last executing test programs: 4m10.330446982s ago: executing program 2 (id=747): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_buf(r3, 0x29, 0x1f, 0x0, &(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x3, 0x0, 0x800000b4b, 0x2d, 0x0, 0x0, 0x400007}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x20, 0x0, &(0x7f0000001040)) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x2c, r7, 0x0, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0xa4, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_CARRIER={0x0, 0x21, 0x1}, @IFLA_LINK={0x8, 0x5, r8}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x800c046) openat$loop_ctrl(0xffffff9c, &(0x7f0000000280), 0x40a00, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') read(r9, &(0x7f0000000040)=""/181, 0xb5) r10 = socket$inet_sctp(0x2, 0x5, 0x84) r11 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r10, 0x84, 0x1, &(0x7f0000000040)={r12, 0x7, 0x0, 0x3ee, 0xfffff800, 0x7}, 0x14) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000002080)={0x0, 0x1000, "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"}, &(0x7f0000000dc0)=0x1008) 4m6.329454668s ago: executing program 2 (id=775): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000340)={@val={0x0, 0x86dd}, @void, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0xb8, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x74, 0x0, [], "71a57d238f4fb3617e69d39064cbf7bd70b88f9ad1b1ef1eb6a3a634dffe2d551ca628cc32affb15f9693a730938e40c4ae1a117d8579c8794b407010a6317cc2b44da20a6e632ec74feb72d99ac1daad3f5593ac09f67e94f5e9eded625e776373bcff70519f2cfa9dbb28d09a20e402523fe8c"}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x8100}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x6, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0xe4) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000002c0)={0x6, &(0x7f0000000280)=[{0x5, 0x4, 0x5, 0x2}, {0x2, 0x5, 0x4}, {0x0, 0x6, 0x2, 0x7}, {0xff, 0x40, 0x6, 0x7}, {0x2, 0x68, 0x8, 0x3}, {0x2, 0x8, 0x0, 0x5}]}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0x5, r0, 'id0\x00'}) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1404000000000000000000000000158bf88863b3f794628ce33b57d14c828d000300000a48000000090a010200000000000000000300000408000a40000000012c000d409a29a2b4aa8fb47ca98a74af1c490690ab552c8bf85bbeeb558ec5178a7ba0f2cd8d317305f292ff14000000"], 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x4004000) 4m6.189869487s ago: executing program 2 (id=777): socket(0x1e, 0x805, 0x0) (async) r0 = socket(0x1e, 0x805, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) memfd_secret(0x80000) (async) memfd_secret(0x80000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000002000010027bd7000000000000a008080000000041600000014000200fc02000000000000000000a9c2f0a50f3b0000000000"], 0x30}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) r2 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000000)={0x0, 0x0, {0x12, 0x3a, 0xe, 0xa, 0x7, 0x5, 0x1, 0x8010000, 0xe755a3d832dace16}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000000c0), &(0x7f00000001c0)) (async) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) r8 = socket$isdn(0x22, 0x2, 0x22) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r8, 0x0, &(0x7f0000000600)=[{&(0x7f0000001080)=""/216, 0xd8}], 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) semop(0x0, &(0x7f0000000180), 0x0) msgget(0x1, 0x299) (async) msgget(0x1, 0x299) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff, 0x36, 0x0, @void}, 0x10) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff, 0x36, 0x0, @void}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) bind$alg(r11, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) (async) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) 4m5.249070132s ago: executing program 2 (id=781): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 4m5.158363286s ago: executing program 2 (id=782): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000600)={[&(0x7f00000003c0)='\x00', &(0x7f0000000480)='\\+\x00']}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}], 0x18}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800dd0a00000020"], 0x1c}, 0x1, 0x0, 0x0, 0x2604a846}, 0x4010) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x560e, &(0x7f0000000000)) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) (async) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r5, 0x80045017, 0x0) (async) r6 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r6, &(0x7f0000000200)="a38d", 0x2) r7 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r7, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x200, 0xfffe, 0x2, 0x8, 0x200000000000002f, 0x200, 0x1, 0x2c, 0xffffffff, 0x2}) (async) ioctl$SNDRV_PCM_IOCTL_DRAIN(r6, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r6, 0xc06c4124, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r8 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f7", 0x1}, {&(0x7f0000000400)="04c6a9c756754e10ed8d88c06d7a674db97cd0e21437530a3945ac896fa7f8e368f87de990e40a896805e49ce1e13103d82fffe82237f587e63d95e01ef451eaba2dd01c56e7f23c1fcccbea54dae8e295f2e533e4a34175026a9964eebc1aaa", 0x60}], 0x2}], 0x1, 0x40800) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5393, &(0x7f0000000000)) (async) socket$inet_udp(0x2, 0x2, 0x0) 4m5.091275102s ago: executing program 2 (id=784): timer_create(0xfffffffd, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) sendto$inet6(r0, 0x0, 0x0, 0x20040800, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x802) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000001400)={0x0, 0xec25, 0x400, 0x1, 0xd4}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000"], 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f00000fe000/0xd000)=nil, 0xd000, 0x1000005, 0xd2952, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = fsopen(&(0x7f00000003c0)='gfs2meta\x00', 0x1) close(r7) 3m50.068505255s ago: executing program 32 (id=784): timer_create(0xfffffffd, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) sendto$inet6(r0, 0x0, 0x0, 0x20040800, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x802) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000001400)={0x0, 0xec25, 0x400, 0x1, 0xd4}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000"], 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f00000fe000/0xd000)=nil, 0xd000, 0x1000005, 0xd2952, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = fsopen(&(0x7f00000003c0)='gfs2meta\x00', 0x1) close(r7) 8.271734296s ago: executing program 5 (id=1967): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d0f, 0x0) 8.247206007s ago: executing program 5 (id=1968): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) r2 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffe) keyctl$revoke(0x3, r2) keyctl$assume_authority(0x10, r2) r3 = request_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='mptcp_pm\x00', 0xfffffffffffffff8) r4 = signalfd(r0, &(0x7f0000000200)={[0x1]}, 0x8) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r4, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r5) sendmsg$kcm(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)="010c097a7470977375f99713513cc6eff819e5c1a0d4fec2f4eb7854fdecdd109fda62efe1780df23a7e05a02ac0b04d78fa33d48344ed2f5ab8197e48844be9829ce7c661ea4411b94256a62abb68dda7c05b5347733fce813a339729b1a70ee3bab330a49094cf1a21529a8e29bc4fc741b62e41361212e5d5ca75a416d48577f07eac0b994e06f262afffa3e6aedab3660270c34f6e8239f52c056e17876d5e487a9d1345d570356d4891bb21248d51479a81bbd39574890a288a9a358e9d49c67804b42c41cec932aeb4820640c8833c2aa8e502b081116c75d3c9acfc8acbe55f22e9fe1bec5080a870ad4e267520131112", 0xf4}, {&(0x7f0000000380)}, {&(0x7f00000003c0)="5826c106b78e841f2133692c7db4ded80526986d1205e5915d00cadbde7403ef4ed9077b9d2169a95778f8ce9ea69b6e4e455d0cec7759e794fae751e19077efecfa21e5142aa74294ea8bb963c5528f38631ed1e60ee4494e3ad7a7925df318eb6447efc2a8429cdda544721dd76e68b58202b9325b360432596f09ec49041f0e5ab81e75f79e4b1f6497f56ce95608aecad1815da6192859f9d16abc69b78c354f355221741edd53047bdb8244b314863c37adee4f07b14e96de8c8216e2283168d9f917c9596202244c810cc24768268ac68abd8c23237755c52a00aa8d9c105163f0a216cac88cebaa87e1fcdaffd8e19b93bb", 0xf5}], 0x3, &(0x7f0000000500)=[{0x108, 0x29, 0xd, "4f52398815be94b32669ff4452a6e83d53dda30ae0255c0f9a0099bd972dce291f2dbdb34015dc4306f4e2c82c25fe07680fe5085e6b33458026b2bfc764d4896e0af4c90e56352aef9cd142899cc67cf7d8f7c09f092202f2709b195bbabce5c6e81bedc3c3aa6e1a08568b2c3da00ddebbc2285d7d79433411c2e7bdb26edfcad13698f314d17cfb26c70ac0381b686ceef2d21fa2a98424c6a27086f74e1d6be04200efbbe3157b75ac0e32600b9d30c83479309a77bbaa037fe6abb0eedfbcd109bbe2f226735b9c3835c2bf929648de0b1090435a5f94f19712decba09a10357da1cf83ee1431f30c3c9bb43811ca557dcc38"}, {0x10, 0x10b}, {0xc0, 0x110, 0x5, "d7caa783a099d309d1922a27af7327cfeddc77da9da31c0e95529ede6333477219330ef2a36ae85b26178dc51861579bf5d2fa9234f5452a47694e31d1a65a2f75b2fbff8f1e05dcd1187367cd922a694ba27d0b7bf719f40835a0b6d148a140f327cfeaab7a78ee8e9e88e21df8a56433b83e2f486419a0564c18e9d080102c1abe5b5623b9cb93db65b30d7315b404e21e2f93133086bdaa5b0c4a7755dbd4a4c8352c4f29913bc66276736e8d97"}, {0xa8, 0x115, 0x7fff, "92186c3468ad6a203af2d53c1451fc12bc5fbc46907bde078de7292a742838c648eaf946dcaf4dfd40295dd69aa0edaa7de87f418cd0065985e832d0d0b42bbe5ebd2f78433cf5e67208cc0f284a1841649c147da089d0e171dd029cf856539eec6f179ab195779a04fec01b71d3c053486bff4499d509d525bc6bf7d305adf989a0173a3837898e73a9026ebea2911f2c21efc202"}, {0xf0, 0x111, 0x200, "6611e5d15188f65bae85d83e5018cfa14f8fe0ce0e1d47fda85eba8ecbd1a47dc5e624cb623b214e1550c384d39bcc3e9c90487501a42d654aedc721c8065450deb59f50ca5f15078bd3cf90e0ac4e7de591b19590898e1e473ded54e5357c7fcaf9bad413872e89089ac18f98b941a755ff29e7d78d34f2708bc950e6cef83883697d7eabe34af580ba48cc1dad5d8deb5b803d2bcdb8dd832a4c917eb6682029f7b2a1986e3621ba61636a4870d5c2dda3db29321bb1b87cc3ae024fbd74de9cd2d63d321f19c07ced92df52b5e88f8381f666522f87cf819f909f"}, {0xf8, 0x3a, 0x2, "d42ba288a4470f1fb7147aa71c81315a8aa8343c6dfa7eef4c0a78599e9acd5aeda2e70d2105559baced508ee1d2adc96394ffca936d91eef633d49601fa021d0feb6790b9e0a65896bcdf1c821a9d5dcd55435a7b0aed22cd9ee5f6c0bd28fca4bc834fc999393b6d22e3091eeaf3486a90ffa4c7d8c5806220c687d1a4bd60743998bf2c7cf26e189a776f5eed8d51b776ee223b17dbb0a21227662c43a532e358ab3c1ea5b59adb6b4e376e5f9cda775e260778f3282af7d4e3c62f240560f90807146513f4f429d7aec1692cf166b5a985cc80d977dd03ee2e110b88935256a48eb8d7fffe"}, {0xc0, 0x115, 0x5, "01eaa661bb1819fed389c95ea5b34f70b12d5839318d0a65dac696346bff2a6dbc5d72595973cd7d7543f3eb587618cc92744365b713c053e91ef6fa286baecccba483057759f3871c05eb40764a47cd61541a3c672ee43661331830d704d742cb565f64bf8e9fe136d31954b9a42bd17758b1191d9c0d4fef8da8f973272a49ddd3b8133a1e7718d334c8da7073e9a31916d7e318f09521b2afa655e0c2055d1c98524df74e97ecdd819c3bc1"}], 0x528}, 0x20000000) recvmsg$can_raw(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/234, 0xea}], 0x2, &(0x7f0000000cc0)}, 0x20) poll(&(0x7f0000000d40)=[{r4, 0x400}], 0x1, 0x1936) keyctl$search(0xa, r3, &(0x7f0000000d80)='encrypted\x00', &(0x7f0000000dc0)={'syz', 0x1}, r3) keyctl$read(0xb, 0x0, &(0x7f0000000e00)=""/96, 0x60) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x8c, 0x12, 0x400, 0x70bd28, 0x25dfdbfc, {0x28, 0x21, 0x6, 0xff, {0x4e23, 0x4e21, [0x200, 0x0, 0x7f, 0x8], [0x180, 0x7, 0x2, 0xfffffffd], 0x0, [0xfffffa92, 0x9]}, 0x8, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x3d, 0x1, "d67da3e4a9457406e7c8f649b0a157fdd2f0c5ac5233f44fe553cbf903b6d91ef704e32642bc94318146d535622d03298c8f1c7d0f0c962318"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000010}, 0x1) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001040), r5) sendmsg$TIPC_NL_NET_GET(r5, &(0x7f0000001380)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001340)={&(0x7f0000001080)={0x2bc, r6, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x14c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x79, 0x3, "3508418ddeac11cdd9513ba529338fdfd1f49f9b5480cc37bd6d23a7b06fc9cc5e012d224415ee5c3ad11d474f67f58659ef1af27a712b140dd4fca106e2168344a73a1647a5b5faf2213e39102b2c946057ae5419405dbbf74fc948119ee1c04949197dbf5860d236be4354af759ae070b4f06c17"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xc1, 0x3, "201173593c49fb0f7988a52f409d46241112c293311c27e54dbd5a05ef6f5d943f5f58a28170d37d2ed5542e736963d491492b0e3bec61959db04a64254358b98a12bff1fbb54615ba18fb1e7e3f66694e6ac0f3a73d8d879ef180d26d365e91878f12deb9736d1c9a478372ad2766646035a8c9426284d5bbe638aecaaff74dcc8cc613513daf1e0b1edca069adbc2b718cd64f1f059f41e7b8594a234d24184fb92d0d042424146606bd78b491fbb609ebf03cb0ea9a53322a7db597"}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6f}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @remote, 0x1a}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x60}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x8000}, 0x40) mq_open(&(0x7f00000013c0)='udp:syz2\x00', 0x0, 0x20, &(0x7f0000001400)={0x0, 0x3, 0x4a94, 0xfffffffffffffe00}) keyctl$setperm(0x5, r3, 0x802) ioctl$SNDRV_PCM_IOCTL_DELAY(r4, 0x80084121, &(0x7f0000001440)) keyctl$invalidate(0x15, 0x0) keyctl$link(0x8, r3, r3) r7 = syz_clone(0x4100000, &(0x7f0000001480)="e47a649d36c09b0594ac57a6c375f89b8da54a66e203dc1a607ef0d55dff5442be3ed6eafd995dc1ee74e89207c018ddf4fa4094b5338b653dd645cd7d863377c8deff09f47f5b9086fc236eda2d04dedcda723b2302791295f9eac2cfbf2188da2fa470852e23bfbe14aaeb7dc06ace62f14a62980cea96d60ebea28cfe7c940b160283352f7f1094cb3e8655d5f1f66db4fdc9364df682d3daaf0417091c2025549aea8e66ccfc335a5be2439d16771ec9c5b5b1f2b3489507995549aa1bcbe0dd608ece0a9347261da01c", 0xcc, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600)="f1a54e21e5136f8d5e0139e36444a02336ccdb47936dfe057406dd1c437e21f2c7d8747c5e973581bd691d78bb86d8581f2256f5095726746de7788bbff9cecd4908c687cebc2f31df927839facfd6e85f197d56cd4c65e21c82d3527de78c70152251032a8f884053020961") syz_open_procfs(r7, &(0x7f0000001680)='net/ip6_tables_names\x00') r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001700), r4) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000001800)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x44, r8, 0x408, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xb26c7687}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044000}, 0x41) syz_open_procfs$namespace(r7, &(0x7f0000001840)='ns/pid_for_children\x00') keyctl$get_security(0x11, r3, &(0x7f0000001880)=""/57, 0x39) 7.334609403s ago: executing program 5 (id=1972): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x6, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@tmpl={0xc4, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0xff80, 0x0, 0x0, 0xff}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x1, @in=@broadcast, 0x0, 0x1}]}]}, 0x17c}}, 0x0) 7.250234972s ago: executing program 5 (id=1974): mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000004, 0xa1ada2fcba2efbfa, 0xffffffffffffffff, 0xc6128000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000280)=[{0x3, 0x3, 0xff, 0x7fff0000}, {0x1, 0xb8, 0x3, 0xffffffff}, {0x9, 0x5, 0x0, 0xffffffff}]}) landlock_restrict_self(0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8b0b, &(0x7f0000000000)={'virt_wifi0\x00', @random="8dffffff0600"}) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x2, 0x410000) mmap$usbmon(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000000, 0x100013, r2, 0xfffffffffffffe01) landlock_restrict_self(r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x9, @pix={0x5, 0x1ec0000, 0x33565348, 0x5, 0x9, 0xddc7, 0x0, 0x2, 0x0, 0x6, 0x2, 0x3}}) r5 = socket$kcm(0x10, 0x2, 0x0) nanosleep(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r8 = getpid() kcmp(r8, r8, 0x0, r5, r5) syz_pidfd_open(r8, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000005b80)={0x2020}, 0x2020) 5.746537718s ago: executing program 1 (id=1978): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x202400, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) read$FUSE(r1, &(0x7f0000000380)={0x2020}, 0x2020) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800000000000600"}) r3 = syz_open_pts(r2, 0x141601) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000200)=0x1) unshare(0x6a040000) r4 = socket(0x23, 0x800, 0xa) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x106, 0x2}}, 0x20) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000001c0)={0xfff, 0xd, 0xf0c3, 0x14}, 0x8) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) syz_open_dev$sndctrl(0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x102800) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000010c0)=ANY=[@ANYBLOB="94000000", @ANYRES16=r8, @ANYBLOB="010000000000000000000a000000800004"], 0x94}}, 0x0) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) 5.271830485s ago: executing program 4 (id=1980): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000001900)={{0x12, 0x1, 0x200, 0x2, 0xcd, 0x77, 0x10, 0x403, 0xb8d8, 0x30bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xde, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd0, 0x76, 0xd8, 0xe}}]}}]}}, 0x0) socket$inet(0x2, 0xa, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_usb_connect$printer(0x3, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x3, 0x46b, &(0x7f00000007c0)={{0x12, 0x1, 0x250, 0x5a, 0x83, 0xf2, 0x40, 0xbb4, 0xa8c, 0x3daf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x459, 0x3, 0x7d, 0x2, 0x70, 0x1, [{{0x9, 0x4, 0x8f, 0x6, 0x6, 0x7f, 0x50, 0x8, 0x1, [], [{{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x40, 0x8, 0x7f, [@generic={0xe8, 0xf, "ecfb2e423273f97bf42514037a4869ebb9b10b5526dbe65a572fc305e42fac2cac4038a7ebafcd46b6e8b6f291f06494450a6c5be439c193a462ac8ab71aab325923a604740242dbe77ddb6d5ff9537d97172659c745e83f133dc0f5107448ee06cf0fcec2e48241e3bb6c85e9ce5701a2bff419b0a91cb023c8607817d166790269c739416577c6035ed5693b3f7cf28d7fe87950ef1bd4a11ed0224ab8a5801a1e50cb45d720bcba29bbf1b7fdcd9ca67b9109bcc3f4ec88347491c146b855fc5e6e07b9a47f5a061213ef61e617ebb4daabb5dd33140828ffde9ab75a14ab393758dcbf38"}, @generic={0xf0, 0x23, "21582355bec73fd0ed8593f8311960717e9744eb58bea1989bb72097110b28d5dbe003089b081bd008f9c689dcc3c40f5f3da8552069e7ded2a9fbdabaacbc00902ef009ed015cbed22e0ceb801c69ed5a8f0b92c4d0567c5c8c513df41d680739bf7ea4fe8239f122516aa643d59899d0d3608cca425babcc2d1fbc02276c03a3f4219da26fec6f3516dbced67b7d0ad462a3344db8600f2a0358a89bc8f05c9e2e6c15426dd039b64a1cbbcba82bbf6c775ee53c0c6812317842712417a5e9794e9234610ec08d3dfba956bc96633aeab45d6c2b61f14131982579c903f364715e8a3ad2f056ba034ec8a25f3e"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x200, 0x0, 0xe, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0xd}, @generic={0x63, 0x31, "d894233ea95ea3f478e569433affddf827afd176a83404a7ef13f3f2b0d13995f408846c47ad590a769186019cab5ce88f7859a190e62cc7d679f9e0ddb0ae054adc51cfdc9a26baade731f5326c17767ea9be1d018589856ce2f01e4106245de2"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0xff, 0x8, 0x7}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x5, 0x3, 0x5c}}, {{0x9, 0x5, 0x7, 0x4, 0x5a7, 0x6, 0x6, 0x2, [@generic={0x2, 0xc}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x1, 0xfd, 0x6}}]}}, {{0x9, 0x4, 0x7, 0x4, 0x6, 0x42, 0x84, 0xf0, 0xe, [@uac_as, @uac_control={{0xa, 0x24, 0x1, 0x8, 0x3}}], [{{0x9, 0x5, 0xd, 0x0, 0x20, 0x18, 0x29}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x4, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x101}, @generic={0x29, 0xe, "828b8515a9dbfdecc9ebc248fdd80a7349e6dbb544db54c2a082ec697f1754624d2ea94815583b"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x48, 0x81, 0xc, 0x4}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x0, 0x2, 0x9}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x4, 0x3, 0x84, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8}, @generic={0xa5, 0x1, "d36fc9a84fdbda072bf3f66bc0bbe1eceb64ab665d0b377f4c89cfe125c98c67aa515d8ab72846d0178b1c34e848db96fdcfd2d49ea24553821f44c4c48f334fd886a8773d3175e4a6b04241230f8e1ad249f1760286f990e9b0b965b4d1d1824337c11ec5294f23284926053be43b9819a3f7a6560d11d2b4d734559d8ead543289b2b1a6ab4df5bd22ef366a845d482bd2a8b2d1b497c2b1f518a60a81d7e2d6d423"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x200, 0xf5, 0x4, 0x43, [@generic={0x7a, 0x22, "3eb2399585b6e77923e48ffc034867c3fb7f60419c93f2968aad7e7c806996ded9b4506eaf5ae341f29670aa9669a5e0294bd34af436409a3365bac67dfda11746f2cc0e22f02c35a4771b4b52c907817e26b82743a80bd38769df99a2ccf025047433a90ff079bbc51cb605801bc3f70d95bf076b787fca"}]}}]}}, {{0x9, 0x4, 0xb5, 0x28, 0x0, 0xff, 0xff, 0xff, 0x3, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x101, 0x8, 0xc29, 0x2}, [@dmm={0x7, 0x24, 0x14, 0x8, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x7, 0x3}]}]}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x1, 0x0, 0x6, 0x10, 0x3}, 0x101, &(0x7f00000001c0)={0x5, 0xf, 0x101, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x185, 0xdc, 0x6, 0x72c, 0x78}, @ptm_cap={0x3}, @generic={0xee, 0x10, 0x2, "ae8c58e89caff01e95081d842d876b8419b72bb60b6c50da65e6da14a5605081f519c6bd197c3740255d47e1f11abf4ac7163cd68bee72be1c14b8d2d5279cdbc570f7e0a3450947ae9d4c79a0e655820520e1f4b186899bcff9a5692c0378b46196a13eea8439d29f025cc660d204c1b1f6a5075a8466d87528b125e0478b6911591da0e67bc07d7c4bae4e67dff58e0c6600da316fde8357ef801e3fa37e0e50d3ddd8c84cdf4ba4c905f4f00533fbf25beacacd62aeeaba1238feb6bb864813aeeed2f3331afb593e394606bba784e8eaad8311a0c8c8f417870cfedb5b586064f8c3dccbdd899d47e1"}]}, 0x8, [{0x9d, &(0x7f0000000300)=@string={0x9d, 0x3, "c2f1f2350a136b81c651b1bd07692b80903e6b36b771c88011a337c2fe3e2ed13d3b7ae14842fc1a45eb1291df9ef9de4c4ae7a0a21f4cc5f0ecb48fd03fd127a2694ff0a53a1909e5d81804d521f977b45c26a579db9f2e412f9d943ab89e48168444730d9c7c1ebddd262b084bf8024bded0487cb8f288e374477399075de0d2283cafc9e9f2253700b71b86aff4c3ef5b262248d1e4646222f8"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x403}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x2001}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x860}}, {0xfe, &(0x7f0000000640)=@string={0xfe, 0x3, "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"}}, {0x44, &(0x7f00000004c0)=@string={0x44, 0x3, "2bab375546836e5a68a47126663b26136af1ad11f5e4473458ea20d08ff203b60fadd512dc0b4f55bae5417f912f5d1d23fc1971b29b367756570fdd16bb13dae339"}}]}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) pipe(&(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r4 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x148, 0x80543, 0x12345}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) 4.796459707s ago: executing program 1 (id=1982): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12013301020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a000008090511ee40000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1000, 0x101, 0x4000, 0x0, 0xfffc, 0x0, 0x800, 0x0, 0x3d3, 0x7}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4.053591814s ago: executing program 5 (id=1990): membarrier(0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2ea381, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2ea381, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3}}, {@max_read={'max_read', 0x3d, 0x2}}, {@allow_other}]}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) umount2(&(0x7f0000000040)='./file0\x00', 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004580), 0x0, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004580), 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10060, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80, 0x23456}) r10 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) fsmount(r10, 0x1, 0x0) (async) r11 = fsmount(r10, 0x1, 0x0) fchdir(r11) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x44) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) (async) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x29, 0xfffffffe, 0x0, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x10, 0x66}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000066c0)="c9614df797d5bbaf2d529ccfe807cb2396820ca614edc8f52d067330a81f6c26f4cc0f48e5ae1d42335297538a44b9b28f2d36c39510bcdb6cf2fc17d9b35688d0447cc7167668496bdd28d8df1292b12b61894268f707c212263b3f1ae188c8a69527ac8e196f23028853fd4009294124f18fc47bd2322220e5f0d5d30223095e4e748803b6bf25ba87f40183766b5d2c3a6b3d2f7566b160f0e0742a6cabf6b0071295bc4d5ca4ee60a1fbdc8bbc1f2a59428bc836a1ef0c2dfcbe514f9857f7230f848af37be100dc4f4115ffcb0198774affeb7690dd6782a9f51987dba5d9fd0b6a3426c1ce1e04e48f4255c157450791ba022f0bad4844a22679bb17601987f461d7a35d7de8874cc3c47f360b3c31dfdbf7bb9f93ec80046118660e8bbb18930914f087c05df436073b9ccc5a740f8f634cc827245366b1179aaaddd2bd161f2fa413e1beded9f3063cabd52ece7139af17db00b63117a6b6a1ad8c33ed779d7dddf5b40c17635397b878c7117923f26767864e788da1f79dbbc769fbab45b34198b69dd0599904a0c1297812f9ad9cbf48c59d553b1004ab8213802f3a0852b5b827ab3ea7220873b379b459d7a09af061ccda8bd857d3b2bf2dbaea1b00e2cd0bcc8d6eb11c04bd21532bec66ae36d674a4dd01ab54c27d3267961ecfad0042837fea87d75cecc7a1a58f79f77d72fede0757b7c1f54a5040e741a0fc785ea0ad13bcfc0b69df4dc29dc75e331d2ba03c3cdf04e0a4490159b43c6ae2c010f276c85f3bc46ca94e73e11762739e40e6bfbc113f46ee6ab801b97d42fadc067e23a3151ae90ff64c80e64bba5313475948fbd24a6a95f7ec0b221c9f901c68d184d38b2e09cde68fbd6dd022b6fa1db26aa6ebe2128a93fcb7259ebcde896bd81685c881cb25f581e27479f929e1094852559209c255b0dd5317b148567674b235b10e093363e8e4bd15c4ab90c44abaadbfeabd65e26223543c415befff4d280ad0f0dc132b5413bbe96fdedcabc55e9f3eeead53a1f2d7c0455c8a3bda363a8c33c99888a05546f49dc4c3593aeb30b8ea314b77b8d117334d9c3f800a132e4c3bab461863f027dcfc066bf93f0426d74e02c92a0727309d5bf5bf8242a2b594b81de0e030e55f0125b5d4e12dbffc6806a6c7bd6d62c3d54e87f0607e08750d808a2f442a7eac0ec311c3498b9709ae2f505d5e8b3670079847644147741ffca679bbd1b658bc6c422e58d070f8608c246677af0e2efff5cbf88b3b4a0431a2f26648d64991cf99848012cb6eecb8a13ea91ce77d3c8f2bc047370f4811ae5c341371e3b65bed88294580ba90258c8d36683f21d91a8a914948b2222e4127b061cc0121b97a1b9b1c4ebb7ee166b5af58497d7e0ac90fda25e41a2490ec5d143d0e47475741b30138585637d7997fff2a8805a88c4bd75975ccffcbabefa3576328d86e802b8490e8a773e01afa74fa26c6849deb15b05596e7226cdc0c0ff364bcb4e62ec54984c9485b6eb819165972b9c935a3ae18c698438582e170437c538d7d24a935036964c77e6ed37de77c64384b258f7bbe944f630d3ca82c0b1c6b2c5bc73dd9f90ecff67a816de7b15bdcaa5a5f1bb8b270a8ac1119e1626e29eb5f2ae4595ca2e10c2e6b297c30c3eeb432ad374101938916c77aefd2ed0f5bb658922bdec9bd76767b9a4b56a15aaa2f7e7d06dba36710a4c8d69d2361aa5f1864710d0868d8f7616cffac40e0accd9b44df8cb5b5324039d82c44e9b97d3a77d914a3738cab84541f0dfc2ed93fb3a746d19cf73495cab380afcdac8acf300e34bb68917009ec1d205dc315669c6341218ebbd0a380c0d14396732e430544ea02d9aff1ffd199c475c4cd313abf4de1121055d806858ee1538436a5f3a549230a42698aeaa3b58b5b9dbf6e11292dad9e0535f5c0685105a448888101ca2228ab50af16b657bb9abb5d4c40cf03931f345663ef6e7655048f78bd23227c6a78bd8b8a457abad7267c8d3ed8decb74cfb21c98471c31f068fd8fea32f13d4478e476d7b5ee10579bda100686db9b3fac14b71e614fd156bddbbde1bf759d0023eb50345e970fa93efd99469583eecec690147f3c075da4efeda849b172829f34e31b281d844fb7c04ca49b30a15abbe493c191e003b76ccb8b2e560ddc3573c6182a87f8e5bdbe10333b3ff3381705984e5595831c025335d0438b053d17fe2f43424735ec3e9d0e8dc278d9e3f35d8d6881e47801d9f77ddf9954ba8f4fe95c295a67968b07bde6378b5ccf24f3d0d228b3cfb4624318828a2649af11698c56860c85617a5151f879846383f5fcf0e9ac483bc4c60beda3bd273a594fc26850d31a852839f23f9e5ffd31d63a7cee2341f22f385d41521aacfe6faf1c5b1e024cd6c6cd4b8696b8e66c6268196da27dc4090552748260bba916b932cbf8066b07dbf5f75b5ea04c385d2ac971d079ab7d4a6bec1008b7564f167aa903acda2ef1756ddbdee86ad25b172479756036d1e11b5c2ab10e657e3b3c768840fd111477bfa05b9e7a2ee765d685f7688765f2441e052a60f56286e6d15ea19d98306a0a5b5efd5b1363bf357d836cb20bb2420ecff7fd682c78763bd1ab31561e6a36a20bf57024852e168bdbc82efa42f7302dc5519c2b56ba3e960437e69f5502048e914540bd4e6138e04e3cb04c75abaee441dd29e23a23948eecb2a7883ae6f3c35b3a3a965fd062688a5975059da47b6029f38baec8d3932295a2257c83a0f966aa7c19db13ccadb86c6c81d84a09bd0782cc87369c8b3a006fee64323c964dcd731fbcaa2f1c1b19f55688365f183bc26bcb636eb0622fc5f5804d46db493737078fe6a6e82f34e48eef5974787c8c4b8abd8a0dcf516862454915b7b9d81a48b9d14a3a08a9408e41c3522480a925cb9521f02cf4380aa44796fa9569aa5043787d9c3a0a345f202d66e28f6c5fc17f8998655bff0351687e2ef6ee523f965d37ed7c4c1fedc51ad7024d8c1102fef833ecf9289050b944e2e9a5646e090f5ab5be3759ea66ee79d5f870fea4ed505a231461421084317c6c5379c74ba5eef02b77c9687f49b05606c5969ae5c84f74a7d43b148dddaffcbd45e8c4eefacdd5c8c07f926baf0b1e7f65c7184c56c9ac355fde5df39557d4011b7eeb65a18fca8de446d9879404bf64f3e460232642960938e6c797d3d942534fa64b9fb0ec5648940456ae4ec22df6ccbaca34ff8a296640ed28f903db33533e0bb4927ac96312580810a38738d5c5ae638359379d244d0c45cc9bc4525648748f4a2becb101c08d7c4ecc407067cf1008cb0f14279bae658ea5f16084769ad66a8e6a9a5137ec65764ec6d25e688cf8a357252420b1ba619e8ab19d28019060434a9d2579be998e8a735778b690cad9512cc9604d2e60e01f2cbb714dbfd87795092e0ff7acb8217074a6d0b9ae00d80685798eb4bee828dff6e1f6858202381cb4051c6a5b6918f8c042a3698ac5eb402abc1f27932764ebd54daa45105666041c1a51e55bf1761c2dbe2c75a511b168f4961385d1a7b7c780fc1c23f1710b7c1e4716e99ed044ce4697fa3b649bc85443ef1b111549d342cd2a417158d01c483e6a2d6535a5801c00f5a7bb47a0d51656bd50824b2f998ea59cde88a7c329e09f19a704104309b674e9b6dd48acd0abee6366ae1ccc24fc2cb1fc0666e71c57e314464c2f2b950b76d426441265f34ae20af7e5dbf47773459f2e34a3b1a2af5d2f406cda82049ca734f22c6ac5e284c4f4c3f10edf89ba7eac611dfd27c46fbad61aa3c5acfd1a29611b917a26ba070169f08e81441e7d6f77f73837dcf6c758c40fecebab6475fee4a6105c844fc52eb603159d4762408911fce84b736a4fae34cb79dd525ebdd53b3b241a08c664a90a6bab087052b82db1f0a9e2f98b78b4998504b148711f47caac7229b708a562e6968b91720b585b2446f7f8aa848d433ebdf0d9d5c866ae7c3660f0be9734959533da9b9484dd10954c7bbc631fc07cf74d1a103076721639a19dec9ba88904c55c3d0e4829d14e48c3f93097521c4a9f4fbcf7b0d17baa7b742afd32a2e78be29f6fb37018bd0579af59985171a8dd5dd35af833fd8816cdd704fa5214260994cd64bae6c7d1376b864874de542dafb0a5c4b29c5bd887bf1dc8ec0e2f907fcffeb6522a3aa20c8ae5912b519049719cba277be7bb6c4341d65fc530804dec7ce5c1a64c4aef279c0da8a1bcc89a63542fc2af2cd1d69701c78db225c596190e81fadabd718b794689fafc929fd092b90218642ae0c75ffe6b9fa9baff10f2424d43ecda2867013d4f2e7562d380cb9a28f1f5a96bcc9bff8dd1bce4eaaf49626550183dc19eb358c146b657c2b34fe67a8ecb12b1b29b3d0bf28d6ecc13578f7d1ec1c7f7f76f325d920ff717c7d01baffa0d52166f6849832895f9ec960c65b06506caf39ea6ececccfa197ae151b948d415338c18b3ac35f6f96e67c7662de01f8a92c2a224f4567fc72333b43fb099dda8c49c3cbaee48cff545894390165fc290d798888a84c583b0096513a5c61b2ee1e836b17632cff8f71f9c73546882961cf25a010c7276791167e0dd7d2de8bf44abe9f12419c8776d84418d8e26463ea139e64f82f81fc5b577957f6d34b247a6d7d79aec95d80320b7999f398347835d82a74f3f5637a37ca08158d4022e39ef514f264ba84dacb3c5270272ae94ee3858eaf4de98e8d944273398e315dc42a277fb97d9ee7ddc4f7dbb6cbdbb9283ff1ecbde638ce6edeb18e680addd942f6632e73fc11ba5874a179c79ae67a6406d19ab7293af407cd319862fd4c9568a3bcf31a11adc4ddd8a924e10768594e4689a109daeff28f15a182ee3bfb347f0500005d8dcc691421b6fad377a9ceda726d195eb847ee879664861d4e2e0d3567362524303feafc2b552f0f1f64436ce9efaa63b2b268c674969c879d027c37aca197b71cfe47670cc268de9714a91a3a50c7c205daa613c56c1b1f13d34eaf8dbfc126e0e9fc10cd3e508154e6cea0572e179e424d2270454b1000a3bf4aac26b18efeb9115b6fcd3fcee6ed5b9c3d585394077c35850ef697c5f8a57a270431a0a2e81f6a6269bff09be4da7640fb600130375de62e9796eed4e4e25bfd3f6addfe62addcf2b8fa8eb28d8c3fb20800a8e9ae87c114a1ae91ed347f8ff589cead9e646722180fd60bdc9d0923a1a6ec8fc6de5fadc2203344d459ef6f0145ff71a4cacdabaf1b55f262c86733dd109b747f8740a3959a13a32377e522997fbf93c41fe3408a67d7253df6e399345d9216600f82fefcba9db303442ab3f184c012b1359e8601d85d6b0312ea7b0474d0c8dbca06625643e94ffdacd9a0a2839674249370fa67a5681df0442079cf67bd073859cf3d423711639f8addb6a9acceda893f017f3ca1f23f1245473be8bc6b5c51afc5d088fc764b3d96c9bbe7908806e2b64908bd0be73aa09eeb09de1117d0159b17a166bdb1394892b815aabb68dd7aef00bb6660a31088c88d16d433079552f25801472a7302a44fcdaf13410d15ab5e690cabdfddf112046f58ded90f4d4cdc4de5bfbc5259456ace66f7dbde5c49446d377b87181f0ba03598973137ec2f9b038c0a8ddcd46a6d963086c383c9e86b98fafc0a3b8d7ace5e5f96a0414a4afd5ae75847997f982b338901d81a852081bd47ccd553c2a41aac73f2381e611c8c2581052779e0494f0e1efa0974e11659866f8687fae4236556988b24e0bfc2dceb6f71fe09ee3b4e723dbf369dd22b7889ba296d8c4062aeef1113839c793e4bf16a35b1388ec6af47c363855e03137e9e1d4795beef29d4bb62d611e14fd8f880ff1c8267f259b46229b96bd0e8f7068503b223fc01ba9d8986c601e9807bcd3c232babbbb3112c87d7c30ae496841c03b361045a31e9819b69ec7b94a12d1793ee0b9267a3f9b77e965d1089a2356c46a05f6facfe3e1fe10f5257dd1e83972a9bdf1275ed03ee0c32d8021f264ecd67f635051c9f51f69d4848876c7d68703cbdacaaac18c1ea5e43d9554ddfaeb22f72e73e53760ca15ee52fee57e153702f7f78001a282c8389adc9f1a9b33bda27d4ac6b29dca8b082db3f858df468570d2c099a2b2e5c0897e0183ab8b4dfb62d65d7492347d51ed7b69b414d0de1be678664c7209f849d62d0a5e3a64daeccd1f332831c4b91a11a5c48444e39cd19d0e45120d5ac9c03856df66c8615d359e2f89484a068468a3e319166631932b643d73ad3879b8c8854232384ec62bf7d3c68c51deacdf8685870842e57464659fc9cbfe75f97d8a34d730a74828757661040f9f2cd1832d4c15cb774e0af4d4d0dad5e0098e580f6259bcacb3557fd8442910c8222feb58104d075ef976218a6ceaf10a807b0df2fa5b08945ad17dbc17cd88d7a9bbe2d21332d2ce8a29abbfca7df2f498798e0cb0846c10e4a9125c0b7ab06902f15d8521c10def1ddc94e4f563252894f844a3ee109aec35f766001520926351795ecaa582e90598503a22a9d75bd60c8cb631897d98ea5d66d8f9f06345bb889c4aa21115518b444c2d9d45de72abc73659aafc00465cd3564834389576c5c04f911e2ac0082d72c58e2cec954e6ae72dba6c8b7ed682f488e81bc706d34c723fa3a7ba967b6b00e1abea0e7622a0d9ca17d403bcbf5e2316ab4d46734226ed6797c84161384fbb46b8fe8653cd351e526cca50e7ab8885dd7b5d240cfd15a0253830a7ceb9db44bb12529b77e3cc835442b4d58c7db6a762b7e2c5a3fb37ae9f1426a99823c2df6ca2f6fbf886af52e8565abb7904da69ad7f7029cf73ecc37b5a8c1da6a9e9e1cde38506c96bd7c8d2303d494e422fe181c96a6359b377f18917ae78729911b40b7e69cbefea3c25dd9803aee3183ee3933b5c19d84a400e6c57cb20dc7c7e68739edbf1e8e3475e0a64823dedb46c27780ad01a90a4244891c262d8b0f99e3b1adbb906f82e1977a6101a9d2b44b4b9bfc1f102490ae19e657fa8e7f432eb52d2a4ce932d5346566b887ad4c4f4b5d0dbce790a429f546593e52979c8400441bfe8485c8b864f81b627cf1e20c800b0197b562d0f9b173ca3ba0fae69fe11b91909df9a98ba358e59edbd73da0707a170b3e51928c9c27863dbc83bdecf632b0cc757ab90a270312b2949fdd93f6bea54e303fb0a97b380d516a36f86f053e55e81504affaf7d7b1b8bbde5da525d3f60a628ae17918e07b32b408b51ad3ba6030c3555556334f2fe7c11098007f3e232c8953754c794f807b0ac3680b2a3688f5205d90ccce3ba9c7907508cec61287ad0aa55a151e639bb9086444bdcd149bc5c003340b8381d8c35b073729d2e95a21af1d9995c8093d570b59d8730dd04f3e26ac85e20166e5596082680de90522bcb9532d9e9dce3a10e998f25503902fd7814577ded668bbf3de129c024135a8af420ded350479f13d55290274e3ac63f4568ec7c7a8244f610458d85ecf29aa135d0e56ee52d743200a754ee4508e94d5bc15b3cc8a28c8f37de84fb3cf27ad7590dcaedb78fd8c8f46aaa3529fbb1a2536956c940b605eda0668b1a0f763060bba65d471450a2b34c328c9fb5971851b341a092e315e34a6801cc0808559e5de6d2d9508d11d3072426aa2d43e65f8429c48dbd03197c4f616c253a5b1b50e7ff7cd44df88f5f142997adf976cd2f0cffd673c1791ab969f9dad5867abe531227c059e7b7a9c2343aad230c83513a130ce6e0c4d6815e2bd91f99b6c514703f50fb43139f2e83c521b7e5a3ff4603f006bc7d162047e647234b87439278b10ccd92a4fca136f74d211592235e602d3643fa190cecc8edaf2d727dd5db07f9873048b1f75e19e7c39ef839c0703ec53f70c9fe39b43b98fdacd56b49a416e3b8c66604fb912e3672b8b1a6c5ff7db16320b599513d39460098138b7336d9152df98179f2e07c5abffd4ecf8a2cc8903a40563f187da3a99071bf0c93a65708cb36cd6a69545b78be13a3df9b6c336166b591637bc1be3dfc502200ea982d3b428824cf257184ee93f2d0f3168d4179d238497b84cb73abead20f710057b52ed535adee055081cee4aa842c82c220c160477c16bd1baaa73f46442d2a00658303a9433aa858ce880ed80fa04b592da3c3452a0810f759cbfccd7143d10427c1d39b5c5ecffc590377ce68976315db340e0c00d35d34bec22cfe95882f52f40248281c94758c809d5e65cbf9aeb2dffbdbf2f9a7d10dcd6e7eccc5781851c26990d4a2a2e71598dca6973bfabc82a6135bcc1ee3f1611ced7454e271cbd85a07a583fe89ea98dc4c1b52293adaadfd195b95e6fef37525736a048bd3bb7cc769c50b26c42445f2d5aa37c5ae529b90a5638d920a330ce1ebaf9d979e1b8ee70aba747f7f1a0b9a873167fb5829e64ad08facdfed0fdb76718ef97eeb028cbea23578969190d46e27f81d5eae27987007e217d540d11a33cb36e5768d34d7607ea83221cda3cfefb1cc65f171711160eaadc737013ec1d51de97afd4afc67aa15a23f197800a0566ef4937a6bba9f3334c0aa0e1ed7e9b5c3fc52a3ee112169ed5bce66e88a06f7f3fdda21a10b818c080f2e08e16af6eaac777dff81bfc2231f4cd7360d460091929035b268785e54b3704d52b8c32ffcdf00f21e7f8d3434b3e1ee711a8427596a0e8ae606d02b06914ba09c0a75b2858c7a8dcfff15e2a78549a447dd5d0d5ce912623e4b43fa4106d98e0a5f7960deef827fa30e52697f486cc9928e9b614253a461435d9e993f4a2a700dd0bc54519a2044f36e8f02fb78ca1025d1ce8c35366eddc90818ca1cf9e28bb8ae0f337efe98b82af2547fa03c3eb0813e942d92f1dedac412fa6738c73339959d8f620ceb02ef65dc0a9e4ca272d1965c73c2b06810ba6e13d83de07c4eecbb9e43744b414003057bc26fce09696e98146e59b79a6d817e26b132e3c935d8e5230335ae363a42084ba271058fb25268b139397ef984861d4adbec66e66477df46049fcb8e5f0179846ca020284eccac22b51c3273ae69898295686843bfe2c2ce4f43ea8668a3121558c52d4eb967341197f650e3f145877eb1f5de8377434b18eb2a7bdbb5d7db569d0564d2db7b31f174113d8487be7a5f91f97cda158aac83f0b84eb6a787d30f35f8a1e5ce28f9f86999a06cec497fcd1c8c1c570eb00f1946f300a03bf9b08584df33e2050950dcf4010928365d667d8ee42403c9d1bab54a7518428f7679e0a0e172f33bb3b8b0a829ea3d53fe478fc2556fdb4e51bfa638e9343f628ea570a096e016f5e47e4b72b29b445f9eb12d133277b1213eae6a2ea224ee80e30eb2fd12b08bfb56a588f2f2e67b9c2cb4795c025bb257e954a7720f57687482d119b1850208267eefe0e65b0dc022da6c3324a0d4e1d35dea840b6bdf2fc652579ba3fe55c41126ca4cd54636e86089451e97e5ce3d7cc2499f0882a2c761f0c74640d5152a5bad5091187cbc0c11683f53b5f2b8d4202e33f42070f13e77a63e0794c6ac5dc986a531ab49225d408d8da33a3c89ec856b336faaee251afabc4895afc41165fb558e6c26a3dc12037945f47fc6e60d710f68ca3dd2f18ca8d96cb9e60d2d91cd5b5f56168dc8bda3d3d31779e02c9c6349847504fac30a82466cd692becd3aec74238d336e20a31c2b97be3bbd90c3a2ad938d7ff1b033fc899006acb36eb561a37d4397c09403c845f6081a36d9e4c590f335ebffdee96a0208bf18a9a5ce84ee45c76a22786822e296a957920150f5e11c3354329d4dc328552fa3f2a93d506c7159ddc3054cb1447808cd87c78b9cf74ace81847d712a68d5e88f9c75808fe57383d9867b264e7e3ba233a6bc79a13bf380736393a0b866eaacf3d51b07a0cd50e81153e4a0a70128d36ffc096c408b55f47496d08b0153a3e669688a4354ba7dcb65fad21760813afa8a8e4789a9466d7997a27f92e9dfd0e3f9e499c188a200dddc7b57794a2239feb263e8421b79df4f0e6444704476e209101ac5fbc55d41ed0ea466b05401148963ae15dbebfb8d6981330e5b9dcdb01c9d6f9f95ccf28a878e891ae69163071eebd1b738861c58c7b8b0022379412596ea8c2914977e419c5ed53c32e7b191cb148784f42044947eb19e61daf6c853364037a9f734732c8fe5ef76fcec755569621aa4cb7cffd79ffb01b18630bff7751a7e13c3e1427f3cc068ff199ddfe132eaeb4ecd69e48ce59230eff0a81f98ed2835afe2f8911bd9b03ea42cf67abe104cc8b6ee648b515c53f082aaf2ff9cccd1c5c11b920ad82b3bab7e301547713acc37a507059d5a854d08c1330827c87bcf9fb8a337f9d786f653ae90fa293285d5b2b8baf0bc97214dceb9ce1f882acdc45fc1b1c9c1ab8b9931c284fdd21a1c459a064b66f9ccecdc34bf616d9c96c44d741410307968b30d5d4512d5e3c130e2837c10a534bdc7598015c2c0fd1ced2b19628494e5726e55816da6f64c599f7617298c5e1cf4459622dfbf795488238ae1c2716843d2c8ecd1427e068d868ff4d1fa4ba4c701ac81962372867d7c021dd1d0056ef9426e5f8f0579cb26c812abf463d954d5776a3b9f52691ba69ef9dc8fbad3bbafabf6080a9811d23fc9ef802a85a5c315c4700b4d8c68544ca96203f606065bd5e42e1f593d34ef6a086a5399505d12dcd85aafb81da899eb2f01d742b735ec7820330cc92e10b243cafb228c195ade2a4f096b0170bb1be7d5265af0b9598740a5a874326e60cf475c99cacecb013d1eb5202169bcc3d8a1b98484d0dd5b06e4c432e6af4b1fe2a897215295febd579ef3ff568cf02ff1a5c6ba147c4505b3a6119a43b0f960e5fafbcf50135b7efe743580d399f1b21dd8566ab93c12efe9a00902e9fdd333c08ddeebd1a0bcad6cf5ad53fbfa2ce04bb6aa24fe9367c63e2f4f90359b7db4d68d9b68d3d40a5722c6c1fb1e62b27ebbf1bdb39ed409fb579572d64078d1391bad71b2816183da174f2d5c956ae58fd926750a272921b919f0a4aa5f824a79ddaab60c7da7c282053274df30d1df6df3e7e023e9675c329f921999c3afd1ba877b1e19ed260f2119795db264fbb9d72f4a31f230d26e12ebfa04ff480f2e6636daf722ef11df1ee5d99cf999f7dd61606c132d5f8ce95e0b154af0cb9f9ad20a49dc86bb2ad7e2f86069123aa8e25347ab2367c10b3835b72f25e953041dea58242a9b6dcd3635c24bc75f69fc7f18e90fc7c02e11c5243fa9ffceb2951eef8538f49b05c08779e8b68ce637a95e41d057522b60e5b1ed27d5a9bbb1400d01c40ce78ca77ba40cfbfbf7a9104b5d3db2f27bc78136599f3c9434167c8c09a8cb159034cac86167174cda08f81f384a8ea3d0fb9344d2eb1ee9171a2ed8e8eb1d177f5fa62274c6811a9d254083f5d0f65aacd3dd4dad307c48a1d46f354bab93bcf98b174c40b00717fd55381519ed602675faa9a7f9cad1c46f66bdfd0c8c16f93ab11cb5773227af6a104dd57783b3e03cfa19f5183af3c908bc53d62bcdcb68d767c6afe9fc3be46ff9a9e94833bd39", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0xb, {0x1, 0xfffffffffffffffd, 0x2000, 0xff, 0x6, 0x84, {0x4, 0x20000025, 0xb, 0x80000000, 0x4, 0xffff, 0x7d56, 0x5, 0xffffff6b, 0x8000, 0x7f, r3, r4, 0x2, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r0, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0xb, {0x1, 0xfffffffffffffffd, 0x2000, 0xff, 0x6, 0x84, {0x4, 0x20000025, 0xb, 0x80000000, 0x4, 0xffff, 0x7d56, 0x5, 0xffffff6b, 0x8000, 0x7f, r3, r4, 0x2, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@blksize}]}}) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@blksize}]}}) 3.694565702s ago: executing program 0 (id=1993): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x1000001, 0x6100) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$P9_ROPEN(r1, &(0x7f0000000080)={0x18, 0x71, 0x2, {{0x4}, 0xf20c}}, 0x18) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac001200", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x2000000000001]}}) 3.633924179s ago: executing program 0 (id=1994): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x6, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x1, @in=@broadcast, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0xffffff80}, 0x0) 3.561730837s ago: executing program 5 (id=1995): setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'nat\x00', 0x2, [{}, {}]}, 0x48) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES16], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="00c46200000000100000a6f7402a9d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x8, 0x0, &(0x7f0000000600)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={0x20, 0x1, 0x34, "712bab"}, 0x0}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000180)={0x0, 0xc, 0x7, &(0x7f0000000100)={0x8, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000000e40)=ANY=[@ANYBLOB="050003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="200103000000a343ed1d"], 0xfffffffffffffffd}) 3.510608066s ago: executing program 0 (id=1996): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x6, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@tmpl={0xc4, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x3000000, 0x0, 0x0, 0xff}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x1, @in=@broadcast, 0x0, 0x1}]}]}, 0x17c}}, 0x0) 3.509897696s ago: executing program 0 (id=1997): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000000, 0x8, 0x1000000, 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x40010022, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x206, 0x2b4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0193a2e89a00000000001fffffff04000180080002"], 0x20}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 3.073785517s ago: executing program 4 (id=1999): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x6, 0xf}, {0x10}, {0xf, 0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) socket$alg(0x26, 0x5, 0x0) 2.846247334s ago: executing program 4 (id=2000): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={r4, 0x7, 0x0, 0x3ee, 0xfffff800, 0x7}, 0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x3b92}, &(0x7f0000000100)=0x8) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffe0a, &(0x7f00000000c0)={&(0x7f0000000380)=@ipv6_getaddr={0x18, 0x16, 0x205, 0x0, 0x0, {0x9}}, 0x18}}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r7}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r9, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f00000006c0)=@ethtool_rxfh={0x47, 0x1, 0x2, 0x6, 0x4, "e87a00"}}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001d80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000080a010400000000000000000700000008000a40000000000900020000010031000000000900010073797a30"], 0xc0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r12) sendmmsg$unix(r11, &(0x7f0000000c40)=[{{&(0x7f0000000080)=@file={0x1, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}, 0x6e, 0x0, 0x0, 0x0, 0xfffffffffffffd07}}], 0x1, 0x0) 2.6940749s ago: executing program 4 (id=2001): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000024c0)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @private0}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="d91cbb1526e7dd568925761ac77458f5d2232c56c9ab75ae95d5f0e56f53f673defaf415a332706a7662dab6f39e7ca88d9236f25f5a946b270fbd121cbe5f0ff209f81728ba1134989c2b153628b9580b4d5d77ead072ae9c0914862782d4e571f51b4e190f714486e870088e683a2b70", 0x71}], 0x1}}], 0x1, 0x40088d4) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @broadcast}}}, 0x90) 2.472854793s ago: executing program 4 (id=2002): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x82800) fcntl$setstatus(r0, 0x4, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) (async) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f00000042c0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000700)="868218df5178d1efca6153edab4680ec6072354de694819ae33756a37a523faa4cf110db391ffe45c8f05298bd321ef486470bcb9cf85d8424f042dd67797362fdef1149e49585a88d48c9f7093d114142e558450542153b02712f07c73822582787c96c34294479758dd589d5d11e6e27d9b697ae76d923980a222e7e043de0f763a5d23e5728f132eea2c786ad088cda2d196930e1b2d0e003cc43da221a678b2ebef8c826027eeda1f541ed01947cd0083b717ff63925a31115e678e6bb1ae342599173cacfa86c7dfdece7c9e2c19b0868bfd5fa7b0dd4466641fd37b0f354e024d159b3e076241da53fa733b8cb556dbd529f47259fbaf09ae4677509c2df1d34c4138e4875da3e1db518f06d4a3cbb996c2a8b47b458d2b4b5b6d023342573a2bf285adbcd3e5531b7bf8aa3d8697cab66ddc1093e6d206bca464b8e4819b461a4402b24ee135d4ea62d4fe98642f85172a4cbd7ddb5fb18c6b000805fae0e4283939aaf963e82bbe8cda760892a070b17e554a9ecff3be42b69bf638db6328bc2227d10d7097ba01e3f59e95cbc60392d15d7c1075383d1aa23516531875254578ebb6560df7530e980e81f3cb6299072a4e4f87869130affedd856d9accdf23a6ad810c5e60c58fa5ed3d55f625742bbcbe8a853687203db06b7da0d93e23e592856b84f00ff10607ded859cb96ef345c43470666bae766fe6a9ac06e1d3485ec2cd3dd3afa21b77189a6e312d0d07ab280a8a92b3961fa74aefec8f0b6311f559cefa6e4a55ba95d7205b808bc6b512c7c08ad958f55acfd0baa7246b150ab67684c8957c2a1a4ba5be6bf61b9f05e07353d9abd7e1304a5d723e70095bd8a3ea76bba13e08e9c30c31ece0d2e45c2917143492ce9526363b0d52ad7b3ae34436e49a72dc51d3a15d88b3ead5c1fe28ba800235c84c580798b2bbe64bcea91dc29a804e501d7adae83493a716df975a99a4f667d10e7df821a24146c38095c49be95d6e063f9cdfd00c477eb26364a0b143fca9cf093ad7fe9bb3ccc208298112f4dadb410b398a880f44b53bac4b6e3bda269852cd43ea82985511ca7767bb6bc6b35d0761f064707a267c0f1d44c754fbf2e1e5c588935ed3b55174869e7a75f8b3f70fb18306702cb188977323e7efd5dccfb4b097b7cc8714b061b0970ec5a836aef7fd3502038885fc912968aafd9b248286160f82c0af814b145064186ebbc9b4eaf496493acabc7b2ba2c7022f322a1373f3bea0942f65125474a38483f2e173e8ff4ce5c0dee5bc2926a0c00640220792481b1aedecd1cd9e36663f53df6f159217f286578139fedf9d414ee99978354a68e42bda689441b659632af4493b34ea8df74b9f822c6c4dcf977b1945d55ca9ea6a069e3499fdb13e25871ec21b05246f287931e8f7702dfb353e59d4fb2e5f12b55ddcee41cb079003da2aa13b060e83b6c4d3a1d40b3a5ae90ca0643e1d701261dd3cc753d24a0157afa064c0d9ed3ebfe667333217a9b7426a631e4b1b6a138d89be4b3a446ad6cd4c3da824dccec51015a55223cd1f54f55c43350ea25d6d6d1babaf8f67cfda872a773b6fd325a18e271c2ee1ae581bfb8d23f94d7d4a099be0382759c7df3d9820d029a075692e8895c1f0b0f1d80a876b450ecc396843cf1ca0670351d134dd1745ced59f32ad93c0d858e3ed6ca316d9932c8b46f6c2614ff896f14359b8412bc4a53ab63e342cf15cc749662612837a3f29db09ca11c33258f22fa7a63113ce5fb3b7b2ae7d8cc88e521e6fbfb066e00720f7e4527d77c02ceccf433fd619f8d9d9224c4bd9ec9d916f9658ab9fea9d7e20080c148b7bd86615e8988bcf1f85f5fdd2445c0df132e983460635aea208f29c0e90e22715be811b00f41fd239555e3df98d27a49d1699030175f0b6440827644177aa12af93adfb63ee4586106022f79316034dd1de96d12c9f8414a2dc266a1c5498ad35ecfad1805534f7967186d7f05d2ecd100c0ceaaff13b032487f6adf8542600e6551dd5a011a170194c137bbcc3379e45d2a52663957a3adedbb26a515bb6412f547059a4f73dd1bc85945ce1753a8c0b9b1ab4111de521ba705defb9aeaafdd4c020c2da9edbc997076d219cc40816f784113eae59ce47f2190e82bb4afac99779b55f20bda525efb9bf763589fb4403ce4166ebafe180240391510f6db53005c70625b14cb10ecadfe6ba55f39a0cd61b5a92813667234b39caca5a7c2fc71390668380f7455b36c1ca0ea232000aa147a6798c2df0551192295a6c589fdc017a04dace0806f4906fa9626a4ffa60d6833581069e492e93b0c561140428642b0da6eaa476a1dcc34241e6430a9358939c1f2de9290d7661f98fd2f25b71bc57cf58462e1ac7084f62301a8ac71937158ca740a2bf6697cc5d82211d1a31a5b9f082358d336f01655616223d76fd44684b825107fc13385ee07fe2d92c7fd66d44c3737cf05a7d428b9afe6423dc329295b0d1b4b2a96235dc153a5b0507d73397eb148f808dab5e37e8e421edf78e8a70d2984c8c61bcfe83e64abc2c4c5d94fb6433a9446723ace9a8cc084da1e121628e508cd75e35890908c2c31f055d3e2e0e893928677af2aaec817c08f9bb8fa1e384f240a7ab3b3de2c1f3f4af77cacd3375bdcb04094dea6c4ba6b7328c7a92e99a3279a7f0910f90b26f7fdb76383c981e1a926e68b488ae97a671111a961491ecf1d92544e4b6df4f762632a81615b81f2109fb46ccc037895f1aff0ed2f0d259bc1fd00c1176c6719134d9c9cbc3870b2fe74676f7ef5416382168028350c2aed5124811de8bc13376d6233230631d03a73cf3a9a9e4b7703f08fa90e3792e7265b8f37f05383893538b23c387b06a51e35623c2af4857d2fe93a34caad9be4faa0abb6c8611a23940d72e26e2fac9768f895e1e4293dfc8c0f7b858f8afb076508f65229409d8617bb24b75a2422568ef68a1f53cf62aa486cb36fce1506cbce3086f5994012ca8cb77d191354501034298659765fab4174bef39b3460c341f259f4c290cdf3b7cb85be7385381b89be6e48872d077c9e5a6098bb19293cf195481b6b9a17f520813d63825aafd9812e436345b05afc582827631d3efbd8e444d115f0dd9f51aa3e2fef60088d7cba162c313607bbad830c18c95b04c01458ea97816d927bc51691a608593102a3a662576ee0c541f72043d092fb7cf5090072cb4b355a339b6aacbb0c4515f3cc05d8d2cc1", 0x901}], 0x1, 0x0, 0x0, 0x4010}], 0x1, 0x20040) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r3) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x48, r4, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}]}]}, 0x48}}, 0x804) 2.355049443s ago: executing program 1 (id=2003): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) io_setup(0x6, &(0x7f00000003c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x0, 0xfffffffe, 0x0, 0xb4c, 0x4, 0x6, 0x0, 0x3}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="d93c3979db996d1c840ab40697d7281c"], 0x1c}}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x800, 0x100) syz_open_procfs$pagemap(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x189240, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000040)=ANY=[@ANYBLOB="01f20000bbbb8a5cbbbb"]) ioctl$USBDEVFS_BULK(r4, 0xc0185502, &(0x7f0000000380)={{{0xf}}, 0x4a, 0x6, &(0x7f00000001c0)="99ba00a7504a61422015234472a6dd06c922df098ea59d3a34e59164b56488280af5a015b5a82d8b93d1ba7e5056f5d6c1a7178da6d4cb7e1c1e3e45de1236c3b1d5e18cef67166b1a52"}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b, 0x200000a00000}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x2e8402, 0x0) ioctl$IOMMU_IOAS_COPY(r7, 0x3b83, &(0x7f00000001c0)={0x28, 0x1, r1, r1, 0x3, 0xb, 0x8000000000000000}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x5, r1, 0x0, &(0x7f00000000c0)="ee5473", 0x3, 0x3}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x7, &(0x7f0000000200)=[{0x20, 0x0, 0x81, 0xfffff038}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}, {0x5, 0x8, 0x4, 0x6}, {0xc, 0x1, 0x6, 0x21}, {0x4387, 0x6, 0x1, 0x8}, {0xa9b0, 0xc1, 0x4, 0x2}]}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 2.353979095s ago: executing program 0 (id=2004): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000140)={{0x3, 0x3}}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}, 0x76e0}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r7, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r8, &(0x7f0000000200)='m', 0x1) ioctl$SNDCTL_DSP_SYNC(r8, 0x5001, 0x0) 2.250370594s ago: executing program 4 (id=2006): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="02", 0x1}, {&(0x7f0000000680)="60a948a7056249e751418733ec7879", 0xf}], 0x2}, 0x400c010) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r2, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000000)={0x40, 0x3, 0x21, {0x21, 0x24, "171c5a0d2d18c355728fad39c18395062149d6349483341c79d710a198000f"}}, &(0x7f0000000040)={0x0, 0x3, 0xb, @string={0xb, 0x3, "dfae029c287c245eb9"}}, &(0x7f0000000080)={0x0, 0xf, 0x45, {0x5, 0xf, 0x45, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0xc, 0x9, 0x28}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x4, 0x40}, @ssp_cap={0x24, 0x10, 0xa, 0xe, 0x6, 0x6, 0xf000, 0x9, [0xff0000, 0xf, 0x1fe00f0, 0xc0f0, 0x0, 0xff0000]}, @wireless={0xb, 0x10, 0x1, 0xc, 0xb1, 0x3, 0x5, 0x3, 0x7}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x80, 0x54, 0x7, "f7475c52", "841722df"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3d, 0x10, 0x5, 0x7, 0x3, 0x8001, 0x9}}}, &(0x7f0000000600)={0x84, &(0x7f00000001c0)={0x40, 0x0, 0x4f, "29cc35ff1c44083e85d965afd9999e84e695321c8684bee960cd1003fec54d4228a95d7d75067691850b04c7ede57220e20689a928d9b018142a710c52aa2da9f65163c18e5bdf0a3f2390f33aed1d"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000002c0)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000300)={0x20, 0x0, 0x8, {0x1e0, 0x20, [0xf0]}}, &(0x7f0000000340)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000380)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000003c0)={0x40, 0xb, 0x2, "54fb"}, &(0x7f0000000400)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000440)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000480)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000004c0)={0x40, 0x19, 0x2, "75a0"}, &(0x7f0000000500)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000540)={0x40, 0x1c, 0x1, 0xf6}, &(0x7f0000000580)={0x40, 0x1e, 0x1, 0x27}, &(0x7f00000005c0)={0x40, 0x21, 0x1, 0x4}}) 1.942308227s ago: executing program 3 (id=2009): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000bc0)=@newqdisc={0x58, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x4, 0x7f67, 0x0, 0x1, 0x2, 0x101, 0x1}}, {0x6, 0x2, [0x8]}}]}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="01001000000000005e00000000000000440f704e0d85642e410f2167b930080000b871de0000ba000000000f30"], 0x5e}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x9b94, 0x7, 0x10000000000000, 0x180, 0x7, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x2, 0x5, 0x0, 0xbdb], 0x1, 0x2c4010}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) 1.814065301s ago: executing program 3 (id=2010): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5ffff}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5ffff}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000140)=0x1000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6, 0x1, 0x2}}}}]}, 0x38}}, 0x44814) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6, 0x1, 0x2}}}}]}, 0x38}}, 0x44814) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x110, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 1.724008303s ago: executing program 3 (id=2011): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmsg$inet6(r0, &(0x7f0000001600)={&(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000001580)=[{&(0x7f00000010c0)="bf", 0x1}], 0x1}, 0x0) shutdown(r0, 0x1) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000640)=@ethtool_perm_addr={0x4b, 0x41, "4b721b782a17a7b6a00d963e3f7fdafd95073830fb8cfb34eb7cbd173ef6f04cba5a1e6a6f0ef6c61346d54f61bd850519514421d1f3050000f99b355dcb6ab9ed"}}) syz_usb_control_io(r1, 0x0, 0x0) r3 = syz_usb_connect$printer(0x1, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0xc0, 0xf8, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x3, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x10, 0x81, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x4, 0x5}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x201, 0x8, 0x7, 0x6, 0x0, 0x9}, 0x1c, &(0x7f0000000540)={0x5, 0xf, 0x1c, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0xb, 0x7f, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0xa, 0xfff7}]}, 0x1, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x1849}}]}) syz_usb_control_io$printer(r3, &(0x7f0000000600)={0x14, &(0x7f00000006c0)={0x40, 0xf, 0xc0, {0xc0, 0x22, "25e023c37329c2eb632048ada95cc4cb68a3c89db0b2b4902afe08578949d79117f6c64914639b7da09f2f1f0f44d48304b74d1091570fe151aa8efcdb5617664982debd9dc853b2efcfadf936931ca30553a5a714ce02c776eff9ab17252972859fb7c2ab97c9e53eef48367a77c4d97dd6097a9237829fc5ad6bda153d9e6f04936c1e2943ac33db3a7e578049cca791e3f62fe099704a0733a280db227426f01173e60d1868ac3fe72529dc14ca8455a7d39f0e7327d6e966cb27af06"}}, &(0x7f00000008c0)={0x0, 0x3, 0xae, @string={0xae, 0x3, "d52c0c229a421cdb02eeb13eeba17cdd89892cbecf8af15b8a9e7f731806c5f817e27da21fa43dfdb19df033339219aad307944af9d4618f4fbbcc795bfcd2667f14fd1dbab814bb4d903501b0b92ec782ef8109691d49026b42e84d4787ee36dde4cc5d22a134d4f2099b817709b97041d4c624a4786464396c87b9c21d3643483ea3c2720a75c138f540d38ae36baa4dbecd10c19c67f9c04974550f04b6df3a6081faf4c496bd5bc9e116"}}}, &(0x7f0000000c40)={0x34, &(0x7f0000000980)={0x0, 0x17, 0x56, "75588ed02444dce53f9849550224b9d3f24a8220de1094538c3fe0b5f1038509484d61b09bc158987440f5f80ebc65d18c2138fe0af5291f59516f6fe4df21e3d28808eb8881ff074829508bdadcfe33f318b7338ee0"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0xfc}, &(0x7f0000000b40)={0x20, 0x0, 0xce, {0xcc, "e18206fd8a748ea9f25a17a55d3a7e94b86506c748e63e2b1bc670afdaca89bd5f211136637b8ff869c77c16de640dbaac8f1baaf08d1940d943a0bc27d15b18a3db50c4d8d368084ed94fca1e6db94a3002c5f02196cbf6bf562ae42f21657d3caa788ec2552a19f5636a90114b660ed560346a0b866d103fd9946ff29a27402e52751b2153f476db12f30352eb5bcd4684e260b7918ce9704b988e108b312baf4a2a494d34d0f3cc94655239e74a6e4e6adf4f0c009aed9e12e293b99b56d56ed162485a47298525cef6b9"}}, &(0x7f0000000a00)={0x20, 0x1, 0x1, 0x57}, &(0x7f0000000a40)={0x20, 0x0, 0x1, 0xd1}}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@0J'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0xd2859f99480e5041}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x0, 0x9, 0x6b, "881775958cf8b9d784ac36b3d7c7da362dafd2fadaba0d14ac1d6e69d8c941cc0e6e62760b1bcec40e18da231a4644c9b87a85db5ad8dcd58838699e9e13bdafd3674ab3396a5f1b00000491bbeaa57e5edff640be944814b6264c65f5e2950c4210e966ff73d48a74a99f"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x9}, 0x0, &(0x7f0000000300)={0x20, 0x1, 0xce, "dd213d144def84191e282f8bf562cb6e03c5719d064d22fb6e87b2da0ecf18247784c75064de5aced41d801216a3f34dca4558a82f9f2b9e6b6c3e6888685471571c31ebcdc8e58e69ce26a3c6eedb78d03c20f84badec0329fa19c66c7b1b3450ef5f9bf6f94f94180e0cefdf1875d8e842555b563ca5afb9e41b332a23e1b0c443c61394954a08a1c19349da1a57bce7a051656e4722f13fe033050c24f3d2e586837c3e81798987da05cf124a6c017743c8e1550bc4df9d063b4f5cf37add363d6b05c4f2caa7eaf4b8601189"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x6}}) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000040)=0x8) 1.130427559s ago: executing program 1 (id=2012): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) (async) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x84}, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x3c}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x800, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064d1, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) (async) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, 0x0) (async) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000002c0)=0x1) 1.120950917s ago: executing program 0 (id=2013): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000e40)={0x40, 0x9, 0xc, "00004700000040f400bec073"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000840)={0x20, 0xe, 0x28, "f4aacec3362af1dd528df8fecdc4a32736c4c123e97d09406b8983621cf5091465fa0160441ce727"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000140)={0x40, 0x6, 0x4, "10d4bdb3"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) close(r3) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) close(r3) listen(r2, 0x0) connect$unix(r1, 0x0, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x44, 0x19, 0x96, 0x10, 0x6b9, 0x4061, 0x188, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7f, 0xbe, 0xfb}}]}}]}}, 0x0) syz_usb_control_io$printer(r5, &(0x7f0000000200)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3409}}}, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, 0x0) 1.101319601s ago: executing program 1 (id=2014): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)=@arm64={0x0, 0x5, 0x40, '\x00', 0x5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup(r0) write$UHID_INPUT(r4, &(0x7f0000000000)={0x9, {"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", 0x1000}}, 0x1006) 1.026380138s ago: executing program 3 (id=2015): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000000, 0x8, 0x1000000, 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x40010022, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x206, 0x2b4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0193a2e89a00000000001fffffff04000180080002"], 0x20}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 953.673258ms ago: executing program 1 (id=2016): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x80) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001d80), 0x0, 0x0) ioctl$TIOCCBRK(r2, 0x5428) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040), 0xffffffffffffffff, 0x501400) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, 0x0) syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0), 0x0, &(0x7f00000001c0)={r4, r5+60000000}, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r6, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r7, 0x1, 0x31, &(0x7f0000001600), 0x4) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 89.248824ms ago: executing program 3 (id=2017): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x1, 0x0, 0x1, "f5aefbbbc62f178fbbfe49ceaab0c50a3226b483125cf515f4197328773eeed0", 0x47425247}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff18, &(0x7f0000000000)={&(0x7f0000000a00)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd28, 0x25dfdbfd, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x8, 0x4}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x4891c) 0s ago: executing program 3 (id=2018): r0 = socket(0x2, 0x3, 0x100000001) setsockopt(r0, 0xff, 0x1, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) (async) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4affeeaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80180002"], 0x44}}, 0x4000010) (async) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x3, 0x0, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffe2f, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYRESOCT=r1, @ANYRES16=r3, @ANYBLOB="cebd845ae1f4f211152ee1d7ef678c902ff1018271fa6f80d3d4f309a7691d16768551fb387c3d558e22f88583606b9beb592b56d4f35261f53bbc7b3ed922bba0ff1ee8503b1309940d1272c15ff5cfdd91f39a144adf829e888e79d9f6ef53f6ee1746064aee432e0e9f22e468771b5a6616751345e5b1a4f6109fa6a60f97113a4c3963809c05f8a640e421f66d3ad2038507966c05f46d47c7b3e699f09ad8d1d43d1434c4d099888b75d9bf3cc2b573a887"], 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x0) r8 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) (async) r9 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r8, r9, r8}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) (async) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = dup(r11) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r11, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r14, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x804) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_EMATCHES={0x48, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x28, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR="04"]}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='3']}]}}]}]}]}}]}, 0x7c}}, 0x0) kernel console output (not intermixed with test programs): 370.481781][T13371] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 370.487880][T13371] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 370.494681][T13371] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 370.501666][T13371] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 370.508600][T13371] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 370.780716][ T5944] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 370.782055][ T960] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 370.901267][ T30] audit: type=1800 audit(1755494066.047:366): pid=13400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1657" name="bus" dev="ramfs" ino=44396 res=0 errno=0 [ 370.980946][ T5944] usb 6-1: Using ep0 maxpacket: 8 [ 370.987665][ T5944] usb 6-1: unable to get BOS descriptor or descriptor too short [ 370.996975][ T5944] usb 6-1: config 5 interface 0 has no altsetting 0 [ 371.008317][ T5944] usb 6-1: New USB device found, idVendor=0e41, idProduct=4159, bcdDevice=6b.5b [ 371.030729][ T7179] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 371.042040][ T5944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.065536][ T5944] usb 6-1: Product: syz [ 371.076961][ T5944] usb 6-1: Manufacturer: ࠉ [ 371.085741][ T5944] usb 6-1: SerialNumber: syz [ 371.122413][ T960] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 371.138151][ T960] usb 2-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 371.152710][ T960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.177044][ T960] usb 2-1: config 0 descriptor?? [ 371.324115][ T7179] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 371.341929][ T5944] snd_usb_podhd 6-1:5.0: Line 6 POD HD500X found [ 371.348580][ T7179] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 371.358789][ T5944] usb 6-1: selecting invalid altsetting 1 [ 371.364894][ T5944] snd_usb_podhd 6-1:5.0: set_interface failed [ 371.372837][ T7179] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 371.382301][ T5944] snd_usb_podhd 6-1:5.0: Line 6 POD HD500X now disconnected [ 371.391439][ T7179] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.399654][ T5944] snd_usb_podhd 6-1:5.0: probe with driver snd_usb_podhd failed with error -22 [ 371.411249][ T5944] usb 6-1: USB disconnect, device number 48 [ 371.441799][T13388] program syz.1.1660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 371.615695][T13401] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 371.627457][ T7179] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 371.680838][ T960] sigmamicro 0003:1C4F:0059.0019: item fetching failed at offset 0/5 [ 371.701295][ T960] sigmamicro 0003:1C4F:0059.0019: probe with driver sigmamicro failed with error -22 [ 371.898663][T13409] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1665'. [ 371.961840][ T5944] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 372.120818][ T5944] usb 1-1: Using ep0 maxpacket: 32 [ 372.135933][T13407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.146958][T13407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.168994][T13423] syzkaller1: entered promiscuous mode [ 372.171058][ T5863] Bluetooth: hci3: command 0x0c1a tx timeout [ 372.175314][T13423] syzkaller1: entered allmulticast mode [ 372.373695][T13407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.383431][T13407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.395985][T13407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.406631][ T960] usb 2-1: USB disconnect, device number 79 [ 372.407748][T13407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.475974][ T5944] usb 1-1: unable to get BOS descriptor or descriptor too short [ 372.490987][ T5863] Bluetooth: hci5: command 0x0406 tx timeout [ 372.497268][ T5865] Bluetooth: hci4: command 0x0405 tx timeout [ 372.506565][ T5944] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 372.515391][ T5944] usb 1-1: can't read configurations, error -71 [ 372.580708][ T5865] Bluetooth: hci0: command 0x0405 tx timeout [ 372.624648][T13427] fuse: Unknown parameter 'rootcontext' [ 373.598169][ T960] usb 5-1: USB disconnect, device number 82 [ 373.701468][ T5943] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 373.847046][T13451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1677'. [ 373.856140][T13451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.873342][ T5943] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 373.881865][ T5943] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.943971][ T5943] usb 6-1: config 0 has no interface number 0 [ 373.961269][ T5943] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 374.023099][ T5943] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 374.048814][ T5943] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 374.058890][ T5943] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.070357][ T5943] usb 6-1: Product: syz [ 374.079340][ T5943] usb 6-1: Manufacturer: syz [ 374.169685][T13457] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1678'. [ 374.181057][ T5943] usb 6-1: SerialNumber: syz [ 374.206231][ T5943] usb 6-1: config 0 descriptor?? [ 374.254723][T13460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.309052][T13460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.431845][ T5943] usbtouchscreen 6-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 374.449798][ T5943] usb 6-1: USB disconnect, device number 49 [ 374.501380][ T960] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 374.574226][ T5865] Bluetooth: hci5: command 0x0406 tx timeout [ 374.661635][ T5865] Bluetooth: hci0: command 0x0405 tx timeout [ 374.669067][ T960] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 374.680046][ T960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.691760][ T960] usb 1-1: config 0 descriptor?? [ 374.910089][ T960] pegasus 1-1:0.0: probe with driver pegasus failed with error -71 [ 374.944399][ T960] usb 1-1: USB disconnect, device number 92 [ 374.983844][T13470] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1682'. [ 375.014457][ T5943] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 375.072891][T13470] 8021q: adding VLAN 0 to HW filter on device bond2 [ 375.093238][T13473] bond2: (slave batadv1): Opening slave failed [ 375.173980][ T5943] usb 2-1: config 0 has no interfaces? [ 375.184154][ T5943] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 375.202510][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.210531][ T5943] usb 2-1: Product: syz [ 375.215344][ T5943] usb 2-1: Manufacturer: syz [ 375.225182][ T5943] usb 2-1: SerialNumber: syz [ 375.236838][ T5943] usb 2-1: config 0 descriptor?? [ 375.390886][ T7183] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 375.540779][ T7183] usb 6-1: Using ep0 maxpacket: 16 [ 375.547098][ T7183] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.559053][ T7183] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 375.569473][ T7183] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 375.578755][ T7183] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.587008][ T7183] usb 6-1: Product: syz [ 375.591254][ T7183] usb 6-1: Manufacturer: syz [ 375.595863][ T7183] usb 6-1: SerialNumber: syz [ 375.691323][ T5943] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 375.808208][ T7183] usb 6-1: 0:2 : does not exist [ 375.819637][ T7183] usb 6-1: USB disconnect, device number 50 [ 375.837101][ T7531] udevd[7531]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 375.854851][ T5943] usb 1-1: config 5 has an invalid interface number: 123 but max is 0 [ 375.865996][ T5943] usb 1-1: config 5 has no interface number 0 [ 375.872999][ T5943] usb 1-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 375.885712][ T5943] usb 1-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 375.895979][ T5943] usb 1-1: config 5 interface 123 has no altsetting 0 [ 375.905369][ T5943] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 375.914513][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.923845][ T5943] usb 1-1: Product: syz [ 375.970749][ T5943] usb 1-1: Manufacturer: syz [ 375.976222][ T5943] usb 1-1: SerialNumber: syz [ 376.036675][T13482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1686'. [ 376.060574][T13482] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (3800 ns). Using initial count to start timer. [ 376.078710][T13482] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1686'. [ 376.089813][T13482] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 376.195277][ T5943] ni6501 1-1:5.123: driver 'ni6501' failed to auto-configure device. [ 376.216441][ T5943] usb 1-1: USB disconnect, device number 93 [ 376.359124][T13495] ip6tnl2: entered promiscuous mode [ 376.365546][T13495] ip6tnl2: entered allmulticast mode [ 376.444237][T13498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.456237][T13498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.560745][ T960] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 376.720679][ T960] usb 5-1: Using ep0 maxpacket: 16 [ 376.731084][ T5865] Bluetooth: hci0: command 0x0405 tx timeout [ 376.738896][ T960] usb 5-1: config 0 has an invalid interface number: 125 but max is 0 [ 376.749478][ T960] usb 5-1: config 0 has no interface number 0 [ 376.762729][ T960] usb 5-1: New USB device found, idVendor=04e8, idProduct=a100, bcdDevice=b2.9d [ 376.820698][ T960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.830862][ T960] usb 5-1: Product: syz [ 376.835048][ T960] usb 5-1: Manufacturer: syz [ 376.839646][ T960] usb 5-1: SerialNumber: syz [ 376.873418][ T960] usb 5-1: config 0 descriptor?? [ 376.882860][ T960] ax88179_178a 5-1:0.125: probe with driver ax88179_178a failed with error -22 [ 377.082586][ T7183] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 377.099792][T13491] netlink: 'syz.4.1690': attribute type 21 has an invalid length. [ 377.107855][T13491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1690'. [ 377.117800][T13491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.126766][T13491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.137815][T13491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.152572][T13491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.165220][T13491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.221058][T13491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.295518][ T960] usb 5-1: USB disconnect, device number 83 [ 377.335174][T13513] input: syz1 as /devices/virtual/input/input37 [ 377.464014][ T7183] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 377.503896][ T7183] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 377.521147][ T7183] usb 1-1: can't read configurations, error -61 [ 377.686817][ T7183] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 377.732299][ T7179] usb 2-1: USB disconnect, device number 80 [ 377.871138][ T7183] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 377.921345][ T7183] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 377.929118][ T7183] usb 1-1: can't read configurations, error -61 [ 377.942312][ T7183] usb usb1-port1: attempt power cycle [ 378.290729][ T7183] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 378.550218][ T7183] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 378.652598][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.713800][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.954443][ T7183] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 378.962700][ T7183] usb 1-1: can't read configurations, error -61 [ 379.091180][ T7183] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 379.122385][ T7183] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 379.142523][ T7183] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 379.150209][ T7183] usb 1-1: can't read configurations, error -61 [ 379.198715][ T7183] usb usb1-port1: unable to enumerate USB device [ 379.389290][ T30] audit: type=1800 audit(1755494074.627:367): pid=13552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1705" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 379.691239][ T960] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 379.830782][ T5943] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 379.838753][ T960] usb 6-1: device descriptor read/64, error -71 [ 379.979444][T13559] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 380.002549][ T5943] usb 5-1: Using ep0 maxpacket: 32 [ 380.011608][ T5943] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 380.025443][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.033612][ T5943] usb 5-1: Product: syz [ 380.038321][ T5943] usb 5-1: Manufacturer: syz [ 380.044635][ T5943] usb 5-1: SerialNumber: syz [ 380.068935][ T5943] usb 5-1: config 0 descriptor?? [ 380.078267][ T5943] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 380.084728][ T960] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 380.221243][ T960] usb 6-1: device descriptor read/64, error -71 [ 380.332717][ T960] usb usb6-port1: attempt power cycle [ 380.480733][ T24] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 380.667946][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.685322][ T24] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 380.694619][ T960] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 380.706415][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.722765][ T960] usb 6-1: device descriptor read/8, error -71 [ 380.732949][T13570] veth0: entered promiscuous mode [ 380.738973][T13570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1710'. [ 380.896034][T13557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.915082][T13557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.970839][ T960] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 380.982348][T13570] veth0 (unregistering): left promiscuous mode [ 381.002885][ T960] usb 6-1: device descriptor read/8, error -71 [ 381.009595][ T24] usb 1-1: config 0 descriptor?? [ 381.152665][ T960] usb usb6-port1: unable to enumerate USB device [ 381.201423][T13557] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1707'. [ 381.512237][ T5943] gspca_ov534_9: reg_w failed -110 [ 381.810812][ T5943] gspca_ov534_9: Unknown sensor 0000 [ 381.810913][ T5943] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 381.845255][ T5943] usb 5-1: USB disconnect, device number 84 [ 382.254084][T13580] fuse: Unknown parameter '}Jt' [ 382.264396][ T5943] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 382.350479][T13583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.364904][T13584] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.440750][ T5943] usb 2-1: Using ep0 maxpacket: 16 [ 382.485959][ T5943] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 382.507721][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.522297][ T5943] usb 2-1: Product: syz [ 382.537700][ T5943] usb 2-1: Manufacturer: syz [ 382.550162][ T5943] usb 2-1: SerialNumber: syz [ 382.572445][ T5943] r8152-cfgselector 2-1: Unknown version 0x0000 [ 382.582805][ T5943] r8152-cfgselector 2-1: config 0 descriptor?? [ 383.039558][ T7179] r8152-cfgselector 2-1: USB disconnect, device number 81 [ 383.139942][T13568] Set syz1 is full, maxelem 65536 reached [ 383.173163][T13592] netlink: 'syz.5.1715': attribute type 5 has an invalid length. [ 383.185894][T13592] ip6erspan0: entered promiscuous mode [ 383.637674][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 383.706912][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 383.727445][ T24] usb 1-1: USB disconnect, device number 98 [ 383.757448][T13598] overlayfs: missing 'lowerdir' [ 384.012016][T13609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1721'. [ 384.051095][ T7183] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 384.133175][ T24] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 384.202240][ T7183] usb 2-1: Using ep0 maxpacket: 8 [ 384.209258][ T7183] usb 2-1: unable to get BOS descriptor or descriptor too short [ 384.219880][ T7183] usb 2-1: config 10 has an invalid interface number: 223 but max is 2 [ 384.229142][ T7183] usb 2-1: config 10 has an invalid interface number: 79 but max is 2 [ 384.237391][ T7183] usb 2-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config [ 384.248628][ T7183] usb 2-1: config 10 has 2 interfaces, different from the descriptor's value: 3 [ 384.258035][ T7183] usb 2-1: config 10 has no interface number 0 [ 384.281761][ T7183] usb 2-1: config 10 has no interface number 1 [ 384.288159][ T7183] usb 2-1: config 10 interface 223 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 384.290858][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 384.303056][ T7183] usb 2-1: config 10 interface 79 altsetting 73 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 384.371617][ T7183] usb 2-1: config 10 interface 79 altsetting 73 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 384.388054][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.398572][ T7183] usb 2-1: config 10 interface 223 has no altsetting 0 [ 384.398702][ T24] usb 1-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 384.419208][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 384.423767][ T7183] usb 2-1: config 10 interface 79 has no altsetting 0 [ 384.426137][ T24] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 384.436629][ T7183] usb 2-1: New USB device found, idVendor=2013, idProduct=025d, bcdDevice=a3.4b [ 384.453636][ T7183] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.453727][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.470161][ T7183] usb 2-1: Product: syz [ 384.471692][ T24] usb 1-1: config 0 descriptor?? [ 384.480011][ T7183] usb 2-1: Manufacturer: syz [ 384.484738][ T7183] usb 2-1: SerialNumber: syz [ 384.709236][T13605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.725047][T13605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.765370][ T7183] dvb-usb: found a 'PCTV 2002e SE' in cold state, will try to load a firmware [ 384.804051][ T7183] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 384.817998][ T7183] dib0700: firmware download failed at 7 with -22 [ 384.833299][ T7183] dvb-usb: found a 'PCTV 2002e SE' in cold state, will try to load a firmware [ 384.843171][ T7183] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 384.856263][ T7183] dib0700: firmware download failed at 7 with -22 [ 384.872042][ T7183] usb 2-1: USB disconnect, device number 82 [ 385.108452][T13622] sctp: [Deprecated]: syz.3.1725 (pid 13622) Use of struct sctp_assoc_value in delayed_ack socket option. [ 385.108452][T13622] Use struct sctp_sack_info instead [ 385.179665][T13623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.190110][T13623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.202815][T13623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.213319][T13623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.230840][ T7179] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 385.301944][T13625] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1726'. [ 385.361624][ T7179] usb 5-1: device descriptor read/64, error -71 [ 385.600706][ T7179] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 385.650751][ T5857] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 385.731075][ T7179] usb 5-1: device descriptor read/64, error -71 [ 385.810792][ T5857] usb 2-1: Using ep0 maxpacket: 16 [ 385.819665][ T5857] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 385.829245][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.837283][ T5857] usb 2-1: Product: syz [ 385.841091][ T7179] usb usb5-port1: attempt power cycle [ 385.841534][ T5857] usb 2-1: Manufacturer: syz [ 385.851640][ T5857] usb 2-1: SerialNumber: syz [ 385.861113][ T5857] r8152-cfgselector 2-1: Unknown version 0x0000 [ 385.867963][ T5857] r8152-cfgselector 2-1: config 0 descriptor?? [ 386.148769][T13638] netlink: 'syz.5.1731': attribute type 10 has an invalid length. [ 386.159192][T13638] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 386.180980][ T7179] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 386.212343][ T7179] usb 5-1: device descriptor read/8, error -71 [ 386.296270][ T5943] r8152-cfgselector 2-1: USB disconnect, device number 83 [ 386.450902][ T7179] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 386.471162][ T7179] usb 5-1: device descriptor read/8, error -71 [ 386.580898][ T7179] usb usb5-port1: unable to enumerate USB device [ 386.608374][T13646] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1733'. [ 386.825127][ T24] usb 1-1: string descriptor 0 read error: -71 [ 386.832162][ T24] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 386.858616][ T24] usb 1-1: USB disconnect, device number 99 [ 387.079544][T13657] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1735'. [ 387.372666][ T24] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 387.522086][ T5943] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 387.550135][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 387.557837][ T24] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 387.567242][ T24] usb 2-1: config 0 has no interface number 0 [ 387.573734][ T24] usb 2-1: config 0 interface 184 has no altsetting 0 [ 387.593636][ T24] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 387.603759][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.615860][ T24] usb 2-1: Product: syz [ 387.626947][ T24] usb 2-1: Manufacturer: syz [ 387.638488][ T24] usb 2-1: SerialNumber: syz [ 387.680834][ T5943] usb 1-1: Using ep0 maxpacket: 16 [ 387.688629][ T5943] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 387.697044][ T5943] usb 1-1: config 0 has an invalid descriptor of length 234, skipping remainder of the config [ 387.719144][ T24] usb 2-1: config 0 descriptor?? [ 387.771703][ T5943] usb 1-1: config 0 has no interface number 0 [ 387.786017][ T24] smsc75xx v1.0.0 [ 387.789768][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 387.805814][ T5943] usb 1-1: config 0 interface 251 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 387.840530][ T24] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 387.861479][ T5943] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 387.870850][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.893321][ T5943] usb 1-1: Product: syz [ 387.904886][ T5943] usb 1-1: Manufacturer: syz [ 387.920356][ T5943] usb 1-1: SerialNumber: syz [ 387.937669][ T5943] usb 1-1: config 0 descriptor?? [ 387.961130][ T5943] asix 1-1:0.251: probe with driver asix failed with error -22 [ 388.290745][ T24] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 388.472804][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 388.487950][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 388.518397][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 388.528920][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 388.557299][ T24] usb 5-1: SerialNumber: syz [ 388.579009][ T24] usb 5-1: 0:2 : does not exist [ 388.586660][ T24] usb 5-1: unit 255 not found! [ 389.016204][T13675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.021898][ T7183] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 389.025582][T13675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.200710][ T7183] usb 6-1: Using ep0 maxpacket: 8 [ 389.207162][ T7183] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 389.215865][ T7183] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 389.225768][ T7183] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 389.235555][ T7183] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 389.245792][ T7183] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 389.258933][ T7183] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 389.268091][ T7183] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.384297][ T24] usb 5-1: USB disconnect, device number 89 [ 389.450483][T13679] netlink: 'syz.4.1743': attribute type 10 has an invalid length. [ 389.482141][ T7183] usb 6-1: GET_CAPABILITIES returned 0 [ 389.495557][ T7183] usbtmc 6-1:16.0: can't read capabilities [ 389.589117][T13683] FAULT_INJECTION: forcing a failure. [ 389.589117][T13683] name failslab, interval 1, probability 0, space 0, times 0 [ 389.603645][T13683] CPU: 1 UID: 0 PID: 13683 Comm: syz.3.1745 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 389.603674][T13683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 389.603690][T13683] Call Trace: [ 389.603698][T13683] [ 389.603707][T13683] dump_stack_lvl+0x189/0x250 [ 389.603736][T13683] ? __pfx____ratelimit+0x10/0x10 [ 389.603762][T13683] ? __pfx_dump_stack_lvl+0x10/0x10 [ 389.603784][T13683] ? __pfx__printk+0x10/0x10 [ 389.603810][T13683] ? fs_reclaim_acquire+0x7d/0x100 [ 389.603837][T13683] ? rcu_is_watching+0x15/0xb0 [ 389.603857][T13683] ? __pfx___might_resched+0x10/0x10 [ 389.603874][T13683] ? lock_acquire+0x5f/0x360 [ 389.603902][T13683] should_fail_ex+0x414/0x560 [ 389.603929][T13683] should_failslab+0xa8/0x100 [ 389.603956][T13683] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 389.603982][T13683] ? __alloc_skb+0x112/0x2d0 [ 389.604012][T13683] __alloc_skb+0x112/0x2d0 [ 389.604040][T13683] netlink_sendmsg+0x5c6/0xb30 [ 389.604072][T13683] ? __pfx_netlink_sendmsg+0x10/0x10 [ 389.604100][T13683] ? aa_sock_msg_perm+0xf1/0x1d0 [ 389.604119][T13683] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 389.604140][T13683] ? __pfx_netlink_sendmsg+0x10/0x10 [ 389.604166][T13683] __sock_sendmsg+0x219/0x270 [ 389.604191][T13683] ____sys_sendmsg+0x505/0x830 [ 389.604212][T13683] ? __pfx_____sys_sendmsg+0x10/0x10 [ 389.604234][T13683] ? import_iovec+0x74/0xa0 [ 389.604257][T13683] ___sys_sendmsg+0x21f/0x2a0 [ 389.604283][T13683] ? __pfx____sys_sendmsg+0x10/0x10 [ 389.604315][T13683] ? __fget_files+0x2a/0x420 [ 389.604332][T13683] ? __fget_files+0x3a0/0x420 [ 389.604352][T13683] __x64_sys_sendmsg+0x19b/0x260 [ 389.604373][T13683] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 389.604396][T13683] ? __pfx_ksys_write+0x10/0x10 [ 389.604419][T13683] ? rcu_is_watching+0x15/0xb0 [ 389.604440][T13683] ? rcu_is_watching+0x15/0xb0 [ 389.604460][T13683] do_syscall_64+0xfa/0x3b0 [ 389.604487][T13683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.604507][T13683] ? clear_bhb_loop+0x60/0xb0 [ 389.604527][T13683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.604550][T13683] RIP: 0033:0x7f7bd9b8ebe9 [ 389.604567][T13683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.604585][T13683] RSP: 002b:00007f7bd7df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 389.604611][T13683] RAX: ffffffffffffffda RBX: 00007f7bd9db5fa0 RCX: 00007f7bd9b8ebe9 [ 389.604626][T13683] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 389.604640][T13683] RBP: 00007f7bd7df6090 R08: 0000000000000000 R09: 0000000000000000 [ 389.604652][T13683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.604665][T13683] R13: 00007f7bd9db6038 R14: 00007f7bd9db5fa0 R15: 00007f7bd9edfa28 [ 389.604685][T13683] [ 389.886443][ C1] vkms_vblank_simulate: vblank timer overrun [ 389.963653][ T24] usb 2-1: USB disconnect, device number 84 [ 390.374499][ T7179] usb 1-1: USB disconnect, device number 100 [ 390.450874][ T24] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 390.610696][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 390.617296][ T24] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 390.625651][ T24] usb 5-1: config 0 has no interface number 0 [ 390.633619][ T24] usb 5-1: config 0 interface 184 has no altsetting 0 [ 390.646490][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 390.670126][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.690682][ T24] usb 5-1: Product: syz [ 390.703042][ T24] usb 5-1: Manufacturer: syz [ 390.754389][ T24] usb 5-1: SerialNumber: syz [ 390.786720][ T24] usb 5-1: config 0 descriptor?? [ 390.833259][ T24] smsc75xx v1.0.0 [ 390.933222][T13707] delete_channel: no stack [ 391.107274][T13712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.119956][T13712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.149577][T13716] netlink: 'syz.1.1754': attribute type 10 has an invalid length. [ 391.318348][T13718] netlink: 'syz.0.1752': attribute type 21 has an invalid length. [ 391.326395][T13718] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1752'. [ 391.349471][T13716] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 392.046647][T13738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.055700][T13738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.068304][T13738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1761'. [ 392.086036][T13738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.099933][T13738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.217223][T13744] fuse: Bad value for 'fd' [ 392.463531][ T30] audit: type=1326 audit(1755494087.707:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13745 comm="syz.1.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b458ebe9 code=0x7ffc0000 [ 392.486862][ T30] audit: type=1326 audit(1755494087.707:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13745 comm="syz.1.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f84b458ebe9 code=0x7ffc0000 [ 392.509256][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.516667][ T30] audit: type=1326 audit(1755494087.707:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13745 comm="syz.1.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b458ebe9 code=0x7ffc0000 [ 392.541805][ T30] audit: type=1326 audit(1755494087.707:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13745 comm="syz.1.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f84b458ebe9 code=0x7ffc0000 [ 392.564712][ T30] audit: type=1326 audit(1755494087.707:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13745 comm="syz.1.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b458ebe9 code=0x7ffc0000 [ 392.588520][ T30] audit: type=1326 audit(1755494087.707:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13745 comm="syz.1.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b458ebe9 code=0x7ffc0000 [ 392.610945][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.617927][ T30] audit: type=1326 audit(1755494087.707:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13745 comm="syz.1.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f84b458ebe9 code=0x7ffc0000 [ 392.641415][ T30] audit: type=1326 audit(1755494087.707:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13745 comm="syz.1.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b458ebe9 code=0x7ffc0000 [ 392.664324][ T30] audit: type=1326 audit(1755494087.707:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13745 comm="syz.1.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f84b458ebe9 code=0x7ffc0000 [ 392.722549][ T30] audit: type=1326 audit(1755494087.707:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13745 comm="syz.1.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b458ebe9 code=0x7ffc0000 [ 392.744904][ C1] vkms_vblank_simulate: vblank timer overrun [ 393.091130][T13756] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1765'. [ 393.161780][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 393.258987][ T24] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 393.301444][ T24] usb 5-1: USB disconnect, device number 90 [ 393.630816][ T24] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 393.790810][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 393.818085][T13774] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1768'. [ 393.827435][T13774] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1768'. [ 393.842132][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 393.850948][ T24] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 393.860407][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.876959][ T24] usb 5-1: Product: syz [ 393.885699][ T24] usb 5-1: Manufacturer: syz [ 393.891011][ T24] usb 5-1: SerialNumber: syz [ 393.904822][ T24] usb 5-1: config 0 descriptor?? [ 394.145182][ T24] gs_usb 5-1:0.0: Couldn't get device config: (err=-32) [ 394.154747][ T24] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -32 [ 394.164101][T13775] fuse: Bad value for 'user_id' [ 394.168987][T13775] fuse: Bad value for 'user_id' [ 394.485073][ T24] usb 5-1: USB disconnect, device number 91 [ 394.580186][T13779] FAULT_INJECTION: forcing a failure. [ 394.580186][T13779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.614073][T13779] CPU: 0 UID: 0 PID: 13779 Comm: syz.0.1770 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 394.614104][T13779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 394.614117][T13779] Call Trace: [ 394.614125][T13779] [ 394.614133][T13779] dump_stack_lvl+0x189/0x250 [ 394.614160][T13779] ? __pfx____ratelimit+0x10/0x10 [ 394.614187][T13779] ? __pfx_dump_stack_lvl+0x10/0x10 [ 394.614209][T13779] ? __pfx__printk+0x10/0x10 [ 394.614233][T13779] ? __might_fault+0xb0/0x130 [ 394.614261][T13779] ? rcu_is_watching+0x15/0xb0 [ 394.614283][T13779] should_fail_ex+0x414/0x560 [ 394.614309][T13779] _copy_from_iter+0x1db/0x16f0 [ 394.614329][T13779] ? rcu_is_watching+0x15/0xb0 [ 394.614346][T13779] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 394.614371][T13779] ? __pfx__copy_from_iter+0x10/0x10 [ 394.614390][T13779] ? __build_skb_around+0x257/0x3e0 [ 394.614418][T13779] ? netlink_sendmsg+0x642/0xb30 [ 394.614444][T13779] ? skb_put+0x11b/0x210 [ 394.614461][T13779] netlink_sendmsg+0x6b2/0xb30 [ 394.614491][T13779] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.614519][T13779] ? aa_sock_msg_perm+0xf1/0x1d0 [ 394.614534][T13779] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 394.614556][T13779] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.614581][T13779] __sock_sendmsg+0x219/0x270 [ 394.614618][T13779] ____sys_sendmsg+0x505/0x830 [ 394.614637][T13779] ? __pfx_____sys_sendmsg+0x10/0x10 [ 394.614659][T13779] ? import_iovec+0x74/0xa0 [ 394.614677][T13779] ___sys_sendmsg+0x21f/0x2a0 [ 394.614697][T13779] ? __pfx____sys_sendmsg+0x10/0x10 [ 394.614728][T13779] ? __fget_files+0x2a/0x420 [ 394.614745][T13779] ? __fget_files+0x3a0/0x420 [ 394.614762][T13779] __x64_sys_sendmsg+0x19b/0x260 [ 394.614782][T13779] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 394.614805][T13779] ? __pfx_ksys_write+0x10/0x10 [ 394.614829][T13779] ? rcu_is_watching+0x15/0xb0 [ 394.614850][T13779] ? rcu_is_watching+0x15/0xb0 [ 394.614878][T13779] do_syscall_64+0xfa/0x3b0 [ 394.614905][T13779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.614926][T13779] ? clear_bhb_loop+0x60/0xb0 [ 394.614948][T13779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.614968][T13779] RIP: 0033:0x7fdb0698ebe9 [ 394.614985][T13779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.615003][T13779] RSP: 002b:00007fdb07737038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.615024][T13779] RAX: ffffffffffffffda RBX: 00007fdb06bb5fa0 RCX: 00007fdb0698ebe9 [ 394.615040][T13779] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 394.615054][T13779] RBP: 00007fdb07737090 R08: 0000000000000000 R09: 0000000000000000 [ 394.615068][T13779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.615081][T13779] R13: 00007fdb06bb6038 R14: 00007fdb06bb5fa0 R15: 00007fdb06cdfa28 [ 394.615103][T13779] [ 394.929374][T13783] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1772'. [ 394.973903][T13673] usbtmc 6-1:16.0: usb_control_msg returned -110 [ 395.031567][ T7183] usb 6-1: USB disconnect, device number 55 [ 395.193540][T13801] tipc: Enabled bearer , priority 0 [ 395.233723][T13801] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 395.241599][T13801] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 395.249649][T13801] tipc: Resetting bearer [ 395.258038][ T59] tipc: Resetting bearer [ 395.366690][ T7183] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 395.600688][ T7183] usb 6-1: Using ep0 maxpacket: 16 [ 395.607259][ T7183] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.623757][ T7183] usb 6-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 395.635242][ T7183] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.649480][ T7183] usb 6-1: config 0 descriptor?? [ 395.876979][T13812] program syz.3.1779 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 395.887073][T13810] program syz.3.1779 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 396.098560][ T7183] usbhid 6-1:0.0: can't add hid device: -71 [ 396.240877][ T24] tipc: Node number set to 2775293951 [ 396.321094][ T7183] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 396.515740][ T7183] usb 6-1: USB disconnect, device number 56 [ 396.976601][T13836] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1785'. [ 397.004485][T13838] FAULT_INJECTION: forcing a failure. [ 397.004485][T13838] name failslab, interval 1, probability 0, space 0, times 0 [ 397.017343][T13838] CPU: 1 UID: 0 PID: 13838 Comm: syz.0.1786 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 397.017373][T13838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 397.017384][T13838] Call Trace: [ 397.017392][T13838] [ 397.017400][T13838] dump_stack_lvl+0x189/0x250 [ 397.017428][T13838] ? __pfx____ratelimit+0x10/0x10 [ 397.017454][T13838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 397.017476][T13838] ? __pfx__printk+0x10/0x10 [ 397.017503][T13838] ? __pfx___might_resched+0x10/0x10 [ 397.017522][T13838] ? lock_acquire+0x5f/0x360 [ 397.017550][T13838] should_fail_ex+0x414/0x560 [ 397.017577][T13838] should_failslab+0xa8/0x100 [ 397.017602][T13838] __kmalloc_noprof+0xcb/0x4f0 [ 397.017623][T13838] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 397.017644][T13838] ? lock_release+0x4b/0x3e0 [ 397.017670][T13838] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 397.017697][T13838] genl_family_rcv_msg_doit+0xb8/0x300 [ 397.017722][T13838] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 397.017748][T13838] ? apparmor_capable+0x137/0x1b0 [ 397.017772][T13838] ? bpf_lsm_capable+0x9/0x20 [ 397.017798][T13838] ? security_capable+0x7e/0x2e0 [ 397.017828][T13838] genl_rcv_msg+0x60e/0x790 [ 397.017851][T13838] ? __pfx_genl_rcv_msg+0x10/0x10 [ 397.017870][T13838] ? __kasan_slab_alloc+0x6c/0x80 [ 397.017893][T13838] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 397.017914][T13838] ? __pfx_nl80211_set_wiphy+0x10/0x10 [ 397.017934][T13838] ? __pfx_nl80211_post_doit+0x10/0x10 [ 397.017955][T13838] ? __netlink_lookup+0xbd/0x810 [ 397.017971][T13838] ? rcu_is_watching+0x15/0xb0 [ 397.017995][T13838] netlink_rcv_skb+0x208/0x470 [ 397.018022][T13838] ? __pfx_genl_rcv_msg+0x10/0x10 [ 397.018044][T13838] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 397.018074][T13838] ? lock_release+0x4b/0x3e0 [ 397.018101][T13838] ? down_read+0x1ad/0x2e0 [ 397.018119][T13838] genl_rcv+0x28/0x40 [ 397.018138][T13838] netlink_unicast+0x82c/0x9e0 [ 397.018166][T13838] ? __pfx_netlink_unicast+0x10/0x10 [ 397.018191][T13838] ? netlink_sendmsg+0x642/0xb30 [ 397.018217][T13838] ? skb_put+0x11b/0x210 [ 397.018236][T13838] netlink_sendmsg+0x805/0xb30 [ 397.018270][T13838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.018298][T13838] ? aa_sock_msg_perm+0xf1/0x1d0 [ 397.018315][T13838] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 397.018335][T13838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.018367][T13838] __sock_sendmsg+0x219/0x270 [ 397.018388][T13838] ____sys_sendmsg+0x505/0x830 [ 397.018400][T13838] ? __pfx_____sys_sendmsg+0x10/0x10 [ 397.018411][T13838] ? import_iovec+0x74/0xa0 [ 397.018424][T13838] ___sys_sendmsg+0x21f/0x2a0 [ 397.018434][T13838] ? __pfx____sys_sendmsg+0x10/0x10 [ 397.018450][T13838] ? __fget_files+0x2a/0x420 [ 397.018459][T13838] ? __fget_files+0x3a0/0x420 [ 397.018469][T13838] __x64_sys_sendmsg+0x19b/0x260 [ 397.018479][T13838] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 397.018490][T13838] ? __pfx_ksys_write+0x10/0x10 [ 397.018503][T13838] ? rcu_is_watching+0x15/0xb0 [ 397.018513][T13838] ? rcu_is_watching+0x15/0xb0 [ 397.018523][T13838] do_syscall_64+0xfa/0x3b0 [ 397.018539][T13838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.018549][T13838] ? clear_bhb_loop+0x60/0xb0 [ 397.018559][T13838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.018569][T13838] RIP: 0033:0x7fdb0698ebe9 [ 397.018579][T13838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.018589][T13838] RSP: 002b:00007fdb07737038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 397.018601][T13838] RAX: ffffffffffffffda RBX: 00007fdb06bb5fa0 RCX: 00007fdb0698ebe9 [ 397.018611][T13838] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 397.018618][T13838] RBP: 00007fdb07737090 R08: 0000000000000000 R09: 0000000000000000 [ 397.018624][T13838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.018631][T13838] R13: 00007fdb06bb6038 R14: 00007fdb06bb5fa0 R15: 00007fdb06cdfa28 [ 397.018641][T13838] [ 397.487947][T13841] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 397.576864][T13842] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1787'. [ 397.586181][T13842] (unnamed net_device) (uninitialized): option ad_select: invalid value (48) [ 397.772347][T13847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.863205][T13847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.889023][T13847] ALSA: mixer_oss: invalid OSS volume '"gL' [ 397.913534][T13847] netlink: 'syz.3.1789': attribute type 4 has an invalid length. [ 398.126679][T13847] netlink: 'syz.3.1789': attribute type 4 has an invalid length. [ 398.630926][ T7183] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 399.021833][ T7183] usb 5-1: config 0 has no interfaces? [ 399.029409][ T7183] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 399.038510][ T7183] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.046832][ T7183] usb 5-1: Product: syz [ 399.052809][ T7183] usb 5-1: Manufacturer: syz [ 399.059164][ T7183] usb 5-1: SerialNumber: syz [ 399.083368][ T7183] usb 5-1: config 0 descriptor?? [ 399.250685][ T9] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 399.253745][T13885] FAULT_INJECTION: forcing a failure. [ 399.253745][T13885] name failslab, interval 1, probability 0, space 0, times 0 [ 399.272606][T13885] CPU: 1 UID: 0 PID: 13885 Comm: syz.3.1799 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 399.272633][T13885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 399.272646][T13885] Call Trace: [ 399.272654][T13885] [ 399.272662][T13885] dump_stack_lvl+0x189/0x250 [ 399.272689][T13885] ? __pfx____ratelimit+0x10/0x10 [ 399.272714][T13885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 399.272737][T13885] ? __pfx__printk+0x10/0x10 [ 399.272759][T13885] ? genl_family_rcv_msg_doit+0x267/0x300 [ 399.272780][T13885] ? __pfx___might_resched+0x10/0x10 [ 399.272797][T13885] ? lock_acquire+0x5f/0x360 [ 399.272824][T13885] should_fail_ex+0x414/0x560 [ 399.272849][T13885] should_failslab+0xa8/0x100 [ 399.272875][T13885] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 399.272899][T13885] ? __alloc_skb+0x112/0x2d0 [ 399.272927][T13885] __alloc_skb+0x112/0x2d0 [ 399.272951][T13885] netlink_ack+0x146/0xa50 [ 399.272977][T13885] ? __pfx_genl_rcv_msg+0x10/0x10 [ 399.272997][T13885] ? __kasan_slab_alloc+0x6c/0x80 [ 399.273020][T13885] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 399.273040][T13885] ? __pfx_nl80211_post_doit+0x10/0x10 [ 399.273060][T13885] ? __netlink_lookup+0xbd/0x810 [ 399.273077][T13885] ? rcu_is_watching+0x15/0xb0 [ 399.273099][T13885] netlink_rcv_skb+0x28c/0x470 [ 399.273134][T13885] ? __pfx_genl_rcv_msg+0x10/0x10 [ 399.273153][T13885] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 399.273181][T13885] ? lock_release+0x4b/0x3e0 [ 399.273206][T13885] ? down_read+0x1ad/0x2e0 [ 399.273223][T13885] genl_rcv+0x28/0x40 [ 399.273241][T13885] netlink_unicast+0x82c/0x9e0 [ 399.273264][T13885] ? __pfx_netlink_unicast+0x10/0x10 [ 399.273288][T13885] ? netlink_sendmsg+0x642/0xb30 [ 399.273314][T13885] ? skb_put+0x11b/0x210 [ 399.273332][T13885] netlink_sendmsg+0x805/0xb30 [ 399.273361][T13885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.273387][T13885] ? aa_sock_msg_perm+0xf1/0x1d0 [ 399.273405][T13885] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 399.273424][T13885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.273447][T13885] __sock_sendmsg+0x219/0x270 [ 399.273469][T13885] ____sys_sendmsg+0x505/0x830 [ 399.273489][T13885] ? __pfx_____sys_sendmsg+0x10/0x10 [ 399.273511][T13885] ? import_iovec+0x74/0xa0 [ 399.273533][T13885] ___sys_sendmsg+0x21f/0x2a0 [ 399.273553][T13885] ? __pfx____sys_sendmsg+0x10/0x10 [ 399.273584][T13885] ? __fget_files+0x2a/0x420 [ 399.273599][T13885] ? __fget_files+0x3a0/0x420 [ 399.273616][T13885] __x64_sys_sendmsg+0x19b/0x260 [ 399.273634][T13885] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 399.273656][T13885] ? __pfx_ksys_write+0x10/0x10 [ 399.273677][T13885] ? rcu_is_watching+0x15/0xb0 [ 399.273696][T13885] ? rcu_is_watching+0x15/0xb0 [ 399.273715][T13885] do_syscall_64+0xfa/0x3b0 [ 399.273741][T13885] ? rcu_is_watching+0x15/0xb0 [ 399.273759][T13885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.273777][T13885] ? clear_bhb_loop+0x60/0xb0 [ 399.273796][T13885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.273814][T13885] RIP: 0033:0x7f7bd9b8ebe9 [ 399.273831][T13885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.273849][T13885] RSP: 002b:00007f7bd7df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.273871][T13885] RAX: ffffffffffffffda RBX: 00007f7bd9db5fa0 RCX: 00007f7bd9b8ebe9 [ 399.273885][T13885] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 399.273897][T13885] RBP: 00007f7bd7df6090 R08: 0000000000000000 R09: 0000000000000000 [ 399.273909][T13885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.273921][T13885] R13: 00007f7bd9db6038 R14: 00007f7bd9db5fa0 R15: 00007f7bd9edfa28 [ 399.273940][T13885] [ 399.711301][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 399.719557][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 399.728798][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.743377][ T9] usb 6-1: Product: syz [ 399.750674][T13890] netlink: 'syz.1.1801': attribute type 10 has an invalid length. [ 399.761089][ T9] usb 6-1: Manufacturer: syz [ 399.767919][ T9] usb 6-1: SerialNumber: syz [ 399.784743][ T9] usb 6-1: config 0 descriptor?? [ 399.806665][ T7179] IPVS: starting estimator thread 0... [ 399.901496][T13894] IPVS: using max 73 ests per chain, 175200 per kthread [ 399.993879][ T9] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 400.395716][T13877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.404620][T13877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.616228][T13877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.628869][T13877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.644689][ T9] usb write operation failed. (-71) [ 400.656627][ T9] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 400.667695][ T9] dvbdev: DVB: registering new adapter (Terratec H7) [ 400.675846][ T9] usb 6-1: media controller created [ 400.682437][ T9] usb read operation failed. (-71) [ 400.688275][ T9] usb write operation failed. (-71) [ 400.697011][ T9] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 400.715390][ T9] usb 6-1: USB disconnect, device number 57 [ 400.927705][T13925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1810'. [ 400.936819][T13925] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1810'. [ 400.990283][T13934] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 401.020516][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 401.020533][ T30] audit: type=1326 audit(1755494096.257:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13926 comm="syz.1.1811" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84b458ebe9 code=0x0 [ 401.029327][T13937] netlink: 'syz.3.1813': attribute type 10 has an invalid length. [ 401.048568][ C0] vkms_vblank_simulate: vblank timer overrun [ 401.065499][T13937] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 401.073029][T13937] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 401.082264][T13937] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 401.122050][ T5943] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 401.210908][ T24] usb 5-1: USB disconnect, device number 92 [ 401.248490][ T30] audit: type=1326 audit(1755494096.487:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13945 comm="syz.4.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f34f8ebe9 code=0x7ffc0000 [ 401.271450][ T30] audit: type=1326 audit(1755494096.487:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13945 comm="syz.4.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f34f8ebe9 code=0x7ffc0000 [ 401.708589][ T30] audit: type=1326 audit(1755494096.487:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13945 comm="syz.4.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2f34f8ebe9 code=0x7ffc0000 [ 401.734628][ T5943] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 16 [ 401.737175][ T30] audit: type=1326 audit(1755494096.487:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13945 comm="syz.4.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f34f8ebe9 code=0x7ffc0000 [ 401.766100][ C0] vkms_vblank_simulate: vblank timer overrun [ 401.770854][ T5943] usb 1-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 401.785155][ T30] audit: type=1326 audit(1755494096.487:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13945 comm="syz.4.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f34f8ebe9 code=0x7ffc0000 [ 402.025969][ T30] audit: type=1326 audit(1755494096.487:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13945 comm="syz.4.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f2f34f8ebe9 code=0x7ffc0000 [ 402.048287][ C0] vkms_vblank_simulate: vblank timer overrun [ 402.195455][ T5943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.463190][ T30] audit: type=1326 audit(1755494096.487:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13945 comm="syz.4.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f34f8ebe9 code=0x7ffc0000 [ 402.486064][ T30] audit: type=1326 audit(1755494096.487:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13945 comm="syz.4.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f34f8ebe9 code=0x7ffc0000 [ 402.508511][ T30] audit: type=1326 audit(1755494096.487:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13945 comm="syz.4.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2f34f8ebe9 code=0x7ffc0000 [ 402.542122][ T5943] usb 1-1: config 0 descriptor?? [ 402.752861][T13923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.766758][T13923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.786517][ T5943] usb 1-1: string descriptor 0 read error: -71 [ 402.795139][ T5943] usb 1-1: USB disconnect, device number 101 [ 402.830134][T13959] netlink: 'syz.4.1818': attribute type 6 has an invalid length. [ 402.841880][T13959] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1818'. [ 403.541894][T13971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.576350][T13971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.587330][T13971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.601803][T13971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.650790][ T5943] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 403.800689][ T5943] usb 1-1: Using ep0 maxpacket: 8 [ 403.807256][ T5943] usb 1-1: config index 0 descriptor too short (expected 72, got 36) [ 403.823063][ T5943] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 403.839266][ T5943] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 1.08 [ 403.850261][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.858828][ T5943] usb 1-1: Product: syz [ 403.863351][ T5943] usb 1-1: Manufacturer: syz [ 403.870368][ T5943] usb 1-1: SerialNumber: syz [ 404.114940][ T5943] usb 1-1: USB disconnect, device number 102 [ 404.241529][ T960] hid-generic 00A0:0008:0003.001A: unknown main item tag 0x0 [ 404.260141][ T960] hid-generic 00A0:0008:0003.001A: unknown main item tag 0x0 [ 404.269403][ T960] hid-generic 00A0:0008:0003.001A: unknown main item tag 0x0 [ 404.277087][ T960] hid-generic 00A0:0008:0003.001A: unknown main item tag 0x0 [ 404.284991][ T960] hid-generic 00A0:0008:0003.001A: unknown main item tag 0x0 [ 404.303560][ T960] hid-generic 00A0:0008:0003.001A: unknown main item tag 0x0 [ 404.315601][ T960] hid-generic 00A0:0008:0003.001A: unknown main item tag 0x0 [ 404.324685][ T960] hid-generic 00A0:0008:0003.001A: unknown main item tag 0x0 [ 404.335508][ T960] hid-generic 00A0:0008:0003.001A: hidraw0: HID v0.05 Device [syz1] on syz0 [ 404.348801][T13982] netlink: 'syz.1.1824': attribute type 10 has an invalid length. [ 404.459485][T13978] fuse: Unknown parameter 'user_i00000000000000000000' [ 404.470531][T13978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.484076][T13978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.491869][ T7183] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 404.654040][ T7183] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.664434][ T7183] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 404.673641][ T7183] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.683359][ T7183] usb 6-1: config 0 descriptor?? [ 404.690501][ T7183] pwc: Askey VC010 type 2 USB webcam detected. [ 404.780697][ T960] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 404.930747][ T960] usb 2-1: Using ep0 maxpacket: 16 [ 404.937282][ T960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.948714][ T960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.958851][ T960] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 404.971969][ T960] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 404.982056][ T960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.993585][ T960] usb 2-1: config 0 descriptor?? [ 405.095984][ T5865] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 405.107860][ T7183] pwc: recv_control_msg error -32 req 02 val 2b00 [ 405.122982][ T7183] pwc: recv_control_msg error -32 req 02 val 2700 [ 405.136906][ T7183] pwc: recv_control_msg error -32 req 02 val 2c00 [ 405.146674][ T7183] pwc: recv_control_msg error -32 req 04 val 1000 [ 405.153874][ T7183] pwc: recv_control_msg error -32 req 04 val 1300 [ 405.162726][ T7183] pwc: recv_control_msg error -32 req 04 val 1400 [ 405.169701][ T7183] pwc: recv_control_msg error -32 req 02 val 2000 [ 405.177560][ T7183] pwc: recv_control_msg error -32 req 02 val 2100 [ 405.185149][ T7183] pwc: recv_control_msg error -32 req 04 val 1500 [ 405.392851][ T7183] pwc: recv_control_msg error -71 req 02 val 2400 [ 405.401006][ T7183] pwc: recv_control_msg error -71 req 02 val 2600 [ 405.413769][ T7183] pwc: recv_control_msg error -71 req 02 val 2900 [ 405.417885][ T960] microsoft 0003:045E:07DA.001B: ignoring exceeding usage max [ 405.439913][ T960] microsoft 0003:045E:07DA.001B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 405.442866][ T7183] pwc: recv_control_msg error -71 req 02 val 2800 [ 405.482460][ T7183] pwc: recv_control_msg error -71 req 04 val 1100 [ 405.489106][ T960] microsoft 0003:045E:07DA.001B: no inputs found [ 405.489307][ T7183] pwc: recv_control_msg error -71 req 04 val 1200 [ 405.525146][ T960] microsoft 0003:045E:07DA.001B: could not initialize ff, continuing anyway [ 405.548575][ T7183] pwc: Registered as video103. [ 405.573212][ T7183] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input38 [ 405.636132][ T960] usb 2-1: USB disconnect, device number 85 [ 405.639233][ T7183] usb 6-1: USB disconnect, device number 58 [ 405.970074][T14006] team0: Device wireguard0 is of different type [ 406.241164][ T960] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 406.342617][T14027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.358254][T14027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.368053][T14027] random: crng reseeded on system resumption [ 406.414046][ T960] usb 5-1: config 3 has an invalid interface number: 181 but max is 0 [ 406.422882][ T960] usb 5-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 406.433671][ T960] usb 5-1: config 3 has no interface number 0 [ 406.439869][ T960] usb 5-1: config 3 interface 181 altsetting 210 has an invalid descriptor for endpoint zero, skipping [ 406.454789][ T960] usb 5-1: config 3 interface 181 altsetting 210 endpoint 0xC has invalid maxpacket 1032, setting to 64 [ 406.466936][ T960] usb 5-1: config 3 interface 181 altsetting 210 has an invalid descriptor for endpoint zero, skipping [ 406.480992][ T960] usb 5-1: config 3 interface 181 altsetting 210 endpoint 0x8 has invalid wMaxPacketSize 0 [ 406.508107][ T960] usb 5-1: config 3 interface 181 altsetting 210 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 406.519853][ T960] usb 5-1: config 3 interface 181 has no altsetting 0 [ 406.551205][ T960] usb 5-1: New USB device found, idVendor=05cc, idProduct=3000, bcdDevice=7c.f3 [ 406.560326][ T960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.604909][ T960] usb 5-1: Product: syz [ 406.616675][ T960] usb 5-1: Manufacturer: syz [ 406.625511][ T960] usb 5-1: SerialNumber: syz [ 406.899280][ T960] pegasus 5-1:3.181: probe with driver pegasus failed with error -71 [ 406.930755][ T960] usb 5-1: USB disconnect, device number 93 [ 407.432519][T14046] netlink: 'syz.4.1841': attribute type 10 has an invalid length. [ 407.447987][T14046] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 407.530862][ T9] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 407.538570][ T7183] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 407.629165][T14050] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1842'. [ 407.681176][ T9] usb 1-1: device descriptor read/64, error -71 [ 407.701017][ T960] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 407.701017][ T7183] usb 2-1: Using ep0 maxpacket: 16 [ 407.715056][ T7183] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 407.723478][ T7183] usb 2-1: config 0 has no interface number 0 [ 407.737550][ T7183] usb 2-1: config 0 interface 8 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.761380][ T7183] usb 2-1: config 0 interface 8 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.780684][ T7183] usb 2-1: config 0 interface 8 has no altsetting 0 [ 407.794702][ T7183] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 407.820362][ T7183] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.844344][ T7183] usb 2-1: config 0 descriptor?? [ 407.863226][ T960] usb 5-1: not running at top speed; connect to a high speed hub [ 407.873669][ T960] usb 5-1: config 0 has an invalid interface number: 15 but max is 3 [ 407.882656][ T960] usb 5-1: config 0 has an invalid interface number: 234 but max is 3 [ 407.902053][ T960] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 407.920983][ T9] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 407.932470][ T960] usb 5-1: config 0 has an invalid interface number: 216 but max is 3 [ 407.957647][ T960] usb 5-1: config 0 has no interface number 0 [ 407.969525][ T960] usb 5-1: config 0 has no interface number 1 [ 407.984959][ T960] usb 5-1: config 0 has no interface number 2 [ 408.000439][ T960] usb 5-1: config 0 interface 15 altsetting 124 endpoint 0x7 has invalid maxpacket 2047, setting to 64 [ 408.026320][ T960] usb 5-1: config 0 interface 15 altsetting 124 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 408.062792][ T960] usb 5-1: config 0 interface 15 altsetting 124 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 408.071148][ T9] usb 1-1: device descriptor read/64, error -71 [ 408.081165][ T960] usb 5-1: config 0 interface 15 altsetting 124 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 408.097936][T14044] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 408.142971][ T960] usb 5-1: config 0 interface 15 altsetting 124 has a duplicate endpoint with address 0xF, skipping [ 408.159505][ T960] usb 5-1: config 0 interface 234 altsetting 6 has an endpoint descriptor with address 0x11, changing to 0x1 [ 408.173275][ T960] usb 5-1: config 0 interface 234 altsetting 6 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 408.185365][ T960] usb 5-1: config 0 interface 234 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 408.197513][ T960] usb 5-1: config 0 interface 234 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 408.197718][ T9] usb usb1-port1: attempt power cycle [ 408.210180][ T960] usb 5-1: config 0 interface 216 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 408.228738][ T960] usb 5-1: too many endpoints for config 0 interface 3 altsetting 3: 180, using maximum allowed: 30 [ 408.242074][ T960] usb 5-1: config 0 interface 3 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 408.253242][ T960] usb 5-1: config 0 interface 3 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 408.265588][ T960] usb 5-1: config 0 interface 3 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 408.276653][ T960] usb 5-1: config 0 interface 3 altsetting 3 endpoint 0xA has an invalid bInterval 0, changing to 10 [ 408.290010][ T960] usb 5-1: config 0 interface 3 altsetting 3 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 408.302364][ T960] usb 5-1: config 0 interface 3 altsetting 3 has 5 endpoint descriptors, different from the interface descriptor's value: 180 [ 408.317825][ T960] usb 5-1: config 0 interface 15 has no altsetting 0 [ 408.326108][ T960] usb 5-1: config 0 interface 234 has no altsetting 0 [ 408.333403][ T960] usb 5-1: config 0 interface 3 has no altsetting 0 [ 408.343712][ T960] usb 5-1: New USB device found, idVendor=1a72, idProduct=1001, bcdDevice=af.28 [ 408.347734][ T7183] uclogic 0003:5543:0522.001C: item fetching failed at offset 2/5 [ 408.367273][ T960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.376291][ T960] usb 5-1: Product: Љ [ 408.380473][ T960] usb 5-1: Manufacturer: 㥓纘귗挀㇒䥳Ç㍔꼀냧ᒲꑈ藤ꦭ [ 408.388854][ T960] usb 5-1: SerialNumber: syz [ 408.396280][ T960] usb 5-1: config 0 descriptor?? [ 408.410034][ T7183] uclogic 0003:5543:0522.001C: parse failed [ 408.420471][ T7183] uclogic 0003:5543:0522.001C: probe with driver uclogic failed with error -22 [ 408.574004][ T24] usb 2-1: USB disconnect, device number 86 [ 408.580680][ T9] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 408.601282][ T9] usb 1-1: device descriptor read/8, error -71 [ 408.613469][ T960] ftdi_sio 5-1:0.15: FTDI USB Serial Device converter detected [ 408.622045][ T960] ftdi_sio ttyUSB0: unknown device type: 0xaf28 [ 408.633310][ T960] ftdi_sio 5-1:0.234: FTDI USB Serial Device converter detected [ 408.644470][ T960] ftdi_sio ttyUSB1: unknown device type: 0xaf28 [ 408.654369][ T960] ftdi_sio 5-1:0.216: FTDI USB Serial Device converter detected [ 408.663783][ T960] ftdi_sio ttyUSB2: unknown device type: 0xaf28 [ 408.672589][ T960] ftdi_sio 5-1:0.3: FTDI USB Serial Device converter detected [ 408.681059][ T960] ftdi_sio ttyUSB3: unknown device type: 0xaf28 [ 408.691284][ T960] usb 5-1: USB disconnect, device number 94 [ 408.705926][ T960] ftdi_sio 5-1:0.15: device disconnected [ 408.715609][ T960] ftdi_sio 5-1:0.234: device disconnected [ 408.724980][ T960] ftdi_sio 5-1:0.216: device disconnected [ 408.733991][ T960] ftdi_sio 5-1:0.3: device disconnected [ 408.748937][T14057] netlink: 'syz.5.1844': attribute type 10 has an invalid length. [ 408.851758][ T9] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 408.873026][ T9] usb 1-1: device descriptor read/8, error -71 [ 408.991105][ T9] usb usb1-port1: unable to enumerate USB device [ 409.112288][T14063] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1846'. [ 409.490758][ T960] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 409.493016][T14078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.508551][T14078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.541091][ T9] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 409.662338][ T960] usb 2-1: config index 0 descriptor too short (expected 64710, got 72) [ 409.681362][ T960] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 409.698901][ T960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.701490][ T9] usb 5-1: config 0 has no interfaces? [ 409.708108][ T960] usb 2-1: Product: syz [ 409.718005][ T960] usb 2-1: Manufacturer: syz [ 409.723459][ T960] usb 2-1: SerialNumber: syz [ 409.735230][ T960] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 409.753379][ T5857] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 409.770390][ T9] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 409.782159][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.792556][T14080] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1853'. [ 409.828359][ T9] usb 5-1: Product: syz [ 409.833864][ T9] usb 5-1: Manufacturer: syz [ 409.838485][ T9] usb 5-1: SerialNumber: syz [ 409.846730][ T9] usb 5-1: config 0 descriptor?? [ 409.973595][T14071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.982578][T14071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.074250][ T960] usb 2-1: USB disconnect, device number 87 [ 410.118304][T14089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1856'. [ 410.129853][T14089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.140108][T14089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.821728][ T5857] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 410.828709][ T5857] ath9k_htc: Failed to initialize the device [ 410.868692][ T960] usb 2-1: ath9k_htc: USB layer deinitialized [ 410.900952][ T9] usb 1-1: new full-speed USB device number 107 using dummy_hcd [ 411.012525][T14109] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 411.063994][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.075960][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 411.089675][ T9] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 411.116407][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.126110][T14112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.138450][ T9] usb 1-1: config 0 descriptor?? [ 411.146038][T14112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.158253][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 411.166385][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 411.175632][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 411.188009][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 411.196732][ T9] usb 1-1: media controller created [ 411.207970][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 411.224446][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 411.253476][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 411.268897][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input39 [ 411.293698][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 411.306729][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 411.392924][ T9] usb 1-1: USB disconnect, device number 107 [ 411.526119][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 412.428074][ T9] usb 5-1: USB disconnect, device number 95 [ 412.587828][T14140] netlink: 552 bytes leftover after parsing attributes in process `syz.0.1873'. [ 412.599293][T14140] netlink: 552 bytes leftover after parsing attributes in process `syz.0.1873'. [ 412.613161][T14140] netlink: 552 bytes leftover after parsing attributes in process `syz.0.1873'. [ 412.623175][T14140] netlink: 552 bytes leftover after parsing attributes in process `syz.0.1873'. [ 412.632835][T14140] netlink: 552 bytes leftover after parsing attributes in process `syz.0.1873'. [ 412.642435][T14140] netlink: 552 bytes leftover after parsing attributes in process `syz.0.1873'. [ 412.652273][T14140] netlink: 552 bytes leftover after parsing attributes in process `syz.0.1873'. [ 412.730788][ T7183] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 412.842131][ T960] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 412.891168][ T7183] usb 6-1: Using ep0 maxpacket: 32 [ 412.906931][ T7183] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 412.930710][ T7183] usb 6-1: config 0 has no interface number 0 [ 412.948138][ T7183] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 412.973462][ T7183] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.984420][ T7183] usb 6-1: Product: syz [ 412.988714][ T7183] usb 6-1: Manufacturer: syz [ 412.993842][ T7183] usb 6-1: SerialNumber: syz [ 413.008450][ T7183] usb 6-1: config 0 descriptor?? [ 413.110776][ T960] usb 1-1: Using ep0 maxpacket: 16 [ 413.119209][T14141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.142659][T14141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.174929][T14141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.196543][T14141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.209892][ T7183] smsc95xx v2.0.0 [ 413.223008][T14141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.233982][T14141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.245319][T14141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.256078][T14141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.268556][T14141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.287543][T14141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.315092][T14158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.318754][ T960] usb 1-1: unable to get BOS descriptor or descriptor too short [ 413.332785][T14158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.341600][ T960] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 413.350244][ T960] usb 1-1: can't read configurations, error -71 [ 413.616265][ T7183] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 413.637393][ T7183] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 413.854182][ T7183] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 413.877688][ T7183] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -61 [ 413.902040][ T9] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 413.923864][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 413.923879][ T30] audit: type=1326 audit(1755494109.167:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14164 comm="syz.0.1879" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdb0698ebe9 code=0x0 [ 413.943612][T14167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.963547][T14167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.014092][T14171] binder: 14169:14171 ioctl c0306201 200000000100 returned -14 [ 414.061261][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 414.083812][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.123028][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.133479][ T9] usb 5-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 414.142869][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.158275][ T9] usb 5-1: config 0 descriptor?? [ 414.622797][ T9] smartjoyplus 0003:0925:8866.001D: hidraw0: USB HID v0.00 Device [HID 0925:8866] on usb-dummy_hcd.4-1/input0 [ 414.736515][ T9] smartjoyplus 0003:0925:8866.001D: Force feedback for SmartJoy PLUS PS2/USB adapter [ 414.851536][ T9] usb 5-1: USB disconnect, device number 96 [ 414.948538][T14194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.958023][T14194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.070725][ T960] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 415.110794][ T5943] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 415.220740][ T960] usb 2-1: Using ep0 maxpacket: 32 [ 415.227264][ T960] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 415.236513][ T960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.245642][ T960] usb 2-1: config 0 descriptor?? [ 415.261871][ T5943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.273470][ T5943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.283384][ T5943] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 415.292550][ T5943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.304099][ T5943] usb 1-1: config 0 descriptor?? [ 415.454014][ T960] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 415.462763][ T960] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 415.473651][ T960] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 415.480902][ T960] usb 2-1: media controller created [ 415.499208][ T960] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 415.514572][ T24] usb 6-1: USB disconnect, device number 59 [ 415.590013][T14205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.598885][T14205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.630748][ T5857] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 415.790680][ T5857] usb 5-1: Using ep0 maxpacket: 32 [ 415.802310][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.816038][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.827013][ T5857] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 415.838230][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.848181][ T5857] usb 5-1: config 0 descriptor?? [ 415.908726][T14185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.922112][T14185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.931967][ T960] az6027: usb out operation failed. (-71) [ 415.938412][ T960] stb0899_attach: Driver disabled by Kconfig [ 415.946475][ T960] az6027: no front-end attached [ 415.946475][ T960] [ 415.954446][ T960] az6027: usb out operation failed. (-71) [ 415.960375][ T960] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 415.969381][ T960] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input40 [ 415.995469][ T960] dvb-usb: schedule remote query interval to 400 msecs. [ 416.008564][ T960] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 416.037216][ T960] usb 2-1: USB disconnect, device number 88 [ 416.086562][ T5943] usbhid 1-1:0.0: can't add hid device: -71 [ 416.104602][ T5943] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 416.114040][ T960] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 416.126712][T14208] netlink: 'syz.0.1893': attribute type 10 has an invalid length. [ 416.136413][ T5943] usb 1-1: USB disconnect, device number 110 [ 416.146654][T14209] input: syz1 as /devices/virtual/input/input41 [ 416.161877][T14209] input: failed to attach handler leds to device input41, error: -6 [ 416.189673][T14212] FAULT_INJECTION: forcing a failure. [ 416.189673][T14212] name failslab, interval 1, probability 0, space 0, times 0 [ 416.207152][T14212] CPU: 0 UID: 0 PID: 14212 Comm: syz.3.1894 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 416.207182][T14212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 416.207194][T14212] Call Trace: [ 416.207202][T14212] [ 416.207211][T14212] dump_stack_lvl+0x189/0x250 [ 416.207239][T14212] ? __pfx____ratelimit+0x10/0x10 [ 416.207263][T14212] ? __pfx_dump_stack_lvl+0x10/0x10 [ 416.207285][T14212] ? __pfx__printk+0x10/0x10 [ 416.207310][T14212] ? fs_reclaim_acquire+0x7d/0x100 [ 416.207337][T14212] ? rcu_is_watching+0x15/0xb0 [ 416.207356][T14212] ? __pfx___might_resched+0x10/0x10 [ 416.207374][T14212] ? lock_acquire+0x5f/0x360 [ 416.207401][T14212] should_fail_ex+0x414/0x560 [ 416.207427][T14212] should_failslab+0xa8/0x100 [ 416.207453][T14212] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 416.207479][T14212] ? __alloc_skb+0x112/0x2d0 [ 416.207505][T14212] ? rcu_is_watching+0x15/0xb0 [ 416.207524][T14212] __alloc_skb+0x112/0x2d0 [ 416.207552][T14212] netlink_sendmsg+0x5c6/0xb30 [ 416.207582][T14212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.207609][T14212] ? aa_sock_msg_perm+0xf1/0x1d0 [ 416.207626][T14212] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 416.207647][T14212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.207674][T14212] __sock_sendmsg+0x219/0x270 [ 416.207698][T14212] ____sys_sendmsg+0x505/0x830 [ 416.207719][T14212] ? __pfx_____sys_sendmsg+0x10/0x10 [ 416.207741][T14212] ? import_iovec+0x74/0xa0 [ 416.207764][T14212] ___sys_sendmsg+0x21f/0x2a0 [ 416.207783][T14212] ? __pfx____sys_sendmsg+0x10/0x10 [ 416.207816][T14212] ? __fget_files+0x2a/0x420 [ 416.207831][T14212] ? __fget_files+0x3a0/0x420 [ 416.207851][T14212] __x64_sys_sendmsg+0x19b/0x260 [ 416.207871][T14212] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 416.207894][T14212] ? __pfx_ksys_write+0x10/0x10 [ 416.207917][T14212] ? rcu_is_watching+0x15/0xb0 [ 416.207937][T14212] ? rcu_is_watching+0x15/0xb0 [ 416.207956][T14212] do_syscall_64+0xfa/0x3b0 [ 416.207983][T14212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.208002][T14212] ? clear_bhb_loop+0x60/0xb0 [ 416.208022][T14212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.208041][T14212] RIP: 0033:0x7f7bd9b8ebe9 [ 416.208063][T14212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.208081][T14212] RSP: 002b:00007f7bd7df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 416.208102][T14212] RAX: ffffffffffffffda RBX: 00007f7bd9db5fa0 RCX: 00007f7bd9b8ebe9 [ 416.208118][T14212] RDX: 0000000000008000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 416.208131][T14212] RBP: 00007f7bd7df6090 R08: 0000000000000000 R09: 0000000000000000 [ 416.208144][T14212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.208156][T14212] R13: 00007f7bd9db6038 R14: 00007f7bd9db5fa0 R15: 00007f7bd9edfa28 [ 416.208177][T14212] [ 416.507738][ T5857] ft260 0003:0403:6030.001E: unknown main item tag 0x7 [ 416.561906][T14214] __nla_validate_parse: 26 callbacks suppressed [ 416.561925][T14214] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1895'. [ 416.647531][T14223] sit1: entered allmulticast mode [ 416.705050][ T5857] ft260 0003:0403:6030.001E: chip code: 6424 8183 [ 416.877190][T14232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1900'. [ 416.901093][ T7183] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 416.913930][ T5857] ft260 0003:0403:6030.001E: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 416.956235][T14238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.965416][T14238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.051258][ T7183] usb 1-1: Using ep0 maxpacket: 8 [ 417.057944][ T7183] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 417.067187][ T7183] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.076859][ T7183] usb 1-1: config 0 descriptor?? [ 417.114716][ T5857] ft260 0003:0403:6030.001E: failed to retrieve status: -32, no wakeup [ 417.190821][ T960] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 417.336796][T14196] em28xx 4-1:0.132: failed to trigger read from i2c address 0x6e (error=-5) [ 417.345766][ T960] usb 2-1: Invalid ep0 maxpacket: 9 [ 417.353188][ T9] usb 5-1: USB disconnect, device number 97 [ 417.446781][T14244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.455689][T14244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.480795][ T960] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 417.630708][ T960] usb 2-1: Invalid ep0 maxpacket: 9 [ 417.636125][ T960] usb usb2-port1: attempt power cycle [ 417.980755][ T960] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 418.004145][ T960] usb 2-1: Invalid ep0 maxpacket: 9 [ 418.045436][T14255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1909'. [ 418.055244][T14255] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1909'. [ 418.066581][T14255] netlink: 'syz.3.1909': attribute type 3 has an invalid length. [ 418.075448][T14255] netlink: 'syz.3.1909': attribute type 2 has an invalid length. [ 418.083325][T14255] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1909'. [ 418.096499][T14255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.106578][T14255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.141081][ T960] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 418.162256][ T960] usb 2-1: Invalid ep0 maxpacket: 9 [ 418.169318][ T960] usb usb2-port1: unable to enumerate USB device [ 419.198466][T14285] FAULT_INJECTION: forcing a failure. [ 419.198466][T14285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.212086][T14285] CPU: 1 UID: 0 PID: 14285 Comm: syz.4.1918 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 419.212113][T14285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 419.212126][T14285] Call Trace: [ 419.212134][T14285] [ 419.212143][T14285] dump_stack_lvl+0x189/0x250 [ 419.212172][T14285] ? __pfx____ratelimit+0x10/0x10 [ 419.212199][T14285] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.212223][T14285] ? __pfx__printk+0x10/0x10 [ 419.212249][T14285] ? __might_fault+0xb0/0x130 [ 419.212279][T14285] ? rcu_is_watching+0x15/0xb0 [ 419.212300][T14285] should_fail_ex+0x414/0x560 [ 419.212328][T14285] _copy_from_iter+0x1db/0x16f0 [ 419.212349][T14285] ? rcu_is_watching+0x15/0xb0 [ 419.212369][T14285] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 419.212398][T14285] ? __pfx__copy_from_iter+0x10/0x10 [ 419.212418][T14285] ? __build_skb_around+0x257/0x3e0 [ 419.212450][T14285] ? netlink_sendmsg+0x642/0xb30 [ 419.212477][T14285] ? skb_put+0x11b/0x210 [ 419.212497][T14285] netlink_sendmsg+0x6b2/0xb30 [ 419.212529][T14285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.212559][T14285] ? aa_sock_msg_perm+0xf1/0x1d0 [ 419.212578][T14285] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 419.212600][T14285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.212629][T14285] __sock_sendmsg+0x219/0x270 [ 419.212655][T14285] ____sys_sendmsg+0x505/0x830 [ 419.212685][T14285] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.212709][T14285] ? import_iovec+0x74/0xa0 [ 419.212733][T14285] ___sys_sendmsg+0x21f/0x2a0 [ 419.212753][T14285] ? __pfx____sys_sendmsg+0x10/0x10 [ 419.212788][T14285] ? __fget_files+0x2a/0x420 [ 419.212805][T14285] ? __fget_files+0x3a0/0x420 [ 419.212827][T14285] __x64_sys_sendmsg+0x19b/0x260 [ 419.212848][T14285] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 419.212873][T14285] ? __pfx_ksys_write+0x10/0x10 [ 419.212897][T14285] ? rcu_is_watching+0x15/0xb0 [ 419.212916][T14285] ? rcu_is_watching+0x15/0xb0 [ 419.212937][T14285] do_syscall_64+0xfa/0x3b0 [ 419.212969][T14285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.212990][T14285] ? clear_bhb_loop+0x60/0xb0 [ 419.213013][T14285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.213033][T14285] RIP: 0033:0x7f2f34f8ebe9 [ 419.213051][T14285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.213070][T14285] RSP: 002b:00007f2f35d30038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.213093][T14285] RAX: ffffffffffffffda RBX: 00007f2f351b5fa0 RCX: 00007f2f34f8ebe9 [ 419.213109][T14285] RDX: 0000000000008000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 419.213124][T14285] RBP: 00007f2f35d30090 R08: 0000000000000000 R09: 0000000000000000 [ 419.213138][T14285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.213152][T14285] R13: 00007f2f351b6038 R14: 00007f2f351b5fa0 R15: 00007f2f352dfa28 [ 419.213173][T14285] [ 419.817018][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 419.829331][T14295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.840081][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading RX_CTL register: ffffffe0 [ 419.870418][T14295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.914816][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 419.929118][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading Medium Status register: ffffffb9 [ 419.955579][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 419.992366][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 420.015235][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 420.034948][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 420.050789][ T9] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 420.065253][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 420.082919][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 420.098090][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 420.118435][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 420.132592][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 420.153348][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 420.181675][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 420.208703][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 420.244783][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 420.255565][ T9] usb 5-1: config 0 has an invalid interface number: 95 but max is 0 [ 420.271344][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.283508][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 420.296266][ T9] usb 5-1: config 0 has no interface number 0 [ 420.304125][ T9] usb 5-1: config 0 interface 95 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 420.318343][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 420.331345][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 420.345122][ T9] usb 5-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 420.354512][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.364328][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 420.374627][ T5944] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 420.385645][ T9] usb 5-1: Product: syz [ 420.389911][ T9] usb 5-1: Manufacturer: syz [ 420.395273][ T9] usb 5-1: SerialNumber: syz [ 420.400175][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 420.413304][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 420.424288][ T9] usb 5-1: config 0 descriptor?? [ 420.434471][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 420.448032][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 420.470107][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 420.524575][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 420.542454][ T5944] usb 2-1: Using ep0 maxpacket: 8 [ 420.709867][ T5944] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 420.726334][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 420.745383][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.763438][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 420.790727][ T5944] usb 2-1: Product: syz [ 420.795256][ T5944] usb 2-1: Manufacturer: syz [ 420.800078][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 420.820081][ T5944] usb 2-1: SerialNumber: syz [ 420.846189][ T5944] usb 2-1: config 0 descriptor?? [ 420.862416][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 420.957660][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 421.024414][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 421.045602][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 421.056686][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 421.072328][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 421.091141][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 421.108036][ T5944] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 421.139987][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 421.159399][ T5944] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 421.321184][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 421.347994][ T5944] usb 2-1: USB disconnect, device number 93 [ 421.380275][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 421.431399][T14313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1924'. [ 421.514001][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 421.567573][ T9] usb 5-1: MIDIStreaming interface descriptor not found [ 421.580518][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 421.600398][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 421.634490][ T9] usb 5-1: USB disconnect, device number 98 [ 421.690539][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 421.718599][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 421.735106][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 421.770897][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 421.800960][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 421.813295][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 421.831012][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 421.869254][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 422.002965][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 422.026052][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 422.031444][T14334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.038737][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 422.061520][T14334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.232972][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056195c00: rx timeout, send abort [ 422.241360][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056195800: rx timeout, send abort [ 422.250726][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056195c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 422.265113][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056195800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 422.309800][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 422.360378][ T960] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 422.412508][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 422.439526][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 422.457955][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 422.506121][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 422.517172][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 422.532972][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 422.540760][ T960] usb 5-1: device descriptor read/64, error -71 [ 422.555652][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 422.568364][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 422.583531][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 422.605336][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 422.621008][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 422.632355][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 422.645014][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 422.656220][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 422.669308][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 422.686665][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 422.725886][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 422.736312][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 422.769486][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 422.780807][ T960] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 422.790279][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 422.820770][ T5857] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 422.832959][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 422.863689][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 422.935221][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 422.955348][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 422.978117][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 422.996912][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 423.007818][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 423.010686][ T960] usb 5-1: device descriptor read/64, error -71 [ 423.025508][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 423.026941][ T5857] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 423.121652][ T5857] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 423.132129][ T960] usb usb5-port1: attempt power cycle [ 423.213015][ T5857] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 423.233129][ T5857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.266446][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 423.305145][ T5857] usb 6-1: Product: ⫓ꭃ毼秫쾅涍ր䏂符ஓꊤ嵨✩춢숏瞋뫌ථ恝﯍瑪⸮껿叨烲ꊛ쉍ꌶꩣ靁♙莲♇摎苩蟖鷸쳑옱膧㲰褆岼Ϟ鬀ů꾱丹헸愌肵㼦쭨筅ﰰﯚ蔥⮛孚㣏疆䋣鑂㻾荮ᤒ仱＊逪ᐼ暼︶㞆魁縿⮣ቿ唘䏋﨩陮褀 [ 423.380274][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 423.392840][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 423.403316][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 423.415423][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 423.522583][ T960] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 423.522624][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 423.772241][ T960] usb 5-1: device descriptor read/8, error -71 [ 423.783136][ T5857] usb 6-1: Manufacturer: 灸ܝ珲崋뻵༰ὼ眧㓤鉘계䜉㜬痡웴দ䒒쓩ꝽＱ쉅攪务ꐎ洑넰ⳬ쌋⹴䆈ў噉쎘⿎诮ᑲ톕烙颼瓒겤뮳蓱㼴ᲄ뭉㘵쀁➡果콖᠏⍎꜐ [ 423.804881][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 423.815354][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 423.837091][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 423.901501][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 423.920802][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 423.956452][ T5857] usb 6-1: SerialNumber: 㰁 [ 423.963718][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 423.997231][ T7183] asix 1-1:0.0 (unnamed net_device) (uninitialized): Could not register MDIO bus (err -5) [ 424.050728][ T960] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 424.182235][ T7183] asix 1-1:0.0: probe with driver asix failed with error -5 [ 424.199222][ T7183] usb 1-1: USB disconnect, device number 111 [ 424.206933][ T960] usb 5-1: device descriptor read/8, error -71 [ 424.330887][ T960] usb usb5-port1: unable to enumerate USB device [ 424.490863][ T7183] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 424.572811][T14369] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1940'. [ 424.620579][ T5857] cdc_ncm 6-1:1.0: bind() failure [ 424.620910][ T7183] usb 1-1: device descriptor read/64, error -71 [ 424.632007][ T5857] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 424.632039][ T5857] cdc_ncm 6-1:1.1: bind() failure [ 424.650410][ T5857] usb 6-1: USB disconnect, device number 60 [ 424.694905][T14376] pim6reg1: entered promiscuous mode [ 424.700244][T14376] pim6reg1: entered allmulticast mode [ 424.709648][T14376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.718785][T14376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.765907][T14376] fuse: Bad value for 'fd' [ 424.881530][ T7183] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 425.011076][ T7183] usb 1-1: device descriptor read/64, error -71 [ 425.121000][ T7183] usb usb1-port1: attempt power cycle [ 425.162915][T14382] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1945'. [ 425.200800][ T960] usb 5-1: new low-speed USB device number 103 using dummy_hcd [ 425.340759][ T960] usb 5-1: device descriptor read/64, error -71 [ 425.417802][T14387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.426492][T14387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.461681][ T7183] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 425.481184][ T7183] usb 1-1: device descriptor read/8, error -71 [ 425.580805][ T960] usb 5-1: new low-speed USB device number 104 using dummy_hcd [ 425.712156][ T960] usb 5-1: device descriptor read/64, error -71 [ 425.731498][ T7183] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 425.751360][ T7183] usb 1-1: device descriptor read/8, error -71 [ 425.821623][ T960] usb usb5-port1: attempt power cycle [ 425.861060][ T7183] usb usb1-port1: unable to enumerate USB device [ 426.170892][ T960] usb 5-1: new low-speed USB device number 105 using dummy_hcd [ 426.191546][ T960] usb 5-1: device descriptor read/8, error -71 [ 426.443348][ T960] usb 5-1: new low-speed USB device number 106 using dummy_hcd [ 426.472885][ T960] usb 5-1: device descriptor read/8, error -71 [ 426.581010][ T960] usb usb5-port1: unable to enumerate USB device [ 426.947333][T14398] netlink: 'syz.5.1949': attribute type 10 has an invalid length. [ 426.956105][T14398] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1949'. [ 426.965250][T14398] team0: entered promiscuous mode [ 426.970367][T14398] team_slave_0: entered promiscuous mode [ 426.977433][T14398] team_slave_1: entered promiscuous mode [ 426.983497][T14398] team0: entered allmulticast mode [ 426.988707][T14398] team_slave_0: entered allmulticast mode [ 426.995392][T14398] team_slave_1: entered allmulticast mode [ 427.003864][T14398] bridge0: port 3(team0) entered blocking state [ 427.010867][T14398] bridge0: port 3(team0) entered disabled state [ 427.024678][T14398] bridge0: port 3(team0) entered blocking state [ 427.031040][T14398] bridge0: port 3(team0) entered forwarding state [ 427.461611][ T9] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 427.612087][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 427.619866][ T9] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 427.634830][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.645510][ T9] usb 2-1: config 0 descriptor?? [ 427.854409][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 427.884884][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 427.978462][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 427.988843][ T9] usb 2-1: media controller created [ 428.091520][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 428.120331][ T9] az6027: usb out operation failed. (-71) [ 428.134776][ T9] az6027: usb out operation failed. (-71) [ 428.140585][ T9] stb0899_attach: Driver disabled by Kconfig [ 428.150855][ T9] az6027: no front-end attached [ 428.150855][ T9] [ 428.159209][ T9] az6027: usb out operation failed. (-71) [ 428.165353][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 428.182904][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input42 [ 428.200739][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 428.207729][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 428.228204][ T9] usb 2-1: USB disconnect, device number 94 [ 428.260296][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 428.390764][ T5943] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 428.560653][ T5943] usb 5-1: Using ep0 maxpacket: 16 [ 428.567727][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 428.581647][ T5943] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 428.594827][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.758984][ T5943] usb 5-1: Product: syz [ 428.791158][ T5943] usb 5-1: Manufacturer: syz [ 428.800692][ T5943] usb 5-1: SerialNumber: syz [ 428.973098][ T5943] usb 5-1: config 0 descriptor?? [ 428.979946][ T5943] hub 5-1:0.0: bad descriptor, ignoring hub [ 428.994530][ T5943] hub 5-1:0.0: probe with driver hub failed with error -5 [ 429.004946][ T5943] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input43 [ 429.140411][T14443] netlink: 'syz.1.1959': attribute type 1 has an invalid length. [ 429.169546][T14443] bond0: (slave dummy0): Releasing backup interface [ 429.274366][T14445] random: crng reseeded on system resumption [ 430.090756][ T960] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 430.303080][ T960] usb 1-1: Using ep0 maxpacket: 32 [ 430.317570][ T960] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.332054][ T960] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.464671][ T960] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 430.528335][ T960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.612747][ T960] usb 1-1: config 0 descriptor?? [ 430.624168][ T960] hub 1-1:0.0: USB hub found [ 430.838305][ T30] audit: type=1326 audit(1755494126.077:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14452 comm="syz.0.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0698ebe9 code=0x7ffc0000 [ 430.840796][ T960] hub 1-1:0.0: 1 port detected [ 430.861545][ T30] audit: type=1326 audit(1755494126.077:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14452 comm="syz.0.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fdb0698ebe9 code=0x7ffc0000 [ 430.890159][ T30] audit: type=1326 audit(1755494126.077:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14452 comm="syz.0.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0698ebe9 code=0x7ffc0000 [ 430.915568][ T30] audit: type=1326 audit(1755494126.077:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14452 comm="syz.0.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdb0698ebe9 code=0x7ffc0000 [ 430.939930][ T30] audit: type=1326 audit(1755494126.077:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14452 comm="syz.0.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0698ebe9 code=0x7ffc0000 [ 430.966617][ T30] audit: type=1326 audit(1755494126.077:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14452 comm="syz.0.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0698ebe9 code=0x7ffc0000 [ 430.992088][ T30] audit: type=1326 audit(1755494126.077:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14452 comm="syz.0.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fdb0698ebe9 code=0x7ffc0000 [ 431.024987][ T30] audit: type=1326 audit(1755494126.077:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14452 comm="syz.0.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0698ebe9 code=0x7ffc0000 [ 431.049381][ T30] audit: type=1326 audit(1755494126.077:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14452 comm="syz.0.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdb0698d69f code=0x7ffc0000 [ 431.157956][ T30] audit: type=1326 audit(1755494126.077:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14452 comm="syz.0.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0698ebe9 code=0x7ffc0000 [ 431.474168][ T960] hub 1-1:0.0: activate --> -90 [ 431.780677][ T7183] usb 5-1: reset high-speed USB device number 107 using dummy_hcd [ 431.793152][ T7183] usb 5-1: device reset changed ep0 maxpacket size! [ 431.802453][ T7183] usb 5-1: USB disconnect, device number 107 [ 431.881676][T14472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.892453][T14472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.912750][T14472] netlink: 'syz.3.1966': attribute type 10 has an invalid length. [ 431.923859][T14472] veth0_vlan: left promiscuous mode [ 431.936014][T14472] veth0_vlan: entered promiscuous mode [ 431.958114][T14472] team0: Device veth0_vlan failed to register rx_handler [ 432.073945][ T960] usb 1-1: Failed to suspend device, error -71 [ 432.077123][ T9] usb 1-1: USB disconnect, device number 116 [ 432.141667][ T7183] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 432.291058][ T7183] usb 5-1: Using ep0 maxpacket: 32 [ 432.297915][ T7183] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 432.312538][ T7183] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 432.327666][ T7183] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.342716][ T7183] usb 5-1: config 0 descriptor?? [ 432.625314][T14480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1969'. [ 432.657556][T14480] macsec1: entered allmulticast mode [ 432.663073][T14480] geneve1: entered allmulticast mode [ 432.672293][T14480] geneve1: left allmulticast mode [ 433.112987][T14492] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 433.376172][ T7183] steelseries 0003:1038:1410.001F: missing HID_OUTPUT_REPORT 0 [ 433.404033][ T7179] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 433.455937][T14504] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1975'. [ 433.580738][ T7179] usb 6-1: Using ep0 maxpacket: 32 [ 433.587675][T14483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.597342][ T7179] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 433.598402][T14483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.605932][ T7179] usb 6-1: config 0 has no interface number 0 [ 433.669456][ T7179] usb 6-1: config 0 interface 184 has no altsetting 0 [ 433.679803][ T7179] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 433.689061][ T7179] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.697481][ T7179] usb 6-1: Product: syz [ 433.701906][ T7179] usb 6-1: Manufacturer: syz [ 433.706605][ T7179] usb 6-1: SerialNumber: syz [ 433.713109][ T7179] usb 6-1: config 0 descriptor?? [ 433.722271][ T7179] smsc75xx v1.0.0 [ 433.726300][ T7179] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 433.740688][ T7179] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22 [ 434.872453][T14518] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1978'. [ 435.023521][ T7183] usb 5-1: USB disconnect, device number 108 [ 435.412029][ T7183] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 435.586154][ T7183] usb 5-1: Using ep0 maxpacket: 16 [ 435.598436][ T7183] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 435.622587][ T7183] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.649385][ T7183] usb 5-1: Product: syz [ 435.656746][ T7183] usb 5-1: Manufacturer: syz [ 435.669192][ T7183] usb 5-1: SerialNumber: syz [ 435.781579][ T7179] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 435.819784][T14544] sctp: [Deprecated]: syz.0.1986 (pid 14544) Use of struct sctp_assoc_value in delayed_ack socket option. [ 435.819784][T14544] Use struct sctp_sack_info instead [ 435.836581][T14545] sctp: [Deprecated]: syz.0.1986 (pid 14545) Use of struct sctp_assoc_value in delayed_ack socket option. [ 435.836581][T14545] Use struct sctp_sack_info instead [ 435.885328][T14526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.902979][T14526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.915971][T14526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.928118][T14526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.942250][ T7179] usb 2-1: Using ep0 maxpacket: 8 [ 435.968846][ T7179] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 436.015100][ T7179] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 436.065199][ T7179] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 436.123267][ T7179] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 436.138529][ T7179] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.150630][ T7179] usb 2-1: Product: syz [ 436.155448][ T7179] usb 2-1: Manufacturer: syz [ 436.160118][ T7179] usb 2-1: SerialNumber: syz [ 436.168588][T14535] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 436.205208][ T960] usb 6-1: USB disconnect, device number 61 [ 436.220072][T14556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.241535][ T5943] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 436.272690][T14556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.389718][T14563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.398937][T14563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.432137][T14564] mmap: syz.0.1991 (14564): VmData 37478400 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 436.476761][ T7183] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 436.507892][ T7183] snd-usb-audio 5-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 436.543876][ T7183] usb 5-1: USB disconnect, device number 109 [ 436.572859][ T7531] udevd[7531]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 436.616829][T14574] fuse: blksize only supported for fuseblk [ 436.619499][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 436.619531][ T30] audit: type=1804 audit(1755494131.857:443): pid=14560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1990" name="file0" dev="ramfs" ino=52733 res=1 errno=0 [ 436.990893][ T7183] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 437.264258][T14592] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1999'. [ 437.303931][ T7179] cdc_ncm 2-1:1.0: bind() failure [ 437.313823][ T7179] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 437.323700][ T7179] usb 2-1: USB disconnect, device number 95 [ 437.380994][ T7183] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 437.428428][ T7183] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 437.582525][ T7183] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 437.666690][ T7183] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 437.751078][ T7183] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.260738][ T9] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 438.531071][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 438.576978][ T9] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 438.587737][ T9] usb 5-1: config 0 has no interface number 0 [ 438.595787][ T9] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 438.607853][ T9] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 438.618481][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.627335][ T9] usb 5-1: Product: syz [ 438.631914][ T9] usb 5-1: Manufacturer: syz [ 438.636553][ T9] usb 5-1: SerialNumber: syz [ 438.650096][T14630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.660224][T14630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.673178][T14630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.681892][T14630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.692275][ T9] usb 5-1: config 0 descriptor?? [ 438.710398][ T9] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 438.907260][ T9] em28xx 5-1:0.132: Video interface 132 found: [ 439.124182][ T9] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 439.665141][ T5857] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 439.675251][T14580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.684771][T14580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.685971][ T9] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 439.714027][ T9] em28xx 5-1:0.132: board has no eeprom [ 439.800697][ T9] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 439.815189][ T9] em28xx 5-1:0.132: analog set to bulk mode. [ 439.821783][ T5944] em28xx 5-1:0.132: Registering V4L2 extension [ 439.850937][ T5857] usb 1-1: Using ep0 maxpacket: 32 [ 439.858898][ T5857] usb 1-1: config 0 interface 0 has no altsetting 0 [ 439.873188][ T5857] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 439.888727][ T5857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.917837][ T5857] usb 1-1: Product: syz [ 439.922319][ T5857] usb 1-1: Manufacturer: syz [ 439.927021][ T5857] usb 1-1: SerialNumber: syz [ 439.935040][ T5857] usb 1-1: config 0 descriptor?? [ 440.092607][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.102233][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.135339][ T5944] em28xx 5-1:0.132: reading from i2c device at 0x4a failed: couldn't get the received message from the bridge (error=-5) [ 440.137784][ T960] usb 5-1: USB disconnect, device number 110 [ 440.158383][ T5944] em28xx 5-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 440.164275][ T960] em28xx 5-1:0.132: Disconnecting em28xx [ 440.265011][ T5944] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 440.272478][ T5944] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 440.279851][ T5944] em28xx 5-1:0.132: No AC97 audio processor [ 440.285484][T14659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2018'. [ 440.314923][ T5944] usb 5-1: Decoder not found [ 440.331041][ T5944] em28xx 5-1:0.132: failed to create media graph [ 440.337577][ T5944] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 440.347659][ T5944] em28xx 5-1:0.132: Remote control support is not available for this card. [ 440.347798][T14661] ================================================================== [ 440.364320][T14661] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 440.371716][T14661] Read of size 8 at addr ffff8880730c8740 by task v4l_id/14661 [ 440.379238][T14661] [ 440.381547][T14661] CPU: 1 UID: 0 PID: 14661 Comm: v4l_id Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 440.381562][T14661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 440.381570][T14661] Call Trace: [ 440.381575][T14661] [ 440.381581][T14661] dump_stack_lvl+0x189/0x250 [ 440.381596][T14661] ? rcu_is_watching+0x15/0xb0 [ 440.381608][T14661] ? __pfx_dump_stack_lvl+0x10/0x10 [ 440.381620][T14661] ? rcu_is_watching+0x15/0xb0 [ 440.381629][T14661] ? lock_release+0x4b/0x3e0 [ 440.381646][T14661] ? __virt_addr_valid+0x1c8/0x5c0 [ 440.381659][T14661] ? __virt_addr_valid+0x4a5/0x5c0 [ 440.381672][T14661] print_report+0xca/0x240 [ 440.381682][T14661] ? v4l2_fh_open+0xc7/0x430 [ 440.381697][T14661] kasan_report+0x118/0x150 [ 440.381713][T14661] ? v4l2_fh_open+0xc7/0x430 [ 440.381728][T14661] v4l2_fh_open+0xc7/0x430 [ 440.381744][T14661] em28xx_v4l2_open+0x157/0x9a0 [ 440.381760][T14661] v4l2_open+0x20c/0x360 [ 440.381777][T14661] chrdev_open+0x4c9/0x5e0 [ 440.381793][T14661] ? __pfx_chrdev_open+0x10/0x10 [ 440.381808][T14661] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 440.381826][T14661] ? __pfx_chrdev_open+0x10/0x10 [ 440.381840][T14661] do_dentry_open+0x950/0x13f0 [ 440.381854][T14661] vfs_open+0x3b/0x340 [ 440.381864][T14661] ? path_openat+0x2ecd/0x3830 [ 440.381877][T14661] path_openat+0x2ee5/0x3830 [ 440.381889][T14661] ? arch_stack_walk+0xfc/0x150 [ 440.381905][T14661] ? stack_depot_save_flags+0x40/0x860 [ 440.381921][T14661] ? __pfx_path_openat+0x10/0x10 [ 440.381933][T14661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.381947][T14661] do_filp_open+0x1fa/0x410 [ 440.381959][T14661] ? __pfx_do_filp_open+0x10/0x10 [ 440.381975][T14661] ? _raw_spin_unlock+0x28/0x50 [ 440.381988][T14661] ? alloc_fd+0x64c/0x6c0 [ 440.382004][T14661] do_sys_openat2+0x121/0x1c0 [ 440.382015][T14661] ? __pfx_do_sys_openat2+0x10/0x10 [ 440.382026][T14661] ? lock_release+0x4b/0x3e0 [ 440.382041][T14661] ? do_user_addr_fault+0xc8a/0x1390 [ 440.382058][T14661] __x64_sys_openat+0x138/0x170 [ 440.382070][T14661] do_syscall_64+0xfa/0x3b0 [ 440.382088][T14661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.382098][T14661] ? clear_bhb_loop+0x60/0xb0 [ 440.382109][T14661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.382119][T14661] RIP: 0033:0x7fceaf6a7407 [ 440.382141][T14661] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 440.382152][T14661] RSP: 002b:00007ffca07c51e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 440.382163][T14661] RAX: ffffffffffffffda RBX: 00007fceafe3f880 RCX: 00007fceaf6a7407 [ 440.382172][T14661] RDX: 0000000000000000 RSI: 00007ffca07c6f1c RDI: ffffffffffffff9c [ 440.382179][T14661] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 440.382185][T14661] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 440.382192][T14661] R13: 00007ffca07c5430 R14: 00007fceaffa6000 R15: 00005623b2a604d8 [ 440.382202][T14661] [ 440.382206][T14661] [ 440.676767][T14661] Allocated by task 5944: [ 440.681081][T14661] kasan_save_track+0x3e/0x80 [ 440.685763][T14661] __kasan_kmalloc+0x93/0xb0 [ 440.690374][T14661] __kmalloc_cache_noprof+0x230/0x3d0 [ 440.695925][T14661] em28xx_v4l2_init+0x10b/0x2e70 [ 440.700867][T14661] em28xx_init_extension+0x11d/0x1c0 [ 440.706171][T14661] process_scheduled_works+0xade/0x17b0 [ 440.711709][T14661] worker_thread+0x8a0/0xda0 [ 440.716310][T14661] kthread+0x70e/0x8a0 [ 440.720371][T14661] ret_from_fork+0x3f9/0x770 [ 440.724962][T14661] ret_from_fork_asm+0x1a/0x30 [ 440.729778][T14661] [ 440.732088][T14661] Freed by task 5944: [ 440.736068][T14661] kasan_save_track+0x3e/0x80 [ 440.740754][T14661] kasan_save_free_info+0x46/0x50 [ 440.745790][T14661] __kasan_slab_free+0x5b/0x80 [ 440.750562][T14661] kfree+0x18e/0x440 [ 440.754444][T14661] em28xx_v4l2_init+0x1683/0x2e70 [ 440.759462][T14661] em28xx_init_extension+0x11d/0x1c0 [ 440.764754][T14661] process_scheduled_works+0xade/0x17b0 [ 440.770306][T14661] worker_thread+0x8a0/0xda0 [ 440.774897][T14661] kthread+0x70e/0x8a0 [ 440.778964][T14661] ret_from_fork+0x3f9/0x770 [ 440.783553][T14661] ret_from_fork_asm+0x1a/0x30 [ 440.788317][T14661] [ 440.790639][T14661] The buggy address belongs to the object at ffff8880730c8000 [ 440.790639][T14661] which belongs to the cache kmalloc-8k of size 8192 [ 440.804779][T14661] The buggy address is located 1856 bytes inside of [ 440.804779][T14661] freed 8192-byte region [ffff8880730c8000, ffff8880730ca000) [ 440.818738][T14661] [ 440.821072][T14661] The buggy address belongs to the physical page: [ 440.827494][T14661] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x730c8 [ 440.836269][T14661] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 440.844765][T14661] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 440.852301][T14661] page_type: f5(slab) [ 440.856294][T14661] raw: 00fff00000000040 ffff88801a442280 dead000000000122 0000000000000000 [ 440.864882][T14661] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 440.873474][T14661] head: 00fff00000000040 ffff88801a442280 dead000000000122 0000000000000000 [ 440.882197][T14661] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 440.890864][T14661] head: 00fff00000000003 ffffea0001cc3201 00000000ffffffff 00000000ffffffff [ 440.899521][T14661] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 440.908177][T14661] page dumped because: kasan: bad access detected [ 440.914589][T14661] page_owner tracks the page as allocated [ 440.920287][T14661] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5944, tgid 5944 (kworker/0:5), ts 439827959681, free_ts 420969831757 [ 440.941728][T14661] post_alloc_hook+0x240/0x2a0 [ 440.946591][T14661] get_page_from_freelist+0x21e4/0x22c0 [ 440.952127][T14661] __alloc_frozen_pages_noprof+0x181/0x370 [ 440.957928][T14661] alloc_pages_mpol+0x232/0x4a0 [ 440.962790][T14661] allocate_slab+0x8a/0x370 [ 440.967287][T14661] ___slab_alloc+0xbeb/0x1410 [ 440.971959][T14661] __kmalloc_cache_noprof+0x296/0x3d0 [ 440.977329][T14661] em28xx_v4l2_init+0x10b/0x2e70 [ 440.982262][T14661] em28xx_init_extension+0x11d/0x1c0 [ 440.987536][T14661] process_scheduled_works+0xade/0x17b0 [ 440.993068][T14661] worker_thread+0x8a0/0xda0 [ 440.997650][T14661] kthread+0x70e/0x8a0 [ 441.001710][T14661] ret_from_fork+0x3f9/0x770 [ 441.006295][T14661] ret_from_fork_asm+0x1a/0x30 [ 441.011056][T14661] page last free pid 5223 tgid 5223 stack trace: [ 441.017367][T14661] __free_frozen_pages+0xbc4/0xd30 [ 441.022477][T14661] __put_partials+0x156/0x1a0 [ 441.027141][T14661] put_cpu_partial+0x17c/0x250 [ 441.031900][T14661] __slab_free+0x2d5/0x3c0 [ 441.036310][T14661] qlist_free_all+0x97/0x140 [ 441.040891][T14661] kasan_quarantine_reduce+0x148/0x160 [ 441.046341][T14661] __kasan_slab_alloc+0x22/0x80 [ 441.051183][T14661] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 441.057074][T14661] __alloc_skb+0x112/0x2d0 [ 441.061503][T14661] alloc_skb_with_frags+0xca/0x890 [ 441.066603][T14661] sock_alloc_send_pskb+0x857/0x990 [ 441.071793][T14661] unix_dgram_sendmsg+0x461/0x1850 [ 441.076983][T14661] __sock_sendmsg+0x219/0x270 [ 441.081649][T14661] __sys_sendto+0x3bd/0x520 [ 441.086149][T14661] __x64_sys_sendto+0xde/0x100 [ 441.090913][T14661] do_syscall_64+0xfa/0x3b0 [ 441.095422][T14661] [ 441.097732][T14661] Memory state around the buggy address: [ 441.103357][T14661] ffff8880730c8600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 441.111411][T14661] ffff8880730c8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 441.119464][T14661] >ffff8880730c8700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 441.127514][T14661] ^ [ 441.133650][T14661] ffff8880730c8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 441.141698][T14661] ffff8880730c8800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 441.149744][T14661] ================================================================== [ 441.157952][ C1] vkms_vblank_simulate: vblank timer overrun [ 441.166652][ T960] em28xx 5-1:0.132: Closing input extension [ 441.190719][ T5857] gs_usb 1-1:0.0: Configuring for 196 interfaces [ 441.197425][ T5857] gs_usb 1-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 441.205414][ T5857] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -22 [ 441.218004][T14661] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 441.225230][T14661] CPU: 1 UID: 0 PID: 14661 Comm: v4l_id Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 441.236961][T14661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 441.247027][T14661] Call Trace: [ 441.250307][T14661] [ 441.253237][T14661] dump_stack_lvl+0x99/0x250 [ 441.257830][T14661] ? __asan_memcpy+0x40/0x70 [ 441.262412][T14661] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.267605][T14661] ? __pfx__printk+0x10/0x10 [ 441.272195][T14661] vpanic+0x281/0x750 [ 441.276175][T14661] ? preempt_schedule+0xae/0xc0 [ 441.281048][T14661] ? __pfx_vpanic+0x10/0x10 [ 441.285552][T14661] ? preempt_schedule_common+0x83/0xd0 [ 441.291006][T14661] ? preempt_schedule+0xae/0xc0 [ 441.295858][T14661] ? __pfx_preempt_schedule+0x10/0x10 [ 441.301229][T14661] panic+0xb9/0xc0 [ 441.304948][T14661] ? __pfx_panic+0x10/0x10 [ 441.309356][T14661] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 441.315248][T14661] ? v4l2_fh_open+0xc7/0x430 [ 441.319839][T14661] check_panic_on_warn+0x89/0xb0 [ 441.324772][T14661] ? v4l2_fh_open+0xc7/0x430 [ 441.329363][T14661] end_report+0x78/0x160 [ 441.333600][T14661] kasan_report+0x129/0x150 [ 441.338105][T14661] ? v4l2_fh_open+0xc7/0x430 [ 441.342694][T14661] v4l2_fh_open+0xc7/0x430 [ 441.347110][T14661] em28xx_v4l2_open+0x157/0x9a0 [ 441.351963][T14661] v4l2_open+0x20c/0x360 [ 441.356207][T14661] chrdev_open+0x4c9/0x5e0 [ 441.360629][T14661] ? __pfx_chrdev_open+0x10/0x10 [ 441.365572][T14661] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 441.371904][T14661] ? __pfx_chrdev_open+0x10/0x10 [ 441.376840][T14661] do_dentry_open+0x950/0x13f0 [ 441.381606][T14661] vfs_open+0x3b/0x340 [ 441.385668][T14661] ? path_openat+0x2ecd/0x3830 [ 441.390424][T14661] path_openat+0x2ee5/0x3830 [ 441.395003][T14661] ? arch_stack_walk+0xfc/0x150 [ 441.399853][T14661] ? stack_depot_save_flags+0x40/0x860 [ 441.405310][T14661] ? __pfx_path_openat+0x10/0x10 [ 441.410243][T14661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.416327][T14661] do_filp_open+0x1fa/0x410 [ 441.420824][T14661] ? __pfx_do_filp_open+0x10/0x10 [ 441.425847][T14661] ? _raw_spin_unlock+0x28/0x50 [ 441.430695][T14661] ? alloc_fd+0x64c/0x6c0 [ 441.435032][T14661] do_sys_openat2+0x121/0x1c0 [ 441.439704][T14661] ? __pfx_do_sys_openat2+0x10/0x10 [ 441.444893][T14661] ? lock_release+0x4b/0x3e0 [ 441.449481][T14661] ? do_user_addr_fault+0xc8a/0x1390 [ 441.454764][T14661] __x64_sys_openat+0x138/0x170 [ 441.459612][T14661] do_syscall_64+0xfa/0x3b0 [ 441.464118][T14661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.470178][T14661] ? clear_bhb_loop+0x60/0xb0 [ 441.474846][T14661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.480727][T14661] RIP: 0033:0x7fceaf6a7407 [ 441.485146][T14661] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 441.504775][T14661] RSP: 002b:00007ffca07c51e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 441.513184][T14661] RAX: ffffffffffffffda RBX: 00007fceafe3f880 RCX: 00007fceaf6a7407 [ 441.521148][T14661] RDX: 0000000000000000 RSI: 00007ffca07c6f1c RDI: ffffffffffffff9c [ 441.529112][T14661] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 441.537073][T14661] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 441.545037][T14661] R13: 00007ffca07c5430 R14: 00007fceaffa6000 R15: 00005623b2a604d8 [ 441.553012][T14661] [ 441.556321][T14661] Kernel Offset: disabled [ 441.560636][T14661] Rebooting in 86400 seconds..