1529.474469][ T8543] usb 2-1: config 0 descriptor?? [ 1529.494951][ T8543] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1529.619070][T19180] usb 4-1: Using ep0 maxpacket: 16 [ 1529.633440][T19180] usb 4-1: config 4 has an invalid interface number: 51 but max is 0 [ 1529.643129][T19180] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1529.669496][T19180] usb 4-1: config 4 has no interface number 0 [ 1529.683568][T19180] usb 4-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1529.710206][T19180] usb 4-1: config 4 interface 51 has no altsetting 0 [ 1529.731557][T19180] usb 4-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 1529.746860][T19180] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.756314][T19180] usb 4-1: Product: syz [ 1529.764046][T19180] usb 4-1: Manufacturer: syz [ 1529.770294][T19180] usb 4-1: SerialNumber: syz [ 1529.791225][T19180] cdc_eem 4-1:4.51: probe with driver cdc_eem failed with error -22 [ 1530.015335][T23400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1530.135370][T23400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1530.242549][ T8543] gspca_sunplus: reg_r err -110 [ 1530.267193][ T8543] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 1530.298183][T23400] xt_hashlimit: max too large, truncated to 1048576 [ 1530.320044][T23400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1530.381085][T23400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1530.458167][ T8543] usb 2-1: USB disconnect, device number 109 [ 1533.398635][ T5937] usb 4-1: USB disconnect, device number 110 [ 1533.489635][T23434] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 1533.529960][T23434] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 1533.617205][T23010] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1533.798662][T23010] usb 2-1: Using ep0 maxpacket: 16 [ 1533.825002][T23010] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 1533.861777][T23010] usb 2-1: config 0 has no interface number 0 [ 1533.900403][T23010] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 1533.961036][T23010] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 1533.998521][T23010] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1534.018759][T23010] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1534.036131][T23010] usb 2-1: Manufacturer: syz [ 1534.051169][T23010] usb 2-1: SerialNumber: syz [ 1534.075287][T23010] usb 2-1: config 0 descriptor?? [ 1534.098455][T23432] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1534.365163][T23432] syzkaller1: entered promiscuous mode [ 1534.396619][T23432] syzkaller1: entered allmulticast mode [ 1535.292209][T23481] FAULT_INJECTION: forcing a failure. [ 1535.292209][T23481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1535.323157][T23481] CPU: 0 UID: 0 PID: 23481 Comm: syz.4.4497 Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 1535.323188][T23481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1535.323199][T23481] Call Trace: [ 1535.323207][T23481] [ 1535.323215][T23481] dump_stack_lvl+0x189/0x250 [ 1535.323248][T23481] ? __pfx____ratelimit+0x10/0x10 [ 1535.323274][T23481] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1535.323301][T23481] ? __pfx__printk+0x10/0x10 [ 1535.323335][T23481] should_fail_ex+0x414/0x560 [ 1535.323364][T23481] _copy_to_user+0x31/0xb0 [ 1535.323388][T23481] simple_read_from_buffer+0xe1/0x170 [ 1535.323413][T23481] proc_fail_nth_read+0x1df/0x250 [ 1535.323439][T23481] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1535.323466][T23481] ? rw_verify_area+0x258/0x650 [ 1535.323484][T23481] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1535.323506][T23481] vfs_read+0x200/0x980 [ 1535.323530][T23481] ? __pfx___mutex_lock+0x10/0x10 [ 1535.323551][T23481] ? __pfx_vfs_read+0x10/0x10 [ 1535.323570][T23481] ? __fget_files+0x2a/0x420 [ 1535.323596][T23481] ? __fget_files+0x3a0/0x420 [ 1535.323616][T23481] ? __fget_files+0x2a/0x420 [ 1535.323647][T23481] ksys_read+0x145/0x250 [ 1535.323668][T23481] ? __pfx_ksys_read+0x10/0x10 [ 1535.323683][T23481] ? rcu_is_watching+0x15/0xb0 [ 1535.323708][T23481] ? do_syscall_64+0xbe/0x3b0 [ 1535.323729][T23481] do_syscall_64+0xfa/0x3b0 [ 1535.323746][T23481] ? lockdep_hardirqs_on+0x9c/0x150 [ 1535.323771][T23481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1535.323790][T23481] ? clear_bhb_loop+0x60/0xb0 [ 1535.323813][T23481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1535.323831][T23481] RIP: 0033:0x7f760198d33c [ 1535.323849][T23481] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1535.323865][T23481] RSP: 002b:00007f75ff7d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1535.323887][T23481] RAX: ffffffffffffffda RBX: 00007f7601bb6080 RCX: 00007f760198d33c [ 1535.323901][T23481] RDX: 000000000000000f RSI: 00007f75ff7d50a0 RDI: 0000000000000005 [ 1535.323914][T23481] RBP: 00007f75ff7d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1535.323926][T23481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1535.323937][T23481] R13: 0000000000000000 R14: 00007f7601bb6080 R15: 00007f7601cdfa28 [ 1535.323966][T23481] [ 1535.800256][T23010] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1535.878580][T23010] usb 2-1: USB disconnect, device number 110 [ 1536.608382][T23010] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1536.670357][T14992] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1536.777166][T23010] usb 3-1: Using ep0 maxpacket: 16 [ 1536.797398][T23010] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1536.847167][T14992] usb 6-1: Using ep0 maxpacket: 8 [ 1536.866675][T23010] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1536.914248][T14992] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1536.942169][T14992] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.971044][T23010] usb 3-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 1536.986887][T14992] usb 6-1: Product: syz [ 1536.996134][T23010] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.001440][T23510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4507'. [ 1537.005220][T14992] usb 6-1: Manufacturer: syz [ 1537.069898][T23515] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4506'. [ 1537.093879][T14992] usb 6-1: SerialNumber: syz [ 1537.105741][T23515] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4506'. [ 1537.125587][T23010] usb 3-1: config 0 descriptor?? [ 1537.135647][T23510] netlink: 'syz.4.4507': attribute type 30 has an invalid length. [ 1537.141075][T23513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4507'. [ 1537.163156][T14992] usb 6-1: config 0 descriptor?? [ 1537.207148][T23513] netlink: 'syz.4.4507': attribute type 30 has an invalid length. [ 1537.216822][T14992] gspca_main: se401-2.14.0 probing 047d:5003 [ 1537.280296][T23510] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1537.290207][T23510] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1537.299700][T23510] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1537.309232][T23510] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1537.577813][T14992] gspca_se401: ExtraFeatures: 255 [ 1537.582994][T14992] gspca_se401: Too many frame sizes [ 1537.620750][T23010] input: HID 28bd:0934 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:0934.0038/input/input120 [ 1537.661141][T23010] uclogic 0003:28BD:0934.0038: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0934] on usb-dummy_hcd.2-1/input0 [ 1537.815672][ T5937] usb 6-1: USB disconnect, device number 8 [ 1538.837309][T23541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4513'. [ 1538.859631][T23541] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4513'. [ 1539.152819][T23530] netlink: 'syz.4.4510': attribute type 7 has an invalid length. [ 1539.206790][T23542] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4510'. [ 1539.222246][T23542] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1539.416066][ T5937] usb 3-1: USB disconnect, device number 107 [ 1539.435425][T23530] : entered promiscuous mode [ 1539.652311][T23535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1540.633222][T23556] xt_policy: output policy not valid in PREROUTING and INPUT [ 1541.127179][ T8543] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1541.167082][ T5937] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1541.302713][ T8543] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1541.314836][ T8543] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1541.399472][T14992] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1541.423414][ T5937] usb 3-1: config 0 has no interfaces? [ 1541.474985][ T5937] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1541.484853][ T8543] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1541.494024][ T8543] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.502517][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.510741][ T8543] usb 4-1: Product: syz [ 1541.516118][ T8543] usb 4-1: Manufacturer: syz [ 1541.522048][ T5937] usb 3-1: Product: syz [ 1541.527182][ T8543] usb 4-1: SerialNumber: syz [ 1541.532059][ T5937] usb 3-1: Manufacturer: syz [ 1541.622477][ T8543] usb 4-1: config 0 descriptor?? [ 1541.627825][ T5937] usb 3-1: SerialNumber: syz [ 1541.633679][T14992] usb 2-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1541.653518][ T8543] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1541.654069][T14992] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1541.673957][ T5937] usb 3-1: config 0 descriptor?? [ 1541.681762][ T8543] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1541.694685][T14992] usb 2-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 1541.707404][ T8543] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1541.721737][T14992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1541.747906][ T8543] usb 4-1: media controller created [ 1541.785271][T14992] usb 2-1: config 0 descriptor?? [ 1541.833990][ T8543] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1542.038240][ T8543] DVB: Unable to find symbol tda10046_attach() [ 1542.044694][ T8543] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1542.059138][ T8543] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1542.076274][ T8543] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1542.101463][ T8543] usb 4-1: USB disconnect, device number 111 [ 1542.525117][T23588] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 3, id = 0 [ 1543.859114][T23010] usb 3-1: USB disconnect, device number 108 [ 1544.815474][ T8543] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 1545.134309][ T8543] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1545.149647][ T8543] usb 3-1: config 0 has no interface number 0 [ 1545.157413][ T8543] usb 3-1: too many endpoints for config 0 interface 1 altsetting 114: 111, using maximum allowed: 30 [ 1545.266777][ T8543] usb 3-1: config 0 interface 1 altsetting 114 has 0 endpoint descriptors, different from the interface descriptor's value: 111 [ 1545.320603][ T8543] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1545.343396][ T8543] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1545.378803][ T8543] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.415471][ T8543] usb 3-1: config 0 descriptor?? [ 1545.477442][ T8543] usb 3-1: selecting invalid altsetting 1 [ 1545.494586][ T8543] dvb_ttusb_budget: ttusb_init_controller: error [ 1545.531368][ T8543] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1545.761585][T14992] usbhid 2-1:0.0: can't add hid device: -71 [ 1545.782292][T14992] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1545.831821][ T8543] DVB: Unable to find symbol cx22700_attach() [ 1545.935124][T14992] usb 2-1: USB disconnect, device number 111 [ 1546.086537][ T8543] DVB: Unable to find symbol tda10046_attach() [ 1546.094977][T23632] netlink: 192 bytes leftover after parsing attributes in process `syz.1.4535'. [ 1546.110139][ T8543] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1546.251762][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.258660][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.343811][T23634] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 1546.895766][T23645] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073290121217) [ 1546.907098][T10534] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1547.017124][ T8543] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1547.079525][T10534] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1547.106569][T10534] usb 4-1: config 0 interface 0 has no altsetting 1 [ 1547.128683][T10534] usb 4-1: New USB device found, idVendor=0499, idProduct=5ae2, bcdDevice= 9.0f [ 1547.152721][T10534] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1547.173040][T10534] usb 4-1: Product: syz [ 1547.180945][T10534] usb 4-1: Manufacturer: syz [ 1547.185603][T10534] usb 4-1: SerialNumber: syz [ 1547.191008][T23010] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1547.209356][ T8543] usb 6-1: Using ep0 maxpacket: 32 [ 1547.211091][T10534] usb 4-1: config 0 descriptor?? [ 1547.220318][ T8543] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1547.243957][ T8543] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1547.273755][ T8543] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1547.292113][ T8543] usb 6-1: Product: syz [ 1547.296623][ T8543] usb 6-1: Manufacturer: syz [ 1547.310375][ T8543] usb 6-1: SerialNumber: syz [ 1547.347176][T23010] usb 2-1: Using ep0 maxpacket: 16 [ 1547.359890][T23010] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1547.364562][ T8543] usb 6-1: config 0 descriptor?? [ 1547.398520][T23010] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1547.408446][T23010] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.417334][T23010] usb 2-1: Product: syz [ 1547.421787][T23010] usb 2-1: Manufacturer: syz [ 1547.426496][T23010] usb 2-1: SerialNumber: syz [ 1547.482243][T23010] usb 2-1: config 0 descriptor?? [ 1547.512418][T23010] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1547.559109][T23010] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 1547.563043][ T9] usb 3-1: USB disconnect, device number 109 [ 1547.587578][ T8543] usb 6-1: USB disconnect, device number 9 [ 1547.613939][T23636] tc_dump_action: action bad kind [ 1547.623461][T23636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4537'. [ 1547.799745][T10534] usb 4-1: USB disconnect, device number 112 [ 1547.814007][ T5991] udevd[5991]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1548.130436][T23010] em28xx 2-1:0.0: chip ID is em2874 [ 1548.207492][ T9] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1548.438217][ T9] usb 3-1: config 0 has no interfaces? [ 1548.457457][ T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1548.496770][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1548.497246][T10534] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1548.511886][ T9] usb 3-1: Product: syz [ 1548.519890][ T9] usb 3-1: Manufacturer: syz [ 1548.524749][ T9] usb 3-1: SerialNumber: syz [ 1548.534780][ T9] usb 3-1: config 0 descriptor?? [ 1548.698924][T10534] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1548.715120][T10534] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1548.739410][T10534] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1548.758999][T10534] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1548.767519][T10534] usb 6-1: SerialNumber: syz [ 1548.817924][T10534] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1548.829919][T10534] usb-storage 6-1:1.0: USB Mass Storage device detected [ 1548.844587][T10534] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1548.885303][T10534] scsi host1: usb-storage 6-1:1.0 [ 1549.012185][T10534] usb 6-1: USB disconnect, device number 10 [ 1549.812948][T23010] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1549.869649][T23010] em28xx 2-1:0.0: board has no eeprom [ 1549.968221][T23010] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1549.985355][T23010] em28xx 2-1:0.0: dvb set to bulk mode. [ 1550.058432][T14992] em28xx 2-1:0.0: Binding DVB extension [ 1550.089100][T23010] usb 2-1: USB disconnect, device number 112 [ 1550.101000][T23010] em28xx 2-1:0.0: Disconnecting em28xx [ 1550.181984][T23686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1550.194931][T23686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1550.243078][T14992] em28xx 2-1:0.0: Registering input extension [ 1550.979629][T19180] usb 3-1: USB disconnect, device number 110 [ 1551.109340][T14992] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 1551.140777][T14992] Registered IR keymap rc-empty [ 1551.159093][T14992] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1551.228840][T14992] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input121 [ 1551.382906][T14992] em28xx 2-1:0.0: Input extension successfully initialized [ 1551.408849][T23010] em28xx 2-1:0.0: Closing input extension [ 1551.607284][ T9] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1551.648792][T19180] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 1551.681972][T23010] em28xx 2-1:0.0: Freeing device [ 1551.807318][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1551.818766][ T9] usb 3-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 32 [ 1551.833939][ T9] usb 3-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1551.870587][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1551.883813][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1551.894606][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.948780][ T9] usb 3-1: Product: 꼸໑ૃᜣ玗皋㎷ꀛ珕᫸瓰瘿軶㒈現ﺴ釀﫮ᠳ槇夺 [ 1551.962729][T19180] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1551.973372][ T9] usb 3-1: Manufacturer: 赱뚫蔰֟窮诺眷ዕ쯕磌퐽‿柺➫➢줚샻獔䀎泪⠰罓婌뒟꣇⍛祷洐➎❢肿綵濫愗잗홊躉Ꟶꦷ﹅祍瞲稗絞䨎ʾ茑噭㛋䢝孯敳ᬩ欞罠᧫⍅舜 [ 1551.994454][ C0] vkms_vblank_simulate: vblank timer overrun [ 1552.012948][ T9] usb 3-1: SerialNumber: Ў [ 1552.038864][T19180] usb 6-1: config 0 has no interface number 0 [ 1552.046365][T23706] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1552.054367][T23706] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1552.087691][T19180] usb 6-1: too many endpoints for config 0 interface 1 altsetting 114: 111, using maximum allowed: 30 [ 1552.127135][T19180] usb 6-1: config 0 interface 1 altsetting 114 has 0 endpoint descriptors, different from the interface descriptor's value: 111 [ 1552.157126][T23010] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1552.240826][T19180] usb 6-1: config 0 interface 1 has no altsetting 0 [ 1552.268017][T19180] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1552.282250][ T9] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 111 if 0 alt 7 proto 2 vid 0x0525 pid 0xA4A8 [ 1552.311668][T19180] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1552.370704][T19180] usb 6-1: config 0 descriptor?? [ 1552.381947][T23010] usb 2-1: Using ep0 maxpacket: 32 [ 1552.420378][T19180] usb 6-1: selecting invalid altsetting 1 [ 1552.429637][T23010] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1552.466325][T19180] dvb_ttusb_budget: ttusb_init_controller: error [ 1552.478584][T23010] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 245, changing to 11 [ 1552.505709][T19180] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1552.542925][T23010] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 58613, setting to 1024 [ 1552.635650][T23010] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1552.728617][ T8543] usb 3-1: USB disconnect, device number 111 [ 1552.746019][ T8543] usblp0: removed [ 1552.761286][T23010] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1552.810879][T23716] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1552.948385][T23010] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1552.990786][T23010] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.082401][T23010] usb 2-1: Product: syz [ 1553.148235][T19180] DVB: Unable to find symbol cx22700_attach() [ 1553.190391][T23010] usb 2-1: Manufacturer: syz [ 1553.201058][T23010] usb 2-1: SerialNumber: syz [ 1553.226316][T23010] usb 2-1: config 0 descriptor?? [ 1553.260171][T23010] usb 2-1: can't set config #0, error -71 [ 1553.573140][T23010] usb 2-1: USB disconnect, device number 113 [ 1553.673465][T19180] DVB: Unable to find symbol tda10046_attach() [ 1553.742397][T19180] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1553.786193][T23725] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4555'. [ 1553.803136][T19180] usb 6-1: USB disconnect, device number 11 [ 1554.197082][T23010] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1554.318103][T19180] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 1554.369824][T23010] usb 3-1: Using ep0 maxpacket: 32 [ 1554.395712][T23010] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 1554.415619][T23010] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1554.458597][T23010] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1554.468314][T23010] usb 3-1: config 1 has no interface number 0 [ 1554.476090][T23010] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1554.489093][T23010] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1554.503777][T19180] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1554.515039][T19180] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1554.517241][ T9] usb 4-1: new full-speed USB device number 113 using dummy_hcd [ 1554.525190][T23010] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1554.574646][T19180] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1554.588559][T19180] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1554.596770][T23010] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.606929][T19180] usb 6-1: SerialNumber: syz [ 1554.636912][T23010] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 1554.654859][T19180] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1554.673614][T19180] usb-storage 6-1:1.0: USB Mass Storage device detected [ 1554.686449][T19180] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1554.704083][T19180] scsi host1: usb-storage 6-1:1.0 [ 1554.775326][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1554.783717][ T9] usb 4-1: config 0 has no interface number 0 [ 1554.796607][ T9] usb 4-1: too many endpoints for config 0 interface 1 altsetting 114: 111, using maximum allowed: 30 [ 1554.807881][T10532] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1554.823630][ T9] usb 4-1: config 0 interface 1 altsetting 114 has 0 endpoint descriptors, different from the interface descriptor's value: 111 [ 1554.843741][T23010] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 1554.846060][ T9] usb 4-1: config 0 interface 1 has no altsetting 0 [ 1554.872739][ T8543] usb 6-1: USB disconnect, device number 12 [ 1554.913477][ T9] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1554.928806][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.980774][T10532] usb 2-1: config 0 has no interfaces? [ 1554.989026][ T9] usb 4-1: config 0 descriptor?? [ 1554.997341][T10532] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1555.005759][ T9] usb 4-1: selecting invalid altsetting 1 [ 1555.006712][T10532] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.014385][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 1555.029199][T10532] usb 2-1: Product: syz [ 1555.041679][T10532] usb 2-1: Manufacturer: syz [ 1555.049291][T10532] usb 2-1: SerialNumber: syz [ 1555.067799][T10532] usb 2-1: config 0 descriptor?? [ 1555.105191][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1555.267946][T10532] usb 3-1: USB disconnect, device number 112 [ 1555.279559][T10532] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 1555.362104][ T9] DVB: Unable to find symbol cx22700_attach() [ 1555.499343][T23754] loop2: detected capacity change from 0 to 7 [ 1555.508745][T23754] Dev loop2: unable to read RDB block 7 [ 1555.519186][T23754] loop2: AHDI p1 p2 p3 [ 1555.524959][T23754] loop2: partition table partially beyond EOD, truncated [ 1555.534197][ T9] DVB: Unable to find symbol tda10046_attach() [ 1555.534353][T23754] loop2: p1 start 1601398130 is beyond EOD, [ 1555.544573][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1555.570165][T23754] truncated [ 1555.583221][T23754] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1555.816096][ T5204] Dev loop2: unable to read RDB block 7 [ 1555.826324][ T5204] loop2: AHDI p1 p2 p3 [ 1555.843143][ T5204] loop2: partition table partially beyond EOD, truncated [ 1555.851007][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1555.860710][ T5204] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1555.878853][ T5204] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1556.040011][ T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1556.049551][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1556.072312][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1556.084535][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1556.108225][ T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1556.118206][ T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1556.126403][ T9] usb 6-1: Product: syz [ 1556.131364][ T9] usb 6-1: Manufacturer: syz [ 1556.146184][ T9] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1556.973324][ T9] usb 4-1: USB disconnect, device number 113 [ 1557.486308][T10532] usb 2-1: USB disconnect, device number 114 [ 1557.634851][T23778] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4569'. [ 1558.232049][ T5204] Dev loop2: unable to read RDB block 7 [ 1558.238580][ T5204] loop2: AHDI p1 p2 p3 [ 1558.259513][ T5204] loop2: partition table partially beyond EOD, truncated [ 1558.293766][ T5204] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1558.313952][ T5204] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1558.357393][T23010] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 1558.531502][ T5906] usb 6-1: USB disconnect, device number 13 [ 1558.540860][T23010] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1558.645431][T23010] usb 2-1: config 0 has no interface number 0 [ 1558.712379][T23010] usb 2-1: too many endpoints for config 0 interface 1 altsetting 114: 111, using maximum allowed: 30 [ 1558.800730][T23010] usb 2-1: config 0 interface 1 altsetting 114 has 0 endpoint descriptors, different from the interface descriptor's value: 111 [ 1558.924782][T23010] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1558.959945][T23010] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1559.017763][T23802] ip6t_srh: unknown srh invflags 7863 [ 1559.029650][T23010] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1559.104255][T23010] usb 2-1: config 0 descriptor?? [ 1559.174200][T23010] usb 2-1: selecting invalid altsetting 1 [ 1559.199975][T23010] dvb_ttusb_budget: ttusb_init_controller: error [ 1559.206395][T23010] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1559.651854][T23010] DVB: Unable to find symbol cx22700_attach() [ 1559.819729][T23825] FAULT_INJECTION: forcing a failure. [ 1559.819729][T23825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1559.876330][T23825] CPU: 1 UID: 0 PID: 23825 Comm: syz.4.4584 Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 1559.876360][T23825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1559.876371][T23825] Call Trace: [ 1559.876377][T23825] [ 1559.876383][T23825] dump_stack_lvl+0x189/0x250 [ 1559.876405][T23825] ? __pfx____ratelimit+0x10/0x10 [ 1559.876423][T23825] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1559.876439][T23825] ? __pfx__printk+0x10/0x10 [ 1559.876452][T23825] ? __might_fault+0xb0/0x130 [ 1559.876470][T23825] should_fail_ex+0x414/0x560 [ 1559.876488][T23825] _copy_from_user+0x2d/0xb0 [ 1559.876501][T23825] ucma_write+0x158/0x2e0 [ 1559.876513][T23825] ? common_file_perm+0x199/0x200 [ 1559.876529][T23825] ? __pfx_ucma_write+0x10/0x10 [ 1559.876540][T23825] ? security_file_permission+0x75/0x290 [ 1559.876554][T23825] ? rw_verify_area+0x258/0x650 [ 1559.876568][T23825] vfs_writev+0x4b3/0x960 [ 1559.876584][T23825] ? __pfx_ucma_write+0x10/0x10 [ 1559.876597][T23825] ? __pfx_vfs_writev+0x10/0x10 [ 1559.876620][T23825] ? __fget_files+0x2a/0x420 [ 1559.876635][T23825] ? __fget_files+0x3a0/0x420 [ 1559.876647][T23825] ? __fget_files+0x2a/0x420 [ 1559.876665][T23825] do_writev+0x14d/0x2d0 [ 1559.876680][T23825] ? __pfx_do_writev+0x10/0x10 [ 1559.876692][T23825] ? rcu_is_watching+0x15/0xb0 [ 1559.876707][T23825] ? do_syscall_64+0xbe/0x3b0 [ 1559.876722][T23825] do_syscall_64+0xfa/0x3b0 [ 1559.876732][T23825] ? lockdep_hardirqs_on+0x9c/0x150 [ 1559.876748][T23825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.876760][T23825] ? clear_bhb_loop+0x60/0xb0 [ 1559.876773][T23825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.876784][T23825] RIP: 0033:0x7f760198e929 [ 1559.876796][T23825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1559.876806][T23825] RSP: 002b:00007f75ff7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1559.876820][T23825] RAX: ffffffffffffffda RBX: 00007f7601bb5fa0 RCX: 00007f760198e929 [ 1559.876829][T23825] RDX: 0000000000000003 RSI: 0000200000000000 RDI: 000000000000000e [ 1559.876836][T23825] RBP: 00007f75ff7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1559.876843][T23825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1559.876850][T23825] R13: 0000000000000000 R14: 00007f7601bb5fa0 R15: 00007f7601cdfa28 [ 1559.876868][T23825] [ 1560.528565][T23010] DVB: Unable to find symbol tda10046_attach() [ 1560.539485][T23010] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1560.873169][T23838] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4586'. [ 1560.919898][T23835] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4587'. [ 1560.944034][ T30] kauditd_printk_skb: 118 callbacks suppressed [ 1560.944054][ T30] audit: type=1326 audit(1749302653.869:6369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23836 comm="syz.3.4588" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e2278e929 code=0x0 [ 1560.986087][T23835] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4587'. [ 1561.028347][T23834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1561.111115][ T30] audit: type=1326 audit(1749302654.019:6370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23836 comm="syz.3.4588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2278e929 code=0x7ffc0000 [ 1561.304170][ T30] audit: type=1326 audit(1749302654.019:6371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23836 comm="syz.3.4588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2278e929 code=0x7ffc0000 [ 1561.361724][ T30] audit: type=1326 audit(1749302654.019:6372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23836 comm="syz.3.4588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2278e929 code=0x7ffc0000 [ 1561.763962][ T30] audit: type=1326 audit(1749302654.019:6373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23836 comm="syz.3.4588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9e2272ab19 code=0x7ffc0000 [ 1561.884056][ T30] audit: type=1326 audit(1749302654.019:6374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23836 comm="syz.3.4588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2278e929 code=0x7ffc0000 [ 1561.884528][T23010] usb 2-1: USB disconnect, device number 115 [ 1561.965245][ T30] audit: type=1326 audit(1749302654.019:6375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23836 comm="syz.3.4588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9e2272ab19 code=0x7ffc0000 [ 1562.228227][ T30] audit: type=1326 audit(1749302654.019:6376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23836 comm="syz.3.4588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9e2272ab19 code=0x7ffc0000 [ 1562.339877][ T30] audit: type=1326 audit(1749302654.029:6377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23836 comm="syz.3.4588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9e2272ab19 code=0x7ffc0000 [ 1562.448845][ T30] audit: type=1326 audit(1749302654.029:6378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23836 comm="syz.3.4588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9e2272ab19 code=0x7ffc0000 [ 1562.537856][ T5937] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1562.689921][T23867] team_slave_0: entered promiscuous mode [ 1562.696130][T23867] team_slave_1: entered promiscuous mode [ 1562.714018][T23867] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1562.724610][T23867] team0: Device macvtap1 is already an upper device of the team interface [ 1562.747354][ T5937] usb 6-1: Using ep0 maxpacket: 32 [ 1562.775108][ T5937] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1562.783942][T23867] team_slave_0: left promiscuous mode [ 1562.789570][T23867] team_slave_1: left promiscuous mode [ 1562.840397][ T5937] usb 6-1: config 1 interface 0 altsetting 206 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 1562.864015][ T5937] usb 6-1: config 1 interface 0 altsetting 206 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1562.899219][ T9] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1562.944451][ T5937] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1562.998862][ T5937] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.40 [ 1563.017087][ T5937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.056502][ T5937] usb 6-1: Product: syz [ 1563.093424][ T5937] usb 6-1: Manufacturer: syz [ 1563.099011][ T5937] usb 6-1: SerialNumber: syz [ 1563.127403][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1563.146073][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1563.186916][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.195386][ T9] usb 4-1: Product: syz [ 1563.227134][ T9] usb 4-1: Manufacturer: syz [ 1563.243863][ T9] usb 4-1: SerialNumber: syz [ 1563.278459][ T9] usb 4-1: config 0 descriptor?? [ 1563.370007][T23869] FAULT_INJECTION: forcing a failure. [ 1563.370007][T23869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1563.428086][T23869] CPU: 1 UID: 0 PID: 23869 Comm: syz.4.4597 Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 1563.428117][T23869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1563.428129][T23869] Call Trace: [ 1563.428137][T23869] [ 1563.428146][T23869] dump_stack_lvl+0x189/0x250 [ 1563.428180][T23869] ? __pfx____ratelimit+0x10/0x10 [ 1563.428208][T23869] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1563.428236][T23869] ? __pfx__printk+0x10/0x10 [ 1563.428257][T23869] ? __might_fault+0xb0/0x130 [ 1563.428287][T23869] should_fail_ex+0x414/0x560 [ 1563.428317][T23869] _copy_from_user+0x2d/0xb0 [ 1563.428338][T23869] ucma_join_ip_multicast+0xcf/0x260 [ 1563.428364][T23869] ? __pfx_ucma_join_ip_multicast+0x10/0x10 [ 1563.428426][T23869] ucma_write+0x249/0x2e0 [ 1563.428445][T23869] ? common_file_perm+0x199/0x200 [ 1563.428472][T23869] ? __pfx_ucma_write+0x10/0x10 [ 1563.428491][T23869] ? security_file_permission+0x75/0x290 [ 1563.428513][T23869] ? rw_verify_area+0x258/0x650 [ 1563.428537][T23869] vfs_writev+0x4b3/0x960 [ 1563.428563][T23869] ? __pfx_ucma_write+0x10/0x10 [ 1563.428586][T23869] ? __pfx_vfs_writev+0x10/0x10 [ 1563.428623][T23869] ? __fget_files+0x2a/0x420 [ 1563.428647][T23869] ? __fget_files+0x3a0/0x420 [ 1563.428668][T23869] ? __fget_files+0x2a/0x420 [ 1563.428697][T23869] do_writev+0x14d/0x2d0 [ 1563.428722][T23869] ? __pfx_do_writev+0x10/0x10 [ 1563.428742][T23869] ? rcu_is_watching+0x15/0xb0 [ 1563.428764][T23869] ? do_syscall_64+0xbe/0x3b0 [ 1563.428787][T23869] do_syscall_64+0xfa/0x3b0 [ 1563.428806][T23869] ? lockdep_hardirqs_on+0x9c/0x150 [ 1563.428835][T23869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.428855][T23869] ? clear_bhb_loop+0x60/0xb0 [ 1563.428877][T23869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.428895][T23869] RIP: 0033:0x7f760198e929 [ 1563.428914][T23869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1563.428932][T23869] RSP: 002b:00007f75ff7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1563.428956][T23869] RAX: ffffffffffffffda RBX: 00007f7601bb5fa0 RCX: 00007f760198e929 [ 1563.428970][T23869] RDX: 0000000000000003 RSI: 0000200000000000 RDI: 000000000000000e [ 1563.428982][T23869] RBP: 00007f75ff7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1563.428994][T23869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1563.429005][T23869] R13: 0000000000000000 R14: 00007f7601bb5fa0 R15: 00007f7601cdfa28 [ 1563.429035][T23869] [ 1563.518449][ T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1563.811999][ T5937] usbhid 6-1:1.0: can't add hid device: -71 [ 1563.829445][ T5937] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 1563.834822][T23875] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4599'. [ 1563.914817][ T5937] usb 6-1: USB disconnect, device number 14 [ 1564.017118][T14992] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 1564.247204][T14992] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1564.260238][T14992] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1564.276886][T14992] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1564.287461][T14992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1564.325640][T14992] usb 3-1: SerialNumber: syz [ 1564.373979][T14992] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1564.397862][T14992] usb-storage 3-1:1.0: USB Mass Storage device detected [ 1564.425442][T14992] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1564.497159][ T5937] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1564.525776][T14992] scsi host1: usb-storage 3-1:1.0 [ 1564.608911][ T8543] usb 3-1: USB disconnect, device number 113 [ 1564.657360][ T5937] usb 2-1: Using ep0 maxpacket: 8 [ 1564.664209][ T5937] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1564.696466][ T5937] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1564.782125][ T5937] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1564.967614][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.976106][ T5937] usb 2-1: Product: syz [ 1564.984969][ T5937] usb 2-1: Manufacturer: syz [ 1564.997882][ T5937] usb 2-1: SerialNumber: syz [ 1565.017866][ T5937] usb 2-1: config 0 descriptor?? [ 1565.100006][ T5937] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 1565.375677][ T9] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1565.391360][ T5937] snd_usb_toneport 2-1:0.0: set_interface failed [ 1565.401127][ T9] usb 4-1: USB disconnect, device number 114 [ 1565.408540][ T5937] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 1565.419188][ T5937] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 1565.438957][ T5937] usb 2-1: USB disconnect, device number 116 [ 1565.747152][ T8543] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1565.909450][ T8543] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1566.016204][ T8543] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1566.038198][ T8543] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1566.053173][ T8543] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.248799][ T8543] usb 3-1: config 0 descriptor?? [ 1566.268958][ T8543] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1566.457273][T10532] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1566.683148][T10532] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1566.683172][T10532] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.685210][T10532] usb 4-1: config 0 descriptor?? [ 1567.027450][T10532] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1567.123743][T10532] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 1567.131232][T10532] [drm] Initialized udl on minor 2 [ 1567.340404][T10532] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 1567.375652][T10532] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1567.542915][T23901] fuse: Bad value for 'fd' [ 1567.555387][T23901] fuse: Bad value for 'group_id' [ 1567.581732][T23901] fuse: Bad value for 'group_id' [ 1567.618824][T10532] usb 4-1: USB disconnect, device number 115 [ 1567.625413][T23010] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1567.649557][T23010] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1567.854786][T23922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4610'. [ 1567.916625][T23922] veth3: entered promiscuous mode [ 1568.480529][T23938] input: syz0 as /devices/virtual/input/input122 [ 1568.530910][T23010] usb 3-1: USB disconnect, device number 114 [ 1568.886473][T23948] overlayfs: missing 'lowerdir' [ 1569.027316][ T5937] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1569.051653][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 1569.051673][ T30] audit: type=1326 audit(1749302661.979:6413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23949 comm="syz.2.4619" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc44078e929 code=0x0 [ 1569.105563][T23951] bond0: (slave bond1): Releasing backup interface [ 1569.221813][ T5937] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1569.269287][ T5937] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1569.312848][ T5937] usb 2-1: config 1 has no interface number 0 [ 1569.329943][ T5937] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1569.367025][ T5937] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1569.380048][ T5937] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1569.389686][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.413634][ T5937] usb 2-1: Product: syz [ 1569.427052][ T5937] usb 2-1: Manufacturer: syz [ 1569.432092][ T5937] usb 2-1: SerialNumber: syz [ 1570.117316][T23010] usb 4-1: new full-speed USB device number 116 using dummy_hcd [ 1570.283009][T23010] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1570.303491][T23010] usb 4-1: config 0 has no interface number 0 [ 1570.314348][T23010] usb 4-1: too many endpoints for config 0 interface 1 altsetting 114: 111, using maximum allowed: 30 [ 1570.327209][ T5937] cdc_ncm 2-1:1.1: bind() failure [ 1570.330463][T23010] usb 4-1: config 0 interface 1 altsetting 114 has 0 endpoint descriptors, different from the interface descriptor's value: 111 [ 1570.346354][T23010] usb 4-1: config 0 interface 1 has no altsetting 0 [ 1570.356160][T23010] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1570.415820][ T5937] usb 2-1: USB disconnect, device number 117 [ 1570.447107][T23010] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1570.490647][ T9] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 1570.509718][T23010] usb 4-1: config 0 descriptor?? [ 1570.551481][T23010] usb 4-1: selecting invalid altsetting 1 [ 1570.594992][T23010] dvb_ttusb_budget: ttusb_init_controller: error [ 1570.613857][T23010] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1570.628253][ T9] usb 6-1: device descriptor read/64, error -71 [ 1570.762277][T23010] DVB: Unable to find symbol cx22700_attach() [ 1570.880369][ T9] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 1570.897392][T23010] DVB: Unable to find symbol tda10046_attach() [ 1570.913909][T23010] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1571.027081][ T9] usb 6-1: device descriptor read/64, error -71 [ 1571.151703][ T9] usb usb6-port1: attempt power cycle [ 1571.197630][ T5937] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1571.357084][ T5937] usb 3-1: device descriptor read/64, error -71 [ 1571.397306][ T8543] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1571.528690][ T9] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 1571.561152][ T8543] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1571.579385][ T8543] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1571.579948][ T9] usb 6-1: device descriptor read/8, error -71 [ 1571.599735][ T8543] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 1571.622096][ T8543] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.630475][ T5937] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1571.650373][ T8543] usb 2-1: Product: syz [ 1571.659280][ T8543] usb 2-1: Manufacturer: syz [ 1571.684559][ T8543] usb 2-1: SerialNumber: syz [ 1571.711961][ T8543] usb 2-1: config 0 descriptor?? [ 1571.749574][ T8543] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 1571.777874][ T5937] usb 3-1: device descriptor read/64, error -71 [ 1571.784399][ T8543] usb 2-1: No valid video chain found. [ 1571.901936][ T9] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 1571.910186][ T5937] usb usb3-port1: attempt power cycle [ 1571.954189][T23984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1571.973565][T23984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1572.154156][ T9] usb 6-1: device descriptor read/8, error -71 [ 1572.282331][ T9] usb usb6-port1: unable to enumerate USB device [ 1572.447068][ T5937] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1572.544926][T23010] usb 2-1: USB disconnect, device number 118 [ 1572.581220][ T5937] usb 3-1: device descriptor read/8, error -71 [ 1572.812925][T23993] debugfs: Directory '!' with parent 'ieee80211' already present! [ 1572.857462][ T5937] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1572.900881][ T5937] usb 3-1: device descriptor read/8, error -71 [ 1573.017786][ T5937] usb usb3-port1: unable to enumerate USB device [ 1573.700145][T23010] usb 4-1: USB disconnect, device number 116 [ 1573.830122][T24008] loop8: detected capacity change from 0 to 7 [ 1573.861485][T24008] Dev loop8: unable to read RDB block 7 [ 1573.884035][T24008] loop8: AHDI p1 p2 p3 [ 1573.895659][T24008] loop8: partition table partially beyond EOD, truncated [ 1573.933656][T24008] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1573.962757][T24008] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1573.969895][ T9] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1574.128129][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1574.143691][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1574.179332][ T9] usb 3-1: config 6 has an invalid interface number: 66 but max is 0 [ 1574.188740][ T9] usb 3-1: config 6 has an invalid descriptor of length 215, skipping remainder of the config [ 1574.199252][ T8543] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1574.296254][ T9] usb 3-1: config 6 has no interface number 0 [ 1574.307215][ T9] usb 3-1: config 6 interface 66 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1574.355152][ T9] usb 3-1: config 6 interface 66 has no altsetting 0 [ 1574.365184][ T9] usb 3-1: New USB device found, idVendor=0499, idProduct=1006, bcdDevice=d6.95 [ 1574.391611][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.417266][ T9] usb 3-1: Product: syz [ 1574.423441][ T9] usb 3-1: Manufacturer: syz [ 1574.439860][ T8543] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 1574.457414][ T9] usb 3-1: SerialNumber: syz [ 1574.467344][ T8543] usb 4-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 1574.507448][ T8543] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.548196][ T8543] usb 4-1: config 0 descriptor?? [ 1574.726536][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1574.831121][ T9] snd-usb-audio 3-1:6.66: probe with driver snd-usb-audio failed with error -2 [ 1574.843264][ T5937] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1574.861203][ T9] usb 3-1: USB disconnect, device number 119 [ 1574.916210][ T5991] udevd[5991]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:6.66/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1574.990405][T24008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1574.999363][ T5937] usb 2-1: device descriptor read/64, error -71 [ 1574.999933][T24008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1575.009235][T24009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1575.025092][T24009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1575.078482][ T8543] elecom 0003:056E:00E6.0039: hidraw0: USB HID v0.00 Device [HID 056e:00e6] on usb-dummy_hcd.3-1/input0 [ 1575.244067][ T8543] usb 4-1: USB disconnect, device number 117 [ 1575.252296][ T5937] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1575.399703][ T5937] usb 2-1: device descriptor read/64, error -71 [ 1575.511137][ T5937] usb usb2-port1: attempt power cycle [ 1575.867096][ T5937] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1575.911524][ T5937] usb 2-1: device descriptor read/8, error -71 [ 1576.194600][ T5937] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1576.273559][ T5937] usb 2-1: device descriptor read/8, error -71 [ 1576.421542][ T5937] usb usb2-port1: unable to enumerate USB device [ 1576.477231][T24040] netlink: 'syz.3.4646': attribute type 3 has an invalid length. [ 1576.848228][T24049] delete_channel: no stack [ 1576.853281][T24049] delete_channel: no stack [ 1576.887511][T23010] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1577.067430][T23010] usb 6-1: Using ep0 maxpacket: 32 [ 1577.100360][T23010] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1577.109061][T23010] usb 6-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1577.177962][T23010] usb 6-1: config 0 has no interface number 0 [ 1577.192147][T23010] usb 6-1: config 0 interface 184 altsetting 236 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1577.218311][T23010] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1577.237238][T23010] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1577.246378][T23010] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.286034][T23010] usb 6-1: Product: syz [ 1577.300297][T23010] usb 6-1: Manufacturer: syz [ 1577.324711][T23010] usb 6-1: SerialNumber: syz [ 1577.333395][T24063] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1577.390506][T23010] usb 6-1: config 0 descriptor?? [ 1577.459333][T23010] smsc75xx v1.0.0 [ 1577.463217][T23010] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1577.475768][T23010] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22 [ 1578.689477][T24078] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4655'. [ 1578.701834][T24078] tipc: Enabling of bearer rejected, failed to enable media [ 1578.772497][T24078] ipt_rpfilter: unknown options [ 1578.807182][T23010] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1578.977306][T23010] usb 2-1: Using ep0 maxpacket: 8 [ 1578.991943][T23010] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1579.072293][T23010] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1579.102646][T23010] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1579.143842][T23010] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 1579.162775][T23010] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1579.174665][T23010] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1579.187256][T23010] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.206820][T23010] usb 2-1: config 0 descriptor?? [ 1579.225895][T24072] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1579.456131][T24072] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4652'. [ 1579.748443][T23010] usb 2-1: USB disconnect, device number 123 [ 1579.752455][T18849] Bluetooth: hci4: Opcode 0x0c03 failed: -19 [ 1579.835674][T10532] usb 6-1: USB disconnect, device number 19 [ 1579.868140][T14992] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1580.062633][T14992] usb 4-1: Using ep0 maxpacket: 8 [ 1580.156351][T14992] usb 4-1: config 254 has an invalid interface number: 240 but max is 1 [ 1580.200002][T14992] usb 4-1: config 254 has an invalid descriptor of length 1, skipping remainder of the config [ 1580.242547][T14992] usb 4-1: config 254 has 1 interface, different from the descriptor's value: 2 [ 1580.278529][T14992] usb 4-1: config 254 has no interface number 0 [ 1580.290687][T14992] usb 4-1: config 254 interface 240 altsetting 7 endpoint 0x5 has invalid maxpacket 24377, setting to 64 [ 1580.304004][T14992] usb 4-1: config 254 interface 240 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1580.335454][T14992] usb 4-1: config 254 interface 240 has no altsetting 0 [ 1580.362276][T14992] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0128, bcdDevice=d6.d0 [ 1580.373530][T14992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1580.386449][T14992] usb 4-1: Product: ᐇ [ 1580.390979][T10532] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1580.410445][T14992] usb 4-1: Manufacturer: ဉ [ 1580.418355][T14992] usb 4-1: SerialNumber: ࠇ [ 1580.567356][T10532] usb 6-1: Using ep0 maxpacket: 32 [ 1580.583250][T10532] usb 6-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 1580.606422][T10532] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1580.648829][T14992] option 4-1:254.240: GSM modem (1-port) converter detected [ 1580.661533][T10532] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1580.679349][T14992] usb 4-1: USB disconnect, device number 118 [ 1580.685796][T10532] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1580.703208][T14992] option 4-1:254.240: device disconnected [ 1580.711438][T10532] usb 6-1: Product: syz [ 1580.715995][T10532] usb 6-1: Manufacturer: syz [ 1580.731575][T10532] usb 6-1: SerialNumber: syz [ 1580.787751][T10532] usb 6-1: config 0 descriptor?? [ 1581.142792][T24104] fuse: Bad value for 'fd' [ 1582.692375][T24136] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4667'. [ 1583.383065][T24144] netlink: 'syz.1.4670': attribute type 1 has an invalid length. [ 1583.409458][T24144] ip6erspan0: entered promiscuous mode [ 1584.079779][T10532] usb 6-1: USB disconnect, device number 20 [ 1584.158236][T23010] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1584.270209][ T30] audit: type=1326 audit(1749302677.199:6414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24147 comm="syz.5.4672" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd22618e929 code=0x0 [ 1584.349242][T23010] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1584.387073][T23010] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1584.442008][T23010] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1584.512289][T23010] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1584.514960][T24152] ucma_write: process 1624 (syz.5.4672) changed security contexts after opening file descriptor, this is not allowed. [ 1584.557950][T23010] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1584.607995][T23010] usb 2-1: config 0 descriptor?? [ 1584.977084][ T8543] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1585.025651][T23010] plantronics 0003:047F:FFFF.003A: unknown main item tag 0x0 [ 1585.045203][ T30] audit: type=1326 audit(1749302677.969:6415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24159 comm="syz.3.4675" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e2278e929 code=0x0 [ 1585.046635][T23010] plantronics 0003:047F:FFFF.003A: No inputs registered, leaving [ 1585.104819][T23010] plantronics 0003:047F:FFFF.003A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1585.193948][ T8543] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1585.216246][ T8543] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1585.246759][ T8543] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1585.327506][ T8543] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1585.354810][T24164] CUSE: DEVNAME unspecified [ 1585.365765][ T30] audit: type=1326 audit(1749302678.299:6416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24159 comm="syz.3.4675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2278e929 code=0x7ffc0000 [ 1585.414071][ T8543] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1585.465255][ T8543] usb 3-1: config 0 descriptor?? [ 1585.477513][ T30] audit: type=1326 audit(1749302678.299:6417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24159 comm="syz.3.4675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9e2272ab19 code=0x7ffc0000 [ 1585.534326][ T30] audit: type=1326 audit(1749302678.299:6418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24159 comm="syz.3.4675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9e2272ab19 code=0x7ffc0000 [ 1585.603650][ T30] audit: type=1326 audit(1749302678.299:6419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24159 comm="syz.3.4675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2278e929 code=0x7ffc0000 [ 1585.650411][ T30] audit: type=1326 audit(1749302678.329:6420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24159 comm="syz.3.4675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9e2272ab19 code=0x7ffc0000 [ 1585.681039][ T30] audit: type=1326 audit(1749302678.329:6421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24159 comm="syz.3.4675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2278e929 code=0x7ffc0000 [ 1585.744537][ T30] audit: type=1326 audit(1749302678.329:6422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24159 comm="syz.3.4675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9e2272ab19 code=0x7ffc0000 [ 1585.785892][ T30] audit: type=1326 audit(1749302678.329:6423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24159 comm="syz.3.4675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9e2272ab19 code=0x7ffc0000 [ 1585.932972][T24157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1585.943881][T24157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1585.989430][T24169] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4676'. [ 1586.060088][T24170] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4676'. [ 1586.097799][T24157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1586.110651][T24157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1586.209417][T24163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1586.532380][ T8543] usbhid 3-1:0.0: can't add hid device: -71 [ 1586.538838][ T8543] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1586.599777][ T8543] usb 3-1: USB disconnect, device number 120 [ 1586.630426][T24181] FAULT_INJECTION: forcing a failure. [ 1586.630426][T24181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1586.637438][T23010] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1586.663502][T24181] CPU: 0 UID: 0 PID: 24181 Comm: syz.4.4679 Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 1586.663532][T24181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1586.663545][T24181] Call Trace: [ 1586.663554][T24181] [ 1586.663563][T24181] dump_stack_lvl+0x189/0x250 [ 1586.663599][T24181] ? __pfx____ratelimit+0x10/0x10 [ 1586.663630][T24181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1586.663659][T24181] ? __pfx__printk+0x10/0x10 [ 1586.663681][T24181] ? __might_fault+0xb0/0x130 [ 1586.663714][T24181] should_fail_ex+0x414/0x560 [ 1586.663746][T24181] _copy_from_iter+0x1db/0x16f0 [ 1586.663780][T24181] ? rcu_is_watching+0x15/0xb0 [ 1586.663801][T24181] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1586.663824][T24181] ? __pfx__copy_from_iter+0x10/0x10 [ 1586.663855][T24181] ? __build_skb_around+0x257/0x3e0 [ 1586.663883][T24181] ? netlink_sendmsg+0x642/0xb30 [ 1586.663905][T24181] ? skb_put+0x11b/0x210 [ 1586.663932][T24181] netlink_sendmsg+0x6b2/0xb30 [ 1586.663967][T24181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1586.663995][T24181] ? aa_sock_msg_perm+0x94/0x160 [ 1586.664022][T24181] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1586.664048][T24181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1586.664071][T24181] __sock_sendmsg+0x21c/0x270 [ 1586.664095][T24181] ____sys_sendmsg+0x505/0x830 [ 1586.664128][T24181] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1586.664164][T24181] ? import_iovec+0x74/0xa0 [ 1586.664189][T24181] ___sys_sendmsg+0x21f/0x2a0 [ 1586.664218][T24181] ? __pfx____sys_sendmsg+0x10/0x10 [ 1586.664283][T24181] ? __fget_files+0x2a/0x420 [ 1586.664305][T24181] ? __fget_files+0x3a0/0x420 [ 1586.664348][T24181] __x64_sys_sendmsg+0x19b/0x260 [ 1586.664377][T24181] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1586.664414][T24181] ? __pfx_ksys_write+0x10/0x10 [ 1586.664430][T24181] ? rcu_is_watching+0x15/0xb0 [ 1586.664455][T24181] ? do_syscall_64+0xbe/0x3b0 [ 1586.664480][T24181] do_syscall_64+0xfa/0x3b0 [ 1586.664498][T24181] ? lockdep_hardirqs_on+0x9c/0x150 [ 1586.664532][T24181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1586.664552][T24181] ? clear_bhb_loop+0x60/0xb0 [ 1586.664576][T24181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1586.664595][T24181] RIP: 0033:0x7f760198e929 [ 1586.664613][T24181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1586.664630][T24181] RSP: 002b:00007f75ff7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1586.664652][T24181] RAX: ffffffffffffffda RBX: 00007f7601bb5fa0 RCX: 00007f760198e929 [ 1586.664667][T24181] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 1586.664680][T24181] RBP: 00007f75ff7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1586.664693][T24181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1586.664704][T24181] R13: 0000000000000000 R14: 00007f7601bb5fa0 R15: 00007f7601cdfa28 [ 1586.664735][T24181] [ 1587.097465][T23010] usb 4-1: Using ep0 maxpacket: 16 [ 1587.110648][T23010] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1587.183743][T14992] usb 2-1: USB disconnect, device number 124 [ 1587.243525][T23010] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.297206][T23010] usb 4-1: Product: syz [ 1587.311881][T23010] usb 4-1: Manufacturer: syz [ 1587.316823][T23010] usb 4-1: SerialNumber: syz [ 1587.405701][T23010] usb 4-1: config 0 descriptor?? [ 1587.484032][T23010] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1587.494376][T23010] usb 4-1: Detected FT-X [ 1587.685082][T23010] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1587.717432][T14992] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1587.879839][T14992] usb 3-1: config 0 has no interfaces? [ 1587.895611][T14992] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1587.915276][T23010] ftdi_sio 4-1:0.0: GPIO initialisation failed: -5 [ 1587.926631][T14992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.945835][T23010] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1587.974103][T14992] usb 3-1: Product: syz [ 1587.995467][T14992] usb 3-1: Manufacturer: syz [ 1588.043021][T14992] usb 3-1: SerialNumber: syz [ 1588.297615][T14992] usb 3-1: config 0 descriptor?? [ 1589.137321][T10534] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 1589.277068][T10534] usb 6-1: device descriptor read/64, error -71 [ 1589.391701][T24220] FAULT_INJECTION: forcing a failure. [ 1589.391701][T24220] name failslab, interval 1, probability 0, space 0, times 0 [ 1589.406374][T24220] CPU: 1 UID: 0 PID: 24220 Comm: syz.4.4690 Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 1589.406403][T24220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1589.406415][T24220] Call Trace: [ 1589.406424][T24220] [ 1589.406433][T24220] dump_stack_lvl+0x189/0x250 [ 1589.406468][T24220] ? __pfx____ratelimit+0x10/0x10 [ 1589.406497][T24220] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1589.406526][T24220] ? __pfx__printk+0x10/0x10 [ 1589.406556][T24220] ? ref_tracker_alloc+0x318/0x460 [ 1589.406587][T24220] should_fail_ex+0x414/0x560 [ 1589.406619][T24220] should_failslab+0xa8/0x100 [ 1589.406643][T24220] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1589.406663][T24220] ? skb_clone+0x212/0x3a0 [ 1589.406697][T24220] skb_clone+0x212/0x3a0 [ 1589.406727][T24220] __netlink_deliver_tap+0x404/0x850 [ 1589.406766][T24220] ? netlink_deliver_tap+0x2e/0x1b0 [ 1589.406792][T24220] netlink_deliver_tap+0x19c/0x1b0 [ 1589.406816][T24220] netlink_unicast+0x72f/0x8d0 [ 1589.406849][T24220] netlink_sendmsg+0x805/0xb30 [ 1589.406883][T24220] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1589.406911][T24220] ? aa_sock_msg_perm+0x94/0x160 [ 1589.406946][T24220] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1589.406971][T24220] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1589.406995][T24220] __sock_sendmsg+0x21c/0x270 [ 1589.407020][T24220] ____sys_sendmsg+0x505/0x830 [ 1589.407060][T24220] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1589.407096][T24220] ? import_iovec+0x74/0xa0 [ 1589.407122][T24220] ___sys_sendmsg+0x21f/0x2a0 [ 1589.407151][T24220] ? __pfx____sys_sendmsg+0x10/0x10 [ 1589.407216][T24220] ? __fget_files+0x2a/0x420 [ 1589.407237][T24220] ? __fget_files+0x3a0/0x420 [ 1589.407271][T24220] __x64_sys_sendmsg+0x19b/0x260 [ 1589.407309][T24220] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1589.407353][T24220] ? __pfx_ksys_write+0x10/0x10 [ 1589.407369][T24220] ? rcu_is_watching+0x15/0xb0 [ 1589.407394][T24220] ? do_syscall_64+0xbe/0x3b0 [ 1589.407418][T24220] do_syscall_64+0xfa/0x3b0 [ 1589.407435][T24220] ? lockdep_hardirqs_on+0x9c/0x150 [ 1589.407463][T24220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1589.407482][T24220] ? clear_bhb_loop+0x60/0xb0 [ 1589.407506][T24220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1589.407525][T24220] RIP: 0033:0x7f760198e929 [ 1589.407544][T24220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1589.407560][T24220] RSP: 002b:00007f75ff7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1589.407581][T24220] RAX: ffffffffffffffda RBX: 00007f7601bb5fa0 RCX: 00007f760198e929 [ 1589.407595][T24220] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 1589.407608][T24220] RBP: 00007f75ff7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1589.407621][T24220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1589.407633][T24220] R13: 0000000000000000 R14: 00007f7601bb5fa0 R15: 00007f7601cdfa28 [ 1589.407666][T24220] [ 1589.702348][ C1] vkms_vblank_simulate: vblank timer overrun [ 1589.773176][T14992] usb 4-1: USB disconnect, device number 119 [ 1589.802433][T14992] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1589.813099][T14992] ftdi_sio 4-1:0.0: device disconnected [ 1589.877321][T10534] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 1590.007123][T10534] usb 6-1: device descriptor read/64, error -71 [ 1590.051609][T24230] vivid-003: disconnect [ 1590.121343][T10534] usb usb6-port1: attempt power cycle [ 1590.215580][T24230] vivid-003: reconnect [ 1590.416040][T18320] usb 3-1: USB disconnect, device number 121 [ 1590.477338][T10534] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 1590.521614][T10534] usb 6-1: device descriptor read/8, error -71 [ 1590.567204][ T8543] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1590.727226][ T8543] usb 4-1: Using ep0 maxpacket: 8 [ 1590.734688][ T8543] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1590.758879][ T8543] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.767355][T10534] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 1590.783510][ T8543] usb 4-1: config 0 descriptor?? [ 1590.823746][T10534] usb 6-1: device descriptor read/8, error -71 [ 1590.979906][T10534] usb usb6-port1: unable to enumerate USB device [ 1591.006765][ T8543] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1591.019069][ T8543] asix 4-1:0.0: probe with driver asix failed with error -61 [ 1591.758266][T14992] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1591.947329][T14992] usb 3-1: Using ep0 maxpacket: 16 [ 1592.050226][T14992] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1592.064418][T14992] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1592.098440][T14992] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1592.114959][T14992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1592.128344][T14992] usb 3-1: config 0 descriptor?? [ 1592.160222][T14992] pxrc 3-1:0.0: Could not find endpoint [ 1592.187244][T14992] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1592.422928][T24262] FAULT_INJECTION: forcing a failure. [ 1592.422928][T24262] name failslab, interval 1, probability 0, space 0, times 0 [ 1592.438799][T24262] CPU: 1 UID: 0 PID: 24262 Comm: syz.1.4703 Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 1592.438829][T24262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1592.438841][T24262] Call Trace: [ 1592.438849][T24262] [ 1592.438859][T24262] dump_stack_lvl+0x189/0x250 [ 1592.438895][T24262] ? __pfx____ratelimit+0x10/0x10 [ 1592.438925][T24262] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1592.438954][T24262] ? __pfx__printk+0x10/0x10 [ 1592.438979][T24262] ? __pfx___might_resched+0x10/0x10 [ 1592.438998][T24262] ? fs_reclaim_acquire+0x7d/0x100 [ 1592.439027][T24262] should_fail_ex+0x414/0x560 [ 1592.439068][T24262] should_failslab+0xa8/0x100 [ 1592.439093][T24262] __kmalloc_noprof+0xcb/0x4f0 [ 1592.439111][T24262] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1592.439138][T24262] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1592.439164][T24262] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1592.439192][T24262] genl_family_rcv_msg_doit+0xb8/0x300 [ 1592.439229][T24262] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1592.439261][T24262] ? rcu_is_watching+0x15/0xb0 [ 1592.439284][T24262] ? apparmor_capable+0x137/0x1b0 [ 1592.439305][T24262] ? bpf_lsm_capable+0x9/0x20 [ 1592.439323][T24262] ? security_capable+0x7e/0x2e0 [ 1592.439357][T24262] genl_rcv_msg+0x60e/0x790 [ 1592.439394][T24262] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1592.439420][T24262] ? ref_tracker_free+0x63a/0x7d0 [ 1592.439445][T24262] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 1592.439473][T24262] ? __pfx_ref_tracker_free+0x10/0x10 [ 1592.439513][T24262] netlink_rcv_skb+0x205/0x470 [ 1592.439538][T24262] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1592.439569][T24262] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1592.439612][T24262] ? down_read+0x1ad/0x2e0 [ 1592.439637][T24262] genl_rcv+0x28/0x40 [ 1592.439662][T24262] netlink_unicast+0x758/0x8d0 [ 1592.439698][T24262] netlink_sendmsg+0x805/0xb30 [ 1592.439733][T24262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1592.439761][T24262] ? aa_sock_msg_perm+0x94/0x160 [ 1592.439788][T24262] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1592.439811][T24262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1592.439834][T24262] __sock_sendmsg+0x21c/0x270 [ 1592.439857][T24262] ____sys_sendmsg+0x505/0x830 [ 1592.439889][T24262] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1592.439926][T24262] ? import_iovec+0x74/0xa0 [ 1592.439952][T24262] ___sys_sendmsg+0x21f/0x2a0 [ 1592.439980][T24262] ? __pfx____sys_sendmsg+0x10/0x10 [ 1592.440057][T24262] ? __fget_files+0x2a/0x420 [ 1592.440078][T24262] ? __fget_files+0x3a0/0x420 [ 1592.440112][T24262] __x64_sys_sendmsg+0x19b/0x260 [ 1592.440141][T24262] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1592.440178][T24262] ? __pfx_ksys_write+0x10/0x10 [ 1592.440203][T24262] ? do_syscall_64+0xbe/0x3b0 [ 1592.440228][T24262] do_syscall_64+0xfa/0x3b0 [ 1592.440246][T24262] ? lockdep_hardirqs_on+0x9c/0x150 [ 1592.440275][T24262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.440295][T24262] ? clear_bhb_loop+0x60/0xb0 [ 1592.440318][T24262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.440337][T24262] RIP: 0033:0x7fc22df8e929 [ 1592.440356][T24262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1592.440373][T24262] RSP: 002b:00007fc22edac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1592.440395][T24262] RAX: ffffffffffffffda RBX: 00007fc22e1b5fa0 RCX: 00007fc22df8e929 [ 1592.440410][T24262] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 1592.440423][T24262] RBP: 00007fc22edac090 R08: 0000000000000000 R09: 0000000000000000 [ 1592.440435][T24262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1592.440447][T24262] R13: 0000000000000000 R14: 00007fc22e1b5fa0 R15: 00007fc22e2dfa28 [ 1592.440481][T24262] [ 1592.813505][ C1] vkms_vblank_simulate: vblank timer overrun [ 1592.870407][T24264] fuse: Bad value for 'fd' [ 1593.213254][T18320] usb 3-1: USB disconnect, device number 122 [ 1593.458206][T10532] usb 4-1: USB disconnect, device number 120 [ 1593.757201][T18320] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1593.957094][T18320] usb 3-1: Using ep0 maxpacket: 16 [ 1593.974738][T18320] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1594.105809][T24290] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4712'. [ 1594.146844][T18320] usb 3-1: config 8 has an invalid interface number: 132 but max is 0 [ 1594.171095][T24290] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4712'. [ 1594.219085][T18320] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1594.247003][T18320] usb 3-1: config 8 has no interface number 0 [ 1594.271841][T18320] usb 3-1: config 8 interface 132 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1594.335496][T18320] usb 3-1: config 8 interface 132 has no altsetting 0 [ 1594.373157][T18320] usb 3-1: string descriptor 0 read error: -22 [ 1594.402180][T18320] usb 3-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8f.8b [ 1594.449497][T18320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.500262][T18320] usb-storage 3-1:8.132: USB Mass Storage device detected [ 1594.559015][T18320] usb-storage 3-1:8.132: Quirks match for vid 07cf pid 1001: a [ 1594.866201][T24286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1594.974638][T18320] usb 3-1: USB disconnect, device number 123 [ 1595.049482][T10532] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 1595.223548][T10532] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 1595.264211][T10532] usb 2-1: config 0 has an invalid descriptor of length 25, skipping remainder of the config [ 1595.275622][T10532] usb 2-1: config 0 has no interface number 0 [ 1595.285596][T10532] usb 2-1: config 0 interface 230 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1595.333167][T10532] usb 2-1: config 0 interface 230 has no altsetting 0 [ 1595.343881][T10532] usb 2-1: New USB device found, idVendor=f481, idProduct=0004, bcdDevice= 0.05 [ 1595.358107][T10532] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1595.381618][T10532] usb 2-1: Product: syz [ 1595.386075][T10532] usb 2-1: Manufacturer: syz [ 1595.391708][T10532] usb 2-1: SerialNumber: syz [ 1595.402225][T10532] usb 2-1: config 0 descriptor?? [ 1595.810261][T10532] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1595.845417][T24303] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 101 [ 1595.857580][T23010] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 1595.957390][T10532] usb 3-1: device descriptor read/64, error -71 [ 1596.029409][T23010] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1596.051246][T23010] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1596.066012][T23010] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1596.076879][T23010] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1596.085270][T23010] usb 6-1: SerialNumber: syz [ 1596.101817][T23010] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1596.110801][T23010] usb-storage 6-1:1.0: USB Mass Storage device detected [ 1596.139354][T23010] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1596.197106][T10532] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1596.210024][T23010] scsi host1: usb-storage 6-1:1.0 [ 1596.321261][T24301] vlan1: entered allmulticast mode [ 1596.338320][T10532] usb 3-1: device descriptor read/64, error -71 [ 1596.353136][T24315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1596.363827][T24315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1596.413101][T18320] usb 6-1: USB disconnect, device number 25 [ 1596.448793][T10532] usb usb3-port1: attempt power cycle [ 1596.787468][T10532] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1596.808394][T10532] usb 3-1: device descriptor read/8, error -71 [ 1596.836481][ T1033] failed while handling packet from 1:-2 [ 1597.101217][T10532] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1597.155191][T10532] usb 3-1: device descriptor read/8, error -71 [ 1597.304050][T10532] usb usb3-port1: unable to enumerate USB device [ 1597.449485][T23010] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1597.612558][T23010] usb 6-1: Using ep0 maxpacket: 16 [ 1597.652169][T23010] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1597.716147][T23010] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1597.753204][T23010] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1597.799901][T23010] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1597.864289][T23010] usb 6-1: config 1 interface 1 has no altsetting 0 [ 1598.114376][T23010] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1598.127506][T23010] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1598.148152][T10532] usb 2-1: USB disconnect, device number 125 [ 1598.162168][T23010] usb 6-1: Product: syz [ 1598.166412][T23010] usb 6-1: Manufacturer: syz [ 1598.183552][T23010] usb 6-1: SerialNumber: syz [ 1598.436724][T23010] usb 6-1: USB disconnect, device number 26 [ 1598.478255][ T5991] udevd[5991]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1598.629018][T10532] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1598.800193][T10532] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1598.897102][T10532] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1598.918896][T10532] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1598.940621][T10532] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1598.965520][T10532] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1598.983536][T10532] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1598.993593][T10532] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1599.003373][T10532] usb 2-1: Product: syz [ 1599.009520][T10532] usb 2-1: Manufacturer: syz [ 1599.028547][T10532] cdc_wdm 2-1:1.0: skipping garbage [ 1599.034062][T10532] cdc_wdm 2-1:1.0: skipping garbage [ 1599.092545][T10532] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1599.124961][T10532] cdc_wdm 2-1:1.0: Unknown control protocol [ 1599.343846][T24353] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4728'. [ 1599.863757][T10534] usb 2-1: USB disconnect, device number 126 [ 1600.001634][T24365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4732'. [ 1600.011739][T18320] hid-generic 00A0:0006:0003.003B: unknown main item tag 0x0 [ 1600.019924][T18320] hid-generic 00A0:0006:0003.003B: unknown main item tag 0x0 [ 1600.052990][T18320] hid-generic 00A0:0006:0003.003B: unknown main item tag 0x0 [ 1600.061842][T18320] hid-generic 00A0:0006:0003.003B: unknown main item tag 0x2 [ 1600.070177][T18320] hid-generic 00A0:0006:0003.003B: unknown main item tag 0x0 [ 1600.078428][T18320] hid-generic 00A0:0006:0003.003B: unknown main item tag 0x0 [ 1600.100180][T18320] hid-generic 00A0:0006:0003.003B: unknown main item tag 0x0 [ 1600.135308][T18320] hid-generic 00A0:0006:0003.003B: unknown main item tag 0x0 [ 1600.243436][T18320] hid-generic 00A0:0006:0003.003B: unknown main item tag 0x0 [ 1600.252169][T18320] hid-generic 00A0:0006:0003.003B: unknown main item tag 0x0 [ 1600.272820][T18320] hid-generic 00A0:0006:0003.003B: unknown main item tag 0x0 [ 1600.283073][T18320] hid-generic 00A0:0006:0003.003B: unknown main item tag 0x0 [ 1600.313229][T18320] hid-generic 00A0:0006:0003.003B: hidraw0: HID v0.05 Device [syz1] on syz0 [ 1600.323343][ T8543] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1600.551747][ T8543] usb 4-1: device descriptor read/64, error -71 [ 1600.817281][ T8543] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1600.997073][ T8543] usb 4-1: device descriptor read/64, error -71 [ 1601.027436][T10534] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1601.138293][ T8543] usb usb4-port1: attempt power cycle [ 1601.367257][T18320] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1601.431340][T10534] usb 2-1: config 0 has no interfaces? [ 1601.449087][T10534] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1601.500345][T10534] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.540897][T18320] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1601.550605][T18320] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1601.580834][ T8543] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1601.588892][T18320] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1601.598142][T10534] usb 2-1: Product: syz [ 1601.608114][T10534] usb 2-1: Manufacturer: syz [ 1601.614235][T10534] usb 2-1: SerialNumber: syz [ 1601.634023][T18320] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1601.660422][ T8543] usb 4-1: device descriptor read/8, error -71 [ 1601.673817][T18320] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1601.694678][T10534] usb 2-1: config 0 descriptor?? [ 1601.703255][T18320] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1601.716196][T18320] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1601.739015][T18320] usb 6-1: Product: syz [ 1601.762346][T18320] usb 6-1: Manufacturer: syz [ 1601.795101][T18320] cdc_wdm 6-1:1.0: skipping garbage [ 1601.805804][T18320] cdc_wdm 6-1:1.0: skipping garbage [ 1601.816192][T18320] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1601.825147][T18320] cdc_wdm 6-1:1.0: Unknown control protocol [ 1601.927315][ T8543] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1602.012209][ T8543] usb 4-1: device descriptor read/8, error -71 [ 1602.138397][ T8543] usb usb4-port1: unable to enumerate USB device [ 1602.625467][ T8543] usb 6-1: USB disconnect, device number 27 [ 1603.948588][ T8543] usb 2-1: USB disconnect, device number 127 [ 1604.232019][T24412] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4744'. [ 1604.504786][T24419] input: syz0 as /devices/virtual/input/input123 [ 1606.327322][T18320] usb 4-1: new full-speed USB device number 125 using dummy_hcd [ 1606.495846][T18320] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1606.517716][T18320] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1606.540894][T18320] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1606.557246][T18320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1606.566396][T18320] usb 4-1: SerialNumber: syz [ 1606.585558][T18320] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1606.597892][T18320] usb-storage 4-1:1.0: USB Mass Storage device detected [ 1606.636736][T18320] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1606.791106][T24433] vlan3: entered allmulticast mode [ 1606.802100][T18320] scsi host1: usb-storage 4-1:1.0 [ 1606.925499][T18320] usb 4-1: USB disconnect, device number 125 [ 1607.078311][T24457] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4755'. [ 1607.126686][T24457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4755'. [ 1607.680710][ T9] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0 [ 1607.718832][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.725508][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.796821][ T9] hid-generic 0000:0000:0000.003C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1608.564646][ T30] kauditd_printk_skb: 135 callbacks suppressed [ 1608.564661][ T30] audit: type=1326 audit(1749302701.489:6559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24487 comm="syz.1.4763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22df8e929 code=0x7ffc0000 [ 1608.624154][T24488] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1608.677917][ T30] audit: type=1326 audit(1749302701.549:6560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24487 comm="syz.1.4763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22df8e929 code=0x7ffc0000 [ 1608.707249][ T30] audit: type=1326 audit(1749302701.549:6561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24487 comm="syz.1.4763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc22df9087a code=0x7ffc0000 [ 1608.733217][ T30] audit: type=1326 audit(1749302701.549:6562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24487 comm="syz.1.4763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc22df8d290 code=0x7ffc0000 [ 1608.771706][ T30] audit: type=1326 audit(1749302701.549:6563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24487 comm="syz.1.4763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc22df8d3df code=0x7ffc0000 [ 1608.817090][ T30] audit: type=1326 audit(1749302701.569:6564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24487 comm="syz.1.4763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc22df8d58a code=0x7ffc0000 [ 1608.901298][ T30] audit: type=1326 audit(1749302701.569:6565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24487 comm="syz.1.4763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22df8e929 code=0x7ffc0000 [ 1608.962359][ T30] audit: type=1326 audit(1749302701.569:6566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24487 comm="syz.1.4763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc22df8e929 code=0x7ffc0000 [ 1608.991013][ T30] audit: type=1326 audit(1749302701.569:6567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24487 comm="syz.1.4763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22df8e929 code=0x7ffc0000 [ 1609.020131][ T30] audit: type=1326 audit(1749302701.569:6568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24487 comm="syz.1.4763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc22df8e929 code=0x7ffc0000 [ 1609.147074][T10534] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1609.317500][T10534] usb 6-1: Using ep0 maxpacket: 32 [ 1609.327520][T10534] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1609.336991][T10534] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1609.397218][T10534] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1609.435885][T10534] usb 6-1: config 0 descriptor?? [ 1609.730697][T18320] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 1609.963568][T24508] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.4771' sets config #0 [ 1609.976056][T24508] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.4771' sets config #1 [ 1609.991719][T24508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4771'. [ 1610.051764][T18320] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1610.267162][T18320] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1610.290109][T18320] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1610.304781][T18320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1610.315505][T18320] usb 2-1: SerialNumber: syz [ 1610.328307][T18320] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1610.350490][T18320] usb-storage 2-1:1.0: USB Mass Storage device detected [ 1610.363399][T18320] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1610.374932][T18320] scsi host1: usb-storage 2-1:1.0 [ 1610.570414][T24502] vlan2: entered allmulticast mode [ 1610.586049][T24502] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1610.693488][T10532] usb 2-1: USB disconnect, device number 2 [ 1611.340611][T24526] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4775'. [ 1611.476487][T24526] bridge_slave_1: left allmulticast mode [ 1611.488413][T24526] bridge_slave_1: left promiscuous mode [ 1611.495904][T24526] bridge0: port 2(bridge_slave_1) entered disabled state [ 1611.539320][T24526] bridge_slave_0: left allmulticast mode [ 1611.545120][T24526] bridge_slave_0: left promiscuous mode [ 1611.575487][T24526] bridge0: port 1(bridge_slave_0) entered disabled state [ 1611.849063][ T8543] usb 6-1: USB disconnect, device number 28 [ 1612.127979][T24552] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4782'. [ 1612.207474][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1612.405469][ T9] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1612.426001][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1612.433828][ T9] usb 2-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 1612.447171][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1612.575179][ T9] usb 2-1: config 0 descriptor?? [ 1612.837916][T24561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1612.862460][T24561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1613.013228][ T9] hid (null): unknown global tag 0xd [ 1613.022534][ T9] hid-alps 0003:044E:1215.003D: unknown global tag 0xd [ 1613.127593][T23010] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1613.189358][ T9] hid-alps 0003:044E:1215.003D: item 0 1 1 13 parsing failed [ 1613.249730][ T9] hid-alps 0003:044E:1215.003D: parse failed [ 1613.255950][ T9] hid-alps 0003:044E:1215.003D: probe with driver hid-alps failed with error -22 [ 1613.285185][ T9] usb 2-1: USB disconnect, device number 3 [ 1613.296004][T23010] usb 3-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 1613.306700][T23010] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.349923][T23010] usb 3-1: Product: syz [ 1613.370820][T23010] usb 3-1: Manufacturer: syz [ 1613.388166][T23010] usb 3-1: SerialNumber: syz [ 1613.408625][T23010] usb 3-1: config 0 descriptor?? [ 1613.677426][T23010] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1613.712942][T23010] asix 3-1:0.0: probe with driver asix failed with error -71 [ 1613.762440][T23010] usb 3-1: USB disconnect, device number 2 [ 1613.848110][T24568] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4788'. [ 1613.879162][T24569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4787'. [ 1614.197450][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1614.217453][T24586] netlink: 88 bytes leftover after parsing attributes in process `syz.5.4794'. [ 1614.282282][T24590] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4796'. [ 1614.357139][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1614.365958][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1614.379570][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1614.392900][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1614.421452][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1614.432063][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.444785][ T9] usb 2-1: config 0 descriptor?? [ 1614.537302][T10532] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1614.687538][T10532] usb 6-1: Using ep0 maxpacket: 16 [ 1614.698889][T10532] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1614.711788][T10532] usb 6-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 1614.721508][T10532] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.733093][T10532] usb 6-1: config 0 descriptor?? [ 1614.807659][T18320] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1614.862882][ T9] HID 045e:07da: Invalid code 65791 type 1 [ 1614.880218][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.003E/input/input124 [ 1614.913239][ T9] microsoft 0003:045E:07DA.003E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1614.980085][T18320] usb 3-1: config index 0 descriptor too short (expected 65535, got 36) [ 1614.997810][T18320] usb 3-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 1615.027827][T18320] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1615.038980][T18320] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 1615.049183][T18320] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1615.077042][T18320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1615.294800][T24595] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4790'. [ 1615.312370][T24595] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1615.342646][T10534] usb 3-1: USB disconnect, device number 3 [ 1615.356426][T10532] usbhid 6-1:0.0: can't add hid device: -71 [ 1615.374130][T10532] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1615.394483][T10532] usb 6-1: USB disconnect, device number 29 [ 1615.914184][T24597] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 1615.936483][T24597] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4798'. [ 1616.127279][T10532] usb 2-1: reset high-speed USB device number 4 using dummy_hcd [ 1616.523000][ T9] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 1616.718399][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1616.730013][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1616.755477][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1616.765028][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1616.776213][ T9] usb 6-1: SerialNumber: syz [ 1616.797525][ T9] usb 6-1: bad CDC descriptors [ 1616.806360][ T9] usb-storage 6-1:1.0: USB Mass Storage device detected [ 1616.834237][ T9] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1617.867372][ T8543] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1618.028914][ T8543] usb 3-1: Using ep0 maxpacket: 8 [ 1618.085208][T10534] usb 2-1: USB disconnect, device number 4 [ 1618.165218][ T8543] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1618.177215][ T8543] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1618.186847][ T8543] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1618.205784][ T8543] usb 3-1: config 0 descriptor?? [ 1618.474641][ T8543] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1618.779659][T24632] tipc: Enabled bearer , priority 0 [ 1618.797934][T24632] syzkaller0: entered promiscuous mode [ 1618.803893][T24632] syzkaller0: entered allmulticast mode [ 1618.847396][T24632] tipc: Resetting bearer [ 1618.872937][T24631] tipc: Resetting bearer [ 1618.880915][ T8543] usb 3-1: USB disconnect, device number 4 [ 1618.897636][T10534] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1618.935219][T24631] tipc: Disabling bearer [ 1619.069005][T10534] usb 4-1: config 0 has no interfaces? [ 1619.079071][T10534] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1619.097189][T10534] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.116261][T10534] usb 4-1: Product: syz [ 1619.201834][ T8543] usb 6-1: USB disconnect, device number 30 [ 1619.229154][T10534] usb 4-1: Manufacturer: syz [ 1619.233850][T10534] usb 4-1: SerialNumber: syz [ 1619.258309][T10534] usb 4-1: config 0 descriptor?? [ 1619.479115][T24646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4811'. [ 1619.491825][T10532] usb 4-1: USB disconnect, device number 126 [ 1619.677246][ T8543] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1619.877396][ T8543] usb 6-1: Using ep0 maxpacket: 32 [ 1619.889101][ T8543] usb 6-1: config 0 has an invalid interface number: 235 but max is 0 [ 1619.918011][ T8543] usb 6-1: config 0 has no interface number 0 [ 1619.967309][ T8543] usb 6-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 1619.985444][ T8543] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.044323][ T8543] usb 6-1: Product: syz [ 1620.052061][ T8543] usb 6-1: Manufacturer: syz [ 1620.087998][ T8543] usb 6-1: SerialNumber: syz [ 1620.132988][ T8543] usb 6-1: config 0 descriptor?? [ 1620.260630][T10532] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1620.292446][T24658] netlink: 'syz.3.4813': attribute type 9 has an invalid length. [ 1620.333116][T24658] netlink: 'syz.3.4813': attribute type 8 has an invalid length. [ 1620.366796][T24658] netlink: 143452 bytes leftover after parsing attributes in process `syz.3.4813'. [ 1620.434696][ T8543] kaweth 6-1:0.235: Firmware present in device. [ 1620.490081][T10532] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1620.511309][T10532] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1620.600732][T10532] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1620.613871][T24640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1620.637589][T24640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1620.688351][T10532] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1620.700540][ T8543] kaweth 6-1:0.235: Statistics collection: 0 [ 1620.706584][ T8543] kaweth 6-1:0.235: Multicast filter limit: 0 [ 1620.723863][ T8543] kaweth 6-1:0.235: MTU: 0 [ 1620.745063][ T8543] kaweth 6-1:0.235: Read MAC address 00:00:00:00:00:00 [ 1620.873033][T10532] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1620.996184][T10532] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1621.091025][ T5992] udevd[5992]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1621.312214][ T8543] kaweth 6-1:0.235: Error setting SOFS wait [ 1621.331676][ T8543] kaweth 6-1:0.235: probe with driver kaweth failed with error -5 [ 1621.357789][ T8543] usb 6-1: USB disconnect, device number 31 [ 1621.407482][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1622.230553][T10534] IPVS: starting estimator thread 0... [ 1622.331887][T24687] IPVS: using max 26 ests per chain, 62400 per kthread [ 1623.722966][ T8543] usb 3-1: USB disconnect, device number 5 [ 1623.741582][T24654] delete_channel: no stack [ 1623.754708][T24695] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 1623.982944][T24704] xt_HMARK: spi-set and port-set can't be combined [ 1624.578842][ T8543] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 1624.876212][ T8543] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1624.886252][ T8543] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1624.936744][ T8543] usb 3-1: config 0 descriptor?? [ 1624.960587][ T8543] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1625.161491][T24711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1625.298407][T24711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1625.769094][T24736] fuse: Bad value for 'fd' [ 1625.857390][ T8543] gp8psk: usb in 128 operation failed. [ 1625.871982][ T8543] gp8psk: usb in 137 operation failed. [ 1625.887831][ T8543] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1625.945685][ T8543] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1626.000600][ T8543] usb 3-1: USB disconnect, device number 6 [ 1626.545647][T24752] program syz.5.4837 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1626.586900][T24755] kernel read not supported for file /file1 (pid: 24755 comm: syz.2.4838) [ 1626.633805][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1626.633841][ T30] audit: type=1800 audit(1749302719.559:6571): pid=24755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4838" name="file1" dev="mqueue" ino=100798 res=0 errno=0 [ 1627.240050][T24776] FAULT_INJECTION: forcing a failure. [ 1627.240050][T24776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1627.260456][T24776] CPU: 1 UID: 0 PID: 24776 Comm: syz.4.4844 Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 1627.260487][T24776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1627.260498][T24776] Call Trace: [ 1627.260507][T24776] [ 1627.260517][T24776] dump_stack_lvl+0x189/0x250 [ 1627.260550][T24776] ? __pfx____ratelimit+0x10/0x10 [ 1627.260579][T24776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1627.260608][T24776] ? __pfx__printk+0x10/0x10 [ 1627.260630][T24776] ? __might_fault+0xb0/0x130 [ 1627.260663][T24776] should_fail_ex+0x414/0x560 [ 1627.260694][T24776] _copy_from_user+0x2d/0xb0 [ 1627.260717][T24776] ___sys_sendmsg+0x158/0x2a0 [ 1627.260747][T24776] ? __pfx____sys_sendmsg+0x10/0x10 [ 1627.260813][T24776] ? __fget_files+0x2a/0x420 [ 1627.260836][T24776] ? __fget_files+0x3a0/0x420 [ 1627.260870][T24776] __x64_sys_sendmsg+0x19b/0x260 [ 1627.260898][T24776] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1627.260932][T24776] ? __pfx_ksys_write+0x10/0x10 [ 1627.260949][T24776] ? rcu_is_watching+0x15/0xb0 [ 1627.260974][T24776] ? do_syscall_64+0xbe/0x3b0 [ 1627.260998][T24776] do_syscall_64+0xfa/0x3b0 [ 1627.261014][T24776] ? lockdep_hardirqs_on+0x9c/0x150 [ 1627.261051][T24776] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1627.261069][T24776] ? clear_bhb_loop+0x60/0xb0 [ 1627.261091][T24776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1627.261110][T24776] RIP: 0033:0x7f760198e929 [ 1627.261127][T24776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1627.261141][T24776] RSP: 002b:00007f75ff7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1627.261162][T24776] RAX: ffffffffffffffda RBX: 00007f7601bb5fa0 RCX: 00007f760198e929 [ 1627.261175][T24776] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1627.261187][T24776] RBP: 00007f75ff7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1627.261199][T24776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1627.261211][T24776] R13: 0000000000000000 R14: 00007f7601bb5fa0 R15: 00007f7601cdfa28 [ 1627.261240][T24776] [ 1627.917190][T10534] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1627.997418][T10532] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1628.067177][ T8543] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1628.075558][T10534] usb 6-1: Using ep0 maxpacket: 16 [ 1628.087440][T10534] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1628.099429][T10534] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1628.110079][T10534] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1628.123304][T10534] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1628.132546][T10534] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1628.143321][T10534] usb 6-1: config 0 descriptor?? [ 1628.157537][T10532] usb 2-1: Using ep0 maxpacket: 8 [ 1628.164681][T10532] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 1628.175215][T10532] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 1628.187215][T18320] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1628.196188][T10532] usb 2-1: config 135 has no interface number 0 [ 1628.202699][T10532] usb 2-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 1628.214246][T10532] usb 2-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 1628.228544][T10532] usb 2-1: config 135 interface 230 has no altsetting 0 [ 1628.237236][ T8543] usb 3-1: Using ep0 maxpacket: 8 [ 1628.247908][T10532] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 1628.257624][T10532] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1628.263852][ T8543] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1628.265743][T10532] usb 2-1: Product: syz [ 1628.279965][T10532] usb 2-1: Manufacturer: syz [ 1628.283894][ T8543] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1628.284645][T10532] usb 2-1: SerialNumber: syz [ 1628.306100][ T8543] usb 3-1: config 1 interface 0 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 1628.317143][ T8543] usb 3-1: config 1 interface 0 altsetting 13 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1628.334259][ T8543] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1628.343976][ T8543] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1628.356809][T24780] loop6: detected capacity change from 0 to 63 [ 1628.357068][T18320] usb 4-1: Using ep0 maxpacket: 8 [ 1628.370588][T24780] buffer_io_error: 28 callbacks suppressed [ 1628.370635][T24780] Buffer I/O error on dev loop6, logical block 0, async page read [ 1628.372891][ T8543] usb 3-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 1628.381652][T24780] Buffer I/O error on dev loop6, logical block 1, async page read [ 1628.388896][ T8543] usb 3-1: Product: syz [ 1628.396227][T24780] Buffer I/O error on dev loop6, logical block 2, async page read [ 1628.410650][ T8543] usb 3-1: Manufacturer: syz [ 1628.423405][T24780] Buffer I/O error on dev loop6, logical block 3, async page read [ 1628.427171][ T8543] usb 3-1: SerialNumber: syz [ 1628.434338][ T5991] Buffer I/O error on dev loop6, logical block 0, async page read [ 1628.438726][T18320] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1628.445471][ T5991] Buffer I/O error on dev loop6, logical block 1, async page read [ 1628.458172][T18320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1628.462344][ T5991] Buffer I/O error on dev loop6, logical block 2, async page read [ 1628.475736][T18320] usb 4-1: Product: syz [ 1628.479901][ T5991] Buffer I/O error on dev loop6, logical block 3, async page read [ 1628.484106][T18320] usb 4-1: Manufacturer: syz [ 1628.492165][T24784] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1628.510359][T18320] usb 4-1: SerialNumber: syz [ 1628.513062][T24789] Buffer I/O error on dev loop6, logical block 0, async page read [ 1628.531205][T24784] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1628.543985][T10532] usb 2-1: USB disconnect, device number 6 [ 1628.547718][T18320] usb 4-1: config 0 descriptor?? [ 1628.561710][T24789] Buffer I/O error on dev loop6, logical block 1, async page read [ 1628.766043][T18320] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1628.785404][ T8543] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 1628.806379][ T8543] usb 3-1: USB disconnect, device number 7 [ 1628.898865][T10534] microsoft 0003:045E:07DA.003F: No inputs registered, leaving [ 1628.910768][T10534] microsoft 0003:045E:07DA.003F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1628.923278][T10534] microsoft 0003:045E:07DA.003F: no inputs found [ 1628.934098][T10534] microsoft 0003:045E:07DA.003F: could not initialize ff, continuing anyway [ 1629.113306][T10534] usb 6-1: USB disconnect, device number 32 [ 1630.480806][T24788] syzkaller0: entered promiscuous mode [ 1630.486845][T24788] syzkaller0: entered allmulticast mode [ 1631.135986][T18320] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1631.727299][T23010] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1632.347319][T23010] usb 6-1: Using ep0 maxpacket: 8 [ 1632.365071][T23010] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1632.407443][T23010] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1632.437121][T23010] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1632.483348][T23010] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1632.605467][T23010] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1632.646029][T23010] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1637.773811][T23010] usb 6-1: usb_control_msg returned -110 [ 1637.787349][T23010] usbtmc 6-1:16.0: can't read capabilities [ 1638.004346][T24842] mac80211_hwsim hwsim13 wlan0: entered allmulticast mode [ 1638.034096][T18320] usb 4-1: USB disconnect, device number 127 [ 1638.330766][T24874] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4868'. [ 1638.387376][ T8543] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1638.404500][T23010] usb 6-1: USB disconnect, device number 33 [ 1638.488107][T18320] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1638.489009][T24879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1638.538764][T24879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1638.570528][ T8543] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1638.605993][ T8543] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1638.635639][ T8543] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1638.649905][ T8543] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1638.661274][ T8543] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.670752][T18320] usb 4-1: Using ep0 maxpacket: 16 [ 1638.679518][T18320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1638.698255][ T8543] usb 3-1: config 0 descriptor?? [ 1638.767727][T10532] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1638.798061][T18320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1638.920654][T18320] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1638.944469][T18320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.971584][T18320] usb 4-1: config 0 descriptor?? [ 1639.048746][T24894] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1639.128350][T10532] usb 2-1: device not accepting address 7, error -71 [ 1639.199911][ T8543] plantronics 0003:047F:FFFF.0040: No inputs registered, leaving [ 1639.223126][ T8543] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1639.418936][T24864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1639.428758][T24864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1639.544542][ T5906] usb 3-1: USB disconnect, device number 8 [ 1639.805833][T18320] letsketch 0003:6161:4D15.0041: Device info: ဉ [ 1640.006468][T18320] letsketch 0003:6161:4D15.0041: Device info: 豧 [ 1640.207473][T18320] letsketch 0003:6161:4D15.0041: Device info: 풝妝 [ 1640.316495][T24908] 8021q: VLANs not supported on vxcan0 [ 1640.448279][T18320] usb 4-1: Max retries (5) exceeded reading string descriptor 1 [ 1640.472811][T18320] letsketch 0003:6161:4D15.0041: probe with driver letsketch failed with error -71 [ 1640.629805][T18320] usb 4-1: USB disconnect, device number 2 [ 1642.207223][ T5906] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1642.274826][T24957] netlink: 'syz.1.4889': attribute type 4 has an invalid length. [ 1642.335377][T24959] netlink: 'syz.1.4889': attribute type 4 has an invalid length. [ 1642.806003][T24978] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4893'. [ 1642.817733][T24977] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4893'. [ 1642.851970][T24978] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4893'. [ 1642.872916][T24976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4892'. [ 1642.890414][T24978] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4893'. [ 1642.902458][T24977] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4893'. [ 1642.917097][T24978] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4893'. [ 1642.942275][T24978] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4893'. [ 1642.956475][T24977] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4893'. [ 1643.247096][ T5906] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 1643.406719][ T5906] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1643.445765][ T5906] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1643.532137][ T5906] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1643.605850][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1643.677793][ T5906] usb 6-1: Product: syz [ 1643.682220][ T5906] usb 6-1: Manufacturer: syz [ 1643.726391][ T5906] usb 6-1: SerialNumber: syz [ 1643.759970][T24971] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1644.093005][T24998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1644.108210][T24998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1644.251148][T24999] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1644.263694][T24999] [ 1644.266174][T24999] ============================================ [ 1644.272386][T24999] WARNING: possible recursive locking detected [ 1644.278712][T24999] 6.15.0-syzkaller-13526-g7a912d04415b #0 Not tainted [ 1644.285649][T24999] -------------------------------------------- [ 1644.291976][T24999] syz.3.4896/24999 is trying to acquire lock: [ 1644.298069][T24999] ffff888077dd8d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __netdev_update_features+0xcb1/0x1a20 [ 1644.309279][T24999] [ 1644.309279][T24999] but task is already holding lock: [ 1644.316689][T24999] ffff888077dd8d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x1990 [ 1644.326641][T24999] and the lock comparison function returns 0: [ 1644.332793][T24999] [ 1644.332793][T24999] other info that might help us debug this: [ 1644.341029][T24999] Possible unsafe locking scenario: [ 1644.341029][T24999] [ 1644.348673][T24999] CPU0 [ 1644.352051][T24999] ---- [ 1644.355330][T24999] lock(&dev_instance_lock_key#20); [ 1644.360627][T24999] lock(&dev_instance_lock_key#20); [ 1644.366019][T24999] [ 1644.366019][T24999] *** DEADLOCK *** [ 1644.366019][T24999] [ 1644.374271][T24999] May be due to missing lock nesting notation [ 1644.374271][T24999] [ 1644.382618][T24999] 2 locks held by syz.3.4896/24999: [ 1644.388138][T24999] #0: ffffffff8f510708 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x1990 [ 1644.397705][T24999] #1: ffff888077dd8d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x1990 [ 1644.408191][T24999] [ 1644.408191][T24999] stack backtrace: [ 1644.414179][T24999] CPU: 1 UID: 0 PID: 24999 Comm: syz.3.4896 Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 1644.414199][T24999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1644.414209][T24999] Call Trace: [ 1644.414219][T24999] [ 1644.414227][T24999] dump_stack_lvl+0x189/0x250 [ 1644.414256][T24999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1644.414281][T24999] ? __pfx__printk+0x10/0x10 [ 1644.414298][T24999] ? print_lock_name+0xde/0x100 [ 1644.414314][T24999] print_deadlock_bug+0x28b/0x2a0 [ 1644.414331][T24999] validate_chain+0x1a3f/0x2140 [ 1644.414348][T24999] ? is_bpf_text_address+0x292/0x2b0 [ 1644.414362][T24999] ? is_bpf_text_address+0x26/0x2b0 [ 1644.414379][T24999] __lock_acquire+0xab9/0xd20 [ 1644.414405][T24999] ? __netdev_update_features+0xcb1/0x1a20 [ 1644.414425][T24999] lock_acquire+0x120/0x360 [ 1644.414445][T24999] ? __netdev_update_features+0xcb1/0x1a20 [ 1644.414468][T24999] __mutex_lock+0x182/0xe80 [ 1644.414483][T24999] ? __netdev_update_features+0xcb1/0x1a20 [ 1644.414502][T24999] ? kasan_save_track+0x4f/0x80 [ 1644.414515][T24999] ? kasan_save_free_info+0x46/0x50 [ 1644.414535][T24999] ? __kasan_slab_free+0x62/0x70 [ 1644.414550][T24999] ? kmem_cache_free+0x18f/0x400 [ 1644.414565][T24999] ? netlink_broadcast_filtered+0x103c/0x1140 [ 1644.414583][T24999] ? ethnl_multicast+0xb6/0x100 [ 1644.414600][T24999] ? ethnl_default_notify+0x7c0/0x990 [ 1644.414619][T24999] ? ethnl_netdev_event+0xe2/0x160 [ 1644.414639][T24999] ? __netdev_update_features+0xcb1/0x1a20 [ 1644.414658][T24999] ? __lock_acquire+0xab9/0xd20 [ 1644.414681][T24999] ? __pfx___mutex_lock+0x10/0x10 [ 1644.414700][T24999] __netdev_update_features+0xcb1/0x1a20 [ 1644.414725][T24999] ? __pfx___netdev_update_features+0x10/0x10 [ 1644.414744][T24999] ? __wake_up_common_lock+0x190/0x1f0 [ 1644.414763][T24999] ? cfg80211_netdev_notifier_call+0x1ea/0x13c0 [ 1644.414782][T24999] ? netlink_broadcast_filtered+0x10c6/0x1140 [ 1644.414799][T24999] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 1644.414823][T24999] ? __lock_acquire+0xab9/0xd20 [ 1644.414844][T24999] ? do_raw_spin_lock+0x121/0x290 [ 1644.414862][T24999] netdev_update_features+0x6d/0xe0 [ 1644.414878][T24999] ? __pfx_netdev_update_features+0x10/0x10 [ 1644.414907][T24999] macsec_notify+0x2f5/0x660 [ 1644.414926][T24999] ? __pfx_macsec_notify+0x10/0x10 [ 1644.414945][T24999] notifier_call_chain+0x1b3/0x3e0 [ 1644.414964][T24999] netdev_features_change+0x85/0xc0 [ 1644.414981][T24999] ? __pfx_netdev_features_change+0x10/0x10 [ 1644.414997][T24999] ? security_capable+0x7e/0x2e0 [ 1644.415017][T24999] dev_ethtool+0x1520/0x1990 [ 1644.415042][T24999] ? __pfx_dev_ethtool+0x10/0x10 [ 1644.415067][T24999] ? dev_load+0x21/0x1f0 [ 1644.415084][T24999] dev_ioctl+0x392/0x1150 [ 1644.415103][T24999] sock_do_ioctl+0x22c/0x300 [ 1644.415117][T24999] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1644.415139][T24999] ? __lock_acquire+0xab9/0xd20 [ 1644.415162][T24999] sock_ioctl+0x576/0x790 [ 1644.415183][T24999] ? __pfx_sock_ioctl+0x10/0x10 [ 1644.415204][T24999] ? __fget_files+0x2a/0x420 [ 1644.415220][T24999] ? __fget_files+0x3a0/0x420 [ 1644.415239][T24999] ? __fget_files+0x2a/0x420 [ 1644.415255][T24999] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1644.415276][T24999] ? __pfx_sock_ioctl+0x10/0x10 [ 1644.415296][T24999] __se_sys_ioctl+0xfc/0x170 [ 1644.415318][T24999] do_syscall_64+0xfa/0x3b0 [ 1644.415333][T24999] ? lockdep_hardirqs_on+0x9c/0x150 [ 1644.415353][T24999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1644.415371][T24999] ? clear_bhb_loop+0x60/0xb0 [ 1644.415388][T24999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1644.415403][T24999] RIP: 0033:0x7f9e2278e929 [ 1644.415419][T24999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1644.415432][T24999] RSP: 002b:00007f9e23569038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1644.415464][T24999] RAX: ffffffffffffffda RBX: 00007f9e229b6240 RCX: 00007f9e2278e929 [ 1644.415475][T24999] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006 [ 1644.415486][T24999] RBP: 00007f9e22810b39 R08: 0000000000000000 R09: 0000000000000000 [ 1644.415497][T24999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1644.415508][T24999] R13: 0000000000000000 R14: 00007f9e229b6240 R15: 00007f9e22adfa28 [ 1644.415526][T24999] [ 1645.068894][ T5906] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 1645.076242][ T5906] cdc_ncm 6-1:1.0: bind() failure [ 1645.158863][ T5906] usb 6-1: USB disconnect, device number 35 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1645.932236][T25013] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1645.940046][T25013] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1645.948308][T25013] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1645.958228][T25013] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1645.968822][T25013] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1648.017896][T25013] Bluetooth: hci0: command tx timeout [ 1650.087611][T25013] Bluetooth: hci0: command tx timeout [ 1652.167436][T25013] Bluetooth: hci0: command tx timeout