last executing test programs: 6.778087475s ago: executing program 3 (id=269): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100001f00702500000000002020207b1af8ff00000000bfa10000000000000701"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x5e}) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x8800, 0x0) r1 = msgget$private(0x0, 0x3a9) msgctl$IPC_SET(r1, 0x1, &(0x7f00000003c0)={{0x2, 0xee00, 0x0, 0x0, 0xee01, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000440)="0f35bad004ec660f3a156d78440fc7356823f7baf80c66b8dbfac28e66efbafc0cb009ee0f01c30f18090f20d86635200000000f22d8440f20c0663502000000440f22c0", 0x44}], 0x1, 0xa, &(0x7f00000003c0), 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000eb99710c0000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0xffffff80, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000305000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000005c000000000000000f00e035200000000f22e0"], 0x5c}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x3, 0x4, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000009000000050000000900000000080000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000020000000200002000"/28], 0x50) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="010000e9ffff4f000000000000000f080f0866ba2100b0db000000ef450f22c2"], 0x296}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.63377806s ago: executing program 3 (id=272): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0x70ff}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0xfe, 0x0, 0xa1a}]}, 0x10) sendmmsg(r1, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b40)="97a797c5", 0xa797}], 0x1}}], 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000200)={0x2a, 0x1, 0x1}, 0x66) r8 = syz_io_uring_setup(0x49a, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r7, 0x0, 0x0}) io_uring_enter(r8, 0x40f9, 0x217, 0xa5, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x2, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYRESOCT=r3, @ANYRES8=r3], 0x9) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 6.540434228s ago: executing program 4 (id=273): r0 = socket$kcm(0x10, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x1, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_STATUS_MASK={0x8}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x40}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x404}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x44}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x8045) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x800, 0x0, 0x40000333}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000480)}) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r7 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) readv(r7, &(0x7f0000000300), 0x0) ppoll(&(0x7f0000000140)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000180)={0x38000, 0x8, 0x0, 0x2, 0x5, "aa32b73986bbee6bd231334cbfa0b758261a93"}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x0) 6.378762339s ago: executing program 0 (id=275): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) setgroups(0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f14241313060608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004010) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="24005a802000018005000400"], 0x40}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x46, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (async) setgroups(0x0, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f14241313060608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004010) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) (async) close(r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="24005a802000018005000400"], 0x40}}, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x46, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) (async) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) 6.11292616s ago: executing program 2 (id=276): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sysvipc/sem\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1d"], 0x118) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x12b900, 0x0) ioctl$FBIOBLANK(r2, 0x4611, 0x200) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r1, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x38, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}]}, 0x38}}, 0x0) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11ff, 0x3331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x3, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044080}, 0x20004801) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="6012f4000000050100f400bd1f86c259cc7193e509cf397049071512f7269ac07ae678cb6d7ffce68ff424f4fcd076ed7af24f49051c0d1d84839a0aa0ae95d5ae5e526d7aba5b6e0bad0961ff6fc6280c064a206021e79f9a0d9d3b1ad6d1ad0a5c93d0d4"], 0x0, 0x0, 0x0, 0x0}, 0x0) 6.082607656s ago: executing program 0 (id=277): personality(0x619641b6fb4b8591) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xb}}, './file0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'macvtap0\x00', 0x100}) uname(&(0x7f0000000180)=""/224) uname(&(0x7f0000000280)=""/4096) 5.975990936s ago: executing program 4 (id=278): socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000040)={0x7f, [0x5, 0x8, 0x1, 0x1, 0xb, 0x7, 0x9, 0xff6, 0x8, 0x7, 0x3883, 0xe, 0x0, 0x7, 0xf7, 0x2341, 0x2, 0x5, 0x6, 0x7ff, 0x8, 0x80, 0x269b, 0x6, 0x5, 0x9, 0x9, 0x4b7, 0x1, 0x1, 0xff, 0x1, 0x5, 0x2, 0x224, 0x7, 0x3399, 0x80, 0x8, 0x6, 0xfff6, 0x7, 0x7, 0x7, 0x0, 0x9, 0x9, 0x1a2f], 0xd}) syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x19, 0x3, 0x1) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000ac9"]) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x6, 0x40a42) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000001c0)={0xc, @vbi={0xd5, 0x8e6, 0x7, 0x59565955, [0xdbd, 0x1], [0x3, 0x4], 0x108}}) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000040)={0x0, 0x8, 0x2, {0x9, @pix_mp={0xf, 0x5be7, 0x34565348, 0x0, 0xb, [{0x80000004, 0x7}, {0x7ff, 0xb325}, {0x10000001, 0x400009}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x4, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x5, 0xc, 0x2, 0x1, 0x3}}, 0xfffffffd}) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9, 0x2}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffffe}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2b, 0x70bd25, 0x70bd2d, 0x70bd2d, 0x6, [0x57054dd1]}}]}, 0x160}}, 0x0) ptrace(0x10, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r6, @ANYRES16=r2], 0x0) 5.955176949s ago: executing program 0 (id=279): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)="ceae130f17af1fe3760d8839cb177228debae137815bd5db466efb7aca7e23a7d674527455070ac913e297f2ed9ce4105df75d8048", 0x35}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)="285d9e76db019f14367834d67a8e813da817d228af9b24ece0d0109b3f5c08c7119a9664a6bd1a92d68a7fc58973062a2cf0b4dbbc244f977de29cd1c11b96c413515f7b44ca3ca8461ccd", 0x4b}], 0x1, &(0x7f0000000700)=[@ip_retopts={{0x60, 0x0, 0x7, {[@rr={0x7, 0x1b, 0xda, [@rand_addr=0x64010100, @local, @rand_addr=0x64010100, @private=0xa010101, @rand_addr=0x64010101, @broadcast]}, @timestamp_prespec={0x44, 0x34, 0x25, 0x3, 0x4, [{@loopback, 0x3}, {@local, 0x1}, {@multicast2, 0xda}, {@broadcast, 0x10}, {@empty, 0x9000000}, {@multicast1, 0xa}]}]}}}, @ip_retopts={{0x184, 0x0, 0x7, {[@cipso={0x86, 0x35, 0xfffffffffffffffe, [{0x1, 0x12, "7e35ed4b34831ab57e6106b48cfe54e5"}, {0x2, 0x12, "0af49a598c29c000d8c1adc9e80792ab"}, {0x1, 0x7, "1db9f060f1"}, {0xf17ff0ba9284e9f1, 0x4, "1027"}]}, @cipso={0x86, 0x35, 0x3, [{0x7, 0x11, "1553bbd04d197664fad49101f7c0a9"}, {0x7, 0x5, "75adfe"}, {0x6, 0x10, "ba5956d95dbb2b3c20b95848a81b"}, {0x1, 0x4, "fda5"}, {0x0, 0x2}, {0x2, 0x3, 'q'}]}, @cipso={0x86, 0x48, 0xffffffffffffffff, [{0x0, 0x3, '\b'}, {0x6, 0x7, "cc960fd836"}, {0x2, 0x5, "55ee04"}, {0x6, 0x7, "21bd11c0df"}, {0x1, 0x4, "ea20"}, {0x5, 0x9, "080cc9375bae89"}, {0x5, 0xe, "dcf5652d6c9d7e37ae2ef45e"}, {0x1, 0x11, "b027f53919d5368ce2a23387029cb6"}]}, @end, @timestamp={0x44, 0x14, 0x1, 0x0, 0x3, [0x401, 0x9, 0x3, 0x8001]}, @cipso={0x86, 0x3d, 0x1, [{0x6, 0x11, "968556387fbf8bf548d47e66d06816"}, {0x0, 0x2}, {0x5, 0x2}, {0x6, 0x8, "dd7c7f761229"}, {0x6, 0x4, "51b3"}, {0x1, 0x8, "19e20c1dbcbc"}, {0x7, 0xe, "05b30fe367be63c285585d20"}]}, @timestamp_addr={0x44, 0x34, 0x13, 0x1, 0xd, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@multicast1, 0x6}, {@multicast1, 0x9}, {@dev={0xac, 0x14, 0x14, 0x37}, 0xdb60}, {@multicast1, 0x40}]}, @lsrr={0x83, 0x13, 0x40, [@broadcast, @remote, @local, @empty]}, @rr={0x7, 0x27, 0xde, [@private=0xa010101, @multicast1, @remote, @multicast2, @empty, @multicast2, @multicast2, @empty, @multicast1]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@cipso={0x86, 0x26, 0x1, [{0x1, 0x12, "4176963282028bc8a23fd6ff234590db"}, {0x1, 0xe, "3d4f712f06f5a91303f90dfd"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8f2d}}, @ip_retopts={{0xd8, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4c, 0xd7, 0x3, 0xb, [{@local, 0x8020}, {@loopback}, {@rand_addr=0x64010100, 0x5e}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2a}}, {@rand_addr=0x64010101, 0xd}, {@loopback, 0x5}, {@local, 0x440}, {@broadcast, 0x6}]}, @noop, @end, @ssrr={0x89, 0x17, 0x3d, [@broadcast, @private=0xa010102, @multicast1, @dev={0xac, 0x14, 0x14, 0x1c}, @empty]}, @timestamp={0x44, 0x18, 0xc, 0x0, 0x7, [0x80000001, 0x8001, 0xa, 0x9, 0x3]}, @end, @rr={0x7, 0x27, 0xa9, [@multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x2e}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @broadcast]}, @cipso={0x86, 0x17, 0x3, [{0x2, 0x11, "5c11cf906b33b28dda6a54ba376d23"}]}, @rr={0x7, 0xb, 0x35, [@broadcast, @multicast2]}]}}}], 0x348}}, {{&(0x7f0000000a80)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000001000)=[{&(0x7f0000000ac0)="8b348d6b72b741e742e12e3cad79dae0ca65a2a92e4fa50dc8764791d9fa60cbdac98017f52b2c1e9f5244cc6f7211b31af8d771f533f57b9c7c765be40554aa6083c7308a34b6142efaadf0eb33717c1957a95b69e04264697946e59c22626c24dd3179ad71f7e949e990f2a23b98f67937df91c359ef621a8f2fee0150ae7359ca6d77027b15dce8b7cd94109f26f13888b7bd8915ef", 0x97}, {&(0x7f0000000b80)="d3f23ed5d7f7b0b7849c0b504016865b3bfa939901f129a292e1cd64b3b734e5051a15318659c4ee37cf2737c276d6b36538e5563dd99df8d765104d619444d9fd938876334e0d4d", 0x48}, {&(0x7f0000000c00)="817dab5809308fde20cb00bd45df763e24f4b78dac33bf9cf236707a90c43671fd2f2077c8748ca341741e0d7cf1895307bbfa2f7f059bf44aa81583beb799ad1e6124b71c614a571a71f7fe5ccc0cdf976b031ec398d5a809eb9438033ec3ae44a5248191258a5edd1252899d0020b087d0959f172876a3d6c4bd498df9165e4321b50e45ac39b4591f72500043d0ab61c72dc4e5023473e1e1837843393c01ebb6728ad7840aa360de26eb9cdd8288b2950ddc56091c38f633266214320d0aa5aaeb1b0f7cdfeeb7eb18215af1aa53b4569c2ab6beaa69b5121f7ddce96d591d5573345ba48041723a9d6d9499d22212d860615fa748", 0xf7}, {&(0x7f0000000d00)="2ba71f381f509739c50078b410e527caca2258a9f174fad0352267", 0x1b}, {&(0x7f0000000d40)="241e9b2ed2c09aa2370dc133f71fb685bb43353833ec14b344f30bbe9d84da0e9e4029532f1aec8fe237076f7f8eafdd91dc0a52bef4fa510a2f", 0x3a}, {&(0x7f0000000d80)="4f14d83185c6b135c9efa6e852b48c4efce6724ddac0c5478f4b33d35842a4657c34ca", 0x23}, {&(0x7f0000000dc0)="86160872d7f26f1277cd54d6ef7eb78f22ec3628660450e92c55d785341525f93cd01738fcd780677f08b272a78594fc7b4fb42f6ff66653ef0133680ff80b3fa9b2cc68b63ec7c3078a47f54faa734d7e0b6f9bee4c09146462f4190251230ff652d49f1c4a9da086bba861e501ab8b575d6eacc6497f6f026349a5d0f0e69368db0c9b4d38efc1172ff3b7e7c97f54b45fddc23440d2330dd46bf3e5bc", 0x9e}, {&(0x7f0000000e80)="a6f4b441b51056905e620d753b16473dc1b38eff55ee42a6381135e70c1408246f02144b76bbcabf23d669304b78dd222b942b3af0777ce16c12162610e0e95825bceb7ccfb5883ae5b22e35a332420b90ab08139b9fe060c00e98d8a9bd54508a7e004963f3cf0a18f11f753eec821a789f5c7a93ec9f927c69482097933b4dd9", 0x81}, {&(0x7f0000000f40)="c72807058ea02ea0a50c235608ddf7d067db9f2a17dd5a7c921acd00ba136374141ae8e4148b9246224a94dcaad37df086d466db3000eacb1467bdda7721cede0f021859109b", 0x46}, {&(0x7f0000000fc0)="c3740f39227f00e378618589ef1c42c78423cf91996f977dbc0a47866eed05af16d1", 0x22}], 0xa, &(0x7f00000010c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x18}}, {{&(0x7f0000001100)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000001480)=[{&(0x7f0000001180)="aad1d440d57251486998523b0d4f08cbc2885b9324272e0dab54c8229d4ab953a721aa819dbd42242724d71d29666b79f74c7720fd5b4ae4c273b677f4957cf83ef1da0241011631e64c04d7efb3c2ec52533e6115cc2b4d3f", 0x59}, {&(0x7f0000001200)="d77f7694531cdff6873d9e32453d6eb16d8ef300bdb66840b134642f3eb19a5b1e202c46dafda2e6f942d4d7ee76f9de2b55a37860256bbd5820f783df221b67ee26fe50a85652df148f064736cc57bf4d60495560bbc0d1aae41cab6f5f994b342f06f06883a389a911a087d22ef92e6d3096cfbd981b004527711f57814af86a38fb97a2d7c3007383c10965fed1ab0b7aee7ee511eec084fdaf13d315a64c555e169bd622686eedd8815b3471f38f5037a3b6abcee0ca92a9116d920738d8f6b6b0eecc6e13b2f192d3f5572bc3ca86e6f0", 0xd3}, {&(0x7f0000001300)="b5125ca959905d16e5ef4c1d1e534377a02b7fda1d7f2495a7c34b5f8962b45d6c5ca936b657e6f6a3953551c13828699a7c23c85a2aa32e63020be9b45ea1682403668a51e9a800072dd544f8244c35938a6c46609e20b52d7bc831365356bae6fa0bb62e51a6a3fe33c4dd83d81c9268774e04290b1e7f027c28fcbfd6f966aba369928f4faa2a9c62d83f80", 0x8d}, {&(0x7f00000013c0)="3dda494940973e5cfe2bc89d782787fcbef1632ff6e74ffb36febd0e5f3674c9bb7208221e41863220750f48937729bca4c3bb86e7351d80e6b5c0960d34a030a5ca6a577a9f9aa77c827c5649", 0x4d}, {&(0x7f0000001440)="e043e60ea6606a368a4ca0ebdf16d86f42f004b52912510b68be62e6d3f3b55191e3448a016b7313350b51f4d4f6385a5ee658b93da773a2e2fc109849cd", 0x3e}], 0x5, &(0x7f0000001500)=[@ip_retopts={{0x108, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0xdf, [@multicast2]}, @lsrr={0x83, 0x17, 0x5d, [@loopback, @dev={0xac, 0x14, 0x14, 0x2b}, @local, @remote, @multicast2]}, @timestamp_prespec={0x44, 0x1c, 0xcf, 0x3, 0x2, [{@broadcast, 0x10001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1e160000}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x8001}]}, @timestamp_prespec={0x44, 0x3c, 0xa7, 0x3, 0xd, [{@rand_addr=0x64010102, 0x500}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x8}, {@broadcast, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@rand_addr=0x64010100, 0x3}, {@remote, 0x80000000}, {@rand_addr=0x64010102, 0x62e3}]}, @end, @generic={0x6d, 0xb, "8346b16653c8895586"}, @timestamp={0x44, 0xc, 0xc8, 0x0, 0x7, [0x7, 0x7fff]}, @timestamp={0x44, 0x24, 0x87, 0x0, 0x7, [0x2, 0x6, 0x2, 0x800, 0x101, 0x2, 0x0, 0x1b]}, @ssrr={0x89, 0xf, 0x1d, [@private=0xa010102, @broadcast, @multicast2]}, @timestamp_prespec={0x44, 0x34, 0xc4, 0x3, 0x9, [{@local, 0xffff}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x40}, {@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x5}, {@private=0xa010101}, {@loopback, 0x5}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xbd5e}}, @ip_retopts={{0x64, 0x0, 0x7, {[@noop, @rr={0x7, 0x27, 0xba, [@private=0xa010101, @loopback, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast1, @empty, @remote, @local]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x27, 0xc0, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x31}, @multicast1, @private=0xa010102, @loopback, @broadcast, @loopback, @multicast1]}, @noop]}}}], 0x188}}, {{&(0x7f0000001fc0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000002000)=[{&(0x7f0000002080)="9e41c447", 0x4}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002800)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x27}, @empty}}}], 0x20}}], 0x6, 0x1) 5.564064196s ago: executing program 1 (id=281): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) r2 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000040)={0x0, 0x0, 0x80000003, 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000380)="b36aa8f47b84f4fc1ad24cfdc7d7392acc802946782cb42ab6319b09a969b86ba9788f490f3b80ce9d08d6015f6aa3d49f69deef28bceed2384f45a707ba6eff01520d563694339f8e33849539ed84c4edb0361877f3561718fcd989b22e94f0c65e189a73810620a4002245c619afd521dffa176b719219f59d71ea6168f91fe1466c2079e242141c80e1330f0e94a13ae4adb1cd3293127765e8da8da3e52215877527da51e021cd25863eede21b3a4b55c7d907ec793b20d31319d488c2e31384cc0430d0cadc1294f6e52011a6d6580564149080530f", 0xd8}, {&(0x7f0000000480)="c65ccef16510d2a1fd8166ae7e3a6e33f565b7b2c2041eb6cb5618c2bcd77fd3bc3a65d79bfbe138b911367b174e93cb87489c9511f45d8a4b2ae3b67505393c5fe2be77a3881c25b1ea83c88936932b51be881f451ae01d4764873d186fa2d901572b5a002e2432afb7869167e19f9c42e56669d036", 0x76}], 0x2, 0x4) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000100)={0x1, [[0x400, 0x6607, 0x3ff, 0xe, 0x5, 0x2, 0x1, 0x400], [0x14000, 0x743, 0x8, 0x1, 0xb, 0x5, 0x1fb, 0x6], [0x6, 0x6, 0x2, 0x10, 0x3, 0xffff, 0xfffffff8, 0x9]], '\x00', [{0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x8, 0x3, 0x0, 0x1}, {0x3, 0x7ce, 0x0, 0x0, 0x0, 0x1}, {0x6, 0x8, 0x1}, {0x6, 0xfffffffe, 0x1, 0x0, 0x0, 0x1}, {0x52, 0x8, 0x0, 0x1}, {0x1ff, 0x2, 0x1, 0x1, 0x1, 0x1}, {0x9af, 0x4, 0x1, 0x1, 0x1}, {0xa8, 0xfffffff9, 0x1, 0x0, 0x0, 0x1}, {0x8, 0x5, 0x0, 0x1}, {0x38000, 0x6, 0x1}, {0x3, 0x3ff, 0x1, 0x1}], '\x00', 0x9}) 5.561676651s ago: executing program 1 (id=282): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000024c0)={@in={{0x2, 0x4e23, @remote}}, 0x0, 0x0, 0x3a, 0x0, "52ffc49cd854ae49e6f756bdcb02d22d832c106b31e838dd654a8657442bfe8b5d436609a810338b067a4682d6871e2da4397b115abe9e877cfe8cac3e8c1825e74f6c608101a4e9ba09a66c75f1b9f5"}, 0xd8) setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000004240)=0x41db, 0x4) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x1000000, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000480)={0x2020}, 0x2020) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/17, 0x11}, 0xf1}], 0x1, 0x22, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000000)=0x7f, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a80)=@nat={'nat\x00', 0x1b, 0x5, 0x588, 0x398, 0x120, 0xffffffff, 0x238, 0x0, 0x4b8, 0x4b8, 0xffffffff, 0x4b8, 0x4b8, 0x5, &(0x7f0000000580), {[{{@ipv6={@private1, @local, [0xff, 0xff000000, 0xffffff00, 0xffffff00], [0xff000000, 0xff000000, 0xffffff00, 0xffffff00], 'veth1_macvtap\x00', 'veth0_macvtap\x00', {}, {}, 0x2c, 0x1d, 0x1, 0x40}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[0x4e23, 0x4e22], [0x4e23, 0x4e21], 0x0, 0x5, 0x100, 0xc}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0xb0f7ac20175ba94d, @ipv4=@empty, @ipv4=@private=0xa010101, @gre_key=0x6, @gre_key=0x8}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1b, @ipv6=@dev={0xfe, 0x80, '\x00', 0x34}, @ipv4=@multicast2, @port=0x4e20, @port=0x4e22}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, [0xff000000, 0xffffff00, 0xffffff00, 0xffffffff], [0xffffff00, 0x0, 0xffffff00, 0xff], 'wg1\x00', 'pim6reg0\x00', {}, {}, 0x21, 0x1, 0x3, 0x2}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@icmp6={{0x28}, {0x5, "7eaa"}}, @common=@hbh={{0x48}, {0xf, 0x0, 0x1, [0x0, 0x421, 0xe6, 0x1, 0x0, 0x5, 0x8, 0x1000, 0x7, 0x5, 0x0, 0x6, 0x3, 0x9, 0x7, 0xc0], 0x3}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private0, @ipv4=@broadcast, @icmp_id=0x64, @gre_key=0x101}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@unspec=@realm={{0x30}, {0x1a, 0x7, 0x80}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x1, @ipv4=@local, @ipv4=@broadcast, @port=0x4e20, @gre_key}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="030000000000000001000000de07000003000000290500000300000002000000ffffffff000000000000000000000000010000000000000004000000ff03000002000000ff"]) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x80000, 0x0, 0x6}, 0x18) execveat(r7, &(0x7f0000000100)='./file0\x00', &(0x7f0000000400)={[&(0x7f0000000140)='\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='/dev/kvm\x00', &(0x7f0000000340)='-\x04-:]]\a+\x00', &(0x7f0000000380)='/dev/kvm\x00', &(0x7f00000003c0)='\x00']}, &(0x7f0000000540)={[&(0x7f0000000440)='/dev/kvm\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)=':*@\x00', &(0x7f0000000500)='\x00']}, 0x800) 5.395752338s ago: executing program 3 (id=283): r0 = socket(0x10, 0x803, 0x0) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0xfffffffffffffe41) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYRESOCT=0x0, @ANYRES16=0x0, @ANYBLOB="0000000400"/20, @ANYRESHEX=r2, @ANYRES32=r3, @ANYRESDEC=r2], 0x50) mmap(&(0x7f00005e8000/0x1000)=nil, 0x1000, 0x2000003, 0x28011, r3, 0xffff8000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x8910, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000300)=0x3) r5 = landlock_create_ruleset(&(0x7f0000000280)={0x5080}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000340)={0x2000}, 0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) rt_sigaction(0x40, &(0x7f0000000140)={&(0x7f0000000000)="24339e9e0f1c2bdfd5c4a2f10027c6c43b640febce41d3ca6566f00fc02c101c65d2150e000000dbf5", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000380)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) r8 = syz_open_procfs(0x0, &(0x7f00000004c0)='stat\x00') read$FUSE(r8, &(0x7f0000004180)={0x2020}, 0x2020) sendto(r0, &(0x7f0000000740)="120000001200e7efe87a00000000000000a5", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000540)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000400)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/112, 0x70}, {&(0x7f0000000880)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf, 0x34000}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 5.064947647s ago: executing program 0 (id=284): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x80) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c00228034000080080003000000000008000500000000000800020000000000080003000000000008000200000000000800040000000000440000800800040000000000080007000000000008000600000000000800050000000000080001000000000008000200000000000800030000000000080007"], 0xc0}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r2, 0x1ff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) r5 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r5, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000180)=ANY=[], 0xe) sendfile(r5, r5, &(0x7f0000001000), 0xffff) sendmmsg$inet_sctp(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000008600000005000000200000007f0000023c54e2a4494880e68b921a0fecce02c83d9195a20471e6eaeac3b6505e88b524afd5ebb2bc5c88d8db2ea2e18de5df45757a295f70ba6231387dc53681db4afc32cbea0c40ce7f31c7c91d59417ee3d58d277a9562f965764b9798352c76cb8ddc2b180b9c0fecd3d8dfbfe2c915b9db2c99aaa96584ec7c725ce6e489de5800443c687af373ffed2bc241532577e48251fe8b413cf4635941d2450b2ab8340c256cc8907125f92a8ff2c3ccf9fadcb5706592bfc0888a95c512696b5da2639f9e5eb300"], 0x18, 0x40884}], 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r6, 0x0) renameat(r1, &(0x7f0000000000)='./file1\x00', r1, &(0x7f0000000200)='./file0\x00') syz_genetlink_get_family_id$SEG6(&(0x7f0000000400), r1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000947000/0x1000)=nil, &(0x7f0000260000/0x2000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000947000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000969000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0, r6}, 0x68) 4.580026946s ago: executing program 1 (id=285): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) (async) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) (async, rerun: 64) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) (rerun: 64) r2 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r2, 0x0) (async, rerun: 64) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) (async, rerun: 64) migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x6, &(0x7f0000000000)=0x101) 4.502997658s ago: executing program 4 (id=286): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f00000000c0)) creat(&(0x7f00000001c0)='./file0\x00', 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fgetxattr(r3, 0x0, &(0x7f0000000040)=""/111, 0x6f) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) (async) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x22000, 0x0) io_uring_setup(0x5bde, &(0x7f0000000380)={0x0, 0x5f41, 0x80}) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) (async) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f00000001c0)) (async) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) (async) add_key$fscrypt_provisioning(&(0x7f0000000200), &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000480)=ANY=[@ANYBLOB="0300000000020304050607fd6ea6f40c0d0e0f1011121314ba0b4d149905df9c202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f40e2953090b015ee17b76f98f6ef69df92adead314629b16c6e4470843151e6496553712292fc360cca00f99ccb8d4a6ac7ccd4affee544400000000000000"], 0x48, 0xfffffffffffffffa) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x6, 0x5, 0xa, 0x8, 0x81, 0x9, 0x4, 0x10, 0x5, 0xd, 0x0, 0xa, 0x9, 0x81, 0x3, 0x5}}) (async) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xcc, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x1, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000200000008001240000000000500050002000000050004000000000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) 4.450965151s ago: executing program 3 (id=287): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) dup(r1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="9d7fcf3efc6316a6a555ba8b4726d7ccaf8a060000009cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71ad21b965f615b31105d60a4b16fa2fa1371850a1be85ffcad45b49422b2121d709014f49cf6bd1d18acc4c19e4356669a2ac3e05d5cdc6f0f485c1eb52ea8faf7e83a1468b6a491e71ae3d03cd9677e72413954feae71b5775a6e3e9fa9db9e1ed56e56bff66a7a86214d8145d878e26fa35bd55db98ecdef374d26a5d9cd0e89f3ae45be2d8e1d98ee0865fb64d6dd1e8c89608733370f12be1495d81b36dd72cc28e9c9b2c45f925b38b21818d93ce604772c21824e45793c4073eb44773f8e42c9ebb297dd5e76e856a22253c0e8a80f33b4d015c3f9c0c26bcdd6b440322a23b10d507eecead59faa166bdac1bd840211336dc0c", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xff00) (async) r4 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r2, 0x40a0ae49, &(0x7f0000000080)={0x801, 0x8080000, 0x0, r4}) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x503, 0x70bd29, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x68315, 0x100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x100000}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 4.320131918s ago: executing program 4 (id=288): syz_emit_ethernet(0xae, &(0x7f0000000880)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x78, 0x16, 0x0, @local, @local, {[@dstopts={0x89, 0xe, '\x00', [@generic={0x31, 0x6e, "fa913621b5a2df267f483e43d9b58309590995aa46d548ffd3b795fef52731d3896c94289df9d986f67309f7573613633974f50accf3710d8c5ed7363d4d7ac5f11c7a7961f11a5041acb384f3db60a99de868dd37d1548349c7523845a3342d37511a3d492aed55c4375f97da03"}]}]}}}}}, 0x0) 4.276944401s ago: executing program 4 (id=289): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000568000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30000000001400000011000100"], 0xf0}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340)={0x0, 0x16, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.214662308s ago: executing program 3 (id=290): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(r2, 0x0, 0x1, 0x0) sched_setattr(r2, &(0x7f0000000100)={0x38, 0x5, 0x2, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1f00, 0x12) ioprio_set$pid(0x2, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) syz_open_dev$vim2m(&(0x7f00000005c0), 0x1ff, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000240)={0x20, 0x0, 0x2}, 0x18, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f00000002c0)={0x20, r7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, 0x0, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue0\x00', 0x200000}) 3.722024335s ago: executing program 0 (id=291): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000680)=ANY=[@ANYRES64=r0, @ANYRESHEX=r0, @ANYBLOB="216a0fb0001fec03d2a516f9b31f65b108d201c26e8256981adff506837e4d9fe910ea994e7b659e60fd7311ad51230220d1c9e0d2141d18dad1c15dc183637293353b5cb70c054003823843b5bb24399d39788a232a2e798d48f38fc07ea9b8acd9243e5b6c64fe11595ef16cbedd70182b498460ffd40f96726d23fb97b312f5bdee2de661b137900d95ae269c5ecac4ddfb55358dd4b2b77cc7a7196bf666d8f54cd4b3b6cfcb841cc6e60a874f2f744670d67664b9", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='5\x00']) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) (async) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x437, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, 0x504a3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40840}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x437, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, 0x504a3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40840}, 0x0) sendmmsg$inet(r4, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) (async) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0xfffffffffffffff5, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2b8, 0x0, 0xfffffffffffffff9, [{{0x5, 0x2, 0x3, 0x2, 0x5, 0x8, {0x6, 0x9, 0x0, 0xff, 0x3, 0x0, 0x7fffffff, 0x57, 0x3, 0x8000, 0x3ff, 0x0, r3, 0x4, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0x9, ':-(\\\xc9\x80\x00\x00\x00\xc3\x00\x00\xf39}\xd8mM\x92\x8d$\xd3\xa4a\xb6\x02E\x89\x85V\xc6\x00\x00\x00\x00\x00\x00+\x13;\x00\x00\x00'}}, {{0x3, 0x1, 0x7ff, 0x0, 0x2, 0x5, {0x2, 0xca, 0x8000000000000000, 0x9, 0x5, 0x6, 0x5, 0x3, 0x6, 0x4000, 0x4, r2, r3, 0x7f, 0xa}}, {0x2, 0xb117, 0x7, 0x5, 'user_id'}}, {{0x2, 0x2, 0x100000000, 0x7, 0x8, 0x64, {0x2, 0x7, 0x0, 0xfffffffffffffffa, 0x10000, 0x4, 0x5e2, 0x8, 0x3, 0x8000, 0x5, r2, r3, 0x9, 0xfffffff7}}, {0x1, 0x9, 0x2, 0x6, 'fd'}}, {{0x5, 0x2, 0xfffffffffffff41f, 0x40, 0x7, 0x7b, {0x5, 0x10001, 0x9, 0x6, 0xfffffffffffffff7, 0xfffffffffffffff0, 0x75f6, 0x4b, 0x0, 0x4000, 0x9, r2, r3, 0x7, 0x7f}}, {0x0, 0x101, 0x8, 0xae, 'group_id'}}]}, 0x0, 0x0, 0x0}) getdents64(r7, &(0x7f0000000100)=""/134, 0x86) r8 = syz_open_dev$vcsa(&(0x7f0000002080), 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000002180)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x6}}, 0x20) socket$inet6(0xa, 0x5, 0x0) (async) r9 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r9, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) (async) setsockopt$inet_int(r9, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0x5, @loopback, 0x6}, @in6={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x5}], 0x48) syz_fuse_handle_req(r0, &(0x7f00000083c0)="428a6ce66c433e7d6473d37a71716ae84216bc67277f3e9626c032a88a7acfd09ce24f4255f37078d380c6723d7aacdc3e0220c069b0e3a64d5f03936770166422985d1b36eaea3166a4f1403dceba822af78c5c09a45e2174bb51f6e9f11deea936b040d91598d4aa373bf4c5765a17e6c33ddad61487bdd32e3e58af5741f560b4b08b02d3254eef9fe9b2f0bdbddffe42ca87595f21dd7ff6c3d5754346b6414d2d7dbb41f5de3181ef343faa894a332cfc895ad40b048dc597478a761ef691d4bad54af2c711334532ad94c6017b49990e1f01bedefed1eea35deff92249b09a7a5d762d4fef1fd20bd95c3fa810d6d99cc5b8c2dd70a8a62ddd217e069cb29c9e7ef5bec625b3a303188d8cad4f423eb71a4aee6bf69c9cf73f0884a277a9d2d39449053d13952eea2b4de2e61715f0b878bb42d48642399e4e5ff2ea4daf9bf21c73ce7d767db0171cb6d436bd0c3ea93920700e0cf64731f7cafb172b0866fbbfaacc940639d6741bb7e4c7ce69dd1a815387838b081b1d9a04bf6192bc0e8d4e16a8da6ff83df1bead9f6218e4684b78026a0b49a2a89d3f05549b12e8b07734ab867c41a9401abc9c3fc6cab66e57eaa9513fd491384a2c65715abadf29aa1036a4b78e47ecb95d76884b23fe89a251626e1c5d827dc1d96f83d6e524a93561fc1d43ceb28b9dc5b476cd0c6ee51f4f37b7792f9b5d862d69184830ab80a5fb6a53729cbef25d612640b688b72c9d77c83538ae181d2065250858adc72786027103a8e1a2d098a33f1a130db154925a8aef6c4752d6262932dc3cd957a9a91ba1021c726b8b16b0027ebf48e9f2f19bc82ac3f6743d584a5f3d3679487925157d5fee7280cac2a26934e35942c4ce233fe962bbc76b7efe9587b564b0b91f6f75c4ff570ccf8e5b15b09ca095ddcff7fef94e28cefbd1592fc30484b142838263ed9b72ee93e9db0dc0d7c60a750d80d90aa7f0fdfa3603aeb92e6f0166ae30ff4225e90ccd2d0fa3bf89407e1c038124bd628bbd864469b5b77eacd7af14a42487bd0bfd6b2fb1962d63d427ef318fc01dfac3c476611209fb2c0e599c62da902c96abb18b91c6d7f2637c5da80900d07557ff62563ae8d84537485d7102e86990476cf34acbb42b2683a247d64788c0500179d0452e879c6263c4a82bb10987dade8c195eaf8368daed13b2f46e62de7e72c5189868372f081b72e48871e6598e5076997755e6d70c8c78b8ff937003e9558b0e7809ca260bac8d2c165818287cfdf7eab197cbe17b9ecb556931dbb2494b4290ab1eed4d00fd4c3c88f942c57b70ccd9e618872d658111c25a7ca4f271fa92ba1f8bb3d625ebdf2c0635b74c6d10e1c67116eee87687974d1be802b883ce2e05296831cf0552454f0b6a1a29ff2d5ac9af44f10817d063142327170f30d15fb49baa3506313f4c859e23dd153d5fa303df32fd52d0c6e27db0860c2cd00128e3fcb7f63832ac42a507b83fa587049fec1cb4b171236835d1ffc2645686edc9e9b5233a38020ba84c7d3744a5041eb4056d0be3fe6a6ed2a9c87ae8c1010a7ae9a08b189cb10b989358f0d9b5501b31b876fa8e78e591d29e82ff391c913c6894b9dc7aee2fba54a03f020473abcaf75ca71b48e43a195de1be70e30895c34fce11dbcaa81d55f674fe84d2ddcfbcb6cda65c206c0d48e73e2d23c16d8871e409313177c564dfc98ae86ff903e1e37a5c7cc1f5e8ba7f2ea4fb2974a1af29d84d4470ab769eda38506d8a5dc6b7dadafd94847ee26ca5e8221e0269147828fb569a0873b50d9b82a698a58b04aaa3c0f39e76b8f5def74ac1921ffce7bd2d5c9e3ae3e1b78040c7492be0854e52ba0df6100c5bb6c1732a5fa989ddfd0713c12531856969f0cf40e4e6a3e7ec1491eb351967b9679cd733977d0cf8629fc7e32a668015de2a79c76e0ba30b1557acbc067a66630aff2d68409d59c04e0d507e88f35fd2d3af2eee43a06a69c963fd30b3606e08a172d2012ae8c7c25475249a3d8a2fb7aa48fec18893c8f8bde721ddae7d9444a5963007ebe36063515094d54f36de8b29877f2d6faf147d50beff0b5b5f17088452dd97c91d5872e3596cf2f26546e8009448ab45fd1351f09ea7138ae510512715692fa181483da711fa6a861c81d27ee0b8e2701c61c8e4844401e26e2136d9371e5edd223c98fcfe3d5ddf7e514ddde1be2450f64a6c6af79ff4ceb529cc573f178de2322d98091d81c0375e42dc600907c236cac3b3dd2a61dc706a228e803a54e4640cfdb318be734686e04e6deba7e85cd2bb5a2135c143cbc25d64d2e5a50df677f518cfdb178090b8be719e96b742d370f9ddfe4852ac3c9a3ca4d0f63ce5ffed0605c1efb72de7e5d79aa70aac1b1e7e622c6cc7732a2a08496d2d22191aa78a037c89f9c7620a7d3a9530f5b02fc460dbbc16b46d814d4c49c55771ba591daf6fe9300e8c2694c438da06383ea67ed6cb22cc1ead51c89a0eae2b221af22969b5e01be6b4ee752465b0b96e7c0bde2e2654260c63c7c711e23ceedfc7c8f60f94ddce5056684e3213e6e79ab800a9464d1c407ae07999d9a1733a075d10621f796aec1b93cfec393e609f6a317768fa6d90f450e3f77f54bbdc254806f22ae03933d72b0526b77679ddd89b1bbcfa7c0a97025dbc7f66e4fc99444ce2f1a9eff1b741de631ee206a53e1b53256c5722587b6722962576a0c519285f09e1a17df9d7da065b14d26d1fa50ec0c67dcae691eef2d581a262004c900243e1dfb39b8a5a8e0c8f565491895e4c589be089b32d0e92e0a6846885e39da03023197061b99c0b2304eb0a41ab1c99079fa99dbe1ad9b3930cbddaf433407b790a40d1669d8e764243488f53c9c5597320dc7abd32ae9e0207919cf2b9a955509f84f6c18e8aa676a13917fef06d65755ef538a624112d8c4f62c4ad4a1c6a39774fcac69fc0ff99e6d36bff208974ce4f08556032cb5b8ac3a75ad24a8f87b5d36119ea43aa37054b4e7d9bd68d5b0500e863464101185c7006082698afb70fba7a9a1db9a294019b195ee5364a77250a0742a0395d22397d57ec972f71955a6ab34f894ff08484a3565cd5e3a1793267cb186b40adb4056837843c90ad254814aae1d6e44406b148c829434fba7caa2c3db16ef5ac904f505a18b1f55c43f16591577ecbfdeaa960363c26f782335772f78a693fb8e45ed0418646e57b12d5ec9f96a4c4dbc96bc0f3a2b18eda4a279428bf34920a55e96c6d50d8c0f7e7728ec8667e39bba86664120fd688ea9f067f64e4d27ea53e14f8ee8560c347df20cf7ca4a7905420bab3e327fc875154a9e0f52596e86bdeadebaf6e79ad4bab8ec079720a414eb20f7938ccbf8204fe04c1b18f3f3e69b79bcd135f60d7c46c22cef7f8f72410516fc4be391c0c7f4a6f1063c0e739f91c757a34f3ff587051d4356c26bb0b2579b6096a912bf8cfdbc7d1d2adbc194441677c22ab17b108ea7f2491ab519f18d8ba2b20aefe1a694941050f27ec6ee6a2c230afac26dc93065f9cd52ca326378bf36e3260bdf011af695ebdb3b0fa321f80ced7d7024020e23d381474844019bf3f72a2afa6ebf43cd853b7852792b7b14a0e23f4ef42911e2c0748c44a8f2117e440c0ffda360d4f8252187b938dcc9b4eeacd97f374281ac31fefc69e6e8ac84300022f307c5c4e7fc96d3bbf8044e72c778ed85a3d02ca5fe9b15cc3245fae21f57a02383f06bfcc6a3b37a4b9df50baa1162b8669d7549e88b8731ec9e5e058d4e41150ce3d3acb17069d1c08519ca1d1896b843877b9c2beda2a5fa839930349e6331488cd3fa1dc8acd598767b03c5e633cdbbb7f84ae29ebbdf16751498cb6fabe81a50d0eea6887d8ed52b77448c1344647aed17903bb9f2ce08e03e73ddc8f94e27053b81066de7666004870094a5bc9902f866b191cad4603a17eb7c3d62bacbaa4ba524908517fb431f51f2777f7de4053113c5083358e696b9969f912376643aabe3b4a6ab9b6baf71f71673f5872f4367afeb514aa9647907776fc8527f48f75a87f8dbaaa59055753e89985864915ab8f323b1e6012009b49afa8201a3f6634882a5f88a9e6eece7a491a8f4652c32f27784d94d1ba715f6146b5ccb0ecb37109ddd4026d8af2c308f9d8475945d497ad5e0a47bcad2e70290c5085f886f3d58d2099b8e47012cb86e67eb3b760e15f345c001b4f950ea739762a752a22bfe0b9844660b92afb5a1fec179f155a95461230dce2607ffcfda4263907fa5053c6f84089677b8766daab786271d08eed53c228ee7d8c9a818c7aff7973dc86c1600a4e3decca6a6047e2e633e682425ec28e3a77dbb3a21fcd0aaf4b4826f5f9a99d52415faa21fc500d5c99a9bf5e43d7b11dd820975cddf18212df99a0166306e5e45d72c75a917ab0f844d35c2934af58e5b8a12e2e9a1f16925a3b342c3509e86885f3a487a5b74c94bdcb150a81f853b431a74cf47510e55f89da8e2089d07faacb650f64473dfbaf308264a361db8cccfdc4c80bf97c8c4bf9db7789c231e62c2878837c2e72585584de5d52c3f59fed0a4a14a8957279a8dcf8b6efa0e81f00c73b52f34eedf8f31840a0b18c9634570cfed3d7f4e13b78c0fcb16628d380de48e2807d884e9a46f7c2737e89cb7fbbff6491db2f9f6dafc248a5e417ba926304784be621e83db65dddb0b84141e5b97728a9bcd1b1916f9c2da403e86bd178a2ffb3a1f5d64253707f8f6da3ca22a00de18c8bb000384a38293da2ce968fc184b696fd5d26618b5d3b633145e971ff010ab9cbfb0f3173cf6f8016cdef01a2ed0921e3608f3e3e0a511a7480464638ecba810df33e2146a7f53258b440339d1eeb5e06eb94814d9fe24d835704cf34be75fc56f4bfb3f8355776f319095b1987a81dce624c6425d080258d355263224b888a8317782101769e1ec4874c20ff75b430037710bc9437234a791fc7606d9498f6c353af33adc0c92c53229574095a7988c59bfcda13bf1a4185fdd6318b250590aeedb15aeaccf049665316eb1873e4d5a4a7b686ec6279a987444c17927e530e598d5b5f672b88ff6f98fbc52b193053a516f19da80fb2873a49fb9cad5b037eaf9e9afd7c5a6bd0e3349c0aac078968f2655b789abc08b82af590bf7e3f1051188ad725dbff39c124915037afeccc741912def5645951b2ded95b29797da1ac40b16a3f89863047131e1d99879896db7d5e019bbbef6753752f665e0cbdb6473bf86da661e63ff8b0893de82ca786d08dd0a4b7f8cb9181aba271ef13bbb6d6b7ed79debf6105ac5a971dbae815ef10303b630cdfcd8ba9a0bcda0052a6c2a8a6135c6f466fc543d44a9e722bd2a3fc3d004e5f6430246c8e2fae6272cd238581412748d4ef37a404b7e4035a03a981be204606dec92a430c5cf303f663878c6b16215e63e41869496f634cdeced1475c47864e78a7cc398c06cd53d229ec08488651695ea5c018b00dcad9e48fdb8006fd38e1f53fcdea59aeb3570a1098659892d20b3be362edd0e587f4c3f78af67301c78e83b8aff103667709afd8968846caa34d9291fd549b4aaad4cc783042a117f3bdb009169eebde40bea76925218c7e964cd3e42c09220cbf27e2c253b3a4615af8039c4a713e9afb3dea376152cc9d011886674ca84f9aa413dc1ddc9936472bb7e9107c792da1dd56a7a396fd036f5caab4d4ffe35ee1f0771f3d04c9933a94aa0f28bc489bd81ad331a1cffaf1fcb44694bca71886978ac7ea1aeaf1e8cda64d195414c4da561a074ee28e2c983742477d7de8eeca587cf279aa948a037bd3b596862f928910d0d0e077c4949a0c7b340e41d41f5b217bd6ae4cb2b2a34561652978e64616863f56ffe91f896eb85823ade588333e6f9acccaeee63d0d4f19bf6eb58ce9311cfc1a731705e484ce612eba0bb81f89fe2ca223df2c3b9f37684c5d4419379e96e65830cff6e0e03c146f171cd9f9d287e8edc631d21887e7f63109dc9c57feb3cb3e67f3146c3d7c8735f73d5d6f038ed2ab29b6ab7a64aa936671d71a2a82abc41d907ec91d4aa187b53e1a5790974b3a65ef3e7f145b040a17991b287513c43ffc35d58440c200e1f5914f216dd2d8c1477bb7715dcb96b4ac12263e52bbf7869e82a0f1a2de61ac65af1e016f5cf811031c3ef2be67fc442114082688aba559ce993c523a9d60eb19245bca03dc2783fba384740295e86cdf6433ae624f0a84eea3d1d133f3cb8d3655601debfdfb89995aa86bdeaab4bf37ecd728958f32739030527b51532fad7ca3861ed5599568dbe9445f622b0a1cd9d5864544265752fecc10e874c2f1a0c6f11d5dc945696fcae70b50fdde191d0aafe50632a786dff3fd5f976aaa5af332156bc96c3c86a88f35f2ea876d050a0aeea72e61d57a988183bf3ff14508f825f86f2cb6742c809096c1c16a343e5e38be54b8426ed809e1ce15600b92f251ddfbc6244b82d3ec22bf888929a11cf9e591dbc06007cd15ab7edc093dfbcdae3a145ece8ded5f0b63bb5f3928ea0a1996762b982e10394fb8a6b33bf62dc4a6f8f614ec856a9b1d790b9d06e675320afa41e1a465dcf6fbb49d737f66ff492f019b0c4b34f9dad26e088ec3b9019a19a78a6a25f7421702d87ce9d50415ecfb3cb4d5c6f3ed0c24ed3bc5dc7fcc26e54403d319a7e629664953aed9f96fa63f2b1aa9a6a066a12d004b7ec28bb92457ca3fd863745085bf6eb40794beb5363ccaf0371844a24252aae1e49ca4bac41961e7a155fb8938a01ba73ad66f55ce33c415a6c6b860021dbc61b0fbde29ad55556a11a7ca4c5a85b0608ca2a2a649ae7654974e8aca57c5d013a02de7f389245aba981d23fe4e115415d3f5c7a52951f122ef4ac3efd9783f6229576ee88e3320112e885038b17d9ce1847c84c972bf57b0cdbc30794b9f3ef626c897fb38db40141f8a0049a998524f90dec8e657289c49634e773e9d3e776b0fd14afcb3f54127d95f062c8078540efa31a11aaeffc8c68cd981ef531a1f166ea73c00590e1044db5e719947dabe2a8dff7ae0b8400a9fcdd6f5cf69250acec7b06ee2db86a45fc90bf5abeb90d1d11cb2b657475bac2a5cc4606fda1f19171fe63f72746d29a218cca87616d283fc5d35f0d36840bde80577ae91f1148960079d027a72a8084b5aebed10b201eacc4924bed0ca734772c8dbec33bc256cbbb08a80bbc4545d5b5ac9f610aa4ac32faa0bd741e6bc39c5840559a9a6de4646ff5b62ccaf3340985151203e885bfcffa11b9c77e0b42b903de4fd7db842135ea3efb1c227aa7eac69102b09832c6d5456315b894c15d706386a0cd336cb57dbd8b97fe4e03cba770ac356445449bc53754dcc18abee099ff5674c6637e433b448221bac334475f45ebaeabb3e0cc1d35164d501a75205253060c80db6c0e65b307375adeab281eb4433b3eccb1dc27d4e2db0b712dc21b0aafd05d07d59995f94d6b45070eee5174f54067871b29b02ec23fc2c6eb122fe690cbab49b040d48d9dc0217b9ac439001ad5ed7f73b673739010ca8b99ec3b2f1fb528e3db34c698fd5dee32794b31fd63c2b72f32bda74506e40b6f88e4495739f6c3863542ca7cb4ec69b5b48a3da1b808e9249c285811d6eb031ff7449e75f0ab1235c44bdadfb7f4549cc361f3d370831580269a2a0004596fb719dfe15faf4db82cf533f0e813e25e5ada6d06f235c695be58ae02bd0a05ea836d15faac2ceb330bd93abe5abe4355a4bcc00382845a0fee4d4c5b831cceb8d6c8bf543b18f34355a7d03e89be95f0ddce76625af30aa71a5090f7639f85accd686fce53abc71512a4289d14e992a64ad5303fb0fb1298648d268939136f1625039b472f0d144599290c909aa2924563a7ff5fd5cdaa5018e592e9b4853bcba57c34c1167f77dc7fc010a2fe8a8e3e82e5dfd8cbde7a73d1f0f84691b452c263ed4bf0fe336ab05910d42f95b8fe1b52421315d611b16820ae75089ddbc222edc1830a952c91180a6d3228d1e1fe823d908bfa4d24c1a6424461007d1b94f0fbc13a9e718243ced7e6f24522a80005a4fcff858dff00585cd9283ea1a597f0ca1e76c54747d050f392cd0e086326d0ddc766ab1fbe30c3b8cba924c01475b160e775c3d1d26c35840f83269a7e28f1338ea375e53dc98b862c8d15a19f772ac23b3ee9f90bb04e03dfde4e82fb9dd3a0890fe06a99101c59ae696ff1e1bb1d652b6f3f9635c18616a7c86b1b6ace325a6c62d132cda8d826654641b6e802acba840a4265e24e85cc274b55e0fbd01a76dd9af91441ae349e5bf7f585c9860f5c4500da889c3b72497b86f193fcf969d1424eb0f64e9ae1db82c102e1d57bb4f6646209a691cd0b286182f2a66dfd3dbda20a83156b0a108bb0e0a5c8e2bc7a2c19cbab09f25db581771af9fdcb09d77a46f337f2443962f1858e374c16b37f8e993646cf84b2869d9f93a4e38e0f4db5444c287d4030f4ed1bfaded4f37646d81255ec9bbad06687f49678dcb4690284c2db493464e7fc5c2e39832ae3ede01b136ff32532f5e670ba2d753983fdd2052f42311fbf917e96a1e29b4898d62130c683bc0d45cc2be5945cc41e35475fda252ee1c3f035afc352f34b77ea13a4fb09c09dea26110e700693cff04ce8e06b30f66535608968e65d2ebef57698ad72e69beea4db56b0e8c6f91cdf187fd0d49c84c1d5ab34900f6004b00503131e7d6c996dce0a84341ae8236bb5741adf6cf5b447d750f1e5f0cb5b3787e22992a9f26310f28d4789d09c53df3057113f6ffbf2978984762fa679cdacbe509d6dc4b637f17b6cf49283d5a523e04a2205b1a1af1c6880fce33502a83170a5b0ed1f384ed1451e683b622f44ccc0d385b3d7540ca3116d6112aaf905039471b564d3cf615ccb8823cfd34e635c3b2af982ed0a98fdf2358b42cfa8e8cf2ac184b7e08bf48988f000850163bffafe7f69b3f8a761936a3e1974e79ec92ce893f6a8474fe900b42025c9bf56799dc9a0db57239e8fa5dbb3b1972b0d2c456f7777ab2baa1aef60f5be9d48b4aba1aa934a493682c70687b4e7b05f5226eafe9a25d4fc33cc2af7a7315b37c7db101ad3456d8ad04ddc3b76d2baa96129da53c810d55377382a2a25d6ce0d4c113c3367fc906034eb775290c1d5e5c881d9a8c6567d8470d68b33b506bfab2d6b61a9a7ca6eb003772e30165ed01544d896f96c0f286a23ab55ae258c1554b8054e9f6de37e9f29bb644c4f2ee3ec42d51daf7d4da1cda30f16a56f12e299b5e302deae593fbbd6f75390f4eb25555185bf62eeaa882c23416872a4cc18d2534ddc4d2a1f3a0c3ca461d9b9e4fda10c3294ee74c631c65e840d5e4a94a1798e07a5e151968b7b22892d65ac2c81e7e8d9a471a790f66a9391b4e8c19a2251488255c96d498cda6ddb3aaef264454f2b4ff43a70c48b1fba3ed45c43d0dd44bc26452045e9fffa2b25901b3d5704ae3b0352fa3e8830774b6e38025c7552c13d312a273cb88c1649dc6d8ab38ebd1b2bfb16b2cc056f870c138052b951baacdee560e218972b1a0932bc266855062fafed6064bcc637db59713538c45a69c838b09e1b143b7c1e2e6b72a6a00b7cd0afff8d20b9008d61023aadf193d8ff8040220564c0bcbd9dc03a98ab1b8eb96c576291636c0c1de5e3d872c095876efafa7575f994f45c29cb3fa9e96f98012b7a84ce820e172e625b1de98031e5471cf5c9036864289d95d2f1956abf5d4f9a7e81ac2796c67a4aec8f54a5896bffd05b4514df6b2a7df1038183ea740459db4a07ad275e153a08cef7542abf7775a8ff164e73a424bd22815da91265c8c86c1dd90ed926fe313fe32be9c040f7065b27c8cd03d585bbdef6f149ebb3e3906fed7290a19ee7d42621393d634940c771c6dd95a9fd153bf25e029b453a69b10cd3c9d3fb17fd936ee6243a5357b38ccdfacff843aa2a51081925acac1b7ef3dae20304562be99ee3464885988d6e08b8f1ec22e51d5960b25c799d4ec379bec80219cacbcb4e312e744b6e5da1cb39e6d7b90c492ddacc215d1218891f65acb3d3917ed208bd6e8fd520eddf7584ecc920c9243c657cb6482dbf6a38af25d199f2137880b605f640a4f996f48da1f7058d81604a70c672414230105990aeb151560ab80379e346a1326c0438b68ce6bd291654d736881176ad30d11e1fad2871eb83f4b339e5fb0bb68eabe3b707324673b3ba607fa27953c9109185ecc2eeff24cc3a7494cbf04f70bbda0b85e644d8e2434bfdeb2bb242016bd82fc78e8ff2b1bb18167e7834f621225eef2607be6d2318ea29e507f7be94764f67aa5c61c7d15dba36cbea919c665137f9216e30310c1c3a410eb7ffd8bfb3d339273a8934b4089efeea8ce06cd5dcdc46907e169dad730be362e6583a512071d6a2b7ead9c4482dc91f55a62592925adcd3892dd57461ac830d74cb8ceb47c78ddaf2558cb8bde9dd3ce2edb882cbb0fe019ea611bbf778493d63a3b68b3d94a283470e4e682ee4cc569ebc6629b4f0a5e10fa9bbd6dc044cf7d61d11d0ec5563c0b7b86141e7a852fe64fa7c8496b112f366ca2e4afefc68ebd78bddfd5bf95b40f691b0d81fdb5126e9ed55e32db62af1dca33a3449aba59f12bd03c0f4a64e1fefb18ed08f6a9a1325248139659687a73d378f09002ebc4b2baab643ca44b4a7ee63dc4631f211181647daea7e36806eb0a79980ae519fbc77c9988db03cebecc1ce2db3acbdc928e2de2111fd171c89feac400249b28c14267f3e6f711206b0517aea57817e13d0f6553e6e9b73d99a3f85e5a9cc8bd7e3605dbf5b4f4e665bc7541fe888c7d86cac5811d560e044ebe3bb4768eb9307369da53a32201a7467c066b83b86c333876e821801f98b466dcd2dd6077468029722b01988324e101b8dc37d5d45be0cfa5655e232bebbdae8bd70e92a66140ddfa4bd182beecf5038d4f0bc31b37fa26ed21820c78450770d380c2f42386a5c27a93b2f85f37756d9b32df934ec4d1598e5b3ff6fc53d5cdaf6acdaa53566a122349bd1c21a73b634dfaf23130db368a236376144efbdfbcbea34e78000a261b3817a10eb7c0413534dafdc55cb12f65bbcb73a4467bbc2c2319ab070ffaaa8e4eb24ef9cfa2cdeab19e16e0b1a502104492ca060ce50381e7ebeae0341ab532bc8a4e9a4bdf31e25fbf7674353f347c274fcc40083486fd48c08602c12c9c6806c7517c5b8aa178f65286f5007ea8d94170a7b070e66bae28e5e143b477a2629efa8e33883c03e0e58a6f21e253d87683d4852abd31f1199496337eef9c8bb81c5e3313a0a4c96cd4e4a3997144340f0bd5d3fe3ecdcd0feeee6bcb3ba0cbd160298936e6c26e3be0b86644e2704b0ead40f64e486a95856736f04d5493944eba60794ebc538fe149367eec24d8855061ca11078832d771d0efdfa221f66af302e1424bd3e4afef26dab0cf76b51d95b90d75d4ea196f5eff677e4260170b21918b0882eeab5dba283b07b4feb99bdce197c6e453371c41be2a8fa6e29d6ab5cbeff6", 0x2000, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="10"], 0x0, 0x0, 0x0, 0x0}) getdents64(r7, 0x0, 0xc0) execve(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000002c0)={[&(0x7f0000000200)=',-\\\x00']}) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, 0x0) (async) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x181100) syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x4, 0x312}, &(0x7f00000029c0), &(0x7f0000000300)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0, 0x0) 3.65175457s ago: executing program 1 (id=292): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x18013700, 0x0, 0xfffffffffffffce2, &(0x7f0000000500), 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x3, r1, 0x0, &(0x7f00000004c0)) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000001f) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x80000024) fcntl$notify(r5, 0x402, 0x80000032) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0xb8, 0x0, &(0x7f0000000380)=[@request_death={0x400c630e, 0x1}, @enter_looper, @acquire, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1100}, @fda={0x66646185, 0x5, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/98, 0x62, 0x0, 0x24}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}, 0x400}, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x2, 0x2, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/209, 0xd1, 0x1, 0x40}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/4096, 0x1000, 0x0, 0x28}}, &(0x7f0000000340)={0x0, 0x20, 0x48}}, 0x40}], 0x7, 0x0, &(0x7f0000000440)="553fc696f4b1a1"}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74}}, 0x0) 2.831135442s ago: executing program 2 (id=293): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCMGET(r2, 0x541e, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40041) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x10) read$dsp(r4, &(0x7f0000001800)=""/190, 0xbe) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r3, 0x0, 0x0}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) 2.730523096s ago: executing program 0 (id=294): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0xff4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="20ef80"], 0x0, 0x0, 0x0, 0x0}) (async) r2 = syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000206b1d010140000102030109025f00030100000009040000000101"], 0x0) syz_usb_control_io(r2, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00030400000004030b"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00033800000038036cbd87551224e3c8275120611eb137edc1ef28ac904e71039a29ebe9624df68af5025c0b2c4fbe50"]}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b000000080001c0"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000240)={0x14, &(0x7f00000001c0)={0x20, 0x23, 0x77, {0x77, 0x4, "856a313cdbc8a7e5311d8257c5067db619f668af0db1acec69b666ff08a8ebac6e123400e71002b00c403f0061b1f37630e3a09f5c1ec5fb817f2933092b2a38b3408c2db77e09ef85ebf94e6ef0f426ac84e59fed4c31e491f7d8a0f82b30578eafe0420690a25b3ef21a12d872cd41f373f3d189"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x1c, &(0x7f00000002c0)={0x0, 0x15, 0x20, "337208ad912b8412956902e98c5f816de63d2d7ce7065377ca25868f9e12a7fb"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x7}}) (rerun: 64) 2.504076263s ago: executing program 3 (id=295): openat$tun(0xffffffffffffff9c, 0x0, 0xa802, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x8082, 0x0) sendfile(r3, r3, 0x0, 0x400000000003f) r4 = dup(r3) fallocate(r4, 0x10, 0x0, 0x400) 2.054703643s ago: executing program 1 (id=296): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) socket$kcm(0x29, 0x5, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getpid() getsockopt(r4, 0x200000000114, 0x2713, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$key(r5, 0x0, 0x4040) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x8, 0x9, 0xa, 0x7}, 0x10) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @loopback}, 0xc) getsockopt$inet_buf(r7, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) socket$igmp(0x2, 0x3, 0x2) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'dummy0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r10, @ANYBLOB, @ANYRES64=r9], 0x68}}, 0x0) 1.865438393s ago: executing program 4 (id=297): r0 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x80, 0x8000, 0x6, 0x10000, {{0x2c, 0x4, 0x0, 0x1b, 0xb0, 0x68, 0x0, 0xf6, 0x2f, 0x0, @loopback, @empty, {[@cipso={0x86, 0x41, 0x1, [{0x1, 0xb, "2168f3c6d416bfbf68"}, {0x7, 0x2}, {0x1, 0x2}, {0x5, 0x2}, {0x1, 0xa, "048814648444dd0c"}, {0x4232e989448cc9f6, 0x11, "6bef76409573034c76ce7f73b68d51"}, {0x0, 0xf, "98ec24ce775acaede3cdd54d0c"}]}, @timestamp_addr={0x44, 0x54, 0x9a, 0x1, 0x9, [{@loopback, 0x7}, {@multicast1, 0xf}, {@broadcast, 0x540c}, {@remote, 0x3}, {@rand_addr=0x64010102, 0x1}, {@private=0xa010100}, {@loopback, 0x1}, {@multicast1, 0x5}, {@loopback, 0x5}, {@loopback, 0xffff8000}]}, @ra={0x94, 0x4}, @noop]}}}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/zoneinfo\x00', 0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x2c0c2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udplite6\x00') read$FUSE(r3, &(0x7f0000002180)={0x2020}, 0xd0) syz_genetlink_get_family_id$batadv(0x0, r0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, 0x8}, 0x1c) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005d40)=[{{&(0x7f0000000600)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="10000000000000000000c0"], 0x10}}], 0x1, 0x400c0) timer_create(0x9, 0x0, &(0x7f00000000c0)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2c}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x28}], 0x1}, 0x0) 1.719601945s ago: executing program 2 (id=298): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r1, &(0x7f0000000e00)=""/4095, 0xfff) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)={0x3c, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x80003}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x1) sendmsg$inet6(r1, &(0x7f0000000980)={&(0x7f0000000080)={0xa, 0x4e21, 0x200, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000200)="db58de203a49da7ba81a16002a095cacdcd17a3240fc570357e5a351297e7bebec5f23b5a701eb1a1dc1e5cf93360a2317d2db78e99fa85a96f5b11e7cfe7918a3ea55d7500b42b9f87d8bf52a645570ef882e1cce15ceea0df448a979fd200329c03c8fbde87abe291ea497e2a0bed159d9960eb04a8cfc73d3adef84", 0x7d}, {&(0x7f0000000380)="8ac86e081a901917c35975e653ed2ae03781da24dd92a1234c0edfcfedab5178a22d66001a0a311e04920b509295ea416fa447249302a432de46001923750d34a97021cc6b0f86087b7607c52d5fc83e35546a", 0x53}, {&(0x7f0000000400)="cca8d3448bcbdc63a1f54fd1699177d52646826bea8ae968e085906b23e5998d7ab97063789c65f9ac580450b6fe092658253a3acab07d3041fbb4a9775e0fb822eaaaa57312189ef1f946084bb9167274d0552bbfb1e919fd7a7b8834aa815ff2aaf72c6a0381bcdbef9d5f86c312fe074407e6774f76d4f12b4000acf97641ef3ac12db05c4dc01b9bae356e9e3224f75e03a37acd81e126806c2481ebc51560d730476901ec86cdf22d1c6565940dcb3f641c629a9bda3290106d2bdb0d64fc3c8a41d0f6b8ec219b91cad0e7", 0xce}, {&(0x7f0000000500)="c5a9d19086990184819a7e78e29122dc7c0e68b38f3618742eca297d48b1185ea5f43b56899d0e515402df84442c228c9df93cca4c7609e8f8aa2a56481a5a1f7c47f5ee7464d497755a8b1ee0a5d1c24ecf044aaae45126544688197a80957805515f97d13cd6f6ba06bf64fde9c4a501c53374229a9f72ded7b21bb33678f272acf2c5d6162b21c00c3736f966184afdd77ae4a8ccd7dc5074b10538ebadb23ce62af1d401e10f34d1b24790082a2359f0b298", 0xb4}, {&(0x7f00000005c0)="51cc841e20e74351bc9854d72eda66a96cf86c2867af9b8a284f44a6f4a44cfdcc12e090da28edb1307e991516fd38f7a9e4c409944f043d676134163adf9914f3d67b65457be7501ef4ba1537fb5b0e5c1124c0e69ffdf3e0c1baf27b0a84b904ad41d70e35cb0be1069ab2ff9530f5eace0861372e923d15d278a12bdacfa061dc1d70e89fd4463a4ff66e221d3aa0ea1f79854f34dabc7e6c8b26c4db20b64c39a2c18b38ead6f0c7e1", 0xab}, {&(0x7f0000000680)="3fcf9295f88dacad7c25c8574c5178bb474a0aa02a288bcf0d70cd2178cdf8a28162dda83241229e820221c5b638bda23ab721709275c8aece8d5ecc69c205cd11ac5d6dbc98969ec66667229f5fc757cdad3a148487b150b7614f5e93bb6315fcaaa70676fc7c309f653c673dc8ea477957a3b301b7e27d220f5b7d7a0357debd4977489b153a5b87df5b27ab031898b914e647444bcca74d0c826f47ac65b1b38a3f33d6275ebcbdd78adf226a7185bb76a90a46925e19c3f452e36435bffcebaa3a71d2c3c2d44b2ce3114d04b4ec1bfde718ea6ec7cc3c5d7c7a", 0xdc}, {&(0x7f0000000780)="c6b501307149494cf604d182c491c764db095b3c7be94a6c732a8e81283d1bad5edca537e7b71ba41d5bc752fe2f946a8bf5b4fe5dbe76d55ec5dbca", 0x3c}, {&(0x7f00000007c0)="da16c9989f0d80af6cb8f29a0dc65e42196fac695b87d289893df9a17e68baa5ad2276d12c7bfcb0566e7f90dc2ed0b46cea1e3701a3f5d61216343f6bb8813731042dc46741d3e8859a155d63159108defeb56f897fb892afb3a892d8e959039e00729a18afeb37b049956c0c32f85eac24b59a9aecf9a04e25093a1c42529cd71a79c948b8fa8bdcd4d271667321e077ce5d0557c452f60ea10d7a6fdeb75044d8", 0xa2}], 0x8, &(0x7f0000000900)=[@flowinfo={{0x14, 0x29, 0xb, 0x4}}, @dstopts={{0x28, 0x29, 0x37, {0x6, 0x1, '\x00', [@ra={0x5, 0x2, 0x800}, @ra={0x5, 0x2, 0x8000}, @jumbo={0xc2, 0x4, 0x3}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x3c, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x6}]}}}], 0x60}, 0x8047) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010101, @in=@multicast2, 0x0, 0x8966, 0x0, 0xfffc, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x9, 0x4, 0x0, 0x80000000, 0x100000000006, 0x9, 0x4, 0x40000000000000}, {0x0, 0x9, 0x53e5, 0x23}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@remote, 0x0, 0x32}, 0x2, @in6=@rand_addr=' \x01\x00', 0x1502, 0x4, 0x0, 0x0, 0x4, 0xfffffffd, 0x1}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) r5 = signalfd4(r4, &(0x7f0000000040)={[0x5]}, 0x8, 0x0) syz_usb_connect(0x5, 0x63, &(0x7f0000002d00)=ANY=[@ANYBLOB="120101020f4f07407b060323f5530102030109025100010304e0030904130906ba95d20309050f002000fe850009050600100000960609050803ff0306065709050200100006080709040483af0cf67b3f09058e0220000c08ff09050c12"], &(0x7f0000003780)={0x0, 0x0, 0x0, 0x0}) sendmsg$key(0xffffffffffffffff, 0x0, 0x10) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000009c0)={{&(0x7f0000002000/0x2000)=nil, 0x2000}}) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000100)="7a48b3e89a15689bac50829d5857f3b2275cc1a49ff1e4f7073532d15795b7453e45e5701655e19019968684d767286069fbc1af3658785d711d4b5d55a32c345cc38cce865c81b267a88eedab56eb8dbce2626d044a6c23727e7780d2993371b0924f0cff172124868481a7c913d83022db4b7c9108d24aef632083e686df4389b9d9008c855c00c15d0f8883eadb46cd36132360b67d16f0c05444b0db88306bf502dea9d850af9e22a9e999f733d4653c4c761459ec288882dfbf5a67be73c0f7ae569bfcea8a97ee33599f70fd0daebb1447eaba7fa8a0f83a57ea22429cdbfd723b", 0xe4) 788.170368ms ago: executing program 2 (id=299): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000280)={0x0, 0x0, 0x0, r2, 0xfbfbfbfb}) 369.252997ms ago: executing program 2 (id=300): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000600)={0x41c, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcfba}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xaf2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1c000000}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}]}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa17f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x42b9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xeb76}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b9bca64860298d58f7fc107c801814e351f3815be9c3"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x2, @empty, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xd, @remote, 0x400}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7, @mcast2, 0x59}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x400, @private1, 0x1f8}}}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'syzkaller0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}]}, 0x41c}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x10, 0x2}, {}, {0x6, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) 275.998648ms ago: executing program 1 (id=301): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000500)={0x0, @bt={0x8a1, 0x93, 0x1, 0x693e2d3bbd45de60, 0xf, 0x19ee, 0x6, 0x19ef, 0x3, 0x3, 0x27ff, 0xd64, 0xe56, 0x2, 0x0, 0x8, {0x4, 0xffffffff}, 0xd0, 0x9}}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x7, 0x5, 0xfffffffd, 0x200009}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r8 = openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_SETVERSION(r8, 0x40087602, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r10 = dup(r9) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0xdc0b, 0x10100, 0x0, 0x20e, 0x0, r10}, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$NBD_SET_BLKSIZE(r10, 0xab01, 0xf64) 0s ago: executing program 2 (id=302): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/239, 0xef}, {0x0}], 0x2, 0xff, 0x457a) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, &(0x7f0000000100)={0x20, 0xf, 0xf, {0xf, 0x1c, "78a0186e187e7931903a1be65e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'ip6gre0\x00', r4, 0x2f, 0x3d, 0x9, 0x7, 0xe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x1, 0x40, 0x8, 0xa9be}}) kernel console output (not intermixed with test programs): 87][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.405361][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.425949][ T5880] team0: Port device team_slave_0 added [ 74.435822][ T5882] hsr_slave_0: entered promiscuous mode [ 74.442531][ T5882] hsr_slave_1: entered promiscuous mode [ 74.449331][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.456466][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.482861][ T5881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.494325][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.501604][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.527748][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.547045][ T5880] team0: Port device team_slave_1 added [ 74.562373][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.569351][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.595335][ T5881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.642193][ T5884] hsr_slave_0: entered promiscuous mode [ 74.648511][ T5884] hsr_slave_1: entered promiscuous mode [ 74.654945][ T5884] debugfs: 'hsr0' already exists in 'hsr' [ 74.660754][ T5884] Cannot create hsr debugfs directory [ 74.670743][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.677730][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.704169][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.716438][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.723522][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.749525][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.760268][ T5871] Bluetooth: hci1: command tx timeout [ 74.760357][ T5877] Bluetooth: hci2: command tx timeout [ 74.769637][ T5877] Bluetooth: hci3: command tx timeout [ 74.820590][ T5879] hsr_slave_0: entered promiscuous mode [ 74.826849][ T5879] hsr_slave_1: entered promiscuous mode [ 74.833378][ T5879] debugfs: 'hsr0' already exists in 'hsr' [ 74.839144][ T5879] Cannot create hsr debugfs directory [ 74.844636][ T5877] Bluetooth: hci4: command tx timeout [ 74.849578][ T5877] Bluetooth: hci0: command tx timeout [ 74.886631][ T5881] hsr_slave_0: entered promiscuous mode [ 74.892983][ T5881] hsr_slave_1: entered promiscuous mode [ 74.899007][ T5881] debugfs: 'hsr0' already exists in 'hsr' [ 74.904834][ T5881] Cannot create hsr debugfs directory [ 74.977217][ T5880] hsr_slave_0: entered promiscuous mode [ 74.983525][ T5880] hsr_slave_1: entered promiscuous mode [ 74.990175][ T5880] debugfs: 'hsr0' already exists in 'hsr' [ 74.995951][ T5880] Cannot create hsr debugfs directory [ 75.242667][ T5882] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.255819][ T5882] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.270414][ T5882] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.283468][ T5882] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.310455][ T5884] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.324033][ T5884] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.336594][ T5884] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.347163][ T5884] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.384453][ T5879] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.398479][ T5879] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.416641][ T5879] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.427128][ T5879] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.498649][ T5881] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.520944][ T5881] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.531496][ T5881] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.542935][ T5881] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.608486][ T5880] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.625027][ T5882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.636891][ T5880] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.647420][ T5880] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.664492][ T5880] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.690390][ T5884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.721820][ T5882] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.738696][ T5884] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.761963][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.769100][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.778186][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.785345][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.808191][ T3564] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.815354][ T3564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.838838][ T3564] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.845985][ T3564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.892553][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.916405][ T5881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.933660][ T5879] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.952704][ T1319] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.961804][ T1319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.988297][ T1319] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.995922][ T1319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.036644][ T5881] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.064689][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.071868][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.104322][ T5879] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.128694][ T5882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.143854][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.156558][ T5884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.171615][ T1319] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.178719][ T1319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.208182][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.217793][ T5880] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.242427][ T3564] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.249591][ T3564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.271717][ T3564] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.279056][ T3564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.335185][ T5884] veth0_vlan: entered promiscuous mode [ 76.345189][ T5882] veth0_vlan: entered promiscuous mode [ 76.383276][ T5882] veth1_vlan: entered promiscuous mode [ 76.402430][ T5879] veth0_vlan: entered promiscuous mode [ 76.423435][ T5884] veth1_vlan: entered promiscuous mode [ 76.431902][ T5879] veth1_vlan: entered promiscuous mode [ 76.450326][ T5881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.477276][ T5882] veth0_macvtap: entered promiscuous mode [ 76.495830][ T5882] veth1_macvtap: entered promiscuous mode [ 76.521302][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.549285][ T5879] veth0_macvtap: entered promiscuous mode [ 76.563693][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.577739][ T5879] veth1_macvtap: entered promiscuous mode [ 76.587545][ T5881] veth0_vlan: entered promiscuous mode [ 76.603031][ T5884] veth0_macvtap: entered promiscuous mode [ 76.616201][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.625338][ T5884] veth1_macvtap: entered promiscuous mode [ 76.647368][ T5881] veth1_vlan: entered promiscuous mode [ 76.658308][ T1164] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.668954][ T1164] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.681033][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.691290][ T1164] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.703008][ T1164] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.720233][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.728952][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.754075][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.769196][ T1164] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.778716][ T3532] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.803767][ T3532] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.812827][ T3532] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.828299][ T3532] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.837312][ T3532] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.849770][ T5871] Bluetooth: hci2: command tx timeout [ 76.851070][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.855294][ T5871] Bluetooth: hci1: command tx timeout [ 76.864913][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.867870][ T5877] Bluetooth: hci3: command tx timeout [ 76.878839][ T5880] veth0_vlan: entered promiscuous mode [ 76.896003][ T5881] veth0_macvtap: entered promiscuous mode [ 76.903193][ T3593] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.912236][ T3593] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.933830][ T5880] veth1_vlan: entered promiscuous mode [ 76.939997][ T5877] Bluetooth: hci0: command tx timeout [ 76.940104][ T5871] Bluetooth: hci4: command tx timeout [ 76.982016][ T5881] veth1_macvtap: entered promiscuous mode [ 77.008978][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.026376][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.027049][ T5880] veth0_macvtap: entered promiscuous mode [ 77.038254][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.053595][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.068700][ T5880] veth1_macvtap: entered promiscuous mode [ 77.088976][ T3593] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.098471][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.118542][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.127850][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.154395][ T1319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.163612][ T1319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.174371][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.186044][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.187522][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.196661][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.239031][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.250971][ T3593] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.261114][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.270296][ T1319] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.279379][ T1319] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.306699][ T1319] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.323041][ T1319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.326349][ T5882] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.337047][ T1319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.389219][ T3593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.427830][ T3593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.513127][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.543256][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.564462][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.600009][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.633180][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.657468][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.683993][ T3564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.706324][ T3564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.011906][ T5972] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11'. [ 78.053235][ T5981] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11'. [ 78.149948][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.160365][ T5981] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.183876][ T5990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16'. [ 78.259750][ T5950] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.379724][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.410370][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.429812][ T5950] usb 1-1: Using ep0 maxpacket: 16 [ 78.437717][ T5950] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 78.446893][ T5950] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.457800][ T5950] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 78.468893][ T5950] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 78.480086][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.488475][ T5950] usb 1-1: Product: syz [ 78.493366][ T5950] usb 1-1: Manufacturer: syz [ 78.498039][ T5950] usb 1-1: SerialNumber: syz [ 78.531463][ T24] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 102, changing to 10 [ 78.544234][ T24] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 24624, setting to 1024 [ 78.557323][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 78.561004][ T5928] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.576467][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 78.577262][ T24] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 78.601111][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.611912][ T24] usb 5-1: Product: syz [ 78.616417][ T24] usb 5-1: Manufacturer: syz [ 78.621513][ T24] usb 5-1: SerialNumber: syz [ 78.621817][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 78.640690][ T24] usb 5-1: config 0 descriptor?? [ 78.645802][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.648465][ T24] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 78.660698][ T10] usb 4-1: Product: syz [ 78.666152][ T10] usb 4-1: Manufacturer: syz [ 78.674153][ T24] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 78.679326][ T10] usb 4-1: SerialNumber: syz [ 78.689262][ T24] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 78.701131][ T24] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 78.706058][ T10] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input5 [ 78.709171][ T24] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 78.730006][ T5928] usb 3-1: Using ep0 maxpacket: 32 [ 78.735347][ T24] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 78.745016][ T5950] usb 1-1: 0:2 : does not exist [ 78.746214][ T24] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 78.751637][ T5928] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 78.769957][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 78.799901][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 78.802531][ T24] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 78.811933][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 78.876502][ T5928] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 78.897323][ T24] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 78.921079][ T5871] Bluetooth: hci2: command tx timeout [ 78.929377][ T5991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15'. [ 78.932646][ T5871] Bluetooth: hci3: command tx timeout [ 78.944326][ T5877] Bluetooth: hci1: command tx timeout [ 78.951769][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.960432][ T24] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 78.968104][ T24] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 78.972553][ T5219] bcm5974 4-1:1.0: could not read from device [ 78.976258][ T24] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 79.003552][ T5219] bcm5974 4-1:1.0: could not read from device [ 79.004911][ T5877] Bluetooth: hci4: command tx timeout [ 79.010337][ T5871] Bluetooth: hci0: command tx timeout [ 79.037238][ T5928] usb 3-1: config 0 descriptor?? [ 79.049023][ T5219] bcm5974 4-1:1.0: could not read from device [ 79.056248][ T10] usb 4-1: USB disconnect, device number 2 [ 79.072873][ T24] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 79.086806][ T5997] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 79.098994][ T24] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 79.116459][ T5219] bcm5974 4-1:1.0: could not read from device [ 79.127052][ T24] usb 5-1: USB disconnect, device number 2 [ 79.142583][ T5928] hub 3-1:0.0: USB hub found [ 79.210336][ T5866] udevd[5866]: Error opening device "/dev/input/event4": No such file or directory [ 79.235987][ T5866] udevd[5866]: Unable to EVIOCGABS device "/dev/input/event4" [ 79.249214][ T24] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 79.253390][ T5950] usb 1-1: USB disconnect, device number 2 [ 79.268994][ T5866] udevd[5866]: Unable to EVIOCGABS device "/dev/input/event4" [ 79.297373][ T24] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 79.311933][ T5866] udevd[5866]: Unable to EVIOCGABS device "/dev/input/event4" [ 79.345543][ T5928] hub 3-1:0.0: 2 ports detected [ 79.347479][ T5866] udevd[5866]: Unable to EVIOCGABS device "/dev/input/event4" [ 79.362531][ T24] keyspan 5-1:0.0: device disconnected [ 79.483330][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 79.555170][ T6004] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.19'. [ 79.639741][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 79.736707][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 80.015745][ T6020] tipc: Started in network mode [ 80.034300][ T6024] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 80.039852][ T6020] tipc: Node identity 124adb2e2a02, cluster identity 4711 [ 80.159639][ T6020] tipc: Enabled bearer , priority 0 [ 80.173431][ T5928] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 80.192726][ T5928] usb 3-1: USB disconnect, device number 2 [ 80.210254][ T6020] syzkaller0: entered promiscuous mode [ 80.216639][ T6020] syzkaller0: entered allmulticast mode [ 80.239291][ T6020] tipc: Resetting bearer [ 80.269029][ T6019] tipc: Resetting bearer [ 80.287567][ T6019] tipc: Disabling bearer [ 80.310058][ T6030] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.456341][ T6033] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 80.652729][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 80.661691][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.729742][ T5928] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 80.829872][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.839156][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.848803][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.000500][ T5871] Bluetooth: hci3: command tx timeout [ 81.000531][ T5877] Bluetooth: hci2: command tx timeout [ 81.013881][ T5184] Bluetooth: hci1: command tx timeout [ 81.081760][ T5871] Bluetooth: hci0: command tx timeout [ 81.081795][ T5877] Bluetooth: hci4: command tx timeout [ 81.116040][ T5928] usb 3-1: Using ep0 maxpacket: 16 [ 81.167666][ T5928] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.201099][ T5928] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 81.230211][ T5928] usb 3-1: config 0 interface 0 has no altsetting 0 [ 81.238621][ T5928] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 81.256651][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.267067][ T5928] usb 3-1: config 0 descriptor?? [ 81.569370][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30'. [ 81.646479][ T6056] Zero length message leads to an empty skb [ 81.687419][ T5928] mcp2200 0003:04D8:00DF.0001: item 0 4 0 9 parsing failed [ 81.698820][ T5928] mcp2200 0003:04D8:00DF.0001: can't parse reports [ 81.705974][ T5928] mcp2200 0003:04D8:00DF.0001: probe with driver mcp2200 failed with error -22 [ 81.918055][ T5928] usb 3-1: USB disconnect, device number 3 [ 82.121599][ T6064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.32'. [ 82.340095][ T5928] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 82.484915][ T5948] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 82.528466][ T5928] usb 4-1: Using ep0 maxpacket: 32 [ 82.536617][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.557530][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.574157][ T5928] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 82.586007][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.598270][ T5928] usb 4-1: config 0 descriptor?? [ 82.615729][ T5928] hub 4-1:0.0: USB hub found [ 82.659505][ T5948] usb 5-1: Using ep0 maxpacket: 8 [ 82.669306][ T5948] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 82.675163][ T6079] netlink: 52 bytes leftover after parsing attributes in process `syz.2.36'. [ 82.699839][ T5948] usb 5-1: can't read configurations, error -61 [ 82.814392][ T5928] hub 4-1:0.0: 1 port detected [ 82.878344][ T5948] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 82.989637][ T1214] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 83.221161][ T1214] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 83.240385][ T1214] usb 3-1: config 8 has no interface number 0 [ 83.246799][ T1214] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 83.247650][ T5948] usb 5-1: Using ep0 maxpacket: 8 [ 83.258434][ T1214] usb 3-1: config 8 interface 177 has no altsetting 0 [ 83.270034][ T1214] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 83.279123][ T1214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.329389][ T6079] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 83.382256][ T5948] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 83.392591][ T5948] usb 5-1: can't read configurations, error -61 [ 83.416197][ T5948] usb usb5-port1: attempt power cycle [ 83.614756][ T5950] hub 4-1:0.0: activate --> -90 [ 83.672384][ T1214] usb 3-1: string descriptor 0 read error: -71 [ 83.680586][ C1] ir_toy 3-1:8.177: out urb status: -71 [ 83.721856][ T6088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.37'. [ 83.864158][ T5862] usb 4-1: USB disconnect, device number 3 [ 83.872326][ T5928] usb 4-1-port1: config error [ 83.891021][ T5948] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 83.910681][ T5948] usb 5-1: Using ep0 maxpacket: 8 [ 83.917759][ T6091] IPv6: addrconf: prefix option has invalid lifetime [ 83.928378][ T5948] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 83.949557][ T5948] usb 5-1: can't read configurations, error -61 [ 83.969640][ T6091] tipc: New replicast peer: 255.255.255.255 [ 83.977026][ T6091] tipc: Enabled bearer , priority 10 [ 84.099583][ T5950] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.107284][ T5948] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 84.131523][ T5948] usb 5-1: Using ep0 maxpacket: 8 [ 84.146728][ T5948] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 84.166141][ T5948] usb 5-1: can't read configurations, error -61 [ 84.166547][ T5948] usb usb5-port1: unable to enumerate USB device [ 84.189644][ T1214] ir_toy 3-1:8.177: could not write reset command: -110 [ 84.189858][ T1214] ir_toy 3-1:8.177: probe with driver ir_toy failed with error -110 [ 84.192132][ T1214] usb 3-1: USB disconnect, device number 4 [ 84.308803][ T5950] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.402145][ T5950] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.441806][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.463876][ T5950] usb 2-1: Product: syz [ 84.469570][ T5950] usb 2-1: Manufacturer: syz [ 84.475902][ T6105] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 84.482983][ T5950] usb 2-1: SerialNumber: syz [ 84.679841][ T1214] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 84.859754][ T1214] usb 1-1: Using ep0 maxpacket: 16 [ 84.867971][ T1214] usb 1-1: config 1 has an invalid interface number: 109 but max is 2 [ 84.876592][ T1214] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 84.885608][ T1214] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 84.896852][ T1214] usb 1-1: config 1 has an invalid interface number: 199 but max is 2 [ 84.911716][ T1214] usb 1-1: config 1 has an invalid interface number: 149 but max is 2 [ 84.927666][ T1214] usb 1-1: config 1 has an invalid interface number: 6 but max is 2 [ 84.949532][ T5948] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 84.965320][ T1214] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 84.988602][ T1214] usb 1-1: config 1 has an invalid descriptor of length 208, skipping remainder of the config [ 85.090039][ T5915] tipc: Node number set to 944298798 [ 85.097861][ T6113] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.106667][ T5948] usb 3-1: Using ep0 maxpacket: 16 [ 85.149365][ T6113] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.254602][ T1214] usb 1-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 85.276517][ T1214] usb 1-1: config 1 has no interface number 0 [ 85.659516][ T1214] usb 1-1: config 1 has no interface number 1 [ 85.803512][ T1214] usb 1-1: config 1 has no interface number 2 [ 85.857608][ T5950] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 85.864820][ T5950] cdc_ncm 2-1:1.0: dwNtbInMaxSize=9 is too small. Using 2048 [ 85.873592][ T5950] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 85.954666][ T1214] usb 1-1: config 1 has no interface number 3 [ 85.999616][ T979] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 86.069581][ T1214] usb 1-1: config 1 interface 109 altsetting 4 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 86.108301][ T1214] usb 1-1: config 1 interface 109 altsetting 4 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 86.163293][ T979] usb 4-1: config 2 has an invalid interface number: 159 but max is 3 [ 86.179057][ T979] usb 4-1: config 2 has an invalid interface number: 227 but max is 3 [ 86.188834][ T979] usb 4-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 86.198207][ T1214] usb 1-1: config 1 interface 109 altsetting 4 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 86.212940][ T979] usb 4-1: config 2 has an invalid interface number: 165 but max is 3 [ 86.215380][ T1214] usb 1-1: config 1 interface 109 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 86.252368][ T1214] usb 1-1: config 1 interface 109 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 86.265617][ T1214] usb 1-1: config 1 interface 109 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 86.277080][ T1214] usb 1-1: config 1 interface 109 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 86.288959][ T1214] usb 1-1: config 1 interface 109 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 86.315099][ T1214] usb 1-1: config 1 interface 109 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 86.326436][ T1214] usb 1-1: config 1 interface 109 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 86.338472][ T1214] usb 1-1: config 1 interface 149 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 86.342075][ T979] usb 4-1: config 2 has an invalid interface number: 4 but max is 3 [ 86.352489][ T1214] usb 1-1: too many endpoints for config 1 interface 6 altsetting 244: 178, using maximum allowed: 30 [ 86.434332][ T979] usb 4-1: config 2 has no interface number 0 [ 86.445757][ T1214] usb 1-1: config 1 interface 6 altsetting 244 has 0 endpoint descriptors, different from the interface descriptor's value: 178 [ 86.459554][ T979] usb 4-1: config 2 has no interface number 1 [ 86.472331][ T1214] usb 1-1: config 1 interface 109 has no altsetting 0 [ 86.479251][ T1214] usb 1-1: config 1 interface 199 has no altsetting 0 [ 86.479269][ T979] usb 4-1: config 2 has no interface number 2 [ 86.479288][ T979] usb 4-1: config 2 has no interface number 3 [ 86.487332][ T1214] usb 1-1: config 1 interface 149 has no altsetting 0 [ 86.502655][ T979] usb 4-1: config 2 interface 159 altsetting 37 bulk endpoint 0x4 has invalid maxpacket 8 [ 86.519001][ T1214] usb 1-1: config 1 interface 6 has no altsetting 0 [ 86.532153][ T1214] usb 1-1: Dual-Role OTG device on HNP port [ 86.536772][ T979] usb 4-1: config 2 interface 159 altsetting 37 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 86.538700][ T1214] usb 1-1: New USB device found, idVendor=0403, idProduct=fb99, bcdDevice=3c.01 [ 86.563171][ T1214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.572108][ T1214] usb 1-1: Product: Л [ 86.574335][ T979] usb 4-1: config 2 interface 159 altsetting 37 has an invalid descriptor for endpoint zero, skipping [ 86.587669][ T1214] usb 1-1: Manufacturer:  [ 86.593127][ T1214] usb 1-1: SerialNumber: ఴ欲ꄔ켝ޥΛ郬좢܀捞橡橏ⶣⵝ䑗콘ጘ凶㽉胣輅㩻뜊鉉⾩ꌓ陑h嶸䃋s靚➡뚞삛邍錩рم摺⌀ㅅ꣙櫦̷㯟撶ሇ᜺댁멥씤쭈퇭᝔啑诰࿫Э㸡ⳝ㗝뗽趚鎸Ꞹᠬ䁻끃낼膱框ᶬ [ 86.629535][ T979] usb 4-1: config 2 interface 159 altsetting 37 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 86.652111][ T979] usb 4-1: config 2 interface 159 altsetting 37 has an endpoint descriptor with address 0x6A, changing to 0xA [ 86.663992][ T979] usb 4-1: config 2 interface 159 altsetting 37 has a duplicate endpoint with address 0xA, skipping [ 86.696673][ T979] usb 4-1: config 2 interface 159 altsetting 37 has a duplicate endpoint with address 0xA, skipping [ 86.718972][ T979] usb 4-1: config 2 interface 159 altsetting 37 has an invalid descriptor for endpoint zero, skipping [ 86.730689][ T979] usb 4-1: config 2 interface 159 altsetting 37 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 86.745481][ T979] usb 4-1: config 2 interface 159 altsetting 37 has a duplicate endpoint with address 0xB, skipping [ 86.758567][ T979] usb 4-1: config 2 interface 159 altsetting 37 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 86.774898][ T979] usb 4-1: config 2 interface 227 altsetting 56 has a duplicate endpoint with address 0xB, skipping [ 86.786284][ T979] usb 4-1: config 2 interface 227 altsetting 56 has a duplicate endpoint with address 0x1, skipping [ 86.799243][ T979] usb 4-1: config 2 interface 227 altsetting 56 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 86.813393][ T979] usb 4-1: config 2 interface 227 altsetting 56 has a duplicate endpoint with address 0xC, skipping [ 86.824578][ T979] usb 4-1: config 2 interface 227 altsetting 56 has a duplicate endpoint with address 0x6, skipping [ 86.835662][ T979] usb 4-1: config 2 interface 227 altsetting 56 has a duplicate endpoint with address 0xC, skipping [ 86.847488][ T979] usb 4-1: config 2 interface 165 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 86.876549][ T979] usb 4-1: config 2 interface 165 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 86.887923][ T979] usb 4-1: config 2 interface 4 altsetting 64 has a duplicate endpoint with address 0xD, skipping [ 86.943857][ T979] usb 4-1: config 2 interface 4 altsetting 64 has a duplicate endpoint with address 0x8, skipping [ 86.954846][ T979] usb 4-1: config 2 interface 4 altsetting 64 has a duplicate endpoint with address 0x4, skipping [ 86.966229][ T979] usb 4-1: config 2 interface 159 has no altsetting 0 [ 86.975684][ T979] usb 4-1: config 2 interface 227 has no altsetting 0 [ 86.982944][ T979] usb 4-1: config 2 interface 165 has no altsetting 0 [ 86.993719][ T979] usb 4-1: config 2 interface 4 has no altsetting 0 [ 87.011354][ T979] usb 4-1: Dual-Role OTG device on HNP port [ 87.018031][ T979] usb 4-1: New USB device found, idVendor=19d2, idProduct=0200, bcdDevice=a9.61 [ 87.028008][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.037010][ T979] usb 4-1: Product: 赎汳굝咨䕊䀒⼕ᾡ辉㑎삨Ꮍ㯔░埁ꞕ鄷㘵䪬⧺೑奎謅ᗘ燚뜚⯩㍨까ٕᇨ꓉毨茬嘎絶ⷧ㽡칀⒆Ὣ胯攋幑ﴼ홰凂෥቏랳燅칯鷻詃ㅅᩣⷤ롣㨯梯槿뺆跢庲봕戍ᮓꤠꇆ蕞縘匲틩﯑鳷녛穬蹱㥇딚︕〮摥ᣇ辍亰㧏┏蟣♕큌ꩼ钑ડᖆꙚ矮ഁ [ 87.076219][ T979] usb 4-1: Manufacturer: ﳿ [ 87.116659][ T1214] ftdi_sio 1-1:1.109: FTDI USB Serial Device converter detected [ 87.144523][ T1214] ftdi_sio ttyUSB0: unknown device type: 0x3c01 [ 87.159142][ T1214] ftdi_sio 1-1:1.199: FTDI USB Serial Device converter detected [ 87.169664][ T979] usb 4-1: SerialNumber: syz [ 87.192266][ T1214] ftdi_sio ttyUSB1: unknown device type: 0x3c01 [ 87.194419][ T6122] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 87.242788][ T5950] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 87.243319][ T6122] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 87.297425][ T1214] ftdi_sio 1-1:1.149: FTDI USB Serial Device converter detected [ 87.313141][ T1214] ftdi_sio ttyUSB2: unknown device type: 0x3c01 [ 87.342411][ T6122] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 87.361698][ T5950] usb 2-1: USB disconnect, device number 2 [ 87.366359][ T1214] ftdi_sio 1-1:1.6: FTDI USB Serial Device converter detected [ 87.387279][ T5950] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 87.389030][ T1214] ftdi_sio ttyUSB3: unknown device type: 0x3c01 [ 87.433519][ T1214] usb 1-1: USB disconnect, device number 3 [ 87.455716][ T1214] ftdi_sio 1-1:1.109: device disconnected [ 87.467208][ T1214] ftdi_sio 1-1:1.199: device disconnected [ 87.486698][ T1214] ftdi_sio 1-1:1.149: device disconnected [ 87.522357][ T1214] ftdi_sio 1-1:1.6: device disconnected [ 87.649105][ T5948] usb 3-1: unable to get BOS descriptor or descriptor too short [ 87.667666][ T5948] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 87.702219][ T5948] usb 3-1: can't read configurations, error -71 [ 87.778365][ T6142] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 87.835296][ T5950] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 87.910415][ T979] option 4-1:2.159: GSM modem (1-port) converter detected [ 87.938169][ T6142] netlink: 'syz.2.55': attribute type 10 has an invalid length. [ 87.971249][ T6153] random: crng reseeded on system resumption [ 88.037714][ T6142] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 88.069201][ T979] usb 4-1: USB disconnect, device number 4 [ 88.075351][ T5950] usb 2-1: Using ep0 maxpacket: 32 [ 88.094673][ T5950] usb 2-1: config 0 has an invalid interface number: 250 but max is 1 [ 88.104463][ T979] option 4-1:2.159: device disconnected [ 88.144283][ T5950] usb 2-1: config 0 has no interface number 1 [ 88.170350][ T5950] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 88.191608][ T5950] usb 2-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f [ 88.203299][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.213146][ T5950] usb 2-1: Product: syz [ 88.217442][ T5950] usb 2-1: Manufacturer: syz [ 88.222601][ T5950] usb 2-1: SerialNumber: syz [ 88.237898][ T5950] usb 2-1: config 0 descriptor?? [ 88.256697][ T5950] usb 2-1: Found UVC 0.00 device syz (0408:3090) [ 88.263707][ T5950] usb 2-1: No valid video chain found. [ 88.395292][ T6157] syz.2.58 (6157): drop_caches: 0 [ 88.500044][ T6138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.521778][ T6138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.555498][ T5950] usb 2-1: USB disconnect, device number 3 [ 89.420987][ T6170] FAULT_INJECTION: forcing a failure. [ 89.420987][ T6170] name failslab, interval 1, probability 0, space 0, times 1 [ 89.479713][ T6170] CPU: 0 UID: 0 PID: 6170 Comm: syz.3.63 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 89.479745][ T6170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 89.479759][ T6170] Call Trace: [ 89.479768][ T6170] [ 89.479777][ T6170] dump_stack_lvl+0x189/0x250 [ 89.479808][ T6170] ? __pfx____ratelimit+0x10/0x10 [ 89.479836][ T6170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.479859][ T6170] ? __pfx__printk+0x10/0x10 [ 89.479889][ T6170] ? __pfx___might_resched+0x10/0x10 [ 89.479908][ T6170] ? lock_acquire+0x5f/0x360 [ 89.479940][ T6170] should_fail_ex+0x414/0x560 [ 89.479970][ T6170] should_failslab+0xa8/0x100 [ 89.480002][ T6170] __kmalloc_noprof+0xcb/0x4f0 [ 89.480029][ T6170] ? kfree+0x4d/0x440 [ 89.480053][ T6170] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 89.480077][ T6170] tomoyo_realpath_from_path+0xe3/0x5d0 [ 89.480099][ T6170] ? tomoyo_domain+0xd9/0x130 [ 89.480123][ T6170] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 89.480153][ T6170] tomoyo_path_number_perm+0x1e8/0x5a0 [ 89.480182][ T6170] ? lock_release+0x4b/0x3e0 [ 89.480212][ T6170] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 89.480241][ T6170] ? rcu_is_watching+0x15/0xb0 [ 89.480261][ T6170] ? lock_release+0x4b/0x3e0 [ 89.480290][ T6170] ? vfs_write+0x956/0xb30 [ 89.480319][ T6170] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 89.480360][ T6170] ? lock_release+0x4b/0x3e0 [ 89.480393][ T6170] ? __fget_files+0x2a/0x420 [ 89.480411][ T6170] ? __fget_files+0x3a0/0x420 [ 89.480428][ T6170] ? __fget_files+0x2a/0x420 [ 89.480447][ T6170] security_file_ioctl+0xcb/0x2d0 [ 89.480476][ T6170] __se_sys_ioctl+0x47/0x170 [ 89.480503][ T6170] do_syscall_64+0xfa/0x3b0 [ 89.480535][ T6170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.480556][ T6170] ? clear_bhb_loop+0x60/0xb0 [ 89.480589][ T6170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.480610][ T6170] RIP: 0033:0x7f97c078ebe9 [ 89.480641][ T6170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.480659][ T6170] RSP: 002b:00007f97c151e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 89.480683][ T6170] RAX: ffffffffffffffda RBX: 00007f97c09b5fa0 RCX: 00007f97c078ebe9 [ 89.480700][ T6170] RDX: 0000200000000040 RSI: 000000000000890b RDI: 0000000000000003 [ 89.480714][ T6170] RBP: 00007f97c151e090 R08: 0000000000000000 R09: 0000000000000000 [ 89.480726][ T6170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.480738][ T6170] R13: 00007f97c09b6038 R14: 00007f97c09b5fa0 R15: 00007f97c0adfa28 [ 89.480760][ T6170] [ 89.480768][ T6170] ERROR: Out of memory at tomoyo_realpath_from_path. [ 90.029194][ T6181] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.094554][ T6159] syz.4.59 (6159): drop_caches: 2 [ 90.228323][ T6194] syz.2.67 uses obsolete (PF_INET,SOCK_PACKET) [ 90.489599][ T979] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 90.518498][ T6212] FAULT_INJECTION: forcing a failure. [ 90.518498][ T6212] name failslab, interval 1, probability 0, space 0, times 0 [ 90.531908][ T6212] CPU: 1 UID: 0 PID: 6212 Comm: syz.1.74 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 90.531940][ T6212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 90.531954][ T6212] Call Trace: [ 90.531962][ T6212] [ 90.531971][ T6212] dump_stack_lvl+0x189/0x250 [ 90.532001][ T6212] ? __pfx____ratelimit+0x10/0x10 [ 90.532031][ T6212] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.532056][ T6212] ? __pfx__printk+0x10/0x10 [ 90.532086][ T6212] ? __pfx___might_resched+0x10/0x10 [ 90.532106][ T6212] ? lock_acquire+0x5f/0x360 [ 90.532138][ T6212] should_fail_ex+0x414/0x560 [ 90.532168][ T6212] should_failslab+0xa8/0x100 [ 90.532209][ T6212] __kmalloc_noprof+0xcb/0x4f0 [ 90.532238][ T6212] ? tomoyo_encode+0x28b/0x550 [ 90.532260][ T6212] tomoyo_encode+0x28b/0x550 [ 90.532283][ T6212] tomoyo_realpath_from_path+0x58d/0x5d0 [ 90.532305][ T6212] ? tomoyo_domain+0xd9/0x130 [ 90.532328][ T6212] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 90.532358][ T6212] tomoyo_path_number_perm+0x1e8/0x5a0 [ 90.532387][ T6212] ? lock_release+0x4b/0x3e0 [ 90.532418][ T6212] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 90.532448][ T6212] ? rcu_is_watching+0x15/0xb0 [ 90.532469][ T6212] ? lock_release+0x4b/0x3e0 [ 90.532498][ T6212] ? vfs_write+0x956/0xb30 [ 90.532529][ T6212] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 90.532569][ T6212] ? lock_release+0x4b/0x3e0 [ 90.532602][ T6212] ? __fget_files+0x2a/0x420 [ 90.532620][ T6212] ? __fget_files+0x3a0/0x420 [ 90.532637][ T6212] ? __fget_files+0x2a/0x420 [ 90.532656][ T6212] security_file_ioctl+0xcb/0x2d0 [ 90.532685][ T6212] __se_sys_ioctl+0x47/0x170 [ 90.532712][ T6212] do_syscall_64+0xfa/0x3b0 [ 90.532743][ T6212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.532764][ T6212] ? clear_bhb_loop+0x60/0xb0 [ 90.532788][ T6212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.532809][ T6212] RIP: 0033:0x7fe0b1f8ebe9 [ 90.532827][ T6212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.532845][ T6212] RSP: 002b:00007fe0b2e09038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.532867][ T6212] RAX: ffffffffffffffda RBX: 00007fe0b21b5fa0 RCX: 00007fe0b1f8ebe9 [ 90.532883][ T6212] RDX: 0000200000000040 RSI: 000000000000890b RDI: 0000000000000003 [ 90.532897][ T6212] RBP: 00007fe0b2e09090 R08: 0000000000000000 R09: 0000000000000000 [ 90.532910][ T6212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.532923][ T6212] R13: 00007fe0b21b6038 R14: 00007fe0b21b5fa0 R15: 00007fe0b22dfa28 [ 90.532946][ T6212] [ 90.532966][ T6212] ERROR: Out of memory at tomoyo_realpath_from_path. [ 90.573164][ T5950] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 90.899565][ T979] usb 3-1: Using ep0 maxpacket: 8 [ 90.916296][ T979] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 90.950743][ T979] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 90.960011][ T5950] usb 5-1: Using ep0 maxpacket: 32 [ 90.966214][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.975483][ T979] usb 3-1: Product: syz [ 90.981190][ T979] usb 3-1: Manufacturer: syz [ 90.985901][ T5950] usb 5-1: config 0 has an invalid interface number: 80 but max is 0 [ 90.994202][ T5950] usb 5-1: config 0 has no interface number 0 [ 91.005324][ T5950] usb 5-1: New USB device found, idVendor=04cb, idProduct=0109, bcdDevice=91.1b [ 91.021247][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.029729][ T979] usb 3-1: SerialNumber: syz [ 91.042419][ T979] usb 3-1: config 0 descriptor?? [ 91.062991][ T5950] usb 5-1: Product: syz [ 91.072060][ T5950] usb 5-1: Manufacturer: syz [ 91.076724][ T5950] usb 5-1: SerialNumber: syz [ 91.105839][ T979] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 91.132137][ T1214] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 91.145989][ T979] usb 3-1: setting power ON [ 91.153332][ T5950] usb 5-1: config 0 descriptor?? [ 91.169423][ T979] dvb-usb: bulk message failed: -22 (2/0) [ 91.192363][ T5950] gspca_main: finepix-2.14.0 probing 04cb:0109 [ 91.211816][ T979] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 91.241953][ T979] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 91.264526][ T6194] dvb-usb: bulk message failed: -22 (3/0) [ 91.270546][ T6194] dvb-usb: bulk message failed: -22 (5/0) [ 91.280602][ T979] usb 3-1: media controller created [ 91.299988][ T5928] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 91.329507][ T1214] usb 1-1: Using ep0 maxpacket: 32 [ 91.787644][ T6193] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.70'. [ 91.804014][ T10] usb 5-1: USB disconnect, device number 7 [ 91.832976][ T1214] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 91.839413][ T5928] usb 2-1: config 0 has an invalid interface number: 84 but max is 0 [ 91.852695][ T5928] usb 2-1: config 0 has an invalid interface number: 66 but max is 0 [ 91.860969][ T1214] usb 1-1: config 0 has no interface number 0 [ 91.861013][ T1214] usb 1-1: config 0 interface 89 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 91.861041][ T1214] usb 1-1: config 0 interface 89 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 91.892136][ T979] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 92.006281][ T5928] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 92.062679][ T5928] usb 2-1: config 0 has no interface number 0 [ 92.083800][ T1214] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0114, bcdDevice= 4.be [ 92.094469][ T979] usb 3-1: selecting invalid altsetting 6 [ 92.103041][ T5928] usb 2-1: config 0 has no interface number 1 [ 92.112004][ T1214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.121738][ T979] usb 3-1: digital interface selection failed (-22) [ 92.130898][ T5928] usb 2-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 92.142185][ T979] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 92.160567][ T1214] usb 1-1: Product: syz [ 92.165089][ T5928] usb 2-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 92.196203][ T979] usb 3-1: setting power OFF [ 92.206156][ T1214] usb 1-1: Manufacturer: syz [ 92.217269][ T9] cfg80211: failed to load regulatory.db [ 92.235172][ T979] dvb-usb: bulk message failed: -22 (2/0) [ 92.314499][ T5928] usb 2-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30 [ 92.319629][ T1214] usb 1-1: SerialNumber: syz [ 92.328562][ T979] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 92.341978][ T5928] usb 2-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32 [ 92.352366][ T979] (NULL device *): no alternate interface [ 92.363639][ T5928] usb 2-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2 [ 92.387424][ T5928] usb 2-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 92.399316][ T5928] usb 2-1: config 0 interface 66 altsetting 153 endpoint 0x86 has invalid maxpacket 34869, setting to 1024 [ 92.410830][ T5928] usb 2-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 1024 [ 92.423234][ T5928] usb 2-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216 [ 92.510512][ T1214] usb 1-1: config 0 descriptor?? [ 92.516093][ T5928] usb 2-1: config 0 interface 66 has no altsetting 0 [ 92.518146][ T6223] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 92.541498][ T1214] kvaser_usb 1-1:0.89: error -ENODEV: Cannot get usb endpoint(s) [ 92.555737][ T5928] usb 2-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 92.588946][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.616035][ T5928] usb 2-1: Product: syz [ 92.630219][ T5928] usb 2-1: Manufacturer: syz [ 92.646249][ T5928] usb 2-1: SerialNumber: syz [ 92.662977][ T5928] usb 2-1: config 0 descriptor?? [ 92.686736][ T5928] ljca 2-1:0.84: bulk endpoints not found [ 92.864710][ T1214] usb 1-1: USB disconnect, device number 4 [ 93.215801][ T5928] ljca 2-1:0.66: probe with driver ljca failed with error -71 [ 93.227535][ T5928] usb 2-1: USB disconnect, device number 4 [ 93.537231][ T979] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 93.572020][ T979] usb 3-1: USB disconnect, device number 7 [ 93.603474][ T6194] delete_channel: no stack [ 93.682046][ T6259] FAULT_INJECTION: forcing a failure. [ 93.682046][ T6259] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 93.695861][ T44] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 93.711521][ T6259] CPU: 1 UID: 0 PID: 6259 Comm: syz.4.85 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 93.711551][ T6259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 93.711563][ T6259] Call Trace: [ 93.711570][ T6259] [ 93.711577][ T6259] dump_stack_lvl+0x189/0x250 [ 93.711608][ T6259] ? __pfx____ratelimit+0x10/0x10 [ 93.711637][ T6259] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.711659][ T6259] ? __pfx__printk+0x10/0x10 [ 93.711685][ T6259] ? __might_fault+0xb0/0x130 [ 93.711715][ T6259] ? rcu_is_watching+0x15/0xb0 [ 93.711737][ T6259] should_fail_ex+0x414/0x560 [ 93.711766][ T6259] _copy_from_user+0x2d/0xb0 [ 93.711789][ T6259] inet6_ioctl+0x180/0x280 [ 93.711809][ T6259] ? __pfx_inet6_ioctl+0x10/0x10 [ 93.711827][ T6259] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 93.711860][ T6259] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 93.711890][ T6259] sock_do_ioctl+0xdc/0x300 [ 93.711916][ T6259] ? __pfx_sock_do_ioctl+0x10/0x10 [ 93.711939][ T6259] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 93.711977][ T6259] sock_ioctl+0x576/0x790 [ 93.711999][ T6259] ? lock_release+0x4b/0x3e0 [ 93.712031][ T6259] ? __pfx_sock_ioctl+0x10/0x10 [ 93.712054][ T6259] ? __fget_files+0x2a/0x420 [ 93.712071][ T6259] ? __fget_files+0x3a0/0x420 [ 93.712087][ T6259] ? __fget_files+0x2a/0x420 [ 93.712106][ T6259] ? bpf_lsm_file_ioctl+0x9/0x20 [ 93.712131][ T6259] ? __pfx_sock_ioctl+0x10/0x10 [ 93.712154][ T6259] __se_sys_ioctl+0xf9/0x170 [ 93.712192][ T6259] do_syscall_64+0xfa/0x3b0 [ 93.712224][ T6259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.712246][ T6259] ? clear_bhb_loop+0x60/0xb0 [ 93.712269][ T6259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.712288][ T6259] RIP: 0033:0x7f8f2a78ebe9 [ 93.712305][ T6259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.712323][ T6259] RSP: 002b:00007f8f2b583038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.712345][ T6259] RAX: ffffffffffffffda RBX: 00007f8f2a9b5fa0 RCX: 00007f8f2a78ebe9 [ 93.712361][ T6259] RDX: 0000200000000040 RSI: 000000000000890b RDI: 0000000000000003 [ 93.712374][ T6259] RBP: 00007f8f2b583090 R08: 0000000000000000 R09: 0000000000000000 [ 93.712387][ T6259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.712399][ T6259] R13: 00007f8f2a9b6038 R14: 00007f8f2a9b5fa0 R15: 00007f8f2aadfa28 [ 93.712422][ T6259] [ 94.143073][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.154128][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.164467][ T44] usb 1-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 94.173592][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.185388][ T44] usb 1-1: config 0 descriptor?? [ 94.214090][ T6266] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 94.248819][ T6264] syzkaller1: entered promiscuous mode [ 94.268354][ T6264] syzkaller1: entered allmulticast mode [ 94.499120][ T6272] netlink: 20 bytes leftover after parsing attributes in process `syz.4.87'. [ 94.541166][ T6272] netlink: 20 bytes leftover after parsing attributes in process `syz.4.87'. [ 94.576146][ T6281] macvlan0: entered promiscuous mode [ 94.585074][ T6281] netlink: 'syz.2.92': attribute type 1 has an invalid length. [ 94.596730][ T6281] netlink: 'syz.2.92': attribute type 2 has an invalid length. [ 94.610164][ T44] hid-retrode 0003:0403:97C1.0002: unknown main item tag 0x0 [ 94.635016][ T44] hid-retrode 0003:0403:97C1.0002: hidraw0: USB HID v0.00 Device [HID 0403:97c1] on usb-dummy_hcd.0-1/input0 [ 94.812501][ T5928] usb 1-1: USB disconnect, device number 5 [ 94.840247][ T6286] fido_id[6286]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 94.946646][ T6290] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 94.972800][ T6296] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 94.981436][ T6290] kvm: requested 44419 ns i8254 timer period limited to 200000 ns [ 95.024979][ T6290] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 95.035089][ T6290] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 95.047074][ T6290] kvm: requested 80457 ns i8254 timer period limited to 200000 ns [ 95.059211][ T6290] kvm: requested 46095 ns i8254 timer period limited to 200000 ns [ 95.068483][ T6290] kvm: requested 39390 ns i8254 timer period limited to 200000 ns [ 95.229555][ T44] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 95.390986][ T44] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 95.401490][ T44] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 95.416267][ T44] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 95.443243][ T44] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 95.472949][ T44] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 95.487780][ T44] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 95.498392][ T44] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 95.512364][ T44] usb 3-1: Product: syz [ 95.517301][ T44] usb 3-1: Manufacturer: syz [ 95.547977][ T44] cdc_wdm 3-1:1.0: skipping garbage [ 95.553596][ T6305] netlink: 29 bytes leftover after parsing attributes in process `syz.0.98'. [ 95.554804][ T44] cdc_wdm 3-1:1.0: skipping garbage [ 95.577021][ T44] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 95.603005][ T44] cdc_wdm 3-1:1.0: Unknown control protocol [ 96.108114][ T9] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 96.140835][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 96.141849][ T1214] usb 3-1: USB disconnect, device number 8 [ 96.147505][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 96.147550][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 96.169285][ T6297] cdc_wdm 3-1:1.0: Tx URB error: -19 [ 96.179567][ T5928] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 96.229692][ T9] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 96.241395][ T9] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 96.289402][ T9] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 96.329211][ T9] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 96.336995][ T9] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 96.360984][ T9] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 96.372280][ T9] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 96.383701][ T10] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 96.396389][ T9] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 96.406344][ T9] hid-generic 00A0:0006:0003.0003: hidraw0: HID v0.05 Device [syz1] on syz0 [ 96.420980][ T5928] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 96.445636][ T5928] usb 2-1: config 0 interface 0 has no altsetting 1 [ 96.461642][ T5928] usb 2-1: New USB device found, idVendor=0499, idProduct=5ae2, bcdDevice= 9.0f [ 96.475377][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 96.484000][ T5928] usb 2-1: Product: syz [ 96.488305][ T5928] usb 2-1: Manufacturer: syz [ 96.498488][ T5928] usb 2-1: SerialNumber: syz [ 96.576959][ T5928] usb 2-1: config 0 descriptor?? [ 96.589136][ T10] usb 1-1: config 0 has no interfaces? [ 96.599676][ T10] usb 1-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 96.609370][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.635024][ T10] usb 1-1: config 0 descriptor?? [ 96.908764][ T5928] usb 2-1: USB disconnect, device number 5 [ 96.928748][ T6008] udevd[6008]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.611608][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 97.770088][ T6339] capability: warning: `syz.4.106' uses deprecated v2 capabilities in a way that may be insecure [ 97.789736][ T1214] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 97.800927][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.818909][ T24] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 97.833421][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.859387][ T24] usb 2-1: config 0 descriptor?? [ 97.982026][ T1214] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.995841][ T1214] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 98.040020][ T1214] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.049371][ T1214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.071590][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 98.077662][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 98.100513][ T1214] usb 3-1: config 0 descriptor?? [ 98.109640][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 98.137767][ T24] usb 2-1: USB disconnect, device number 6 [ 98.249570][ T9] usb 4-1: device descriptor read/64, error -71 [ 98.335306][ T6351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.109'. [ 98.462875][ T1214] usb 3-1: string descriptor 0 read error: -71 [ 98.477893][ T1214] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 98.484212][ T6356] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 98.493226][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 98.495362][ T1214] usb 3-1: USB disconnect, device number 9 [ 98.522682][ T6356] bridge0: port 3(macsec1) entered blocking state [ 98.529402][ T6356] bridge0: port 3(macsec1) entered disabled state [ 98.538449][ T6356] macsec1: entered allmulticast mode [ 98.545976][ T6356] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 98.555422][ T6356] macsec1: entered promiscuous mode [ 98.563074][ T6356] bridge0: port 3(macsec1) entered blocking state [ 98.570906][ T6356] bridge0: port 3(macsec1) entered forwarding state [ 98.582401][ T1319] bridge0: port 3(macsec1) entered disabled state [ 98.639581][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 98.641254][ T9] usb 4-1: device descriptor read/64, error -71 [ 98.769791][ T9] usb usb4-port1: attempt power cycle [ 98.799670][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 98.806814][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.820117][ T24] usb 2-1: New USB device found, idVendor=18d1, idProduct=503d, bcdDevice= 0.00 [ 99.247379][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.272396][ T1214] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 99.282576][ T24] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 99.291702][ T24] usb 2-1: no configuration chosen from 1 choice [ 99.328124][ T10] usb 1-1: USB disconnect, device number 6 [ 99.434506][ T1214] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 99.452471][ T1214] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.462703][ T1214] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 99.477711][ T1214] usb 3-1: New USB device found, idVendor=056a, idProduct=00f6, bcdDevice= 0.00 [ 99.479902][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 99.495234][ T1214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.516295][ T1214] usb 3-1: config 0 descriptor?? [ 99.528443][ T6358] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 99.531115][ T9] usb 4-1: device descriptor read/8, error -71 [ 99.759617][ T10] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 99.779583][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 99.860167][ T9] usb 4-1: device descriptor read/8, error -71 [ 99.886039][ T1214] usb 3-1: string descriptor 0 read error: -71 [ 99.904717][ T1214] usbhid 3-1:0.0: can't add hid device: -71 [ 99.910624][ T10] usb 1-1: too many configurations: 251, using maximum allowed: 8 [ 99.915658][ T1214] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 99.921391][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 99.935329][ T10] usb 1-1: can't read configurations, error -61 [ 99.976097][ T9] usb usb4-port1: unable to enumerate USB device [ 99.981087][ T1214] usb 3-1: USB disconnect, device number 10 [ 100.139601][ T10] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 100.290165][ T10] usb 1-1: too many configurations: 251, using maximum allowed: 8 [ 100.300804][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 100.308771][ T10] usb 1-1: can't read configurations, error -61 [ 100.324804][ T10] usb usb1-port1: attempt power cycle [ 100.443282][ T5928] usb 2-1: USB disconnect, device number 7 [ 100.679674][ T10] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 100.700564][ T10] usb 1-1: too many configurations: 251, using maximum allowed: 8 [ 100.721342][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 100.736792][ T10] usb 1-1: can't read configurations, error -61 [ 100.939593][ T5928] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 101.021053][ T10] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 101.069533][ T5928] usb 2-1: device descriptor read/64, error -71 [ 101.109339][ T10] usb 1-1: too many configurations: 251, using maximum allowed: 8 [ 101.128392][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 101.136280][ T10] usb 1-1: can't read configurations, error -61 [ 101.181708][ T10] usb usb1-port1: unable to enumerate USB device [ 101.369580][ T5928] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 101.499600][ T5928] usb 2-1: device descriptor read/64, error -71 [ 101.509652][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 101.619939][ T5928] usb usb2-port1: attempt power cycle [ 101.672789][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.685306][ T24] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 101.694531][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.705734][ T24] usb 3-1: config 0 descriptor?? [ 101.918361][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 101.943411][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 101.961193][ T24] usb 3-1: USB disconnect, device number 11 [ 101.970003][ T5928] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 102.010381][ T5928] usb 2-1: device descriptor read/8, error -71 [ 102.150478][ T1214] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 102.219601][ T5915] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 102.250277][ T5928] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 102.270091][ T5928] usb 2-1: device descriptor read/8, error -71 [ 102.310841][ T1214] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.321932][ T1214] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.331765][ T1214] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 102.340923][ T1214] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.350833][ T1214] usb 5-1: config 0 descriptor?? [ 102.372133][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 102.383296][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.389751][ T5928] usb usb2-port1: unable to enumerate USB device [ 102.394329][ T5915] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 102.409102][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.418738][ T5915] usb 4-1: config 0 descriptor?? [ 102.429597][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 102.583287][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.597726][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 102.615500][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.647531][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.658284][ T24] usb 3-1: config 0 descriptor?? [ 102.669215][ T5915] usbhid 4-1:0.0: can't add hid device: -71 [ 102.679346][ T5915] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 102.690145][ T5915] usb 4-1: USB disconnect, device number 9 [ 102.705063][ T6412] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.129'. [ 102.767619][ T1214] pyra 0003:1E7D:2CF6.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 103.077867][ T24] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 103.216028][ T6419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.130'. [ 103.236909][ T6419] netlink: 36 bytes leftover after parsing attributes in process `syz.3.130'. [ 103.330846][ C0] plantronics 0003:047F:FFFF.0005: hid_field_extract() called with n (132) > 32! (kworker/u8:6) [ 103.404334][ T6424] netlink: 32 bytes leftover after parsing attributes in process `syz.3.131'. [ 103.510926][ T6426] loop9: detected capacity change from 0 to 7 [ 103.533064][ T5928] usb 3-1: USB disconnect, device number 12 [ 103.567859][ T5883] Buffer I/O error on dev loop9, logical block 0, async page read [ 103.583507][ T5883] Buffer I/O error on dev loop9, logical block 0, async page read [ 103.595185][ T5883] Buffer I/O error on dev loop9, logical block 0, async page read [ 103.629758][ T5883] Buffer I/O error on dev loop9, logical block 0, async page read [ 103.656867][ T6433] dvmrp8: entered allmulticast mode [ 103.671960][ T5883] Buffer I/O error on dev loop9, logical block 0, async page read [ 103.697359][ T6433] dvmrp8: left allmulticast mode [ 103.969057][ T1214] pyra 0003:1E7D:2CF6.0004: couldn't init struct pyra_device [ 104.035402][ T1214] pyra 0003:1E7D:2CF6.0004: couldn't install mouse [ 104.074460][ T1214] pyra 0003:1E7D:2CF6.0004: probe with driver pyra failed with error -71 [ 104.131428][ T6445] netlink: 'syz.0.137': attribute type 10 has an invalid length. [ 104.160411][ T5915] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 104.176580][ T1214] usb 5-1: USB disconnect, device number 8 [ 104.189806][ T6445] netlink: 40 bytes leftover after parsing attributes in process `syz.0.137'. [ 104.202040][ T6445] batadv0: entered promiscuous mode [ 104.211923][ T6445] batadv0: entered allmulticast mode [ 104.253426][ T6445] bridge0: port 3(batadv0) entered blocking state [ 104.286073][ T6445] bridge0: port 3(batadv0) entered disabled state [ 104.299195][ T6445] bridge0: port 3(batadv0) entered blocking state [ 104.306139][ T6445] bridge0: port 3(batadv0) entered forwarding state [ 104.352523][ T1319] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 104.362998][ T1319] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 104.379522][ T5915] usb 4-1: device descriptor read/64, error -71 [ 104.483066][ T6452] trusted_key: syz.2.139 sent an empty control message without MSG_MORE. [ 104.494687][ T6452] fuse: Bad value for 'group_id' [ 104.499805][ T6452] fuse: Bad value for 'group_id' [ 104.670593][ T5915] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 104.826776][ T30] audit: type=1326 audit(1755503812.788:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6458 comm="syz.4.142" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f2a78ebe9 code=0x0 [ 104.848485][ T5915] usb 4-1: device descriptor read/64, error -71 [ 104.854827][ T44] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 104.947092][ T6460] process 'syz.4.142' launched './file1' with NULL argv: empty string added [ 104.970171][ T5915] usb usb4-port1: attempt power cycle [ 105.122762][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 105.136945][ T44] usb 1-1: unable to get BOS descriptor or descriptor too short [ 105.150412][ T44] usb 1-1: config 6 has an invalid interface number: 46 but max is 0 [ 105.179641][ T44] usb 1-1: config 6 has an invalid interface association descriptor of length 5, skipping [ 105.194329][ T44] usb 1-1: config 6 has an invalid descriptor of length 13, skipping remainder of the config [ 105.205814][ T44] usb 1-1: config 6 has no interface number 0 [ 105.301565][ T44] usb 1-1: config 6 interface 46 altsetting 99 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 105.339823][ T5915] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 105.365960][ T44] usb 1-1: config 6 interface 46 has no altsetting 0 [ 105.414016][ T5915] usb 4-1: device descriptor read/8, error -71 [ 105.433774][ T44] usb 1-1: New USB device found, idVendor=06f8, idProduct=0001, bcdDevice=e0.c5 [ 105.444935][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.453251][ T44] usb 1-1: Product: syz [ 105.457514][ T44] usb 1-1: Manufacturer: syz [ 105.462212][ T44] usb 1-1: SerialNumber: syz [ 105.679593][ T5915] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 105.701991][ T6470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.721287][ T5915] usb 4-1: device descriptor read/8, error -71 [ 105.735515][ T6474] netlink: 40 bytes leftover after parsing attributes in process `syz.4.147'. [ 105.751277][ T6470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.770286][ T44] usb 1-1: USB disconnect, device number 11 [ 105.780378][ T6474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.147'. [ 105.791785][ T6477] netlink: 172 bytes leftover after parsing attributes in process `syz.1.148'. [ 105.843139][ T5915] usb usb4-port1: unable to enumerate USB device [ 105.890163][ T6483] gretap0: entered promiscuous mode [ 105.956227][ T6483] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 105.966212][ T5915] IPVS: starting estimator thread 0... [ 105.975613][ T6486] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 106.007932][ T6482] gretap0: left promiscuous mode [ 106.099647][ T6487] IPVS: using max 49 ests per chain, 117600 per kthread [ 106.639855][ T5928] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 106.822915][ T5928] usb 5-1: Using ep0 maxpacket: 32 [ 106.862431][ T5928] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 106.874877][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.886586][ T5928] usb 5-1: Product: syz [ 107.040555][ T5928] usb 5-1: Manufacturer: syz [ 107.046848][ T5928] usb 5-1: SerialNumber: syz [ 107.069684][ T5928] usb 5-1: config 0 descriptor?? [ 107.259575][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 107.291285][ T5915] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 107.373233][ T6506] netlink: 32 bytes leftover after parsing attributes in process `syz.0.156'. [ 107.419915][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 107.430587][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 107.442524][ T24] usb 2-1: config 8 has an invalid interface number: 255 but max is 0 [ 107.451187][ T24] usb 2-1: config 8 has no interface number 0 [ 107.457523][ T24] usb 2-1: config 8 interface 255 has no altsetting 0 [ 107.467919][ T5915] usb 4-1: Using ep0 maxpacket: 32 [ 107.476327][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.489576][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.504444][ T5915] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 107.524538][ T5915] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 107.535462][ T24] usb 2-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 107.545196][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.573782][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.583013][ T24] usb 2-1: Product: syz [ 107.592666][ T24] usb 2-1: Manufacturer: syz [ 107.598542][ T24] usb 2-1: SerialNumber: syz [ 107.604636][ T5915] usb 4-1: config 0 descriptor?? [ 107.636614][ T6517] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.157'. [ 107.656694][ T6517] tipc: Started in network mode [ 107.662909][ T6517] tipc: Node identity fa7549bc71bd, cluster identity 4711 [ 107.670801][ T6517] tipc: Enabled bearer , priority 0 [ 107.835784][ T6504] netlink: 'syz.1.155': attribute type 8 has an invalid length. [ 107.880783][ T24] catc 2-1:8.255: Can't set altsetting 1. [ 107.899679][ T24] catc 2-1:8.255: probe with driver catc failed with error -5 [ 107.919670][ T5950] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 107.938086][ T5915] usbhid 4-1:0.0: can't add hid device: -71 [ 107.949660][ T5915] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 108.020082][ T24] usb 2-1: USB disconnect, device number 12 [ 108.129256][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 108.164547][ T5915] usb 4-1: USB disconnect, device number 14 [ 108.247800][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.266136][ T5950] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 108.297332][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.336166][ T6510] tipc: Disabling bearer [ 108.376109][ T5950] usb 1-1: config 0 descriptor?? [ 108.559527][ T5915] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 108.690115][ T5915] usb 4-1: device descriptor read/64, error -71 [ 108.739736][ T30] audit: type=1326 audit(1755503816.708:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6526 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b1f8ebe9 code=0x7ffc0000 [ 108.783175][ T6527] IPVS: set_ctl: invalid protocol: 31091 0.30.1.2:20003 [ 109.065018][ T30] audit: type=1326 audit(1755503816.708:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6526 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b1f8ebe9 code=0x7ffc0000 [ 109.090481][ C1] vkms_vblank_simulate: vblank timer overrun [ 109.207573][ T30] audit: type=1326 audit(1755503816.748:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6526 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fe0b1f8ebe9 code=0x7ffc0000 [ 109.231815][ T5915] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 109.323061][ T30] audit: type=1326 audit(1755503816.748:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6526 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b1f8ebe9 code=0x7ffc0000 [ 109.358482][ T5950] usbhid 1-1:0.0: can't add hid device: -71 [ 109.391242][ T30] audit: type=1326 audit(1755503816.748:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6526 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe0b1f8ebe9 code=0x7ffc0000 [ 109.409749][ T5950] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 109.414069][ T5915] usb 4-1: device descriptor read/64, error -71 [ 109.440279][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 109.473848][ T5950] usb 1-1: USB disconnect, device number 12 [ 109.534559][ T30] audit: type=1326 audit(1755503816.748:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6526 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b1f8ebe9 code=0x7ffc0000 [ 109.556790][ C1] vkms_vblank_simulate: vblank timer overrun [ 109.575327][ T30] audit: type=1326 audit(1755503816.748:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6526 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fe0b1f8ebe9 code=0x7ffc0000 [ 109.580785][ T5928] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 109.602874][ T5915] usb usb4-port1: attempt power cycle [ 109.617714][ T30] audit: type=1326 audit(1755503816.748:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6526 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b1f8ebe9 code=0x7ffc0000 [ 109.619588][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 109.639835][ C1] vkms_vblank_simulate: vblank timer overrun [ 109.646250][ T30] audit: type=1326 audit(1755503816.758:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6526 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fe0b1f8ebe9 code=0x7ffc0000 [ 109.704774][ T5928] peak_usb 5-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 109.724162][ T9] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 109.741602][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.751520][ T9] usb 2-1: Product: syz [ 109.755859][ T9] usb 2-1: Manufacturer: syz [ 109.770071][ T9] usb 2-1: SerialNumber: syz [ 109.779938][ T5928] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 109.790815][ T9] usb 2-1: config 0 descriptor?? [ 109.804486][ T5928] usb 5-1: USB disconnect, device number 9 [ 109.828221][ T9] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 109.949574][ T5915] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 109.970777][ T5915] usb 4-1: device descriptor read/8, error -71 [ 110.297311][ T6553] netlink: 12 bytes leftover after parsing attributes in process `syz.4.168'. [ 110.319551][ T5915] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 110.358173][ T5915] usb 4-1: device descriptor read/8, error -71 [ 110.479748][ T5950] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 110.480234][ T5915] usb usb4-port1: unable to enumerate USB device [ 110.567650][ T6560] binder: 6558:6560 ioctl 4018620d 0 returned -22 [ 110.586139][ T6559] binder: 6558:6559 ioctl 4018620d 0 returned -22 [ 110.649617][ T5950] usb 1-1: Using ep0 maxpacket: 16 [ 110.659900][ T5950] usb 1-1: config 0 has an invalid interface number: 107 but max is 0 [ 110.674268][ T5950] usb 1-1: config 0 has no interface number 0 [ 110.684372][ T5950] usb 1-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 110.842323][ T5950] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 110.862371][ T5950] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 110.878657][ T5950] usb 1-1: Product: syz [ 110.959786][ T5950] usb 1-1: Manufacturer: syz [ 111.096828][ T5950] usb 1-1: SerialNumber: syz [ 111.106866][ T5950] usb 1-1: config 0 descriptor?? [ 111.183112][ T5950] keyspan 1-1:0.107: Keyspan 4 port adapter converter detected [ 111.192660][ T5950] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 81 [ 111.210378][ T5950] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 1 [ 111.225458][ T5950] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 111.239112][ T5950] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 2 [ 111.252913][ T5950] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 111.262700][ T5950] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 4 [ 111.292959][ T5950] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 111.313979][ T5950] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 6 [ 111.332148][ T5950] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 111.398693][ T5950] usb 1-1: USB disconnect, device number 13 [ 111.411450][ T5950] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 111.515804][ T5950] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 111.632013][ T5950] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 111.645006][ T5950] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 111.671020][ T5950] keyspan 1-1:0.107: device disconnected [ 111.879772][ T5915] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 112.040835][ T5915] usb 5-1: Using ep0 maxpacket: 32 [ 112.055143][ T5915] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 112.097731][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.108457][ T5915] usb 5-1: Product: syz [ 112.114585][ T5915] usb 5-1: Manufacturer: syz [ 112.122479][ T5915] usb 5-1: SerialNumber: syz [ 112.145198][ T5915] usb 5-1: config 0 descriptor?? [ 112.189668][ T9] gspca_ov534_9: reg_r err -110 [ 112.368787][ T6582] netlink: 'syz.2.175': attribute type 13 has an invalid length. [ 112.388122][ T6582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.175'. [ 112.388201][ T5915] snd-usb-6fire 5-1:0.0: unknown device firmware state received from device: [ 112.407938][ T6582] netlink: 'syz.2.175': attribute type 13 has an invalid length. [ 112.415856][ T9] gspca_ov534_9: Unknown sensor 0000 [ 112.415932][ T9] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 112.416782][ T6221] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.439167][ T6582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.175'. [ 112.450604][ T5915] eb 9a 47 80 9b f8 84 f0 [ 112.559828][ T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 112.672484][ T5915] snd-usb-6fire 5-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 112.680129][ T6221] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.712288][ T6221] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.750225][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 112.753116][ T6221] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.760314][ T24] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 112.779773][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.797564][ T24] usb 4-1: config 0 descriptor?? [ 113.055824][ T24] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 113.099080][ T6588] netlink: 'syz.2.177': attribute type 6 has an invalid length. [ 113.267140][ T6590] geneve2: entered allmulticast mode [ 113.562294][ T6599] netlink: 24 bytes leftover after parsing attributes in process `syz.2.180'. [ 113.582831][ T6599] netlink: 40 bytes leftover after parsing attributes in process `syz.2.180'. [ 113.670859][ T1214] usb 2-1: USB disconnect, device number 13 [ 114.020894][ T6609] tipc: Started in network mode [ 114.025961][ T6609] tipc: Node identity , cluster identity 4711 [ 114.032297][ T6609] tipc: Failed to obtain node identity [ 114.038423][ T6609] tipc: Enabling of bearer rejected, failed to enable media [ 114.114778][ T6601] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 114.941942][ T6581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.174'. [ 114.953940][ T6580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.174'. [ 114.959853][ T6581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.174'. [ 114.995729][ T24] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 115.009727][ T24] asix 4-1:0.0: probe with driver asix failed with error -71 [ 115.025310][ T24] usb 4-1: USB disconnect, device number 19 [ 115.299817][ T44] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 115.449584][ T9] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 115.459740][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 115.466449][ T44] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 115.476938][ T44] usb 1-1: config 0 has no interface number 0 [ 115.485583][ T44] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 115.494847][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.503074][ T44] usb 1-1: Product: syz [ 115.507311][ T44] usb 1-1: Manufacturer: syz [ 115.512070][ T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 115.519933][ T44] usb 1-1: SerialNumber: syz [ 115.526817][ T44] usb 1-1: config 0 descriptor?? [ 115.537587][ T44] smsc95xx v2.0.0 [ 115.601894][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 115.610541][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 115.619595][ T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 115.629048][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 22619, setting to 1023 [ 115.650621][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 115.660827][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.670426][ T9] usb 3-1: Product: syz [ 115.674703][ T9] usb 3-1: Manufacturer: syz [ 115.679634][ T9] usb 3-1: SerialNumber: syz [ 115.687408][ T24] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 115.716114][ T24] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 115.729641][ T24] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 115.756041][ T24] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 115.769761][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.782461][ T6631] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 115.799597][ T1214] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 115.868641][ T5915] usb 5-1: USB disconnect, device number 10 [ 115.922571][ T9] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 115.961653][ T9] usb 3-1: USB disconnect, device number 13 [ 115.968198][ T44] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 115.968985][ T6625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.981063][ T1214] usb 4-1: Using ep0 maxpacket: 16 [ 115.991716][ T6625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.002459][ T44] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 116.015722][ T1214] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 116.028709][ T1214] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.045529][ T1214] usb 4-1: Product: syz [ 116.050041][ T1214] usb 4-1: Manufacturer: syz [ 116.058482][ T1214] usb 4-1: SerialNumber: syz [ 116.062297][ T5883] udevd[5883]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.069796][ T1214] usb 4-1: config 0 descriptor?? [ 116.092993][ T1214] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 116.102137][ T1214] usb 4-1: Detected FT4233HP [ 116.331617][ T5915] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 116.345695][ T6637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.355514][ T6637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.406929][ T1214] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 116.423083][ T1214] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 116.440570][ T1214] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 116.460956][ T1214] usb 4-1: USB disconnect, device number 20 [ 116.486309][ T1214] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 116.496137][ T5915] usb 5-1: Using ep0 maxpacket: 16 [ 116.515520][ T5915] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.528099][ T1214] ftdi_sio 4-1:0.0: device disconnected [ 116.535799][ T5915] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.546909][ T5915] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 116.559414][ T5915] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 116.571380][ T5915] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 116.581912][ T5915] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 116.593055][ T5915] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 116.609094][ T5915] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.618335][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 116.627308][ T5915] usb 5-1: SerialNumber: syz [ 116.637254][ T5915] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 116.645374][ T5915] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 116.654721][ T6625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.668089][ T6625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.677805][ T44] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 116.689141][ T44] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 116.701343][ T44] usb 1-1: USB disconnect, device number 14 [ 116.799571][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 116.952460][ T9] usb 3-1: config 9 has an invalid interface number: 51 but max is 1 [ 116.960726][ T9] usb 3-1: config 9 has an invalid interface number: 73 but max is 1 [ 116.968931][ T9] usb 3-1: config 9 has no interface number 0 [ 116.975107][ T9] usb 3-1: config 9 has no interface number 1 [ 116.981326][ T9] usb 3-1: config 9 interface 51 has no altsetting 0 [ 116.988065][ T9] usb 3-1: config 9 interface 73 has no altsetting 0 [ 116.996850][ T9] usb 3-1: New USB device found, idVendor=0499, idProduct=1001, bcdDevice=c4.19 [ 117.006042][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.014583][ T9] usb 3-1: Product: syz [ 117.018956][ T9] usb 3-1: Manufacturer: syz [ 117.023619][ T9] usb 3-1: SerialNumber: syz [ 117.244624][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 117.252625][ T9] usb 3-1: invalid MIDI in EP 0 [ 117.258246][ T9] snd-usb-audio 3-1:9.51: probe with driver snd-usb-audio failed with error -22 [ 117.273671][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 117.293157][ T9] snd-usb-audio 3-1:9.73: probe with driver snd-usb-audio failed with error -2 [ 117.323387][ T9] usb 3-1: USB disconnect, device number 14 [ 117.337234][ T5883] udevd[5883]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:9.73/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.530229][ T5950] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 117.605925][ T6653] vlan2: entered allmulticast mode [ 117.612185][ T6653] hsr0: entered allmulticast mode [ 117.617883][ T6653] hsr_slave_0: entered allmulticast mode [ 117.623953][ T6653] hsr_slave_1: entered allmulticast mode [ 117.692396][ T5950] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.703118][ T5950] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 117.714086][ T5950] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 117.724946][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 117.735184][ T5950] usb 1-1: SerialNumber: syz [ 117.857776][ T6657] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 117.942470][ T24] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 117.953462][ T24] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input9 [ 117.972669][ T24] usb 2-1: USB disconnect, device number 14 [ 117.978730][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 118.649490][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 118.820095][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 118.830439][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.845070][ T9] usb 4-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 118.867866][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.885792][ T9] usb 4-1: config 0 descriptor?? [ 119.010086][ T979] usb 5-1: USB disconnect, device number 11 [ 119.140972][ T9] hid_parser_main: 5 callbacks suppressed [ 119.140999][ T9] cypress 0003:04B4:07B1.0006: unknown main item tag 0x0 [ 119.174720][ T9] cypress 0003:04B4:07B1.0006: unknown main item tag 0x0 [ 119.184595][ T9] cypress 0003:04B4:07B1.0006: unknown main item tag 0x0 [ 119.192363][ T9] cypress 0003:04B4:07B1.0006: unknown main item tag 0x0 [ 119.200819][ T9] cypress 0003:04B4:07B1.0006: unknown main item tag 0x0 [ 119.243716][ T9] cypress 0003:04B4:07B1.0006: hidraw0: USB HID v0.00 Device [HID 04b4:07b1] on usb-dummy_hcd.3-1/input0 [ 119.392111][ T6685] warning: `syz.1.206' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 119.417435][ T1214] usb 4-1: USB disconnect, device number 21 [ 119.592361][ T6687] fido_id[6687]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 119.679753][ T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 119.839538][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 119.846813][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 119.858311][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 119.868804][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 5152, setting to 1024 [ 119.921448][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 119.931778][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 119.931799][ T30] audit: type=1800 audit(1755503827.898:20): pid=6681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.207" name="bus" dev="ramfs" ino=12612 res=0 errno=0 [ 119.964446][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.998583][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 120.018799][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.257848][ T24] usb 3-1: GET_CAPABILITIES returned 0 [ 120.283701][ T5950] usb 1-1: 0:2 : does not exist [ 120.303067][ T24] usbtmc 3-1:16.0: can't read capabilities [ 120.373050][ T5950] usb 1-1: USB disconnect, device number 15 [ 120.418863][ T6701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.209'. [ 120.532444][ T6008] udevd[6008]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.543081][ T24] usb 3-1: USB disconnect, device number 15 [ 120.639539][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 120.810088][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 120.821771][ T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 120.831428][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.840526][ T9] usb 5-1: Product: syz [ 120.845299][ T9] usb 5-1: Manufacturer: syz [ 120.856242][ T9] usb 5-1: SerialNumber: syz [ 120.863879][ T9] usb 5-1: config 0 descriptor?? [ 120.883489][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 120.891941][ T5950] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 121.083434][ T5950] usb 1-1: Using ep0 maxpacket: 8 [ 121.093956][ T5950] usb 1-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=11.85 [ 121.103118][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.151331][ T5950] usb 1-1: Product: syz [ 121.155598][ T5950] usb 1-1: Manufacturer: syz [ 121.173700][ T5950] usb 1-1: SerialNumber: syz [ 121.199703][ T24] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 121.201142][ T5950] usb 1-1: config 0 descriptor?? [ 121.280698][ T5950] ipw 1-1:0.0: IPWireless converter converter detected [ 121.379638][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 121.388313][ T24] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 121.430368][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.449886][ T24] usb 2-1: config 0 descriptor?? [ 121.463955][ T24] gspca_main: sunplus-2.14.0 probing 041e:400b [ 121.502776][ T5915] usb 1-1: USB disconnect, device number 16 [ 121.514802][ T5915] ipw 1-1:0.0: device disconnected [ 121.763976][ T6719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.772940][ T6719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.864722][ T24] gspca_sunplus: reg_w_riv err -71 [ 121.870525][ T24] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 121.882595][ T24] usb 2-1: USB disconnect, device number 15 [ 121.989683][ T979] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 122.121182][ T979] usb 4-1: device descriptor read/64, error -71 [ 122.299862][ T5950] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 122.311306][ T6697] syzkaller1: entered promiscuous mode [ 122.316834][ T6697] syzkaller1: entered allmulticast mode [ 122.371896][ T979] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 122.460911][ T5950] usb 1-1: Using ep0 maxpacket: 16 [ 122.473990][ T5950] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 122.482689][ T5950] usb 1-1: config 0 has no interface number 0 [ 122.488929][ T5950] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 122.499864][ T5950] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 122.511958][ T979] usb 4-1: device descriptor read/64, error -71 [ 122.519630][ T5950] usb 1-1: config 0 interface 41 has no altsetting 0 [ 122.531284][ T5950] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 122.541109][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.549206][ T5950] usb 1-1: Product: syz [ 122.556058][ T5950] usb 1-1: Manufacturer: syz [ 122.855559][ T979] usb usb4-port1: attempt power cycle [ 122.864668][ T5950] usb 1-1: SerialNumber: syz [ 122.871610][ T5950] usb 1-1: config 0 descriptor?? [ 122.877227][ T6723] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 122.885589][ T6723] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 122.962122][ T9] gspca_sonixj: reg_r err -71 [ 122.967096][ T9] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 122.989964][ T9] usb 5-1: USB disconnect, device number 12 [ 123.096965][ T6723] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 123.104985][ T6723] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 123.199495][ T979] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 123.220071][ T979] usb 4-1: device descriptor read/8, error -71 [ 123.481878][ T979] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 123.512003][ T979] usb 4-1: device descriptor read/8, error -71 [ 123.619701][ T979] usb usb4-port1: unable to enumerate USB device [ 123.749579][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 123.803921][ T5950] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 123.921316][ T10] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 123.930690][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.959529][ T10] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 123.971777][ T10] usb 5-1: config 1 has no interface number 1 [ 123.983497][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 124.051586][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 124.060895][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.069567][ T10] usb 5-1: Product: syz [ 124.079531][ T10] usb 5-1: Manufacturer: syz [ 124.084352][ T10] usb 5-1: SerialNumber: syz [ 124.399701][ T30] audit: type=1326 audit(1755503832.368:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.2.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4491b8ebe9 code=0x7ffc0000 [ 124.400033][ T10] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 124.453372][ T30] audit: type=1326 audit(1755503832.408:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.2.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f4491b8ebe9 code=0x7ffc0000 [ 124.480265][ T10] usb 5-1: MIDIStreaming interface descriptor not found [ 124.501267][ T30] audit: type=1326 audit(1755503832.408:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.2.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4491b8ebe9 code=0x7ffc0000 [ 124.534539][ T10] usb 5-1: USB disconnect, device number 13 [ 124.556747][ T30] audit: type=1326 audit(1755503832.408:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.2.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4491b8ebe9 code=0x7ffc0000 [ 124.609409][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.612076][ T6757] ptrace attach of "./syz-executor exec"[6760] was attempted by "./syz-executor exec"[6757] [ 124.640738][ T30] audit: type=1326 audit(1755503832.418:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.2.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f4491b8ebe9 code=0x7ffc0000 [ 124.909586][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 125.101523][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.119169][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.132389][ T9] usb 2-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 125.145568][ T9] usb 2-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 125.160599][ T9] usb 2-1: config 1 interface 1 has no altsetting 0 [ 125.169875][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.181137][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.204298][ T9] usb 2-1: Product: syz [ 125.213942][ T9] usb 2-1: Manufacturer: syz [ 125.230803][ T9] usb 2-1: SerialNumber: syz [ 125.249696][ T9] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 125.263200][ T5950] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 125.281862][ T5950] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 125.344319][ T6779] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 125.391757][ T5950] usb 1-1: USB disconnect, device number 17 [ 125.398146][ T6780] netlink: 40 bytes leftover after parsing attributes in process `syz.3.233'. [ 125.408788][ T6780] tipc: Invalid UDP bearer configuration [ 125.408819][ T6780] tipc: Enabling of bearer rejected, failed to enable media [ 125.433391][ T6780] netlink: 32 bytes leftover after parsing attributes in process `syz.3.233'. [ 125.521963][ T6758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.537292][ T6758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.760991][ T6785] bond1: entered promiscuous mode [ 126.231117][ T6805] netlink: 'syz.0.236': attribute type 27 has an invalid length. [ 126.379142][ T6805] bridge0: port 3(batadv0) entered disabled state [ 126.386035][ T6805] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.393700][ T6805] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.795585][ T44] usb 2-1: USB disconnect, device number 16 [ 126.812833][ T6811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.240'. [ 126.976017][ T6805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.026796][ T6805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.536361][ T6809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.567415][ T6809] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.596963][ T6809] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.760973][ T6817] sch_fq: defrate 0 ignored. [ 127.774001][ T6203] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.836934][ T6203] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.890878][ T6203] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.901624][ T6207] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.038916][ T6829] netlink: 60 bytes leftover after parsing attributes in process `syz.3.244'. [ 128.239593][ T1214] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 128.431618][ T1214] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 128.440374][ T1214] usb 5-1: config 0 has no interface number 0 [ 128.446511][ T1214] usb 5-1: too many endpoints for config 0 interface 1 altsetting 0: 253, using maximum allowed: 30 [ 128.450513][ T6849] loop2: detected capacity change from 0 to 7 [ 128.459258][ T1214] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 128.466277][ T6849] loop2: [ 128.477251][ T1214] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.478739][ T6849] loop2: partition table partially beyond EOD, truncated [ 128.496408][ T1214] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 128.511988][ T1214] usb 5-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 128.523636][ T1214] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.539876][ T5950] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 128.556646][ T1214] usb 5-1: config 0 descriptor?? [ 128.569642][ T24] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 128.569806][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 128.701963][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 128.719833][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.732460][ T5950] usb 2-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 128.742505][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.749589][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 128.750731][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 128.763270][ T5950] usb 2-1: config 0 descriptor?? [ 128.768799][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 128.784834][ T10] usb 3-1: config 0 has no interfaces? [ 128.787206][ T24] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 128.795532][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 128.809084][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.812374][ T24] usb 4-1: can't read configurations, error -71 [ 128.819055][ T10] usb 3-1: Product: syz [ 128.828664][ T10] usb 3-1: Manufacturer: syz [ 128.834598][ T10] usb 3-1: SerialNumber: syz [ 128.852779][ T10] usb 3-1: config 0 descriptor?? [ 128.896316][ T6851] netlink: 'syz.4.247': attribute type 27 has an invalid length. [ 128.983083][ T6841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.996599][ T6841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.113376][ T6846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.124707][ T6846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.134163][ T6856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.151763][ T6856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.217659][ T6853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.243394][ T6851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.251900][ T6853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.318998][ T6851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.581415][ T5950] kye 0003:0458:5005.0007: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 129.611994][ T5950] kye 0003:0458:5005.0007: hidraw0: USB HID v0.00 Device [HID 0458:5005] on usb-dummy_hcd.1-1/input0 [ 129.686291][ T5950] kye 0003:0458:5005.0007: tablet-enabling feature report not found [ 129.748888][ T5950] kye 0003:0458:5005.0007: tablet enabling failed [ 129.785213][ T6851] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 129.799173][ T5951] usb 3-1: USB disconnect, device number 16 [ 129.876465][ T6852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.891978][ T6852] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.921131][ T5950] usb 2-1: USB disconnect, device number 17 [ 129.929244][ T6852] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 129.998589][ T6862] netlink: 763 bytes leftover after parsing attributes in process `syz.0.254'. [ 130.004365][ T6865] fido_id[6865]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 130.015214][ T3593] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.023211][ T24] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 130.044296][ T3593] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.075281][ T3593] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.164926][ T3593] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.242001][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 130.300125][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.258'. [ 130.309994][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.258'. [ 130.313663][ T24] usb 4-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 130.444717][ T24] usb 4-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.496207][ T30] audit: type=1326 audit(1755503838.468:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.1.260" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe0b1f8ebe9 code=0x0 [ 130.524742][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 130.589394][ T24] usb 4-1: New USB device found, idVendor=0738, idProduct=1713, bcdDevice= 0.40 [ 130.611076][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.673519][ T6892] netlink: 'syz.1.262': attribute type 13 has an invalid length. [ 130.673819][ T6891] netlink: 'syz.1.262': attribute type 13 has an invalid length. [ 130.689658][ T24] usb 4-1: Product: syz [ 130.699777][ T24] usb 4-1: Manufacturer: syz [ 130.710443][ T24] usb 4-1: SerialNumber: syz [ 130.725755][ T6867] raw-gadget.6 gadget.3: fail, usb_ep_enable returned -22 [ 131.107620][ T6900] netlink: 24 bytes leftover after parsing attributes in process `syz.1.264'. [ 131.193646][ T6903] netlink: 60 bytes leftover after parsing attributes in process `syz.2.266'. [ 131.202800][ T24] usbhid 4-1:1.0: can't add hid device: -71 [ 131.209720][ T24] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 131.229589][ T5950] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 131.262389][ T24] usb 4-1: USB disconnect, device number 28 [ 131.402775][ T5950] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 131.411591][ T5950] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 131.455351][ T6906] netlink: 32 bytes leftover after parsing attributes in process `syz.2.266'. [ 131.469679][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 131.487262][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 131.508989][ T5950] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 131.524023][ T5950] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 131.533430][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.544227][ T5950] usb 1-1: config 0 descriptor?? [ 131.600392][ T6896] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 131.785968][ T6910] tipc: Started in network mode [ 131.792379][ T6910] tipc: Node identity fa5138661252, cluster identity 4711 [ 131.801806][ T6910] tipc: Enabled bearer , priority 0 [ 131.814225][ T5950] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xd [ 131.834462][ T5950] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 131.938655][ T6910] tipc: Disabling bearer [ 132.086437][ T5950] usb 1-1: USB disconnect, device number 18 [ 132.266081][ T1214] usbhid 5-1:0.1: can't add hid device: -71 [ 132.266178][ T1214] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 132.268498][ T1214] usb 5-1: USB disconnect, device number 14 [ 132.451760][ T3593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.451786][ T3593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.483513][ T6937] netlink: 20 bytes leftover after parsing attributes in process `syz.0.275'. [ 132.484523][ T6937] netlink: 16 bytes leftover after parsing attributes in process `syz.0.275'. [ 132.650942][ T6940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.942752][ T6954] program syz.4.278 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.965065][ T6954] ptrace attach of "./syz-executor exec"[5881] was attempted by ""[6954] [ 133.039613][ T5950] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 133.251689][ T5950] usb 3-1: device descriptor read/64, error -71 [ 133.339814][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 133.489509][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 133.496242][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.506893][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 133.518556][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 133.527824][ T5950] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 133.535784][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.544421][ T9] usb 5-1: Product: syz [ 133.550508][ T9] usb 5-1: Manufacturer: syz [ 133.555139][ T9] usb 5-1: SerialNumber: syz [ 133.669638][ T5950] usb 3-1: device descriptor read/64, error -71 [ 133.764849][ T9] usb 5-1: 0:2 : does not exist [ 133.781642][ T9] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 133.793908][ T5950] usb usb3-port1: attempt power cycle [ 133.812844][ T9] usb 5-1: USB disconnect, device number 15 [ 133.846027][ T6009] udevd[6009]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 134.159548][ T5950] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 134.180149][ T5950] usb 3-1: device descriptor read/8, error -71 [ 134.430436][ T5950] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 134.481357][ T5950] usb 3-1: device descriptor read/8, error -71 [ 134.600113][ T5950] usb usb3-port1: unable to enumerate USB device [ 134.809554][ T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 135.018068][ T6993] tipc: New replicast peer: 255.255.255.255 [ 135.024605][ T6993] tipc: Enabled bearer , priority 10 [ 135.173654][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.260782][ T24] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 135.282181][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.294186][ T24] usb 5-1: config 0 descriptor?? [ 135.305472][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 135.431047][ T6998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.292'. [ 135.772292][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 135.779782][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 135.787056][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 135.794384][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 135.801800][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 135.809604][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 135.870130][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 135.896618][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 135.910280][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 135.917659][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 135.940484][ T24] pwc: recv_control_msg error -32 req 02 val 2400 [ 135.950021][ T7001] fuse: Unknown parameter '' [ 135.955642][ T24] pwc: recv_control_msg error -32 req 02 val 2600 [ 135.969154][ T24] pwc: recv_control_msg error -32 req 02 val 2900 [ 136.011917][ T24] pwc: recv_control_msg error -32 req 02 val 2800 [ 136.069784][ T24] pwc: recv_control_msg error -32 req 04 val 1100 [ 136.127221][ T24] pwc: Registered as video103. [ 136.139730][ T1214] tipc: Node number set to 3892525158 [ 136.146859][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input12 [ 136.414714][ T24] usb 5-1: USB disconnect, device number 16 [ 136.450758][ T7012] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 136.549553][ T5950] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 136.760108][ T5950] usb 1-1: Using ep0 maxpacket: 8 [ 136.766655][ T5950] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 136.777795][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.787301][ T5950] usb 1-1: config 0 descriptor?? [ 137.426998][ T7022] netlink: 72 bytes leftover after parsing attributes in process `syz.1.296'. [ 137.528953][ T7030] random: crng reseeded on system resumption [ 137.569402][ T7009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.569804][ T7009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.403168][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.409743][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.691244][ T7039] tipc: Enabling of bearer rejected, failed to enable media [ 138.780237][ T5950] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 138.790353][ T5950] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading Medium Status register: ffffffe0 [ 138.994529][ T5950] ------------[ cut here ]------------ [ 139.003208][ T5950] UBSAN: shift-out-of-bounds in drivers/net/usb/asix_devices.c:679:27 [ 139.011982][ T5950] shift exponent 240 is too large for 64-bit type 'unsigned long' [ 139.020225][ T5950] CPU: 0 UID: 0 PID: 5950 Comm: kworker/0:6 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 139.020260][ T5950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 139.020277][ T5950] Workqueue: usb_hub_wq hub_event [ 139.020324][ T5950] Call Trace: [ 139.020332][ T5950] [ 139.020340][ T5950] dump_stack_lvl+0x189/0x250 [ 139.020372][ T5950] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.020399][ T5950] ? __pfx__printk+0x10/0x10 [ 139.020437][ T5950] ubsan_epilogue+0xa/0x40 [ 139.020470][ T5950] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 139.020520][ T5950] ax88772_bind+0xdcf/0xfa0 [ 139.020560][ T5950] ? __pfx_ax88772_bind+0x10/0x10 [ 139.020594][ T5950] ? __raw_spin_lock_init+0x45/0x100 [ 139.020621][ T5950] ? usbnet_probe+0x915/0x2870 [ 139.020647][ T5950] usbnet_probe+0xa96/0x2870 [ 139.020680][ T5950] ? __pfx_usbnet_probe+0x10/0x10 [ 139.020702][ T5950] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 139.020733][ T5950] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 139.020761][ T5950] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 139.020789][ T5950] ? usb_disable_lpm+0x77/0x3e0 [ 139.020816][ T5950] usb_probe_interface+0x668/0xc30 [ 139.020850][ T5950] ? __pfx_usb_probe_interface+0x10/0x10 [ 139.020880][ T5950] really_probe+0x26a/0x9e0 [ 139.020911][ T5950] __driver_probe_device+0x18c/0x2f0 [ 139.020937][ T5950] driver_probe_device+0x4f/0x430 [ 139.020964][ T5950] __device_attach_driver+0x2ce/0x530 [ 139.020993][ T5950] bus_for_each_drv+0x251/0x2e0 [ 139.021026][ T5950] ? __pfx___device_attach_driver+0x10/0x10 [ 139.021053][ T5950] ? __pfx_bus_for_each_drv+0x10/0x10 [ 139.021098][ T5950] __device_attach+0x2b8/0x400 [ 139.021125][ T5950] ? __pfx___device_attach+0x10/0x10 [ 139.021150][ T5950] ? do_raw_spin_unlock+0x122/0x240 [ 139.021180][ T5950] bus_probe_device+0x185/0x260 [ 139.021214][ T5950] device_add+0x7b6/0xb50 [ 139.021238][ T5950] usb_set_configuration+0x1a87/0x20e0 [ 139.021280][ T5950] usb_generic_driver_probe+0x8d/0x150 [ 139.021309][ T5950] usb_probe_device+0x1c1/0x390 [ 139.021341][ T5950] ? __pfx_usb_probe_device+0x10/0x10 [ 139.021370][ T5950] really_probe+0x26a/0x9e0 [ 139.021399][ T5950] __driver_probe_device+0x18c/0x2f0 [ 139.021426][ T5950] driver_probe_device+0x4f/0x430 [ 139.021454][ T5950] __device_attach_driver+0x2ce/0x530 [ 139.021482][ T5950] bus_for_each_drv+0x251/0x2e0 [ 139.021514][ T5950] ? __pfx___device_attach_driver+0x10/0x10 [ 139.021541][ T5950] ? __pfx_bus_for_each_drv+0x10/0x10 [ 139.021578][ T5950] __device_attach+0x2b8/0x400 [ 139.021604][ T5950] ? __pfx___device_attach+0x10/0x10 [ 139.021630][ T5950] ? do_raw_spin_unlock+0x122/0x240 [ 139.021659][ T5950] bus_probe_device+0x185/0x260 [ 139.021698][ T5950] device_add+0x7b6/0xb50 [ 139.021722][ T5950] usb_new_device+0xa39/0x16f0 [ 139.021756][ T5950] ? __pfx_usb_new_device+0x10/0x10 [ 139.021780][ T5950] ? rcu_is_watching+0x15/0xb0 [ 139.021805][ T5950] hub_event+0x2958/0x4a20 [ 139.021961][ T5950] ? __pfx_hub_event+0x10/0x10 [ 139.021990][ T5950] ? rcu_is_watching+0x15/0xb0 [ 139.022013][ T5950] ? lock_acquire+0x5f/0x360 [ 139.022057][ T5950] ? rcu_is_watching+0x15/0xb0 [ 139.022077][ T5950] ? process_scheduled_works+0x9ef/0x17b0 [ 139.022099][ T5950] ? process_scheduled_works+0x9ef/0x17b0 [ 139.022122][ T5950] process_scheduled_works+0xade/0x17b0 [ 139.022158][ T5950] ? __pfx_process_scheduled_works+0x10/0x10 [ 139.022188][ T5950] worker_thread+0x8a0/0xda0 [ 139.022214][ T5950] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 139.022247][ T5950] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 139.022276][ T5950] ? __kthread_parkme+0x7b/0x200 [ 139.022305][ T5950] kthread+0x70e/0x8a0 [ 139.022334][ T5950] ? __pfx_worker_thread+0x10/0x10 [ 139.022357][ T5950] ? __pfx_kthread+0x10/0x10 [ 139.022385][ T5950] ? rcu_is_watching+0x15/0xb0 [ 139.022407][ T5950] ? __pfx_kthread+0x10/0x10 [ 139.022434][ T5950] ret_from_fork+0x3f9/0x770 [ 139.022459][ T5950] ? __pfx_ret_from_fork+0x10/0x10 [ 139.022485][ T5950] ? __switch_to_asm+0x39/0x70 [ 139.022514][ T5950] ? __switch_to_asm+0x33/0x70 [ 139.022544][ T5950] ? __pfx_kthread+0x10/0x10 [ 139.022572][ T5950] ret_from_fork_asm+0x1a/0x30 [ 139.022611][ T5950] [ 139.193144][ T24] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 139.197109][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.447391][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.453389][ C0] hrtimer: interrupt took 423954978 ns [ 139.553610][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.757519][ T5950] ---[ end trace ]--- [ 139.761592][ T5950] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 139.768803][ T5950] CPU: 0 UID: 0 PID: 5950 Comm: kworker/0:6 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 139.780873][ T5950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 139.790942][ T5950] Workqueue: usb_hub_wq hub_event [ 139.795993][ T5950] Call Trace: [ 139.799279][ T5950] [ 139.802223][ T5950] dump_stack_lvl+0x99/0x250 [ 139.806837][ T5950] ? __asan_memcpy+0x40/0x70 [ 139.811466][ T5950] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.816812][ T5950] ? __pfx__printk+0x10/0x10 [ 139.821473][ T5950] vpanic+0x281/0x750 [ 139.825473][ T5950] ? __pfx_vpanic+0x10/0x10 [ 139.829993][ T5950] panic+0xb9/0xc0 [ 139.833727][ T5950] ? __pfx_panic+0x10/0x10 [ 139.838151][ T5950] ? __pfx__printk+0x10/0x10 [ 139.842758][ T5950] check_panic_on_warn+0x89/0xb0 [ 139.847722][ T5950] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 139.854170][ T5950] ax88772_bind+0xdcf/0xfa0 [ 139.858868][ T5950] ? __pfx_ax88772_bind+0x10/0x10 [ 139.863971][ T5950] ? __raw_spin_lock_init+0x45/0x100 [ 139.869299][ T5950] ? usbnet_probe+0x915/0x2870 [ 139.874093][ T5950] usbnet_probe+0xa96/0x2870 [ 139.878714][ T5950] ? __pfx_usbnet_probe+0x10/0x10 [ 139.884271][ T5950] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 139.890191][ T5950] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 139.896639][ T5950] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 139.902214][ T5950] ? usb_disable_lpm+0x77/0x3e0 [ 139.907182][ T5950] usb_probe_interface+0x668/0xc30 [ 139.912587][ T5950] ? __pfx_usb_probe_interface+0x10/0x10 [ 139.918422][ T5950] really_probe+0x26a/0x9e0 [ 139.922974][ T5950] __driver_probe_device+0x18c/0x2f0 [ 139.928275][ T5950] driver_probe_device+0x4f/0x430 [ 139.933571][ T5950] __device_attach_driver+0x2ce/0x530 [ 139.938972][ T5950] bus_for_each_drv+0x251/0x2e0 [ 139.943849][ T5950] ? __pfx___device_attach_driver+0x10/0x10 [ 139.949788][ T5950] ? __pfx_bus_for_each_drv+0x10/0x10 [ 139.955185][ T5950] __device_attach+0x2b8/0x400 [ 139.959970][ T5950] ? __pfx___device_attach+0x10/0x10 [ 139.965540][ T5950] ? do_raw_spin_unlock+0x122/0x240 [ 139.970765][ T5950] bus_probe_device+0x185/0x260 [ 139.975995][ T5950] device_add+0x7b6/0xb50 [ 139.980349][ T5950] usb_set_configuration+0x1a87/0x20e0 [ 139.985836][ T5950] usb_generic_driver_probe+0x8d/0x150 [ 139.991306][ T5950] usb_probe_device+0x1c1/0x390 [ 139.996353][ T5950] ? __pfx_usb_probe_device+0x10/0x10 [ 140.001744][ T5950] really_probe+0x26a/0x9e0 [ 140.006284][ T5950] __driver_probe_device+0x18c/0x2f0 [ 140.011718][ T5950] driver_probe_device+0x4f/0x430 [ 140.016795][ T5950] __device_attach_driver+0x2ce/0x530 [ 140.022186][ T5950] bus_for_each_drv+0x251/0x2e0 [ 140.027055][ T5950] ? __pfx___device_attach_driver+0x10/0x10 [ 140.032954][ T5950] ? __pfx_bus_for_each_drv+0x10/0x10 [ 140.038374][ T5950] __device_attach+0x2b8/0x400 [ 140.043148][ T5950] ? __pfx___device_attach+0x10/0x10 [ 140.048452][ T5950] ? do_raw_spin_unlock+0x122/0x240 [ 140.053682][ T5950] bus_probe_device+0x185/0x260 [ 140.058579][ T5950] device_add+0x7b6/0xb50 [ 140.062934][ T5950] usb_new_device+0xa39/0x16f0 [ 140.067710][ T5950] ? __pfx_usb_new_device+0x10/0x10 [ 140.072915][ T5950] ? rcu_is_watching+0x15/0xb0 [ 140.077749][ T5950] hub_event+0x2958/0x4a20 [ 140.082259][ T5950] ? __pfx_hub_event+0x10/0x10 [ 140.087038][ T5950] ? rcu_is_watching+0x15/0xb0 [ 140.091808][ T5950] ? lock_acquire+0x5f/0x360 [ 140.096429][ T5950] ? rcu_is_watching+0x15/0xb0 [ 140.101211][ T5950] ? process_scheduled_works+0x9ef/0x17b0 [ 140.107033][ T5950] ? process_scheduled_works+0x9ef/0x17b0 [ 140.112850][ T5950] process_scheduled_works+0xade/0x17b0 [ 140.118417][ T5950] ? __pfx_process_scheduled_works+0x10/0x10 [ 140.124422][ T5950] worker_thread+0x8a0/0xda0 [ 140.129037][ T5950] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 140.135387][ T5950] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 140.141317][ T5950] ? __kthread_parkme+0x7b/0x200 [ 140.146270][ T5950] kthread+0x70e/0x8a0 [ 140.150351][ T5950] ? __pfx_worker_thread+0x10/0x10 [ 140.155475][ T5950] ? __pfx_kthread+0x10/0x10 [ 140.160089][ T5950] ? rcu_is_watching+0x15/0xb0 [ 140.164888][ T5950] ? __pfx_kthread+0x10/0x10 [ 140.169517][ T5950] ret_from_fork+0x3f9/0x770 [ 140.174147][ T5950] ? __pfx_ret_from_fork+0x10/0x10 [ 140.179268][ T5950] ? __switch_to_asm+0x39/0x70 [ 140.184049][ T5950] ? __switch_to_asm+0x33/0x70 [ 140.188822][ T5950] ? __pfx_kthread+0x10/0x10 [ 140.193435][ T5950] ret_from_fork_asm+0x1a/0x30 [ 140.198217][ T5950] [ 140.201755][ T5950] Kernel Offset: disabled [ 140.206283][ T5950] Rebooting in 86400 seconds..