last executing test programs: 2m50.948946986s ago: executing program 1 (id=73): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setxattr$incfs_metadata(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000240)="6ce016b17cf28fcde0cda7e31d63e8bb23af890ebb4c028a1eba42f43ee98f7a09b0e2fe2f34e7f4c30feef60521bfd9e7393e31feb16a0edea36f9d9ff202f82e0f54ddc4501e1236d5ec28ecccbda64f9d5d7583c7d4f9f347ee255e7aa6f03c44604c5108", 0x66, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) r2 = timerfd_create(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0xfa, 0x7, 0xec, 0x5}, {0x9, 0x9, 0x9, 0x5}]}) timerfd_settime(r2, 0x3, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) 2m50.788010048s ago: executing program 1 (id=75): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, r2, {0x0, 0xb}}, 0x20) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4018aee2, 0x0) 2m48.756354649s ago: executing program 1 (id=88): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100040, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000380)={0x2, {0x82, 0x7, 0x3, 0x8001}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)=ANY=[@ANYBLOB="1400000010af72fbe2000000000000000000000a54000000060a090400000000000000000200000028000480240001800a00010072616e676500000014000280080002400000000008000140000000040900010073797a300000000009000200f622bca65d2cfe26140000001100010000000000000000000010000ae237d272", @ANYRESOCT=r2, @ANYRES16=r0, @ANYRESOCT=r0], 0x7c}}, 0x44090) syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x182) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000400)=[@in={0x2, 0x0, @empty}, @in6={0xa, 0x0, 0x0, @empty}], 0x2c) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000000000)={0xc, {"a2e3ad21ed0d52f91b5a090987f70e06d038e7ff7fc6e5539b5b43078b089b3b32306d090890e0878f0e1ac6e7049b3371959b719a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074c0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r5, 0x40045731, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) io_setup(0x1, &(0x7f00000004c0)=0x0) io_cancel(r9, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x6, 0x7, r0, &(0x7f0000000500)="04d2fe0db9b2361c37eca10fe9fc00af772dfd3cc65aa9a0e96c4f43b422fd51f9b8fa43aa7a", 0x26, 0x5, 0x0, 0x1, r6}, &(0x7f0000000580)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r8, r7], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r6, 0xc01064c7, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000003340)=[0x0]}) syz_open_dev$vcsu(&(0x7f0000000180), 0xffffffcc, 0xc000) ioctl$KVM_XEN_HVM_CONFIG(r10, 0x4038ae7a, &(0x7f0000000340)={0x7ffd, 0xa1f, &(0x7f00000001c0)="04044cf73b1e6d4c0c87c764dbf8dc124f91237d5cdb71748f5c29f9036705849cf04d4325253e2271099a1206d94f2b48b3f507ef6247eb4d2d6e2b4c04f0dec556238c2beb28560122041e1e911e8ac7e935a960c2", &(0x7f0000001100)="67a4632b5085d854676669656a416094087c3c96701a8fac2df929d550ed8c7043a9720566ec66eb6bf73e8e1fe4e19bf4c703abad8d63766ce345eeb2f39411573a6096f9a3c23f5e9c567940fe3fbd8252d213d520e6d030b1de2d7a3e251796cd431d518aa1fa0a0601d11d9f482087b9873aca27f91b0b59ec77e0fed5754b01e2c8d31c8c8bf05e9a1af8704e0a8c3e3c17579ea422f9591a02b34bf7e0bf076c8f29525ce8dd81523710633ca7515c842cc8521d8cb5899147fe6bd0b9f16f9a2b2adc5692c77dd1c92debe98bfd45", 0x56, 0xd2}) 2m47.085995131s ago: executing program 1 (id=94): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='alloc_extent_state\x00', r1, 0x0, 0x400}, 0x18) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000044}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002f80)=ANY=[], 0xb8, 0x24000004}}], 0x4, 0x4010) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x40000100) ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r3, 0xa, 0x12) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setregid(0x0, r7) r8 = gettid() read$FUSE(0xffffffffffffffff, &(0x7f00000056c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmmsg$unix(r5, &(0x7f00000008c0)=[{{&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000280)="48878a5e7f22a173b34c19963779130843f75dc321d8bfe5201168653186d091b746c6ebbf61cee05200332ffe7419d25811888b4e26af9bfca321c87be6a974eda4622c887ecaff9587806d494cdaa57f3e4f555d40321b0941c647b79a32bb6b2c0ace13388a00f2626e2b4ebdf41154b9c3d83c77c4a5909f8e2466a8ea52a986b85a45c7258a7f2efb7634a27afd359aef65864efd8ec20e088f", 0x9c}, {&(0x7f0000000340)="fffdf0dd20820db09278e9ac92f81d4968083ecf0c094c94a0210f681be526405894dd2485c51a3a4578224de87748c4112408bbaf0c107d5560c0e01f6ea06fe08cf08c98952935af9f9e63049ba4f96de5efcf698d6c1685e1012abf12799ae350a9787bc53b553813e0fe4dc32b57c618ac33461ebafefa6ab29d213632", 0x7f}, {&(0x7f0000000440)="3716ed443f3b3ac19e20d7d6304422f22591a2ea7ed9486980c52ec12bd86fb9f7198a6b4b763a8ae939efda92d3782007d18d93ae665778cfa86bedb47fbf1db0abaaedc2355d2d6331d097a1c9543c61b23917a18eeb925085a95a641bf7962489afc37301d87eb7d80496618e338ce38fedf0cf0db189e820bb3bb03557c5efebe90c3f", 0x85}, {&(0x7f00000021c0)="feaff45264161e856c10760995f411936412ad88d9925fdd9b33e2fbd8f3884ce541fb6bcc729ffa753a9bae9766941f12797a454975f7f81111f6a5e0567d54741a5e3ed54e421b353fcb0d7815f31aad438b7ab57a44538b40bfeda54c4e3741fcde2f96ad9599f10ab88d07e60c31ed40c0050f179a16807a5ba66caf66ea55bfac0ab8c5988d0d8b1060b8e7fdcaee7c6a43cee6605eb4bb1ac48bd1972cd997e62e85132e56b7da804ed15d9ff91af4319f852e1c00ab6650af352119a49266dfe501bcc3b77b74cd82aca8556f96c963566833809b034c729be682e1ebc57f841e733773081eb0d7d5730ffd7ca08054ea40d67bd8ee0f186bbacea238095669071655b5951544492a3e5ae1153b46678e8520814a903a23ae9495e773028f606a7cebe718a1747059bf7e8427db09a8a4561f1b26b2cf7f62d421e6c31a88ae1dc047ab91e7769744a26f198b5d0341cfbdd44c33f855c2d8be0a8edcc63f3ba8c31d828223974a0b82466d5da05de1046fee4273be77cfd2c84c5e2f7ed6b709c9203ca2d22f866c24c20f27cb752d4c799851891aa621399567879b2ef2180e3d3ccc502e1d4986db11b2985799a95fc96863d7ce339fbba40a7080f868b85df74b46c834f1850bad2f8bcb42b39c129b3141fbcd68b80cbee76af48f6ea0939b8a25a62ca537f1742eeb62b1f341b0f6e2f16b21a91b234bad9ae7b58f5ae6beb9f783aa7ba3c6d1124671e075441e86d6726541bf320c5f9c8745460bde0858da5ce3fcca51c53d7f2737f9ace9c58573810ca15138e35b98fc3b00dfa00a328aabfeb69fbf4f6f85abcfe3d5c45e52170c9a7dd182d71c75e4173b5156a6e6db5ab8446f5e57cdcf9ef2ef73c8153b22fb1eb6059222fe0a93539f9bc8ae770fe9b7ad592567395c6b70a9f91b017ec0184db4c8d567c2a11683422ab3039abcb486c9e5b49a4f888134dfb96dcd88818f5790ed0beed32949f49435c83f0d5f0254e287c0a6a1b03b5dc0b96dc8749161c7439097f2ba141ae18beebe55d733be4e86dec870f4bbb25971fab16e7afbe9da61466ac3c20b5bc5f99722c6c32538a846a2f7ed81eba7b5dce62fdf14dabaa2e9fb2ad8e8eab6d9d7c05a46da4a8dedd90e42dfb4b50b1e0faa62463bd8755f2f6f6537481e6becb77dca5dfcf97ca0bc7926abf358149dbb55cae0e0ae62990ecf0b7a1d12beb4254ddddbb407ac21dfc6fbc131fe8a1f5ea2e0dbc66725eaf2681df3ecb442a18250de4400233b9c92265f51a083326e5c47401ecd93359b872dbbf9891f1f86f95816db48295200c34b0c77d6dc2d738784f970d7e6efacdc8bbe72a4dd6548741a6231eb0b04b3eedbf88d354187e952753a382e4fd2c0cbb15988f3ffe0ba3378c237e8b13434f6cafcbcb4ca3be556b93a37ee28bcd9f4a8175ed87c57e04c8908eeab464b17f8aacd45d475a4b25ea2f6ec2f26fd07dbe55d9bf7f16b9f1d9444262a5ba2ee946e06d80774b6f98d74d2f6771b455b56921b00c61fa99b8caf3efdd0617ea2056660d96633801ce0f82dc140ee659e4ad89d72598d40c92d163b8899d8310c15b195dc8c64839f2a6a6b63b1266deee112d25b5eb943d12a3cab38b5234b22b4442d5b7214ec3b4d6c1564b8822fdcedca09baea9dbe334efc5173a87892ec3b477c2b7f34ef025cbeb769f255c4cfd2462229edbaf369c5dd2adf4b329f331c3ae38b4143d054bb3c2f9e53e62abab881fef798c89426851a24b1471706801af11993e55f708ab44f7a40f701fee8fccb31bf5dca4d7d0f09bcd5f4a2af85bfa94267e75ab0369ab95691703b9ddc050399a06f1d6938e727e2034b317bdf8e9c8cff4c334f2c588a5cb9b88c22e57e2b61c1ec225541e74bc9a9293669cb391f030fbc79781b953d1eb8f8ba3ce0e86f2a22e5c1f87ab302bff0e67996ab4041c51e5e01421cb05cf55062537a1b07408a7ec7433d5b5f85b045ad3f1447fc24f1871169d7527c8c82e6112b827b91197c767add00a3b918c9125e3523eb551476fd13fe3b798818dc32210a12a0bb46c1993d3de9155039996b719f77a496ce08542778da510ba5b9f047711d929b392ed04084e452a49a8130c18e82bde017d39f7bca36f06ec539f1447db38eadd6eba2b305e66ae2cb2ac26a4a02c2330943089b8b3ed501097a94bce34f8b117d1be7444ca22551fdea419d74ee8cb8fe91cee1f707bcae215f10521ef24791e82580ff2ded83a51bc1456aecc019b07ae8158b2807acfb2283b7d2e60f5e74517ddc8c135ac4a49e2cc9fe44d2348ab6b5fe978a74571daaefee17e38172919eddbc0fcaa15fb0f48320ab05410e8a0d1892f27e3dcad0327b2760f29a6ada1825b8a6bb056302ba8953478fcd87e2f1f3e3aafbfae19ce6d90a00c3d36dc3f287d08a53c76890c3a0760a5317285251234efdc1dc137fbb9d4a92df8e59b6682a660d6b4a048eb6de6f149293d1d6c995a0e42cc031beb9fe3ab3f06b7088ead1bd3d39fd85ecbf38e16ad669efd52a016ad7a208422899341d182f19d508563230c28ef404b32ce8c6c65b166bc6f4095d2a14a05e62819b3e28c82fa60eb6f62996761d8cd6d2d3a628599e0c39aa7c0adf6fb7a2d21f5cb94768d4bde5e13945e0d8a617b6b7f77759816ccf08b6b964363c4af57efb309d049c21d7382457251c01c25c7effae3a2093c3100f1e9d2aef5ef7f9ea0dad3badceebc03aebcf05b448c0241699dba55dcabed48ade28e1311fd69aa12072820e8370b6f70c13d9a4a375aee45bd6c083966e14af8810e5d1cc6f77c5851403c9856f1e68dcd0eb913b1d3b992f004b89a6278a7da7f03bd0e5bdc691109def9b960d25eb533f0f7ee5d0794a88cb5d6fd6dcc085fee8e4bb78b3869dc9f25aec7d77253697c33fa7c0b7587cc104a6bd8fd3afa310ab5aa89de000a96c1d3037e3edb1a5f4c44ae10e6745f9e4b15dcdab8510bee15571f3cd668b5110c41723dce84ce2244d2f10c6d9996dfde2c6034a2a08c728e9d4d11faea820314bb45aa90c7e4d239dfdb1d9629bf2693dce12f229d9d5c9f2391c23bd717ede10015912da54f8349e9c57dde19c15ac5317276ee89b3a22015a2ebcf4bb479a51ae8c6d29332607bab4f48be47a39ceea71c7e0b8fb6dad0aab6319fa9258d34aeea40409ffb28d4520af722c206c48a6c0080b94f92c816ec26ace06ed6e1456613e241101a3a25f97f6d549bf801b64e57f691eef17df36e90a79c66d5f2392cc2042439fb30ccf723883e0434a3e3ffdad03a6c9775ae5c10084d43613190c96854be88918cd77b8c5f2a26eb788dc31c2cbb5c47a3a95a977a14025fef81e654d391b0dfb909f92aaf152534b8af12fee8dcbbd76e48f24d118080233a11bfaf51d1f335efa59ac63c52361d409f7110f7114d2735681c8125137c51c8ea8659641993790cbf289af39af94435184395af81f13ff753f7e0c0e7fb4bb71659a80fc2bcd7c7468e133d4d3ab723e12ab2ff93c31e9df6cf1f13f8062756a6cee0de8b7f01fc4d226ac26757992070e6b816714181d4fb7357fa66c162e1984538ef3cbcee5fc87230a2af31c864ab9b42bfcf99bdfcb8490b7cc70ebe0f39e7269ef1f16fb2ab9db8c7f27aac836e315638e56f328c4f1a03fa7fba5c95e4209821d220ea6474577fc1dc06d661364963dacd666300908479e83b9337f547777c7d0f1a017ba49138e481a8aaeca558e3b29f9a00ce3745b0b5e78f01d3ee5deac65b302553a2337e4897085c43748d889c9cdc2440954024944c5cdcdf1392ff4fd23b9c638a163d6799630a9ceeb75101b515718e63de65716c501a40869a815424401384ca44f44e5a8ecb19d3769e4ab04f2f666493900e17cf4dcbef26d543b77895587dd1dca53da73ccb3387ee137c28dba12fdee496a97f357a308677d5bbc0d4dbceb0f13614381c28131acc2778e06f1e656b5dfffe53ab7d8f84621542f20a3997f791c9b47a9baca65655221ea8cc306d61df48712807d1324881a6c8e09806ee4a1136bc867ee701e4a1416174f90150aaf46020b2e82bd74a3bb4fae790990a0ff1ce7433a4fe43af6e0e6c008804ea3538c54b57aae419675d07fc9adaddc55addeeca1c22f5c3b92e2532f2a5c3afb24bbb9c0839ed0cecd247252e590bbc21af4ebb27d55aa22fcfbaac29df35be11804179f9528c83339ae2c294ce7b879e7d8aa69118c96375736e100bae5c77076684de8db8ecc982d8603de63ed5013acfe234250fdd4cf02de690eeae0d64fef6e0218f7027418cebf7b6e5358ad9cac28f9fedb44dcdc635f9c6fbb828d3af81e9315fef2281bb2a8ed440b7a5ac88989b3aa5879c983273f5e8519ff0f8b71b89dfebd1426b9734e0a120951962d82436a01a5878b7ea6ef2e85ac5838a464488082f68172c4ad3ee0e5fc4b173814da3a1f92783b71a09fb4eb8d458d2157cc8cd3232ded57a3e600fdbc33392930d3b4fe7eb09156f9042772f2729f7d9554d9916b217165beaf0561d672a1b2f8417b26269703670c7afad883ef9902619dad1f32d1cd21eacdec4ada583d6f6f601fa14e607e566f63a8cd36305c138445519a864f7174e4bde9e355f509fe55ffd8d2ac13d6a521f653c6226d41525df0c4f110423703c4000122d423813926690533c2c5edea29ea11d387399594f3c2edfba3e4ae85f2a5a39ea70826dd7eddc77fc79c2a91005dade03b72c493c96a06a787166c36d863b6e7dba1dc2c55c49210ca704ca49baa1197cd1c4e8477ecdb5d58488ff3fc02ab3bd2684447b7c58b014577b31e8624cde7d7e3a2cc1814bf75d76a708193f4cfd48e27c5063df313368ded9252a9c5d08dc0c309561eb8e6347c91d51970669330f261564090011d4180db3fbc7ad5c754f2eb7c51f8fb4daaa8e40ca6225c2974e1138f981f49e0e76e160cc402d18df5cb28fc91fcc4159a4f8ff6f326ee2d567a128609f170e713cae38a045737ec143f90f12db90ebf5c717ce2a4c994493956de305b4649a34146ba6433ff6ec29f163004993e3d099b5c8af9279955145ebb3fb37d6c9d2cff87391b05bbd4a65e846e789c45cbc6a20e94345818033c11cd8b857092edad56a55be66f144171a1c7b1f0cc9b57dd89123f881a63161864f07ab8fbad70ebb7a23525f252997167bd60a33c664ada8af46d9365c77469d96231ac2b56cbbf18eea0ed98c1f17ae9d49eb236bfdbf1d14bb3a705a1b4d8d9de56f08b9a88b98bbb08107c099feb3f892b05ba89118413c3f39fedfb5bbbc3a00924912b321bdf22e455ac46d647b7b96f34e765ac1c04155c6dafaa02ce4a2805512c65b1c3934be1e6f0f84e6120c819901b5ecb0252343c4949b45c99c287e142ea6f3535e6f375e4ee1fc46ccc28efe091f9f468d51313dc4f00ecb99cf753a074fa5ede57fbdae0698a42224a8e185237c3be38b24ef8ae00c3a5b7fc548d6cce9c1d9e72b6e539564e6bc95f7f0fdde36157debe99dc5fab6f166346c549eb1636a18a9f4f002ab20575ea9f9e860eabbe9b6b8e9b50ba1798f637196fe43d211a2dcaa2261eff93c37454a44b26c475965c73462f5bd6c6fc78d9568ab1cb08fb52ebbc41975842b0b24ba5f52cdb677875e612d34bfb0c7eb5dabea8ce73bd801412c98a76112612c84292a742d63ca5eba7f2499366e9a116abd6de7e7672da78e3aaf2a8ae17757a8f8e0d315b70e54be53f2521fb57568b7f54811f5a211d7b0d832e", 0x1000}, {&(0x7f0000000500)="1e7bb08cae04323be5bcdfdeca001c064b48384edfb88800dbd9dcd7ec1fd7df208ee185c4f3e49d380ff82ee7f2ce0758b7999d5d142244a8abd10296d9fc0538b0baf78d45ba26dd5c790fef988902ea97a4203daf6b242c05982479fe105f1a31b57a77cae229533f3ce62a4927c30719d3a5df51037b48ea9af3c8b75676eb3f55bb88e88182ede0d0d9365b76179600862230d196576243b319a216caeb076d1aa0077b7d6760d8dcfefccab2bc59c8173b1fad2888d8632d8847f93d4ea6f01c98", 0xc4}, {&(0x7f0000000600)="d9085b9f07371ddcd99a", 0xa}, {&(0x7f0000000640)="c3546e2d0865039692372c27da1c007f7591b5354dcc492e5e99ae50cb4d546ee5fdbdf6f89ed6a148359d05f642cb097f87dae332a18fd076ce62f41fd93e5196d2955d6e009b02c220ac63dd92fff2bd149fedacf7ddf2335acf81e1eed8098a1620494efba34310cde2c656b9d761b6ed30800fabfd063fdf22b062d17342d8d02f295c12426d84d386a9c75764cd0f1e41641994daac38554d114bd4cdadce183edd", 0xa4}], 0x7, &(0x7f0000000800)=[@rights={{0x14, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, r4]}}, @cred={{0x18, 0x1, 0x2, {r2}}}, @cred={{0x18, 0x1, 0x2, {r2, 0x0, r7}}}, @rights={{0x10, 0x1, 0x1, [r5]}}, @rights={{0x24, 0x1, 0x1, [r5, r6, r5, r3, r5, r0]}}, @cred={{0x18, 0x1, 0x2, {r8, r9}}}], 0xa4, 0x4000000}}], 0x1, 0x44800) ppoll(&(0x7f0000000100)=[{r4}], 0x1, 0x0, 0x0, 0x0) dup2(r3, r4) fcntl$setown(r4, 0x8, r2) tkill(r2, 0x13) landlock_restrict_self(r0, 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 2m46.140650351s ago: executing program 1 (id=99): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$vim2m(0xffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000000200)={0x6, 0xbd5, 0x2, {0x2, @raw_data="f91fd2868ba3d9189024fc40809db9e19479c0b5fce2c721330d5771dbf9dbfa9e2ad24622489141b4803cfeb0b70909e75715a13fada32fef53473eb9ce014fbe3929ea41fdeb0ff177dfb9d3227f213a6451b667d35b03b25618d20cea1f072990b86d463a0de7513744a2bb3bf4fb6049e30f7c533837beba9566c9fd8721c48fad424a5fb17bc1419fb85e5e7dce382ba5a1ce182b419becd67c18f0ba055b8d72225df5a5e7917f8a87a52b8c2516745c462e944b0c22a7e71ecf492a0ef916598abba0e732"}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0xc2f00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x80801) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000180)={0xb, 0x0, 0x2, r3, 0x9}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x42}}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x80}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x0, 0x3}, 0xfffffffe}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) read$snapshot(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x38}}, 0x4050) socket(0x1, 0x803, 0x0) 2m45.840729799s ago: executing program 1 (id=103): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x600, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {}, {}, 0x400000}}, 0xb8}}, 0x0) 2m45.174570113s ago: executing program 32 (id=103): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x600, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {}, {}, 0x400000}}, 0xb8}}, 0x0) 1m48.6725363s ago: executing program 3 (id=338): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x8000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000007c0)={0x80, 0x2b, 0x4004, 0x1, 0xb2e}) 1m48.480774996s ago: executing program 3 (id=341): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000006640)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/185, 0xb9}, {&(0x7f0000000280)=""/31, 0x1f}], 0x3}, 0x7fffffff}], 0x1, 0x0, 0x0) (fail_nth: 5) 1m48.26440759s ago: executing program 3 (id=342): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x408) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0x78, 0x82, 0xb7, 0x40, 0x2c42, 0x1709, 0xcab7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbf, 0x60, 0xe7}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in6=@dev, 0x40, 0x0, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3, 0x1, 0x7}}, 0xe8) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000000)=r1) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$dir(0xffffff9c, &(0x7f0000000140)='./file0\x00', 0x14000, 0x8) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='\x00', &(0x7f0000000100)='./file0\x00', r5) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x901}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r6, 0x0, 0x0) r7 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000440)="de1fec1433b59e38ee4086e55472a10d7e4fe3d5ab9f07c4462802ea7a5f8721c612d57a1a8787c4c06e4fcf4f6a76cd029154e8d1bf24c1a13b4075c752381cf5cb14a03cfe1986bb09c572c6c55d36f2efc493123d25fc4421f851e3d7b870417bee522836bdfa2398ec13ef8af6e4ebd990dfa28c1d1d5225eef9a792a6d15e4a7c65b61a8b4e2586fb6ff35e5a124c2926c6ae1800f4e3affcf1e314311d10634d745fa33111effc51dc10198d991619d6178dca16b175121ed90ae9db4361ed04c8b3ac9477235f58f1bf02fb2b57db68debae2e4a766e0fb68fe2cc2867289f7b797d872d342", 0xe9, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000200)={r6, 0x0, r7}, &(0x7f00000006c0)=""/196, 0xc4, &(0x7f00000002c0)={&(0x7f0000000240)={'xcbc-aes-neon\x00'}}) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) 1m46.088412517s ago: executing program 3 (id=350): mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000100)={0x6, 0x118, 0xfa00, {{0xffff, 0xfc, "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", 0xaf, 0xf1, 0xb3, 0xfc, 0x4, 0x6, 0xf}}}, 0x120) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000680)={0x18, &(0x7f0000000380)={0x40, 0x11, 0xc, "4e63a18b1f3534387288f99d"}, 0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x44, r5, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0x8, 0x400, 0x67d0, 0xe, 0x4, 0x100]}}]}]}]}, 0x44}}, 0x0) r8 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) writev(r8, &(0x7f0000000180)=[{&(0x7f00000008c0)="bcfb", 0x2}], 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000001c0), 0x8) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000300)={0x10, 0x30, 0xfa00, {&(0x7f0000000240), 0x0, {0xa, 0x4e23, 0x53abf6d3, @loopback, 0x4}}}, 0x38) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) bind$rxrpc(r8, &(0x7f0000000340)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @local}}, 0x24) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="20000000000000003000128008000100687372002400028008000200", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10], 0x50}}, 0x0) 1m42.647345371s ago: executing program 3 (id=361): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) r2 = openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x408) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0x78, 0x82, 0xb7, 0x40, 0x2c42, 0x1709, 0xcab7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbf, 0x60, 0xe7}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in6=@dev, 0x40, 0x0, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3, 0x1, 0x7}}, 0xe8) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000000)=r1) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$dir(0xffffff9c, &(0x7f0000000140)='./file0\x00', 0x14000, 0x8) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='\x00', &(0x7f0000000100)='./file0\x00', r6) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x901}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x4, 0x0, r2, 0x80000000, '\x00', 0x0, r2, 0x5, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r7, 0x0, 0x0) r8 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000440)="de1fec1433b59e38ee4086e55472a10d7e4fe3d5ab9f07c4462802ea7a5f8721c612d57a1a8787c4c06e4fcf4f6a76cd029154e8d1bf24c1a13b4075c752381cf5cb14a03cfe1986bb09c572c6c55d36f2efc493123d25fc4421f851e3d7b870417bee522836bdfa2398ec13ef8af6e4ebd990dfa28c1d1d5225eef9a792a6d15e4a7c65b61a8b4e2586fb6ff35e5a124c2926c6ae1800f4e3affcf1e314311d10634d745fa33111effc51dc10198d991619d6178dca16b175121ed90ae9db4361ed04c8b3ac9477235f58f1bf02fb2b57db68debae2e4a766e0fb68fe2cc2867289f7b797d872d342", 0xe9, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000200)={r7, 0x0, r8}, &(0x7f00000006c0)=""/196, 0xc4, &(0x7f00000002c0)={&(0x7f0000000240)={'xcbc-aes-neon\x00'}}) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) 1m42.344707756s ago: executing program 3 (id=363): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001020108000000000000000002000005300001802c000180040003"], 0x44}, 0x1, 0x0, 0x0, 0xc010}, 0x44044) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000300)={0x20, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m41.987703412s ago: executing program 33 (id=363): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001020108000000000000000002000005300001802c000180040003"], 0x44}, 0x1, 0x0, 0x0, 0xc010}, 0x44044) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000300)={0x20, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m13.919338087s ago: executing program 6 (id=502): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000003d80)=[{{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000f40)="b65b1894df4b8c5b9eb11875aa5f9a0d7fca1b8d48baeea061b69a1855ef04c829bd3dc7fdd68166c6c6c6996239e5c8986e748acbb12a89933149003bb6775142171d75ded10e0af99292f6c46219146499d7c2f096225fc1e2c953a1a2515ae3c73614dea8e10accaa2eb4a9d3d6b17eea94d4a0ae64f4bb0d94ad7edef060604f45add4035cdc335a4c992c802d89c1e75e7aae58cba30c103b422b91fdddf730f1553cc131c1b75201f34b41594d3cfa9e8c3a56fda774aa5b2432dc18902963aae2050eb5f880fda45006bcb35cd9f89939df83e14f3b3504d04a1d02c166766dc9e5cdb84f3f3984790932663344714c8b9b5b6ce81c6c5dd32665e65b080f4b398f4bbbe552b147a3d26530912aa33e93413deef125f63927f1df15241c0dc7468d2212190af782b3a1907772f09833e7cefc9c624ff65cd7ca5e37df6ad87606163c1ca792ec9c0e164f625bc55e299712eafb7659cb6d9d0a5c86d2191aac54a9dd9cb558af72737d56ebe2131c596c2ec5cab981ef2c1d3cd6d1b676ab1468cbae8d8f2fa42410450ade25a21290d2bb18ded1ba0973895d8a0c9790b357e6098fe72fc7134d9bcc18702efbd8d39a2086c78cc308089dbddb3d63481f016abdaed04bdcd920a9a4cdc13e97a835e60389c44ab9305ccae043764b2639f22ef98446c44f80414f09294f6bc39171bc0dd21110f0b86791305c3ef6af966eb9bd516fb1d0e48f7d31e4f8c8b61c46d1f7a4385ea8", 0x219}], 0x1}}], 0x1, 0x4000801) close_range(r0, 0xffffffffffffffff, 0x0) 1m13.649369033s ago: executing program 6 (id=506): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffd, 0x5, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="413ea79967", 0x0, 0x3, 0x0, 0x6, 0x0}) 1m13.422778104s ago: executing program 6 (id=510): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) fsopen(&(0x7f0000000100)='proc\x00', 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x1000005, 0x8012, r2, 0x0) r3 = socket$inet(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x7}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = epoll_create1(0x0) epoll_wait(r6, &(0x7f000000affb)=[{}], 0x1, 0x7fff) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)={0xa0000004}) fsmount(0xffffffffffffffff, 0x0, 0x4c2b439ea6deab06) syz_usb_connect(0x0, 0x42, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd0, 0xae, 0xd1, 0x8, 0x2013, 0x246, 0xe656, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x82, 0x0, 0x0, 0xd, 0xa1, 0xb6}}]}}]}}, 0x0) 1m11.454633059s ago: executing program 6 (id=518): r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x12, 0xffffffffffffffff, 0x10000000) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000008c0)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f00000009c0)=0xe4) getgroups(0x1, &(0x7f0000000a00)=[0x0]) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r5, &(0x7f00000047c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000002140)={0x50, 0x0, r6, {0x7, 0x27, 0x0, 0x1dd8a0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffb96}}, 0x50) read$FUSE(r5, &(0x7f0000000100)={0x2020}, 0x2020) syz_fuse_handle_req(r5, &(0x7f00000027c0)="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", 0x2000, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008600)={0x78, 0x0, 0xc96a, {0x8000000000000000, 0x0, 0x0, {0x6, 0xffffffffffffa635, 0x3, 0x5, 0xfffffffffffffffe, 0x2000000000000000, 0x0, 0x4, 0x0, 0x2000, 0x0, r7, 0x0, 0x3, 0x20006}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000040)='./file0\x00', r7, 0x0) mount$fuse(0x0, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880), 0x2100888, &(0x7f0000000a40)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@allow_other}, {@allow_other}, {@allow_other}, {}, {@max_read={'max_read', 0x3d, 0x8001}}, {@max_read={'max_read', 0x3d, 0x6}}, {}, {@default_permissions}, {@allow_other}, {@blksize}], [{@pcr={'pcr', 0x3d, 0x35}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@fowner_lt={'fowner<', r7}}, {@context={'context', 0x3d, 'unconfined_u'}}]}}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x83, &(0x7f0000000040)={0x0, 0x800}, 0x8) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r9, 0x205, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}]}, 0x3c}}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000007c0)=@IORING_OP_WRITE_FIXED={0x5, 0xa, 0x2004, @fd_index=0x6, 0x5, 0x7, 0x2, 0x6, 0x1, {0x2, r1}}) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000800)={0x2, 0x5}, 0x4) syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0xd3, 0xcc, 0xb5, 0x10, 0x13b1, 0x42, 0x2b29, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xfc, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf, 0x0, 0x1, 0xe7, 0x11, 0xe1, 0x0, [], [{{0x9, 0x5, 0x83, 0x0, 0x3ff, 0x3, 0x7, 0x4}}]}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x6f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x2, 0x1, 0x81, 0x10, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, '{'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x5, 0x0, 0x1}, {0x6, 0x24, 0x1a, 0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x10}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x0, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0xe, 0x0, 0x7}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x6, 0xe, 0x7, 0x8, 0x66}, 0x23, &(0x7f00000000c0)={0x5, 0xf, 0x23, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0x8}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xa, 0x8b}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0x4, 0x4, 0x6}]}, 0xa, [{0x71, &(0x7f0000000100)=@string={0x71, 0x3, "d5b0d3d56a02f2d26fa9c949927b1f9a186af3dd30c3fceb6c97d74c39e73fb08ca84299a1c1f28a2ae9d40d7c7eb7c4be1ee34374c1e2af15f045222e2e0f4c029ad92d82f76262fab719e9ccb8674c1653fb71fd440d7b6158140948299cf8a33b7d6af0db0a4ffc29377774fe26"}}, {0xc2, &(0x7f0000000180)=@string={0xc2, 0x3, "513aae09f82af27a0684036363984210d44870420242bd87cd2409e4756b37f0c6b360e95b2279a444e7cb19b329f3fb3c89bfb55b9a0063e7a5508290d8bdf03fbc7f4d0f3e183865b5c2aa96a15d4e758798cb2dfc5bf872bff5e0e5874fbed48de38480c9a9a7b9e51324455716b23db596ae45caff0f3a5f01e1022df435e41118a1c9b29d94fc08ac422a79c2668d894b0a15bf4c522c20d72ab2cc408fc1bd721c00348cb68ace86d03a0089c67959876e983b48b6988485b0b5f0b4eb"}}, {0x7d, &(0x7f0000000280)=@string={0x7d, 0x3, "ce014e4329a756576a31378d943d2e5b47be9585881c847aac061ea968db7021ba74ddf2561377c2e4775e59383f082184575140ee59d21266023ec18c8b62838e0c95c81431b5dc00f88db152edc55c5bd8461f4407983a89d417a875341538a38f8fd1c29106fb071428e8d4b0a55101c52f5418cc708ec0cf84"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x812}}, {0x102, &(0x7f0000002440)=@string={0x102, 0x3, "7dfd7c9e65b0905bc9b6b131cd477e1c625d53a5468e7b84ad3535817d1ee3e67b85f3d46d8675e52538b0b7531f7b97038f3983cc85b618cdc236b15bd1e2a6fc8ba30d71d04e2a6baaf585f86aaa101e4d73076d98c8323b972979ba463600f1d5905a72879ffe91e23b5e7d4bc7fe2574d2e3cc959821b24c8a39c307e5051134abc0c2ad09e384638fbe1c2f83ed7c442fa4e222b015c8ce4677cef65c9ba093f0cc0bcb2549e72a75f356e7baf938507d99a18b2c4e928702d683f221a4f62b33fd066082d611d2d7e958c25659e07cbbd666c6cbee85cded692b6e28e31a9e2fdd1e53fd40b3945f22dcee076590760bc7b85b46449492310980c5bf75"}}, {0x37, &(0x7f0000000400)=@string={0x37, 0x3, "94fb7b89f351a0134fac3d53cf0de465b9816c3b3096a49ac19e57547c0c6e9a2fcd829bd50b101d1561f1344d8170209b3b4a19eb"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1801}}, {0xcb, &(0x7f0000000500)=@string={0xcb, 0x3, "7a55ffa300b417b54b589b891380d9f0d4c0436d4f930202b5a17e07752f910a3214b7560f0bd82ecc518d5b48390ea759f678116cf64f12fe660a0d59f01170ab0b2bbf5fd9d187dc66245f75e62c6a0e37c3f0c25e9954f4a92b375155e69a8b4813eafcfebd86eff2bc4fa227c75ce7bde39b21e65e4048b154fb3aea954b2d8334c055446b7368c29a9900216537d54994fb2e509c971dc22eeaad2d54a7bfaac17df431936037f221ec7a3c16e678254f2f006d237f5b8ce317625eeb437d64a160f60b434145"}}]}) r11 = getpid() r12 = syz_pidfd_open(r11, 0x0) setns(r12, 0x20000) r13 = memfd_create(&(0x7f00000004c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r13, 0x0, r14, &(0x7f0000000380)=0x643, 0x800, 0x9) r15 = syz_open_dev$vcsn(&(0x7f0000000680), 0x10, 0x234001) getdents64(r15, &(0x7f00000006c0)=""/220, 0xdc) 1m8.472266858s ago: executing program 6 (id=527): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000003d80)=[{{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000f40)="b65b1894df4b8c5b9eb11875aa5f9a0d7fca1b8d48baeea061b69a1855ef04c829bd3dc7fdd68166c6c6c6996239e5c8986e748acbb12a89933149003bb6775142171d75ded10e0af99292f6c46219146499d7c2f096225fc1e2c953a1a2515ae3c73614dea8e10accaa2eb4a9d3d6b17eea94d4a0ae64f4bb0d94ad7edef060604f45add4035cdc335a4c992c802d89c1e75e7aae58cba30c103b422b91fdddf730f1553cc131c1b75201f34b41594d3cfa9e8c3a56fda774aa5b2432dc18902963aae2050eb5f880fda45006bcb35cd9f89939df83e14f3b3504d04a1d02c166766dc9e5cdb84f3f3984790932663344714c8b9b5b6ce81c6c5dd32665e65b080f4b398f4bbbe552b147a3d26530912aa33e93413deef125f63927f1df15241c0dc7468d2212190af782b3a1907772f09833e7cefc9c624ff65cd7ca5e37df6ad87606163c1ca792ec9c0e164f625bc55e299712eafb7659cb6d9d0a5c86d2191aac54a9dd9cb558af72737d56ebe2131c596c2ec5cab981ef2c1d3cd6d1b676ab1468cbae8d8f2fa42410450ade25a21290d2bb18ded1ba0973895d8a0c9790b357e6098fe72fc7134d9bcc18702efbd8d39a2086c78cc308089dbddb3d63481f016abdaed04bdcd920a9a4cdc13e97a835e60389c44ab9305ccae043764b2639f22ef98446c44f80414f09294f6bc39171bc0dd21110f0b86791305c3ef6af966eb9bd516fb1d0e48f7d31e4f8c8b61c46d1f7a4385ea8", 0x219}], 0x1}}], 0x1, 0x4000801) close_range(r0, 0xffffffffffffffff, 0x0) 1m7.812829073s ago: executing program 6 (id=528): r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0xffffec77, @my=0x1}, 0x10) 1m7.114080985s ago: executing program 34 (id=528): r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0xffffec77, @my=0x1}, 0x10) 10.156654602s ago: executing program 7 (id=717): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x101442, 0x0) shmdt(0x0) r1 = dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2f0000e81f00000004003300", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) mremap(&(0x7f00007e9000/0x3000)=nil, 0x3000, 0x1000, 0x2, &(0x7f0000963000/0x1000)=nil) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000040)={{&(0x7f000063d000/0x4000)=nil, 0x4000}}) mbind(&(0x7f0000351000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x7ff, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) 9.463749662s ago: executing program 0 (id=723): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) fsopen(&(0x7f0000000100)='proc\x00', 0x0) mmap(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x1000005, 0x8012, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x7}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = epoll_create1(0x0) epoll_wait(r6, &(0x7f000000affb)=[{}], 0x1, 0x7fff) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)={0xa0000004}) fsmount(0xffffffffffffffff, 0x0, 0x4c2b439ea6deab06) syz_usb_connect(0x0, 0x42, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd0, 0xae, 0xd1, 0x8, 0x2013, 0x246, 0xe656, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x82, 0x0, 0x0, 0xd, 0xa1, 0xb6}}]}}]}}, 0x0) 8.160087617s ago: executing program 5 (id=726): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x7fffffe, 0x4d0, 0x31c, 0x18c, 0x203, 0x31c, 0x19030000, 0x408, 0x2e0, 0x2e0, 0x408, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x31c, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {0xc}, {0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x52c) 7.772522596s ago: executing program 5 (id=729): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYRES16=r1, @ANYRESHEX], 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 7.558893008s ago: executing program 7 (id=730): socket$nl_audit(0x10, 0x3, 0x9) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)) getpgrp(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x64}}, 0x0) 7.458195429s ago: executing program 7 (id=731): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$pppl2tp(0x18, 0x1, 0x1) getpid() sched_setaffinity(0x0, 0x0, 0x0) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) r1 = openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x408) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0x78, 0x82, 0xb7, 0x40, 0x2c42, 0x1709, 0xcab7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbf, 0x60, 0xe7}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in6=@dev, 0x40, 0x0, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3, 0x1, 0x7}}, 0xe8) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$dir(0xffffff9c, &(0x7f0000000140)='./file0\x00', 0x14000, 0x8) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='\x00', &(0x7f0000000100)='./file0\x00', r5) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x901}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x4, 0x0, r1, 0x80000000, '\x00', 0x0, r1, 0x5, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r6, 0x0, 0x0) r7 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000440)="de1fec1433b59e38ee4086e55472a10d7e4fe3d5ab9f07c4462802ea7a5f8721c612d57a1a8787c4c06e4fcf4f6a76cd029154e8d1bf24c1a13b4075c752381cf5cb14a03cfe1986bb09c572c6c55d36f2efc493123d25fc4421f851e3d7b870417bee522836bdfa2398ec13ef8af6e4ebd990dfa28c1d1d5225eef9a792a6d15e4a7c65b61a8b4e2586fb6ff35e5a124c2926c6ae1800f4e3affcf1e314311d10634d745fa33111effc51dc10198d991619d6178dca16b175121ed90ae9db4361ed04c8b3ac9477235f58f1bf02fb2b57db68debae2e4a766e0fb68fe2cc2867289f7b797d872d342", 0xe9, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000200)={r6, 0x0, r7}, &(0x7f00000006c0)=""/196, 0xc4, &(0x7f00000002c0)={&(0x7f0000000240)={'xcbc-aes-neon\x00'}}) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) 7.086361144s ago: executing program 0 (id=732): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = semget(0x0, 0x3, 0x3) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121201, 0x0) write$dsp(r3, &(0x7f00000001c0)="d2", 0x1) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)=0x24b1cd89) semctl$SEM_INFO(r2, 0x2, 0x13, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket(0x11, 0x800000003, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') pread64(r5, &(0x7f0000000280)=""/70, 0x46, 0xbbf9) recvfrom$inet(r5, &(0x7f0000000000)=""/35, 0x23, 0x10101, &(0x7f0000000140)={0x2, 0x4e23, @multicast2}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) 6.175563219s ago: executing program 5 (id=733): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000004480)=[{{&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/197, 0xc5}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000080)=""/34, 0x22}, {&(0x7f00000001c0)=""/3, 0x3}, {&(0x7f0000001440)=""/140, 0x8c}], 0x6, &(0x7f0000001500)=""/3, 0x3}, 0x5}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001540)=""/94, 0x5e}, {&(0x7f00000015c0)=""/22, 0x16}], 0x2}, 0x40}, {{&(0x7f0000001640)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000001980)=[{&(0x7f00000016c0)=""/127, 0x7f}, {&(0x7f0000001740)=""/190, 0xbe}, {&(0x7f0000001800)=""/153, 0x99}, {&(0x7f00000018c0)=""/108, 0x6c}, {&(0x7f0000001940)=""/41, 0x29}], 0x5}, 0x7}, {{&(0x7f00000019c0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001a40)=""/195, 0xc3}], 0x1, &(0x7f0000001b80)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000002b80)=@tipc, 0x80, &(0x7f0000003c00)=[{&(0x7f0000002c00)=""/4096, 0x1000}], 0x1, &(0x7f0000003c40)=""/223, 0xdf}, 0x969}, {{0x0, 0x0, &(0x7f0000003e80)=[{&(0x7f0000003d40)=""/243, 0xf3}, {&(0x7f0000003e40)=""/33, 0x21}], 0x2, &(0x7f0000003ec0)=""/193, 0xc1}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004100)=[{&(0x7f0000003fc0)=""/91, 0x5b}, {&(0x7f0000004040)=""/23, 0x17}, {&(0x7f0000004080)=""/113, 0x71}], 0x3, &(0x7f0000004140)=""/29, 0x1d}, 0x52}, {{0x0, 0x0, &(0x7f0000004280)=[{&(0x7f0000004180)=""/87, 0x57}, {&(0x7f0000004200)=""/71, 0x47}], 0x2}, 0x1}, {{&(0x7f00000042c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000004380)=[{&(0x7f0000004340)=""/34, 0x22}], 0x1, &(0x7f00000043c0)=""/131, 0x83}, 0x6}], 0x9, 0x120, 0x0) 6.094357096s ago: executing program 4 (id=735): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x3b, 0x6b, 0xc0, 0x40, 0xb95, 0x772b, 0xa24c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x81, 0x38, 0x7f}}]}}]}}, 0x0) 5.021755522s ago: executing program 0 (id=737): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x10000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402002c68e010000000109021200010000000009040001"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) 4.964737279s ago: executing program 5 (id=738): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)={0xa8, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x4c}}}}, [@NL80211_ATTR_IE={0x7f, 0x2a, [@ht={0x2d, 0x1a, {0x300, 0x3, 0x6, 0x0, {0x3ff, 0x1f23, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3}, 0x300, 0x4, 0xd1}}, @mic={0x8c, 0x10, {0x17a, "9449bcf5e1d4", @short="723e81851e8e20c4"}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x60, 0xad, 0x2}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @random_vendor={0xdd, 0x3a, "97328e73952d955812add3d391face2ffc75e9d0c60196a808880ac8c658036cbfade2811bf2c8adc076137c05c506c349b6f88f3edb1909c6b9"}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x40854) 4.878062398s ago: executing program 5 (id=739): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100040, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000380)={0x2, {0x82, 0x7, 0x3, 0x8001}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)=ANY=[@ANYBLOB="1400000010af72fbe2000000000000000000000a54000000060a090400000000000000000200000028000480240001800a00010072616e676500000014000280080002400000000008000140000000040900010073797a300000000009000200f622bca65d2cfe26140000001100010000000000000000000010000ae237d272", @ANYRESOCT=r2, @ANYRES16=r0, @ANYRESOCT=r0], 0x7c}}, 0x44090) syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x182) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000400)=[@in={0x2, 0x0, @empty}, @in6={0xa, 0x0, 0x0, @empty}], 0x2c) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r5, 0x40045731, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) io_setup(0x1, &(0x7f00000004c0)=0x0) io_cancel(r9, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x6, 0x7, r0, &(0x7f0000000500)="04d2fe0db9b2361c37eca10fe9fc00af772dfd3cc65aa9a0e96c4f43b422fd51f9b8fa43aa7a", 0x26, 0x5, 0x0, 0x1, r6}, &(0x7f0000000580)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r8, r7], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r6, 0xc01064c7, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000003340)=[0x0]}) syz_open_dev$vcsu(&(0x7f0000000180), 0xffffffcc, 0xc000) ioctl$KVM_XEN_HVM_CONFIG(r10, 0x4038ae7a, &(0x7f0000000340)={0x7ffd, 0xa1f, &(0x7f00000001c0)="04044cf73b1e6d4c0c87c764dbf8dc124f91237d5cdb71748f5c29f9036705849cf04d4325253e2271099a1206d94f2b48b3f507ef6247eb4d2d6e2b4c04f0dec556238c2beb28560122041e1e911e8ac7e935a960c2", &(0x7f0000001100)="67a4632b5085d854676669656a416094087c3c96701a8fac2df929d550ed8c7043a9720566ec66eb6bf73e8e1fe4e19bf4c703abad8d63766ce345eeb2f39411573a6096f9a3c23f5e9c567940fe3fbd8252d213d520e6d030b1de2d7a3e251796cd431d518aa1fa0a0601d11d9f482087b9873aca27f91b0b59ec77e0fed5754b01e2c8d31c8c8bf05e9a1af8704e0a8c3e3c17579ea422f9591a02b34bf7e0bf076c8f29525ce8dd81523710633ca7515c842cc8521d8cb5899147fe6bd0b9f16f9a2b2adc5692c77dd1c92debe98bfd45", 0x56, 0xd2}) 4.788234563s ago: executing program 7 (id=740): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = semget(0x0, 0x3, 0x3) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121201, 0x0) write$dsp(r3, &(0x7f00000001c0)="d2", 0x1) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)=0x24b1cd89) semctl$SEM_INFO(r2, 0x2, 0x13, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket(0x11, 0x800000003, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') pread64(r5, &(0x7f0000000280)=""/70, 0x46, 0xbbf9) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) 4.090818426s ago: executing program 4 (id=741): socket$nl_generic(0x10, 0x3, 0x10) 3.888413503s ago: executing program 4 (id=742): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x503, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20208}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034004000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83", 0xd4}, {&(0x7f00000014c0)="5c9ebe30", 0x4}], 0x2}, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x9, 0x17, 0x44, @rand_addr=' \x01\x00', @local, 0x40, 0x7, 0xfff, 0x4}}) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r6, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r10 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r6, &(0x7f0000002080)={0xa000001a}) write$FUSE_ENTRY(r6, &(0x7f00000020c0)={0x90, 0xffffffffffffffda, r7, {0x1, 0x2, 0x2, 0x4000000000000, 0xfff, 0x80000000, {0x2, 0x4, 0x5, 0x7, 0x2, 0x3, 0x8000, 0x4, 0x40f, 0x4000, 0x4, r8, r9, 0x5, 0x1}}}, 0x90) r11 = shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x400c) mremap(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r11) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000002180)=@polexpire={0xe4, 0x1b, 0x200, 0x70bd28, 0x25dfdbfd, {{{@in=@local, @in6=@mcast2, 0x4e24, 0xfffe, 0x4e24, 0x0, 0xa, 0x20, 0x0, 0x3c, r5, r8}, {0x3952, 0x100000000004ae5, 0x8598, 0x5, 0x7, 0x81, 0x7}, {0x8, 0x2, 0x8, 0xffffffffffffffff}, 0xfffffff7, 0x6e6bb1, 0x0, 0x0, 0x2, 0x1}, 0xb}, [@user_kmaddress={0x2c, 0x13, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0xa}}]}, 0xe4}}, 0x788942123f163088) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r12, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r12, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r12, 0x0) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r13, 0x117, 0x1, 0x0, 0xca00) socket$nl_sock_diag(0x10, 0x3, 0x4) 3.533877284s ago: executing program 2 (id=743): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00') sendfile(r0, r0, &(0x7f0000000000)=0x4, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) fgetxattr(r2, &(0x7f00000000c0)=@known='system.posix_acl_default\x00', &(0x7f0000000140)=""/171, 0xab) r3 = socket$netlink(0x10, 0x3, 0xa) syz_usb_connect(0x3, 0x2d, &(0x7f0000000440)={{0x12, 0x1, 0x201, 0x47, 0xb2, 0x37, 0x8, 0x19d2, 0x78, 0x61be, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x6, 0x5, 0x80, 0xf3, [{{0x9, 0x4, 0x29, 0x12, 0x0, 0x69, 0xf6, 0x2b, 0x1}}, {{0x9, 0x4, 0x6, 0xf5, 0x0, 0xb0, 0xeb, 0x6e, 0x6}}]}}]}}, &(0x7f0000000240)={0x61, 0x0, 0x2c, 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001400)={0x2c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0xf, 0x27, 0x0, 0x0, @binary="d847b0d44ca7ba9b542be6"}]}]}, 0x2c}], 0x1}, 0x4) r5 = socket(0x15, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000001000010401000000000000", @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470"], 0x60}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0xf, 0x1, 0x0, 0x0, @str='/dev/iommu\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 3.102877454s ago: executing program 4 (id=744): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_connect$printer(0x1, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x404}}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000002040)=0x4, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), r1) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001380)={0x14, &(0x7f0000001200)={0x0, 0x3, 0xe6, {0xe6, 0xe, "d34b2ae025d20740c20bb9a82793d8fd2c7e85ea29ecada2a445b50fe62462a3d8fa5553449f769c64418fdc69eab61a5b6850828342ad27a828d95f9ef55a058387e54c219b7b6b949849e45b19485e5474c0e7bb5c7061b0d6c8ecd95aea19149106e4ea7e7af533e1a0e7a53aecc93558a1a2320ff19be29667d4c5770f4dbd44e7d31e3574dc8cb9d846868d1f09182c5b2ca75c066c583392938a939b528eff3d1777f8c20e060bfcee58b6ec482eb99bf81c781625b1e41fc52d3d603c8596cba8ce4cd2f6ebd06ecb568cacad23e2fbbc04d6e2ccacb7fa0c08770227415fccb7"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x27, @string={0x27, 0x3, "ff2b3ea20800ba1ed535768328413135dbc2f440416a0045827d4eda18aeb885cd09c8057a"}}, &(0x7f0000001300)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x6, '8'}]}}, &(0x7f0000001340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x81, 0x1, {0x22, 0xa0}}}}, &(0x7f0000001580)={0x18, &(0x7f00000013c0)={0x40, 0xe, 0x4d, "45a623520169ed674fd58c63bc5cc874f75fee17696f9020fec26f2cdc314b7a1bf56acd8254bb2c603ca2e3048bb1a12ff709f1b7f556044c4edad45d165a334a5c5bf9be968b6268b24ae677"}, &(0x7f0000001440)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000001480)={0x0, 0x8, 0x1, 0xa0}, &(0x7f00000014c0)={0x20, 0x1, 0x71, "de3e4582c7168e70e59c108788c998b8095371174fc41d4453ae51c73743778cdf7f12ced71146a5119e54ba09b742296cd9c693f989f088c620704106e8573919ee7eb56bb336c8bd3c57fe590d9471016bf11417dee8227d16e88a1f62512f4f5dfe7f591cfc8788ecdfcdeb52566a2b"}, &(0x7f0000001540)={0x20, 0x3, 0x1, 0x71}}) 3.016449042s ago: executing program 7 (id=745): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYRES16=r1, @ANYRESHEX], 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}, 0x1080}], 0x1, 0x10002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.659918801s ago: executing program 5 (id=746): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e008000000008000d"], 0x5c}}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008800) socket$alg(0x26, 0x5, 0x0) getresgid(0x0, 0x0, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e22, 0xfffff79e, @mcast1, 0xfffffdfc}}, 0x0, 0x0, 0x9, 0x0, "0c9e089c01860b471037f43d223b3c1b324debec40e55a07f709417eb48821996aff1c7154e746be4d7686455261c425a7519cc269d04e6205abaabde24a2b12440b329ad5bd35f21907c7988d1300"}, 0xd8) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r4, r4, r4}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}}) 2.612752248s ago: executing program 0 (id=747): r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) (fail_nth: 1) 2.461904555s ago: executing program 0 (id=748): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = semget(0x0, 0x3, 0x3) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121201, 0x0) write$dsp(r3, &(0x7f00000001c0)="d2", 0x1) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)=0x24b1cd89) semctl$SEM_INFO(r2, 0x2, 0x13, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket(0x11, 0x800000003, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') pread64(r5, &(0x7f0000000280)=""/70, 0x46, 0xbbf9) recvfrom$inet(r5, &(0x7f0000000000)=""/35, 0x23, 0x10101, &(0x7f0000000140)={0x2, 0x4e23, @multicast2}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) 1.584590415s ago: executing program 2 (id=749): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)={0x90, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x4c}}}}, [@NL80211_ATTR_IE={0x66, 0x2a, [@ht={0x2d, 0x1a, {0x300, 0x3, 0x6, 0x0, {0x3ff, 0x1f23, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3}, 0x300, 0x4, 0xd1}}, @mic={0x8c, 0x10, {0x17a, "9449bcf5e1d4", @short="723e81851e8e20c4"}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x60, 0xad, 0x2}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @random_vendor={0xdd, 0x21, "97328e73952d955812add3d391face2ffc75e9d0c60196a808880ac8c658036cbf"}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x40854) 1.106108385s ago: executing program 2 (id=750): r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 969.315681ms ago: executing program 7 (id=751): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) r2 = openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x408) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0x78, 0x82, 0xb7, 0x40, 0x2c42, 0x1709, 0xcab7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbf, 0x60, 0xe7}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000000)=r1) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$dir(0xffffff9c, &(0x7f0000000140)='./file0\x00', 0x14000, 0x8) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='\x00', &(0x7f0000000100)='./file0\x00', r6) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x901}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x4, 0x0, r2, 0x80000000, '\x00', 0x0, r2, 0x5, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r7, 0x0, 0x0) r8 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000440)="de1fec1433b59e38ee4086e55472a10d7e4fe3d5ab9f07c4462802ea7a5f8721c612d57a1a8787c4c06e4fcf4f6a76cd029154e8d1bf24c1a13b4075c752381cf5cb14a03cfe1986bb09c572c6c55d36f2efc493123d25fc4421f851e3d7b870417bee522836bdfa2398ec13ef8af6e4ebd990dfa28c1d1d5225eef9a792a6d15e4a7c65b61a8b4e2586fb6ff35e5a124c2926c6ae1800f4e3affcf1e314311d10634d745fa33111effc51dc10198d991619d6178dca16b175121ed90ae9db4361ed04c8b3ac9477235f58f1bf02fb2b57db68debae2e4a766e0fb68fe2cc2867289f7b797d872d342", 0xe9, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000200)={r7, 0x0, r8}, &(0x7f00000006c0)=""/196, 0xc4, &(0x7f00000002c0)={&(0x7f0000000240)={'xcbc-aes-neon\x00'}}) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) 755.421599ms ago: executing program 2 (id=752): setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="6e6174000000000000000000000000000000000000000000000000000000000003"], 0x54) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e6572000000480002800800024000000084080003400000000a080004400000000f08000140000000002400"], 0xb0}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x1, 0x1b8, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000208], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000a2da8114a0c26fbc00000003000a1000000000000000000000000000000000000000ffffffff00000000000000000000000a065f18a00f8b822400000000000000007fffffff000000000000020000000000ffffffff0100000003000000000000000000726f736530020000000000000000000069705f767469300000000000000000fc687064647001003800000000000400007465716c30000000000008000000eddcaaaaaaaaaa00ffff"]}, 0x102) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 685.608618ms ago: executing program 0 (id=753): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = semget(0x0, 0x3, 0x3) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121201, 0x0) write$dsp(r3, &(0x7f00000001c0)="d2", 0x1) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)=0x24b1cd89) semctl$SEM_INFO(r2, 0x2, 0x13, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket(0x11, 0x800000003, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/70, 0x46, 0xbbf9) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000000)=""/35, 0x23, 0x10101, &(0x7f0000000140)={0x2, 0x4e23, @multicast2}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) 630.364676ms ago: executing program 4 (id=754): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r1, r0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0xf2) 342.001116ms ago: executing program 2 (id=755): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000789000/0x2000)=nil, &(0x7f000027e000/0x3000)=nil, &(0x7f00003d1000/0x3000)=nil, &(0x7f00005f1000/0x1000)=nil, &(0x7f0000469000/0x2000)=nil, &(0x7f00000bc000/0x1000)=nil, &(0x7f0000cd9000/0x4000)=nil, &(0x7f0000874000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00004e2000/0x1000)=nil, &(0x7f0000014000/0x1000)=nil, &(0x7f0000000040), 0x0, r0}, 0x64) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x1000000, 0x0, 0x0}, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) read(r0, 0x0, 0x0) 527.962µs ago: executing program 2 (id=756): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100040, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000380)={0x2, {0x82, 0x7, 0x3, 0x8001}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)=ANY=[@ANYBLOB="1400000010af72fbe2000000000000000000000a54000000060a090400000000000000000200000028000480240001800a00010072616e676500000014000280080002400000000008000140000000040900010073797a300000000009000200f622bca65d2cfe26140000001100010000000000000000000010000ae237d272", @ANYRESOCT=r2, @ANYRES16=r0, @ANYRESOCT=r0], 0x7c}}, 0x44090) syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x182) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000400)=[@in={0x2, 0x0, @empty}, @in6={0xa, 0x0, 0x0, @empty}], 0x2c) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000000000)={0xc, {"a2e3ad21ed0d52f91b5a090987f70e06d038e7ff7fc6e5539b5b43078b089b3b32306d090890e0878f0e1ac6e7049b3371959b719a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074c0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r5, 0x40045731, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) io_setup(0x1, &(0x7f00000004c0)=0x0) io_cancel(r9, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x6, 0x7, r0, &(0x7f0000000500)="04d2fe0db9b2361c37eca10fe9fc00af772dfd3cc65aa9a0e96c4f43b422fd51f9b8fa43aa7a", 0x26, 0x5, 0x0, 0x1, r6}, &(0x7f0000000580)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r8, r7], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r6, 0xc01064c7, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000003340)=[0x0]}) syz_open_dev$vcsu(&(0x7f0000000180), 0xffffffcc, 0xc000) ioctl$KVM_XEN_HVM_CONFIG(r10, 0x4038ae7a, &(0x7f0000000340)={0x7ffd, 0xa1f, &(0x7f00000001c0)="04044cf73b1e6d4c0c87c764dbf8dc124f91237d5cdb71748f5c29f9036705849cf04d4325253e2271099a1206d94f2b48b3f507ef6247eb4d2d6e2b4c04f0dec556238c2beb28560122041e1e911e8ac7e935a960c2", &(0x7f0000001100)="67a4632b5085d854676669656a416094087c3c96701a8fac2df929d550ed8c7043a9720566ec66eb6bf73e8e1fe4e19bf4c703abad8d63766ce345eeb2f39411573a6096f9a3c23f5e9c567940fe3fbd8252d213d520e6d030b1de2d7a3e251796cd431d518aa1fa0a0601d11d9f482087b9873aca27f91b0b59ec77e0fed5754b01e2c8d31c8c8bf05e9a1af8704e0a8c3e3c17579ea422f9591a02b34bf7e0bf076c8f29525ce8dd81523710633ca7515c842cc8521d8cb5899147fe6bd0b9f16f9a2b2adc5692c77dd1c92debe98bfd45", 0x56, 0xd2}) 0s ago: executing program 4 (id=757): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x554, 0x65, 0x0, 0x4000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x8, 0x9}, {0x0, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffe}, @filter_kind_options=@f_fw={{0x7}, {0x3c, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'tunl0\x00'}, @TCA_FW_MASK={0x8, 0x5, 0x5}, @TCA_FW_INDEV={0x14, 0x3, 'macvlan1\x00'}, @TCA_FW_MASK={0x8, 0x5, 0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x10001}, @filter_kind_options=@f_route={{0xa}, {0x4d0, 0x2, [@TCA_ROUTE4_POLICE={0x4bc, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0xb343}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffff8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5d, 0xffffffffffffffff, 0x8001, 0x9, 0x0, {0xd7, 0x2, 0x4, 0x0, 0x0, 0x9}, {0x8, 0x1, 0x401, 0x8, 0x0, 0xfffffff9}, 0x5, 0x1, 0x2}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfec4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x4, 0x4, 0x80000000, 0x3ff, {0x3, 0x0, 0x1, 0x1000, 0x3, 0xc4}, {0x6e, 0x0, 0x4, 0x9, 0x274, 0x5}, 0x101, 0x7, 0x2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc0000000}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x8e4, 0x1b2, 0x7, 0x10, 0x1, 0x9cd, 0x620d, 0x2, 0x5, 0x1, 0x4, 0x8, 0x7, 0xfffffffe, 0x0, 0x386, 0x8001, 0xfffffff8, 0x1, 0x2, 0x6, 0xffffff80, 0x10001, 0x2000000, 0xbecd, 0xb4a, 0x3, 0x3, 0x5, 0x0, 0x10000, 0xe8, 0xfffffffe, 0x0, 0x3, 0x0, 0x2, 0x86, 0xffffff3d, 0x1bbc, 0x8f2, 0x10000, 0x9, 0x7fff, 0x20000000, 0x1, 0x9, 0x2, 0x2, 0xe, 0x0, 0x8, 0x3ff, 0x8, 0x3, 0x1ff, 0x8, 0x5, 0x92, 0x8, 0x80000000, 0xffff, 0x6da0, 0x6, 0x0, 0x9, 0xfffffa3b, 0x8, 0x90, 0xfde7, 0x0, 0x9, 0xdf, 0x0, 0x5, 0xfff, 0x1ff, 0x7, 0x9, 0xb2da, 0x8, 0x9, 0x62e, 0x40, 0x9, 0x1, 0x1fdb35ca, 0xe, 0x7, 0x8, 0x1, 0x4, 0xe3, 0x5bdc, 0xe, 0x7ff, 0xfff, 0x4, 0x3, 0x8e, 0x6, 0x8, 0x6, 0xa89, 0x5, 0x6, 0x2, 0x0, 0x2, 0x9, 0xf, 0x10000, 0xff, 0x2, 0x7, 0x9, 0x4, 0xa2af, 0x3, 0x8, 0x7, 0x8, 0xd87, 0x7fff, 0x7fff, 0x7, 0x1, 0x7, 0xb2, 0x5, 0x7, 0x2d, 0x87, 0x0, 0x4c8c1e6, 0xfffffffc, 0x800, 0x8001, 0xc6, 0x8001, 0x1, 0x5, 0xfffffffe, 0x8, 0x5106, 0x3, 0xfffffab2, 0x2, 0xa, 0x4, 0x1, 0x4, 0x1, 0x6, 0x3726, 0xb4, 0x10, 0x0, 0x0, 0x2, 0x3, 0x4, 0x4, 0x8001, 0x7, 0x80, 0xa710, 0x5, 0xe, 0x80000000, 0xfffff125, 0x80000000, 0xfffffff7, 0x5, 0x1, 0x4, 0x1, 0x1, 0x8, 0x8, 0x4, 0xb5, 0x6, 0x80000000, 0x1, 0x6f, 0xf07e, 0x8, 0x2, 0x7, 0x322d, 0x40, 0x4, 0x5, 0x9, 0x41, 0x3, 0xff, 0x7, 0x101, 0x9, 0x40, 0xce, 0x8, 0x8000, 0xa59, 0x8, 0x45a4, 0x7, 0x4, 0x6f, 0x3, 0x10001, 0x0, 0x1, 0x80000000, 0xb4d0, 0x6, 0x7fffffff, 0xc6, 0x7, 0xfffe, 0xfffffff8, 0x4, 0x2, 0xf864, 0x121ae209, 0xc0, 0x4, 0x81, 0x2, 0xd, 0xfff, 0x8, 0x3, 0x93e, 0x7, 0xfffff1b6, 0x9, 0x3, 0x6, 0x2, 0x3, 0x3, 0x5, 0x7, 0x8, 0x0, 0x66c, 0xfffeffff, 0x4, 0x7ff, 0xe04e, 0x4, 0x80]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2e}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x81}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xe1}]}}]}, 0x554}, 0x1, 0x0, 0x0, 0x600400c5}, 0xc044) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) kernel console output (not intermixed with test programs): le [ 201.809517][ T5924] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 201.849372][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 201.855810][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 201.973498][ T5924] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.994817][ T5924] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 202.019416][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 202.036065][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 202.062984][ T5924] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 202.107999][ T5924] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 202.131377][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.139711][ T975] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 202.231414][ T5924] usb 1-1: Product: syz [ 202.238884][ T5924] usb 1-1: Manufacturer: syz [ 202.244597][ T5924] usb 1-1: SerialNumber: syz [ 202.261885][ T975] usb 7-1: device descriptor read/8, error -71 [ 202.280669][ T5924] usb 1-1: config 0 descriptor?? [ 202.292237][ T7375] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 202.409646][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 202.419502][ T5924] rc_core: IR keymap rc-xbox-dvd not found [ 202.429049][ T5924] Registered IR keymap rc-empty [ 202.495862][ T5924] rc rc0: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 202.514944][ T975] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 202.528354][ T7375] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 202.535133][ T7375] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 202.587689][ T5924] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input18 [ 202.610385][ T975] usb 7-1: device descriptor read/8, error -71 [ 202.628794][ T7375] vhci_hcd vhci_hcd.0: Device attached [ 202.687869][ T7375] vivid-001: disconnect [ 202.720498][ T975] usb usb7-port1: unable to enumerate USB device [ 202.744276][ T7374] vivid-001: reconnect [ 202.749793][ T7381] vhci_hcd: connection closed [ 202.756098][ T61] vhci_hcd: stop threads [ 202.771531][ T8] usb 1-1: USB disconnect, device number 21 [ 202.777529][ C0] xbox_remote 1-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 202.787348][ T61] vhci_hcd: release socket [ 202.797600][ T61] vhci_hcd: disconnect device [ 202.810103][ T975] vhci_hcd: vhci_device speed not set [ 203.050386][ T5886] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 203.209943][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 203.217157][ T5886] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 203.225740][ T5886] usb 5-1: config 0 has no interface number 0 [ 203.232192][ T5886] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.243525][ T5886] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.254251][ T5886] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 203.263456][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.276558][ T5886] usb 5-1: config 0 descriptor?? [ 203.386558][ T7389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.486'. [ 203.408431][ T7389] macvtap1: entered promiscuous mode [ 203.414320][ T7389] macvtap1: entered allmulticast mode [ 203.420022][ T7389] gretap0: entered allmulticast mode [ 203.546265][ T7391] FAULT_INJECTION: forcing a failure. [ 203.546265][ T7391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.560201][ T7391] CPU: 1 UID: 0 PID: 7391 Comm: syz.0.487 Not tainted 6.14.0-rc4-syzkaller #0 [ 203.560235][ T7391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 203.560258][ T7391] Call Trace: [ 203.560282][ T7391] [ 203.560291][ T7391] dump_stack_lvl+0x241/0x360 [ 203.560322][ T7391] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.560346][ T7391] ? __pfx__printk+0x10/0x10 [ 203.560373][ T7391] ? snprintf+0xda/0x120 [ 203.560397][ T7391] should_fail_ex+0x40a/0x550 [ 203.560432][ T7391] _copy_to_user+0x31/0xb0 [ 203.560461][ T7391] simple_read_from_buffer+0xca/0x150 [ 203.560491][ T7391] proc_fail_nth_read+0x1e9/0x250 [ 203.560524][ T7391] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.560556][ T7391] ? rw_verify_area+0x243/0x630 [ 203.560577][ T7391] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.560608][ T7391] vfs_read+0x1f8/0xb40 [ 203.560630][ T7391] ? fdget_pos+0x254/0x320 [ 203.560660][ T7391] ? __pfx___mutex_lock+0x10/0x10 [ 203.560689][ T7391] ? __pfx_vfs_read+0x10/0x10 [ 203.560713][ T7391] ? __fget_files+0x2a/0x410 [ 203.560744][ T7391] ? __fget_files+0x395/0x410 [ 203.560772][ T7391] ? __fget_files+0x2a/0x410 [ 203.560810][ T7391] ksys_read+0x18f/0x2b0 [ 203.560840][ T7391] ? __pfx_ksys_read+0x10/0x10 [ 203.560864][ T7391] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 203.560893][ T7391] ? lockdep_hardirqs_on+0x99/0x150 [ 203.560922][ T7391] __do_fast_syscall_32+0xb4/0x110 [ 203.560952][ T7391] ? exc_page_fault+0x590/0x8b0 [ 203.560992][ T7391] do_fast_syscall_32+0x34/0x80 [ 203.561021][ T7391] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 203.561055][ T7391] RIP: 0023:0xf747d579 [ 203.561073][ T7391] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 203.561090][ T7391] RSP: 002b:00000000f5106590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 203.561113][ T7391] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5106620 [ 203.561127][ T7391] RDX: 000000000000000f RSI: 00000000f746cff4 RDI: 0000000000000000 [ 203.561140][ T7391] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 203.561152][ T7391] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 203.561164][ T7391] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 203.561193][ T7391] [ 204.152471][ T7387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.499325][ T5924] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 204.799799][ T7387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.950217][ T5831] usb 3-1: USB disconnect, device number 28 [ 205.177585][ T5924] usb 6-1: config 0 has no interfaces? [ 205.197952][ T5924] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 205.207662][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.227474][ T5924] usb 6-1: Product: syz [ 205.237387][ T5924] usb 6-1: Manufacturer: syz [ 205.247902][ T5924] usb 6-1: SerialNumber: syz [ 205.263679][ T5924] usb 6-1: config 0 descriptor?? [ 205.642273][ T5831] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 205.809494][ T5831] usb 7-1: Using ep0 maxpacket: 8 [ 205.818771][ T5831] usb 7-1: config 0 has an invalid interface number: 130 but max is 0 [ 205.827665][ T5831] usb 7-1: config 0 has no interface number 0 [ 205.839514][ T5831] usb 7-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 205.849070][ T5831] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.858091][ T5831] usb 7-1: Product: syz [ 205.862947][ T5831] usb 7-1: Manufacturer: syz [ 205.867742][ T5831] usb 7-1: SerialNumber: syz [ 205.875866][ T5831] usb 7-1: config 0 descriptor?? [ 205.887872][ T5831] as10x_usb: device has been detected [ 205.894589][ T5831] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 205.915992][ T5831] usb 7-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 205.930710][ T5831] as10x_usb: error during firmware upload part1 [ 205.941148][ T5831] Registered device PCTV Systems picoStick (74e) [ 206.121439][ T5831] usb 7-1: USB disconnect, device number 9 [ 206.192745][ T5831] Unregistered device PCTV Systems picoStick (74e) [ 206.195666][ T5831] as10x_usb: device has been disconnected [ 206.278186][ T5886] usbhid 5-1:0.1: can't add hid device: -71 [ 206.291929][ T5886] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 206.327578][ T5886] usb 5-1: USB disconnect, device number 25 [ 206.417138][ T7418] PKCS7: Unknown OID: [4] 0.38.35.36.951720.33.17 [ 206.429791][ T7418] PKCS7: Only support pkcs7_signedData type [ 206.446398][ T7418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.497'. [ 206.764213][ T7420] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 207.116356][ T5886] usb 6-1: USB disconnect, device number 18 [ 207.320780][ T5831] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 207.515790][ T5831] usb 3-1: config 1 has an invalid descriptor of length 63, skipping remainder of the config [ 207.546962][ T5831] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 207.567803][ T7451] capability: warning: `syz.0.509' uses deprecated v2 capabilities in a way that may be insecure [ 207.628913][ T5831] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 207.664289][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 207.709287][ T5831] usb 3-1: SerialNumber: syz [ 207.844565][ T7455] netlink: 44 bytes leftover after parsing attributes in process `syz.0.511'. [ 207.869567][ T7455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.511'. [ 207.904731][ T7455] netlink: 20 bytes leftover after parsing attributes in process `syz.0.511'. [ 207.968394][ T5831] usb 3-1: 0:2 : does not exist [ 208.010020][ T5831] usb 3-1: unit 5: unexpected type 0x09 [ 208.090557][ T5831] usb 3-1: USB disconnect, device number 29 [ 208.152825][ T975] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 208.294332][ T5845] udevd[5845]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.359413][ T975] usb 7-1: Using ep0 maxpacket: 8 [ 208.380432][ T975] usb 7-1: config 0 has an invalid interface number: 130 but max is 0 [ 208.418896][ T975] usb 7-1: config 0 has no interface number 0 [ 208.447962][ T975] usb 7-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 208.466167][ T975] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.479119][ T975] usb 7-1: Product: syz [ 208.495352][ T975] usb 7-1: Manufacturer: syz [ 208.507620][ T975] usb 7-1: SerialNumber: syz [ 208.556655][ T975] usb 7-1: config 0 descriptor?? [ 208.592931][ T975] as10x_usb: device has been detected [ 208.643850][ T975] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 208.749571][ T975] usb 7-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 208.785847][ T975] as10x_usb: error during firmware upload part1 [ 208.810299][ T975] Registered device PCTV Systems picoStick (74e) [ 208.827621][ T975] usb 7-1: USB disconnect, device number 10 [ 208.922569][ T975] Unregistered device PCTV Systems picoStick (74e) [ 208.930406][ T975] as10x_usb: device has been disconnected [ 208.990704][ T25] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 209.171676][ T25] usb 1-1: config 0 has no interfaces? [ 209.189423][ T5831] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 209.206216][ T25] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 209.239563][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.256358][ T25] usb 1-1: Product: syz [ 209.270942][ T25] usb 1-1: Manufacturer: syz [ 209.285840][ T25] usb 1-1: SerialNumber: syz [ 209.298202][ T25] usb 1-1: config 0 descriptor?? [ 209.369927][ T5831] usb 3-1: Using ep0 maxpacket: 8 [ 209.387692][ T5831] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 209.402327][ T5831] usb 3-1: config 0 has an invalid descriptor of length 26, skipping remainder of the config [ 209.493256][ T5831] usb 3-1: config 0 has no interface number 0 [ 209.511143][ T5831] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 148, changing to 11 [ 209.571173][ T5831] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 42457, setting to 1024 [ 209.601940][ T5831] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 209.623760][ T5831] usb 3-1: config 0 interface 52 has no altsetting 0 [ 209.632530][ T5831] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 209.645108][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 209.649433][ T975] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 209.653609][ T5831] usb 3-1: Product: syz [ 209.665327][ T5831] usb 3-1: SerialNumber: syz [ 209.682822][ T5831] usb 3-1: config 0 descriptor?? [ 209.757700][ T7480] netlink: 'syz.5.519': attribute type 3 has an invalid length. [ 209.830730][ T975] usb 5-1: Using ep0 maxpacket: 8 [ 209.845595][ T975] usb 5-1: config 0 interface 0 altsetting 248 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.878146][ T975] usb 5-1: config 0 interface 0 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 209.896042][ T975] usb 5-1: config 0 interface 0 has no altsetting 0 [ 209.906132][ T975] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 209.925603][ T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.954482][ T975] usb 5-1: config 0 descriptor?? [ 209.959346][ T25] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 210.119450][ T25] usb 7-1: Using ep0 maxpacket: 16 [ 210.131223][ T25] usb 7-1: config 252 has an invalid interface number: 15 but max is 0 [ 210.149847][ T25] usb 7-1: config 252 has no interface number 0 [ 210.176285][ T25] usb 7-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 210.222423][ T25] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 210.242088][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.264976][ T25] usb 7-1: Product: syz [ 210.275075][ T25] usb 7-1: Manufacturer: syz [ 210.285194][ T25] usb 7-1: SerialNumber: syz [ 210.326319][ T25] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 210.341145][ T5891] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 210.381906][ T975] steelseries 0003:1038:1410.0005: unknown main item tag 0x0 [ 210.418472][ T975] steelseries 0003:1038:1410.0005: unknown main item tag 0x0 [ 210.436625][ T975] steelseries 0003:1038:1410.0005: unknown main item tag 0x0 [ 210.457906][ T975] steelseries 0003:1038:1410.0005: missing HID_OUTPUT_REPORT 0 [ 210.521592][ T5891] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 210.558923][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.586444][ T7474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.604586][ T7474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.613319][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.648705][ T5891] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 210.682666][ T5891] usb 6-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 210.719321][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.754211][ T5891] usb 6-1: config 0 descriptor?? [ 210.925269][ T5831] input: syz (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input19 [ 211.222569][ T5891] usbhid 6-1:0.0: can't add hid device: -71 [ 211.256660][ T5891] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 211.310057][ T5891] usb 6-1: USB disconnect, device number 19 [ 211.375905][ T3556] usb 7-1: Failed to submit usb control message: -110 [ 211.391997][ T3556] usb 7-1: unable to send the bmi data to the device: -110 [ 211.401185][ T3556] usb 7-1: unable to get target info from device [ 211.407592][ T3556] usb 7-1: could not get target info (-110) [ 211.414091][ T3556] usb 7-1: could not probe fw (-110) [ 211.707353][ T5891] usb 3-1: USB disconnect, device number 30 [ 211.815087][ T5924] usb 7-1: USB disconnect, device number 11 [ 211.895626][ T975] usb 1-1: USB disconnect, device number 22 [ 212.022563][ T7495] netlink: 'syz.0.524': attribute type 21 has an invalid length. [ 212.032809][ T7495] netlink: 132 bytes leftover after parsing attributes in process `syz.0.524'. [ 213.975100][ T3556] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.336568][ T3556] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.389359][ T5891] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 214.585385][ T5891] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.604557][ T5891] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 214.624360][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.638400][ T3556] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.665505][ T5891] usb 3-1: config 0 descriptor?? [ 214.699040][ T5891] pwc: Askey VC010 type 2 USB webcam detected. [ 214.797313][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.807009][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.816444][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.826964][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.835601][ T5832] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 214.843610][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.897914][ T5891] pwc: send_video_command error -71 [ 214.914047][ T5891] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 214.923411][ T5891] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 214.937095][ T5891] usb 3-1: USB disconnect, device number 31 [ 214.946309][ T3556] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.037337][ T7500] warning: `syz.4.522' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 215.143512][ T5924] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 215.240535][ T975] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 215.283792][ T3556] bridge_slave_1: left allmulticast mode [ 215.310874][ T3556] bridge_slave_1: left promiscuous mode [ 215.328005][ T3556] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.337690][ T5924] usb 6-1: Using ep0 maxpacket: 8 [ 215.356177][ T5924] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 215.373182][ T5924] usb 6-1: config 0 has an invalid descriptor of length 26, skipping remainder of the config [ 215.390053][ T3556] bridge_slave_0: left allmulticast mode [ 215.395991][ T3556] bridge_slave_0: left promiscuous mode [ 215.396639][ T5924] usb 6-1: config 0 has no interface number 0 [ 215.407877][ T5924] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 148, changing to 11 [ 215.409328][ T5891] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 215.428705][ T5924] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 42457, setting to 1024 [ 215.430819][ T3556] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.458780][ T5924] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 215.485826][ T5924] usb 6-1: config 0 interface 52 has no altsetting 0 [ 215.493120][ T975] usb 1-1: config 0 has no interfaces? [ 215.508924][ T5924] usb 6-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 215.524599][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 215.542658][ T5924] usb 6-1: Product: syz [ 215.546903][ T5924] usb 6-1: SerialNumber: syz [ 215.557320][ T5924] usb 6-1: config 0 descriptor?? [ 215.572347][ T975] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 215.589306][ T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.589582][ T5891] usb 3-1: device descriptor read/64, error -71 [ 215.600027][ T975] usb 1-1: Product: syz [ 215.608047][ T975] usb 1-1: Manufacturer: syz [ 215.628333][ T975] usb 1-1: SerialNumber: syz [ 215.640385][ T975] usb 1-1: config 0 descriptor?? [ 215.800073][ T7500] netlink: 'syz.4.522': attribute type 3 has an invalid length. [ 215.871154][ T5891] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 216.029500][ T5891] usb 3-1: device descriptor read/64, error -71 [ 216.048543][ T975] usb 5-1: USB disconnect, device number 26 [ 216.159767][ T5891] usb usb3-port1: attempt power cycle [ 216.510692][ T5924] input: syz (Stick) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.52/input/input20 [ 216.541125][ T5891] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 216.590526][ T5891] usb 3-1: device descriptor read/8, error -71 [ 216.792656][ T3556] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.816107][ T3556] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.837242][ T3556] bond0 (unregistering): Released all slaves [ 216.843840][ T5891] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 216.870184][ T5891] usb 3-1: device descriptor read/8, error -71 [ 216.889644][ T5832] Bluetooth: hci0: command tx timeout [ 216.982267][ T5891] usb usb3-port1: unable to enumerate USB device [ 217.166477][ T7529] chnl_net:caif_netlink_parms(): no params data found [ 217.242884][ T5891] usb 6-1: USB disconnect, device number 20 [ 217.584526][ T7551] netlink: 6 bytes leftover after parsing attributes in process `syz.5.540'. [ 218.294379][ T5891] usb 1-1: USB disconnect, device number 23 [ 218.435542][ T3556] hsr_slave_0: left promiscuous mode [ 218.627189][ T7570] netlink: 'syz.0.541': attribute type 10 has an invalid length. [ 218.659869][ T7570] netlink: 40 bytes leftover after parsing attributes in process `syz.0.541'. [ 218.671406][ T7571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.542'. [ 218.716150][ T3556] hsr_slave_1: left promiscuous mode [ 218.737246][ T3556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.791395][ T3556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.819160][ T3556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.857902][ T3556] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.923283][ T3556] veth1_macvtap: left promiscuous mode [ 218.950080][ T3556] veth0_macvtap: left promiscuous mode [ 218.966056][ T3556] veth1_vlan: left promiscuous mode [ 218.974293][ T5832] Bluetooth: hci0: command tx timeout [ 218.981364][ T3556] veth0_vlan: left promiscuous mode [ 219.885939][ T3556] team0 (unregistering): Port device team_slave_1 removed [ 219.944878][ T3556] team0 (unregistering): Port device team_slave_0 removed [ 220.570804][ T7594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.548'. [ 220.650433][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.548'. [ 220.775796][ T7570] bridge0: port 3(macvlan1) entered blocking state [ 220.799510][ T7570] bridge0: port 3(macvlan1) entered disabled state [ 220.806294][ T7570] macvlan1: entered allmulticast mode [ 220.815993][ T7570] veth1_vlan: entered allmulticast mode [ 220.824185][ T7570] macvlan1: entered promiscuous mode [ 220.831859][ T7570] bridge0: port 3(macvlan1) entered blocking state [ 220.840511][ T7570] bridge0: port 3(macvlan1) entered forwarding state [ 220.891488][ T7594] macvtap1: entered promiscuous mode [ 220.896999][ T7594] macvtap1: entered allmulticast mode [ 220.942879][ T7594] dummy0: entered allmulticast mode [ 220.981362][ T7593] dummy0: left allmulticast mode [ 221.023131][ T7529] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.049643][ T5832] Bluetooth: hci0: command tx timeout [ 221.061292][ T7529] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.068597][ T7529] bridge_slave_0: entered allmulticast mode [ 221.101662][ T7529] bridge_slave_0: entered promiscuous mode [ 221.111505][ T7529] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.118753][ T7529] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.126637][ T7529] bridge_slave_1: entered allmulticast mode [ 221.135320][ T7529] bridge_slave_1: entered promiscuous mode [ 221.241752][ T7529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.270732][ T7529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.299925][ T25] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 221.339783][ T5924] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 221.402095][ T7529] team0: Port device team_slave_0 added [ 221.409461][ T5916] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 221.441004][ T7529] team0: Port device team_slave_1 added [ 221.471519][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 221.491496][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 221.502743][ T25] usb 1-1: config 6 has an invalid interface number: 41 but max is 1 [ 221.511696][ T25] usb 1-1: config 6 has an invalid interface number: 6 but max is 1 [ 221.520233][ T25] usb 1-1: config 6 has no interface number 0 [ 221.526477][ T25] usb 1-1: config 6 has no interface number 1 [ 221.534774][ T25] usb 1-1: config 6 interface 41 has no altsetting 0 [ 221.542067][ T25] usb 1-1: config 6 interface 6 has no altsetting 0 [ 221.551327][ T25] usb 1-1: New USB device found, idVendor=19d2, idProduct=0078, bcdDevice=61.be [ 221.558020][ T7529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.568856][ T5924] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 221.571062][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.589286][ T5924] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 221.599625][ T7529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.608249][ T5916] usb 6-1: config 0 has no interfaces? [ 221.635686][ T5924] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 221.645233][ T29] audit: type=1326 audit(1740380950.452:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 221.652832][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.668676][ T25] usb 1-1: Product: syz [ 221.687112][ T7529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.693399][ T25] usb 1-1: Manufacturer: syz [ 221.704673][ T5916] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 221.715607][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.726878][ T7601] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 221.727024][ T29] audit: type=1326 audit(1740380950.452:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 221.739360][ T5916] usb 6-1: Product: syz [ 221.779563][ T25] usb 1-1: SerialNumber: syz [ 221.781523][ T5924] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 221.799041][ T7529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.812150][ T7529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.838913][ T5916] usb 6-1: Manufacturer: syz [ 221.848577][ T5916] usb 6-1: SerialNumber: syz [ 221.870762][ T5916] usb 6-1: config 0 descriptor?? [ 221.918518][ T29] audit: type=1326 audit(1740380950.452:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 221.971108][ T7529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.031774][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.549'. [ 222.036054][ T29] audit: type=1326 audit(1740380950.452:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 222.149862][ T25] smsusb:smsusb_probe: board id=15, interface number 41 [ 222.184993][ T25] smsusb:smsusb_probe: board id=15, interface number 6 [ 222.194699][ T7617] FAULT_INJECTION: forcing a failure. [ 222.194699][ T7617] name failslab, interval 1, probability 0, space 0, times 0 [ 222.210506][ T25] smsusb:smsusb_probe: Device initialized with return code -19 [ 222.216038][ T29] audit: type=1326 audit(1740380950.452:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 222.242339][ T7617] CPU: 0 UID: 0 PID: 7617 Comm: syz.2.554 Not tainted 6.14.0-rc4-syzkaller #0 [ 222.242367][ T7617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 222.242380][ T7617] Call Trace: [ 222.242388][ T7617] [ 222.242397][ T7617] dump_stack_lvl+0x241/0x360 [ 222.242427][ T7617] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.242451][ T7617] ? __pfx__printk+0x10/0x10 [ 222.242474][ T7617] ? __kmalloc_cache_noprof+0x48/0x390 [ 222.242502][ T7617] ? __pfx___might_resched+0x10/0x10 [ 222.242527][ T7617] ? mas_preallocate+0x629/0x8d0 [ 222.242553][ T7617] should_fail_ex+0x40a/0x550 [ 222.242586][ T7617] should_failslab+0xac/0x100 [ 222.242616][ T7617] __kmalloc_cache_noprof+0x70/0x390 [ 222.242642][ T7617] ? hugetlb_vm_op_open+0x2fb/0x560 [ 222.242665][ T7617] ? anon_vma_clone+0x48a/0x4e0 [ 222.242688][ T7617] hugetlb_vm_op_open+0x2fb/0x560 [ 222.242711][ T7617] ? __pfx_hugetlb_vm_op_open+0x10/0x10 [ 222.242741][ T7617] __split_vma+0x4af/0xbf0 [ 222.242778][ T7617] ? __pfx___split_vma+0x10/0x10 [ 222.242811][ T7617] ? mas_find+0x950/0xbb0 [ 222.242842][ T7617] vms_gather_munmap_vmas+0x4c1/0x1600 [ 222.242890][ T7617] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 222.242921][ T7617] ? mark_lock+0x9a/0x360 [ 222.242952][ T7617] do_vmi_align_munmap+0x3ff/0x6f0 [ 222.242975][ T7617] ? __lock_acquire+0x1397/0x2100 [ 222.243012][ T7617] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 222.243071][ T7617] ? mas_find+0x8c0/0xbb0 [ 222.243102][ T7617] do_vmi_munmap+0x24e/0x2d0 [ 222.243133][ T7617] do_munmap+0x18a/0x240 [ 222.243173][ T7617] ? __pfx_do_munmap+0x10/0x10 [ 222.243209][ T7617] ? __pfx_down_write_killable+0x10/0x10 [ 222.243240][ T7617] ? ksys_write+0x22a/0x2b0 [ 222.243261][ T7617] ? __pfx_lock_release+0x10/0x10 [ 222.243300][ T7617] __se_sys_mremap+0x10c1/0x1b20 [ 222.243341][ T7617] ? __pfx___se_sys_mremap+0x10/0x10 [ 222.243383][ T7617] ? __fget_files+0x2a/0x410 [ 222.243431][ T7617] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 222.243470][ T7617] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 222.243504][ T7617] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 222.243533][ T7617] ? __ia32_sys_mremap+0x20/0xc0 [ 222.243560][ T7617] __do_fast_syscall_32+0xb4/0x110 [ 222.243589][ T7617] ? exc_page_fault+0x590/0x8b0 [ 222.243619][ T7617] do_fast_syscall_32+0x34/0x80 [ 222.243646][ T7617] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 222.243685][ T7617] RIP: 0023:0xf7fd1579 [ 222.243706][ T7617] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 222.243724][ T7617] RSP: 002b:00000000f50d555c EFLAGS: 00000206 ORIG_RAX: 00000000000000a3 [ 222.243746][ T7617] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000600a00 [ 222.243760][ T7617] RDX: 0000000000200000 RSI: 0000000000000003 RDI: 0000000080a00000 [ 222.243773][ T7617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 222.243785][ T7617] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 222.243797][ T7617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 222.243826][ T7617] [ 222.243987][ T7617] HugeTLB: unable to allocate vma specific lock [ 222.502530][ T25] usb 1-1: USB disconnect, device number 24 [ 222.516353][ T29] audit: type=1326 audit(1740380950.452:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 222.595599][ T5832] Bluetooth: unknown link type 128 [ 222.597348][ T29] audit: type=1326 audit(1740380950.582:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 222.635997][ T29] audit: type=1326 audit(1740380950.582:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 222.658754][ T7529] hsr_slave_0: entered promiscuous mode [ 222.665874][ T7529] hsr_slave_1: entered promiscuous mode [ 222.673218][ T7529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.690476][ T7529] Cannot create hsr debugfs directory [ 222.771123][ T5916] usb 5-1: USB disconnect, device number 27 [ 223.130222][ T5832] Bluetooth: hci0: command tx timeout [ 223.483475][ T7529] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 223.520286][ T7529] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 223.568085][ T7529] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 223.609117][ T7529] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 223.974211][ T7529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.102393][ T7529] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.164960][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.172200][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.194605][ T975] usb 6-1: USB disconnect, device number 21 [ 224.292032][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.299259][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.532724][ T7654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.562'. [ 224.549964][ T7654] macvtap2: entered promiscuous mode [ 224.557984][ T7654] macvtap2: entered allmulticast mode [ 224.585108][ T7654] team0: entered allmulticast mode [ 224.611092][ T7654] team_slave_0: entered allmulticast mode [ 224.637942][ T7654] team_slave_1: entered allmulticast mode [ 224.662192][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 224.685546][ T7654] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 225.165567][ T7529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.368261][ T7529] veth0_vlan: entered promiscuous mode [ 225.506260][ T7529] veth1_vlan: entered promiscuous mode [ 225.760659][ T5916] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 225.908647][ T7529] veth0_macvtap: entered promiscuous mode [ 225.987025][ T7529] veth1_macvtap: entered promiscuous mode [ 226.043490][ T5916] usb 1-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 226.069898][ T7529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.086043][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.099948][ T5916] usb 1-1: Product: syz [ 226.106529][ T7529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.129350][ T5916] usb 1-1: Manufacturer: syz [ 226.147153][ T5916] usb 1-1: SerialNumber: syz [ 226.161841][ T7529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.176911][ T5916] usb 1-1: config 0 descriptor?? [ 226.248889][ T7529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.421694][ T7529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.433494][ T7529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.475303][ T7529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.515389][ T7529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.549624][ T7529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.769824][ T7529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.780061][ T5831] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 226.821768][ T7529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.854197][ T7529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.905938][ T7529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.959428][ T5831] usb 6-1: Using ep0 maxpacket: 8 [ 226.968888][ T5831] usb 6-1: config 0 has an invalid interface number: 130 but max is 0 [ 226.977370][ T5831] usb 6-1: config 0 has no interface number 0 [ 227.004513][ T5831] usb 6-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 227.017133][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.035701][ T7529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.055502][ T5831] usb 6-1: Product: syz [ 227.062481][ T5831] usb 6-1: Manufacturer: syz [ 227.067935][ T7529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.088398][ T5831] usb 6-1: SerialNumber: syz [ 227.098529][ T7529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.121529][ T5831] usb 6-1: config 0 descriptor?? [ 227.166618][ T5831] as10x_usb: device has been detected [ 227.177315][ T7529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.201727][ T5831] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 227.218983][ T7529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.257119][ T7529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.289012][ T5831] usb 6-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 227.318405][ T7529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.344554][ T5831] as10x_usb: error during firmware upload part1 [ 227.394053][ T7529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.414959][ T5831] Registered device PCTV Systems picoStick (74e) [ 227.421608][ T5831] usb 6-1: USB disconnect, device number 22 [ 227.489957][ T7529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.556533][ T5831] Unregistered device PCTV Systems picoStick (74e) [ 227.557791][ T7529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.588253][ T5831] as10x_usb: device has been disconnected [ 227.619618][ T5916] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 227.635419][ T7529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.658088][ T5916] asix 1-1:0.0: probe with driver asix failed with error -71 [ 227.668710][ T7529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.707020][ T5916] usb 1-1: USB disconnect, device number 25 [ 227.716345][ T7529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.755634][ T7529] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.780371][ T7529] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.803393][ T7529] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.822896][ T7529] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.969426][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.977285][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.047919][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.067109][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.289672][ T5831] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 228.436896][ T29] audit: type=1326 audit(1740380957.232:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7712 comm="syz.5.571" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 228.464347][ T8] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 228.479532][ T5831] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 228.491530][ T29] audit: type=1326 audit(1740380957.242:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7712 comm="syz.5.571" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 228.533781][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 228.533820][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 228.533846][ T5831] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 228.533892][ T5831] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 228.533919][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.536057][ T5831] usb 3-1: config 0 descriptor?? [ 228.560003][ T29] audit: type=1326 audit(1740380957.242:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7712 comm="syz.5.571" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 228.689597][ T8] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 228.689646][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.689686][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.689712][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 228.689762][ T8] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 228.689789][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.699154][ T8] usb 5-1: config 0 descriptor?? [ 228.819440][ T29] audit: type=1326 audit(1740380957.242:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7712 comm="syz.5.571" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 228.819485][ T29] audit: type=1326 audit(1740380957.242:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7712 comm="syz.5.571" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 228.819532][ T29] audit: type=1326 audit(1740380957.242:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7712 comm="syz.5.571" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 228.993252][ T7722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.573'. [ 229.008351][ T7722] macvtap3: entered promiscuous mode [ 229.008575][ T7722] macvtap3: entered allmulticast mode [ 229.010141][ T7722] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 229.059341][ T5889] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 229.075024][ T5831] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 229.084780][ T5831] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 229.251543][ T5889] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.262068][ T5889] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 229.302091][ T5889] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 229.329268][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.337357][ T5889] usb 6-1: Product: syz [ 229.357163][ T8] usbhid 5-1:0.0: can't add hid device: -71 [ 229.364703][ T8] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 229.389267][ T5889] usb 6-1: Manufacturer: syz [ 229.393946][ T5889] usb 6-1: SerialNumber: syz [ 229.424377][ T8] usb 5-1: USB disconnect, device number 28 [ 229.708149][ T5889] usb 6-1: 0:2 : does not exist [ 229.725803][ T5889] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 229.769722][ T5889] usb 6-1: USB disconnect, device number 23 [ 229.988332][ T5845] udevd[5845]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 230.809564][ T8] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 231.004669][ T8] usb 8-1: Using ep0 maxpacket: 16 [ 231.090211][ T5889] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 231.194951][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 231.285670][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 231.409461][ T5889] usb 6-1: Using ep0 maxpacket: 8 [ 231.440372][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 231.451627][ T5889] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 231.501535][ T5889] usb 6-1: config 0 has an invalid descriptor of length 26, skipping remainder of the config [ 231.579314][ T8] usb 8-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 231.588783][ T5924] usb 3-1: USB disconnect, device number 36 [ 231.752315][ T5889] usb 6-1: config 0 has no interface number 0 [ 231.772075][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.788884][ T5889] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 148, changing to 11 [ 231.808664][ T8] usb 8-1: Product: syz [ 232.008348][ T8] usb 8-1: Manufacturer: syz [ 232.014088][ T5889] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 42457, setting to 1024 [ 232.028321][ T8] usb 8-1: SerialNumber: syz [ 232.042607][ T8] usb 8-1: config 0 descriptor?? [ 232.052023][ T5889] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.079172][ T8] keyspan 8-1:0.0: Keyspan 2 port adapter converter detected [ 232.095606][ T8] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 87 [ 232.106389][ T5889] usb 6-1: config 0 interface 52 has no altsetting 0 [ 232.122571][ T8] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 7 [ 232.136671][ T5889] usb 6-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 232.154564][ T8] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 81 [ 232.163925][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 232.242856][ T8] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 1 [ 232.276888][ T5889] usb 6-1: Product: syz [ 232.287683][ T5889] usb 6-1: SerialNumber: syz [ 232.304049][ T8] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 2 [ 232.336770][ T5889] usb 6-1: config 0 descriptor?? [ 232.355544][ T8] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 85 [ 232.424442][ T8] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 5 [ 232.521428][ T8] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 232.637861][ T8] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 83 [ 232.738637][ T8] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 4 [ 232.804699][ T7783] veth0_to_team: entered allmulticast mode [ 232.856298][ T8] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 86 [ 232.856515][ T7782] veth0_to_team: left allmulticast mode [ 232.943571][ T8] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 6 [ 233.032799][ T8] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 233.061991][ T29] audit: type=1326 audit(1740380961.872:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7784 comm="syz.2.582" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 233.148933][ T8] usb 8-1: USB disconnect, device number 2 [ 233.199436][ T29] audit: type=1326 audit(1740380961.892:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7784 comm="syz.2.582" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 233.277948][ T8] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 233.351170][ T8] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 233.371215][ T29] audit: type=1326 audit(1740380961.892:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7784 comm="syz.2.582" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 233.390591][ T8] keyspan 8-1:0.0: device disconnected [ 233.402701][ C1] vkms_vblank_simulate: vblank timer overrun [ 233.500411][ T29] audit: type=1326 audit(1740380961.892:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7784 comm="syz.2.582" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 233.589574][ T5924] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 233.591612][ T29] audit: type=1326 audit(1740380961.892:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7784 comm="syz.2.582" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 233.619113][ C1] vkms_vblank_simulate: vblank timer overrun [ 233.821172][ T5924] usb 1-1: config 0 has no interfaces? [ 233.850068][ T5924] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 233.869410][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.877498][ T5924] usb 1-1: Product: syz [ 233.919532][ T5924] usb 1-1: Manufacturer: syz [ 233.924317][ T5924] usb 1-1: SerialNumber: syz [ 233.964574][ T5924] usb 1-1: config 0 descriptor?? [ 234.003569][ T5889] usb 6-1: Can not set alternate setting to 1, error: -71 [ 234.003617][ T5889] synaptics_usb 6-1:0.52: probe with driver synaptics_usb failed with error -71 [ 234.009767][ T5889] usb 6-1: USB disconnect, device number 24 [ 234.053754][ T7806] netlink: 'syz.7.586': attribute type 21 has an invalid length. [ 234.053838][ T7806] netlink: 132 bytes leftover after parsing attributes in process `syz.7.586'. [ 234.360530][ T7817] bridge0: port 3(batadv1) entered blocking state [ 234.363360][ T7817] bridge0: port 3(batadv1) entered disabled state [ 234.363547][ T7817] batadv1: entered allmulticast mode [ 234.380616][ T7817] batadv1: entered promiscuous mode [ 234.571699][ T7822] tipc: Started in network mode [ 234.571730][ T7822] tipc: Node identity 4, cluster identity 4711 [ 234.571748][ T7822] tipc: Node number set to 4 [ 234.847521][ T61] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 234.847591][ T61] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 235.319610][ T5916] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 235.494647][ T5916] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 235.494699][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.494729][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.494752][ T5916] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 235.494792][ T5916] usb 6-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 235.494818][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.497232][ T5916] usb 6-1: config 0 descriptor?? [ 235.931474][ T5916] hid-picolcd 0003:04D8:C002.0007: unbalanced delimiter at end of report description [ 236.057043][ T5916] hid-picolcd 0003:04D8:C002.0007: device report parse failed [ 236.090352][ T5916] hid-picolcd 0003:04D8:C002.0007: probe with driver hid-picolcd failed with error -22 [ 236.190090][ T5916] usb 6-1: USB disconnect, device number 25 [ 236.343025][ T5831] usb 1-1: USB disconnect, device number 26 [ 236.572276][ T29] audit: type=1326 audit(1740380965.372:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7858 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 237.100173][ T29] audit: type=1326 audit(1740380965.372:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7858 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 237.182619][ T29] audit: type=1326 audit(1740380965.382:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7858 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 237.379813][ T29] audit: type=1326 audit(1740380965.382:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7858 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 237.401660][ C0] vkms_vblank_simulate: vblank timer overrun [ 237.441995][ T29] audit: type=1326 audit(1740380965.382:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7858 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 237.463855][ C0] vkms_vblank_simulate: vblank timer overrun [ 237.549495][ T5924] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 237.592378][ T29] audit: type=1326 audit(1740380965.382:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7858 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 237.614215][ C0] vkms_vblank_simulate: vblank timer overrun [ 237.678484][ T29] audit: type=1326 audit(1740380965.382:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7858 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 237.700359][ C0] vkms_vblank_simulate: vblank timer overrun [ 237.707418][ T5885] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 237.738313][ T5924] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 237.752938][ T5924] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 237.769375][ T5924] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 237.786678][ T29] audit: type=1326 audit(1740380965.382:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7858 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 237.850770][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.869556][ T5885] usb 6-1: Using ep0 maxpacket: 8 [ 237.900559][ T5885] usb 6-1: unable to get BOS descriptor or descriptor too short [ 237.910828][ T5885] usb 6-1: config 6 has an invalid interface number: 41 but max is 1 [ 237.926168][ T5885] usb 6-1: config 6 has an invalid interface number: 6 but max is 1 [ 237.935038][ T7866] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 237.996209][ T5924] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 238.019691][ T5885] usb 6-1: config 6 has no interface number 0 [ 238.035604][ T5885] usb 6-1: config 6 has no interface number 1 [ 238.062504][ T5885] usb 6-1: config 6 interface 41 has no altsetting 0 [ 238.092781][ T5885] usb 6-1: config 6 interface 6 has no altsetting 0 [ 238.135356][ T5885] usb 6-1: New USB device found, idVendor=19d2, idProduct=0078, bcdDevice=61.be [ 238.148563][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.158291][ T5885] usb 6-1: Product: syz [ 238.167100][ T5885] usb 6-1: Manufacturer: syz [ 238.190653][ T5885] usb 6-1: SerialNumber: syz [ 238.366860][ T5924] usb 3-1: USB disconnect, device number 37 [ 238.447634][ T7868] netlink: 8 bytes leftover after parsing attributes in process `syz.5.598'. [ 238.480565][ T5885] smsusb:smsusb_probe: board id=15, interface number 41 [ 238.501915][ T5885] smsusb:smsusb_probe: board id=15, interface number 6 [ 238.509072][ T5885] smsusb:smsusb_probe: Device initialized with return code -19 [ 238.762705][ T5885] usb 6-1: USB disconnect, device number 26 [ 239.063748][ T7885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.601'. [ 239.754517][ T7895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.603'. [ 239.809357][ T5916] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 239.829928][ T7899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.603'. [ 239.899497][ T7895] macvtap2: entered promiscuous mode [ 239.938699][ T7895] macvtap2: entered allmulticast mode [ 239.998599][ T7895] erspan0: entered allmulticast mode [ 240.004421][ T5916] usb 6-1: Using ep0 maxpacket: 16 [ 240.065118][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 240.123314][ T7899] erspan0: left allmulticast mode [ 240.169443][ T5831] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 240.211524][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 240.263363][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 240.321527][ T5916] usb 6-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 240.364218][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.436944][ T5916] usb 6-1: Product: syz [ 240.461420][ T5916] usb 6-1: Manufacturer: syz [ 240.472993][ T5916] usb 6-1: SerialNumber: syz [ 240.512497][ T5916] usb 6-1: config 0 descriptor?? [ 240.520741][ T5916] keyspan 6-1:0.0: Keyspan 2 port adapter converter detected [ 240.528938][ T5916] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 87 [ 240.537703][ T5916] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 7 [ 240.545853][ T5831] usb 5-1: config 0 has no interfaces? [ 240.560755][ T5831] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 240.635115][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.709532][ T5916] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 81 [ 240.720155][ T5831] usb 5-1: Product: syz [ 240.726259][ T5916] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 1 [ 240.740572][ T5831] usb 5-1: Manufacturer: syz [ 240.749841][ T5831] usb 5-1: SerialNumber: syz [ 240.756491][ T5916] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 2 [ 240.765179][ T5916] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 85 [ 240.774044][ T5831] usb 5-1: config 0 descriptor?? [ 240.779362][ T5916] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 5 [ 240.806916][ T5916] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 240.825709][ T5916] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 83 [ 240.861692][ T5916] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 4 [ 240.880020][ T5916] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 86 [ 240.895096][ T5916] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 6 [ 240.938056][ T5916] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 241.362689][ T5916] usb 6-1: USB disconnect, device number 27 [ 241.383115][ T5916] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 241.426481][ T5916] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 241.451537][ T5916] keyspan 6-1:0.0: device disconnected [ 242.073752][ T29] audit: type=1326 audit(1740380970.882:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.5.608" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 242.173223][ T29] audit: type=1326 audit(1740380970.882:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.5.608" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 242.249584][ T5924] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 242.289328][ T29] audit: type=1326 audit(1740380970.882:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.5.608" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 242.322674][ T29] audit: type=1326 audit(1740380970.882:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.5.608" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 242.355822][ T29] audit: type=1326 audit(1740380970.882:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.5.608" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 242.409425][ T5924] usb 8-1: device descriptor read/64, error -71 [ 242.427739][ T29] audit: type=1326 audit(1740380970.882:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.5.608" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 242.464149][ T29] audit: type=1326 audit(1740380970.882:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.5.608" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 242.649571][ T5924] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 242.780927][ T5891] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 242.799519][ T5924] usb 8-1: device descriptor read/64, error -71 [ 242.849337][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 242.914363][ T5924] usb usb8-port1: attempt power cycle [ 242.914471][ T5916] usb 5-1: USB disconnect, device number 29 [ 243.036318][ T5891] usb 3-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 243.079302][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.112637][ T5891] usb 3-1: Product: syz [ 243.128429][ T5891] usb 3-1: Manufacturer: syz [ 243.141993][ T5891] usb 3-1: SerialNumber: syz [ 243.152006][ T7937] netlink: 16 bytes leftover after parsing attributes in process `syz.4.613'. [ 243.170301][ T5891] usb 3-1: config 0 descriptor?? [ 243.259353][ T5924] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 243.305475][ T5924] usb 8-1: device descriptor read/8, error -71 [ 243.445438][ T5891] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 243.458021][ T5891] asix 3-1:0.0: probe with driver asix failed with error -71 [ 243.483957][ T5891] usb 3-1: USB disconnect, device number 38 [ 243.569437][ T5924] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 243.599411][ T5916] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 243.640248][ T5924] usb 8-1: device descriptor read/8, error -71 [ 243.760525][ T5924] usb usb8-port1: unable to enumerate USB device [ 243.764096][ T5916] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 243.779009][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.804504][ T5916] usb 5-1: Product: syz [ 243.816689][ T5916] usb 5-1: Manufacturer: syz [ 243.830993][ T5916] usb 5-1: SerialNumber: syz [ 243.845486][ T5916] usb 5-1: config 0 descriptor?? [ 244.122940][ T7960] trusted_key: encrypted_key: insufficient parameters specified [ 244.511446][ T25] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 244.558377][ T7943] could not allocate digest TFM handle xcbc-aes-neon [ 244.604639][ T5916] usb 5-1: f81604_read: reg: 105 failed: -EPROTO [ 244.624425][ T5916] f81604 5-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 244.650876][ T5916] f81604 5-1:0.0: probe with driver f81604 failed with error -71 [ 244.689920][ T5916] usb 5-1: USB disconnect, device number 30 [ 244.712043][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.730583][ T7975] netlink: 32 bytes leftover after parsing attributes in process `syz.0.619'. [ 244.744500][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 244.773055][ T25] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 244.785227][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.794489][ T25] usb 3-1: Product: syz [ 244.804372][ T25] usb 3-1: Manufacturer: syz [ 244.811607][ T25] usb 3-1: SerialNumber: syz [ 244.930352][ T5831] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 245.121203][ T5831] usb 6-1: config 0 has an invalid interface number: 112 but max is 0 [ 245.146385][ T5831] usb 6-1: config 0 has no interface number 0 [ 245.185664][ T5831] usb 6-1: config 0 interface 112 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 245.233969][ T5831] usb 6-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 245.265157][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.310774][ T5831] usb 6-1: Product: syz [ 245.344533][ T5831] usb 6-1: Manufacturer: syz [ 245.370389][ T5831] usb 6-1: SerialNumber: syz [ 245.400317][ T5831] usb 6-1: config 0 descriptor?? [ 245.456388][ T5831] mvusb_mdio 6-1:0.112: probe with driver mvusb_mdio failed with error -5 [ 245.599903][ T5924] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 245.682559][ T7971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.713111][ T7971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.729361][ T8] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 245.746858][ T7971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.779329][ T5924] usb 8-1: Using ep0 maxpacket: 8 [ 245.791871][ T5924] usb 8-1: unable to get BOS descriptor or descriptor too short [ 245.800934][ T5924] usb 8-1: config 6 has an invalid interface number: 41 but max is 1 [ 245.802044][ T7971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.809048][ T5924] usb 8-1: config 6 has an invalid interface number: 6 but max is 1 [ 245.865493][ T5831] usb 6-1: USB disconnect, device number 28 [ 245.876780][ T5924] usb 8-1: config 6 has no interface number 0 [ 245.900014][ T5924] usb 8-1: config 6 has no interface number 1 [ 245.919298][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 245.926780][ T5924] usb 8-1: config 6 interface 41 has no altsetting 0 [ 245.941051][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.956948][ T5924] usb 8-1: config 6 interface 6 has no altsetting 0 [ 245.978343][ T8] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 245.997632][ T5924] usb 8-1: New USB device found, idVendor=19d2, idProduct=0078, bcdDevice=61.be [ 246.007516][ T5924] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.023364][ T8] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 246.038793][ T5924] usb 8-1: Product: syz [ 246.047830][ T5924] usb 8-1: Manufacturer: syz [ 246.059033][ T5924] usb 8-1: SerialNumber: syz [ 246.066661][ T8] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 246.077732][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.099754][ T8] usb 5-1: Product: syz [ 246.104025][ T8] usb 5-1: Manufacturer: syz [ 246.108770][ T8] usb 5-1: SerialNumber: syz [ 246.293160][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.7.621'. [ 246.311940][ T5924] smsusb:smsusb_probe: board id=15, interface number 41 [ 246.343478][ T5924] smsusb:smsusb_probe: board id=15, interface number 6 [ 246.375699][ T5924] smsusb:smsusb_probe: Device initialized with return code -19 [ 246.549755][ T5924] usb 8-1: USB disconnect, device number 7 [ 247.260554][ T25] usb 3-1: 0:2 : does not exist [ 247.292797][ T25] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 247.347476][ T5916] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 247.391988][ T25] usb 3-1: USB disconnect, device number 39 [ 247.445755][ T8] usb 5-1: USB disconnect, device number 31 [ 247.538282][ T5916] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 247.565982][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.605204][ T5916] usb 6-1: Product: syz [ 247.625341][ T5916] usb 6-1: Manufacturer: syz [ 247.646096][ T5916] usb 6-1: SerialNumber: syz [ 247.702447][ T5916] usb 6-1: config 0 descriptor?? [ 247.722605][ T5885] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 247.741515][ T5845] udevd[5845]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 247.869631][ T8] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 247.939339][ T5885] usb 8-1: Using ep0 maxpacket: 16 [ 247.987375][ T5885] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 248.015279][ T8019] batadv0: entered promiscuous mode [ 248.032947][ T8019] vxcan0: entered promiscuous mode [ 248.038240][ T5885] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 248.061767][ T8019] vxcan1: entered promiscuous mode [ 248.069991][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.082184][ T8019] veth0: entered promiscuous mode [ 248.109403][ T25] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 248.129647][ T5885] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 248.140024][ T8] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 248.150809][ T8019] veth1: entered promiscuous mode [ 248.156653][ T8019] wg0: entered promiscuous mode [ 248.162366][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.173804][ T5885] usb 8-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 248.192111][ T8] usb 5-1: config 0 descriptor?? [ 248.197865][ T5885] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.212787][ T8043] trusted_key: encrypted_key: insufficient parameters specified [ 248.224584][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 248.261302][ T5885] usb 8-1: Product: syz [ 248.281630][ T5885] usb 8-1: Manufacturer: syz [ 248.282876][ T8019] wg1: entered promiscuous mode [ 248.294331][ T5885] usb 8-1: SerialNumber: syz [ 248.347850][ T5885] usb 8-1: config 0 descriptor?? [ 248.359294][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 248.367378][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 248.378651][ T25] usb 3-1: config 6 has an invalid interface number: 41 but max is 1 [ 248.383529][ T5885] keyspan 8-1:0.0: Keyspan 2 port adapter converter detected [ 248.447028][ T25] usb 3-1: config 6 has an invalid interface number: 6 but max is 1 [ 248.458755][ T8019] wg2: entered promiscuous mode [ 248.479505][ T25] usb 3-1: config 6 has no interface number 0 [ 248.494691][ T25] usb 3-1: config 6 has no interface number 1 [ 248.503232][ T25] usb 3-1: config 6 interface 41 has no altsetting 0 [ 248.510121][ T25] usb 3-1: config 6 interface 6 has no altsetting 0 [ 248.519959][ T25] usb 3-1: New USB device found, idVendor=19d2, idProduct=0078, bcdDevice=61.be [ 248.544980][ T8019] veth0_to_bridge: entered promiscuous mode [ 248.572521][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.605706][ T5885] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 87 [ 248.616522][ T8019] veth1_to_bridge: entered promiscuous mode [ 248.629943][ T25] usb 3-1: Product: syz [ 248.644459][ T25] usb 3-1: Manufacturer: syz [ 248.654636][ T25] usb 3-1: SerialNumber: syz [ 248.690952][ T8019] veth0_to_bond: entered promiscuous mode [ 248.700522][ T5885] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 7 [ 248.743370][ T8019] veth1_to_bond: entered promiscuous mode [ 248.751044][ T8019] veth0_to_team: entered promiscuous mode [ 248.763366][ T8019] veth1_to_team: entered promiscuous mode [ 248.770617][ T5885] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 81 [ 248.780965][ T5885] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 1 [ 248.788677][ T5885] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 2 [ 248.797935][ T5885] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 85 [ 248.805815][ T5885] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 5 [ 248.826214][ T5885] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 248.851885][ T5885] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 83 [ 248.854808][ T8019] veth0_to_batadv: entered promiscuous mode [ 248.884957][ T8019] batadv_slave_0: entered promiscuous mode [ 248.896588][ T8] pwc: recv_control_msg error -32 req 02 val 2b00 [ 248.898202][ T8019] veth1_to_batadv: entered promiscuous mode [ 249.013495][ T8019] batadv_slave_1: entered promiscuous mode [ 249.045607][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.634'. [ 249.064982][ T5885] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 4 [ 249.081007][ T8] pwc: recv_control_msg error -32 req 02 val 2700 [ 249.091781][ T8019] xfrm0: entered promiscuous mode [ 249.110191][ T8019] veth0_to_hsr: entered promiscuous mode [ 249.127261][ T8] pwc: recv_control_msg error -32 req 02 val 2c00 [ 249.143886][ T5885] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 86 [ 249.180114][ T8019] veth1_to_hsr: entered promiscuous mode [ 249.193242][ T8] pwc: recv_control_msg error -32 req 04 val 1000 [ 249.210441][ T8019] hsr0: entered promiscuous mode [ 249.219582][ T8019] veth1_virt_wifi: entered promiscuous mode [ 249.226800][ T8019] veth0_virt_wifi: entered promiscuous mode [ 249.232821][ T5885] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 6 [ 249.245112][ T8019] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 249.257960][ T8019] vlan0: entered promiscuous mode [ 249.266780][ T8019] vlan1: entered promiscuous mode [ 249.304573][ T8019] macvlan0: entered promiscuous mode [ 249.323841][ T5885] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 249.356647][ T8] pwc: recv_control_msg error -32 req 04 val 1300 [ 249.362259][ T8019] macvlan1: entered promiscuous mode [ 249.385080][ T8] pwc: recv_control_msg error -32 req 04 val 1400 [ 249.408611][ T5885] usb 8-1: USB disconnect, device number 8 [ 249.410934][ T8019] ipvlan0: entered promiscuous mode [ 249.467554][ T5885] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 249.520332][ T5885] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 249.531706][ T8044] could not allocate digest TFM handle xcbc-aes-neon [ 249.534462][ T5885] keyspan 8-1:0.0: device disconnected [ 249.540142][ T8019] ipvlan1: entered promiscuous mode [ 249.657043][ T8019] macvtap0: entered promiscuous mode [ 249.668675][ T8019] macsec0: entered promiscuous mode [ 249.677998][ T8019] geneve0: entered promiscuous mode [ 249.710604][ T8019] geneve1: entered promiscuous mode [ 249.717093][ T8019] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 249.737039][ T8019] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 249.829482][ T5916] usb 6-1: f81604_read: reg: 105 failed: -ETIMEDOUT [ 249.845613][ T8019] netdevsim netdevsim5 netdevsim2: entered promiscuous mode [ 249.851333][ T5916] f81604 6-1:0.0: Setting termination of CH#0 failed: -ETIMEDOUT [ 249.883938][ T8019] netdevsim netdevsim5 netdevsim3: entered promiscuous mode [ 249.892833][ T5916] f81604 6-1:0.0: probe with driver f81604 failed with error -110 [ 249.937719][ T8019] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 249.975789][ T8019] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 249.984948][ T8019] syztnl2: entered promiscuous mode [ 249.995669][ T8019] macvlan2: entered promiscuous mode [ 250.013264][ T8019] macvtap1: left allmulticast mode [ 250.019100][ T8019] erspan0: left allmulticast mode [ 250.028958][ T8019] bridge0: port 3(batadv1) entered blocking state [ 250.035602][ T8019] bridge0: port 3(batadv1) entered forwarding state [ 250.045423][ T8019] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 250.066167][ T8] pwc: recv_control_msg error -71 req 02 val 2100 [ 250.090447][ T8] pwc: recv_control_msg error -71 req 04 val 1500 [ 250.092017][ T25] smsusb:smsusb_probe: board id=15, interface number 41 [ 250.106855][ T8] pwc: recv_control_msg error -71 req 02 val 2500 [ 250.117823][ T25] smsusb:smsusb_probe: board id=15, interface number 6 [ 250.136413][ T25] smsusb:smsusb_probe: Device initialized with return code -19 [ 250.156663][ T8] pwc: recv_control_msg error -71 req 02 val 2400 [ 250.169462][ T5916] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 250.229469][ T8] pwc: recv_control_msg error -71 req 02 val 2600 [ 250.259423][ T8] pwc: recv_control_msg error -71 req 02 val 2900 [ 250.260314][ T25] usb 3-1: USB disconnect, device number 40 [ 250.314319][ T8] pwc: recv_control_msg error -71 req 02 val 2800 [ 250.334736][ T8] pwc: recv_control_msg error -71 req 04 val 1100 [ 250.342567][ T8] pwc: recv_control_msg error -71 req 04 val 1200 [ 250.355937][ T8] pwc: Registered as video103. [ 250.363136][ T5916] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 250.366272][ T8] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input22 [ 250.391126][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 250.392328][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.419730][ T8] usb 5-1: USB disconnect, device number 32 [ 250.429886][ T5916] usb 1-1: Product: syz [ 250.434351][ T5916] usb 1-1: Manufacturer: syz [ 250.439143][ T5916] usb 1-1: SerialNumber: syz [ 250.446235][ T5889] usb 6-1: USB disconnect, device number 29 [ 250.448037][ T5916] usb 1-1: config 0 descriptor?? [ 250.537909][ T8066] netlink: 4 bytes leftover after parsing attributes in process `syz.7.636'. [ 250.598418][ T8066] team_slave_0: entered promiscuous mode [ 250.604671][ T8066] team_slave_1: entered promiscuous mode [ 250.651202][ T8066] macvtap1: entered promiscuous mode [ 250.657442][ T8066] team0: entered promiscuous mode [ 250.663424][ T8066] macvtap1: entered allmulticast mode [ 250.679569][ T8066] team0: entered allmulticast mode [ 250.769588][ T8066] team_slave_0: entered allmulticast mode [ 250.775426][ T8066] team_slave_1: entered allmulticast mode [ 250.813837][ T8059] trusted_key: encrypted_key: insufficient parameters specified [ 250.850651][ T8066] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 251.222892][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.638'. [ 251.323780][ T8059] could not allocate digest TFM handle xcbc-aes-neon [ 251.337664][ T5916] usb 1-1: f81604_read: reg: 105 failed: -EPROTO [ 251.362314][ T5916] f81604 1-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 251.395351][ T5916] f81604 1-1:0.0: probe with driver f81604 failed with error -71 [ 251.434664][ T5916] usb 1-1: USB disconnect, device number 27 [ 251.532173][ T5889] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 251.631552][ T8097] netlink: 'syz.4.642': attribute type 21 has an invalid length. [ 251.649448][ T8097] netlink: 132 bytes leftover after parsing attributes in process `syz.4.642'. [ 251.709306][ T5889] usb 8-1: Using ep0 maxpacket: 8 [ 251.731043][ T5889] usb 8-1: unable to get BOS descriptor or descriptor too short [ 251.760777][ T5889] usb 8-1: config 6 has an invalid interface number: 41 but max is 1 [ 251.793473][ T5889] usb 8-1: config 6 has an invalid interface number: 6 but max is 1 [ 251.827447][ T5889] usb 8-1: config 6 has no interface number 0 [ 251.849871][ T5889] usb 8-1: config 6 has no interface number 1 [ 251.869338][ T5889] usb 8-1: config 6 interface 41 has no altsetting 0 [ 251.876109][ T5889] usb 8-1: config 6 interface 6 has no altsetting 0 [ 251.914093][ T5889] usb 8-1: New USB device found, idVendor=19d2, idProduct=0078, bcdDevice=61.be [ 251.933702][ T5889] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.962874][ T5889] usb 8-1: Product: syz [ 251.963168][ T8105] netlink: 'syz.2.644': attribute type 21 has an invalid length. [ 251.967078][ T5889] usb 8-1: Manufacturer: syz [ 251.967100][ T5889] usb 8-1: SerialNumber: syz [ 252.024110][ T8105] netlink: 132 bytes leftover after parsing attributes in process `syz.2.644'. [ 252.256396][ T8087] netlink: 8 bytes leftover after parsing attributes in process `syz.7.639'. [ 252.296606][ T5889] smsusb:smsusb_probe: board id=15, interface number 41 [ 252.325361][ T5889] smsusb:smsusb_probe: board id=15, interface number 6 [ 252.345064][ T5889] smsusb:smsusb_probe: Device initialized with return code -19 [ 252.439701][ T5889] usb 8-1: USB disconnect, device number 9 [ 252.599611][ T25] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 252.769362][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 252.800695][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.844508][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.869319][ T25] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 252.878437][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.911291][ T25] usb 6-1: config 0 descriptor?? [ 253.010756][ T8145] FAULT_INJECTION: forcing a failure. [ 253.010756][ T8145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.038777][ T8145] CPU: 0 UID: 0 PID: 8145 Comm: syz.2.653 Not tainted 6.14.0-rc4-syzkaller #0 [ 253.038810][ T8145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 253.038824][ T8145] Call Trace: [ 253.038831][ T8145] [ 253.038840][ T8145] dump_stack_lvl+0x241/0x360 [ 253.038872][ T8145] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.038896][ T8145] ? __pfx__printk+0x10/0x10 [ 253.038927][ T8145] should_fail_ex+0x40a/0x550 [ 253.038961][ T8145] _copy_from_user+0x2d/0xb0 [ 253.038988][ T8145] copy_from_buffer+0x6e/0xb0 [ 253.039018][ T8145] copy_uabi_to_xstate+0x326/0xa00 [ 253.039053][ T8145] ? __pfx_copy_uabi_to_xstate+0x10/0x10 [ 253.039087][ T8145] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 253.039110][ T8145] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 253.039142][ T8145] ? __might_fault+0xaa/0x120 [ 253.039161][ T8145] ? __might_fault+0xc6/0x120 [ 253.039185][ T8145] fpu__restore_sig+0xe80/0x1270 [ 253.039211][ T8145] ? fpu__restore_sig+0xca5/0x1270 [ 253.039242][ T8145] ? __pfx_fpu__restore_sig+0x10/0x10 [ 253.039293][ T8145] ia32_restore_sigcontext+0x583/0x910 [ 253.039328][ T8145] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 253.039359][ T8145] ? lockdep_hardirqs_on+0x99/0x150 [ 253.039387][ T8145] ? _raw_spin_unlock_irq+0x2e/0x50 [ 253.039408][ T8145] ? __set_current_blocked+0x310/0x380 [ 253.039444][ T8145] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 253.039481][ T8145] __do_compat_sys_rt_sigreturn+0x17a/0x240 [ 253.039517][ T8145] ? __pfx___do_compat_sys_rt_sigreturn+0x10/0x10 [ 253.039548][ T8145] ? lockdep_hardirqs_on+0x99/0x150 [ 253.039579][ T8145] ? do_int80_emulation+0xe8/0x200 [ 253.039612][ T8145] do_int80_emulation+0x11f/0x200 [ 253.039638][ T8145] ? clear_bhb_loop+0x35/0x90 [ 253.039668][ T8145] ? clear_bhb_loop+0x35/0x90 [ 253.039699][ T8145] asm_int80_emulation+0x1a/0x20 [ 253.039725][ T8145] RIP: 0023:0xf7fd1579 [ 253.039742][ T8145] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 253.039759][ T8145] RSP: 002b:00000000f50f655c EFLAGS: 00000206 [ 253.039786][ T8145] RAX: 0000000000001e76 RBX: 0000000000000003 RCX: 0000000000001e76 [ 253.039798][ T8145] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000000 [ 253.039811][ T8145] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 253.039822][ T8145] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 253.039834][ T8145] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 253.039862][ T8145] [ 253.290720][ T8152] netlink: 'syz.7.654': attribute type 21 has an invalid length. [ 253.298593][ T8152] netlink: 132 bytes leftover after parsing attributes in process `syz.7.654'. [ 253.596456][ T25] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 253.841686][ T25] ft260 0003:0403:6030.0008: chip code: 0000 0000 [ 253.874876][ T8164] netlink: 4 bytes leftover after parsing attributes in process `syz.7.655'. [ 253.926768][ T8164] veth0_virt_wifi: entered promiscuous mode [ 253.954620][ T8164] veth0_virt_wifi: entered allmulticast mode [ 253.987380][ T25] ft260 0003:0403:6030.0008: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 254.188731][ T25] ft260 0003:0403:6030.0008: failed to retrieve status: -32, no wakeup [ 254.260432][ T25] ft260 0003:0403:6030.0008: failed to retrieve status: -32 [ 254.565718][ T8] usb 6-1: USB disconnect, device number 30 [ 255.259314][ T25] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 255.442272][ T25] usb 8-1: Using ep0 maxpacket: 16 [ 255.446942][ T8195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.662'. [ 255.477231][ T25] usb 8-1: config 8 has an invalid interface number: 39 but max is 0 [ 255.494123][ T25] usb 8-1: config 8 has no interface number 0 [ 255.522663][ T25] usb 8-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 255.555653][ T25] usb 8-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 255.611386][ T25] usb 8-1: config 8 interface 39 has no altsetting 0 [ 255.670440][ T25] usb 8-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 255.697487][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.740976][ T25] usb 8-1: Product: syz [ 255.752520][ T25] usb 8-1: Manufacturer: syz [ 255.769165][ T25] usb 8-1: SerialNumber: syz [ 256.109554][ T5916] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 256.118983][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.125355][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.134349][ T8208] program syz.2.665 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 256.202450][ T8184] netlink: 8 bytes leftover after parsing attributes in process `syz.7.659'. [ 256.339569][ T5916] usb 6-1: Using ep0 maxpacket: 8 [ 256.348549][ T5916] usb 6-1: unable to get BOS descriptor or descriptor too short [ 256.358217][ T5916] usb 6-1: config 6 has an invalid interface number: 41 but max is 1 [ 256.369091][ T5916] usb 6-1: config 6 has an invalid interface number: 6 but max is 1 [ 256.386608][ T5916] usb 6-1: config 6 has no interface number 0 [ 256.403243][ T5916] usb 6-1: config 6 has no interface number 1 [ 256.417015][ T5916] usb 6-1: config 6 interface 41 has no altsetting 0 [ 256.435436][ T5916] usb 6-1: config 6 interface 6 has no altsetting 0 [ 256.453794][ T5916] usb 6-1: New USB device found, idVendor=19d2, idProduct=0078, bcdDevice=61.be [ 256.463535][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.483496][ T5916] usb 6-1: Product: syz [ 256.489034][ T5916] usb 6-1: Manufacturer: syz [ 256.500673][ T5916] usb 6-1: SerialNumber: syz [ 256.888472][ T8203] netlink: 8 bytes leftover after parsing attributes in process `syz.5.664'. [ 256.956887][ T5916] smsusb:smsusb_probe: board id=15, interface number 41 [ 257.020100][ T25] ipheth 8-1:8.39: Unable to find endpoints [ 257.069151][ T5916] smsusb:smsusb_probe: board id=15, interface number 6 [ 257.078767][ T25] usb 8-1: USB disconnect, device number 10 [ 257.099294][ T5916] smsusb:smsusb_probe: Device initialized with return code -19 [ 257.322150][ T5916] usb 6-1: USB disconnect, device number 31 [ 258.159135][ T8] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 258.255328][ T29] audit: type=1326 audit(1740380987.062:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8246 comm="syz.2.674" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd1579 code=0x0 [ 258.353898][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.369552][ T8] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 258.378680][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.401493][ T8] usb 5-1: config 0 descriptor?? [ 258.409353][ T5924] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 258.431689][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 258.819481][ T5916] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 258.859353][ T5924] usb 6-1: Using ep0 maxpacket: 16 [ 258.870507][ T5924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 258.919153][ T5924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 258.930979][ T5924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 258.965465][ T5924] usb 6-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 258.983450][ T8] pwc: recv_control_msg error -32 req 02 val 2b00 [ 258.990032][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.999013][ T8] pwc: recv_control_msg error -32 req 02 val 2700 [ 259.006640][ T8] pwc: recv_control_msg error -32 req 02 val 2c00 [ 259.014865][ T5924] usb 6-1: Product: syz [ 259.019899][ T8] pwc: recv_control_msg error -32 req 04 val 1000 [ 259.039405][ T5924] usb 6-1: Manufacturer: syz [ 259.046631][ T5924] usb 6-1: SerialNumber: syz [ 259.056308][ T5916] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.085089][ T5924] usb 6-1: config 0 descriptor?? [ 259.104372][ T5916] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 259.123460][ T5916] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 259.146079][ T5916] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 259.159387][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.167685][ T5916] usb 3-1: Product: syz [ 259.172640][ T5916] usb 3-1: Manufacturer: syz [ 259.177287][ T5916] usb 3-1: SerialNumber: syz [ 259.228875][ T8] pwc: recv_control_msg error -71 req 04 val 1400 [ 259.266483][ T5924] keyspan 6-1:0.0: Keyspan 2 port adapter converter detected [ 259.307734][ T8] pwc: recv_control_msg error -71 req 02 val 2000 [ 259.440741][ T5924] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 87 [ 259.440812][ T5924] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 7 [ 259.467216][ T5924] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 81 [ 259.467279][ T5924] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 1 [ 259.467342][ T5924] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 2 [ 259.467389][ T5924] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 85 [ 259.467444][ T5924] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 5 [ 259.468104][ T8] pwc: recv_control_msg error -71 req 02 val 2100 [ 259.476842][ T8] pwc: recv_control_msg error -71 req 04 val 1500 [ 259.477983][ T8] pwc: recv_control_msg error -71 req 02 val 2500 [ 259.555741][ T5924] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 259.570219][ T5924] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 83 [ 259.578661][ T5924] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 4 [ 259.589739][ T5924] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 86 [ 259.598400][ T5924] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 6 [ 259.619579][ T5924] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 259.642771][ T8] pwc: recv_control_msg error -71 req 02 val 2400 [ 259.659795][ T8] pwc: recv_control_msg error -71 req 02 val 2600 [ 259.666706][ T8] pwc: recv_control_msg error -71 req 02 val 2900 [ 259.821762][ T8] pwc: recv_control_msg error -71 req 02 val 2800 [ 259.829928][ T8] pwc: recv_control_msg error -71 req 04 val 1100 [ 259.869889][ T8] pwc: recv_control_msg error -71 req 04 val 1200 [ 259.877116][ T8] pwc: Registered as video103. [ 259.897848][ T8] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input23 [ 259.989029][ T8] usb 5-1: USB disconnect, device number 33 [ 260.457928][ T5891] usb 6-1: USB disconnect, device number 32 [ 260.476602][ T5891] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 260.494694][ T5891] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 260.539754][ T5891] keyspan 6-1:0.0: device disconnected [ 260.940165][ T8265] netlink: 'syz.7.678': attribute type 21 has an invalid length. [ 260.948267][ T8265] netlink: 132 bytes leftover after parsing attributes in process `syz.7.678'. [ 261.429357][ T5885] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 261.593972][ T5916] usb 3-1: cannot find UAC_HEADER [ 261.599431][ T5885] usb 8-1: Using ep0 maxpacket: 16 [ 261.605567][ T5916] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 261.635959][ T5885] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 261.651432][ T5916] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 261.668359][ T5885] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 261.710342][ T5916] usb 3-1: MIDIStreaming interface descriptor not found [ 261.769385][ T5885] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 261.810690][ T5924] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 261.826333][ T5916] usb 3-1: USB disconnect, device number 41 [ 261.852191][ T5885] usb 8-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 261.867313][ T5885] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.877037][ T5885] usb 8-1: Product: syz [ 261.881962][ T5885] usb 8-1: Manufacturer: syz [ 261.886618][ T5885] usb 8-1: SerialNumber: syz [ 261.974781][ T5885] usb 8-1: config 0 descriptor?? [ 262.024640][ T5924] usb 6-1: Using ep0 maxpacket: 16 [ 262.086217][ T5885] keyspan 8-1:0.0: Keyspan 2 port adapter converter detected [ 262.103869][ T5924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 262.114244][ T5891] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 262.145173][ T5885] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 87 [ 262.154172][ T5924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 262.181280][ T5885] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 7 [ 262.197231][ T5924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 262.218084][ T5885] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 81 [ 262.228497][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 262.244512][ T5885] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 1 [ 262.256746][ T5924] usb 6-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 262.319164][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.332054][ T5885] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 2 [ 262.381448][ T5885] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 85 [ 262.389762][ T5924] usb 6-1: Product: syz [ 262.394490][ T5924] usb 6-1: Manufacturer: syz [ 262.399124][ T5924] usb 6-1: SerialNumber: syz [ 262.411110][ T5885] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 5 [ 262.422649][ T5891] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 262.441830][ T5924] usb 6-1: config 0 descriptor?? [ 262.454114][ T5885] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 262.462744][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.474289][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.484516][ T5891] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 262.538937][ T5891] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 262.566397][ T5924] keyspan 6-1:0.0: Keyspan 2 port adapter converter detected [ 262.578821][ T5885] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 83 [ 262.593269][ T5924] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 87 [ 262.629347][ T5885] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 4 [ 262.641310][ T5924] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 7 [ 262.649404][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.681133][ T5885] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 86 [ 262.699934][ T5924] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 81 [ 262.721969][ T5885] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 6 [ 262.751397][ T5924] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 1 [ 262.770421][ T5885] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 262.789070][ T5924] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 2 [ 262.852672][ T5891] usb 5-1: config 0 descriptor?? [ 262.862629][ T5924] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 85 [ 262.965039][ T5924] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 5 [ 263.044673][ T5924] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 263.183078][ T5924] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 83 [ 263.227221][ T5924] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 4 [ 263.255508][ T5924] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 86 [ 263.277130][ T5924] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 6 [ 263.296398][ T5891] usbhid 5-1:0.0: can't add hid device: -71 [ 263.368043][ T5924] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 263.394704][ T5891] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 263.568432][ T5891] usb 5-1: USB disconnect, device number 34 [ 263.944230][ T5891] usb 8-1: USB disconnect, device number 11 [ 263.996306][ T5891] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 264.011589][ T5916] usb 6-1: USB disconnect, device number 33 [ 264.033287][ T5916] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 264.060497][ T5891] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 264.086056][ T5916] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 264.109759][ T5891] keyspan 8-1:0.0: device disconnected [ 264.135535][ T5916] keyspan 6-1:0.0: device disconnected [ 264.361486][ T8301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.691'. [ 265.301009][ T8326] program syz.2.696 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 265.460193][ T5885] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 265.681171][ T5885] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 265.718543][ T5885] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 265.740857][ T5885] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 265.762510][ T5885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.787583][ T8322] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 265.832770][ T5885] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 266.173412][ T5832] Bluetooth: unknown link type 128 [ 266.282486][ T5885] usb 6-1: USB disconnect, device number 34 [ 267.257437][ T8346] netlink: 4 bytes leftover after parsing attributes in process `syz.5.704'. [ 267.739337][ T5885] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 267.909425][ T5885] usb 8-1: Using ep0 maxpacket: 16 [ 267.965666][ T5885] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 268.028539][ T5885] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 268.139309][ T5916] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 268.185215][ T5924] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 268.249627][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 268.307449][ T5885] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 268.330885][ T5916] usb 5-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 268.340377][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.348387][ T5916] usb 5-1: Product: syz [ 268.358450][ T5916] usb 5-1: Manufacturer: syz [ 268.363427][ T5916] usb 5-1: SerialNumber: syz [ 268.378492][ T5916] usb 5-1: config 0 descriptor?? [ 268.415483][ T5885] usb 8-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 268.452368][ T5885] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.472692][ T5885] usb 8-1: Product: syz [ 268.512013][ T5885] usb 8-1: Manufacturer: syz [ 268.528443][ T5924] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.543202][ T5885] usb 8-1: SerialNumber: syz [ 268.560292][ T5924] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 268.580384][ T5885] usb 8-1: config 0 descriptor?? [ 268.588158][ T5885] keyspan 8-1:0.0: Keyspan 2 port adapter converter detected [ 268.605364][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.629496][ T5885] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 87 [ 268.658653][ T5924] usb 1-1: config 0 descriptor?? [ 268.664708][ T5885] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 7 [ 268.676137][ T5924] pwc: Askey VC010 type 2 USB webcam detected. [ 268.693416][ T5885] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 81 [ 268.702091][ T5885] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 1 [ 268.712006][ T5885] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 2 [ 268.720299][ T5885] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 85 [ 268.728285][ T5885] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 5 [ 268.736273][ T8] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 268.751004][ T5885] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 268.769882][ T5885] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 83 [ 268.777678][ T5885] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 4 [ 268.814143][ T5885] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 86 [ 268.829404][ T5885] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 6 [ 268.849061][ T5885] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 268.894687][ T5885] usb 8-1: USB disconnect, device number 12 [ 268.909364][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 268.928257][ T8] usb 6-1: config 0 has an invalid interface number: 130 but max is 0 [ 268.937442][ T5885] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 268.947488][ T8] usb 6-1: config 0 has no interface number 0 [ 268.962055][ T8] usb 6-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 268.975448][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.984576][ T5885] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 269.010902][ T5885] keyspan 8-1:0.0: device disconnected [ 269.017397][ T8] usb 6-1: Product: syz [ 269.038630][ T8] usb 6-1: Manufacturer: syz [ 269.053811][ T8] usb 6-1: SerialNumber: syz [ 269.053895][ T5916] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 269.071231][ T8] usb 6-1: config 0 descriptor?? [ 269.087033][ T8] as10x_usb: device has been detected [ 269.089155][ T5916] asix 5-1:0.0: probe with driver asix failed with error -71 [ 269.095971][ T8] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 269.108580][ T5924] pwc: recv_control_msg error -32 req 02 val 2b00 [ 269.114937][ T5916] usb 5-1: USB disconnect, device number 35 [ 269.128889][ T5924] pwc: recv_control_msg error -32 req 02 val 2700 [ 269.157798][ T5924] pwc: recv_control_msg error -32 req 02 val 2c00 [ 269.172442][ T8] usb 6-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 269.190932][ T5924] pwc: recv_control_msg error -32 req 04 val 1000 [ 269.198475][ T5924] pwc: recv_control_msg error -32 req 04 val 1300 [ 269.211894][ T8] as10x_usb: error during firmware upload part1 [ 269.214360][ T5891] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 269.218634][ T8] Registered device PCTV Systems picoStick (74e) [ 269.296612][ T8] usb 6-1: USB disconnect, device number 35 [ 269.367084][ T8] Unregistered device PCTV Systems picoStick (74e) [ 269.368132][ T8] as10x_usb: device has been disconnected [ 269.391546][ T5891] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 269.407441][ T5891] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 269.417903][ T5891] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 269.435570][ T5924] pwc: recv_control_msg error -71 req 02 val 2000 [ 269.436168][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.477224][ T5924] pwc: recv_control_msg error -71 req 02 val 2100 [ 269.487253][ T8361] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 269.504914][ T5891] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 269.506509][ T5924] pwc: recv_control_msg error -71 req 04 val 1500 [ 269.520250][ T5924] pwc: recv_control_msg error -71 req 02 val 2500 [ 269.529577][ T5924] pwc: recv_control_msg error -71 req 02 val 2400 [ 269.545551][ T5924] pwc: recv_control_msg error -71 req 02 val 2600 [ 269.556497][ T5924] pwc: recv_control_msg error -71 req 02 val 2900 [ 269.575708][ T5924] pwc: recv_control_msg error -71 req 02 val 2800 [ 269.589080][ T5924] pwc: recv_control_msg error -71 req 04 val 1100 [ 269.629151][ T5924] pwc: recv_control_msg error -71 req 04 val 1200 [ 269.655320][ T5924] pwc: Registered as video103. [ 269.672965][ T5924] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input24 [ 269.719414][ T5924] usb 1-1: USB disconnect, device number 28 [ 269.902280][ T5832] Bluetooth: unknown link type 128 [ 270.122029][ T5916] usb 3-1: USB disconnect, device number 42 [ 270.637839][ T8382] netlink: 12 bytes leftover after parsing attributes in process `syz.7.716'. [ 270.853275][ T8386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.718'. [ 271.067280][ T8388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.719'. [ 271.108984][ T8388] macvtap3: entered promiscuous mode [ 271.120398][ T8388] macvtap3: entered allmulticast mode [ 271.143976][ T8388] team0: entered allmulticast mode [ 271.167114][ T8388] team_slave_0: entered allmulticast mode [ 271.176139][ T8388] team_slave_1: entered allmulticast mode [ 271.186654][ T8388] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 271.871805][ T8401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.721'. [ 271.944023][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 272.039591][ T8407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.721'. [ 272.219272][ T25] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 272.549386][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 272.556294][ T25] usb 1-1: config 0 has an invalid interface number: 130 but max is 0 [ 272.569357][ T25] usb 1-1: config 0 has no interface number 0 [ 272.593724][ T25] usb 1-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 272.639257][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.675296][ T25] usb 1-1: Product: syz [ 272.684681][ T25] usb 1-1: Manufacturer: syz [ 272.694803][ T25] usb 1-1: SerialNumber: syz [ 272.717340][ T25] usb 1-1: config 0 descriptor?? [ 272.763354][ T25] as10x_usb: device has been detected [ 272.783635][ T25] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 272.869153][ T25] usb 1-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 272.921666][ T25] as10x_usb: error during firmware upload part1 [ 272.928395][ T25] Registered device PCTV Systems picoStick (74e) [ 273.004886][ T25] usb 1-1: USB disconnect, device number 29 [ 273.048686][ T25] Unregistered device PCTV Systems picoStick (74e) [ 273.084813][ T25] as10x_usb: device has been disconnected [ 273.142451][ T8416] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 273.382615][ T8420] netlink: 4 bytes leftover after parsing attributes in process `syz.7.730'. [ 273.399714][ T5885] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 273.479303][ T5891] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 273.509385][ T5916] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 273.581222][ T5885] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.591534][ T5885] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 273.603502][ T5885] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 273.613102][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.621292][ T5885] usb 3-1: Product: syz [ 273.627236][ T5885] usb 3-1: Manufacturer: syz [ 273.632103][ T5885] usb 3-1: SerialNumber: syz [ 273.643012][ T5891] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.653714][ T5891] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 273.664658][ T5891] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 273.674876][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 273.683248][ T5891] usb 5-1: SerialNumber: syz [ 273.689355][ T5916] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.709563][ T5916] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 273.729506][ T25] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 273.739595][ T5916] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 273.750215][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.758285][ T5916] usb 6-1: Product: syz [ 273.762908][ T5916] usb 6-1: Manufacturer: syz [ 273.767608][ T5916] usb 6-1: SerialNumber: syz [ 273.908478][ T5885] usb 3-1: 0:2 : does not exist [ 273.926996][ T5885] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 273.928484][ T25] usb 8-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 273.969576][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.998900][ T5885] usb 3-1: USB disconnect, device number 43 [ 274.057736][ T5916] usb 6-1: 0:2 : does not exist [ 274.089308][ T25] usb 8-1: Product: syz [ 274.093552][ T25] usb 8-1: Manufacturer: syz [ 274.098191][ T25] usb 8-1: SerialNumber: syz [ 274.117663][ T5916] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 274.130427][ T25] usb 8-1: config 0 descriptor?? [ 274.148474][ T5891] usb 5-1: 0:2 : does not exist [ 274.157594][ T5916] usb 6-1: USB disconnect, device number 36 [ 274.196587][ T5891] usb 5-1: USB disconnect, device number 36 [ 274.373746][ T8422] lo: entered promiscuous mode [ 274.379112][ T8422] tunl0: entered promiscuous mode [ 274.396990][ T8422] gre0: entered promiscuous mode [ 274.407310][ T8422] gretap0: entered promiscuous mode [ 274.448703][ T8422] erspan0: entered promiscuous mode [ 274.455469][ T8422] ip_vti0: entered promiscuous mode [ 274.461929][ T8422] ip6_vti0: entered promiscuous mode [ 274.468345][ T8422] sit0: entered promiscuous mode [ 274.477715][ T8422] ip6tnl0: entered promiscuous mode [ 274.598758][ T5845] udevd[5845]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 274.666774][ T8422] ip6gre0: entered promiscuous mode [ 274.667172][ T8430] trusted_key: encrypted_key: insufficient parameters specified [ 274.682158][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 274.690677][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 274.800877][ T8422] syz_tun: entered promiscuous mode [ 274.900129][ T8422] ip6gretap0: entered promiscuous mode [ 274.926172][ T8422] bridge0: entered promiscuous mode [ 274.940926][ T8422] vcan0: entered promiscuous mode [ 274.946412][ T8422] bond0: entered promiscuous mode [ 274.972765][ T8422] bond_slave_0: entered promiscuous mode [ 274.978949][ T8422] bond_slave_1: entered promiscuous mode [ 275.085041][ T8422] dummy0: entered promiscuous mode [ 275.140311][ T8422] nlmon0: entered promiscuous mode [ 275.169741][ T8422] caif0: entered promiscuous mode [ 275.176809][ T8422] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 275.235526][ T8429] could not allocate digest TFM handle xcbc-aes-neon [ 275.290371][ T975] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 275.485958][ T25] usb 8-1: f81604_read: reg: 105 failed: -EPROTO [ 275.506870][ T25] f81604 8-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 275.537295][ T25] f81604 8-1:0.0: probe with driver f81604 failed with error -71 [ 275.548420][ T975] usb 5-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 275.565412][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.587772][ T25] usb 8-1: USB disconnect, device number 13 [ 275.608581][ T975] usb 5-1: Product: syz [ 275.629436][ T975] usb 5-1: Manufacturer: syz [ 275.651001][ T975] usb 5-1: SerialNumber: syz [ 275.717700][ T975] usb 5-1: config 0 descriptor?? [ 275.965311][ T975] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 276.026754][ T975] asix 5-1:0.0: probe with driver asix failed with error -71 [ 276.080233][ T975] usb 5-1: USB disconnect, device number 37 [ 276.564618][ T5916] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 276.873231][ T5916] usb 1-1: Using ep0 maxpacket: 32 [ 276.946854][ T5916] usb 1-1: config 0 interface 0 has no altsetting 0 [ 276.953759][ T5916] usb 1-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 277.003225][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.040958][ T5916] usb 1-1: config 0 descriptor?? [ 277.086671][ T5916] usb 1-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 277.102044][ T5916] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 277.280435][ T5916] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 277.287684][ T5916] usb 1-1: media controller created [ 277.304873][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 277.345710][ T5916] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 277.359798][ T5916] error writing reg: 0xff, val: 0x00 [ 277.607694][ T8463] netlink: 'syz.4.742': attribute type 21 has an invalid length. [ 277.622694][ T5916] dvb_usb_mxl111sf 1-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 277.637728][ T5916] usb 1-1: USB disconnect, device number 30 [ 277.672967][ T8463] netlink: 132 bytes leftover after parsing attributes in process `syz.4.742'. [ 277.839985][ T25] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 278.000638][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 278.011895][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 278.022537][ T25] usb 3-1: config 6 has an invalid interface number: 41 but max is 1 [ 278.053144][ T25] usb 3-1: config 6 has an invalid interface number: 6 but max is 1 [ 278.069854][ T25] usb 3-1: config 6 has no interface number 0 [ 278.077809][ T25] usb 3-1: config 6 has no interface number 1 [ 278.088809][ T25] usb 3-1: config 6 interface 41 has no altsetting 0 [ 278.096252][ T25] usb 3-1: config 6 interface 6 has no altsetting 0 [ 278.111401][ T25] usb 3-1: New USB device found, idVendor=19d2, idProduct=0078, bcdDevice=61.be [ 278.124557][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.134659][ T5916] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 278.142590][ T25] usb 3-1: Product: syz [ 278.147794][ T25] usb 3-1: Manufacturer: syz [ 278.153940][ T25] usb 3-1: SerialNumber: syz [ 278.309517][ T975] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 278.311835][ T5916] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.324767][ T8476] FAULT_INJECTION: forcing a failure. [ 278.324767][ T8476] name failslab, interval 1, probability 0, space 0, times 0 [ 278.343510][ T5916] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 278.360873][ T8476] CPU: 0 UID: 0 PID: 8476 Comm: syz.0.747 Not tainted 6.14.0-rc4-syzkaller #0 [ 278.360903][ T8476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 278.360915][ T8476] Call Trace: [ 278.360923][ T8476] [ 278.360931][ T8476] dump_stack_lvl+0x241/0x360 [ 278.360963][ T8476] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.360986][ T8476] ? __pfx__printk+0x10/0x10 [ 278.361009][ T8476] ? fs_reclaim_acquire+0x93/0x130 [ 278.361031][ T8476] ? __pfx___might_resched+0x10/0x10 [ 278.361066][ T8476] should_fail_ex+0x40a/0x550 [ 278.361100][ T8476] should_failslab+0xac/0x100 [ 278.361129][ T8476] __kmalloc_noprof+0xdd/0x4c0 [ 278.361162][ T8476] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 278.361201][ T8476] tomoyo_realpath_from_path+0xcf/0x5e0 [ 278.361244][ T8476] tomoyo_path_number_perm+0x239/0x770 [ 278.361276][ T8476] ? tomoyo_path_number_perm+0x209/0x770 [ 278.361313][ T8476] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 278.361354][ T8476] ? __pfx_lock_acquire+0x10/0x10 [ 278.361403][ T8476] ? __fget_files+0x2a/0x410 [ 278.361436][ T8476] ? __fget_files+0x2a/0x410 [ 278.361472][ T8476] security_file_ioctl_compat+0xc6/0x2a0 [ 278.361503][ T8476] __se_compat_sys_ioctl+0xd6/0xc10 [ 278.361533][ T8476] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 278.361558][ T8476] ? __fget_files+0x2a/0x410 [ 278.361594][ T8476] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 278.361629][ T8476] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 278.361666][ T8476] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 278.361695][ T8476] ? lockdep_hardirqs_on+0x99/0x150 [ 278.361723][ T8476] __do_fast_syscall_32+0xb4/0x110 [ 278.361753][ T8476] ? exc_page_fault+0x590/0x8b0 [ 278.361782][ T8476] do_fast_syscall_32+0x34/0x80 [ 278.361810][ T8476] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 278.361843][ T8476] RIP: 0023:0xf747d579 [ 278.361861][ T8476] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 278.361879][ T8476] RSP: 002b:00000000f510655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 278.361901][ T8476] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000541b [ 278.361916][ T8476] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 278.361928][ T8476] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 278.361940][ T8476] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 278.361952][ T8476] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 278.361981][ T8476] [ 278.363807][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.370603][ T8476] ERROR: Out of memory at tomoyo_realpath_from_path. [ 278.382104][ T8465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.743'. [ 278.518390][ T975] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.523822][ T5916] usb 5-1: config 0 descriptor?? [ 278.538560][ T975] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 278.551133][ T25] smsusb:smsusb_probe: board id=15, interface number 41 [ 278.678312][ T5916] pwc: Askey VC010 type 2 USB webcam detected. [ 278.691402][ T25] smsusb:smsusb_probe: board id=15, interface number 6 [ 278.698501][ T25] smsusb:smsusb_probe: Device initialized with return code -19 [ 278.698732][ T975] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 278.909263][ T975] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.926121][ T975] usb 8-1: Product: syz [ 278.935260][ T975] usb 8-1: Manufacturer: syz [ 278.964037][ T975] usb 8-1: SerialNumber: syz [ 279.161839][ T5916] pwc: recv_control_msg error -32 req 02 val 2b00 [ 279.191845][ T5916] pwc: recv_control_msg error -32 req 02 val 2700 [ 279.309240][ T5916] pwc: recv_control_msg error -32 req 02 val 2c00 [ 279.319482][ T25] usb 3-1: USB disconnect, device number 44 [ 279.328870][ T5916] pwc: recv_control_msg error -32 req 04 val 1000 [ 279.343586][ T5916] pwc: recv_control_msg error -32 req 04 val 1300 [ 279.370230][ T975] usb 8-1: 0:2 : does not exist [ 279.395282][ T975] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 279.577316][ T5916] pwc: recv_control_msg error -71 req 02 val 2000 [ 279.602620][ T5916] pwc: recv_control_msg error -71 req 02 val 2100 [ 279.623156][ T975] usb 8-1: USB disconnect, device number 14 [ 279.641352][ T5916] pwc: recv_control_msg error -71 req 04 val 1500 [ 279.666135][ T5916] pwc: recv_control_msg error -71 req 02 val 2500 [ 279.714301][ T5916] pwc: recv_control_msg error -71 req 02 val 2400 [ 279.775227][ T5916] pwc: recv_control_msg error -71 req 02 val 2600 [ 279.814927][ T5916] pwc: recv_control_msg error -71 req 02 val 2900 [ 279.838337][ T5916] pwc: recv_control_msg error -71 req 02 val 2800 [ 279.850589][ T5845] udevd[5845]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 279.871590][ T5916] pwc: recv_control_msg error -71 req 04 val 1100 [ 279.880813][ T5916] pwc: recv_control_msg error -71 req 04 val 1200 [ 279.898203][ T5916] pwc: Registered as video103. [ 279.953708][ T5916] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input25 [ 279.999590][ T5916] usb 5-1: USB disconnect, device number 38 [ 280.309311][ T25] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 280.480157][ T25] usb 8-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 280.531152][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.565600][ T25] usb 8-1: Product: syz [ 280.593299][ T25] usb 8-1: Manufacturer: syz [ 280.622340][ T25] usb 8-1: SerialNumber: syz [ 280.658567][ T25] usb 8-1: config 0 descriptor?? [ 280.668100][ T8503] sg_read: process 475 (syz.2.755) changed security contexts after opening file descriptor, this is not allowed. [ 280.935235][ T8493] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 281.322429][ T8493] trusted_key: encrypted_key: insufficient parameters specified [ 281.456706][ T8493] ================================================================== [ 281.464975][ T8493] BUG: KASAN: slab-use-after-free in key_put+0xea/0x230 [ 281.471964][ T8493] Read of size 8 at addr ffff8880282435c0 by task syz.7.751/8493 [ 281.479710][ T8493] [ 281.482055][ T8493] CPU: 0 UID: 0 PID: 8493 Comm: syz.7.751 Not tainted 6.14.0-rc4-syzkaller #0 [ 281.482084][ T8493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 281.482098][ T8493] Call Trace: [ 281.482108][ T8493] [ 281.482117][ T8493] dump_stack_lvl+0x241/0x360 [ 281.482147][ T8493] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.482164][ T8493] ? __pfx__printk+0x10/0x10 [ 281.482179][ T8493] ? _printk+0xd5/0x120 [ 281.482192][ T8493] ? __virt_addr_valid+0x183/0x530 [ 281.482212][ T8493] ? __virt_addr_valid+0x183/0x530 [ 281.482233][ T8493] print_report+0x16e/0x5b0 [ 281.482260][ T8493] ? __virt_addr_valid+0x183/0x530 [ 281.482278][ T8493] ? __virt_addr_valid+0x183/0x530 [ 281.482295][ T8493] ? __virt_addr_valid+0x45f/0x530 [ 281.482313][ T8493] ? __phys_addr+0xba/0x170 [ 281.482336][ T8493] ? key_put+0xea/0x230 [ 281.482358][ T8493] kasan_report+0x143/0x180 [ 281.482387][ T8493] ? key_put+0xea/0x230 [ 281.482419][ T8493] key_put+0xea/0x230 [ 281.482448][ T8493] __key_create_or_update+0xbfe/0xdc0 [ 281.482481][ T8493] ? __pfx___key_create_or_update+0x10/0x10 [ 281.482518][ T8493] key_create_or_update+0x42/0x60 [ 281.482554][ T8493] __se_sys_add_key+0x33f/0x490 [ 281.482578][ T8493] ? __pfx___se_sys_add_key+0x10/0x10 [ 281.482603][ T8493] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 281.482629][ T8493] ? __ia32_sys_add_key+0x20/0xc0 [ 281.482647][ T8493] __do_fast_syscall_32+0xb4/0x110 [ 281.482668][ T8493] ? exc_page_fault+0x590/0x8b0 [ 281.482697][ T8493] do_fast_syscall_32+0x34/0x80 [ 281.482726][ T8493] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 281.482759][ T8493] RIP: 0023:0xf7f82579 [ 281.482777][ T8493] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 281.482790][ T8493] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 000000000000011e [ 281.482807][ T8493] RAX: ffffffffffffffda RBX: 0000000080000140 RCX: 0000000080000180 [ 281.482818][ T8493] RDX: 0000000080000100 RSI: 00000000000000ca RDI: 00000000fffffffe [ 281.482832][ T8493] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 281.482845][ T8493] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 281.482868][ T8493] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 281.482888][ T8493] [ 281.482896][ T8493] [ 281.715921][ T8493] Allocated by task 8493: [ 281.720272][ T8493] kasan_save_track+0x3f/0x80 [ 281.724984][ T8493] __kasan_slab_alloc+0x66/0x80 [ 281.729882][ T8493] kmem_cache_alloc_noprof+0x1d9/0x380 [ 281.735454][ T8493] key_alloc+0x341/0xff0 [ 281.739746][ T8493] __key_create_or_update+0xb6d/0xdc0 [ 281.745172][ T8493] key_create_or_update+0x42/0x60 [ 281.750268][ T8493] __se_sys_add_key+0x33f/0x490 [ 281.755133][ T8493] __do_fast_syscall_32+0xb4/0x110 [ 281.760267][ T8493] do_fast_syscall_32+0x34/0x80 [ 281.765160][ T8493] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 281.771524][ T8493] [ 281.773863][ T8493] Freed by task 5916: [ 281.777859][ T8493] kasan_save_track+0x3f/0x80 [ 281.782561][ T8493] kasan_save_free_info+0x40/0x50 [ 281.787609][ T8493] __kasan_slab_free+0x59/0x70 [ 281.792390][ T8493] kmem_cache_free+0x195/0x410 [ 281.797174][ T8493] key_gc_unused_keys+0x389/0x400 [ 281.802271][ T8493] key_garbage_collector+0x8b5/0xa00 [ 281.807580][ T8493] process_scheduled_works+0xabe/0x18e0 [ 281.813154][ T8493] worker_thread+0x870/0xd30 [ 281.817785][ T8493] kthread+0x7a9/0x920 [ 281.821885][ T8493] ret_from_fork+0x4b/0x80 [ 281.826328][ T8493] ret_from_fork_asm+0x1a/0x30 [ 281.831127][ T8493] [ 281.833459][ T8493] The buggy address belongs to the object at ffff888028243500 [ 281.833459][ T8493] which belongs to the cache key_jar of size 336 [ 281.847193][ T8493] The buggy address is located 192 bytes inside of [ 281.847193][ T8493] freed 336-byte region [ffff888028243500, ffff888028243650) [ 281.861032][ T8493] [ 281.863441][ T8493] The buggy address belongs to the physical page: [ 281.869895][ T8493] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888028242c40 pfn:0x28242 [ 281.879980][ T8493] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 281.888501][ T8493] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 281.896064][ T8493] page_type: f5(slab) [ 281.900064][ T8493] raw: 00fff00000000040 ffff88801c283140 dead000000000122 0000000000000000 [ 281.908656][ T8493] raw: ffff888028242c40 000000008012000d 00000000f5000000 0000000000000000 [ 281.917267][ T8493] head: 00fff00000000040 ffff88801c283140 dead000000000122 0000000000000000 [ 281.925967][ T8493] head: ffff888028242c40 000000008012000d 00000000f5000000 0000000000000000 [ 281.934656][ T8493] head: 00fff00000000001 ffffea0000a09081 ffffffffffffffff 0000000000000000 [ 281.943347][ T8493] head: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 281.952026][ T8493] page dumped because: kasan: bad access detected [ 281.958459][ T8493] page_owner tracks the page as allocated [ 281.964180][ T8493] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7008, tgid 7001 (syz.0.347), ts 174476754020, free_ts 173953227954 [ 281.985466][ T8493] post_alloc_hook+0x1f4/0x240 [ 281.990262][ T8493] get_page_from_freelist+0x365c/0x37a0 [ 281.995852][ T8493] __alloc_frozen_pages_noprof+0x292/0x710 [ 282.001712][ T8493] alloc_pages_mpol+0x311/0x660 [ 282.006576][ T8493] allocate_slab+0x8f/0x3a0 [ 282.011088][ T8493] ___slab_alloc+0xc27/0x14a0 [ 282.015788][ T8493] __slab_alloc+0x58/0xa0 [ 282.020152][ T8493] kmem_cache_alloc_noprof+0x268/0x380 [ 282.025647][ T8493] key_alloc+0x341/0xff0 [ 282.029916][ T8493] __key_create_or_update+0xb6d/0xdc0 [ 282.035332][ T8493] key_create_or_update+0x42/0x60 [ 282.040392][ T8493] __se_sys_add_key+0x33f/0x490 [ 282.045260][ T8493] __do_fast_syscall_32+0xb4/0x110 [ 282.050406][ T8493] do_fast_syscall_32+0x34/0x80 [ 282.055286][ T8493] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 282.061667][ T8493] page last free pid 6993 tgid 6993 stack trace: [ 282.068018][ T8493] free_frozen_pages+0xe0d/0x10e0 [ 282.073095][ T8493] __mmdrop+0xb9/0x3d0 [ 282.077192][ T8493] exit_mm+0x220/0x310 [ 282.081291][ T8493] do_exit+0x9ad/0x28e0 [ 282.085478][ T8493] do_group_exit+0x207/0x2c0 [ 282.090094][ T8493] __x64_sys_exit_group+0x3f/0x40 [ 282.095163][ T8493] x64_sys_call+0x26a8/0x26b0 [ 282.099866][ T8493] do_syscall_64+0xf3/0x230 [ 282.104384][ T8493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.110383][ T8493] [ 282.113079][ T8493] Memory state around the buggy address: [ 282.118823][ T8493] ffff888028243480: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 282.126916][ T8493] ffff888028243500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 282.135004][ T8493] >ffff888028243580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 282.143085][ T8493] ^ [ 282.149256][ T8493] ffff888028243600: fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc [ 282.157332][ T8493] ffff888028243680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 282.165839][ T8493] ================================================================== [ 282.174014][ C0] vkms_vblank_simulate: vblank timer overrun [ 282.181880][ T8493] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 282.189126][ T8493] CPU: 0 UID: 0 PID: 8493 Comm: syz.7.751 Not tainted 6.14.0-rc4-syzkaller #0 [ 282.198013][ T8493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 282.208113][ T8493] Call Trace: [ 282.211424][ T8493] [ 282.214384][ T8493] dump_stack_lvl+0x241/0x360 [ 282.219107][ T8493] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.224352][ T8493] ? __pfx__printk+0x10/0x10 [ 282.228992][ T8493] ? preempt_schedule+0xe1/0xf0 [ 282.233893][ T8493] ? vscnprintf+0x5d/0x90 [ 282.238266][ T8493] panic+0x349/0x880 [ 282.242210][ T8493] ? check_panic_on_warn+0x21/0xb0 [ 282.247372][ T8493] ? __pfx_panic+0x10/0x10 [ 282.251826][ T8493] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 282.257828][ T8493] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 282.264165][ T8493] ? print_report+0x519/0x5b0 [ 282.268861][ T8493] check_panic_on_warn+0x86/0xb0 [ 282.273813][ T8493] ? key_put+0xea/0x230 [ 282.277988][ T8493] end_report+0x77/0x160 [ 282.282247][ T8493] kasan_report+0x154/0x180 [ 282.286771][ T8493] ? key_put+0xea/0x230 [ 282.290951][ T8493] key_put+0xea/0x230 [ 282.294963][ T8493] __key_create_or_update+0xbfe/0xdc0 [ 282.300450][ T8493] ? __pfx___key_create_or_update+0x10/0x10 [ 282.306385][ T8493] key_create_or_update+0x42/0x60 [ 282.311443][ T8493] __se_sys_add_key+0x33f/0x490 [ 282.316330][ T8493] ? __pfx___se_sys_add_key+0x10/0x10 [ 282.321770][ T8493] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 282.328399][ T8493] ? __ia32_sys_add_key+0x20/0xc0 [ 282.333454][ T8493] __do_fast_syscall_32+0xb4/0x110 [ 282.338603][ T8493] ? exc_page_fault+0x590/0x8b0 [ 282.343551][ T8493] do_fast_syscall_32+0x34/0x80 [ 282.348426][ T8493] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 282.354959][ T8493] RIP: 0023:0xf7f82579 [ 282.359047][ T8493] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 282.378661][ T8493] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 000000000000011e [ 282.387288][ T8493] RAX: ffffffffffffffda RBX: 0000000080000140 RCX: 0000000080000180 [ 282.395270][ T8493] RDX: 0000000080000100 RSI: 00000000000000ca RDI: 00000000fffffffe [ 282.403255][ T8493] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 282.411260][ T8493] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 282.419256][ T8493] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 282.427278][ T8493] [ 282.430607][ T8493] Kernel Offset: disabled [ 282.434944][ T8493] Rebooting in 86400 seconds..