last executing test programs: 3m56.370204177s ago: executing program 1 (id=139): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0xf7e) read$dsp(r5, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784c", 0x1f) read$dsp(r1, &(0x7f0000000200)=""/112, 0x70) r6 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x80001) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc25c4111, &(0x7f0000000080)={0x0, [[0x7, 0xe, 0x81, 0x1, 0x400, 0xffffffff, 0x7045, 0x2], [0x200, 0x6, 0x19, 0x5d, 0x80000000, 0x6, 0x7abd, 0x4], [0x9, 0x9, 0x5, 0xfffffff7, 0x1, 0x7, 0x0, 0xc]], '\x00', [{0x1, 0xa, 0x0, 0x1, 0x0, 0x1}, {0xffff, 0x5, 0x0, 0x1, 0x1}, {0x8, 0x4, 0x0, 0x1, 0x0, 0x1}, {0x2, 0xd432, 0x0, 0x1}, {0x9, 0x7ff, 0x1, 0x1, 0x1}, {0x7, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x103, 0x3, 0x1}, {0x80000000, 0x3, 0x1, 0x1, 0x1}, {0x4, 0x9, 0x0, 0x0, 0x1}, {0x3, 0xa5c, 0x1, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1, 0x1}, {0x800, 0x9000, 0x0, 0x1}], '\x00', 0x7}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) userfaultfd(0x1) setsockopt$inet_buf(r0, 0x0, 0x10, 0x0, 0x0) 3m55.35379382s ago: executing program 1 (id=141): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030002ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3m54.743938066s ago: executing program 1 (id=143): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0xa}], 0x4000000000000f6, 0x10162, 0x0) readv(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0), 0x0) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @remote}], 0x10) sendto$inet6(r3, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 3m53.870657067s ago: executing program 1 (id=145): r0 = socket$inet6(0xa, 0xa, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@rand_addr=' \x01\x00', 0x200800, 0x2, 0x2, 0x1}, 0x20) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="008000", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c0080fffc7ccbbbd01139f927db85f5af04aa4b853f8f40047b600b12d9ca91c1199bf0b97a6b14132ef002436f2bd32c7896a539f8d6df39ea7803f40455f5019c006df6903c0d98df6a1918ab6b2ffa736c0d5dc6ec"], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x24000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000180)=0xe) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@empty, @in6=@remote, 0x0, 0x33, 0x0, 0x0, 0xa, 0x60, 0x30}, {0x0, 0x7f, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x200, 0xfeffffffffffffff}, {0x3, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x23}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60, 0x0, 0x0, 0xee01}, {0x0, 0x1000000000000401, 0xfffffffffffffffc, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x77, 0x3, 0x0, 0x100000000007fff}, 0xffffffff, 0x6e6bb1, 0x1, 0x0, 0x3}, [@mark={0xc, 0x15, {0x35075b, 0x7}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendto$inet6(r5, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r11) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3m53.497080531s ago: executing program 1 (id=147): sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x40, 0x0, 0x909, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_HEADER={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8880) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c0005"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 3m53.223225553s ago: executing program 1 (id=148): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x28, r1, 0x1, 0x0, 0x5000000, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'hsr0\x00'}}]}]}, 0x28}}, 0x0) 3m52.845363271s ago: executing program 32 (id=148): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x28, r1, 0x1, 0x0, 0x5000000, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'hsr0\x00'}}]}]}, 0x28}}, 0x0) 3m22.940114018s ago: executing program 4 (id=255): r0 = socket$pppl2tp(0x18, 0x1, 0x1) dup(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, &(0x7f0000000480)={{0x0, 0x0, 0x80, {0xdddc1002, 0x3000}}, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffe700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000069fe00", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f56900000000000000000000000000000000000000000000000000000000f3ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a8c285400"}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0x18c, 0x203, 0xec, 0x19030000, 0x1d8, 0x2e0, 0x2e0, 0x1d8, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@empty, @empty, [0xff000000, 0xff000000, 0x0, 0xffffffff], [0xffffffff, 0xff, 0xff000000, 0xffffff], 'pim6reg1\x00', 'pim6reg0\x00', {0xff}, {}, 0x2c, 0xf4}, 0x300, 0xc8, 0xec, 0x0, {0x1000000}, [@inet=@rpfilter={{0x24}, {0x6}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xec}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2f, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2fc) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000000340)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000000400)='V', 0x1}], 0x1}}], 0x2, 0x4000000) openat$kvm(0xffffff9c, &(0x7f0000000600), 0x600, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1f, 0x12, r7, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000440)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6}}, &(0x7f00000003c0)=0xe4) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000380)=@loop={'/dev/loop', 0x0}, r8, &(0x7f0000000580)={0x2ce, 0x0, 0x1, 0x0, 0xf4e3, 0x7, 0x2, 0x9, 0x10}) r9 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r9, &(0x7f0000000240)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000400)="7705de90e0e6c18e8d86b787014bfe779ec66e7cd35a52ddd3c62692", 0x1c}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e27, @empty}, 0x10, &(0x7f0000001580)=[{0x0, 0x58}, {&(0x7f0000000580)="c7bace4ebe91b42a7bf8f86453e0ec420e051dc8", 0x14}], 0x54}}], 0x2, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRESOCT=r6], 0x50}, 0x1, 0x0, 0x0, 0x4050}, 0x20000000) close(r1) 3m22.703634417s ago: executing program 4 (id=257): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000008, 0x810, 0xffffffffffffffff, 0x0) (async) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f00000fe000/0xd000)=nil, 0xd000, 0x1000005, 0xd2952, 0xffffffffffffffff, 0xfffff000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3}, 0x94) (async) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) (async) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x5, 0x200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, 0x0, 0x0) (async) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x2}, 0xc) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) (async) r5 = eventfd(0x80000001) inotify_add_watch(0xffffffffffffffff, 0x0, 0x40000000) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) (async) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f00000004c0)={0x24, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f00000001c0)={0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="406c0000b82e"], 0x0, 0x0}) (async) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x0, r5}) 3m22.046390862s ago: executing program 4 (id=261): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x8001, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_setup(0x9, &(0x7f0000000340)) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x4100, 0x600, 0x10000) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) 3m21.419849123s ago: executing program 4 (id=262): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000480)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) (async) openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x182, 0x0) (async) r5 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x8c63, 0x0, 0x0, 0xff}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) 3m20.471911311s ago: executing program 4 (id=268): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) syz_open_dev$usbmon(&(0x7f0000000040), 0x80000001, 0x82002) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) read$FUSE(r2, 0x0, 0x0) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) r3 = syz_open_dev$video4linux(&(0x7f000000d280), 0x3, 0x800) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r3, 0xc0305615, &(0x7f000000d2c0)={0x0, {0x5, 0xe6b6}}) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002c00)=""/88, 0x58}], 0x1}, 0x2}], 0x2, 0x40000102, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}, 0x1, 0x0, 0x0, 0x54800}, 0x20000000) 3m19.983230768s ago: executing program 4 (id=274): syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000380)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0xfc, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xff58}}}}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="2e010000ed454210cd0c99009bf4000203010902120001000000000904"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00+\x00\x00\x00\x00'], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x800}, [@map_fd, @map_fd={0x18, 0x0, 0x1, 0x0, r4}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0xea, &(0x7f0000000340)=""/234}, 0x17) r5 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) r6 = openat$cgroup_procs(r2, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r6, &(0x7f0000000180)=r7, 0x12) write$cgroup_freezer_state(r5, &(0x7f0000000080)='THAWED\x00', 0x7) 3m19.401696117s ago: executing program 33 (id=274): syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000380)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0xfc, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xff58}}}}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="2e010000ed454210cd0c99009bf4000203010902120001000000000904"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00+\x00\x00\x00\x00'], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x800}, [@map_fd, @map_fd={0x18, 0x0, 0x1, 0x0, r4}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0xea, &(0x7f0000000340)=""/234}, 0x17) r5 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) r6 = openat$cgroup_procs(r2, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r6, &(0x7f0000000180)=r7, 0x12) write$cgroup_freezer_state(r5, &(0x7f0000000080)='THAWED\x00', 0x7) 12.59983897s ago: executing program 2 (id=1013): r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000a40)={0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="4de507c2c8d944380e0b6fd5926848768e476bf1ccc8542f6a9e6da3a45c9a1b0eeb4b08d2fabdcf40f4a406307700bc8cffd09ecc303c1666cb25ad00000000"], 0x0, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x3e}, 0x0, 0x0}) chdir(&(0x7f0000000340)='./cgroup\x00') mkdir(&(0x7f00000002c0)='./file2\x00', 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') 9.95050774s ago: executing program 2 (id=1023): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x2102, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000300)={0xb, @sdr={0x34565559, 0x2}}) (async, rerun: 32) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) (async) poll(&(0x7f0000000100), 0x0, 0x8) (async, rerun: 64) r5 = socket(0x40000000015, 0x5, 0x0) (rerun: 64) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto(r6, &(0x7f0000000100)="51bf7336f6cdf0ca6c13c866d6bc7b55f2d501845841bb2c078a988b7eb38f11a326083cf884920013fbae4a3a5d9c8ea7ea86669fb6212da0b5c82136d9519daeb17c9f96ad78cccef50ab4eabcafbc1a18735359cd7329816984d180735476f901401079349dfbe2e614f51a07c00544d90a594972ba60e1b497f88dcdc1e45dd28c0678d803638e7bd70a8638136e52c5e932c4111d3c917fb22583198b00707e3a2e001260cbc206759c245451686164eff751e4df8995", 0xb9, 0x20000000, &(0x7f0000000280)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80) (async) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async, rerun: 64) sendto$inet(r0, 0x0, 0x0, 0x4c000, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYRES64=r0, @ANYRES16=r6], 0x1a000}, 0x1, 0x0, 0x0, 0x4000011}, 0x48d0) (async, rerun: 32) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) (async, rerun: 32) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x80000000, 0x0, 0x0, 0xb71}, 0x10) (async) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001a00df1b1b5b0000000000001c140000fd0200000000ba71ac68650e74150157aa1da8cf81280000e33464ec0d526b05a9c63acfa508a4d0c5623cb335b37428669de650fef811a68cab59feb62228b41eecadd56933d604945f0529a737069218f059c63d0915d5d1a7c2"], 0x1c}, 0x1, 0x0, 0x0, 0x4815}, 0xc080) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_REGS(r8, 0x4090ae82, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) (async) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{&(0x7f0000000140)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="100000000000000007000000940400005e3649c6836f24b1866fcc266edb01debd1a9c379aeb36b746979904262608ef09f50be69cfa411ad57037082181c1ad37b05a9fe778252f2dc56e4b17ba7af22e6a"], 0x10}}], 0x1, 0x40008004) 9.115446449s ago: executing program 2 (id=1030): stat64(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) unshare(0x6a040000) r1 = socket(0x1e, 0x80000, 0xfffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001440)=[{{&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000440)="1b711519f8ec552013399cd2feeeabe259690b70ee160174da848f0ffddb42b68324f0af258d57815c8a084d1a196cdd9870fecdd832e31c846062db224fd46d543952070c22722b9d76e55fd8dad996d3ed758cdeb4f9a91166eabb87c6aa499332c6fee807696fe52d4b19a3b413345e88509499d03e4aabc97c8e62a5a278d44bb24fc6fefe7d3f7eded71f869aebda937200bd10043fc603fe7bfdad2dc96c5bc24b15b1bce37965b1b06a9af9dfc5dcc5eaf5c1e156bf74ebc8031f6106e776eaad437d8e823af71599a2eced627c490cacd5dbccbd9840a4cc6d11103e4d9aade7734feddb", 0xe8}, {&(0x7f0000000300)="900353d3e994ff8899a1a0098bdf668de7cdc173c722a6049593abae231496ad10f5f1887c9585", 0x27}, {&(0x7f0000000340)="3706c37f197e2a95a4227211ea2f2871", 0x10}, {&(0x7f0000000540)="cd7cc537858628d4f9094331aedd48a3f64deacd830bc402b16027c1ce4f9f1ca522c26a9901b674a28cd8637d671ba022799907ac1b433b294f0a49f3af45b13fec08b1e0214ab3487a8736c57bce85b87f49bd052e8ce206c270ff0c1dbc3f555fb6a5a7146ebde654a6c08477d5b742c6d75b03d10a3d758c0f852d6cb445823a31155f913246e608784be507baad81b80a85d2493ae3a297b930a3f789ed52aba49cadfd78d1cc05e4cac5a4b27b84105c97680f149ee0a76d767f661d3336c0b3ee93671c2def51b5660cdd03cf3dc728ebb12c851829825e092fe083449d6f89a9a44f3e227cd509", 0xeb}], 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="10000000010000ec00000000", @ANYRES32=r3], 0x10, 0x20000800}}, {{&(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000740)="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", 0xfd}], 0x1, &(0x7f0000000880)=[@cred={{0x18, 0x1, 0x2, {0x0, 0xee01, 0xee01}}}], 0x18, 0x44014}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000008200)="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", 0x1000}], 0x1, &(0x7f0000000c80)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r0, r1, r2, r2, r2, r1, r0, r2, r3]}}, @rights={{0x20, 0x1, 0x1, [r3, r0, r2, r3, r1]}}], 0x84, 0x4040000}}, {{&(0x7f0000000d40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000dc0)="376f6665ae43d8aaff3a8e81f0874bab2338c5236b46ee60cec20f9633da50014cb51b0ab13abf4aa737f0d8df", 0x2d}, {&(0x7f0000000e00)="415f176aea0752704232b1d3aeb20cd418ef8b1ec87999c3484011d8e9b13fcdaca7354f84fdef3cc91d2ef9", 0x2c}], 0x2, &(0x7f0000000f00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1]}}, @rights={{0x10, 0x1, 0x1, [r0]}}, @rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r2, r1, r1, r2, r1, r1]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}], 0xc8, 0x50}}, {{&(0x7f0000001000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001280)=[{&(0x7f0000001080)="0a5ff44fa3f586a3b65d418289761820c29d4cc41be2c5579c6a424cd74a7a04de4b97e439e03411d59202ddc4e6c3c48f526f39985051b0aeea8d04a6913622944742581cee34280fd549eeab03dfcd7103a65ccc367033393dc06b0bd797f945cb408f3bea70380d19b7ed9a5aa01e06c533fc539de9aa4c7762bbe107791277dec679b13b508b22de14876bd999deb40d5d29e85c2685e5a06103f63de113ce01797c32d82715661eb7db7052fbdd68b509", 0xb3}, {&(0x7f0000001140)="bb78ede1c468e7cd5c561af0115db8820aba724918d2e6eff6ad07c07700704d8b48a5d249df5ae0e1d5bcdd9b477b558d6eaef0ae44e9dcff7c225da58468a6b97039360534", 0x46}, {&(0x7f00000011c0)="2696", 0x2}, {&(0x7f0000001200)="5cee61c8d00ad4ecd745a5955cc7b417270075b834f5cd8b2517466fb8301b5ff9c6be27c8539246725f64c750062cd946bdf172fe458b0d2eb6a57641afdcf75ccc1cead4f76a72a63beeb2ec7ac9eacd615d04fabaebf44f114dddd2b7eba24e63c3a254c39a2e7b7490f08f8e861d08f801e32aaa", 0x76}], 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="140000000100000001000000", @ANYRES32, @ANYBLOB="18fa8d28ffbd2015e3b38e772d79b17900", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c0000000100", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xa8, 0x24008054}}], 0x5, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') close(0x3) write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, r5, {0x7, 0x2b, 0x8, 0x60010044, 0xffed, 0x7, 0x7, 0x2, 0x0, 0x0, 0x20, 0x6}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000006200)="f8a56c326e631dc9fd511eee39d17cf0f94bee12efa2efeba393b5c09fc29b3f93cf989a0fd57e0faeef1e2c965b690bca1a89183f13bc91ed4275dc274036009b6ac487f2af77364612f265c6a29156b07d6a4bec190c53777b9de7c8a2bb7ed0f71e327ac76cf6b4dd8e9d75a7bdbb6656ab4b1cf7e471a4b551ebf1095791da4083a6ad230d338e3327b64481b10d2649c15afaa5ddadcc796b968edae234d38239256be2b50864817a1dd12b1fd47200316094dfd1adf4dd046cfa97f182a22ff5df469b806b95ccf09a12b8aae9db67e1adb558e4e40e2026438f9a8d384148f5cf23a54999d4a7f51408dea954a14668210f29b95bd460875d3891302ca04b8a57a59236a23428b3738f1f215ab28c26141ef86ad9bea372a2c47d6ee5082a88dd33e580601f79c6abbcd7a63cdae8565cc9c5150c96ffd9d6dac576736b38346041ca0043fa4ff3f1a0902ffa6051df3cc58998fd52e1e42238fe79841d0f9ceb37744167a69b9e930e19088c80dec67650cb5bf4e8f339abbf168f360b531fec4afa0ffe24531745a5f41f09ce81d608bbd4ba8eb6fab682d612d262fcc2ebc308d357c09af5afb622325b5c3bb8fbc74135f0b78b24f3fa938e4e84b4c8626093369994973633f362dd026f41986992722fb5519217b608544e4cc3594850d2cc287e9129fd48165fde1cbeb5e3aad9055a441fc7aec24853b4a9849554452cf3e99c47098f2c88e6357da4e2d39389059cb0eb8aaeea21e08f41ef85e6180987969cf69c3c941fb1479efa3ae7fbf6a1666b15fe483ad8d81b4274c3a0d6640fd2d11321aeb05c86b749e98d85b2813ae466f3d7f44efc2086e5279fcd844da0e253954e71d01ef3b5ee73cf0c228c8d2760e5fa5c5b3d56aa589c5b1979d64ccfda09e30720cf0729215a51946b5f00078cfd409a2f3e85dcf5bb749309c9b8320b01a1a8607d25676883e0670ed7dc1427cf3c37dc7859ddb12c5359ea758ead2ca49419c168a15149b5da5f137f5777a83d49e82225fcba6fddb0c43e16b67f634385b9cdfa8a055c730d1ba34b77aad64a0b9494d7f14213f041ef0816bbba63a8a042cc937372891c85c7b5d90bc59691240efb2720d7b820d4d8b2da25860846b87a48fdd98b781d566693ce616b7baa17c37f24b93e7fe04230b71f9bea0040bdf35d42b68170e3bb2cc2e68ec92da674a80be9edb7e4ea3417dc571470879b1c8a67de1c41e198b3c6e1a2460abb1139c114949b629bf79d58e955710e877f5ec1071815fce63284b276429b62db7108bdddfa957d9c8d9385f4ad2a004a864c348bd0ceb5d6550c53cfce5350305ee285cb997b9fec86927c52464c1e7ccd6adacbeb916169320b19d03a40e9a21498cec4817f31885408fa4c5e7a6676cd91602dc71a1bc43d5e86cdfaeb710e193d3b3ca40c5d675936f8deab1ecf6b703fbb4bb60a4d9e4ea83cb64a4cac72eecd933c5f21c2f73ee4e7274910a4592dc758015e042247fab83d6b2409dad79b5e6e839d4b264fd266a73860f7dffda4a75fdadf03d5fd35c4ec09bd79e00ac8ee7f3cb0f7600505380058b5cf2a103735a130f21f6a5cc7bdc8a1e2f4c55b124907ac486e5d31667ecccf6939e201584dcde0c5dc3a5dd5de984e8abcdd2485c79999df335771aad35b1685146d76fc20b81964b2de662a1245072e9290f4227b9b31ac57b4dc752391a170b0a6e67fcfb3a3bf4e6912bc93b409e06dac037729c5182196eafdc54c84ef1c091bf2861cb89dcbaaa08cd9e874594c650664b767c09eb3a30fd638d06850852df772afc29eb8620c75e048c044d0bbc0469ea7a81c33a494bc79f2a793b144f8785107088ffcddb16b78d19ef7677fc1b9e2a216e97dfe1973fff7bef75421a46d1d5d542c680ea2a8995cee09f2b00bcd2a09393c37cb2216c53e24cd03c577dc89ab0aba13b023807c8bcdeeda647b66bb354631c851c9d78b319f6fa2c668fd0b148d920485d4e77b87cc129a31d5b58c181ccdf29a045c1b9f0596b7ea75bd1de17924dc5061a43a2cd69541a54f4213eaa52ba2061c96c89b42ee9d1b9e192c11ace3794ded384c903c0533e77b6cb72041e3473f21e961af157c0a7beef52b623831de2d1d7c1d8277c2c68b7fe58cfb43f9b23249472d1f5edd22834db08db0ebf3916d697965e38ba036a3d65d5555358e373401f9fb73c5138b1cd93d1308817308c506feee840b78cef22e9b8de9d5cd107b0f39bf81cbea55e1e63786730344b1981addb15e7e8cf13f93b3865b9891d0756b0a01d055ccb51180763d6ac585f24118c0646d7ada184f71e9cb563f471a34721abf6072f437eb09d594838d4890cd7311d1436f0a94aca040986982102f50ac23bae12e05739111d35a3478f6adf56f0192df8c0f5331ca7f860b61b5d5d3b066aa722d2f4b11d0607a488cd51ec171785e8663e3d191e0fa2b7518582ce8ab1f9ecb5d0c6e6dc97cc505ed22a924797ebf40486407c758127af2fbd21012848f26f0dd8e48dbf8f5e1acb35d5e6411b0724065660bb41442d2084c1c9fe82246ef88742d11e749bddd2508d94d869e13b58e27cef3f9c9ddb43dce9a949eaf04c33a09fb94d80d2121a9a27399bb1c9b12a8f52537bae74aeeee34a2f854a7f11682c6ce111e37066249f951f3dcea4c52c214258876571e1de687f82a86fd92b30c012b1f10c8c2f0d3e63b25cba0eaeb5d57d973f8a4eb78ab6d0b46a9407208903ac32c3919be9ded95eb1fd2f84680a8eb21b57e5e3cdc9370afc1cf0b343fb6ac8fd4cb0e542a90c67465f8542cf277600794c6788c95c07a5426e798fdaafef506aa398fec0eb8081dde00cf26a66addf73d43225694e1d2e0bcad80941ec5d6004e7c8475f3f417d72271b6bebcfd851f33971e0be086d855647bfbda4bb42f0282aacd40537fecc6698d206ed72b8da8148c5401dd1e0950186e70ffc3cb0b324ae1eef43fec6eadc7b21bcc863bfdd08714bd9a1c64a355a6e2024abb718518a9846b75fbd9e1c51061ce0cd4a223fc71e87c8c5c97d73185f5d5e6bf17d5a04261b36b279f5990be3085ec17be84cf1e4eab55acc6a0f6b734055f6cb747adbb5a2f2a5e7bf01ea36187f2d0861c2b03c0eca01a367f66608adcfa16d675a03236f49ca6a11963f1da9070a2b991c4df45b5d9ab69d8e1a9d812138d646c97f29d9c0d0f23090a219af96a4019098ab34a7a275691c9386d8a248907d57050894f167d8a0cd880d52bae1274abd42a3219fc0a8155a9ecaad2d86031ea2dd13104f898546c5cf616d5f45a60af97009462a4f8b66bd718ae15acbe393438fc16dd081906cb41b27592ed2f3f0b2f12f9a2f469e73abf7fbf4b4242bc64c945ab7f099f47d0c102b9b792748b20d791ccbec63d7d47f581ae32a7be9549cf34e4bba659b2657024b724088b75e7e6c8990b3e67a8f63aee2e6d35482720ba19a72b6fccff4e3939b2d4d0170861dd7f68a3a41e18931de8734b529e7597552e4a3ac64fea148872424bd72fbc2bfcfd17895412822d9a44eaef6c437ca4e5b1d5a708a5ad91a5fdac49c3fe70e43ee090968814b87d2e50b4620c01fb7bdd36c4cd091715ec7ce80a66d0a532f3f626cee78bf311fbbc994fe160eec9203ba8f6406d269b48c90fe5ffffcad791f1c198a9908d59cfc183deafd29e5956b5413a234fb3b0bf89b6197e3b5329172b753f39339dfbd9acfd60f5270cf5160c7e8f7e18e85eff11e1f0760afe404283fdddca8be9252025257db592de29ba235a3b99fe1abc6a0d5f0fcea17ee923f1e3c138bc8478bbb589932823cb56801930aa88007d5417a301a04a3abb8324f0412d65c68b31a3a3df1cb51f8b898d798603d3189ff7fa582e4a415726409894c717c6c722e7c1450e671832964692cb3e5fcaf57cb2dcbd58756fdb8302017303ff81fdb46c4d885d31b2a92fb6b892fa3abfc1e78fa99bd1b13c55dd8817a7e1f6b06d234e9452dd73e761e77ba794285cc28431942a5ead73e05103a85be51aeeab191990732973e8f7138c2f4429e45e34b6a0b063d9e21dd71a13b862e0698cb44ba6457af7f7403e0743289967b4c456b6bea9d35981290f089bb7c9403e988b899a3d07ecbcb4c9d63ce86d14b401d563e05682173cfb710ff28dc1bab8bce092b5859483bc74bc8ddab3221f08c1c952c350b96e2b1b815862d7869313d39ef2e7b81396634de38cf71f4d699cc136040e5bf3a65d97ae29aaac611e4644ca1096e6ed7c0660f2ffed700fcc7882bd20798758e6fd3270a4a77d2c5a654a9e329d72eccaecc5aab703a3bc1a1b2f6e4dfc03a5873a3202c9b1919337fa9ddeddda7aad910e1c03daca74dd46f11cbc005737d60795294a161e1277a4abb2b0d5075f2e6e489cdf23cda78d0cbbc1f751c7aa3671d6bdabf683716e24b97be6486f1ddfb38e452ad9158e9698a53696cb6092c162015d11e33a361fbf369c5049c7b9656da96289fdd1bcf372367f06b224e20717d1bcb394aecdda2eac5e9162bcaf1705f6ecce1068494302f4dc0c9442740f4a9c3ab00fb6f2df975e41f5674e9cfcb6ce21428e4d79e4042291ec8650e6caf587d958e1cc3aa34a47674d202a2f81192312298d5365d0bb5adf43e4cd00f44c8bd50171e91062f28eb13f4298343de17a25553bfb28965d04ee4a1c87b416ed6b3600663b2794fe4781f6fa7fa0a785a4ef528e533f0b193bceb57ed5d5d3dbdc50742a1a6209a55eb7e3dfe7197ce46fae5be05cb0ddb60476a72d87e41d87e3b7786326cf1b910b3cbeacbd143294a28866dbac3c03685e793cced818b9b064ca9a08612d35778f56a3b919f5e59fd5e8bff85fe1cb481cf92181def21713e189b38da52ca20d60e2991f42980c7affc9cf3fc4f2f7be8de11532131f89fa23ce06e2c8cb2aac8fa927b2d9bc6b068bdb42f4385059945cb4f7b31022f67ddfdd29de4616ba229cae1a86c458d287a950b094ca3a4e574b1cca2e77ac46be1495221c1a142089783a71f86a6183b0c14762dc240b2f6ab45804029252a268fdfb7db81381bcaa30a3e032d49b4a7a3b4ec3f785899131c07e8505567246051c5319fd3bb45d515e05de4b64c251d93cce4f619a292f81271cd85d663fff7a16df52035d890a4300a2a945a074af094d8e6f7b06e3e937c17a8abbaf629c6cc6a552186c3f74fe053d57174886aac8cd67a4647c3f7327944b56fbf0f0fc7bc91fffdd0bd68676facdce29e10c605fafc1ad813533395dcf573360c9790ae337abbf53b13217b03a742a8450f2d2173f4da71b705f64cfe2257588459b1f6d649dbf7c2b57109031adfebf6c768f9fe069dbfb9a3988f0a1a2603f69cb6fa4435de55e61a568fbb5dd7f87de8eb23daae3a58b665d17156585ceb46d79ac20ea725719ce03a38daba9bf529e8f0971894089ca31f785df3b1c2a30199e91d15393308f3129d3d8980e9faf34d78c691846e06c620b70b831a1eaac4b590fddaf3d403871fc1cbd33675e7192a4207a9f6c1b4d2bf4e60f314bbe30fab6621a404df4aba39be231b8b774095c57e8405c1833a6577859afccbabb2cec1b6187184291bec786e4d2df772b3d146dd46b2924005b8de98d8aeda2fa560dfe9444162824d35051c544998e03f074fb0dad6b9e866b8fb49a762a7742029d09a337e1d9560949a6d6f32585df8e7d2b3af55623961e5df69f2c89522fdcb18489712994f780283c47e9d23bc1a3d876466f6d129da9515964f6dccb0f93a66788d50bb0c66e569009a6be8d37a871d97f37fc2c668f6928970042a35ccf75950de94eb31ecfe1eb1a228d56a3ee88ec263a220427fbc980801ff5633c165c7a95a1ff3a63fa808294e8f2a299540dcf09d12511196444a066d0153769f1c3340d1e761d242ecfe89e16b3117e92cc44319d690444793435cda2b03ebcca7ca25c059375156e5ab5c9b7b5ab0620ef3ef59d5668a32be8f6080ceeb7d5917d14e8ea4a7c285ee4982c8e2c96e89acabc08e1d286a32bb73a8986bf234ab3531168d352beb6f3ab04b2a0b3818e8a8948d2719e863ed248bdcd6b3e7b81d07f79a604155500a1f5e46d9af9587b10e912e43932d7162cb461991640069b8a1ce2597e1a2c664edb690a9e6a07506085797fc723b2cc36cdba5feccc33157d439146e4d4bba891e679b8c8ad4162c9450434ed5229afb90969dcbcc5ed960cbaf8906998076289a0327b36fc74ea1aa40eb73f84a4c6c9589797fa6dc15707cebaf0f4437d2ae868e72e127ad48a0880cca6975effe8562555c7da33dd4297315d1685319a9376a3070d65b04fedf0a2080c744b74e2787aca6dfb599f575279fe1ca4db96a0152805b33b734c2867369d8e885665ca5453cba75ed9eac7e2512cd7492ec63147c6996b413e342da60b3b52c4ec85640e6b05b47e5b6eae7ba5eacfeab32f4405592d8fade269b9953d53e5d02915b18e8a826e5a3df3ae890f7d56fb6156ab667d79a633a544f61086298fc51ca198f60276df3415ac0aed6929b060a179bc15dda4ad8571abc292a87e869d076ada068786a6421bdc1d134ecf765e8249aad7f55052aff787916f830067fe7c35b0b4e2052958010c0791822de3c3f04a131c5a623e5587a569c9e04ef1ec20a90c941000e771b5d6a4ff9d8db5f44a7dcfc94240775531d6ccca835798398958955df6232703c8ed65496b38a90bafaf6e62fa0fb3609df3f4652183cf42b6f5fbe5b68fd6c973dd3deb9c43bc04a57b94993cf2e15b70577d942782ca414d7340657c933b1b7ffbffa9486740e53902f4bfc435bc6929618f9db99b882552575b2dfb61397d64b7fb36aa263d2f4c51739626b7119bf1258e7945175e2981058162a106006656eff84a21eefde283d39444fab51692b5a43793363b9a4fe6df4c05d3ab0fec00f27b410c4f829bf3080ccfeaf4209f9a97ec07263208a83598765f398f6793b69212ad52dc7e822ae2838c1deda3935f516c8d0a01f50775bd81e0d7b94e0b889c23ac5a2732c6a7c93af30ec9c994b318a0ea04d27a081efa36d9321ffc3d43c8e386c314c13040ece23690725a2477b3080a5823772eb07579c7fa92092021f5fac21f127712bfe1dd63cce5a1509efde5beb842da1a048dd1baee03cc1538b2efaef13d07fbdbe1e9e36d8af9ec6b6deca1b255dc8c5a1b7a6e8a3230150981b3089cd64064bcf36d8433af9cadca8c1f32d438ae949516a5c661ce15ea85b807e0a51d618defb24c48fb0c483e9a8496038573b2ea67e8e20049ae347201631fdd7e06264e7f2be5a5326258f256ba88b994f11fabb0a5969652594f5d934920fb847c2d69ffe0fef4d9e0c20dd8aca298d7e2a29b23c3d98602fc21b940693fd6b6bb61968132d35f84853ec0b64b2fcc2ae0c4393182cfc279b40ce470d02ceeb97a30fc52c9d12c2985cff3c4d43766862a123d66f1a0c53bbaca5c317f448a383be66879c392d32a39e790c68bbeda1011fe97bccc75ee64b457572742fd834b6e372598d45714fa6658feeb057c73068a769154713fe007948dc2dad0b757d95c608c3bc87e757d3d92ce08fde6d58b6c18f659b7d923130a790f8a0878bb75903d530f2aafe1b843298542024c2f636f5eae003017c8dc3728c839992dde6bc659ecec5ba7a63506185ed39001d978072c79a5db59e1066ce0bcaa52f032dfd2216bfc243bbc4e64f4408322c26513e3a6ae6e8142a0fbda4619fcd1f6c487d4c4266fb808d33b198fd75d78fc7512510b4876cd37a60b94713fb3328c3c1bad7bb8423d52bab79a54a77c5dd75221c1236695c9290bbc91198585d681894305ad3d20e97ebeb2df4e2aae9e0c4f8b2d435c26fba4698d7844702de937180142d7a661f6c084b82d490a70c82c0156c677551fcead8a33f6a39cc6cf8b4087c7bab77d36a8d05262b80475e2db0f7b518a1101b5907907865eb4c303c006e7037ed8d7371ba509b55b170d70c631fd50ab41e1e1e49ee58558623732b13e6c6b6a3990ea148453d6239336253be0334752b30867ca32d8651c21df87999dafb86be86d125f8c90a319aa49c984c56b8d66b782a2eb9c8a634e79f98b02688375709560bbc93dac4418e09e93d47c373abe2c0e51b851826f8b913b7c557b7b39a08a745b7369096386c7f93ceb202e3a582c5dd8d4a41307f8e7f09c595ccf4e2b224694bd02eb7e9ef231286f586be5a0d000f97081bbd4988e94ed74c30aedc4c48efa5a28eecb39fbbb5db562f8c67c082830b93a39c412b9db9cb7e57c87c3ca1ff1fbd70f02e96870fe35126a9a0520a91dfce48a1dbee984b96d134b62ba04d49388bab2ef17253f82ddd017e69a3ba54d267f5a600d82590af4129f3475431638f6de043e844367b4a5b7c8e3fcbeabcfcb1b19e098fe64ed7d153c94d38e7c86dd476f6b34251fc65d2509c8afc59f463673960ab3a4b3c284f955a8e176e13284a4e0b3e9917c46ba65d7e12470c67883a674d50c527acb723f439126ab88b6f7ee589ace5f213c55ce82a8b24665cd3c7ad6e9203019ea6ecbf24fa655509995220908477c0ab3026c3f75fd9aa38934b9dc32989bc328ecf62d300b0f8909cdab9a4aabf6079063871516363b92c6a065bc600bed2d479ad10f747ebf467aeb71d48d6c8e17b2efd8a7a0ed589348fcb76829876f3ef187791718d7250a27dcafc3d8476c879008f8418ebee0ff78fd1533f760450e769ade13ee8cfb3265d2dfaca36a7e4b850c4ad8178a9412c3c22ad5a8da4a12f2f42d7e839b79f5539f1d7dd1e50ee03ffdf966c7a5d5430d00e5cece1ff728dfcc452888a087fdbbec3f29f121c01479f3814901eac358c5d06929381520c42e8427d0421bb45bdafdd67c98684378b5aca58795452f1352e8d05375bbade7bbda0587ed901f59c45acd1df0946af99eafda58590628f73b352085578240070c1b85e2af0b5e556dc7e1fdf512362e97a52330ec5c1961415a4f1b26dbe6725c0cdfc0b5a0aa960530aac9432705291968c80c68a0db971a1fff78cd755c2a700fbf27d3c234ec514be836061bb997ad4af35eb8e8d81f7aa897835c67db5afc5313e605534ddb59a1ebe16cf21ca3c4d993a490f7b52ceb9f0ba4be5d461a026b89d19ce1a9860d9bd22cbf104a4848045fc783a44497f2372a3b3cbb69c84d53485b21cb7a69ccc7b2d4e6f35e7906afe42bc3c345d5233a46a036747acb098c92b5bf4500fb4ea4d5a8ad7c7cd569e54c0acd01c68326f616b71496cc30f6cae83a5b24c2b6f09a583b879adb7444e1e3cd36b330658f38f1d7d094472c7e9705833acfe75a7cdf16d36ee9ff87c272f3660620d2d6d9133bb60a488c02a0d7e8b55798e4d0592fb3e9e986fd22c82b8e8773fb0578d3800693e97341f098e45b18b2bef1742d3d2807bf497f0f2ddc4e34246d66bd200b281acea2dfe283a4782369c772e1ec2643e12e526e6cbe8369291d40e5147bbf5e4bed5920643d96e807234f3d30185c7398104d74f80adb1229bff474f282c503fcb42e4f3cd0c11c779ea9ae6c73a1fb0282a843f9d04694d71a02caf366e1fbaa352c02d514e4c3d2b8bff5aaa702e7ea0bb4bf00d75365a9405357c4be78797e82f88f6fca9664d0a546f71a234473e89c22770c2eef31b0e03168cfb6d569275b7fc3ba4089096c6ebeb0eb52cf61e2f991a9c11fffe1076dfd28ad2be5094ee98fae2d0be9433682ba7cacd3b08fd41e4dc142af465f7efa87ab37b9298328a5976db9fdcdb37c189255cad2a19ef627546ddfa0723db41edbb62caa4dc3808900508c2bb2befe4082c2d38401081d2d05d07788a7d564808328b43c3c426abd14c5cb789e441ecac7d7eb442588a273f28339cc06a251a8ffe6584f17d4400e6c78e408c902e6ecf3e1c63d6bfb0a186ec6fc87c420d46076c929140a24576a5e033f4de42d9a2b68dd249552c3689d51cfc7aea78953ca6eece14ab3a6a64751cfc26c6125018ae9da655f91a5388ecd41d773295ee774eadde9514d7fafa306eac460764a527b5b9a349768aa4f1bb9f9c96a25b5cd30b493d325986f9857745cb24db2b5a04c6ef97651018eb7ca6665171258f31037483ea2a2ea67a46beb7eb70c9881baa2bc3d9cd112650bc3800bb29ae19be92f48f8e402c3796e8b6f80eb77a5f577840636320cc121316a888712fe1f19c51e12589ce6c0b81365ba08714e715d2dfc655482e3ef262bf1ba378df70726b71acf40ab6c4bb97215b5e31b1e281e540f99741495781f94898d7ca5c156fe265352b002d16585caacf7514aa0ffe8899cd257b54f58ec52aad8cbc1c3b70e4ada117c59e4f49db0c2bdb60d5d97afada2089e043ebd4cb6f3bb4ada9d7f8ae4f6ffdc5c2a638d5a67dd0a129990a1fc912256518a4d500158e600bb0af44e6454464f00169213df7c1d8e0dae2df76d8c265f3bd60c827b4c17753406b25bf5f4a433b7efcb7f10b059d62fae762899562f6361e616d204c7e2f8aca63e4861ec0b8cf3723a39c08a873a4c3ba44d09a8df334ab464a6720035309feb59ac6374adb36118160f0ac118b593fc41559b7f9abe2c4c7695d76026fcb7b7aeef57b4a89c0dab6718cbc35e74345baa833e4a6f9a124d0a42e1c68395838e5bdd3d30c5c61f6158f8a995da1aa85780543ea916253504da83b2cf7d6ed9f17664680dc58694f291c2aa676fa4436007d5d812b2fcc07f6c9611a345f78213ffe958ac8961ed1c13fe5a236ba052a49f6576d7d7c61ac8256ea5c92dda91d6b96402735a4c6a5baea4ba605b264ea0388e79cd326ae552dafab0314be43db53880c2dc7907a9ee7db2cacc1cdae1952bb4e6dfce09934995030edef1314a590c5e9c833418b5af66c6760ab2a65823f190c3bd863f235c1c8a54798451a571f1717ebd3bb258e324fcfde75ce87e52a0f9f9d26d230563a6cdda712630c8ebf0518de4bd3d6117b31a00c2dfde094f38699214f1456d1f1173dc4ccf100e15f794b28643549dd5c679cd50476f0d2883d2614366f7d3e0828a63321ced18c77145735102b20cf5bcede96cd8eebc4b4fa361cd61476a8418bdb3649efd9b4a86bff0a8525d690b38dfacc7866016ab3254f8f2209df6663ba788e8a01061a8a2c6b8c888d9977f4df01b9c1a777b91be4300d5cb109cc348014e932b1de905af82698a498b4ed9f08abc6ee75942d565e523ca7a7d45663a34a58517f77760200faae6bb2b34f6d6ef6aece803cbdafb09f0bfda85a202ff681e5d0a6eb14d7256e50a0c8656b66ffc06720891ffd2695efea41d768965669f49155c91ee30ae96ed9d052513d0e2b77e344756df3f1389a8bc481e2478e9b8e1e2bb8c8547989a559da1e4b7a859d1fd63871b4cb263013c91ba8e09017c39790380e75a66d5e7460ef7c80feaef8d4c7be8afea5a1c0dc40e102eff828a934e106990a66a3aa75709696ff2d29ce38112d9d25946cdc409604364aa734d19a6305c09ee71886f84beb83ffe4f5fe43c6302", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)={0x90, 0x0, 0x7, {0x0, 0x3, 0x6, 0x401, 0x2, 0x2, {0x6, 0x3, 0x5, 0x4, 0xd176, 0x7, 0x9, 0x200, 0x7, 0x1000, 0xfe46, r6, r7, 0x80000001, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0xee00, r7}, 0xc) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x800) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/91) syz_usb_connect(0x5, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000d3ccb510b1134200292b0102030109021b0001fc00000009040f0001e711e100090583ff03"], 0x0) recvmmsg$unix(r9, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000004a80)=""/4083, 0xff3}], 0x1}}], 0x1, 0x0, 0x0) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x600, 0x0, 0x180, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x2, 0x0, 0x0, 0x4, 0x0, 0x1}) ioctl$FBIOGET_FSCREENINFO(r10, 0x4602, &(0x7f0000000080)) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f00000034c0)="58c0e8bae42c0fe8bdf795b00994db801593518c974db2203b74e695040d2c9f2c3496ab3aa08c45023c6c77fd6e9ccb4cf2c9885b536185f74d40ac385923d11990841b9596d9129f0a565ef205da3f7bbd5cb09b2210051ecdda6e20ea108eaea68ba58a53f446db1598ff59bf94bf4e1749edb4d065b82120033bcaf01889dd81381abe885032f2c2f15d73828d65d839652b4402312ba82d9df95c4966a81a6c0a24a3025a7feff0cec1e3b77e442304a4ca1fe6d516cde88d197fb26de0c5f24403db89870d65da4cb763ae49eaf38a155547e9aafcf04cb6dadc1e760e9c1da7acc9f6afbac76fb44750d5f607aa72a985be38d229b8a7f6f848c0fa91edc5243192d2ee40e65abe7caab40a5e2ba95a3e6a69eb1bd3769b54ee7aa5360430b7f5e51589106eba39e12861a1d0b8f13c154100d0fbb0ba760f41470cb6b1904cb85bd8c5e4394ac77ce0468cce003cda723f72aeda6c766ddf96fccdb018769e77c6c2c0786dc85dc9438a75ad96c9f87c8d9a6f0353ef8f43070e4232b955e3f9b182aa66ae59f06529c685efc18d0384f5d79174ba85959e434e7b833040dcbf739e17c083b4c67042ff783f9aae8522ebf118700400c80035f686057c9a95108316d7a37e2fb90691b44cbe0e77ec66d08f0cb6b86ca7e1530a5122cad2170154c68cee7611542774534e9ed151295e80ea9ede97e1a05845baccc45ae42fcd9171fb6517793507260e8273e0357feb85572d4d2b695ad16574568c4e17effb582c751bdbb172a7fcc5d2034b8469e95748158c27e68d2d226e57e0f8e37ed5714280a87a15422c1825a5a2f734ec1ea4a7a71ce13df577f904cae48ee8f6be9f4e5a6cd101267673727ce343690335c479e3fced545d62d66f2aa2e12c74321d1ae0713fbf678db1a4d98e2583de3e4c1207a1b3ef0528bf4c979e7f46a9981acee9307e11e487a41d8ef6408df077e184a4368d5e22e75b528d27e626541076df37f3869c0022c0c9b6d41cc6874ae1e9cef8c4816b84f7a93e2a404691abee20c1fe78a9c91b64e06f2a5b2ffe5c0386f1341b130bb071dafb680bdb76cc61da6a8dcf65a38410c4fff0c8feae4eb36688c84ea493b4b993ee476625385a750c6592287721be80af5e4917646d37e503296667918b4fc572d36f20f23032df0703dcfcdb2edd0318750252a2693c0e446b394f710d8aec13b792681b667ef092e78d779fbaa02c0462f58ee92761278a6a2de26d5514f118a88013fb5ee84a4e8951b7273686c47840e2941d41b632ed15912cb6cea9d4bd5b8b1f713c391612f641eb7b6ce66f4b1a97da59b8e90ac9a855a7ebf07a8372cda66ddf04b73aa2fc11ffeb276572d1ff23f0dea2e1abe5e38ae315df083103fc702a00bf38cd8b4f7d52b4e7944a7c99ffb743cb878280957c840d480d6adf64a06a37ef71fa1b4674e8e2844dafe919961791fe61be794b6e8e9866d97b96c97b8a5e0f32658b0a07f707aa24690652fdbf538c08e982c21dfed05975c8d1d1281c2f65c1fd71f19f78bbb800a21311a5c14a50b11c7de69abe9c347398cfdccfe6816ffaae09a982b3847833996e8798c7e807ebd61ee013f7d1711f148291b10d7ee47f8d9ca645df551451d9c41cf4057ce4b63060dab137445458f41b5839c612f3b3f8b39690a66ee2e7cf796052bf0b90e0e1be2fd87ee1f265ea3930a980d117573765357a57cd6263ecff5511107114c8311d9fe9665d4dfed59c74e04f6410bffb8c57224a4ba391ac0b9121f3083e0c4ad52c036d57dda6e1e21b184561dce5556cb1148d6894ec2bf9d6a52d5bafd1f59e52d4d30acadf9f3c11ffbc6ba17441f66dd10b8ebb27a2316be64111a8f11b3384ce89628ba1cea730934451ff7b29ab813bc6c8ecbd5538fc2d581a8b6848eea60db2836b29da9e7c1c813717b18b860bb5ff6120453797bfa5ce95d0236137d1f726463932c788b6eebe00437df73bb1088b198ff1ce72cba8157ab5ca82b7030dd76ba5dac3ac333de636aec4be333dd68d652257706a1eabdb304f01f763ece502b4f9cefb870cc96e258a8073c94ca67738811e6a4d2ebe92a7323fe2a29218e8ace1547c9580680c6f595f17ba6e56109ce31176157f08fe911b43ad111d84d919f4774e0896b0933041551e4116187ed93e4cf2fc7af572fe4ae6affec258007de3175ef99f44843213ea73f2b051bffb703cb19f6001dd5f4c4d5a248150e7ea96ec2a9fa196e60149767c6bb0d78370f7d61e67a6e8d60fd881fcbf2705480fd5579dbad96665488c85848f638ef036d01b13f43593ae7f99d52bd7f5994d663a9cdc01134a03dec835af6b3ec9ffd16ba2381a8575414b092cffba58b0d9e58e58c3a09be7d77a3cb23b74567bc8906b47edd552f48736e7cb41a4cefc73c1d9ba274d39042d4a2afe0aa0e6a06a7ae7933d8320d4b17511609f53dc4478e95895a1fbfe3b3c7727c0dc88e8726dfdfeba18998985e4f1268ac0f26ca69a65f4d82dcf4e451af14413f643a2c3f3bb00c3f1af5a56bc231023144d1995f9713f288622a5fac78a55824ce5791a2562e1d017b30ab0b599fa440812db16af0cf945d9257faf66ee1f48d9b247cb9b8b7c43f8bbc1959e250d944ba96f1d2f6017d8b83980ec4ab3f52eeeadd3b46eddfc0150745f06c215198124d6643799ba166f5825f3f2fe4ff4dbcc98a90027088dddcd47e8555baccfe469333ac72c8b733a4969adc9c640c633d880f51f78c5a3e491bfcdf40263e384a1e18109fe34ba45e66af1d32c9ee873524c5acd5d94061152e7f3089afe6e8c35dc980de6a3adaf1bf371ded4f4f3099c505c685d08db26086ca314b5f142a977df96bfdd12d7c2674cd66fbc93b5e4befec9f90cbdbd65424b7a2a756af23c77e329a477ed8afc4bfd78c97c47a484ec60f391ce7a8fa976b4e138a2faca3825dffd62c706b75d66971b17200ff912ff7768ebb3921e705b582d7e418131cd5af63620e48f02cb4b8f6c55c5e07b2cd561c1edf76dac09d4322ff3ea949aa42db106d33252f45afaf0b9e339d5ff8c73d52823320af6c70eb826d1514b9d4f004ee890ebbef5b77d6fdecf56a5234c501a0abd38246191a1ef5184d89fc2c2f2ff863e2e4e1c409e6a26323c8ee968140570723fcf50ce391bfd9f52c674134a48e6a7349830e2136531f7e762341df774a698de5145e5c9a168b329dd21f2c3f400364eeb609ec6a3547b8ef1a47d1dce5b5e50485ac497b9415ea6a35ff7898cfa3cbae678e4b37c50a775a069fddd5d84931f5f80c77f6bd12a3f8da843d7c8a46c7a260f31a574f01eb0c9bba6c10d516a5fc5c1cff6ef1d0009469ab9046b1e0351a86b4b3faa9e486f86952810fcba2adce553f47aa6e52978d6038f79eff7bb5e3796322c7a2df67e4016e689a6cb2c3613220c0e04a06f7d331a089f4febd7302b50cfed8e688dbf709476014819841c6702ed733e047cf464396ef5bf38391d4ffc1aca22db9b37cdcdb170c5b4f51b2a4f6cb5fd71e84755100d3e783c0a2c563ea8f32d0dfcef47a241abf3480eb0c176fe2afbba8da4b6479d51323cd224528b8e4f766a2ff4f011f973b91479fbf1d0f15e939756de7276465f9fd759930a8d402e898c6dfd8f17b244e35a58d1c1f7cacca684eaa5e32c9eda766a6a36cc0f9cbaf149a61f3296449434310274564c189e4888a610f273328557cd2e7c3688281bcd5fda93be2a58b8cd642ac10e0ead96b9d414b362c20c0c39a1321766e29ef1f36f61701d5aefef6d80c535eee00ce70db2d0f148783bc586089233ed7188a42a1cc07f7645197f083b9f6a4e9cab281b0daa0ff13dee6d3868fe131e324d7cdf94ca5d6f900fd0b6ad2fa7ca58d14cf916c530d172fa627799e6471085495c6fe1aabd47e283e2679b6e14231e4d611afe5f488d96a28f948433cca579f36e08ca1132c70297b75cef74f685e32d7da1fb43ceb6b303f9faf742c818326e5c84c6d4e5c7da8a4bd0111728e3d8c75c2c29df3472a261fa2a8a8ef102a40a30fe9e6b4dd9012413800e49bb7bb2d83d23a4738441255a39946a7feed4f413bcf2c41798b46f9001e0b61d76d7fb20e25c2b067df3b6b3e4b30a1f1139f3c129e6614ab41c609f6a90cdc191982e6109c31eaeee196132b894d9fbeb45208580d82b6299acee3a4916f16858f4bd6778c22a250619304a849d0c8c47d59adb55c6637c30a41a4eeb276245e46713adf362090ca060ff0afec7710b673dfd844c7af0940547b8fba12ea3cff96a1c934efdde5eded84f82d2ce3fcb9a64f30bdcc9a8bed0dc0397eaa918a09bce93ec327385be756c35f856f0960dc3f3a0ae50593d32119b6823c9adef126d1885e76ccd6c0e29f5d5190287da3e6d678ccbf46a291926d7b34e5543383b506701cf06eb8b4222947752564f53329b4709024fa8529863953b98134d0e6670bec652a75449a28a0ffbcf30d83a492704182aa96fca299595a5fa963e0bdce00904bf68aed1072de1bb3a16d5fb038da134e95353693de0855df566ea974d51385dbece097f3b540ddf749116446e9ee11dd835d89cbee43171e817e9c8cd9a558330952ada17dff3b127888c5979acc60604a162c3792afa50ef777f8da7fa4749e592fe4ae1dd7e837d82aac1d6bc6af3c0bd6bbd5dd424f1cf8a0e6da91a36101b26e974b7b00eca70cf53a82cbfcd1c10ccc63de22e067b05ae031f3dd71cc5eca8661f6d048396cb9b62943722f362e2574e772a550b79b7819ef6ef628cb5ede6f3c971a6bc7a42e2da7705e1c95a6fd8d0fcbe09252c2fae46c349b87f7487a34aec214f169934930a90d67fa22d22d66d282f6a659a469f41ef632d00cb7456d34eff9b38f6a02421cdfcde851334bd061a1fe12f05cebb241eb67f4079720cf7c7ed7e05df968ad1698522464c1ab1922117f0c49de0554834bb459901ff3561df19b19ae5569c2208da078d17ad17f7748f333f931bb8554deb11da2810c8bf11b2928b2c0883517a78ec1bcdcabdbe61e48dccb8cc9373121acb79d26c83e890c476056e766d979ab57fb41265e28a66a45ccb5cb59831998c93d27b0f72d5d3de432d107acd200f867bd4a0116799fb25b5bc7f37f93e328da23f86b0df35ac5502a58d4c86c06a9153559792b78eb2994eaa5465ecfa7a12d474b58de25d8f722a3e1d821f4453873d582dc5e1e07dfdbdb73a62e2821dfeef048a99ef437c51243f7f9dce7a805dcbb9ccc0de7fec75d64e864ce35d5d1d64e0541a1f49493cb458815c1e0e57bafe8942c81a5f902a83b99ef3e49837da43e998f36efa35ab27eb93ceb890915cbf5dc3aa6f008a74af57947c94a7fee8e30b4d7f5be9fea270ee7aa9f0b359db8c46c47b6332fdf238f08193f21b9ecbb14ad99cd43dfab6f16c414ae3d8e1b0fbe95207441fa675f6e8ee865f3664340a03e5a790bca145980ef2e542f1ab45539ad71c72364efdd9931c88f95ac80acec5ba3310b27ad9a3383901e1bb15eff89500441c9d938179f474185af46a85c86371be7b2b4662a7181b24b894263ae0f08581532040bd79a644cc853f822aa30245d62b004e81805383d6c576ba3ff151e7e1e7676dd15d9df7003bc569e2e980a7b2b3a8f19332509169265a623ee6bf4f2cea1c075262e08830a2e25810397310e6130681df411cee31fd746fb77d700b6f61962a9f11c132330fa8f3be5c8ad11a7ebd0025ada6f8b9", 0xff4}], 0x1}}], 0x1, 0x9200000000000004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 8.861556774s ago: executing program 6 (id=1031): r0 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000380)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0xfc, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xff58}}}}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="2e010000ed454210cd0c99009bf4000203010902120001000000000904"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x800}, [@map_fd, @map_fd={0x18, 0x0, 0x1, 0x0, r4}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0xea, &(0x7f0000000340)=""/234}, 0x17) r5 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) r6 = openat$cgroup_procs(r2, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r6, &(0x7f0000000180)=r7, 0x12) r8 = openat$cgroup(r2, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r8, &(0x7f0000000100)='syz1\x00', 0x1ff) write$cgroup_freezer_state(r5, &(0x7f0000000080)='THAWED\x00', 0x7) pread64(r0, &(0x7f0000000100)=""/253, 0xfd, 0xadc) 7.60947963s ago: executing program 5 (id=1034): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e9090400000103000000092105000001220500090581030002"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040c21504220000000000010902240001000000000904000002030400000921000000012205000905810300"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000040)="9466") 7.186834353s ago: executing program 0 (id=1036): rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0xd, 0x8, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r4, 0x300000b, 0x11, r2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) mmap$usbmon(&(0x7f000068e000/0x3000)=nil, 0x3000, 0x2, 0x2010, r5, 0x7f29) mmap$KVM_VCPU(&(0x7f00000cd000/0x1000)=nil, r4, 0x2000000, 0x4010, r5, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private0}, 0x1c) setsockopt$inet6_int(r7, 0x29, 0x2, 0x0, 0x0) recvmmsg(r7, 0x0, 0x0, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) sendto$inet6(r7, 0x0, 0x0, 0x20000001, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, 0x0) 7.130346943s ago: executing program 6 (id=1037): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, 'L\x00ZtC\x00', "3eda254a1c07cb407b4000", "29469d6b", "5350b7add205a3ec"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000c00)=@ccm_128={{0x304}, "e12dc20a892d7dde", "a52c04ebffff7ba94ab06f060000001c", "296258a3", "ebee76f27293fe23"}, 0x3a) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x34, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0) recvfrom(r0, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0) 6.865196664s ago: executing program 3 (id=1039): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x401, 0x9, 0x8, 0x0, 0x7}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffa], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0xc, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) mmap$dsp(&(0x7f0000189000/0x1000)=nil, 0x1000, 0x1000000, 0x112, r3, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140), 0x0, 0x0) add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)='&)$#,!*\x00', &(0x7f00000003c0)='/dev/uhid\x00', 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x1009, 0xfffd, 0x0, 0xffff}, 'syz0\x00', 0x26}) ioctl$UI_DEV_CREATE(r0, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000340), 0xaa54, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) fsetxattr$security_capability(r7, 0x0, &(0x7f00000001c0)=@v1={0x1000000, [{0x9, 0x5}]}, 0xc, 0x2) ioctl$EVIOCGSND(r7, 0x8040451a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0xffffc90000000000, 0x4, 0x0) 6.641772753s ago: executing program 0 (id=1040): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc2041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x4, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x9, 0x4, 0x7, 0x0, 0x2, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0xb, 0x600}]}}}}}}, 0x46) 6.37654971s ago: executing program 2 (id=1041): rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x20080) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', 0x0, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x5c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x1d, 0x3, 0x3}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x0, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x2}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20006841}, 0x4044015) recvmmsg(r4, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/59, 0x3b}, {&(0x7f0000000540)=""/142, 0x8e}], 0x2}, 0x3}], 0x1, 0x40000060, 0x0) socket(0x400000000010, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000000), 0x4) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) 6.115771921s ago: executing program 6 (id=1042): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x401, 0x9, 0x8, 0x0, 0x7}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000189000/0x4000)=nil, 0x4000, 0x1000000, 0x112, r3, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140), 0x0, 0x0) add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)='&)$#,!*\x00', &(0x7f0000000040)='\xf7m\xd1h\x16}5/te\x8f1\xff\xffid\x00\x00p\xe10\xa2h\xbb\x7f\xda', 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x1009, 0xfffd, 0x0, 0xffff}, 'syz0\x00', 0x26}) ioctl$UI_DEV_CREATE(r0, 0x5501) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0xaa54, 0x260000) ioctl$UI_DEV_DESTROY(r0, 0x5502) fsetxattr$security_capability(r4, 0x0, &(0x7f00000001c0)=@v1={0x1000000, [{0x9, 0x5}]}, 0xc, 0x2) ioctl$EVIOCGSND(r4, 0x8040451a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0xffffc90000000000, 0x4, 0x0) 6.049167022s ago: executing program 0 (id=1043): r0 = socket(0x33, 0x3, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0xfffffffffffffe79) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002c80)=ANY=[@ANYBLOB="401400003f000701feffffff00000000017c0000040042800c00018006000600800a000019140280141414800d1419"], 0x1440}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) 5.688417467s ago: executing program 0 (id=1044): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x49e, &(0x7f0000000400)={0x0, 0x8000e7a7, 0x80, 0x3, 0x253}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xffb, 0x0, 0x4) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000300), 0x1) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r7, 0x52b242d) keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x3}) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r4, 0x0, 0x0, 0x0, 0x2}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) io_uring_enter(r4, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) syz_create_resource$binfmt(&(0x7f0000000080)='./file1\x00') r8 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) close(r8) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000004c0)={[&(0x7f0000000000)='\x00', &(0x7f00000003c0)=')!}\x00']}, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x77359400}}, 0x0) 5.383925531s ago: executing program 5 (id=1045): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) futex(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0, 0x2) (async, rerun: 32) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) (async, rerun: 32) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4627, 0xfdfffffd, @local, 0x2}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000001640)={0xa, 0x4e23, 0xfffffc01, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0xe}, 0x1c, &(0x7f0000002880)=[{&(0x7f00000000c0)="9c435a7de4c0b544ffeb", 0xa}], 0x1}}], 0x1, 0x4001c00) r1 = openat$fuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000140)={0x2b, 0x6, 0x0, {0x5, 0x2, 0x2, 0x0, '!$'}}, 0x2b) 5.054158665s ago: executing program 5 (id=1046): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x2, @loopback, 0xf}], 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000200), 0x4) prctl$PR_SCHED_CORE(0x22, 0x1, 0x0, 0x1, 0x0) listen(r0, 0xfff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000140), 0xe1003, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000400), 0xffffffffffffffff, 0x0, 0x3, 0x1}}, 0x20) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) read$FUSE(r5, 0x0, 0x0) r6 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0xc08, 0x3, 0x1e4, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x240) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x7, 0xfffffffd, 0x0, 0xc4, 0x3ff, 0x8, 0x0, 0x3}, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv2(r7, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1f, 0x0, 0x4, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x2}) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) 4.374060698s ago: executing program 3 (id=1047): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0}}], 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x860272e24f484778, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg0\x00'}]}]}], {0x14}}, 0xa4}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_disconnect(r3) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) accept4(r2, &(0x7f00000003c0)=@in={0x2, 0x0, @loopback}, &(0x7f0000000240)=0x80, 0xc00) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d67a854a7a4124a91520800000000000000030000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044010) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000000506010400000000000000000a0000060900030073797a310000000005000100070000000900030073797a3000000000918eeaa2aef1989c5f7ea2af42849f6ae7aab4bba39c6b22ddf24f3d14bab8035ad3345f108b51a8796c9cdea866e21d"], 0x34}, 0x1, 0x0, 0x0, 0x22000885}, 0x5010) r5 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x300}, 0x24}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) openat$sndtimer(0xffffff9c, &(0x7f0000000440), 0x20000) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)=""/230, 0xe6}], 0x15}, 0x2000000}], 0x2, 0x0, 0x0) 3.972690462s ago: executing program 0 (id=1048): r0 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$dsp1(0xffffff9c, &(0x7f0000000300), 0x20000, 0x0) ppoll(&(0x7f0000000400)=[{r2, 0x2002}], 0x1, &(0x7f0000000480), &(0x7f00000004c0)={[0x40, 0x10001]}, 0x8) r3 = syz_io_uring_setup(0xed9, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x1, 0x3}, &(0x7f0000000300)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0xc, 0x26b8329a91a6bfd1, @fd, 0xc63, 0x0, 0x0, 0xe, 0x1}) io_uring_enter(r3, 0x48ce, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, &(0x7f0000000100)={@host, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000bc0)=0x80000000) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x60080, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r8, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r9 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="100000001001000001000000dc00"], 0x10}, 0x40) recvmsg(r9, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r10 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r10, 0x405c5504, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20041, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_getnetconf={0x34, 0x52, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x7fffffff}, @NETCONFA_RP_FILTER={0x8}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.848166199s ago: executing program 6 (id=1049): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 3.700371445s ago: executing program 6 (id=1050): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @dev}, &(0x7f0000000240)=0x10, 0x800) sendmsg(r0, &(0x7f00000007c0)={&(0x7f00000002c0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000380)="dea34004a5a9f1d831a135cabfe3f1a07ea2efe326993d5d37e91674fe8f5e7d79ca3c858a9dcabe291a278c65e36099e13b8f7df7bccdd60252b55735940effc07cba98f637c859e8e2236d0746190c906adeeda1930f44c98bad80ef40b7755a3a5ceeed4fbbf8d041ba965b16e49d07a801bf936ca2d902ab72aac9a16e87fe0795e9cf035f0b50c04c2dd65854aeae5928c58bd37ecc91bcd79660aaef217bd093dacdc1688653e6d3f4baf91cea900fc34a8ef010438501d5e49e56b00680a3810e7e72efb4107ba36e6a54787a3945ee718ef652406143dac2854360aa85aca07896e0aa72aa", 0xe9}, {&(0x7f0000000480)="19d4355c92e60eead8d864c1d3987ecb5b5c83f9147defa8dc835f428f264defeb69e5421e0b5e77f2ae", 0x2a}, {&(0x7f00000004c0)="e1066efa77f352026fe91e6bd149ddc5de6004f43e274816981a569275bad9108e66bdc05aa0722546a5b9cd71c1cbd3d40c51bf9a1c95fa8ad373cac36ebe0856e1384a96682d733457229c933e520147fdd4e4d534656d0630f0a7197c59e24b007392c8b95e807e5c7cc1e55962f7e48526920446aa2e9159fcf3ceeebb628c12332de91cab26e074b5b44c6dcc37c2e9ac034cf36c953867ef369a4e6a8e893eb431a9aa82dc97179107b718ed45fe03cf78f8829627ffbc6bf543a9a374cc333dd418c4ca17f9dd1c3f1eb6100058dade576bfaf88d9604cb9ab2c721c7d835057755e152209877b5b2bdad63a8a8d5479a", 0xf4}, {&(0x7f00000005c0)="8dcb2cc4470f06292b10a23c2ab8a3f8fda8cc2d62b6603703e5c5ed60461d594b9a21dca13b8a75fc12c0e3758f4339b07c5befc7aca6ddfd39ec5d032731569f1e160ecdf72bd0763c60af433883fb393a8e791cbc9ca0603e21a01c3b36e7cf62177dbcdaf1753b18bbfc634253ad30aa8bba8e72d7a67409d86656f3629b9a0ffc54398fbb5cb5ac3bbabaa1040627e8294f33bc27d79d85f9197946f6ad1604cd1648c4913757e543d9ecbbc24ea7f126543ff2921eac48209acb1547b22add56abfdaa911a98b8a9cd70e680809ebde98c6f544ef964c1fa0a9628c672243fbf69efbeea47", 0xe8}], 0x4, &(0x7f0000000700)=[{0x9c, 0x10f, 0x4, "02391b079bccf0ff93407261e4e305a6c30132647e8c739d4a89178b0fdaab3736c417a4ce7e0d90a233dc3deb1a5a24b4f7c17bdea74b31c0f1a306ec12b8bd4bad34ff1a3dd9b8aaecd620bf6633c82c6d7a757c0547ba872046d48ec6f2912d39baf6c32b4c19297ba10697b281276c0b918267ad1c170f8e3957b880824f06b7b6549c1daf3b8a8a69464b"}], 0x9c}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_group_source_req(r4, 0x29, 0x6, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050300"/18, @ANYRES32=r2, @ANYBLOB="0a001800030303030303000008006b0014000000"], 0x30}}, 0x400c008) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xdc9eeebf886a772d}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r5, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0xff}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20044081}, 0x90) 3.570088972s ago: executing program 6 (id=1051): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@bridge_setlink={0x178, 0x13, 0xa29, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x3, 0x0, 0x1, {0xc, 0x5, 0x0, 0x1, [{0x8}]}}]}, @IFLA_VF_PORTS={0x144, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0xc}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "714abbd2547de97cbbf6efb226f19bf9"}, @IFLA_PORT_PROFILE={0xd, 0x2, ':(\x8e^[[Z@\x00'}]}, {0x54, 0x7, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "293a02149f3b75a67093c28fd6f55a23"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_ilave_0\x00'}, @IFLA_PORT_PROFILE={0x7, 0x2, '):\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4d2906d0880fc8acc30fe2020f984967"}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9c7e472c916020fe41bcc5aa8f56c947"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "80ab8be51421cfa3c9e5cbfe8217e0af"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0xc, 0x2, 'syztnl0\x00'}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_0\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e078d277f38ed3a40a448f3f6b6763e8"}]}]}]}, 0x178}}, 0x0) r4 = syz_io_uring_setup(0x234, &(0x7f0000000280)={0x0, 0x80f8, 0x10100, 0x0, 0x12c}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)) r7 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x3) r8 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="d469e0d24a6bd05715ae325b0f63579ce377c15ffc5ac8799f07", 0x1a}], 0x1}, 0x0) syz_usb_control_io$cdc_ecm(r8, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) ppoll(&(0x7f0000000280)=[{r7, 0x80f6}], 0x1, 0x0, 0x0, 0x0) ioctl$TCXONC(r7, 0x540a, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x1, 0x4) migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000040)=0x13e) syz_usb_control_io$printer(r0, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="4800000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008001b00030000028600110030000000"], 0x48}}, 0x0) r10 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r10, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8411, 0x2, &(0x7f00000006c0)="0203"}], 0x1}) 3.207621745s ago: executing program 5 (id=1052): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000000035c99f3e4000000000dbcb000001000000"]) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0x401, 0x100000000000009, 0x8, 0x0, 0x7}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000189000/0x4000)=nil, 0x4000, 0x1000000, 0x112, r6, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140), 0x0, 0x0) add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)='&)$#,!*\x00', &(0x7f00000003c0)='/dev/uhid\x00', 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x1009, 0xfffd, 0x0, 0xffff}, 'syz0\x00', 0x26}) ioctl$UI_DEV_CREATE(r0, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000340), 0xaa54, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) fsetxattr$security_capability(r7, 0x0, &(0x7f00000001c0)=@v1={0x1000000, [{0x9, 0x5}]}, 0xc, 0x2) ioctl$EVIOCGSND(r7, 0x8040451a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0xffffc90000000000, 0x4, 0x0) 3.126913339s ago: executing program 2 (id=1053): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000040)={0x4, [0x0, 0x0, 0x0, 0x0]}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 2.266180483s ago: executing program 2 (id=1054): r0 = syz_usb_connect(0x5, 0x27, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x5c, 0x7f, 0x40, 0x547, 0x201, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xcd, 0xd2}}]}}]}}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_control_io$lan78xx(r0, &(0x7f0000000200)={0xc, &(0x7f0000000080)={0x40, 0x23, 0xfd, {0xfd, 0x21, "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"}}, &(0x7f0000000280)={0x0, 0x3, 0x64, @string={0x64, 0x3, "934d08fd0db6e37b0158fe2cc43f7330bd8a05a11ce9eab6d3c83df10934c06783b155b09d41a60d4dcd245feb55cb83369926453652b74286146bb2b9358dde6adcdf36fda23f7a162170b1bfb9271fd8421002d37d3885d42310c3b57695a95902"}}}, &(0x7f0000000540)={0x1c, &(0x7f0000000300)={0x40, 0xe, 0xbb, "bde15c850733634538b7789d3bdb642e0933b28ec0e05f3965c1be1b36de5da9b10ef6fc77d757fc35dc6120ffbaa0ce4e1354e9c3e08c40dd60d2e049adef0ab680ec99a57f67b10fbd43317ed6aecaa525f6869a90ccc3d0a9c62188b006c289f13c560b1f6810583dddba88db17656417b2b8bb401a622c566ca2c7333d47dfa5186a6ac4ca5173108a2da20e370e47ceec668be4ac5940fe31e8a912ff1faa2d5ceb4f3b65f184a8ea4bd63825fe6147d7f71e57fb5aa31793"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000480)={0xc0, 0xa1, 0x4, 0xa3}, &(0x7f00000004c0)={0x40, 0xa0, 0x4, 0x6}, &(0x7f0000000500)={0xc0, 0xa2, 0x2f, "2ad1ee18ecf654b1f95e7dd713d5657b9a1b8865f34f4842cffcf9dc922e1d5d1d0bfa0e9b72b0ef1145939173b09b"}}) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000240)={&(0x7f00000001c0)=[{0x0, 0x1000, 0x0, 0x0}, {0x5, 0x4200, 0x0, 0x0}], 0x2}) 2.074569834s ago: executing program 3 (id=1055): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086200, &(0x7f00000001c0)='\x03\x00\x00\x00\x00\x00\x00\x00-control\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) personality(0x619641b6fb4b8591) r4 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000100), 0x24, 0x0) getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00', 0x0, 0x15) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) sendto(r0, &(0x7f0000000080)="05962650d998638181e985b49590c563157a67e70d34b6b4e5b0b3c3e79bbb7a07ef2f056b727a3771aca5734220619c7465b3caf66f53b53fb9d674bc69dc1c275757b5bec42d1327be0fb500b6ddca7caf21d2595e8f970d271f488c84d5cab2482fae177b2b28dfed452bf08461c531e2616195352e89bd80dc95621e25132b6d84ad830a1380e7522c5517ca4ea00861e0415e98bd67bbceddc1a5a728e22c4f2d6c8eede5386c92b0c80d625dbc7c99d9d80327b3051581a0a611ff4f8c7bc42e448686c07f06dc14719bf4259e92599c5d696fe7253ac57262f35844c930cbee11adcfe28d629d56bbd55d4b", 0xef, 0x5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'syztnl0\x00', r5, 0x20, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @empty}}}}) 1.810572524s ago: executing program 3 (id=1056): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd27, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x80a, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}}, 0x80) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r6, &(0x7f0000001500)=[{{&(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0, 0x25}, 0x80, 0x0, 0x0, &(0x7f0000001540)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r0, @ANYRES16=r2, @ANYBLOB="c01ca9a6d800b5559e9487fcb44fa59526ad343074f1b83b82756bc16013e22017cf476738"], 0x1180}}], 0x1, 0x0) r7 = socket(0x11, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00'}) openat$vhost_vsock(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRESHEX=r4, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800070003"], 0x3c}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x80000, 0x1) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace$peek(0x19, r10, 0xfffffffffffffffe) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfffb, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x34, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x9}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x5}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x3}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x80}]}}]}, 0x68}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) io_cancel(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0xe, 0x7}, {0xf, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c8}, 0x20004804) r14 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r14, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 1.71405837s ago: executing program 5 (id=1057): r0 = socket(0x10, 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f00000000c0), 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0xffffffff}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xf23}, 0x18}}, 0x0) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) 1.291300157s ago: executing program 5 (id=1058): r0 = gettid() r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000002c0)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0), 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x80042, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffe, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd16c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x7fff]}}) r4 = dup(r3) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}}) syz_io_uring_setup(0x4b6d, &(0x7f00000009c0)={0x0, 0x4cd, 0x20, 0x1, 0x3d5, 0x0, r4}, &(0x7f00000004c0), &(0x7f0000000800)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000ac0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000a40)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x4, 0x1, 0x1, 0x1, {0xa, 0x4e21, 0x0, @private1, 0x8}}}, 0x0, 0x0, 0x0, {0x0, r6}}) write$UHID_INPUT(r4, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000240)={0x2, 0xfc}, 0x2) r7 = syz_usb_connect(0x4, 0x24, &(0x7f00000001c0)=ANY=[@ANYRES64=r0], 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f00000008c0)={0x10, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) socketpair(0x1f, 0x1, 0x40, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000280)={0xc, &(0x7f0000000140)={0x40, 0x23, 0x12, {0x12, 0x24, "88bd86df2974420a98c8b939a510a7f9"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43f}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xf4}, &(0x7f00000003c0)={0x20, 0x0, 0x7a, {0x78, "f28e69833386c86f373ee36975355a069a638fff492b831419d918e186636e420081fb78e46dc564fd914f824d3a7bf135a0c0406b9ae58b1417c489a0e4759d004cf0f54192a99214bfdbee6092fa87e8344f71991055806061f2eb1fb5276dfa226527eb8c85103498847fb9c603e9d8c995242dd742b1"}}, &(0x7f0000000480)={0x20, 0x1, 0x1, 0x81}, 0x0}) r9 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0x7, 0x1, 0x3, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x50, 0x4, [{{0x9, 0x4, 0x0, 0x66, 0x2, 0x0, 0x0, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x10, 0x10, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0x7, 0x1}}]}}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x250, 0x4, 0x6, 0x2, 0x8}, 0x48, &(0x7f00000005c0)={0x5, 0xf, 0x48, 0x1, [@generic={0x43, 0x10, 0xb, "67dd0a12ddb849cc6cf7b298b855448a9957f1291c015ea900194b73d29d23c2f2bcd56ee29a234ac87445d05e4e06cd46069ab7430e8588e1ba3ce5d859706b"}]}, 0x4, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x861}}, {0x1e, &(0x7f0000000680)=@string={0x1e, 0x3, "c9e00c379e4d7ef747981a198a20fc1949646bc37985b6c54bdaa932"}}, {0xeb, &(0x7f00000006c0)=@string={0xeb, 0x3, "cc7ed93f4e0818825c895afec31559c875d023aeb3dc0dd15a8a8fa0f4fcbf9f3637e937533b001b239bdf609654ded8e7e1a7d03323dea351c08c6b414a001cc755bfd2c9d899dc4a723582a676d71c71a027862e0c54ac9a01a0afe0540632c25b07ea496ee3a1336583f2aa6312a70697a5c66f7fff81fd9a3466491e28156d7b6138f1cb8cc889dd9a71f611750fe19a131ee4b04ebc666e2ab80488e2b99dd6d6dc70bc5b39b896e3d7584e921cf90da11b5d9a1db7c1e7542ccdecdd666007a7f5788545a6207e8cbffecf4c6ac2dd05177189afd01c27670f45297fe55954e84ff0c3cd9880"}}, {0x3e, &(0x7f00000007c0)=@string={0x3e, 0x3, "32090b5f5da3b96f959a19965560050b2e48d90ab697922353d39e251bef734fa48978e34e7479b3ea8253eadaf80f3b38ed4269df094867f7e59769"}}]}) ioctl$SCSI_IOCTL_SEND_COMMAND(r10, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000094a200004d9f5c3015592e23097eac5401eb7a8fa0c50120d5d00200000091fe9d4d831c2e4666b7d6a3d6c7134b0640f0fa18addf416f8b9613f41acc"]) r11 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r11, 0x1, 0x10, 0x0, &(0x7f00000001c0)) sendmsg$IPCTNL_MSG_CT_GET_DYING(r8, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) ioctl$I2C_SMBUS(r9, 0x720, &(0x7f0000000180)={0x1, 0x18, 0x1, &(0x7f0000000440)={0x1c, "a52422ffd60775c221c4031d467d6648a97569b7d49cc4492d050600000000ff00"}}) 1.149983272s ago: executing program 3 (id=1059): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fcntl$getown(r1, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x4, r2, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000000)) read$dsp(r4, &(0x7f0000000300)=""/79, 0x4f) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r5) pselect6(0x40, &(0x7f00000000c0)={0x6, 0xfffffffffffff7fd, 0x9, 0x3e, 0x2, 0x9, 0x0, 0x2}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0xffffdfffffffff22, 0x2, 0x8, 0x6}, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x2c936212e75072cf}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40880) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x13) openat$full(0xffffff9c, &(0x7f0000000000), 0x40c00, 0x0) clock_gettime(0x0, &(0x7f0000000280)) 1.027096798s ago: executing program 0 (id=1060): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x7, 0x2, 0x2, 0x0, 0xc6}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000000c0), 0xffffff86}, {&(0x7f0000000240)=""/185, 0xb9}, {&(0x7f0000000700)=""/228, 0xe4}], 0x3}, 0x0) getrlimit(0x6, &(0x7f0000005d40)) 0s ago: executing program 3 (id=1061): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): e USB device [ 252.914694][ T5831] usb 7-1: Product: syz [ 252.916237][ T812] usb 4-1: config 0 descriptor?? [ 252.924217][ T5831] usb 7-1: Manufacturer: syz [ 252.934617][ T5831] usb 7-1: SerialNumber: syz [ 252.974673][ T5831] usb 7-1: config 0 descriptor?? [ 253.001747][ T5831] usb 7-1: bad CDC descriptors [ 253.041357][ T5831] usb 7-1: unsupported MDLM descriptors [ 253.095801][ T8584] netlink: 'syz.2.685': attribute type 1 has an invalid length. [ 253.103889][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.685'. [ 253.162002][ T8584] netlink: 16 bytes leftover after parsing attributes in process `syz.2.685'. [ 253.306138][ T8576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.316487][ T8576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.729696][ T8552] delete_channel: no stack [ 253.874837][ T8589] EXT4-fs: Conflicting test_dummy_encryption options [ 254.971188][ T5831] usb 7-1: USB disconnect, device number 18 [ 255.005454][ T5912] powermate: Expected payload of 3--6 bytes, found 8 bytes! [ 255.038533][ T5912] input: Griffin PowerMate as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input13 [ 255.183093][ C1] powermate: config urb returned -71 [ 255.189766][ C1] powermate: config urb returned -71 [ 255.195409][ C1] powermate: config urb returned -71 [ 255.207821][ C1] powermate: config urb returned -71 [ 255.223215][ T5912] usb 3-1: USB disconnect, device number 30 [ 255.223274][ C1] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 255.465248][ T5913] usb 4-1: USB disconnect, device number 44 [ 255.759244][ T812] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 255.774139][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.781784][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.950812][ T812] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 255.963430][ T812] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 256.032753][ T812] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 256.074424][ T812] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 256.095487][ T812] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.114026][ T812] usb 7-1: Product: syz [ 256.125316][ T812] usb 7-1: Manufacturer: syz [ 256.135791][ T812] usb 7-1: SerialNumber: syz [ 256.160200][ T812] usb 7-1: config 0 descriptor?? [ 256.186298][ T8599] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 256.198059][ T812] usb 7-1: ucan: probing device on interface #0 [ 256.254235][ T812] usb 7-1: ucan: invalid endpoint configuration [ 256.276277][ T812] usb 7-1: ucan: probe failed; try to update the device firmware [ 256.362367][ T8619] netlink: 24 bytes leftover after parsing attributes in process `syz.3.705'. [ 258.357714][ T5912] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 258.375960][ T5919] usb 7-1: USB disconnect, device number 19 [ 258.415753][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 258.415770][ T30] audit: type=1326 audit(1760368634.729:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8632 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701d558 code=0x7ffc0000 [ 258.471975][ T8634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.518022][ T30] audit: type=1326 audit(1760368634.729:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8632 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 258.520786][ T8634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.647857][ T30] audit: type=1326 audit(1760368634.729:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8632 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701d558 code=0x7ffc0000 [ 258.726094][ T30] audit: type=1326 audit(1760368634.729:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8632 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701d558 code=0x7ffc0000 [ 258.802606][ T8651] netlink: 8 bytes leftover after parsing attributes in process `syz.6.713'. [ 258.840688][ T30] audit: type=1326 audit(1760368634.729:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8632 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701d558 code=0x7ffc0000 [ 259.021698][ T30] audit: type=1326 audit(1760368634.729:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8632 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701d558 code=0x7ffc0000 [ 259.044876][ T30] audit: type=1326 audit(1760368634.779:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8632 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701d558 code=0x7ffc0000 [ 259.076411][ T30] audit: type=1326 audit(1760368634.779:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8632 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701d558 code=0x7ffc0000 [ 259.098991][ T30] audit: type=1326 audit(1760368634.779:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8632 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701d558 code=0x7ffc0000 [ 259.127098][ T30] audit: type=1326 audit(1760368634.779:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8632 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701d558 code=0x7ffc0000 [ 259.207752][ T812] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 259.402076][ T812] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 259.413218][ T812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.514726][ T812] usb 1-1: Product: syz [ 259.529600][ T812] usb 1-1: Manufacturer: syz [ 259.545068][ T812] usb 1-1: SerialNumber: syz [ 259.583538][ T812] usb 1-1: config 0 descriptor?? [ 260.177107][ T8667] FAULT_INJECTION: forcing a failure. [ 260.177107][ T8667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.204384][ T8667] CPU: 1 UID: 0 PID: 8667 Comm: syz.2.718 Not tainted syzkaller #0 PREEMPT(full) [ 260.204410][ T8667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 260.204421][ T8667] Call Trace: [ 260.204429][ T8667] [ 260.204437][ T8667] dump_stack_lvl+0x189/0x250 [ 260.204462][ T8667] ? __pfx____ratelimit+0x10/0x10 [ 260.204488][ T8667] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.204506][ T8667] ? __pfx__printk+0x10/0x10 [ 260.204524][ T8667] ? __might_fault+0xb0/0x130 [ 260.204554][ T8667] should_fail_ex+0x414/0x560 [ 260.204584][ T8667] _copy_from_iter+0x1de/0x1790 [ 260.204610][ T8667] ? rcu_is_watching+0x15/0xb0 [ 260.204637][ T8667] ? kmalloc_reserve+0xbd/0x290 [ 260.204661][ T8667] ? __pfx__copy_from_iter+0x10/0x10 [ 260.204683][ T8667] ? __build_skb_around+0x262/0x3f0 [ 260.204709][ T8667] ? netlink_sendmsg+0x642/0xb30 [ 260.204731][ T8667] ? skb_put+0x11b/0x210 [ 260.204757][ T8667] netlink_sendmsg+0x6b2/0xb30 [ 260.204791][ T8667] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.204816][ T8667] ? __import_iovec+0x5d4/0x7f0 [ 260.204836][ T8667] ? aa_sock_msg_perm+0xf1/0x1d0 [ 260.204857][ T8667] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 260.204878][ T8667] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.204902][ T8667] __sock_sendmsg+0x21c/0x270 [ 260.204926][ T8667] ____sys_sendmsg+0x505/0x830 [ 260.204956][ T8667] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.204996][ T8667] ___sys_sendmsg+0x21f/0x2a0 [ 260.205015][ T8667] ? __pfx____sys_sendmsg+0x10/0x10 [ 260.205074][ T8667] ? __fget_files+0x2a/0x420 [ 260.205098][ T8667] ? __fget_files+0x3a0/0x420 [ 260.205128][ T8667] __sys_sendmsg+0x164/0x220 [ 260.205161][ T8667] ? __pfx___sys_sendmsg+0x10/0x10 [ 260.205194][ T8667] ? __pfx_ksys_write+0x10/0x10 [ 260.205216][ T8667] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 260.205237][ T8667] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.205258][ T8667] __do_fast_syscall_32+0xb6/0x2b0 [ 260.205277][ T8667] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.205297][ T8667] do_fast_syscall_32+0x34/0x80 [ 260.205316][ T8667] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 260.205336][ T8667] RIP: 0023:0xf701d539 [ 260.205352][ T8667] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 260.205366][ T8667] RSP: 002b:00000000f540d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 260.205385][ T8667] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080006000 [ 260.205397][ T8667] RDX: 0000000000028000 RSI: 0000000000000000 RDI: 0000000000000000 [ 260.205407][ T8667] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 260.205416][ T8667] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 260.205426][ T8667] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 260.205450][ T8667] [ 261.408324][ T8687] netlink: 'syz.2.722': attribute type 13 has an invalid length. [ 261.527708][ T43] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 261.722608][ T43] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 261.738163][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.780064][ T43] usb 4-1: Product: syz [ 261.786097][ T43] usb 4-1: Manufacturer: syz [ 261.859023][ T8687] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 261.917579][ T43] usb 4-1: SerialNumber: syz [ 262.324690][ T43] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 262.501321][ T5912] usb 1-1: USB disconnect, device number 41 [ 262.568663][ T24] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 262.825208][ T43] usb 4-1: USB disconnect, device number 45 [ 263.796466][ T24] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 263.812970][ T24] ath9k_htc: Failed to initialize the device [ 263.822555][ T43] usb 4-1: ath9k_htc: USB layer deinitialized [ 263.875861][ T812] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 263.887558][ T8724] FAULT_INJECTION: forcing a failure. [ 263.887558][ T8724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.072508][ T8726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.731'. [ 264.108402][ T8724] CPU: 0 UID: 0 PID: 8724 Comm: syz.6.732 Not tainted syzkaller #0 PREEMPT(full) [ 264.108433][ T8724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 264.108443][ T8724] Call Trace: [ 264.108454][ T8724] [ 264.108463][ T8724] dump_stack_lvl+0x189/0x250 [ 264.108502][ T8724] ? __pfx____ratelimit+0x10/0x10 [ 264.108531][ T8724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.108547][ T8724] ? __pfx__printk+0x10/0x10 [ 264.108566][ T8724] ? __might_fault+0xb0/0x130 [ 264.108594][ T8724] should_fail_ex+0x414/0x560 [ 264.108627][ T8724] fpu__restore_sig+0x9de/0x1100 [ 264.108655][ T8724] ? __pfx_fpu__restore_sig+0x10/0x10 [ 264.108699][ T8724] ia32_restore_sigcontext+0x449/0x5b0 [ 264.108727][ T8724] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 264.108752][ T8724] ? _raw_spin_lock_irq+0xae/0xf0 [ 264.108775][ T8724] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 264.108806][ T8724] ? _raw_spin_unlock_irq+0x23/0x50 [ 264.108826][ T8724] ? lockdep_hardirqs_on+0x9c/0x150 [ 264.108843][ T8724] __ia32_compat_sys_rt_sigreturn+0x1a9/0x260 [ 264.108868][ T8724] ? __pfx___ia32_compat_sys_rt_sigreturn+0x10/0x10 [ 264.109006][ T8724] ? do_int80_emulation+0xec/0x390 [ 264.109030][ T8724] ? asm_int80_emulation+0x1a/0x20 [ 264.109045][ T8724] do_int80_emulation+0x126/0x390 [ 264.109063][ T8724] ? clear_bhb_loop+0x60/0xb0 [ 264.109078][ T8724] ? clear_bhb_loop+0x60/0xb0 [ 264.109097][ T8724] asm_int80_emulation+0x1a/0x20 [ 264.109113][ T8724] RIP: 0023:0xf7ff1537 [ 264.109130][ T8724] Code: 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 264.109145][ T8724] RSP: 002b:00000000f54e655c EFLAGS: 00000206 [ 264.109162][ T8724] RAX: 000000000000013c RBX: 0000000000000005 RCX: 0000000080000140 [ 264.109174][ T8724] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 264.109185][ T8724] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 264.109195][ T8724] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 264.109206][ T8724] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 264.109232][ T8724] [ 265.367785][ T5919] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 265.531526][ T5919] usb 7-1: Using ep0 maxpacket: 32 [ 265.539668][ T5919] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 265.556943][ T5919] usb 7-1: config 0 interface 0 has no altsetting 0 [ 265.629821][ T5919] usb 7-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 265.657645][ T5919] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.710508][ T5919] usb 7-1: config 0 descriptor?? [ 265.807587][ T5913] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 265.905357][ T8749] program syz.0.741 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 265.931628][ T8749] netlink: 60 bytes leftover after parsing attributes in process `syz.0.741'. [ 266.011126][ T5913] usb 3-1: Using ep0 maxpacket: 8 [ 266.019071][ T5913] usb 3-1: config 0 has no interfaces? [ 266.026210][ T5913] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 266.036271][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.120602][ T5913] usb 3-1: config 0 descriptor?? [ 266.124088][ T8749] netlink: 16 bytes leftover after parsing attributes in process `syz.0.741'. [ 266.540507][ T5913] usb 3-1: USB disconnect, device number 32 [ 266.757817][ T8761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.742'. [ 267.563276][ T8767] netlink: 'syz.2.744': attribute type 4 has an invalid length. [ 268.483341][ T8776] netlink: 260 bytes leftover after parsing attributes in process `syz.5.745'. [ 268.598698][ T5919] usbhid 7-1:0.0: can't add hid device: -71 [ 268.605987][ T5919] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 268.722518][ T5919] usb 7-1: USB disconnect, device number 20 [ 269.411959][ T5875] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 269.670814][ T5875] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 269.682846][ T5875] usb 1-1: config 0 has no interface number 0 [ 269.697978][ T5875] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 269.734364][ T5875] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 269.758407][ T5875] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid maxpacket 43776, setting to 64 [ 269.881086][ T5875] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 269.890593][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.934910][ T5875] usb 1-1: Product: syz [ 269.956642][ T5875] usb 1-1: Manufacturer: syz [ 269.969283][ T5875] usb 1-1: SerialNumber: syz [ 269.986844][ T5875] usb 1-1: config 0 descriptor?? [ 270.115522][ T8778] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 270.123936][ T8778] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 270.160192][ T5875] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 270.191908][ T5875] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 270.267612][ T43] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 270.364888][ T24] usb 1-1: USB disconnect, device number 42 [ 270.396583][ T24] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 270.409796][ T24] cyberjack 1-1:0.69: device disconnected [ 270.439295][ T43] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 270.448294][ T43] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.462563][ T43] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 270.471617][ T43] usb 6-1: config 1 has no interface number 0 [ 270.481948][ T43] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 270.494394][ T43] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 270.518793][ T43] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 270.528261][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.558210][ T43] usb 6-1: Product: syz [ 270.562780][ T43] usb 6-1: Manufacturer: syz [ 270.575589][ T43] usb 6-1: SerialNumber: syz [ 270.674323][ T8798] netlink: 28 bytes leftover after parsing attributes in process `syz.3.755'. [ 270.864646][ T8791] netlink: 36 bytes leftover after parsing attributes in process `syz.5.751'. [ 271.005004][ T43] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 271.060307][ T43] usb 6-1: USB disconnect, device number 30 [ 271.675694][ T8827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.759'. [ 271.917566][ T43] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 272.270362][ T43] usb 3-1: config 0 has no interfaces? [ 272.369528][ T8835] syzkaller0: entered promiscuous mode [ 272.375347][ T8835] syzkaller0: entered allmulticast mode [ 272.421033][ T43] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 272.440788][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.456717][ T43] usb 3-1: Product: syz [ 272.477801][ T43] usb 3-1: Manufacturer: syz [ 272.484031][ T43] usb 3-1: SerialNumber: syz [ 272.514613][ T43] usb 3-1: config 0 descriptor?? [ 272.921017][ T8846] netlink: 4 bytes leftover after parsing attributes in process `syz.5.766'. [ 273.767528][ T812] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 273.968345][ T812] usb 1-1: Using ep0 maxpacket: 16 [ 273.994782][ T812] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 274.015638][ T812] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 274.079637][ T5831] usb 3-1: USB disconnect, device number 33 [ 274.097916][ T812] usb 1-1: Product: syz [ 274.103365][ T812] usb 1-1: SerialNumber: syz [ 274.122327][ T812] usb 1-1: config 0 descriptor?? [ 274.149383][ T812] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 274.193210][ T812] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 274.227624][ T43] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 274.229871][ T812] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 274.273338][ T812] dvb_usb_af9035 1-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 274.367612][ T43] usb 6-1: device descriptor read/64, error -71 [ 274.507783][ T981] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 274.597900][ T5831] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 274.607550][ T43] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 274.622417][ T5912] usb 1-1: USB disconnect, device number 43 [ 274.647910][ T981] usb 4-1: device descriptor read/64, error -71 [ 274.757769][ T43] usb 6-1: device descriptor read/64, error -71 [ 274.764930][ T5831] usb 3-1: Using ep0 maxpacket: 32 [ 274.779371][ T5831] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 274.789270][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.803419][ T5831] usb 3-1: config 0 descriptor?? [ 274.868497][ T43] usb usb6-port1: attempt power cycle [ 274.888057][ T981] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 274.917813][ T5919] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 275.019323][ T981] usb 4-1: device descriptor read/64, error -71 [ 275.026918][ T5831] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 275.044382][ T5831] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 275.058804][ T5831] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 275.066793][ T5831] usb 3-1: media controller created [ 275.067707][ T5919] usb 7-1: Using ep0 maxpacket: 32 [ 275.080489][ T5919] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 275.091573][ T5919] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.095446][ T5831] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 275.107233][ T5919] usb 7-1: config 0 descriptor?? [ 275.158573][ T981] usb usb4-port1: attempt power cycle [ 275.160860][ T8872] FAULT_INJECTION: forcing a failure. [ 275.160860][ T8872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.178887][ T8872] CPU: 1 UID: 0 PID: 8872 Comm: syz.0.775 Not tainted syzkaller #0 PREEMPT(full) [ 275.178916][ T8872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 275.178926][ T8872] Call Trace: [ 275.178935][ T8872] [ 275.178943][ T8872] dump_stack_lvl+0x189/0x250 [ 275.178973][ T8872] ? __pfx____ratelimit+0x10/0x10 [ 275.179003][ T8872] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.179022][ T8872] ? __pfx__printk+0x10/0x10 [ 275.179053][ T8872] should_fail_ex+0x414/0x560 [ 275.179086][ T8872] _copy_to_user+0x31/0xb0 [ 275.179110][ T8872] simple_read_from_buffer+0xe1/0x170 [ 275.179137][ T8872] proc_fail_nth_read+0x1b3/0x220 [ 275.179166][ T8872] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 275.179194][ T8872] ? rw_verify_area+0x2a6/0x4d0 [ 275.179212][ T8872] ? __lock_acquire+0xab9/0xd20 [ 275.179231][ T8872] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 275.179253][ T8872] vfs_read+0x200/0xa30 [ 275.179267][ T8872] ? fdget_pos+0x247/0x320 [ 275.179291][ T8872] ? __pfx___mutex_lock+0x10/0x10 [ 275.179311][ T8872] ? __pfx_vfs_read+0x10/0x10 [ 275.179328][ T8872] ? __fget_files+0x2a/0x420 [ 275.179351][ T8872] ? __fget_files+0x3a0/0x420 [ 275.179369][ T8872] ? __fget_files+0x2a/0x420 [ 275.179394][ T8872] ksys_read+0x145/0x250 [ 275.179414][ T8872] ? __pfx_ksys_read+0x10/0x10 [ 275.179435][ T8872] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 275.179454][ T8872] ? lockdep_hardirqs_on+0x9c/0x150 [ 275.179473][ T8872] __do_fast_syscall_32+0xb6/0x2b0 [ 275.179499][ T8872] do_fast_syscall_32+0x34/0x80 [ 275.179516][ T8872] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 275.179536][ T8872] RIP: 0023:0xf7f76539 [ 275.179551][ T8872] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 275.179566][ T8872] RSP: 002b:00000000f5445590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 275.179605][ T8872] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5445620 [ 275.179617][ T8872] RDX: 000000000000000f RSI: 00000000f7405ff4 RDI: 0000000000000000 [ 275.179629][ T8872] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 275.179639][ T8872] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 275.179655][ T8872] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 275.179674][ T8872] [ 275.427878][ T8873] FAULT_INJECTION: forcing a failure. [ 275.427878][ T8873] name failslab, interval 1, probability 0, space 0, times 0 [ 275.431450][ T5919] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 275.440744][ T8873] CPU: 1 UID: 0 PID: 8873 Comm: syz.2.772 Not tainted syzkaller #0 PREEMPT(full) [ 275.440787][ T8873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 275.440797][ T8873] Call Trace: [ 275.440807][ T8873] [ 275.440816][ T8873] dump_stack_lvl+0x189/0x250 [ 275.440838][ T8873] ? __pfx____ratelimit+0x10/0x10 [ 275.440866][ T8873] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.440884][ T8873] ? __pfx__printk+0x10/0x10 [ 275.440908][ T8873] ? __pfx___might_resched+0x10/0x10 [ 275.440935][ T8873] should_fail_ex+0x414/0x560 [ 275.440966][ T8873] should_failslab+0xa8/0x100 [ 275.440989][ T8873] __kmalloc_noprof+0xcb/0x7f0 [ 275.441006][ T8873] ? kfree+0x4d/0x6d0 [ 275.441019][ T8873] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 275.441046][ T8873] tomoyo_realpath_from_path+0xe3/0x5d0 [ 275.441067][ T8873] ? tomoyo_domain+0xd9/0x130 [ 275.441089][ T8873] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 275.441114][ T8873] tomoyo_path_number_perm+0x1e8/0x5a0 [ 275.441141][ T8873] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 275.441183][ T8873] ? __lock_acquire+0xab9/0xd20 [ 275.441222][ T8873] ? __fget_files+0x2a/0x420 [ 275.441247][ T8873] ? __fget_files+0x3a0/0x420 [ 275.441266][ T8873] ? __fget_files+0x2a/0x420 [ 275.441289][ T8873] security_file_ioctl_compat+0xcb/0x2d0 [ 275.441315][ T8873] __ia32_compat_sys_ioctl+0x128/0x840 [ 275.441336][ T8873] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 275.441353][ T8873] ? __fget_files+0x3a0/0x420 [ 275.441380][ T8873] ? fput+0xa0/0xd0 [ 275.441402][ T8873] ? ksys_write+0x22a/0x250 [ 275.441419][ T8873] ? exc_page_fault+0x82/0x100 [ 275.441436][ T8873] ? __pfx_ksys_write+0x10/0x10 [ 275.441457][ T8873] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 275.441477][ T8873] ? lockdep_hardirqs_on+0x9c/0x150 [ 275.441497][ T8873] __do_fast_syscall_32+0xb6/0x2b0 [ 275.441516][ T8873] ? lockdep_hardirqs_on+0x9c/0x150 [ 275.441537][ T8873] do_fast_syscall_32+0x34/0x80 [ 275.441555][ T8873] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 275.441588][ T8873] RIP: 0023:0xf701d539 [ 275.441604][ T8873] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 275.441618][ T8873] RSP: 002b:00000000f53ec55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 275.441637][ T8873] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720 [ 275.441648][ T8873] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 275.441659][ T8873] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 275.441669][ T8873] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 275.441679][ T8873] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 275.441706][ T8873] [ 275.441739][ T8873] ERROR: Out of memory at tomoyo_realpath_from_path. [ 275.480344][ T5919] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 275.492676][ T5831] az6027: usb out operation failed. (-71) [ 275.500457][ T5919] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 275.500515][ T5919] usb 7-1: media controller created [ 275.536776][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 275.544380][ T5831] az6027: usb out operation failed. (-71) [ 275.774435][ T43] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 275.783537][ T5831] stb0899_attach: Driver disabled by Kconfig [ 275.789619][ T5831] az6027: no front-end attached [ 275.789619][ T5831] [ 275.797013][ T5831] az6027: usb out operation failed. (-71) [ 275.803382][ T5831] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 275.811034][ T43] usb 6-1: device descriptor read/8, error -71 [ 275.819408][ T5831] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input14 [ 275.833983][ T5831] dvb-usb: schedule remote query interval to 400 msecs. [ 275.841364][ T5831] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 275.855912][ T5831] usb 3-1: USB disconnect, device number 34 [ 275.869651][ T5919] az6027: usb out operation failed. (-71) [ 275.881225][ T5919] stb0899_attach: Driver disabled by Kconfig [ 275.890817][ T5919] az6027: no front-end attached [ 275.890817][ T5919] [ 275.900336][ T5919] az6027: usb out operation failed. (-71) [ 275.906505][ T5919] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 275.925259][ T5919] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input15 [ 275.943555][ T5831] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 275.955421][ T5919] dvb-usb: schedule remote query interval to 400 msecs. [ 275.965944][ T5919] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 275.992353][ T5919] usb 7-1: USB disconnect, device number 21 [ 276.057803][ T981] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 276.066106][ T43] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 276.069547][ T5919] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 276.088591][ T981] usb 4-1: device descriptor read/8, error -71 [ 276.095597][ T43] usb 6-1: device descriptor read/8, error -71 [ 276.217903][ T43] usb usb6-port1: unable to enumerate USB device [ 276.338789][ T981] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 276.388475][ T981] usb 4-1: device descriptor read/8, error -71 [ 276.515375][ T981] usb usb4-port1: unable to enumerate USB device [ 276.877798][ T812] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 277.251315][ T812] usb 7-1: Using ep0 maxpacket: 8 [ 277.267194][ T812] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.283261][ T812] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 277.300960][ T812] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.362561][ T812] usb 7-1: config 0 descriptor?? [ 277.407573][ T5919] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 277.416327][ T812] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 277.484765][ T8900] FAULT_INJECTION: forcing a failure. [ 277.484765][ T8900] name failslab, interval 1, probability 0, space 0, times 0 [ 277.520222][ T8900] CPU: 1 UID: 0 PID: 8900 Comm: syz.3.783 Not tainted syzkaller #0 PREEMPT(full) [ 277.520248][ T8900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 277.520258][ T8900] Call Trace: [ 277.520266][ T8900] [ 277.520273][ T8900] dump_stack_lvl+0x189/0x250 [ 277.520298][ T8900] ? __pfx____ratelimit+0x10/0x10 [ 277.520324][ T8900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.520342][ T8900] ? __pfx__printk+0x10/0x10 [ 277.520365][ T8900] ? __pfx___might_resched+0x10/0x10 [ 277.520390][ T8900] ? fs_reclaim_acquire+0x7d/0x100 [ 277.520405][ T8900] should_fail_ex+0x414/0x560 [ 277.520423][ T8900] should_failslab+0xa8/0x100 [ 277.520440][ T8900] kmem_cache_alloc_node_noprof+0x77/0x710 [ 277.520458][ T8900] ? __alloc_skb+0x112/0x2d0 [ 277.520489][ T8900] __alloc_skb+0x112/0x2d0 [ 277.520516][ T8900] netlink_dump+0x1b7/0xe90 [ 277.520537][ T8900] ? __nla_parse+0x40/0x60 [ 277.520550][ T8900] ? __pfx_netlink_dump+0x10/0x10 [ 277.520560][ T8900] ? ip_set_dump_start+0x2b8/0x410 [ 277.520585][ T8900] ? netlink_lookup+0x30/0x200 [ 277.520605][ T8900] ? netlink_lookup+0x30/0x200 [ 277.520625][ T8900] ? netlink_lookup+0x30/0x200 [ 277.520655][ T8900] __netlink_dump_start+0x5cb/0x7e0 [ 277.520682][ T8900] ip_set_dump+0x13e/0x1c0 [ 277.520694][ T8900] ? __pfx_ip_set_dump+0x10/0x10 [ 277.520705][ T8900] ? __pfx_ip_set_dump_start+0x10/0x10 [ 277.520716][ T8900] ? __pfx_ip_set_dump_do+0x10/0x10 [ 277.520726][ T8900] ? __pfx_ip_set_dump_done+0x10/0x10 [ 277.520752][ T8900] nfnetlink_rcv_msg+0xb4d/0x1130 [ 277.520776][ T8900] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 277.520815][ T8900] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 277.520832][ T8900] ? kasan_save_track+0x4f/0x80 [ 277.520869][ T8900] netlink_rcv_skb+0x208/0x470 [ 277.520881][ T8900] ? lockdep_hardirqs_on+0x9c/0x150 [ 277.520894][ T8900] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 277.520917][ T8900] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 277.520952][ T8900] ? bpf_lsm_capable+0x9/0x20 [ 277.520968][ T8900] ? security_capable+0x7e/0x2e0 [ 277.520986][ T8900] nfnetlink_rcv+0x282/0x2590 [ 277.520999][ T8900] ? __dev_queue_xmit+0x27b/0x3b50 [ 277.521011][ T8900] ? __dev_queue_xmit+0x1d79/0x3b50 [ 277.521019][ T8900] ? kasan_save_track+0x3e/0x80 [ 277.521028][ T8900] ? __kasan_slab_alloc+0x6c/0x80 [ 277.521050][ T8900] ? __dev_queue_xmit+0x27b/0x3b50 [ 277.521079][ T8900] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 277.521098][ T8900] ? __pfx___dev_queue_xmit+0x10/0x10 [ 277.521128][ T8900] ? ref_tracker_free+0x63a/0x7d0 [ 277.521145][ T8900] ? __asan_memcpy+0x40/0x70 [ 277.521161][ T8900] ? __pfx_ref_tracker_free+0x10/0x10 [ 277.521177][ T8900] ? __skb_clone+0x63/0x7a0 [ 277.521199][ T8900] ? __skb_clone+0x483/0x7a0 [ 277.521222][ T8900] ? skb_clone+0x246/0x3a0 [ 277.521242][ T8900] ? __netlink_deliver_tap+0x807/0x850 [ 277.521266][ T8900] ? netlink_deliver_tap+0x2e/0x1b0 [ 277.521306][ T8900] ? netlink_deliver_tap+0x2e/0x1b0 [ 277.521339][ T8900] netlink_unicast+0x82f/0x9e0 [ 277.521370][ T8900] ? __pfx_netlink_unicast+0x10/0x10 [ 277.521401][ T8900] ? netlink_sendmsg+0x642/0xb30 [ 277.521422][ T8900] ? skb_put+0x11b/0x210 [ 277.521450][ T8900] netlink_sendmsg+0x805/0xb30 [ 277.521481][ T8900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.521508][ T8900] ? __import_iovec+0x5d4/0x7f0 [ 277.521526][ T8900] ? aa_sock_msg_perm+0xf1/0x1d0 [ 277.521546][ T8900] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 277.521566][ T8900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.521589][ T8900] __sock_sendmsg+0x21c/0x270 [ 277.521614][ T8900] ____sys_sendmsg+0x505/0x830 [ 277.521645][ T8900] ? __pfx_____sys_sendmsg+0x10/0x10 [ 277.521689][ T8900] ___sys_sendmsg+0x21f/0x2a0 [ 277.521709][ T8900] ? __pfx____sys_sendmsg+0x10/0x10 [ 277.521774][ T8900] ? __fget_files+0x2a/0x420 [ 277.521795][ T8900] ? __fget_files+0x3a0/0x420 [ 277.521828][ T8900] __sys_sendmsg+0x164/0x220 [ 277.521856][ T8900] ? __pfx___sys_sendmsg+0x10/0x10 [ 277.521891][ T8900] ? __pfx_ksys_write+0x10/0x10 [ 277.521914][ T8900] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 277.521935][ T8900] ? lockdep_hardirqs_on+0x9c/0x150 [ 277.521957][ T8900] __do_fast_syscall_32+0xb6/0x2b0 [ 277.521977][ T8900] ? lockdep_hardirqs_on+0x9c/0x150 [ 277.522000][ T8900] do_fast_syscall_32+0x34/0x80 [ 277.522019][ T8900] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 277.522041][ T8900] RIP: 0023:0xf7fc7539 [ 277.522062][ T8900] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 277.522077][ T8900] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 277.522097][ T8900] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000380 [ 277.522110][ T8900] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 277.522121][ T8900] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 277.522132][ T8900] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 277.522146][ T8900] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 277.522175][ T8900] [ 278.022585][ T812] gspca_vc032x: reg_r err -110 [ 278.027551][ T812] vc032x 7-1:0.0: probe with driver vc032x failed with error -110 [ 278.213184][ T5919] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 278.229417][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.356246][ T5919] usb 1-1: Product: syz [ 278.395037][ T5919] usb 1-1: Manufacturer: syz [ 278.399850][ T5919] usb 1-1: SerialNumber: syz [ 278.408924][ T5919] usb 1-1: config 0 descriptor?? [ 278.501623][ T8909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.785'. [ 279.421386][ T8921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.788'. [ 279.634417][ T8925] FAULT_INJECTION: forcing a failure. [ 279.634417][ T8925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.662045][ T981] usb 7-1: USB disconnect, device number 22 [ 279.683816][ T8925] CPU: 1 UID: 0 PID: 8925 Comm: syz.5.789 Not tainted syzkaller #0 PREEMPT(full) [ 279.683841][ T8925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 279.683852][ T8925] Call Trace: [ 279.683859][ T8925] [ 279.683868][ T8925] dump_stack_lvl+0x189/0x250 [ 279.683893][ T8925] ? __pfx____ratelimit+0x10/0x10 [ 279.683919][ T8925] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.683937][ T8925] ? __pfx__printk+0x10/0x10 [ 279.683967][ T8925] should_fail_ex+0x414/0x560 [ 279.683997][ T8925] _copy_to_user+0x31/0xb0 [ 279.684021][ T8925] simple_read_from_buffer+0xe1/0x170 [ 279.684047][ T8925] proc_fail_nth_read+0x1b3/0x220 [ 279.684075][ T8925] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 279.684103][ T8925] ? rw_verify_area+0x2a6/0x4d0 [ 279.684118][ T8925] ? __lock_acquire+0xab9/0xd20 [ 279.684137][ T8925] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 279.684163][ T8925] vfs_read+0x200/0xa30 [ 279.684181][ T8925] ? fdget_pos+0x247/0x320 [ 279.684205][ T8925] ? __pfx___mutex_lock+0x10/0x10 [ 279.684224][ T8925] ? __pfx_vfs_read+0x10/0x10 [ 279.684241][ T8925] ? __fget_files+0x2a/0x420 [ 279.684264][ T8925] ? __fget_files+0x3a0/0x420 [ 279.684282][ T8925] ? __fget_files+0x2a/0x420 [ 279.684309][ T8925] ksys_read+0x145/0x250 [ 279.684325][ T8925] ? exc_page_fault+0x82/0x100 [ 279.684342][ T8925] ? __pfx_ksys_read+0x10/0x10 [ 279.684363][ T8925] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 279.684383][ T8925] ? lockdep_hardirqs_on+0x9c/0x150 [ 279.684404][ T8925] __do_fast_syscall_32+0xb6/0x2b0 [ 279.684422][ T8925] ? lockdep_hardirqs_on+0x9c/0x150 [ 279.684451][ T8925] do_fast_syscall_32+0x34/0x80 [ 279.684468][ T8925] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 279.684489][ T8925] RIP: 0023:0xf705d539 [ 279.684503][ T8925] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 279.684519][ T8925] RSP: 002b:00000000f544d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 279.684540][ T8925] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f544d620 [ 279.684552][ T8925] RDX: 000000000000000f RSI: 00000000f73f5ff4 RDI: 0000000000000000 [ 279.684563][ T8925] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 279.684572][ T8925] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 279.684580][ T8925] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 279.684606][ T8925] [ 280.001574][ T812] usb 1-1: USB disconnect, device number 44 [ 280.236239][ T8930] netlink: 'syz.5.792': attribute type 5 has an invalid length. [ 280.275110][ T8930] netlink: 'syz.5.792': attribute type 3 has an invalid length. [ 280.580796][ T8938] netlink: 'syz.3.794': attribute type 1 has an invalid length. [ 280.619853][ T812] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 280.651705][ T8938] 8021q: adding VLAN 0 to HW filter on device bond1 [ 280.765651][ T8938] bond1: (slave veth3): Enslaving as an active interface with a down link [ 280.807889][ T812] usb 1-1: Using ep0 maxpacket: 8 [ 280.835367][ T812] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 280.849951][ T812] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 280.854098][ T8951] binder: 8949:8951 ioctl 89f8 80002780 returned -22 [ 280.862596][ T812] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 280.867939][ T8938] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 280.877402][ T812] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 280.912615][ T812] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 280.951728][ T812] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 280.978082][ T812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.985038][ T8951] binder: 8949:8951 ioctl c0306201 0 returned -14 [ 281.128515][ T8938] bond1: (slave wlan1): Enslaving as an active interface with a down link [ 281.229833][ T812] usb 1-1: GET_CAPABILITIES returned 0 [ 281.281491][ T812] usbtmc 1-1:16.0: can't read capabilities [ 281.520378][ T5913] usb 1-1: USB disconnect, device number 45 [ 283.141041][ T8985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.802'. [ 283.397903][ T43] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 284.637049][ T43] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 284.710413][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.789399][ T43] usb 6-1: Product: syz [ 284.877531][ T43] usb 6-1: Manufacturer: syz [ 284.952867][ T43] usb 6-1: SerialNumber: syz [ 285.053058][ T43] usb 6-1: config 0 descriptor?? [ 285.512203][ T9006] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 285.887668][ T43] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 286.586325][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 286.756122][ T43] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 286.768055][ T43] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 286.786489][ T43] usb 1-1: Product: syz [ 286.841870][ T43] usb 1-1: SerialNumber: syz [ 286.889529][ T43] usb 1-1: config 0 descriptor?? [ 286.900371][ T9021] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 286.909378][ T43] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 286.943187][ T43] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 286.992292][ T43] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 287.022131][ T43] dvb_usb_af9035 1-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 287.234652][ T812] usb 6-1: USB disconnect, device number 35 [ 287.390542][ T43] usb 1-1: USB disconnect, device number 46 [ 288.290047][ T5919] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 288.447737][ T43] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 288.475224][ T5919] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 288.494816][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.505630][ T5919] usb 1-1: Product: syz [ 288.535833][ T5919] usb 1-1: Manufacturer: syz [ 288.547195][ T5919] usb 1-1: SerialNumber: syz [ 288.751431][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 288.867952][ T43] usb 6-1: config 0 has an invalid interface number: 66 but max is 0 [ 288.876254][ T43] usb 6-1: config 0 has no interface number 0 [ 288.909946][ T43] usb 6-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 288.938643][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.961910][ T43] usb 6-1: Product: syz [ 288.976871][ T43] usb 6-1: Manufacturer: syz [ 288.987540][ T43] usb 6-1: SerialNumber: syz [ 289.001745][ T43] usb 6-1: config 0 descriptor?? [ 289.015344][ T43] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 289.023532][ T43] dvb-usb: bulk message failed: -22 (2/0) [ 289.033769][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 289.048747][ T9053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.826'. [ 289.117691][ T43] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 289.134828][ T43] usb 6-1: media controller created [ 289.210982][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 289.219348][ T9040] dvb-usb: bulk message failed: -22 (3/0) [ 289.264818][ T43] cxusb: set interface failed [ 289.273663][ T9043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.822'. [ 289.300683][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 289.412813][ T43] DVB: Unable to find symbol lgdt330x_attach() [ 289.432110][ T43] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 289.608183][ T43] rc_core: IR keymap rc-dvico-portable not found [ 289.614817][ T43] Registered IR keymap rc-empty [ 289.632365][ T43] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 289.673682][ T43] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input16 [ 289.711786][ T43] dvb-usb: schedule remote query interval to 100 msecs. [ 289.727792][ T43] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 289.846016][ T981] dvb-usb: bulk message failed: -22 (1/0) [ 289.930304][ T5919] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 289.960098][ T5919] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 289.978297][ T981] dvb-usb: bulk message failed: -22 (1/0) [ 290.040907][ T5919] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 290.092749][ T981] dvb-usb: bulk message failed: -22 (1/0) [ 290.121991][ T5919] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 290.217797][ T5919] usb 1-1: USB disconnect, device number 47 [ 290.232174][ T981] dvb-usb: bulk message failed: -22 (1/0) [ 290.347582][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 290.457502][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 290.497559][ T981] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 290.567867][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 290.592463][ T9075] netlink: 24 bytes leftover after parsing attributes in process `syz.0.831'. [ 290.679354][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 290.688682][ T981] usb 7-1: unable to get BOS descriptor or descriptor too short [ 290.697875][ T981] usb 7-1: not running at top speed; connect to a high speed hub [ 290.728980][ T981] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 290.731245][ T9080] netlink: 36 bytes leftover after parsing attributes in process `syz.0.833'. [ 290.738442][ T981] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 290.738466][ T981] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 290.818479][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 290.863703][ T981] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 290.883254][ T981] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.922346][ T981] usb 7-1: Product: syz [ 290.926620][ T981] usb 7-1: Manufacturer: syz [ 290.931341][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 290.957560][ T981] usb 7-1: SerialNumber: syz [ 290.978751][ T5919] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 291.037690][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 291.148485][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 291.168365][ T5919] usb 4-1: Using ep0 maxpacket: 16 [ 291.190367][ T5919] usb 4-1: config 252 has an invalid interface number: 15 but max is 0 [ 291.207526][ T5919] usb 4-1: config 252 has no interface number 0 [ 291.223676][ T5919] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 291.252865][ T5919] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 8195, setting to 1024 [ 291.257622][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 291.302935][ T43] usb 6-1: USB disconnect, device number 36 [ 291.324761][ T5919] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 291.347743][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.397524][ T5919] usb 4-1: Product: syz [ 291.401841][ T5919] usb 4-1: Manufacturer: syz [ 291.426611][ T5919] usb 4-1: SerialNumber: syz [ 291.449697][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.837'. [ 291.497782][ T981] usb 7-1: 0:2 : does not exist [ 291.532712][ T9094] sctp: [Deprecated]: syz.2.836 (pid 9094) Use of struct sctp_assoc_value in delayed_ack socket option. [ 291.532712][ T9094] Use struct sctp_sack_info instead [ 291.546228][ T43] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 291.581244][ T981] usb 7-1: USB disconnect, device number 23 [ 291.624347][ T5919] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 291.779305][ T5825] udevd[5825]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 292.653610][ T66] usb 4-1: Failed to submit usb control message: -110 [ 292.669789][ T66] usb 4-1: unable to send the bmi data to the device: -110 [ 292.713570][ T66] usb 4-1: unable to get target info from device [ 292.721545][ T66] usb 4-1: could not get target info (-110) [ 292.728883][ T66] usb 4-1: could not probe fw (-110) [ 292.749671][ T9105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.839'. [ 293.600501][ T5919] usb 4-1: USB disconnect, device number 50 [ 293.794552][ T9122] netlink: 32 bytes leftover after parsing attributes in process `syz.0.845'. [ 294.327911][ T43] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 294.497579][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 294.504413][ T43] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 294.522235][ T43] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 294.532154][ T43] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 294.542769][ T43] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 294.556481][ T43] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 294.573750][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.787565][ T5919] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 294.808896][ T9131] loop6: detected capacity change from 0 to 524288000 [ 294.858201][ T9131] loop6: detected capacity change from 524288000 to 1 [ 294.866966][ T43] usb 1-1: GET_CAPABILITIES returned 0 [ 294.873847][ T43] usbtmc 1-1:16.0: can't read capabilities [ 294.972223][ T5919] usb 6-1: Using ep0 maxpacket: 16 [ 294.994392][ T5919] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 295.008274][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 295.067239][ T5919] usb 6-1: Product: syz [ 295.110273][ T9131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.125090][ T9131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.140130][ T5919] usb 6-1: SerialNumber: syz [ 295.149916][ T5198] Dev loop6: unable to read RDB block 1 [ 295.156681][ T43] usb 1-1: USB disconnect, device number 48 [ 295.163850][ T5198] loop6: unable to read partition table [ 295.180479][ T5198] loop6: partition table beyond EOD, truncated [ 295.191746][ T5919] usb 6-1: config 0 descriptor?? [ 295.207184][ T5919] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 295.255526][ T5919] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 295.299799][ T5919] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 295.485937][ T5919] dvb_usb_af9035 6-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 295.727675][ T24] usb 6-1: USB disconnect, device number 37 [ 296.269633][ T24] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 296.433228][ T9146] netlink: 40 bytes leftover after parsing attributes in process `syz.3.853'. [ 296.506908][ T24] usb 1-1: config 0 has no interfaces? [ 296.520243][ T24] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 296.530186][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.538638][ T24] usb 1-1: Product: syz [ 296.543306][ T24] usb 1-1: Manufacturer: syz [ 296.552579][ T24] usb 1-1: SerialNumber: syz [ 296.796519][ T24] usb 1-1: config 0 descriptor?? [ 296.995011][ T9170] netlink: 168 bytes leftover after parsing attributes in process `syz.2.857'. [ 297.006575][ T9170] netlink: 168 bytes leftover after parsing attributes in process `syz.2.857'. [ 297.697714][ T24] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 297.867599][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 297.893330][ T24] usb 6-1: config 252 has an invalid interface number: 15 but max is 0 [ 297.997968][ T24] usb 6-1: config 252 has no interface number 0 [ 298.005252][ T24] usb 6-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 298.028781][ T24] usb 6-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 8195, setting to 1024 [ 298.043428][ T24] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 298.052891][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.068775][ T24] usb 6-1: Product: syz [ 298.084697][ T24] usb 6-1: Manufacturer: syz [ 298.097662][ T812] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 298.106026][ T24] usb 6-1: SerialNumber: syz [ 298.216974][ T24] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 298.287528][ T812] usb 3-1: Using ep0 maxpacket: 16 [ 298.295052][ T812] usb 3-1: config 252 has an invalid interface number: 15 but max is 0 [ 298.304075][ T812] usb 3-1: config 252 has no interface number 0 [ 298.321417][ T812] usb 3-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 298.376152][ T812] usb 3-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 8195, setting to 1024 [ 298.442210][ T812] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 298.480407][ T812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.513317][ T812] usb 3-1: Product: syz [ 298.535779][ T812] usb 3-1: Manufacturer: syz [ 298.582868][ T812] usb 3-1: SerialNumber: syz [ 298.656062][ T812] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 298.711606][ T9195] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20000 [ 299.001851][ T812] usb 1-1: USB disconnect, device number 49 [ 299.291281][ T2907] usb 6-1: Failed to submit usb control message: -110 [ 299.304029][ T2907] usb 6-1: unable to send the bmi data to the device: -110 [ 299.313954][ T2907] usb 6-1: unable to get target info from device [ 299.321102][ T2907] usb 6-1: could not get target info (-110) [ 299.329546][ T2907] usb 6-1: could not probe fw (-110) [ 299.412079][ T5875] usb 6-1: USB disconnect, device number 38 [ 299.427699][ T812] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 299.597633][ T812] usb 1-1: Using ep0 maxpacket: 16 [ 299.609210][ T812] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 299.700788][ T12] usb 3-1: Failed to submit usb control message: -110 [ 299.707945][ T812] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 299.758867][ T12] usb 3-1: unable to send the bmi data to the device: -110 [ 299.766231][ T812] usb 1-1: Product: syz [ 299.766315][ T12] usb 3-1: unable to get target info from device [ 299.772471][ T812] usb 1-1: SerialNumber: syz [ 299.780830][ T12] usb 3-1: could not get target info (-110) [ 299.806414][ T12] usb 3-1: could not probe fw (-110) [ 299.832288][ T812] usb 1-1: config 0 descriptor?? [ 299.877808][ T812] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 299.885343][ T9211] FAULT_INJECTION: forcing a failure. [ 299.885343][ T9211] name failslab, interval 1, probability 0, space 0, times 0 [ 299.913642][ T812] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 299.926884][ T9211] CPU: 1 UID: 0 PID: 9211 Comm: syz.6.867 Not tainted syzkaller #0 PREEMPT(full) [ 299.926908][ T9211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 299.926919][ T9211] Call Trace: [ 299.926927][ T9211] [ 299.926936][ T9211] dump_stack_lvl+0x189/0x250 [ 299.926962][ T9211] ? __pfx____ratelimit+0x10/0x10 [ 299.926987][ T9211] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.927001][ T9211] ? __pfx__printk+0x10/0x10 [ 299.927021][ T9211] ? __pfx___might_resched+0x10/0x10 [ 299.927047][ T9211] should_fail_ex+0x414/0x560 [ 299.927074][ T9211] should_failslab+0xa8/0x100 [ 299.927095][ T9211] kmem_cache_alloc_noprof+0x74/0x6e0 [ 299.927113][ T9211] ? getname_flags+0xb8/0x540 [ 299.927132][ T9211] ? strncpy_from_user+0x150/0x290 [ 299.927157][ T9211] getname_flags+0xb8/0x540 [ 299.927186][ T9211] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 299.927208][ T9211] __ia32_sys_link+0x69/0x90 [ 299.927230][ T9211] __do_fast_syscall_32+0xb6/0x2b0 [ 299.927250][ T9211] ? lockdep_hardirqs_on+0x9c/0x150 [ 299.927270][ T9211] do_fast_syscall_32+0x34/0x80 [ 299.927288][ T9211] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 299.927309][ T9211] RIP: 0023:0xf7ff1539 [ 299.927324][ T9211] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 299.927339][ T9211] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 299.927358][ T9211] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 0000000080000240 [ 299.927371][ T9211] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 299.927380][ T9211] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 299.927391][ T9211] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 299.927401][ T9211] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 299.927429][ T9211] [ 300.147825][ T812] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 300.154271][ T812] dvb_usb_af9035 1-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 300.354935][ T43] usb 3-1: USB disconnect, device number 35 [ 300.553878][ T9215] netlink: 316 bytes leftover after parsing attributes in process `syz.3.868'. [ 300.673913][ T812] usb 1-1: USB disconnect, device number 50 [ 301.697571][ T24] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 301.957774][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 301.964604][ T24] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 301.973702][ T24] usb 1-1: config 0 has no interface number 0 [ 301.988667][ T24] usb 1-1: config 0 interface 41 has no altsetting 0 [ 302.000532][ T24] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 302.011320][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.019739][ T24] usb 1-1: Product: syz [ 302.024121][ T24] usb 1-1: Manufacturer: syz [ 302.029834][ T24] usb 1-1: SerialNumber: syz [ 302.038725][ T24] usb 1-1: config 0 descriptor?? [ 302.050368][ T24] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -22 [ 302.067781][ T5919] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 302.152009][ T43] usb 3-1: new low-speed USB device number 36 using dummy_hcd [ 302.227552][ T5919] usb 6-1: Using ep0 maxpacket: 16 [ 302.254764][ T5875] usb 1-1: USB disconnect, device number 51 [ 302.268805][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.301727][ T5919] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 302.321759][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.330157][ T43] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 302.348047][ T5919] usb 6-1: config 0 descriptor?? [ 302.353479][ T43] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 302.376775][ T43] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 302.397535][ T43] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 302.435215][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 is Bulk; changing to Interrupt [ 302.465896][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 302.491724][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 302.535774][ T43] usb 3-1: string descriptor 0 read error: -22 [ 302.542423][ T43] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 302.562481][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.612357][ T43] usb 3-1: config 0 descriptor?? [ 302.630124][ T5919] usbhid 6-1:0.0: can't add hid device: -71 [ 302.636181][ T5919] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 302.638681][ T43] hub 3-1:0.0: bad descriptor, ignoring hub [ 302.658821][ T43] hub 3-1:0.0: probe with driver hub failed with error -5 [ 302.678269][ T9250] netlink: 96 bytes leftover after parsing attributes in process `syz.6.879'. [ 302.694324][ T5919] usb 6-1: USB disconnect, device number 39 [ 302.917561][ T812] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 303.077632][ T812] usb 4-1: Using ep0 maxpacket: 32 [ 303.089895][ T812] usb 4-1: config 0 has an invalid interface number: 167 but max is 0 [ 303.098448][ T5919] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 303.106692][ T812] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.125102][ T812] usb 4-1: config 0 has no interface number 0 [ 303.135903][ T812] usb 4-1: config 0 interface 167 altsetting 1 bulk endpoint 0xA has invalid maxpacket 1024 [ 303.153244][ T812] usb 4-1: config 0 interface 167 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 303.153569][ T43] usb 3-1: USB disconnect, device number 36 [ 303.165458][ T812] usb 4-1: config 0 interface 167 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 303.185050][ T812] usb 4-1: config 0 interface 167 has no altsetting 0 [ 303.204744][ T812] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=20.63 [ 303.215046][ T812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.223911][ T812] usb 4-1: Product: syz [ 303.229345][ T812] usb 4-1: Manufacturer: syz [ 303.234121][ T812] usb 4-1: SerialNumber: syz [ 303.257474][ T5875] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 303.283360][ T812] usb 4-1: config 0 descriptor?? [ 303.288722][ T5919] usb 6-1: Using ep0 maxpacket: 16 [ 303.295621][ T5919] usb 6-1: config 252 has an invalid interface number: 15 but max is 0 [ 303.306440][ T5919] usb 6-1: config 252 has no interface number 0 [ 303.313199][ T9251] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 303.320989][ T5919] usb 6-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 303.339751][ T5919] usb 6-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 8195, setting to 1024 [ 303.356279][ T5919] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 303.383520][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.394328][ T5919] usb 6-1: Product: syz [ 303.401000][ T5919] usb 6-1: Manufacturer: syz [ 303.409588][ T5919] usb 6-1: SerialNumber: syz [ 303.417544][ T5875] usb 7-1: Using ep0 maxpacket: 16 [ 303.491613][ T5875] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 303.502202][ T5919] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 303.514732][ T5875] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 303.555330][ T812] usbtest 4-1:0.167: couldn't get endpoints, -22 [ 303.571473][ T5875] usb 7-1: Product: syz [ 303.623087][ T5875] usb 7-1: SerialNumber: syz [ 303.628727][ T812] usbtest 4-1:0.167: probe with driver usbtest failed with error -22 [ 303.725054][ T5875] usb 7-1: config 0 descriptor?? [ 303.911247][ T5875] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 303.934670][ T812] usb 4-1: USB disconnect, device number 51 [ 303.973411][ T5875] dvb_usb_af9015 7-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 304.045307][ T5875] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 304.082461][ T5875] dvb_usb_af9035 7-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 304.329254][ T812] usb 7-1: USB disconnect, device number 24 [ 304.567831][ T2127] usb 6-1: Failed to submit usb control message: -110 [ 304.590164][ T2127] usb 6-1: unable to send the bmi data to the device: -110 [ 304.626496][ T2127] usb 6-1: unable to get target info from device [ 304.771748][ T9288] fuse: Unknown parameter 'mGN8oad' [ 304.869666][ T2127] usb 6-1: could not get target info (-110) [ 304.945750][ T2127] usb 6-1: could not probe fw (-110) [ 304.951608][ T9290] sg_write: data in/out 8316/1 bytes for SCSI command 0x1c-- guessing data in; [ 304.951608][ T9290] program syz.2.889 not setting count and/or reply_len properly [ 305.433486][ T9303] netlink: 20 bytes leftover after parsing attributes in process `syz.6.893'. [ 305.443626][ T43] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 305.504009][ T9308] dvmrp0: entered allmulticast mode [ 306.153053][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.170929][ T43] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 306.201681][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.228462][ T43] usb 3-1: config 0 descriptor?? [ 306.297059][ T981] usb 6-1: USB disconnect, device number 40 [ 306.797712][ T5875] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 306.987538][ T5875] usb 7-1: Using ep0 maxpacket: 8 [ 306.994592][ T5875] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 307.003488][ T5875] usb 7-1: config 179 has no interface number 0 [ 307.010194][ T5875] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 307.025550][ T5875] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 307.050248][ T5875] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 307.091595][ T5875] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 307.111779][ T5875] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 307.154867][ T5875] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 307.195687][ T5875] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.212304][ T9311] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 307.314437][ T9318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.897'. [ 307.621914][ T9311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.678548][ T9311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.139745][ T24] usb 7-1: USB disconnect, device number 25 [ 308.139840][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 308.154370][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 308.204684][ T43] usbhid 3-1:0.0: can't add hid device: -71 [ 308.217566][ T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 308.256282][ T43] usb 3-1: USB disconnect, device number 37 [ 308.379914][ T9328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.901'. [ 308.485454][ T9333] sctp: [Deprecated]: syz.0.903 (pid 9333) Use of struct sctp_assoc_value in delayed_ack socket option. [ 308.485454][ T9333] Use struct sctp_sack_info instead [ 308.637971][ T43] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 308.799425][ T43] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 308.812656][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 308.820345][ T43] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 308.832615][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.843721][ T43] usb 3-1: config 0 descriptor?? [ 308.857649][ T812] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 308.987887][ T812] usb 4-1: device descriptor read/64, error -71 [ 309.007650][ T5875] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 309.043924][ T9341] IPv6: NLM_F_REPLACE set, but no existing node found! [ 309.190082][ T9351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.199870][ T9351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.209894][ T9351] netlink: 28 bytes leftover after parsing attributes in process `syz.2.902'. [ 309.273356][ T5875] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 309.286429][ T5875] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.330563][ T5875] usb 7-1: config 0 descriptor?? [ 309.390034][ T812] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 309.424504][ T9349] tc_dump_action: action bad kind [ 309.567586][ T812] usb 4-1: device descriptor read/64, error -71 [ 309.678076][ T812] usb usb4-port1: attempt power cycle [ 309.717667][ T5919] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 310.047626][ T812] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 310.086813][ T812] usb 4-1: device descriptor read/8, error -71 [ 310.093242][ T5919] usb 1-1: Using ep0 maxpacket: 8 [ 310.102509][ T5919] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 310.161509][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.236241][ T5919] usb 1-1: config 0 descriptor?? [ 310.357616][ T812] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 310.389732][ T812] usb 4-1: device descriptor read/8, error -71 [ 310.464347][ T5919] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 310.509572][ T812] usb usb4-port1: unable to enumerate USB device [ 310.527846][ T5919] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 310.548150][ T5919] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 310.578641][ T5919] asix 1-1:0.0: probe with driver asix failed with error -32 [ 310.716535][ T5875] usb 7-1: Cannot set autoneg [ 310.748498][ T5875] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 311.257065][ T5875] usb 1-1: USB disconnect, device number 52 [ 311.782637][ T5831] usb 7-1: USB disconnect, device number 26 [ 312.074423][ T43] usbhid 3-1:0.0: can't add hid device: -71 [ 312.090996][ T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 312.121806][ T43] usb 3-1: USB disconnect, device number 38 [ 312.234886][ T9381] syz_tun: entered allmulticast mode [ 312.266422][ T9380] syz_tun: left allmulticast mode [ 313.067325][ T9400] netlink: 180 bytes leftover after parsing attributes in process `syz.3.922'. [ 313.079972][ T9400] netlink: 180 bytes leftover after parsing attributes in process `syz.3.922'. [ 313.092431][ T9400] netlink: 180 bytes leftover after parsing attributes in process `syz.3.922'. [ 313.181443][ T9403] netlink: 'syz.6.923': attribute type 1 has an invalid length. [ 313.864266][ T9406] binder: 9405:9406 unknown command 0 [ 313.890343][ T9406] binder: 9405:9406 ioctl c0306201 80000080 returned -22 [ 314.707566][ T5875] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 315.177522][ T43] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 315.204869][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.216579][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.226697][ T5875] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 315.236352][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.278134][ T5875] usb 1-1: config 0 descriptor?? [ 315.327831][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 315.336076][ T43] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 315.365909][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.378525][ T5919] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 315.398918][ T43] usb 4-1: config 0 descriptor?? [ 315.557755][ T5919] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.574706][ T5919] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1088, setting to 1024 [ 315.605059][ T5919] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0a31, bcdDevice= 0.00 [ 315.635440][ T5919] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.659263][ T5919] usb 7-1: config 0 descriptor?? [ 315.676857][ T9420] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 316.719512][ T5875] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 316.794091][ T5875] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 316.908368][ T5875] cp2112 0003:10C4:EA90.000A: Part Number: 0x82 Device Version: 0xFE [ 317.091351][ T5919] hid-corsair-void 0003:1B1C:0A31.000B: hidraw1: USB HID v0.00 Device [HID 1b1c:0a31] on usb-dummy_hcd.6-1/input0 [ 317.114578][ T5875] cp2112 0003:10C4:EA90.000A: error requesting SMBus config [ 317.156640][ T5875] cp2112 0003:10C4:EA90.000A: probe with driver cp2112 failed with error -5 [ 317.226043][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.232680][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.349189][ T5919] hid-corsair-void 0003:1B1C:0A31.000B: failed to request firmware (reason: -71) [ 317.359182][ T5875] hid-corsair-void 0003:1B1C:0A31.000B: failed to request battery (reason: -71) [ 317.370522][ T5875] usb 7-1: USB disconnect, device number 27 [ 317.675927][ T9432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.684879][ T9432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.161249][ T5875] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 318.371230][ T5875] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 318.386747][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.404398][ T5875] usb 3-1: Product: syz [ 318.412318][ T5875] usb 3-1: Manufacturer: syz [ 318.423295][ T5875] usb 3-1: SerialNumber: syz [ 318.450409][ T5875] usb 3-1: config 0 descriptor?? [ 318.732890][ T5919] usb 1-1: USB disconnect, device number 53 [ 319.177153][ T43] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 319.191876][ T43] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 319.217851][ T9472] netlink: 16 bytes leftover after parsing attributes in process `syz.5.940'. [ 319.231902][ T43] asix 4-1:0.0: probe with driver asix failed with error -71 [ 319.262001][ T43] usb 4-1: USB disconnect, device number 56 [ 319.799084][ T9473] netlink: 28 bytes leftover after parsing attributes in process `syz.6.941'. [ 320.011599][ T9488] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 320.409133][ T5831] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 320.612955][ T9498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.948'. [ 320.705898][ T9499] netlink: 76 bytes leftover after parsing attributes in process `syz.0.948'. [ 320.740550][ T5831] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 320.760680][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.770583][ T5831] usb 6-1: Product: syz [ 320.775661][ T5831] usb 6-1: Manufacturer: syz [ 320.780743][ T5831] usb 6-1: SerialNumber: syz [ 320.790841][ T5831] usb 6-1: config 0 descriptor?? [ 320.864261][ T9499] netlink: 'syz.0.948': attribute type 2 has an invalid length. [ 320.915400][ T9499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.948'. [ 320.988656][ T5919] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 321.056328][ T812] usb 3-1: USB disconnect, device number 39 [ 321.211689][ T5919] usb 1-1: Using ep0 maxpacket: 8 [ 321.225531][ T5919] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 321.287587][ T5919] usb 1-1: config 0 has no interface number 0 [ 321.327119][ T5919] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 321.398006][ T5919] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 321.546496][ T5919] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 321.559004][ T5919] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 321.573260][ T5919] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 321.583806][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.618669][ T5919] usb 1-1: config 0 descriptor?? [ 321.633458][ T5919] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 321.648546][ T5831] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 321.817571][ T5831] usb 4-1: Using ep0 maxpacket: 32 [ 321.837899][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.858066][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.974976][ T5831] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 322.032593][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.080827][ T5831] usb 4-1: config 0 descriptor?? [ 322.238283][ T9514] binder: 9512:9514 ioctl 4018620d 0 returned -22 [ 322.254576][ T9514] binder: 9512:9514 ioctl c0306201 80000080 returned -14 [ 322.384838][ T24] usb 1-1: USB disconnect, device number 54 [ 322.395962][ T24] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 322.509025][ T5831] ft260 0003:0403:6030.000C: unknown main item tag 0x7 [ 322.708161][ T9503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.717217][ T9503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.169763][ T5831] ft260 0003:0403:6030.000C: chip code: 0000 0000 [ 323.222004][ T5919] usb 6-1: USB disconnect, device number 41 [ 323.492224][ T9528] fuse: Unknown parameter ' [ 323.492224][ T9528] 0x000000000000000b' [ 323.694873][ T9533] netlink: 'syz.0.957': attribute type 5 has an invalid length. [ 323.734577][ T9528] nvme_fabrics: missing parameter 'transport=%s' [ 323.753127][ T9528] nvme_fabrics: missing parameter 'nqn=%s' [ 324.167830][ T30] kauditd_printk_skb: 170 callbacks suppressed [ 324.167851][ T30] audit: type=1326 audit(1760368700.429:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9534 comm="syz.2.958" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 324.397933][ T30] audit: type=1326 audit(1760368700.429:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9534 comm="syz.2.958" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 325.078957][ T5831] ft260 0003:0403:6030.000C: failed to retrieve system status [ 325.089300][ T5831] ft260 0003:0403:6030.000C: probe with driver ft260 failed with error -71 [ 325.938048][ T5831] usb 4-1: USB disconnect, device number 57 [ 326.130729][ T9561] misc userio: Begin command sent, but we're already running [ 326.458317][ T43] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 326.630325][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 326.640483][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.667907][ T43] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 326.707489][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 326.731321][ T43] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 326.875342][ T43] usb 4-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 326.886709][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.921468][ T43] usb 4-1: Product: syz [ 326.926929][ T43] usb 4-1: Manufacturer: syz [ 326.931760][ T43] usb 4-1: SerialNumber: syz [ 326.965650][ T43] usb 4-1: config 0 descriptor?? [ 326.983093][ T9561] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 326.999314][ T5919] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 327.012427][ C1] usb 4-1: NFC: Urb failure (status -71) [ 327.033763][ T43] usb 4-1: NFC: Unable to get FW version [ 327.044070][ T43] pn533_usb 4-1:0.0: probe with driver pn533_usb failed with error -90 [ 327.157591][ T812] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 327.171327][ T5919] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 327.181146][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.193773][ T5919] usb 3-1: Product: syz [ 327.203430][ T5919] usb 3-1: Manufacturer: syz [ 327.208834][ T5919] usb 3-1: SerialNumber: syz [ 327.223176][ T43] usb 4-1: USB disconnect, device number 58 [ 327.231744][ T5919] usb 3-1: config 0 descriptor?? [ 327.286224][ T9585] veth0_virt_wifi: entered promiscuous mode [ 327.308054][ T812] usb 6-1: Using ep0 maxpacket: 8 [ 327.432581][ T9578] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 327.439112][ T9578] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 327.497691][ T5919] usb 3-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 327.525094][ T5919] f81604 3-1:0.0: Setting termination of CH#0 failed: -EREMOTEIO [ 327.547635][ T5919] f81604 3-1:0.0: probe with driver f81604 failed with error -121 [ 328.387590][ T5919] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 328.817526][ T5919] usb 4-1: Using ep0 maxpacket: 32 [ 328.826324][ T5919] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 328.867879][ T9600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.968'. [ 328.897136][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.947549][ T5919] usb 4-1: Product: syz [ 328.959829][ T5919] usb 4-1: Manufacturer: syz [ 328.964489][ T5919] usb 4-1: SerialNumber: syz [ 328.979201][ T9601] netlink: 24 bytes leftover after parsing attributes in process `syz.2.968'. [ 329.010120][ T5919] usb 4-1: config 0 descriptor?? [ 329.030992][ T5919] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 329.777740][ T5919] gspca_stk1135: reg_w 0x5 err -110 [ 329.792574][ T5919] gspca_stk1135: serial bus timeout: status=0x00 [ 329.873895][ T812] usb 6-1: unable to get BOS descriptor or descriptor too short [ 329.953225][ T5919] gspca_stk1135: Sensor write failed [ 330.005167][ T812] usb 6-1: too many configurations: 48, using maximum allowed: 8 [ 330.013913][ T5919] gspca_stk1135: serial bus timeout: status=0x00 [ 330.065176][ T5919] gspca_stk1135: Sensor write failed [ 330.071715][ T812] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 330.087947][ T5919] gspca_stk1135: serial bus timeout: status=0x00 [ 330.094436][ T812] usb 6-1: can't read configurations, error -71 [ 330.107469][ T5919] gspca_stk1135: Sensor read failed [ 330.118831][ T5919] gspca_stk1135: serial bus timeout: status=0x00 [ 330.133587][ T5831] usb 3-1: USB disconnect, device number 40 [ 330.214101][ T5919] gspca_stk1135: Sensor read failed [ 330.232926][ T5919] gspca_stk1135: Detected sensor type unknown (0x0) [ 330.393533][ T5919] gspca_stk1135: serial bus timeout: status=0x00 [ 330.418583][ T5919] gspca_stk1135: Sensor read failed [ 330.424098][ T5919] gspca_stk1135: serial bus timeout: status=0x00 [ 330.495064][ T5919] gspca_stk1135: Sensor read failed [ 330.511046][ T5919] gspca_stk1135: serial bus timeout: status=0x00 [ 330.550441][ T5919] gspca_stk1135: Sensor write failed [ 330.581956][ T5919] gspca_stk1135: serial bus timeout: status=0x00 [ 330.606176][ T5919] gspca_stk1135: Sensor write failed [ 330.617731][ T5919] stk1135 4-1:0.0: probe with driver stk1135 failed with error -110 [ 331.231404][ T5919] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 331.268198][ T5831] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 331.294960][ T9634] netlink: 4 bytes leftover after parsing attributes in process `syz.5.982'. [ 331.422127][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.434833][ T5831] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.504699][ T30] audit: type=1400 audit(1760368707.799:498): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=9631 comm="syz.5.982" [ 331.524176][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.554767][ T10] usb 4-1: USB disconnect, device number 59 [ 331.596156][ T5831] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 331.616326][ T5919] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 331.672871][ T5831] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 331.674807][ T5919] usb 3-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 331.706736][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 331.718850][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.745668][ T5831] usb 1-1: SerialNumber: syz [ 331.755176][ T5919] usb 3-1: config 0 descriptor?? [ 331.986106][ T9625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.995139][ T9625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.059171][ T5831] usb 1-1: 0:2 : does not exist [ 332.122590][ T5831] usb 1-1: USB disconnect, device number 55 [ 332.182539][ T10] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 332.209867][ T5919] ortek 0003:1223:3F07.000D: unknown main item tag 0x0 [ 332.217534][ T5919] ortek 0003:1223:3F07.000D: unknown main item tag 0x0 [ 332.227018][ T5919] ortek 0003:1223:3F07.000D: unknown main item tag 0x0 [ 332.234059][ T5919] ortek 0003:1223:3F07.000D: unknown main item tag 0x0 [ 332.250321][ T5919] ortek 0003:1223:3F07.000D: unknown main item tag 0x0 [ 332.257315][ T5919] ortek 0003:1223:3F07.000D: unknown main item tag 0x0 [ 332.265661][ T5919] ortek 0003:1223:3F07.000D: unknown main item tag 0x0 [ 332.272933][ T5919] ortek 0003:1223:3F07.000D: unknown main item tag 0x0 [ 332.290664][ T5919] ortek 0003:1223:3F07.000D: unknown main item tag 0x0 [ 332.293319][ T5825] udevd[5825]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 332.335930][ T9656] netlink: 196 bytes leftover after parsing attributes in process `syz.6.985'. [ 332.345060][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 332.359193][ T5919] ortek 0003:1223:3F07.000D: unknown main item tag 0x0 [ 332.369501][ T10] usb 4-1: config 252 has an invalid interface number: 15 but max is 0 [ 332.379947][ T9656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.399590][ T9656] batadv_slave_0: entered promiscuous mode [ 332.405701][ T9656] batadv_slave_0: entered allmulticast mode [ 332.412107][ T10] usb 4-1: config 252 has no interface number 0 [ 332.428344][ T5919] ortek 0003:1223:3F07.000D: item fetching failed at offset 66/69 [ 332.454812][ T10] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 332.468934][ T5919] ortek 0003:1223:3F07.000D: probe with driver ortek failed with error -22 [ 332.486453][ T9656] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 332.503038][ T10] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 8195, setting to 1024 [ 332.528425][ T10] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 332.540482][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.553768][ T10] usb 4-1: Product: syz [ 332.560767][ T10] usb 4-1: Manufacturer: syz [ 332.571981][ T10] usb 4-1: SerialNumber: syz [ 332.599951][ T10] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 333.067541][ T10] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 333.206850][ T2998] syzkaller0: tun_net_xmit 76 [ 333.213122][ T9668] syzkaller0: create flow: hash 207011199 index 1 [ 333.220348][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 333.235015][ T24] syzkaller0: tun_net_xmit 76 [ 333.244163][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 333.257151][ T10] usb 1-1: too many configurations: 48, using maximum allowed: 8 [ 333.278006][ T2998] syzkaller0: tun_net_xmit 48 [ 333.281043][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 333.309635][ T10] usb 1-1: can't read configurations, error -71 [ 333.328124][ T24] syzkaller0: tun_net_xmit 76 [ 333.399607][ T9668] syzkaller0: delete flow: hash 207011199 index 1 [ 333.403736][ T5919] usb 4-1: USB disconnect, device number 60 [ 333.406670][ T12] usb 4-1: Failed to submit usb control message: -71 [ 333.422525][ T12] usb 4-1: unable to send the bmi data to the device: -71 [ 333.435770][ T12] usb 4-1: unable to get target info from device [ 333.453970][ T12] usb 4-1: could not get target info (-71) [ 333.460534][ T12] usb 4-1: could not probe fw (-71) [ 333.921382][ T5919] usb 3-1: USB disconnect, device number 41 [ 334.121501][ T9673] netlink: 76 bytes leftover after parsing attributes in process `syz.2.990'. [ 334.373115][ T10] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 334.387653][ T5912] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 334.537800][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 334.537816][ T5912] usb 3-1: Using ep0 maxpacket: 8 [ 334.541436][ T5912] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 334.572884][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.583976][ T5912] usb 3-1: Product: syz [ 334.589331][ T5912] usb 3-1: Manufacturer: syz [ 334.594728][ T5912] usb 3-1: SerialNumber: syz [ 334.608208][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 334.622085][ T10] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 334.643436][ T5912] usb 3-1: config 0 descriptor?? [ 334.660203][ T5912] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 334.679128][ T10] usb 1-1: Product: syz [ 334.679545][ T5912] dvb-usb: bulk message failed: -22 (2/0) [ 334.683355][ T10] usb 1-1: SerialNumber: syz [ 334.693728][ T5912] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 334.717006][ T5912] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 334.751771][ T5912] usb 3-1: media controller created [ 334.769014][ T10] usb 1-1: config 0 descriptor?? [ 334.802237][ T10] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 334.823921][ T10] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 334.825624][ T5912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 334.863334][ T9673] cxusb: i2c rd: len=120 is too big! [ 334.863334][ T9673] [ 334.870849][ T10] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 334.881925][ T10] dvb_usb_af9035 1-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 334.953412][ T5912] cxusb: set interface failed [ 334.958426][ T5912] dvb-usb: bulk message failed: -22 (1/0) [ 335.029214][ T5912] DVB: Unable to find symbol mt352_attach() [ 335.035194][ T5912] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 335.045053][ T24] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 335.138660][ T5912] rc_core: IR keymap rc-dvico-portable not found [ 335.149108][ T5912] Registered IR keymap rc-empty [ 335.186696][ T5912] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 335.209233][ T5912] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input20 [ 335.236582][ T24] usb 7-1: config 0 has an invalid interface number: 32 but max is 0 [ 335.246786][ T24] usb 7-1: config 0 has no interface number 0 [ 335.254671][ T5912] dvb-usb: schedule remote query interval to 100 msecs. [ 335.277749][ T24] usb 7-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 335.297487][ T5912] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 335.356142][ T24] usb 7-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.384113][ T5912] usb 3-1: USB disconnect, device number 42 [ 335.397937][ T24] usb 7-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 335.487495][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.523266][ T9691] FAULT_INJECTION: forcing a failure. [ 335.523266][ T9691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.538219][ T9691] CPU: 1 UID: 0 PID: 9691 Comm: syz.3.995 Not tainted syzkaller #0 PREEMPT(full) [ 335.538244][ T9691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 335.538271][ T9691] Call Trace: [ 335.538279][ T9691] [ 335.538287][ T9691] dump_stack_lvl+0x189/0x250 [ 335.538313][ T9691] ? __pfx____ratelimit+0x10/0x10 [ 335.538340][ T9691] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.538358][ T9691] ? __pfx__printk+0x10/0x10 [ 335.538377][ T9691] ? __might_fault+0xb0/0x130 [ 335.538407][ T9691] should_fail_ex+0x414/0x560 [ 335.538437][ T9691] _copy_from_user+0x2d/0xb0 [ 335.538461][ T9691] cmsghdr_from_user_compat_to_kern+0x394/0x800 [ 335.538488][ T9691] ? __might_fault+0xb0/0x130 [ 335.538515][ T9691] ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10 [ 335.538552][ T9691] ____sys_sendmsg+0x20f/0x830 [ 335.538595][ T9691] ? __pfx_____sys_sendmsg+0x10/0x10 [ 335.538636][ T9691] ___sys_sendmsg+0x21f/0x2a0 [ 335.538656][ T9691] ? __pfx____sys_sendmsg+0x10/0x10 [ 335.538682][ T9691] ? __lock_acquire+0xab9/0xd20 [ 335.538734][ T9691] ? __fget_files+0x2a/0x420 [ 335.538758][ T9691] ? __fget_files+0x3a0/0x420 [ 335.538793][ T9691] __sys_sendmmsg+0x28e/0x430 [ 335.538816][ T9691] ? __pfx___sys_sendmmsg+0x10/0x10 [ 335.538830][ T9691] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 335.538874][ T9691] ? ksys_write+0x22a/0x250 [ 335.538892][ T9691] ? exc_page_fault+0x82/0x100 [ 335.538910][ T9691] ? __pfx_ksys_write+0x10/0x10 [ 335.538935][ T9691] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 335.538962][ T9691] __do_fast_syscall_32+0xb6/0x2b0 [ 335.538981][ T9691] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.539003][ T9691] do_fast_syscall_32+0x34/0x80 [ 335.539022][ T9691] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 335.539044][ T9691] RIP: 0023:0xf7fc7539 [ 335.539060][ T9691] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 335.539075][ T9691] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 335.539095][ T9691] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080003e00 [ 335.539108][ T9691] RDX: 0000000000000002 RSI: 0000000000008880 RDI: 0000000000000000 [ 335.539118][ T9691] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 335.539128][ T9691] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 335.539138][ T9691] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 335.539166][ T9691] [ 335.794554][ C1] vkms_vblank_simulate: vblank timer overrun [ 335.855157][ T24] usb 7-1: config 0 descriptor?? [ 336.070950][ T5912] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 336.387602][ T5831] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 336.581161][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 336.592713][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 336.631159][ T5831] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 336.640449][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.649008][ T5831] usb 4-1: Product: syz [ 336.653249][ T5831] usb 4-1: Manufacturer: syz [ 336.657940][ T5831] usb 4-1: SerialNumber: syz [ 336.665801][ T5831] usb 4-1: config 0 descriptor?? [ 336.681993][ T5831] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 337.028119][ T9704] netlink: 32 bytes leftover after parsing attributes in process `syz.3.997'. [ 338.114487][ T9705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.526978][ T5875] usb 1-1: USB disconnect, device number 57 [ 338.543521][ T24] usbhid 7-1:0.32: can't add hid device: -71 [ 338.602267][ T24] usbhid 7-1:0.32: probe with driver usbhid failed with error -71 [ 338.698626][ T24] usb 7-1: USB disconnect, device number 28 [ 339.085503][ T30] audit: type=1326 audit(1760368715.389:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9718 comm="syz.0.1001" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 339.110561][ T43] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 339.121707][ T30] audit: type=1326 audit(1760368715.389:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9718 comm="syz.0.1001" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 339.143803][ C1] vkms_vblank_simulate: vblank timer overrun [ 339.163619][ T30] audit: type=1326 audit(1760368715.399:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9718 comm="syz.0.1001" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 339.189482][ T24] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 339.221486][ T30] audit: type=1326 audit(1760368715.399:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9718 comm="syz.0.1001" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 339.245488][ T30] audit: type=1326 audit(1760368715.399:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9718 comm="syz.0.1001" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 339.305455][ T30] audit: type=1326 audit(1760368715.399:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9718 comm="syz.0.1001" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 339.327889][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 339.336515][ T30] audit: type=1326 audit(1760368715.399:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9718 comm="syz.0.1001" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 339.367614][ T43] usb 6-1: unable to get BOS descriptor or descriptor too short [ 339.375791][ T43] usb 6-1: too many configurations: 48, using maximum allowed: 8 [ 339.393084][ T43] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 339.401679][ T43] usb 6-1: can't read configurations, error -71 [ 339.412708][ T24] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 339.421244][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.432118][ T30] audit: type=1326 audit(1760368715.399:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9718 comm="syz.0.1001" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 339.456815][ T30] audit: type=1326 audit(1760368715.399:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9718 comm="syz.0.1001" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 339.479182][ T24] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 339.492137][ T24] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 339.511146][ T24] usb 7-1: Manufacturer: syz [ 339.537301][ T24] usb 7-1: config 0 descriptor?? [ 339.597871][ T30] audit: type=1326 audit(1760368715.399:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9718 comm="syz.0.1001" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 339.895903][ T24] rc_core: IR keymap rc-hauppauge not found [ 339.896269][ T9731] loop6: detected capacity change from 0 to 524288000 [ 339.924894][ T24] Registered IR keymap rc-empty [ 339.943543][ T5831] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 339.954855][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 339.969738][ T5831] usb 4-1: USB disconnect, device number 61 [ 339.978042][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input21 [ 340.126654][ T9732] loop6: detected capacity change from 524288000 to 1 [ 340.389258][ T24] usb 7-1: USB disconnect, device number 29 [ 340.404531][ T6547] udevd[6547]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 341.374946][ T9745] netlink: 'syz.6.1007': attribute type 1 has an invalid length. [ 341.477639][ T10] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 341.684062][ T10] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 341.703189][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 341.716192][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 341.733929][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 341.733960][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 341.734866][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 341.734894][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 341.735715][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 341.735742][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 341.736562][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 341.736591][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 341.737345][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 341.737371][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 341.739022][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 341.739051][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 341.739810][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 341.739837][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 341.741467][ T10] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 341.741483][ T10] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 341.741494][ T10] usb 4-1: Product: syz [ 341.741502][ T10] usb 4-1: Manufacturer: syz [ 341.741510][ T10] usb 4-1: SerialNumber: syz [ 341.752929][ T10] usb 4-1: config 0 descriptor?? [ 341.773815][ T10] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 341.833978][ T5919] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 341.962475][ T5875] usb 4-1: USB disconnect, device number 62 [ 342.054296][ T10] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 342.077556][ T5919] usb 6-1: Using ep0 maxpacket: 16 [ 342.115723][ T5875] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 342.136682][ T5919] usb 6-1: config 252 has an invalid interface number: 15 but max is 0 [ 342.136702][ T5919] usb 6-1: config 252 has no interface number 0 [ 342.136727][ T5919] usb 6-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 342.136741][ T5919] usb 6-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 8195, setting to 1024 [ 342.140576][ T5919] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 342.140596][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.140607][ T5919] usb 6-1: Product: syz [ 342.140615][ T5919] usb 6-1: Manufacturer: syz [ 342.140623][ T5919] usb 6-1: SerialNumber: syz [ 342.160901][ T5919] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 342.235180][ T10] usb 1-1: device descriptor read/64, error -71 [ 342.478308][ T10] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 342.519800][ T24] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 342.617680][ T10] usb 1-1: device descriptor read/64, error -71 [ 342.677629][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 342.680495][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 342.680529][ T24] usb 3-1: config 0 has no interface number 0 [ 342.680552][ T24] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 342.680564][ T24] usb 3-1: config 0 interface 1 has no altsetting 0 [ 342.682577][ T24] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 342.682596][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.682606][ T24] usb 3-1: Product: syz [ 342.682614][ T24] usb 3-1: Manufacturer: syz [ 342.682639][ T24] usb 3-1: SerialNumber: syz [ 342.684977][ T24] usb 3-1: config 0 descriptor?? [ 342.773272][ T10] usb usb1-port1: attempt power cycle [ 342.896602][ T24] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 342.943899][ T24] cx231xx 3-1:0.1: Failed to read PCB config [ 342.944051][ T24] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 342.961578][ T24] usb 3-1: USB disconnect, device number 43 [ 343.107855][ T10] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 343.141950][ T10] usb 1-1: device descriptor read/8, error -71 [ 343.181190][ T9773] VFS: Lookup of 'binder-control' in fuse fuse would have caused loop [ 343.211036][ T13] usb 6-1: Failed to submit usb control message: -110 [ 343.211101][ T13] usb 6-1: unable to send the bmi data to the device: -110 [ 343.211118][ T13] usb 6-1: unable to get target info from device [ 343.211133][ T13] usb 6-1: could not get target info (-110) [ 343.211159][ T13] usb 6-1: could not probe fw (-110) [ 343.358892][ T66] tipc: Subscription rejected, illegal request [ 343.407813][ T24] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 343.427753][ T10] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 343.458180][ T5875] usb 6-1: USB disconnect, device number 46 [ 343.498682][ T10] usb 1-1: device descriptor read/8, error -71 [ 343.557594][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 343.560208][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 343.560254][ T24] usb 3-1: config 0 has no interface number 0 [ 343.560278][ T24] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 343.560289][ T24] usb 3-1: config 0 interface 1 has no altsetting 0 [ 343.562132][ T24] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 343.562150][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.562162][ T24] usb 3-1: Product: syz [ 343.562169][ T24] usb 3-1: Manufacturer: syz [ 343.562177][ T24] usb 3-1: SerialNumber: syz [ 343.564182][ T24] usb 3-1: config 0 descriptor?? [ 343.611635][ T10] usb usb1-port1: unable to enumerate USB device [ 343.778447][ T24] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 343.781779][ T24] cx231xx 3-1:0.1: bad scenario!!!!! [ 343.781779][ T24] config_info=0 [ 343.781794][ T24] cx231xx 3-1:0.1: Failed to read PCB config [ 344.005859][ T981] usb 3-1: USB disconnect, device number 44 [ 344.701657][ T9796] netlink: 'syz.3.1022': attribute type 3 has an invalid length. [ 344.725663][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1022'. [ 344.786474][ T9800] vivid-001: disconnect [ 344.800603][ T9800] vivid-001: reconnect [ 345.197926][ T24] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 345.208550][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 345.208566][ T30] audit: type=1326 audit(1760368721.519:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9810 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 345.238544][ T30] audit: type=1326 audit(1760368721.519:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9810 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 345.324876][ T30] audit: type=1326 audit(1760368721.529:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9810 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 345.331748][ T9811] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1029'. [ 345.347829][ T30] audit: type=1326 audit(1760368721.529:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9810 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 345.379171][ T30] audit: type=1326 audit(1760368721.529:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9810 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 345.426092][ T24] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 345.452440][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 345.461793][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 345.502552][ T9811] tipc: Started in network mode [ 345.514488][ T9811] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 345.542589][ T9811] tipc: Enabled bearer , priority 10 [ 345.547847][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 345.559371][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 345.584451][ T30] audit: type=1326 audit(1760368721.559:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9810 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 345.619106][ T30] audit: type=1326 audit(1760368721.559:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9810 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 345.641951][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 345.651990][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 345.703522][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 345.712782][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 345.719742][ T30] audit: type=1326 audit(1760368721.559:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9810 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 345.749695][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 345.838129][ T43] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 345.847709][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 345.867981][ T30] audit: type=1326 audit(1760368721.579:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9810 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=40000003 syscall=364 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 345.896394][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 345.905661][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 345.912522][ T30] audit: type=1326 audit(1760368721.579:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9810 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 345.939462][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 345.961474][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 346.037927][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 346.040890][ T10] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 346.064492][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 346.074066][ T43] usb 3-1: config 252 has an invalid interface number: 15 but max is 0 [ 346.083196][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 346.100891][ T43] usb 3-1: config 252 has no interface number 0 [ 346.116481][ T43] usb 3-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 346.139564][ T43] usb 3-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 8195, setting to 1024 [ 346.155547][ T24] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 346.177504][ T24] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 346.192538][ T24] usb 1-1: Product: syz [ 346.192706][ T43] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 346.197643][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 346.224456][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.235244][ T24] usb 1-1: Manufacturer: syz [ 346.240377][ T24] usb 1-1: SerialNumber: syz [ 346.245058][ T43] usb 3-1: Product: syz [ 346.258594][ T24] usb 1-1: config 0 descriptor?? [ 346.263821][ T43] usb 3-1: Manufacturer: syz [ 346.274856][ T43] usb 3-1: SerialNumber: syz [ 346.318154][ T24] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 346.357817][ T43] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 346.416099][ T10] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 346.425970][ T10] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 346.445818][ T10] usb 7-1: Product: syz [ 346.459988][ T10] usb 7-1: SerialNumber: syz [ 346.497758][ T10] usb 7-1: config 0 descriptor?? [ 346.522554][ T10] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 346.553129][ T10] dvb_usb_af9015 7-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 346.556143][ T43] usb 1-1: USB disconnect, device number 62 [ 346.601156][ T43] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 346.612441][ T10] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 346.644362][ T10] dvb_usb_af9035 7-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 346.658171][ T5875] tipc: Node number set to 4269801494 [ 347.125717][ T24] usb 7-1: USB disconnect, device number 30 [ 347.288590][ T10] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 347.370270][ T66] usb 3-1: Failed to submit usb control message: -110 [ 347.423009][ T66] usb 3-1: unable to send the bmi data to the device: -110 [ 347.443541][ T66] usb 3-1: unable to get target info from device [ 347.455897][ T5919] usb 3-1: USB disconnect, device number 45 [ 347.468331][ T66] usb 3-1: could not get target info (-110) [ 347.472685][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 347.474826][ T66] usb 3-1: could not probe fw (-110) [ 347.492005][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.533485][ T10] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 347.548692][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.595935][ T10] usb 6-1: config 0 descriptor?? [ 347.808781][ T9837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.821198][ T9837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.234227][ T10] mcp2221 0003:04D8:00DD.000E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 348.515987][ T10] usb 6-1: USB disconnect, device number 47 [ 348.712215][ T9867] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.857178][ T9868] input: syz0 as /devices/virtual/input/input24 [ 349.310623][ T9854] input: syz0 as /devices/virtual/input/input23 [ 350.857662][ T10] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 351.008577][ T10] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 351.017820][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 351.059753][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 351.076635][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 351.087814][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 351.096858][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 351.106547][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 351.138354][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 351.147727][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 351.147786][ T43] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 351.173462][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 351.182824][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 351.196393][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 351.208035][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 351.222037][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 351.231817][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 351.242679][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 351.265021][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 351.279592][ T10] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 351.297980][ T5875] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 351.329414][ T10] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 351.346968][ T10] usb 4-1: Product: syz [ 351.351486][ T10] usb 4-1: Manufacturer: syz [ 351.356280][ T10] usb 4-1: SerialNumber: syz [ 351.369205][ T10] usb 4-1: config 0 descriptor?? [ 351.370326][ T43] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 351.387598][ T43] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 351.398578][ T43] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 351.408542][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.421837][ T9893] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 351.434473][ T43] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 351.467480][ T10] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 351.485073][ T5875] usb 7-1: Using ep0 maxpacket: 16 [ 351.524457][ T9902] input: syz0 as /devices/virtual/input/input25 [ 351.585752][ T5875] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 351.663201][ T5875] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.698839][ T24] usb 4-1: USB disconnect, device number 63 [ 351.706283][ T24] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 351.756299][ T5875] usb 7-1: Product: syz [ 351.776759][ T5875] usb 7-1: Manufacturer: syz [ 351.785032][ T5875] usb 7-1: SerialNumber: syz [ 351.823639][ T5875] usb 7-1: config 0 descriptor?? [ 352.101042][ T9904] vlan3: entered promiscuous mode [ 352.106257][ T9904] macvtap0: entered promiscuous mode [ 352.281216][ T9897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.289950][ T9897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.530073][ T5875] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 352.544094][ T5875] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 352.563099][ T5875] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 352.576816][ T5875] usb 7-1: media controller created [ 352.607671][ T5875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 352.637516][ T5919] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 352.823234][ T5919] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 352.846805][ T9914] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1056'. [ 352.867128][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.876431][ T10] usb 1-1: USB disconnect, device number 63 [ 352.901030][ T5919] usb 3-1: Product: syz [ 352.917518][ T5919] usb 3-1: Manufacturer: syz [ 352.922232][ T5919] usb 3-1: SerialNumber: syz [ 352.967162][ T5919] usb 3-1: config 0 descriptor?? [ 352.998238][ T9914] netlink: 'syz.3.1056': attribute type 10 has an invalid length. [ 353.002971][ T5919] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 353.007377][ T9906] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1051'. [ 353.025714][ T9916] bond2: option miimon: invalid value (18446744073709551615) [ 353.035040][ T5919] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 353.044963][ T9916] bond2: option miimon: allowed values 0 - 2147483647 [ 353.056792][ T5919] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 353.066244][ T5919] usb 3-1: media controller created [ 353.079217][ T9916] bond2 (unregistering): Released all slaves [ 353.110410][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 353.121174][ T9914] syz_tun: entered promiscuous mode [ 353.136579][ T9914] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 353.189039][ T5875] zl10353_read_register: readreg error (reg=127, ret==0) [ 353.197366][ T9906] wireguard0: entered promiscuous mode [ 353.211560][ T9906] wireguard0: entered allmulticast mode [ 353.215328][ T5919] DVB: Unable to find symbol mt352_attach() [ 353.223480][ T5875] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 353.257162][ T5875] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 353.313854][ T5919] DVB: Unable to find symbol nxt6000_attach() [ 353.386438][ T5919] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 353.402096][ T5919] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input27 [ 353.441155][ T5919] dvb-usb: schedule remote query interval to 1000 msecs. [ 353.449359][ T5919] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 353.459777][ T5919] dvb-usb: bulk message failed: -22 (7/0) [ 353.465549][ T5919] dvb-usb: bulk message failed: -22 (7/0) [ 353.563426][ T9929] dtv5100: wlen = 0, aborting. [ 353.684926][ T24] usb 6-1: new low-speed USB device number 48 using dummy_hcd [ 353.871963][ T9926] loop0: detected capacity change from 0 to 524287999 [ 353.971768][ T24] usb 6-1: config 1 interface 0 altsetting 102 endpoint 0x1 is Bulk; changing to Interrupt [ 353.987927][ T24] usb 6-1: config 1 interface 0 altsetting 102 endpoint 0x82 is Bulk; changing to Interrupt [ 354.001235][ T24] usb 6-1: config 1 interface 0 has no altsetting 0 [ 354.011992][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 354.023605][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.078933][ T24] usb 6-1: Product: 绌㿙ࡎ舘襜﹚ᗃ졙큵긣턍詚ꂏﳴ龿㜶㟩㭓ᬀ鬣惟咖킧⌳ꏞ쁑殌䩁ᰀ嗇튿񂒙牊舵皦᳗ꁱ蘧మ걔ƚ꾠哠㈆寂湉ꇣ攳措꜒霆욥罯臿髽昴ṉᔨ筭㡡쯱좌熚ᇶཱུ髡ḓ냤뱎湦렪蠄맢횝뱰㥛隸ퟣ乘Გ෹ᮡ驝뜝ⱔ曝ݠ蕸ꙅ縠뾌쿾橌ᜅ襱킯✜ཧ⥅呙俨쏰飍 [ 354.196838][ T24] usb 6-1: Manufacturer: 㜌䶞顇ᤚ₊᧼摉썫蕹얶㊩ [ 354.205390][ T24] usb 6-1: SerialNumber: ल弋ꍝ澹骕阙恕ଅ䠮૙鞶⎒퍓▞佳覤瑎덹苪㬏楂য়杈榗 [ 354.222936][ T9927] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 354.231318][ T9927] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 354.488043][ T9926] program syz.5.1058 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 354.489101][ T5919] dvb-usb: bulk message failed: -22 (7/0) [ 354.506629][ T5919] dvb-usb: error while querying for an remote control event. [ 354.537562][ T9926] ------------[ cut here ]------------ [ 354.543112][ T9926] usb 7-1: BOGUS control dir, pipe 80001f80 doesn't match bRequestType c0 [ 354.590650][ T9926] WARNING: CPU: 0 PID: 9926 at drivers/usb/core/urb.c:414 usb_submit_urb+0x114d/0x18b0 [ 354.600504][ T9926] Modules linked in: [ 354.604649][ T9926] CPU: 0 UID: 0 PID: 9926 Comm: syz.5.1058 Not tainted syzkaller #0 PREEMPT(full) [ 354.614057][ T9926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 354.624406][ T9926] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 354.630347][ T9926] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 00 76 12 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 74 43 89 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 354.651009][ T9926] RSP: 0018:ffffc9000bcc7380 EFLAGS: 00010246 [ 354.657193][ T9926] RAX: db3561e5d5c37400 RBX: ffff888057538100 RCX: 0000000000080000 [ 354.665543][ T9926] RDX: ffffc900102f5000 RSI: 0000000000004cad RDI: 0000000000004cae [ 354.673673][ T9926] RBP: 1ffff1100aa5639c R08: ffffc9000bcc70a7 R09: 1ffff92001798e14 [ 354.681820][ T9926] R10: dffffc0000000000 R11: fffff52001798e15 R12: ffff88807d59e100 [ 354.689909][ T9926] R13: ffff8880552b1ce0 R14: 0000000080001f80 R15: ffff888077d285c0 [ 354.697999][ T9926] FS: 0000000000000000(0000) GS:ffff888125d0c000(0063) knlGS:00000000f544db40 [ 354.707042][ T9926] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 354.714031][ T9926] CR2: 00000000800012c0 CR3: 000000002e998000 CR4: 00000000003526f0 [ 354.722201][ T9926] Call Trace: [ 354.725505][ T9926] [ 354.728559][ T9926] usb_start_wait_urb+0x114/0x4c0 [ 354.733670][ T9926] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 354.739341][ T9926] usb_control_msg+0x232/0x3e0 [ 354.744140][ T9926] dtv5100_i2c_msg+0x250/0x330 [ 354.749029][ T9926] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 354.753944][ T9926] __i2c_transfer+0x874/0x2170 [ 354.758988][ T9926] ? __pfx_stack_trace_save+0x10/0x10 [ 354.764382][ T9926] ? stack_depot_save_flags+0x40/0x860 [ 354.770030][ T9926] ? __pfx___i2c_transfer+0x10/0x10 [ 354.775346][ T9926] ? kasan_save_track+0x3e/0x80 [ 354.780406][ T9926] ? __kasan_save_free_info+0x46/0x50 [ 354.785911][ T9926] __i2c_smbus_xfer+0xfb0/0x1e50 [ 354.790975][ T9926] ? __lock_acquire+0xab9/0xd20 [ 354.795848][ T9926] ? do_raw_spin_lock+0x121/0x290 [ 354.801008][ T9926] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 354.806420][ T9926] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 354.812627][ T9926] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 354.818551][ T9926] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 354.824898][ T9926] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 354.830416][ T9926] i2c_smbus_xfer+0x275/0x3c0 [ 354.835123][ T9926] ? __pfx_i2c_smbus_xfer+0x10/0x10 [ 354.840368][ T9926] ? __lock_acquire+0xab9/0xd20 [ 354.845343][ T9926] i2cdev_ioctl_smbus+0x43d/0x6d0 [ 354.850560][ T9926] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 354.856156][ T9926] compat_i2cdev_ioctl+0x299/0x5c0 [ 354.861357][ T9926] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 354.867003][ T9926] ? __fget_files+0x3a0/0x420 [ 354.871754][ T9926] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 354.877328][ T9926] __ia32_compat_sys_ioctl+0x543/0x840 [ 354.882834][ T9926] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 354.889227][ T9926] ? __se_sys_futex_time32+0x360/0x3e0 [ 354.894694][ T9926] ? local_clock_noinstr+0xe0/0xe0 [ 354.900035][ T9926] ? rcu_is_watching+0x15/0xb0 [ 354.904815][ T9926] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 354.911686][ T9926] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.916898][ T9926] __do_fast_syscall_32+0xb6/0x2b0 [ 354.922127][ T9926] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.927362][ T9926] do_fast_syscall_32+0x34/0x80 [ 354.932319][ T9926] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 354.938746][ T9926] RIP: 0023:0xf705d539 [ 354.942836][ T9926] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 354.962660][ T9926] RSP: 002b:00000000f544d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 354.971468][ T9926] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000720 [ 354.979567][ T9926] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 354.987639][ T9926] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 354.995725][ T9926] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 355.003865][ T9926] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 355.011902][ T9926] [ 355.014928][ T9926] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 355.022234][ T9926] CPU: 0 UID: 0 PID: 9926 Comm: syz.5.1058 Not tainted syzkaller #0 PREEMPT(full) [ 355.031528][ T9926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 355.041616][ T9926] Call Trace: [ 355.044906][ T9926] [ 355.047833][ T9926] dump_stack_lvl+0x99/0x250 [ 355.052431][ T9926] ? __asan_memcpy+0x40/0x70 [ 355.057036][ T9926] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.062250][ T9926] ? __pfx__printk+0x10/0x10 [ 355.066882][ T9926] vpanic+0x237/0x6d0 [ 355.070886][ T9926] ? __pfx_vpanic+0x10/0x10 [ 355.075784][ T9926] panic+0xb9/0xc0 [ 355.079511][ T9926] ? __pfx_panic+0x10/0x10 [ 355.083950][ T9926] __warn+0x31b/0x4b0 [ 355.087947][ T9926] ? usb_submit_urb+0x114d/0x18b0 [ 355.092975][ T9926] ? usb_submit_urb+0x114d/0x18b0 [ 355.097995][ T9926] report_bug+0x2be/0x4f0 [ 355.102329][ T9926] ? usb_submit_urb+0x114d/0x18b0 [ 355.107349][ T9926] ? usb_submit_urb+0x114d/0x18b0 [ 355.112373][ T9926] ? usb_submit_urb+0x114f/0x18b0 [ 355.117421][ T9926] handle_bug+0x84/0x160 [ 355.121714][ T9926] exc_invalid_op+0x1a/0x50 [ 355.126320][ T9926] asm_exc_invalid_op+0x1a/0x20 [ 355.131219][ T9926] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 355.136876][ T9926] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 00 76 12 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 74 43 89 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 355.156567][ T9926] RSP: 0018:ffffc9000bcc7380 EFLAGS: 00010246 [ 355.162633][ T9926] RAX: db3561e5d5c37400 RBX: ffff888057538100 RCX: 0000000000080000 [ 355.170691][ T9926] RDX: ffffc900102f5000 RSI: 0000000000004cad RDI: 0000000000004cae [ 355.178680][ T9926] RBP: 1ffff1100aa5639c R08: ffffc9000bcc70a7 R09: 1ffff92001798e14 [ 355.186677][ T9926] R10: dffffc0000000000 R11: fffff52001798e15 R12: ffff88807d59e100 [ 355.194666][ T9926] R13: ffff8880552b1ce0 R14: 0000000080001f80 R15: ffff888077d285c0 [ 355.202701][ T9926] usb_start_wait_urb+0x114/0x4c0 [ 355.207739][ T9926] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 355.213334][ T9926] usb_control_msg+0x232/0x3e0 [ 355.218120][ T9926] dtv5100_i2c_msg+0x250/0x330 [ 355.222912][ T9926] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 355.227803][ T9926] __i2c_transfer+0x874/0x2170 [ 355.232575][ T9926] ? __pfx_stack_trace_save+0x10/0x10 [ 355.237937][ T9926] ? stack_depot_save_flags+0x40/0x860 [ 355.243470][ T9926] ? __pfx___i2c_transfer+0x10/0x10 [ 355.248674][ T9926] ? kasan_save_track+0x3e/0x80 [ 355.253535][ T9926] ? __kasan_save_free_info+0x46/0x50 [ 355.258947][ T9926] __i2c_smbus_xfer+0xfb0/0x1e50 [ 355.263917][ T9926] ? __lock_acquire+0xab9/0xd20 [ 355.268778][ T9926] ? do_raw_spin_lock+0x121/0x290 [ 355.273806][ T9926] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 355.279198][ T9926] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 355.285103][ T9926] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 355.291001][ T9926] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 355.297350][ T9926] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 355.302740][ T9926] i2c_smbus_xfer+0x275/0x3c0 [ 355.307502][ T9926] ? __pfx_i2c_smbus_xfer+0x10/0x10 [ 355.312699][ T9926] ? __lock_acquire+0xab9/0xd20 [ 355.317567][ T9926] i2cdev_ioctl_smbus+0x43d/0x6d0 [ 355.322652][ T9926] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 355.328492][ T9926] compat_i2cdev_ioctl+0x299/0x5c0 [ 355.333652][ T9926] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 355.339348][ T9926] ? __fget_files+0x3a0/0x420 [ 355.344047][ T9926] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 355.349632][ T9926] __ia32_compat_sys_ioctl+0x543/0x840 [ 355.355118][ T9926] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 355.361100][ T9926] ? __se_sys_futex_time32+0x360/0x3e0 [ 355.366697][ T9926] ? local_clock_noinstr+0xe0/0xe0 [ 355.371848][ T9926] ? rcu_is_watching+0x15/0xb0 [ 355.376637][ T9926] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 355.383329][ T9926] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.388520][ T9926] __do_fast_syscall_32+0xb6/0x2b0 [ 355.393623][ T9926] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.398836][ T9926] do_fast_syscall_32+0x34/0x80 [ 355.403688][ T9926] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 355.410021][ T9926] RIP: 0023:0xf705d539 [ 355.414096][ T9926] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 355.433701][ T9926] RSP: 002b:00000000f544d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 355.442221][ T9926] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000720 [ 355.450206][ T9926] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 355.458178][ T9926] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 355.466151][ T9926] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 355.474226][ T9926] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 355.482235][ T9926] [ 355.485552][ T9926] Kernel Offset: disabled [ 355.489871][ T9926] Rebooting in 86400 seconds..