last executing test programs: 16.258573214s ago: executing program 2 (id=1203): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xffd1, &(0x7f0000000080)=0x2) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000034) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x1c5100, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e21, @loopback}]}, 0x0) rt_sigqueueinfo(0x0, 0x4, &(0x7f0000000180)={0x2b, 0x3, 0x7ff}) 13.835897449s ago: executing program 2 (id=1208): mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r0 = fanotify_init(0xf00, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioperm(0x200, 0xa, 0x53) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) fanotify_mark(r0, 0x105, 0x4800002c, r1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001440)=ANY=[@ANYBLOB="120100009e173610ef171e7206de01020301090212000100000000090400000002060000056d2eb118aa3d34c86183274996202fd26d81df2ab6c5d20489d82a299f25ec7e3ab00f5a9297eb730ad0cb012a26705ae722c66129669248f72ede8a897f791287ed3bb3a57836c1d18b909853dcfa25ee78d035d18316413ad0d7215c5e"], 0x0) read$FUSE(r0, &(0x7f0000002f00)={0x2020}, 0x2020) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x107, 0x8, &(0x7f0000000000), 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00000013c0)={0x1, 0x1, {0x0, 0x0, 0x1, 0x1, 0x401}, 0x4}) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x20) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_enter(r4, 0x1d55, 0x6cb9, 0x0, 0x0, 0x0) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={r7, 0x0, 0x22, 0x4, &(0x7f0000000040)="2030b187ffbfee8720b56d8321d1424c073527d727ab558dc4e5e7cca21448311624", &(0x7f0000000200)=""/4, 0x8, 0x0, 0x3a, 0x1000, &(0x7f0000000300)="b55d628d8f0358a4020877e1ae7717070f4e1a9e0858d7e7f91d7377e75c1087fffc315de418f04698e7a12553d5ba25eaf967fd9875be82c555", &(0x7f0000000340)="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", 0x2, 0x0, 0x169d}, 0x50) mq_timedsend(r7, 0x0, 0x0, 0x7, 0x0) 12.561577417s ago: executing program 3 (id=1214): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYRESOCT=r1, @ANYRES16=r1, @ANYRESDEC=r2]) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x357300, 0x0) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800005, 0x11, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) r6 = eventfd2(0x9, 0x80000) io_setup(0x4, &(0x7f00000014c0)=0x0) r8 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r7, 0x1, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x161) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r9) io_submit(0x0, 0x9, &(0x7f0000000ac0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x3, r5, &(0x7f0000000380)="cfeaf5b8882cd097b1cbb31609c8c59f2f98695b3bb2f4955562a3a31190f36c29a8ea1e776bd1997bdb69d3d8993041f2c3aef93af81f0c11f4162074019ce4c76194123bd69b6b6e9bdb6cd7d96f7eaf69d6b72c9771e79f01c1004cd09087ebff98ea808e208a679d1728fc962b7598548d8ec11f8040f95aa37c36787c841a49bc2939e5a198fe094bdb133ce3106d1644c6c5b5986eecd0ddc94b94b483fd5fd096fa3196276ab51b57750cd09b3e753c75c7bdaff7a94d0e57013047434890aeaaca1e3be1d41b3277f7e49ca26674a3bce19a28ec71c3c0217317", 0xde, 0x4acd}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x2, 0xffffffffffffffff, &(0x7f0000000480)="3a665e166205e79ab40ddffc5e1e342209b0f3c2d4a8a353be43f37dc6c4cdb68a3d7a3fd49e48e6989d929d91335cd64473cc971949b1c9198d52f82a08555433bf46b1ddaa6a709559614c9b4448e7ae9e373bb6d9bcc5da6fe5e16f76a9f99bff1f6e353a80427e50824bbe2e108e71c430c6c0c0d08d08a21c4022dc04af320618607eded5e427fbc37adedcdbad7089c142f6c42ecf29e5b2a516066dae1c883b24d85104", 0xa7, 0x94, 0x0, 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x8, 0x10, r2, &(0x7f0000000580)="87ff0d69c4b1a2802a3a58b4395c15b3355eefcbf2237c33ef31f51daae85e470c0a781a31cf2e6a2825f90ecdda0596551a387a5704", 0x36, 0x1, 0x0, 0x2}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, &(0x7f0000000680)="ea55b9c4ed3206260909d431b52698b2081622623a58f3d5f83e7b472f9662f2521f308690a5a0ac9bcc322e5babf9e07b8cbfd246da665e9e89471ee097e573cb5401cadc7498f118e2cd5d6246f8257bdd1aae5bfa3cdda8bb64d1aba8c2de1d582b35e0dd41c04ab2606282741bdd92656fd32095564a86729d156a6be833211d26823de49781612eff73e7a377eff254d375ba8f72567b6708a834f7b2ecf263454e1a33ac", 0xa7, 0x2, 0x0, 0x3}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x800, r5, &(0x7f0000000740)="e2bf2d7b8fd7e16b18d9088380feaea9b621014691ade853a1f7fb7d4f6a33d9aec31855776a174901db250f85d4402ecdc11bf3a44974eee6f7e3f9e8ddb17885736a8c30cfdaf019c4956e15ccddc32ec734f58fe3528d5cd4196d44b415e4f875384cd8a6941427799aad107b34b28e76f047c066994ab18b12cf2dcebb89233cb5dd06eb54", 0x87, 0x8, 0x0, 0x4}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x6, 0x843, r4, &(0x7f0000000840)="8138b1bc6c9c820388a25ab3cfa7d23e52681f", 0x13, 0x6, 0x0, 0x2}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, &(0x7f00000008c0)="106ce0e29d04de367e8fab0191570838d6323a91f14f2d39c5e3686159", 0x1d, 0x1, 0x0, 0x2, r6}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x8, 0x5, r2, &(0x7f0000000940)="60ecb88dff89144cd20ded144502b00da9037c35cab9476c6ca72ed95286e07f223f60adee278ba126ab2aa1dfd4d55801941d47566e3171214dc30cfa3b0a2813c3f467140f9cd8e93ae32f42eadbf8dc20e6d2022e16f1695b70210b10aa1c1aeaaa1348ca03a8504b6a0bd503a16e0eda24fdada70b593c1f8433abdf2a44e3f034f99e0b76410751606970e32bec059798335012d3ff9640adf5e96431892e1775490e07d85875f5826378869cd054", 0xb1, 0x0, 0x0, 0x0, r8}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x3, 0xf5, r3, &(0x7f0000000a40)="211ee8557999d09260f1", 0xa, 0xc771, 0x0, 0x0, r9}]) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ec0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000640)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x54}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x2c}}, 0x20008050) syz_usb_connect(0x0, 0x4e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x9c, 0x44, 0x40, 0x1199, 0x9091, 0x2b84, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8, 0x0, 0x2, 0x30, 0x5b, 0x4b, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x3ff}}, {{0x9, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x0, 0x25, 0x1, 0x0, 0x8, 0x40}, @generic={0x0, 0x30, "514a5cf89c5bd5afc082c414cf398bbf631eaf2dda024195f2b7e28fd3d5eecc9fc362b233a59c9fb569b8684d665294fe8348abcbb29b37afc9baf82af2c33d770e09b0415db1b5f4b281c51230ccaf044fa20dc8de6cab66ff52585d47518c1691ecc24394a6fe6d213564b7e2e813811151eea4de0431af09de1866e07ba9f825b0d065e6b9e45bade59de9fb5a96c00b65bb01d90b34e2ee3badc7dda9409480a728f8205aaf6e9f716a2eef4ceab47b7bb1999ccb748de3c773ba25305266bf1ae26e8068c922975ad18e7d1ca9dfec02"}]}}]}}]}}]}}, 0x0) 11.254129765s ago: executing program 2 (id=1216): mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r1}, 0x20) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000002100)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmsg$can_raw(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000640)=""/214, 0xd6}], 0x1}, 0x42) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000011c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f00000000c0)={0x18, r4, 0x1, 0x0, &(0x7f0000000040)=[{0xffffffffffffffc1, 0xfffffffffffffffe}]}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4}) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_io_uring_setup(0x429, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r5, 0x47f9, 0x0, 0x0, 0x0, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) r8 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000300)="0fa2d17cda06979c5034e48e9bc349229a98071718a920afc81b19425f478f107d82372d9b26781f881b225c4b7475061a51d4001068ebe8522295da61c790a68632d5413a3a07b7b7d990ec83661ad86d2a961c36df3bcfe733b58274e220e70ef6494671257f6f4e35d4d2aee1f08ceb74c791eef28562afe01be6aa675b74c0b76fdd1f17202447527f41c8ee0f938d166785c243b084e5f405115f0c3a56fe84b4e8d46df05f6e9cd5adff54688b8c955d9771a98e5ff2445e5175ef35d79b0197976aca8a1898cb112052b52e3cebc8105dac0027fcd6471b83f682a92503ed9effb37570ee469f4680f3008c835f373039e819e5abaec22ff308ebcca8e335a7f95b3794b71e89c576031a8101a9e8a91c81b7c1faae868f3c83be1668f94eaf25a1ec5333f05bee35b749ee010d644d11ceac9f40e5a950b38f247121b058956d987bbb889fa982f1882d3ce61557e8ed8997be6cb916f98f8ea5d5dff717fccc6ec477a40797ae30d84d110de9555207e27beec56bd3ce3af64422576fa0076ff778721374dc107b342ce4ac7348a861336dad8ccd38be6fd3ee84d856431892b608d670e60682b27376ce00ce04f100b3f8bf6e735cd909b6545c8a97f11f4c97edfb60fb5902ca836779e5d559bbe46832cca1694cfe51dc272828197cd4a4c34831a45f15cdc8a7d896ba9acb2c0d6550313257f37d34171b44b9bb2f138713a908911b2cbcf4e67126b3d7ce1e541c5a88cc749dc6afbbe68873f0fa248c62a283de572512e9f20395053630b75c3b7d45f930f874a817d4974c5c6f18e0c13c6c6fa14c600bf58b46d216bf33351e0d8abd521652b761c4704c89e6d3c3f420330ea09da59552d7c87078fe2f15758f7340c020d90d78675e8f902182ed2d5b9a77e18e301aae6c4a3ca943a118d8e361c5360ab77242c5d26bdf4889e39c3b2465655d2542d5eec6f202ec604e72f1d8bea49c89f794935ddcf7184a622632680ea4482f88eaa6e047ff5e820e3e1c50ab40163fac32dfdc399d4537dbfb895713f3e88ec63febbbb53e810296e773cd179864272cd5e12f943e4eb3017a56b0a0cf2ca17c8880a6d14e19c78531a209fbd57a7d31e31c49c1b46f65891ea673219886be1864ea23733b0057d08d899e592672a8086b9c2898f3d42f6ad2ab6c8c98767967a8a358f7848ca900f9a7e71a32d03f69f7c2342a08beb98f6db3c5a846178d55d1e2c519353203557ab61ae2952fda28536940c1be2724d001c9c2639cae56915766696cf3dd32519acd9b7f203141bf3e208efa953fb13993936c016eb8fb40a07face7c2c736127a5aa7dd7c5fecb3e8abcebd0affb9ce12ea95df5553cc6145a6a146314a1f2cdd14f8d4e1728225cc0cfe50e806ce7a87b130c487519274d9178c4f8145a66a48a915244cb15862b5c4c312f95614b89ebee4b41d1b169aa2a3e2fd982f4f66fa3ac523fca83657d1e50b3dc26e655e722d020455d74500995d011e1a7053cdbbea47dc6d96d79a408d123df00fa51a19bf2dfd6ef33b4fe10257c2631fe295bb03dec37f15ab9083ed5d14279814bdaa02380247eec426db1d750bf82712d5eaf67f3a460dc6493c5a55b5135abf65f7fe957207a819cd2ce86e77f276835f4e46c2f25c10566d66eeb2c5db0bbef38d073d3dcc803d364b84f2a4bac974d0471e51be17c0705c0410cb35ce958b2b33ae69487b21f43f8bb01b46bc39142e5d852b56002f6144c9a3363168b4384d88778bda62118c31921649a7938a1ea65ee87666ce3ec3d53aac826b980b2843a66c0f7a8171f42e507cb7c6ff5aa486aa777c8950a612ab2eff80d916e39275996348696b2c3020feb22d0a9c457da47ac3d8431b948477e075979f64524b4f5613fe3ac5fc5d1785fc4350bff3a58d8ee6d6c662961f11311096951017205deb6ba3adf0209234102abeac2dee1d465fb3fd0d7dc41fa84324df297b5db0317c5d1717c005252b3360ce90b66a2b4cef9557bbe5b0b184695481614c22e1550bbad25a69d578ff10bee53752850cb89a75226f0d0cea34f97faffb627358e2830cc798d6a416413ec9290167d2ea05e14d91ff78564a47a8cc71da6de00a15f820e9c70556c0b8aa320f290f9a06d21a23f7ac0ba3d1cb512011dee645c4b23acae9e51fc97e6354e6934433ce1ea39d4e4a8bd96e25dcd91f3ac1c5b829b6714057d2dc1c085752d046b22436106f8a92372adcee52fc2dfc0215106abf0456aa875f94ad095e8e6cc519e40bbc94f96b374aec1e5e13db490e3da6d3ac444c739af3e17930c1b5130e2fc55f7d1b97b08fa056277863191b68811b934c907362b753e5c2c5b8064442fa9acf2b6c1cc43a84ae989f66b9459dbea05b85440b1d92c6af21009386c117e4812eb79d59ea7e52701566fcec6ed20ccf6742b6bad277695dd232c5526e8ba822754943d803460ea59dee539c937e3d5b2738e10377c098a79123763016436450f140585cba1346d85bc426a65df8eb35cd8d94d95861c32d49da1c4f44c5cba75b160bd18b8901a68f268273201b62dabefa51510696c6adceadb18cf565f6fbdae7863c9c9657023d61d1fb8802ae675c8398e7166c993c681fe41376a496a02f111eedcc11569e5882430a11d75e240d4e630008e6b9bbe04caf8f930f0d974b5a56bbc9fceb9af4245fc135ed251357d5177ee01afbcc87477615472504c69838c7534ca5d2e76a39a52e9de4a74ce61f827f1aff00810caf2562fc965cb245e9142be2e3f55cce3231a31d5627fca28ba309fd976f73024a7726ab1a00faedada16ab8e0f42d7d7b75e931980605d2a6c6a1ef1b0613cac821b36a2434a8867428775b33a54959168dcbb278908632464b132f157c1b505bd5e58b954a7041862809fcc76ecf177ed39cff3f283f003d9a1799235fa6bdd1644c9d218335c5c4dc9ee2050e1cf816567dfed0d3d705efdfa726639baec2f60c030ab111496e2e9ebcdfc2783d0e33700524558bdb64e14be8d6b230201dbbd6299e550b2c42b1ecb14b94c028e0bc26cec955d5c5c002cc97129bd907a24c762f08e8115b23c75fa9b50af6e91f847573185d366f869d8e72dbac3980f1c8c811f4b6c9b2087a19eeb664eb1edf1f8b6f703a3d305f893587c6d6c56e8d90e745b24d1b877abd2354989eee96eb6663938e2c3694477d2103210bc6b6f23681ba2c2b32d6313ec28adb74c99fb33081675129c4902dcb7f450a21e2c749ec9d4ee297f9bf3ecfa03592828592824c4743b89865b2b2f741fb8165254102dcd04127a7629d8844169d5ea7c8fc94106df8cada7caa6ea6c7535f7bada03f6e466dc16221c4175e4c99ba6c3bf772e99c69fcf5e6dfd60208f61da2efc1172b83b5caf0fde6f26fb3d771d759c0469f2ff6440130c9279303f24712428ed691491b34c050afac473e682d6a9d17687447ff31b6506ddebcaf76164f475f080397ec18aefd6581a48a5b83314a910234d3d9e952dad6006b7b21d47020cc6a8fae1e7f7ed1888bb545fe84b170ba92ec511d32d760735c913b036f936b75de627cabb993f3cfcd0ed16ea9f4f330f098641f9ed37718f6b3bddd89dcf5d54ed9927efdaedb0a7a42f76229ff7eb0f97a8fbba50a939b4ae2d89dcd02f588dcf973f25eb99252605362f9db7692a2bd78c602da2ead35444ee505b865bb93c4b5c4d81dff83021e961e238605c506b6cd3af9e551e9530b63727bae37888c5247cf28ff47662765ff0b04be8c72073febc783f5f22ffe248c874cfad07d1691abebcd17c837f58e0332e6f8562e3aa42c0f47eb0798569f8cee65ccc918600d747852b043ffbe9c7c788e398e8c55937908bb41a38a6147cc8d610eb352674dd95e712ff47f1d88ec1dc6b695980189905e78735444918a574d589a5eb91306091b5a064432843abc3bf10e657c8af953d69408ef02796c5b80ac1ae275e5f9b8aa59d5678680930fa1744175fad5f4da4803b83adf3b93afc9bd38ee6d0c40e1bf4208c0910d586e37713bbb99e1ef408c011f944ddad081578405a12c85d83e33f22e0d04de7407d9c17a82046fc4461d1601e290b0ce9edc284568cc0ef3541b1c90de102822ab9905fe34c90bd99a8a87c064f9181fa6fa8c6ae3ce74e4102dee2a5790b8423a29e5f4c3cd1227ffa4b6a89472a59c56569261a6f76ea9eb99d1aa0ccbb0b4eb25a8d208c18a4aaade74489722d6c0a5739631294fa481172ed2ac3f8a7cd0fba4fe39677398077dd0a3735fbea6b18bdf65d8f8236e93d2ac9239c404f1d9c9c07bc2387622884e094d1156b21040e933514056c4858d903fee420555831ef7b703de64747819cd9293abb03e87ec0e3176e562416565a3f8c7828ac26bf0d9ae4e6fa9a800f892fff2196933ee9e9472a605a63177446beb469412631be9a2ef0078f9d21d1d3d5dd2c6a626fb9232e4639d7057524857c51ac4ddec0af3c5000527c319c589830fc026237a5b0afb486607f3bca6044c8de94053b7596c81a0d602fc858bedaa13071dd88cd4072840e24aaf5692c7ebd8c1b62b97913cba79dd9727adae3be3e47f239460d7132767d4df5b9414d219d2debbaebf88d6ccaa3122a3308f8f489a23c5db3dae0857479ecfb67d0544f34be86baa554ca9e471d8bb0733c89ba21a989ad11aa47dc72e8c44da98839700a0b99011144e8db8786cdfcdab57fe964c8192cc669d50ab58c5b731ccc251783ec1882bcdc6740ad5e70b7d63cbf6c31c6c1cc61b4dc33e3148ac28bdaf0a14ed05364ced6eabd985800b81302bcb1a00f335978cd076694f0ae3eedeccd6c896333a4c27b90a33a626d898464c2d905a7d55a3187fbabc8339f395cf5aa748c51881b730d2ca416d8422a0d5ace6914eac7d8e2d88dbc406a6782f825ec9209d411422b700dce0e9bb644e1f1ad8e401d9a347dc652f18e2be456335a0025700745d34bc8382ac2c6508a9666eae5ca09242b5c7df2fd0581415f11815a0bc37c57b55937fe9323c3c619cc8a405e8aaf37cdd4ff1a20076d37fb276dcb33573c4a56682cf8fa27001940665e32e7674e851b3e7d5f4014fa9952f712d6e2d69f8c01c493798f4aa912c2bcad440211bb22147d17f51536faee02fecf69da355553020b7f51683b9f381224b45fd1361fe5ce85d2d58de2bc5d6d007bebb0b0943f98b1baac72d6d2d6f5866f899685b42e379d313c73baa8b881afdabef2658dc07180f0959690af2e39c95c8eda63bdf81b5a6cf663ce8722a54181917d2d7e2bfe1a9162acbc47ea04b4da09b27f364e83a1d4932c143862cbca167719dffc6b78f52cf2a301d0a825f29be2312182698d88fc67eca133459c54f6aba3b46e1e5fa0f3361d0a75b119b7c05bfb3c3549d082a9ba72a1587ecb82e9090dda9601e136f8cac1cdd0dfa2c61b1c098b49658053d95f6f777505c291a37fc00543096113cbea19e33724cc6be017509512ed4fdca518ee0937948aa300ec78b0a865c77937b63c32c2bb514f78899b73bf0274bc434bd4510fecd1aa6e2459dcdf20f7037eae6d04a0a9282270554088d9b105f286c561ff3255f3b1bb771d82ae46db140471d9d23b509ece5f46f0c9274a32365d2478ab2b71ba04c9fdddaac712b6f2351a9ecbcf3f35b7fe43418c60d7a4bb1208079d5a86d7e172368325a2db10ff4277dd9e81c1e7208cef7cc1b556ad00f0c8cad6a119f52b9d007e92a99dec8ab5a08eb4e36d42e7136fc09e8c3701382", 0x1000, 0xfffffffffffffffa) keyctl$read(0xb, r8, &(0x7f0000001300)=""/245, 0xf5) 10.37800197s ago: executing program 4 (id=1218): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$kcm(0x10, 0x71e72a34aaf46a8, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r3 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3b, r4}) r6 = socket(0xa, 0x1, 0x0) ioctl(r5, 0x8916, &(0x7f0000000000)) ioctl(r6, 0x8936, &(0x7f0000000000)) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c", 0x7) r8 = accept$alg(r7, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x80}], 0x30}, 0x0) 9.472543413s ago: executing program 2 (id=1219): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x2080, 0x0) fcntl$notify(r3, 0x402, 0x80000034) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x1c5100, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e21, @loopback}]}, 0x0) rt_sigqueueinfo(0x0, 0x4, &(0x7f0000000180)={0x2b, 0x3, 0x7ff}) 9.406371453s ago: executing program 4 (id=1220): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/wireless\x00') ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={0x0, @bcast, @netrom={'nr', 0x0}, 0x2efe2ae, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3, 0x2, [@default, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f080003400000000464"], 0xf0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c000180060006006558000004050280ff0411"], 0x528}}, 0xc000) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000140)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, {0x2000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x3000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0x0, 0xf801, 0x0, [0x0, 0x0, 0x1]}) msgget(0x3, 0x186) preadv(r1, &(0x7f0000001540)=[{&(0x7f0000001600)=""/171, 0x5a}], 0x1, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f0000007dc0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x8}}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000005c0)="18", 0x1}], 0x1}}, {{&(0x7f0000000c40)={0xa, 0x4e20, 0x4, @mcast2, 0x7c05}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000c80)="17", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) 8.119033349s ago: executing program 2 (id=1222): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f00000001c0)={0x0, 0x10, 0x47, "4f9841e58ad40b00cc19c0795d4222301d15f85adbdf62eb7f207782124c5a702c1b36438e8c3f96ea599da3e476c85c36634bf20069b011fe44d98a1f79e8bc1e98a5d9d01d67"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000040)=0x6e) connect$unix(r1, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r3 = io_uring_setup(0x3c8e, &(0x7f0000000500)={0x0, 0x490}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x69, 0x4, 0x5, 0x0, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f0000000080), &(0x7f00000000c0)=r4}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r5, &(0x7f0000000080), 0x0}, 0x20) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x34, 0x0, 0x9, 0x0, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5}]}, @NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x40880) syz_usb_control_io$uac1(r0, &(0x7f0000000680)={0x14, &(0x7f0000000340)={0x40, 0x21, 0xa6, {0xa6, 0x23, "6b57dec019b40887ef06bbe2275dd103b13714e7879cd9cddd779289814f56c4c8b90d2c7a8b6483a7a37b327768e2c3e3e39fcea9ffc5379029cc3e5a887e20770dec3aa00a3b97e6df4b6cd95547c3cdaa32b9715b8742e4f7e696d2c388ed70aad84cefd9fa8786aa7f23c79f2fafb84f243e317a30ffd8daa0efe1fcc63872551e1c7cb679a23962aa732bd865a8c0ce6e66eb871f432646a0fd441392238e93aa5f"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x458}}}, &(0x7f0000000700)={0x44, &(0x7f0000000440)={0x40, 0x16, 0xf9, "02aff8a2bde59a82c3bb01a95988a2f26806f5295e0f8c193242f9e3fb6ea6d08c6656d5c071a43c1e6c413d20918855b287d3791689f3ff9c8e2a012fc552d60d2caade9f89e6e204a817ef64290eeebb28279a76e2ff451d09d60fac38fab919dee221758ade9c9d1c51b78c47d7b1fd7e34e2541545b10b3a416ed5b94564728fcee0b347b343cc800f2ee9ba28b7a37c6836117d682fd834f797f935bbbb99bf0eb86e3ffa2036df3ead7e4d9a7ae2f3caeae48864e4c5313e4267727ec8365d3ba40c508022aea8563f508e5b27f05f421661a71456a462c064f4e301d8d1465b08488f2f36c6ee781ab302f7a9b5417553acb54c0977"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xc}, &(0x7f00000005c0)={0x20, 0x81, 0x2, "b867"}, &(0x7f0000000600)={0x20, 0x82, 0x1, "ce"}, &(0x7f0000000640)={0x20, 0x83, 0x3, '\x00\x00\x00'}, &(0x7f0000000780)={0x20, 0x84, 0x4, "346805dd"}, &(0x7f00000006c0)={0x20, 0x85, 0x3, "715be6"}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 8.017398061s ago: executing program 3 (id=1223): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() openat$sw_sync(0xffffffffffffff9c, 0x0, 0x686, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) read(r3, &(0x7f00000001c0)=""/93, 0x5d) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x40, 0x0) ioctl$RTC_EPOCH_SET(r4, 0x40187013, 0x7) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r5, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000280)="bf049f", 0x0, 0x8000}, 0x50) write$USERIO_CMD_SEND_INTERRUPT(r3, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0xfff, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaac2aaaa7f0aa5b6f6771ddb0003401108004500003800000000a1019078ac1e0001ac1414aa0b00907812000228250000000000fffa002f00007f0000017f000001380086ddffff0800"], 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x13f, 0xa}}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 7.683603651s ago: executing program 4 (id=1224): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000140)={0x32, @multicast2, 0x4e25, 0x0, 'lc\x00', 0x31, 0xfffffffb, 0x5a}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r2, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0xd6, 0x1c, 0x7, 0xfe, 0x401, 0xfff5, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x5, "cb630dab3a0338057401a192419598961f50dc45c87d55b42a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r2, r3], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000580)={0x0, 0x0, r2}) ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, &(0x7f0000000000)={0x3, 0x1}) openat$cgroup(r4, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1) mount$bind(0x0, 0x0, 0x0, 0x802002, 0x0) r5 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r5) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x4, 0xa5, &(0x7f0000000a00)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a2401000000020102132406000006000009000000000000000000000924030003ef0000000924050000f8431cfd0924030004020004fc0624050400fd090401000001020000090401010101020000090501090000000000072501000000000904020014080200000904020101"], 0x0) 6.951149408s ago: executing program 4 (id=1227): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x100000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x10}}}, 0x24}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000094037b40fd080200fdca010203010902120001000000000904"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000140)={0x14, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0xc4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES64=r1, @ANYRES32, @ANYRESOCT=r2, @ANYBLOB, @ANYRES8=r0], 0x48) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x604000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280)={0x0, 0x8}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000440)=@assoc_id=r6, &(0x7f0000000400)=0xfcf1) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f0000000480)=ANY=[@ANYRES16=r2, @ANYRES32=0x0, @ANYRESOCT=r6, @ANYRESDEC=r6]) syz_open_dev$loop(&(0x7f0000000300), 0x2, 0x40000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r9, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) 6.908095415s ago: executing program 3 (id=1228): syz_usb_connect(0x0, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e25f01403767010066de0102030109026800020002000009044a00037d998b07052406000005240000000d240f0100000000000000000009050e0300040200010905000000000000000905feff"], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{}k%@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000080)=""/3, 0x3}], 0x1) tkill(r2, 0xb) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x24049000) 6.647861782s ago: executing program 0 (id=1230): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1e3003, 0x0) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) rt_sigqueueinfo(r1, 0x1e, &(0x7f0000000300)={0x32, 0x8, 0xfffffbff}) writev(r0, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) 5.469942666s ago: executing program 0 (id=1232): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x2080, 0x0) fcntl$notify(r3, 0x402, 0x80000034) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x1c5100, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e21, @loopback}]}, 0x0) rt_sigqueueinfo(0x0, 0x4, &(0x7f0000000180)={0x2b, 0x3, 0x7ff}) 4.723179367s ago: executing program 1 (id=1233): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000ac0)=@nat={'nat\x00', 0x1b, 0x5, 0x468, 0x2a8, 0x1c0, 0xffffffff, 0x1c0, 0xd0, 0x398, 0x2a8, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ipv6={@private0, @private2, [], [], 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @private2, [], [], 'macvlan0\x00', 'rose0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port, @gre_key}}}, {{@ipv6={@empty, @private0, [], [], 'ip6gretap0\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@local, @ipv4, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELSET={0x44, 0xb, 0xa, 0x101, 0x0, 0x0, {0x4, 0x0, 0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @quota={{0xa}, @void}}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x4000040}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}]}, @NFT_MSG_NEWSET={0x16c, 0x9, 0xa, 0x409, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_DESC={0x13c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_CONCAT={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff0001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xff000000}, @NFTA_SET_DESC_CONCAT={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_DESC_CONCAT={0xac, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe32}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd8bb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x65}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x744}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xd1}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_DESC_SIZE={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1d8}}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r3}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000100)=0xffffffff00040000, 0x112) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000ac0)=@nat={'nat\x00', 0x1b, 0x5, 0x468, 0x2a8, 0x1c0, 0xffffffff, 0x1c0, 0xd0, 0x398, 0x2a8, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ipv6={@private0, @private2, [], [], 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @private2, [], [], 'macvlan0\x00', 'rose0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port, @gre_key}}}, {{@ipv6={@empty, @private0, [], [], 'ip6gretap0\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@local, @ipv4, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELSET={0x44, 0xb, 0xa, 0x101, 0x0, 0x0, {0x4, 0x0, 0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @quota={{0xa}, @void}}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x4000040}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}]}, @NFT_MSG_NEWSET={0x16c, 0x9, 0xa, 0x409, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_DESC={0x13c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_CONCAT={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff0001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xff000000}, @NFTA_SET_DESC_CONCAT={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_DESC_CONCAT={0xac, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe32}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd8bb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x65}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x744}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xd1}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_DESC_SIZE={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1d8}}, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r3}, 0x10) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000100)=0xffffffff00040000, 0x112) (async) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000000)) (async) 4.587162147s ago: executing program 1 (id=1234): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r0 = getpid() (async) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x99, 0x108001) read$hiddev(r1, &(0x7f0000000040)=""/174, 0xae) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000100)={0x1, 0x200, 0x10}) r2 = socket$rds(0x15, 0x5, 0x0) (async) r3 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r3, &(0x7f0000000140)="5b994648f8a29884478d404ecf68835b70", 0x11, 0x0, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) (async) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f0000000240)) (async) syz_usb_connect$uac1(0x1, 0x9d, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x3, 0x1, 0x6, 0x80, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x24, 0x7, 0x65}, @as_header={0x7, 0x24, 0x1, 0x81, 0x2, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x1, 0xfe, 0x1, {0x7, 0x25, 0x1, 0x82, 0x0, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x1, 0x2, 0x3, 0x1e, "606a12c33277eed8"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xfc, 0x3, 0x45, 0x2, "fb14", "0332"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0x0, 0x2, {0x7, 0x25, 0x1, 0x80, 0x6, 0x6}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x250, 0x5, 0x44, 0x2, 0xff, 0x6}, 0x134, &(0x7f0000000380)={0x5, 0xf, 0x134, 0x5, [@wireless={0xb, 0x10, 0x1, 0x0, 0x44, 0x49, 0x6, 0xff}, @generic={0xff, 0x10, 0x4, "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"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc0, 0x5, 0x5, 0xa, 0x2}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x4, 0xff00, 0x5, [0xffffc0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x40, 0x8, 0x1}]}, 0x4, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x340a}}, {0xa9, &(0x7f0000000540)=@string={0xa9, 0x3, "ee02aabc4eb5a9409eb659934d45d37b14ac7c958e2854f22886694b72d16459fb4ddf3e11a5e1b95f474314bbb5c5ac23e53259312d9b41c2e5a801ce2c8c59aed4e4bf7bf445af7bd8782716c23a8c00a4ff7ae918802128dd54dcbc5c334503a49da721cec41cf6b0c35681c28a4288cc256e8a72344f62fd9f593fa82eaef1b6f19c755401b9e0d80bc80ec5b51c8bef4627d86a786e612afca90550ee77ba8026dd8ecfe0"}}, {0x97, &(0x7f0000000600)=@string={0x97, 0x3, "09173a879ec6989500548842206c9fbb800452210118aad5203745c2212fb0e349795b71c3a27aeadcb5d250baed033dc5dac8619f1df17a0b3f6e39973f2643fbcb29962cf081afe378aaae8544ea3f60b0a52f634ce644ef2f0d78c2e20923f2086f69333c5314a4a0dd239c484afb8c32b46da3bc9e439b961079c6d18c7a5d43e19a153009da67b58a6f75627b39fa5234cab1"}}]}) (async) ptrace$peeksig(0x4209, r0, &(0x7f0000000740)={0x6, 0x0, 0x8}, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}, {}]) (async) readv(0xffffffffffffffff, &(0x7f0000000e40)=[{&(0x7f0000000b80)=""/236, 0xec}, {&(0x7f0000000c80)=""/169, 0xa9}, {&(0x7f0000000d40)=""/235, 0xeb}], 0x3) r5 = gettid() r6 = syz_pidfd_open(r5, 0x0) waitid$P_PIDFD(0x3, r6, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000e80), 0x200001) pread64(r2, &(0x7f0000000ec0)=""/62, 0x3e, 0x887) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r7, 0x402c5342, &(0x7f0000000f00)={0x0, 0x3ff, 0x80000001, {0x6, 0x3ff}, 0xfffffe01, 0x1}) syz_usb_connect(0x4, 0x1041, &(0x7f0000000f80)={{0x12, 0x1, 0x310, 0xe9, 0xbd, 0x1, 0x10, 0x1044, 0x8008, 0x131b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x102f, 0x4, 0x6d, 0x5, 0x20, 0xd8, [{{0x9, 0x4, 0xf0, 0x5, 0x3, 0x86, 0xaf, 0x62, 0xff, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "9ad69c"}, {0x5, 0x24, 0x0, 0x70}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xf9d8, 0x400, 0xff}, {0x6, 0x24, 0x1a, 0x2, 0x4}, [@acm={0x4}, @mdlm={0x15, 0x24, 0x12, 0x4}, @dmm={0x7, 0x24, 0x14, 0x3, 0x5218}, @country_functional={0x10, 0x24, 0x7, 0xd6, 0x0, [0x9, 0x2, 0x2, 0x0, 0x8]}, @country_functional={0x6, 0x24, 0x7, 0xe, 0x3}]}], [{{0x9, 0x5, 0xf, 0x2, 0x0, 0x7, 0x2c, 0x28, [@generic={0x80, 0x2, "0317aed328aaaced921d6f051270ebe4002e30e65fd19b08d683e56294460c88276b3f619c8555ebfa01fbc1f4e99ed9ecabf19e03490382d464ae2af63e882749b4b235904a0a1e3ec358cc4801fd0b9e5a15424ddb9ef58da0f966b81e7c6ddcc5ea05d939a89db9f812887faf759ffd3694901975fe9fbe802c2d4c60"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x3ff, 0x7, 0x27, 0x1, [@generic={0x41, 0x22, "5203e246c253b531497a82be92c9505f96621d59e478ea80fe954546d6ae986ac22e1ceadd08a9af65ab9bdcc0ab227f831719138c236ce40247a5fd1da9e3"}]}}, {{0x9, 0x5, 0xd, 0x4a2b4692c5c53516, 0x3ff, 0x3, 0xc, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0x3}]}}]}}, {{0x9, 0x4, 0xfc, 0x5, 0xb, 0xae, 0xe9, 0xfe, 0x45, [], [{{0x9, 0x5, 0xe, 0x4, 0x40, 0x0, 0xff, 0x4}}, {{0x9, 0x5, 0x8, 0x1, 0x400, 0xab, 0x0, 0x2}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x2, 0x91, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0xb}, @generic={0x2d, 0x11, "57c9c886c0bc2105f9e23df8c35c0467ab3e78d1437a23c16bca45ce4c85e7d8f71be4501e550968efc955"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x400, 0xe, 0x3, 0xf, [@generic={0x37, 0x7, "f7ec3026c752d47cda92b87d4b1cd47d93b7f07729a03dd94385efd4bf9d616471f95e215303f1ae2a96810483c02ad8218fdd568e"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x200, 0xe, 0x1, 0x8}}, {{0x9, 0x5, 0x9, 0x8, 0x10, 0x2, 0x26, 0x8, [@generic={0x7, 0x5, "255ccfc4e7"}, @generic={0xa5, 0x0, "c8fc58d61c4436c0486b3f38df7443101101145f98c73d5a827c38219e27616ba0bd4a84ce10454181783f9fcac5925e17374747bedced51fdfece635cf43f1f400ec64404ed6c057ef96077ca59ef1b8b9ef8093f533360c3fcac4045e1a79c0c5ccc099580ecf9f92abd06d47e4e467bc3716e7f0e7e04fd7e03c7a3eb8fa9c4befbd6cc584925a4ac702395b57efa7726e9379933763067cc1a69c3da8d9f0f9362"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x0, 0x8, 0x0, [@generic={0xe7, 0x5, "478116fe59b3f759c8d5eed09523c30ecc0215432eb4a0aa5ac6b3a6771a188c92ba48109e40efab52b4e661e5630b691c32539ba8de625ec1b26007e3f467b5746b00baa46cfc7d6845d4db8dca7bb8b1896945069a745478f8bc62e5b1f668ad860b2902f395c91d9e3e6b620e8fbacd5ad6d6e5fe024e9e1c0017f334a9d19bb71def376a307cef8551fc167aa5b590c935dc84c2f037e1efc0ff91e7eebcc4c571006eef5d4b7a67ceb2b101e0d130983e0c6c51f3858d943a6f4b74a6af67436b826ca8bc7c99e666b36a2f8940a518dd30fd9bc75474b30b886266f03eca3c7647af"}, @generic={0xe, 0x31, "8922c723aa5d45e5b7001d37"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x3ff, 0x4, 0xf8, 0x5}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x5, 0x5, 0x0, [@generic={0x16, 0xa, "1235ff9d36d75cd2b784ee9f08ef3ee99913394b"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x200, 0x21, 0x6, 0x8}}, {{0x9, 0x5, 0xd, 0x3, 0x10, 0x3, 0xfa, 0x3}}]}}, {{0x9, 0x4, 0x2, 0xfa, 0x3, 0x89, 0xc1, 0x5, 0x9, [], [{{0x9, 0x5, 0x62c5726ea99ff555, 0x4, 0x8, 0x5, 0x41, 0x40, [@generic={0xc0, 0x21, "e276d9c084acf0bd4b1ff252a793bc648b549569813a0c1871d806a6c131748d2e121e5c2a5e1291ae63cf96265a702f92fe9c3a435c9af6069b85fa0ae892b84810a4576fa2bdd49b851ec21a16d9dbc7cb1e62b6373fd720b49a2abb2ae3ef0b7a3d133d95265ca5c4f373dc0ca139d017b6e72d7a6df40eefe94d70a920ea8a76790e76b10ca3ae60ba190deddfd9732342a6401e4435a39b264329e092e0944f49f2493d49292e37aebb2049eaa925458e2c3cf498720eccdbfecd85"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x200, 0x7f, 0xff, 0x7b, [@generic={0xd5, 0x7, "0bde63e37327024b640c9118bc1873c96887e582f70ef50d8f2a22e612712e9ab147367dffb55309b84dbfbf86fb8fda4c37e6865064571ca944ccd3b1b7fc9ec2d41c2166e7055764eea21e1b95f4816e63607e141734f503fe0b29a0a7155ed44e37fbeabac350861d11a862284b69d6f56937c0c5401f324e8a0b72b3d9be87680559446b8907e9ab3bae04ea9a0fb04c56d9cd4a6c75465e6542de9f60ddfc9d05d692714494e8bb5ec577cf447bf6b65f8469a52cf3d85b761f74546a26099855504c94c3f904e06ff5102c8f232aecd1"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xa, 0x81}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x0, 0x0, 0x4, [@generic={0xe7, 0x5bf2f5f74ce689e9, "b214086440c096574d48ec607f310432a8501bf42471084e0042175b63adacf5d63c1d6a63210b8c588372244e4d83451249b60654373c5a4fa38b1a4b3e5aeefe75dccc8b7229e1cce1e3366619eb411981406406c59b9b3515f77bb23a9c1af13243be3280999c392a47a2bd9920746b5c289dfdf4255195b49bcfc5188b25b1c52e2936ced19a9b2546d69ac19699fdde4773b149fddd6a1180a2c2ddd5a6fc63f6a8ed694ab954383f2b01834c6bca9ab9d1765d446df8113b11ae5f4c751fc033537f343ba03d37171d051b6cd254169dc9ddc7f9b6a3e48dd3679c6337e9a69919cc"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x10, 0x400}]}}]}}, {{0x9, 0x4, 0xb1, 0x5, 0xf, 0xeb, 0x1c, 0xfe, 0x72, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "d63464d959"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x2, 0x5}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x9}, @dmm={0x7, 0x24, 0x14, 0x81, 0xff7f}, @mdlm={0x15, 0x24, 0x12, 0x8}, @acm={0x4, 0x24, 0x2, 0xb}, @mdlm={0x15, 0x24, 0x12, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x9}]}, @hid_hid={0x9, 0x21, 0x5, 0x6, 0x1, {0x22, 0x3ec}}], [{{0x9, 0x5, 0x6, 0x8, 0x8, 0x2, 0x5, 0xde}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x1, 0x3, 0x8f}}, {{0x9, 0x5, 0xd, 0x4, 0x10, 0x4, 0x10, 0x3, [@generic={0xa4, 0xb, "7c82a06c779728346efd014acfb207fd413387ac70ac3e18405410da2f7f4c248b25a9e5c21c0269aeb115183bb670a4ab6a116a4a0e3d91d2e28d29d8e761f3fc846932f5e895b6986243c9a4977e12605fa7a702aa5ccff42f68e7e94cfbe29220044f21d1fe9140beb8f79a5a1d1a8bea8866d80d85d6cd84ddf8ea8a198ec45c02411980d70ac2bc3239f22cf7b13505c5958b346564bbeb42bb9a8b3a193e72"}, @generic={0x11, 0xd, "c7ab3853acfd3c4477a996e62bbb9a"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x2, 0x3, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x2}]}}, {{0x9, 0x5, 0xa, 0xc, 0x40, 0x7f, 0x2, 0x80, [@generic={0x75, 0x6, "943bdbb3cbb7ee26df7b5b20616f61c0ec27c69a02e5c36b9d65ea7e4addcf09f9ab2ef45333471321330fbce14c597def173041fbb6fb07f9c173d656c8246f997064c95c2ad5185eb7ac5e8cd64be2d9fa13d4df7e92a0e44b10a6e663838868b42c4f64730b252c2bef44e994a79e325b8e"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x40, 0x9, 0x9b, 0x3}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x0, 0x7, 0x0, [@generic={0x86, 0x2e, "cc8e143eb573f44d154e1cce7ec8b647cf99edae8e3cc0aba95ede53194b6230f9870d9aaa97de723a6e70b179411a2f9184e23034b03c3dd090159a8f9ce63f86e6089e27e676a0bb2844401cc242069238dec27cca058281f9ae2ad00c97bec50fa85c32ac28d30de14b312afcd53b8d67b87cbfcd1ea9cfb6e88098ca37f050495bc8"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x47, 0x1, 0x4, [@generic={0x57, 0x3, "788ae8a30b2f5a4e37b84510b1409b8e4360f77457211384fb82f6eb67d6f30d1c3169576156586c4b1b69a4c0eb6f31cee5567d6e58a83b5805d1e21d662d278f7cc97540b99a6ae51144ea93a0ebfba484806731"}, @generic={0xe8, 0x0, "78b16e0aa95f4197df058a3f88c000b7d1d0d940ae0d8c8837c09a61922a73f66099e7e1e9bde8eed588ea00771ecbdf0d016857724985da32c21e3bfa1bcf9b66a15fb38ead0c68d8dbe01abf4af38ebeee6e0cc5fa8421e64e0e8fee866d57c0f2caff78a3bd93630c2cb5c424f1de4abebd91bcafbddd0cfc2d85665b94f537778a4786a75d2a7ffc9e595e3d8fd1c7fed46d50e639e214b14e4364aa5b0fb070257cbb68dc0e2ffa5941351f29fb7489c0afb3683cf58508f5aea42c07c23fbce034efc18b7318a767ddf5d054ffe6029818eec317386219d52caf346f8a031524b4cc5c"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x3ff, 0x8, 0xb, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x6}, @generic={0xf4, 0x24, "8d150665c2fcd9b9f407c493e486abbf0efc6125a5549ac233a45cd1c9aac2cf626dfa43362b66946de37e1795ae7552b5563f712861471744540ebf20c87b67e2fe3c608bd908cd74626259db48a0ef6516c4d6be1f5a064e2f8aaa22019ce77d588ee5bdabff79f4559b04f71e2d8e863d48b4f7e076266c28c784563772c40f998498e523986feee54b0d0b0e7e223074914af7e239d22c3a2aff3d618a39ff07f100fb2ed158a735e982c04a8826af05cbea3194bf3ffe89fedebe7774f3b1729ece451aafc7a6ccd0572bad9aedcc87871a4650a3d4cd05d5a2b4ac23fbd609ca7e709a05e1c08db4b3968ec528de1b"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0xff, 0x2, 0xff, [@generic={0xa9, 0x22, "a5643992783a041a17b638b92a7737b82860cbec4e93200388fcd8df557b16f93559df239c1615a6e4b9c0696b13d9f9854efd6d00b8a781f22286fc6143aad9a7b51170e66480608ac6a9ee4ab580f3ed3019489311d624d17dcfadb09db800e14cc7e58ad150f0adc13863849246188620b67490be0f4ea52958cf8c74e287ddfbaa45912df4cc31c06317b74ea32c9c2bb3cdbdd0c59665b4cc15f1da78901539f298409d57"}, @generic={0x13, 0x23, "36c9460fa53ce9f771920ad1dc5e17e1ae"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x738c8a10b916a3e5, 0x3, 0x8, 0xc5, [@generic={0x100, 0x3, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x6}]}}, {{0x9, 0x5, 0xa, 0x1, 0x8, 0x7f, 0x7, 0x3, [@generic={0xa7, 0x22, "e4415a72c644ff4c5ce463f3e3a19d170300d49320fdf47fb6bac33915f0075958b4f847914e6e8d16b4f9012374869234cee559e71c194909759ad3a10319ffc130fcab3b4596a416c67b9da01563365076135969356aab1681ef10677fc3840073a9a609bf07569e749ec42fd96902e090e48d1815d3deea28536de90cfbb13aeb0e93a6208ce4e2d6b8054322756f6ae7a67e89c0bea24b2778f135b9ad97c7bb085dda"}, @generic={0xcb, 0xb, "5915055b24edfc533063e62f2be27e64cb3e2db355bada62b323e51231b7dbc55902f206cf64a06290f25b0a15900adaefb724329fbefc08f94010f5182b940498d0cf3cd17fa3a93a0fe3d8f77284d496a91ef2ee7f926e5df3ecfe320778da467dd17ba81d79c7de83e9f4c8f3f39653e2ba078f14a3b1adbcc01eb20df964371917177b33c4b03de9e5b38690b9972e2a973e794e668c56b2cf0a14a45091fb33ae36382036e00930e00228e98f870482d545bbb8f5ad51b210f404a9a4ca8d2811584636516ec4"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x8, 0x4, 0x2}}, {{0x9, 0x5, 0x6, 0x4, 0x10, 0xe, 0x8, 0xc, [@generic={0xff, 0x21, "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"}, @generic={0x4f, 0xa, "1e9a191e7ed36de9ceab1c71d164ffcfb1e269187d26f564f51d14a56fe232564563555aafca791934493d2c1cd62acaccac5c9bbf67de10674df876a394ed9db89e23f45de3fea63abaa6529a"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x40, 0x45, 0x3, 0x8, [@generic={0x39, 0x3, "7967996f457983e07c4bd0b8ab19c64c10f2f7895c75d31eee3d9f139a90c2e90d92a8ef1d83fad4171af96233dec1dee6d0e789f773c0"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x1}]}}]}}]}}]}}, &(0x7f0000002200)={0xa, &(0x7f0000002000)={0xa, 0x6, 0x200, 0x0, 0x7, 0x2, 0x8, 0x3}, 0x55, &(0x7f0000002040)={0x5, 0xf, 0x55, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0x7, 0x0, 0x800, 0x780, 0x3}, @generic={0xe, 0x10, 0xa, "fee9f5b2411a759239ebca"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "676bab412565f46a43c758f105be5b88"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "33d5a94dbb3cf1a26c0d166c8c3a3c70"}, @wireless={0xb, 0x10, 0x1, 0x4, 0xc0, 0x3, 0xfd, 0x7, 0xe}]}, 0x3, [{0xb1, &(0x7f00000020c0)=@string={0xb1, 0x3, "b35db30d85fc3c9069f3c61120194f7c3bf0b45cc2032bb104875bbf086052a49cfe7dda7e60402c254f60c101841a466a56b238338c1d14aecf770568f76605a981bbbdcbbae26111d367f800a259c1349caa5d826c09376a2f2eb08848905e18f6bc53388ec01d8a3987f771835cd439095279e4d3b0d7ceb0bb41061bfa275639ab9f2c9f685965100f8aab2381615e69553055acdbada41033c772c2f47cc5b8ffb1ed3ab43c7182bdebe74e2b"}}, {0x8, &(0x7f0000002180)=@string={0x8, 0x3, "cb5dc35bc9e8"}}, {0x29, &(0x7f00000021c0)=@string={0x29, 0x3, "0a49f2e364c70a5959c5c81c67d43475b95b69668257de4dbd525d4df427212925c04e897ee7d1"}}]}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000002240)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(r6, 0xd0009412, &(0x7f0000003240)={r8, 0x3}) r9 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000004240), 0x0, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r9, 0x40046104, &(0x7f0000004280)) (async) socket$tipc(0x1e, 0x0, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000042c0)={0x1b, 0x0, 0x0, 0x7, 0x0, r9, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000043c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000004340), &(0x7f0000004380)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000005700)={0x11, 0x7, &(0x7f0000004400)=@raw=[@alu={0x4, 0x1, 0x2, 0x8, 0x7, 0x20}, @map_val={0x18, 0x6, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}], &(0x7f0000004440)='syzkaller\x00', 0x288, 0x1000, &(0x7f0000004480)=""/4096, 0x41000, 0x4c, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000005500)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000005540)={0x1, 0x7, 0xffff, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000005640)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000005680)=[{0x3, 0x5, 0xb, 0x2}, {0x2, 0x4, 0xc, 0x4}, {0x4, 0x1, 0x5, 0x5}, {0x0, 0x1, 0x5, 0x6}, {0x4, 0x4, 0x4, 0xb}, {0x4, 0x5, 0xe, 0x6}], 0x10, 0x1, @void, @value}, 0x94) 3.763956569s ago: executing program 1 (id=1235): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rt_sigqueueinfo(r2, 0x1e, &(0x7f0000000300)={0x32, 0x8, 0xfffffbff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000300)) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) writev(r0, &(0x7f0000019880)=[{0x0}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) 3.620859063s ago: executing program 2 (id=1236): socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x5131, 0x0, 0x3}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000003d0007010400088000"/28], 0x1c}}, 0x4040040) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x5, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x5, 0x24, 0xfffffffffffffffd, 0x0) ioctl$EVIOCRMFF(r2, 0x40095505, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000d80), 0x1, 0x0) ioctl$I2C_PEC(r3, 0x708, 0x1) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000100)={0x0, 0x1, 0x5, &(0x7f00000000c0)={0x1f, "74c4dec76d979f6fcaf0ab42859f991ab18cf20876f5bec17dbf534ffd1e155a92"}}) socket$inet(0x2, 0x2, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2284, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000020000102505a2a44000000001010902440081010010000904", @ANYBLOB="1e3ba17ab983bccff93482cfabe1eaa9e901888ad72fdf687bc4adb6f6543891623330ff2d39d731b2cabec6915048ed96da87dc9dd03e132a16b159ceffd356bda3cf3250327d848848b4e2426aabc237529db52f90195738841163b8c6ede6273a445ae7b7f0d1e53f11f4e846a435b5150ada4f128fe881515d656c6ab512b8bbe282e7d087b7341efb3044d38d06dd1dca2bc000000000b04936e2273cf7eef8bd8c76bdbf45d6346a16188513a1f9d8c5ad3ec383428a7d067b9efb4aa499c12c30de9906c6bd4cb31a8ff53327abe5d272b8cd2f0b778dd5ceb6c8de3edbef36ac1decf4aac99901d5cd27c88a9a499a86e7507cc8bb45cc37b27a956fc52504e2d9798be7294823516881c4f40aeb68eb46", @ANYRES16=0x0], 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000340)={0x5, 0x5, 0x1}) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='xfs\x00', 0x8403, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000180)={0x92, @time={0x65757100, 0x4000000}}) mlock(&(0x7f00003d8000/0x3000)=nil, 0x3000) write$sndseq(0xffffffffffffffff, &(0x7f00000002c0)=[{0x8, 0x6, 0x8, 0x6, @time={0x2, 0x5}, {0x5, 0xd}, {0x2, 0x9}, @control={0x1, 0x7, 0x4}}, {0xfd, 0x9, 0x5, 0x9, @tick=0x400, {0x4, 0x5}, {0xa, 0x7}, @connect={{0x9, 0x10}, {0xa, 0x8}}}, {0xb, 0x4, 0xfa, 0xa, @time={0xe, 0x7}, {}, {0x1, 0x5}, @raw32={[0xffffffff, 0x0, 0x9]}}, {0xa, 0x4, 0x1, 0xfc, @tick=0x8, {0x81, 0x21}, {0x3, 0xfd}, @raw8={"f284663356eba69ab67efa97"}}], 0x70) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 3.499958364s ago: executing program 0 (id=1237): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200), 0x111, 0x2}}, 0x20) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) getresgid(0x0, 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000001080)=0x1, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) getresgid(&(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000300)=0x0) r4 = getgid() r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r6]) setgroups(0x3, &(0x7f0000000340)=[r3, r4, r6]) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x62141) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r8, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @time={0xb9c, 0x8}, {}, {}, @quote={{0xcc, 0x4}, 0x3, &(0x7f00000003c0)={0x2, 0xb, 0x8, 0x0, @tick=0x1ff, {0x5, 0x9}, {0x7, 0x8}, @addr={0x98, 0x7}}}}], 0x1c) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="06e1321c2e59ea4e2080c0050a8dcf1bc030d2209f00000000000004917cae5e739c2eeb3a21e7f61397d6fe77"]) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000000409"], 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x80) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ioperm(0x0, 0x2, 0x7e) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) mmap(&(0x7f0000433000/0x4000)=nil, 0x4000, 0x3000004, 0x40010, r2, 0xfb611000) 3.312935657s ago: executing program 3 (id=1238): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYRESOCT=r1, @ANYRES16=r1, @ANYRESDEC=r2]) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$iommufd(0xffffffffffffff9c, 0x0, 0x357300, 0x0) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800005, 0x11, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) eventfd2(0x9, 0x80000) io_setup(0x4, &(0x7f00000014c0)=0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r4, 0x1, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x161) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r6) 2.358359739s ago: executing program 1 (id=1239): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000101c0)={'ipvlan0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000040)={@mcast2, r2}, 0x14) (async, rerun: 64) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (rerun: 64) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x2100, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x3, @fixed}, 0xe) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) r5 = dup(r4) fallocate(r5, 0x10, 0x0, 0x70000) 2.303989603s ago: executing program 4 (id=1240): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) rename(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00') connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000200)={0x1, 0x200, 0x3}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000cc0)="0dda2dfa03009ffadfa4bfb48c76fb296526ae98655ee4c429d1f245af4d9bcc0b787eb0619e69f27ab98c3754b47c0b61fc44d54945aa0179444eb7dc989632", 0x40}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg$can_j1939(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/43, 0x2b}, {&(0x7f0000000340)=""/44, 0x2c}], 0x2}, 0x2061) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r6, 0xc048aeca, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000001c0)=0x2, 0x4) close(0xffffffffffffffff) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={[{@redirect_dir_follow}, {@userxattr}, {@nfs_export_on}]}) setgroups(0x9, &(0x7f0000000800)=[0xee01, 0xee01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x1, 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x1805c61, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000000", @ANYRESDEC=r1, @ANYBLOB="00000000000000001c001a801800048014000a8008"], 0x3c}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) 1.13120358s ago: executing program 0 (id=1241): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x48, 0x600}, [@IFLA_MTU={0x8, 0x4, 0x60}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x7}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_LINK={0x8}]}}}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'ip6erspan0\x00'}, {0x14, 0x35, 'netdevsim0\x00'}]}]}, 0x7c}}, 0x0) 946.754154ms ago: executing program 3 (id=1242): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000240)='kfree\x00', r0}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18}, './file0\x00'}) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x578, [0x0, 0x20000380, 0x200003b0, 0x200003e0], 0x0, &(0x7f0000000000), &(0x7f0000000380)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0x2, 0x2, [{0x0, 0x0, 0x88e5, 'batadv0\x00', 'dvmrp0\x00', 'veth1_to_bond\x00', 'bridge_slave_1\x00', @remote, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], @multicast, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], 0xa6, 0xa6, 0xde, [@mac={{'mac\x00', 0x0, 0x10}, {{@random="b56ec2aa6ad0", 0x1}}}], [], @common=@dnat={'dnat\x00', 0x10, {{@multicast}}}}, {0x5, 0x1, 0xf7, 'ip6gre0\x00', 'veth1_to_bridge\x00', 'veth0_vlan\x00', 'veth1_vlan\x00', @empty, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], @local, [0xff, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x4, 0x8, 0x3, 0x1, 0x0, "403842343ffe2bd0574951c18f1ab1463eb7ce51f3148c8c0f633e8e5704f690a04aa7ebf9bba58a373a6615135329f04cee62840a1f4032fc44be97020d1074"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x2, [{0x3, 0x2, 0x9000, 'veth0_macvtap\x00', 'ip6erspan0\x00', 'team_slave_1\x00', 'pimreg0\x00', @local, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], @remote, [0xff, 0xff, 0xff, 0x0, 0xff], 0xde, 0x15e, 0x18e, [@owner={{'owner\x00', 0x0, 0x18}, {{0x0, 0xffffffffffffffff, 0xee00, 0x0, 0x0, 0x1}}}, @m802_3={{'802_3\x00', 0x0, 0x8}, {{0x2, 0x400, 0x1, 0x1}}}], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x1, 'syz1\x00'}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0xfff8}}}}, {0x5, 0x14, 0x201, 'gre0\x00', 'pimreg1\x00', 'veth0\x00', 'syz_tun\x00', @random="49471f46039a", [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @multicast, [0xff, 0xff, 0xff, 0xff], 0xee, 0xee, 0x166, [@helper={{'helper\x00', 0x0, 0x28}, {{0x1, 'snmp_trap\x00'}}}, @connlabel={{'connlabel\x00', 0x0, 0x8}, {{0x1}}}], [], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x2, 0x100, 0x5, 0x1, 0x0, "22dc40963ed78ce8be23a611211aca2107867a2aa8009d5326044430bf63da1c6904ee5dde5aa99b96a4014ba2813e6e8a5685f6441ec4fab3d4b02115f9f617"}}}}]}]}, 0x5f0) (async) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x578, [0x0, 0x20000380, 0x200003b0, 0x200003e0], 0x0, &(0x7f0000000000), &(0x7f0000000380)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0x2, 0x2, [{0x0, 0x0, 0x88e5, 'batadv0\x00', 'dvmrp0\x00', 'veth1_to_bond\x00', 'bridge_slave_1\x00', @remote, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], @multicast, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], 0xa6, 0xa6, 0xde, [@mac={{'mac\x00', 0x0, 0x10}, {{@random="b56ec2aa6ad0", 0x1}}}], [], @common=@dnat={'dnat\x00', 0x10, {{@multicast}}}}, {0x5, 0x1, 0xf7, 'ip6gre0\x00', 'veth1_to_bridge\x00', 'veth0_vlan\x00', 'veth1_vlan\x00', @empty, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], @local, [0xff, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x4, 0x8, 0x3, 0x1, 0x0, "403842343ffe2bd0574951c18f1ab1463eb7ce51f3148c8c0f633e8e5704f690a04aa7ebf9bba58a373a6615135329f04cee62840a1f4032fc44be97020d1074"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x2, [{0x3, 0x2, 0x9000, 'veth0_macvtap\x00', 'ip6erspan0\x00', 'team_slave_1\x00', 'pimreg0\x00', @local, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], @remote, [0xff, 0xff, 0xff, 0x0, 0xff], 0xde, 0x15e, 0x18e, [@owner={{'owner\x00', 0x0, 0x18}, {{0x0, 0xffffffffffffffff, 0xee00, 0x0, 0x0, 0x1}}}, @m802_3={{'802_3\x00', 0x0, 0x8}, {{0x2, 0x400, 0x1, 0x1}}}], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x1, 'syz1\x00'}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0xfff8}}}}, {0x5, 0x14, 0x201, 'gre0\x00', 'pimreg1\x00', 'veth0\x00', 'syz_tun\x00', @random="49471f46039a", [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @multicast, [0xff, 0xff, 0xff, 0xff], 0xee, 0xee, 0x166, [@helper={{'helper\x00', 0x0, 0x28}, {{0x1, 'snmp_trap\x00'}}}, @connlabel={{'connlabel\x00', 0x0, 0x8}, {{0x1}}}], [], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x2, 0x100, 0x5, 0x1, 0x0, "22dc40963ed78ce8be23a611211aca2107867a2aa8009d5326044430bf63da1c6904ee5dde5aa99b96a4014ba2813e6e8a5685f6441ec4fab3d4b02115f9f617"}}}}]}]}, 0x5f0) delete_module(0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x0, 0x4e21, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x0, 0x4e21, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000140)=[{r3, 0x4008}], 0x1, 0x0, 0x0, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x70, 0x40000}, 0x20) io_setup(0x222, &(0x7f0000000180)=0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) (async) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r7, 0x0) (async) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000050000009500000000000000e6923b33b19a35d427f5e67496beeea639e2b7f2c14e7f99b7ecf39c93069d27164b045baa56262b38e43704f9b69a7a628f93ee62718c1331b374a2452f29c71f8e3e27cb5734add259f2c4045905f8a45ac0bcf54572565c58b6bc51b84b04df5211835b93aa87b5b652adc617b8d2831beec0b5c4bb871cdd0350b6121829a7e3576e9a0a486e0a97a0613343c8de3bec27990cdeb3bc92c681f68983ad2c81ef5a875b67598e7066cfd5b9a146c7204013ceb14c8297cd192f43aac1624b15d6a457d4dcf94f41e7526f1cf70961f9f3b48ca6de7b2fbc7a7f3e8f0d0924cb2f957bf60d51406d3a258af3d58e0380ae328a63434a74d406020076040044240835f3668a6896dbc8fcea250f4b0c297986b8acea238698844e0675d242a7d3acfd1ac46d85c8b23ad8279643d5e3e00a2d319882945b3d0aa8e9a54cbd1aeb90c55b295b9d6021217c70fc7cedba84dd598b53c8521f149b33cb95cae5df2ebf8b7103803aaaa8e7d68dcdfaa835bdb5a23bdbff8362d41a1126043b88f00fdc17ccd274999304c1dff6f4f4f8b219b418e09cf2c0e0cb2f9ad957fd859564f7ff6f28fb3b2d3a97df6f6f54c4ea794102494e1d56e88c1439ea086b1acc9fbc26c315246741cb722188846b1175178f6fa467be03e9f7cff922a1c78bbb28bdf7816bb27db7e86d988213dffd7f012721f2ec81ace497eeca313214f1d8c89ec824b5907e3ab7ec1d387cffbdb4d79ccb3c2e29275da223f5fa52525145684e10798d3de43fa175137b205fc7ccf3a4d0a237bf80bfd9acf1be2a56eecbbce4bc4708db946b1a1b989dc6b146853fea8deab55df9eaf759ffd08ff483103720ebfbc53be6a85fc1b610ba8e3ecb8a7351cf218073aecf3b631837846b703e7772626376aa84290a8b7b4f3472976f6688cb230ccd762d00fcf810ca0c3d20ccdcac10fe09cc5fccf31d9e16e899d32dee701d2b6fff95c1328f249878e6dde3ed840d4b5fb05cc1399dd151f59e53712285d5e9c4dba7e1eb9ff174487c74454f8f5e996e600c5740d21d7ac237d62bee06c1834b04e29c8ee7a5a56a386eca1b136904aeca3cbb85c7278fe202d286d45461d8c9e74654b95b8ebdfa7d9bbe7d5cc269d368efe9056060de9bcaa714bcc8429b623dd78d4fd6ebfaadb7bd35a3ff3da98e2164c8cc1d0d7017b8a7a0fef4f802d538e5bd40daba01aa97fa689d928a6e52e1b21c"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000500)="84"}, 0x50) io_submit(r6, 0x2, &(0x7f0000001500)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f0000000280)="1c", 0x1}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0, 0x0, 0x3}]) 909.474989ms ago: executing program 0 (id=1243): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}], 0x0, 0x0, 0x0, 0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x5]}, 0x8, 0x800) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_int(r2, 0x29, 0x46, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000300)=@nat={'nat\x00', 0x1b, 0x5, 0x530, 0x490, 0x138, 0xffffffff, 0x138, 0x3a8, 0x5e0, 0x5e0, 0xffffffff, 0x5e0, 0x5e0, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x40, 0x1, 0x0, [0x0, 0x1, 0x6, 0x9, 0x5, 0x6, 0x200, 0x4af, 0xfff5, 0xf, 0x9, 0x1, 0x8000, 0x3ff, 0xbc2, 0x4], 0x3}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv4=@multicast2, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1d}, @gre_key=0x7, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x12, @ipv4=@multicast2, @ipv4=@broadcast, @gre_key=0x100, @icmp_id=0x64}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x10, "26880d374c8c6720733fd7945732e566b6c038b821e78b9123b379763641"}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xffffff00, 0xff, 0xff000000], [0x0, 0x0, 0xffffff00, 0xffffffff], 'netdevsim0\x00', 'team_slave_1\x00', {}, {0xff}, 0x620b664d4c397266, 0x5, 0x3, 0x2a}, 0x0, 0x108, 0x150, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x7, 0x2, 0x1}}, @common=@srh={{0x30}, {0x87, 0x9, 0x10, 0x0, 0x3, 0x185, 0x2180}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv6=@loopback, @ipv4=@broadcast, @port=0x4e21, @port=0x4e24}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="a00000001a00010000000000000000001c1400000000000000000000840013000000000000000000000000000000000000000400000f0f0000000100000000000000000000000000000648bff8e24cf100000000000000000000000008000000000c001a0007000000000000000000000400000000000000000000000000000000304b1796a16c13c20000000100"/167], 0xa0}}, 0x0) 238.081519ms ago: executing program 3 (id=1244): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) pipe2(&(0x7f0000001440)={0xffffffffffffffff}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x48010}, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002b36065acbe161f90a001000e20d05930bf381ce254e206550c0e4b75a6cb3c8b63070bc515f2f9604fd485b611754d02e9b90f40ed6fddb558579f8fe00fb1d9c0b5c026dd5737737beefb733f46fc183421911a391b2b3ed4eb6aa7dc5e4ab4d296e7497d107a4ea5013e77798e52ed0def7730d609d264f63"], 0x14}}, 0x4010) r4 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x900}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) rseq(0x0, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702500000000fe1f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x70000000, 0x0, 0x0, 0x0, 0x0, 0xd80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x206000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 234.944055ms ago: executing program 4 (id=1245): r0 = syz_usb_connect$uac1(0x3, 0x103, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf1, 0x3, 0x1, 0x80, 0x10, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x1}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x100, 0x3, 0x71, 0x8, 0x90, 0xe}, @processing_unit={0x8, 0x24, 0x7, 0x2, 0x6, 0x4, "dd"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xed, 0x10, 0x4}, @as_header={0x7, 0x24, 0x1, 0x58, 0x7}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xc, 0x3, 0xaf, 0x7f, "16d4f034e359778d"}, @as_header={0x7, 0x24, 0x1, 0xe7, 0x89, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x8, 0x40, 0x1001}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x6, 0x6, 0xc, "87cb"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xfe, 0x7, 0x3, {0x7, 0x25, 0x1, 0x3, 0x24, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x1, 0xb1, 0xd8, "7380", "a290"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xd4, 0x3, 0x7f, 0x2, "d93efd26ffaa7cbf"}, @as_header={0x7, 0x24, 0x1, 0xf7, 0xa3, 0x2}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x2, 0xd8a, 0x1, "782c0eafb8c475ab36"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x200, 0xda, 0x80, "3698ff849179a527ad"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x9, 0x74, 0x9, {0x7, 0x25, 0x1, 0x2, 0x5, 0xf5}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0xb, 0xa, 0xcf, 0xff, 0x6}, 0x4a, &(0x7f0000000100)={0x5, 0xf, 0x4a, 0x5, [@ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x7, 0x0, 0x8, [0xff0030, 0xffc0cf, 0x30, 0xff000f, 0xff3fa0, 0xc000]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x0, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "0d2f899023d080df5bb3e09d871be091"}]}, 0x8, [{0x3c, &(0x7f0000000180)=@string={0x3c, 0x3, "0db40dd4c02da15672ad9b2ce9a7907ecbfda1e7c55e7b2018afa033750fd2a7864215e9c68c186c13a6c4d2b9171b8278b4dcdbec7ce045580b"}}, {0x60, &(0x7f0000000500)=@string={0x60, 0x3, "f3fb5c1555d7e60f62cf840c474b58bbba6bdcb9049144ab7b439e6dd4b64b2ed993e18c5a5447e04e7d66d78d5b1c96d0537a457cfb74c537284027ba0cc4e795f129b09fa0970bfad4a542f940d2a47ca1cbdbec1aff0bfa098d97ab4f"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x436}}, {0xef, &(0x7f00000005c0)=@string={0xef, 0x3, "781113653cbaf37704d6e85e06ffad0192331eccdbe4daef79711dcfad8d19425e4f584d7e430a8682f959b0d8322727992a405068b7865f201edfff5fc4c0bdfd70d77e2d6064125cbb5ebcc36fdc315ff9ebadf1c1ba8ba253dcd3aff829ac6b878fee2c086ffde18bc912daaaa0eec8ecf9d837aa2960e0adc6093e555f15d69fdef2ce32bf8ffeadd7060c26da0931d241eaf4adf4032cb7125a9f3cc1a53ec664a6df279b6e1ea650131e11884981f282378d48668fae3e0cb7cb1c4d9ae04374e803b4b8ede790ed4765e0f70cfe3bb6e9f78847cfd75ddb3da965adc233c4703970a4caeea090b670f6"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x3409}}, {0x4b, &(0x7f0000000700)=@string={0x4b, 0x3, "e66598088f144e090049ec5e211aff8e9a394977dc9dc54000907d8c286f9dff7173c065f63caef9d6604fec693b3f897cdb0fbcb2526858194bd548f27cdf19573cff1e133e9c7a6f"}}, {0x3c, &(0x7f0000000780)=@string={0x3c, 0x3, "601167a20388541b01f4dc80fb2c6fdd7d7bc3b8b33065573544810354e6c3549e3bc54b9f0ec36ed9b85cae65a08f6e150e2dc95f86eddc2957"}}]}) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, &(0x7f0000000840)={0x40, 0x21, 0x4, {0x4, 0xd, "e5d6"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x412}}, &(0x7f00000008c0)={0x0, 0xf, 0x93, {0x5, 0xf, 0x93, 0x2, [@generic={0x7e, 0x10, 0x4, "0ec42dd45fe097b0e1bb1d53de31465233ecdba843dfd4f16990bf24756b9a12b558450776749c87d8e4cbedce5652468f89f6ced6ae1c05b37886bbdfb852d26b6f3c23aac3dabb8301703f1a3f896334ccb91fc687a0183f7a906d0c3ee34bbd503feaf6ddb40a58ec77d5ff388cfaade11af48e91572a1b2b17"}, @ssp_cap={0x10, 0x10, 0xa, 0x99, 0x1, 0x654, 0xf, 0x78c, [0x0]}]}}, &(0x7f0000000980)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x10, 0x7, 0xff, "41ae2f2a", "2f1779f9"}}, &(0x7f00000009c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x18, 0x81, 0x6, 0xfb, 0x6, 0x2}}}, &(0x7f0000000ec0)={0x84, &(0x7f0000000a40)={0x40, 0x31, 0x82, "4bbdb58ba5b09e68eb0803e86bc7b08e29c3eef41336f8edc0aff03569acf87aa6b8020e4d93c94fd0273cb347a80b6788db6d20735aa3eabd340df2ae9c0a7f87106e44d1bddfb925b53d7ddbdd37f9a18dad4920784f18f57baeb5292c8d81b78e20a3467f607269dabc1e79f845a7ae057ee6688bcf3bd8c6179abe29c8c4125f"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x11}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000b80)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000bc0)={0x20, 0x0, 0x8, {0x200, 0x20, [0xf0f]}}, &(0x7f0000000c00)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000c40)={0x40, 0x9, 0x1, 0xd}, &(0x7f0000000c80)={0x40, 0xb, 0x2, "19a9"}, &(0x7f0000000cc0)={0x40, 0xf, 0x2, 0xfdc2}, &(0x7f0000000d00)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000d40)={0x40, 0x17, 0x6, @random="c381c37efb74"}, &(0x7f0000000d80)={0x40, 0x19, 0x2, "a676"}, &(0x7f0000000dc0)={0x40, 0x1a, 0x2, 0xc7f}, &(0x7f0000000e00)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000e40)={0x40, 0x1e, 0x1, 0xa}, &(0x7f0000000e80)={0x40, 0x21, 0x1, 0x1}}) socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="71e67a15", 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000680)='net/tcp6\x00') preadv2(r2, &(0x7f0000000380)=[{&(0x7f0000000240)=""/151, 0x97}], 0x1, 0x6, 0x9, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000f80)=[@timestamp, @timestamp, @mss={0x2, 0x6}, @sack_perm, @mss={0x2, 0x7fffffff}], 0x5) r3 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000005740)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9c3b26fccd5de9f}], 0x1, 0x800) io_setup(0xff, &(0x7f0000000380)=0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fstat(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r10) sendmmsg$unix(r7, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {r5, r8}}}], 0x20, 0x4008010}}], 0x1, 0x1) r11 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000085bec140ca0804018f32000000010902"], 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x256f16877c8c0da9, 0x0) syz_usb_control_io$hid(r11, &(0x7f00000010c0)={0x24, &(0x7f0000000fc0)={0x0, 0x0, 0x17, {0x17, 0xc, "047d74f400c009c6022167b4044979df582062a6b9"}}, &(0x7f0000001000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2409}}, &(0x7f0000001040)={0x0, 0x22, 0x19, {[@local=@item_4={0x3, 0x2, 0x4, "e2a62741"}, @local=@item_012={0x0, 0x2, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "3ebfbfc5"}, @local=@item_012={0x2, 0x2, 0x1, "5287"}, @local=@item_012={0x2, 0x2, 0xa, 'D9'}, @main=@item_012={0x0, 0x0, 0xc}, @local=@item_012={0x1, 0x2, 0x2, '\r'}, @global=@item_4={0x3, 0x1, 0x6, "8a697971"}]}}, &(0x7f0000001080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0xb06}}}}, &(0x7f0000001280)={0x2c, &(0x7f0000001100)={0x20, 0x10, 0x31, "1040dc9bc6c14871fe597d0ffd6a48f49a5a7cde38b1393fcde4358832fcbdbc3dac414f3156141d7a4013296a762885ad"}, &(0x7f0000001140)={0x0, 0xa, 0x1, 0xf1}, &(0x7f0000001180)={0x0, 0x8, 0x1, 0x6d}, &(0x7f00000011c0)={0x20, 0x1, 0x4c, "52346e745b1856943808893f6f5f6c336ab270c584fe98e9ea68aaee45d6e1b4fa20145e935b7a19802b6ca6aa177a507f2f78802735533e096e0a0bc64f3cca7fcc2bcfe776ba0fc2897e6b"}, &(0x7f0000001240)={0x20, 0x3, 0x1, 0x81}}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x2000000000000000, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0xfffffffffffffffe}, 0x0, 0x0) io_submit(r4, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r3, &(0x7f0000000340), 0xfdef}]) 158.80212ms ago: executing program 1 (id=1246): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) (async, rerun: 32) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) (rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000540)="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", 0x202) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) (async) sendto$inet6(r0, &(0x7f00000002c0)="ba", 0x1, 0x40, &(0x7f0000000140)={0xa, 0x4e23, 0x80, @loopback, 0xffffffff}, 0x1c) 157.604919ms ago: executing program 0 (id=1247): r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2800, 0x40, 0x4}, 0x18) r1 = io_uring_setup(0x6d18, &(0x7f0000000080)={0x0, 0x66d8, 0x800, 0x1, 0x17f, 0x0, r0}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = getpgrp(0x0) timer_create(0x6, &(0x7f0000000140)={0x0, 0x2a, 0x2, @tid=r3}, &(0x7f0000000180)) socket$can_raw(0x1d, 0x3, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20200, 0x0) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000200)) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x2001c0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x1d, r6}, 0x10, &(0x7f0000000340)={&(0x7f0000000300)=@can={{0x4, 0x1}, 0x5, 0x1, 0x0, 0x0, "c6d768aaf26530ed"}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x50) inotify_init() socket$inet_icmp_raw(0x2, 0x3, 0x1) sched_setscheduler(r3, 0x5, &(0x7f00000003c0)=0x3) socket$netlink(0x10, 0x3, 0x5) read$FUSE(r0, &(0x7f0000000400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r5, &(0x7f0000002440)={0x18, 0xfffffffffffffff5, r7, {0x42b}}, 0x18) r8 = socket$unix(0x1, 0x5, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000002480), 0x8) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000002580)={&(0x7f00000024c0), 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x20, 0x6, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0xc880) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r9, &(0x7f0000002a80)={&(0x7f00000025c0), 0xc, &(0x7f0000002a40)={&(0x7f0000002600)={0x430, 0x3f3, 0x20, 0x70bd27, 0x25dfdbfe, {0x10, 0x3, 0x39, [0x4ae, 0x9, 0x81, 0x1800000, 0x7, 0x7bd, 0x1, 0x401, 0x9, 0x7, 0x5a401245, 0x1, 0xfdc, 0x44, 0xb, 0xcc9c, 0x8, 0xa, 0xffffff00, 0x1, 0x8, 0x8, 0x1, 0x4, 0x1, 0x7, 0x5, 0x1, 0x4, 0x4, 0xff, 0x5, 0x0, 0xff, 0x8, 0x9, 0x9, 0x7f, 0x0, 0x4, 0xb7, 0x7, 0x6, 0x0, 0x7, 0x0, 0xd, 0x100, 0xc, 0x3, 0x316, 0x6, 0xf, 0x3, 0xc4, 0xd, 0xfffffffa, 0x6, 0x2, 0x7, 0x79, 0xcb, 0x8, 0x80], [0xf, 0x21, 0x4, 0x9, 0x3a, 0xb1e4, 0xe, 0x6, 0xf07, 0xc2, 0x5, 0x800, 0x8, 0x1, 0x4, 0x3, 0x5, 0xfff, 0xf09, 0x2, 0x1000000, 0x7, 0x2, 0x8, 0x5, 0x4, 0x3, 0x200, 0x100, 0x0, 0xfffffff7, 0x4, 0xfff, 0x2fc8, 0xa7f, 0x7, 0x0, 0x1000, 0x6, 0x8, 0x1, 0xa00000, 0xc0000, 0x1000, 0x5, 0xb, 0x4343, 0x0, 0xf4, 0x80000000, 0x6, 0xe2, 0x2, 0xfffffffb, 0x8, 0x8, 0x9, 0x4, 0x7, 0x180, 0x2, 0x4, 0x3, 0xfffffffa], [0xe0e, 0x9, 0x100, 0x564a, 0x6, 0xe, 0x7ff, 0x4, 0x80000000, 0x63170511, 0x5, 0x8, 0x8, 0x80000000, 0x9, 0x9, 0xfffffffc, 0xfffffff7, 0x2, 0x6, 0x6, 0x10001, 0xb, 0x9, 0x2, 0xffff, 0x4f83, 0x2c68, 0x914, 0x8000, 0xf1b, 0xb, 0x0, 0x4, 0x6, 0x9, 0x401, 0x7, 0x42, 0x2, 0xffffffff, 0x32f9, 0xfffffffd, 0x0, 0x6, 0x7f, 0x5, 0x1ff, 0x6, 0x3371c4bb, 0x4f2, 0x9, 0x3, 0x9, 0x5, 0x401, 0x6, 0x1, 0x8001, 0x3, 0x74, 0x3d3, 0x100, 0x3], [0xa8, 0x0, 0x81, 0x8001, 0x584, 0x8, 0x5, 0x9, 0x3, 0x956c630, 0x7fffffff, 0xffff, 0x9, 0x9, 0x1, 0x2, 0xffff, 0x3, 0xd209, 0x6, 0x0, 0x343, 0x3a5054e, 0x2b, 0x8, 0x0, 0xfffffde6, 0x3, 0x2, 0x4, 0x2, 0x8, 0x400, 0x2, 0x8, 0x3eca, 0xe03be674, 0xfffffc01, 0xcd6, 0x8, 0x3800000, 0x7, 0xc550, 0x2, 0x9, 0x6, 0x200, 0x8, 0x9, 0xff, 0x1, 0xfffffffc, 0x6, 0x9, 0x6, 0x8, 0x8, 0x519, 0x4f, 0x9c, 0xa, 0x1, 0xfffffff9, 0x9], 0xe, ['/dev/kvm\x00', '-\x00', '!-\x00']}, ["", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x8000}, 0x40) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000002ac0)=0x2be) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002b00), 0x2b8000, 0x0) syz_open_procfs(r3, &(0x7f0000002b40)='net/unix\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000002b80)) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r8, 0x8008f511, &(0x7f0000002bc0)) 0s ago: executing program 1 (id=1248): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)={0x1c, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x8, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x5b, &(0x7f0000000040)}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={r6, 0x9, 0x30}, &(0x7f00000001c0)=0xc) kernel console output (not intermixed with test programs): 389.307761][ T8765] ? mas_find+0x8c0/0xbb0 [ 389.307783][ T8765] mmap_region+0xa32/0x2f80 [ 389.307810][ T8765] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 389.307833][ T8765] ? do_raw_spin_unlock+0x13c/0x8b0 [ 389.307855][ T8765] ? __pfx_mmap_region+0x10/0x10 [ 389.307872][ T8765] ? __schedule+0x1a75/0x4c40 [ 389.307920][ T8765] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 389.307941][ T8765] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 389.307959][ T8765] ? arch_get_unmapped_area_topdown+0x28e/0xc50 [ 389.307985][ T8765] ? irqentry_exit+0x63/0x90 [ 389.308003][ T8765] ? lockdep_hardirqs_on+0x99/0x150 [ 389.308028][ T8765] ? security_mmap_addr+0xdd/0x250 [ 389.308052][ T8765] ? __pfx___sanitizer_cov_trace_const_cmp4+0x10/0x10 [ 389.308074][ T8765] ? shmem_mapping+0xd/0x50 [ 389.308098][ T8765] do_mmap+0xecc/0x13a0 [ 389.308126][ T8765] ? __pfx_do_mmap+0x10/0x10 [ 389.308145][ T8765] ? down_write_killable+0x19e/0x260 [ 389.308168][ T8765] ? vm_mmap_pgoff+0x182/0x430 [ 389.308191][ T8765] ? __pfx_down_write_killable+0x10/0x10 [ 389.308219][ T8765] vm_mmap_pgoff+0x214/0x430 [ 389.308249][ T8765] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 389.308272][ T8765] ? __fget_files+0x2a/0x410 [ 389.308293][ T8765] ? __fget_files+0x395/0x410 [ 389.308311][ T8765] ? __fget_files+0x2a/0x410 [ 389.308333][ T8765] ksys_mmap_pgoff+0x4eb/0x720 [ 389.308355][ T8765] ? __x64_sys_mmap+0x7f/0x140 [ 389.308376][ T8765] do_syscall_64+0xf3/0x230 [ 389.308397][ T8765] ? clear_bhb_loop+0x35/0x90 [ 389.308430][ T8765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.308451][ T8765] RIP: 0033:0x7f828b58cde9 [ 389.308465][ T8765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.308477][ T8765] RSP: 002b:00007f828c49c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 389.308492][ T8765] RAX: ffffffffffffffda RBX: 00007f828b7a6080 RCX: 00007f828b58cde9 [ 389.308504][ T8765] RDX: 06d7069a227a0467 RSI: 0000000000004000 RDI: 0000200000ffc000 [ 389.308514][ T8765] RBP: 00007f828c49c090 R08: 0000000000000004 R09: 00000000cc9bd000 [ 389.308524][ T8765] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 389.308533][ T8765] R13: 0000000000000000 R14: 00007f828b7a6080 R15: 00007ffe2ef90ad8 [ 389.308553][ T8765] [ 389.646264][ C0] vkms_vblank_simulate: vblank timer overrun [ 390.075815][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 390.085851][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 390.098922][ T8] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 390.108063][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.137836][ T5896] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 390.156504][ T8] usb 3-1: config 0 descriptor?? [ 390.298336][ T5870] usb 2-1: device descriptor read/8, error -71 [ 390.304752][ T5896] usb 4-1: Invalid ep0 maxpacket: 32 [ 390.439613][ T5896] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 390.598943][ T5896] usb 4-1: Invalid ep0 maxpacket: 32 [ 390.615166][ T8] plantronics 0003:047F:FFFF.000F: ignoring exceeding usage max [ 390.633626][ T5896] usb usb4-port1: attempt power cycle [ 390.661495][ T8] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 390.999172][ T5896] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 391.062375][ T5896] usb 4-1: Invalid ep0 maxpacket: 32 [ 391.108959][ T8] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 391.162340][ T8] usb 3-1: USB disconnect, device number 20 [ 391.198914][ T5896] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 391.250568][ T5896] usb 4-1: Invalid ep0 maxpacket: 32 [ 391.274915][ T5896] usb usb4-port1: unable to enumerate USB device [ 391.434244][ T8776] syz.0.764 (8776) used obsolete PPPIOCDETACH ioctl [ 391.679456][ T8778] lo speed is unknown, defaulting to 1000 [ 392.097150][ T8783] netlink: 20 bytes leftover after parsing attributes in process `syz.2.766'. [ 393.518468][ T8779] overlayfs: conflicting options: metacopy=off,verity=require [ 393.528963][ T8778] overlayfs: conflicting options: metacopy=off,verity=require [ 393.748921][ T46] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 393.948871][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 393.967640][ T46] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 393.986679][ T46] usb 5-1: config 0 has no interface number 0 [ 394.005619][ T46] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.024762][ T46] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.034928][ T46] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 394.050948][ T46] usb 5-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 394.075699][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.122929][ T46] usb 5-1: config 0 descriptor?? [ 394.425418][ T46] usbhid 5-1:0.1: can't add hid device: -71 [ 394.447274][ T46] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 394.480966][ T46] usb 5-1: USB disconnect, device number 24 [ 395.118946][ T5896] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 395.130373][ T5902] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 395.298636][ T8819] netlink: 'syz.2.777': attribute type 1 has an invalid length. [ 395.306500][ T8819] netlink: 134708 bytes leftover after parsing attributes in process `syz.2.777'. [ 395.361316][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 396.047310][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 396.071315][ T5902] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 396.090911][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 396.101633][ T5902] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 396.121974][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 396.135576][ T5902] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 396.157755][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.166058][ T5896] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 396.220275][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.232286][ T8812] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 396.309584][ T8825] netlink: 20 bytes leftover after parsing attributes in process `syz.4.778'. [ 396.791805][ T5902] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 396.835549][ T5896] usb 4-1: config 0 descriptor?? [ 396.927002][ T29] audit: type=1326 audit(1738865458.449:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8829 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75158cde9 code=0x7ffc0000 [ 397.072869][ T29] audit: type=1326 audit(1738865458.449:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8829 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75158cde9 code=0x7ffc0000 [ 397.151583][ T29] audit: type=1326 audit(1738865458.459:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8829 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75158cde9 code=0x7ffc0000 [ 397.212762][ T8] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 397.226998][ T29] audit: type=1326 audit(1738865458.459:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8829 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fb75158cde9 code=0x7ffc0000 [ 397.227223][ T5902] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 397.271478][ T5896] plantronics 0003:047F:FFFF.0010: ignoring exceeding usage max [ 397.272760][ T29] audit: type=1326 audit(1738865458.459:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8829 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75158cde9 code=0x7ffc0000 [ 397.306912][ T5896] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 397.310570][ T29] audit: type=1326 audit(1738865458.459:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8829 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb75158cde9 code=0x7ffc0000 [ 397.337193][ T29] audit: type=1326 audit(1738865458.459:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8829 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75158cde9 code=0x7ffc0000 [ 397.359626][ T29] audit: type=1326 audit(1738865458.459:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8829 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75158cde9 code=0x7ffc0000 [ 397.360385][ T5896] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 397.394910][ T29] audit: type=1326 audit(1738865458.459:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8829 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75158cde9 code=0x7ffc0000 [ 397.427217][ T29] audit: type=1326 audit(1738865458.459:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8829 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb75158cde9 code=0x7ffc0000 [ 397.451711][ T8] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 397.463034][ T5902] usb 3-1: device descriptor read/64, error -71 [ 397.473173][ T8] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.489543][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 397.497449][ T8] usb 5-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 397.507912][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.522266][ T8] usb 5-1: config 0 descriptor?? [ 397.709053][ T5902] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 397.751356][ T8] uclogic 0003:28BD:0074.0011: interface is invalid, ignoring [ 397.849375][ T5902] usb 3-1: device descriptor read/64, error -71 [ 397.898646][ T25] usb 2-1: USB disconnect, device number 26 [ 397.958429][ T5896] usb 5-1: USB disconnect, device number 25 [ 397.992959][ T5902] usb usb3-port1: attempt power cycle [ 398.358965][ T5902] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 398.390096][ T5902] usb 3-1: device descriptor read/8, error -71 [ 399.073941][ T5902] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 399.109480][ T5902] usb 3-1: device descriptor read/8, error -71 [ 399.219170][ T5902] usb usb3-port1: unable to enumerate USB device [ 399.443407][ T8845] ======================================================= [ 399.443407][ T8845] WARNING: The mand mount option has been deprecated and [ 399.443407][ T8845] and is ignored by this kernel. Remove the mand [ 399.443407][ T8845] option from the mount to silence this warning. [ 399.443407][ T8845] ======================================================= [ 399.496821][ T8846] loop6: detected capacity change from 0 to 524287999 [ 399.518998][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 399.541196][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 399.551628][ T3488] loop: Write error at byte offset 1, length 4096. [ 399.574295][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 399.584050][ C1] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 399.592511][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 399.601659][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 399.628782][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 399.638000][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 399.780167][ T25] usb 4-1: USB disconnect, device number 23 [ 399.839657][ T46] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 400.004781][ T8857] netlink: 'syz.2.788': attribute type 2 has an invalid length. [ 400.021460][ T8857] netlink: 'syz.2.788': attribute type 1 has an invalid length. [ 400.452631][ T8869] netlink: 20 bytes leftover after parsing attributes in process `syz.4.791'. [ 401.837686][ T8878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.794'. [ 401.853192][ T8879] input: syz0 as /devices/virtual/input/input7 [ 402.533059][ T8891] netlink: 228 bytes leftover after parsing attributes in process `syz.0.799'. [ 403.031826][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 403.031845][ T29] audit: type=1326 audit(1738865464.549:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8890 comm="syz.0.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f828b58cde9 code=0x7ffc0000 [ 403.085457][ T29] audit: type=1326 audit(1738865464.549:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8890 comm="syz.0.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f828b58b750 code=0x7ffc0000 [ 403.269142][ T29] audit: type=1326 audit(1738865464.549:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8890 comm="syz.0.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f828b58e617 code=0x7ffc0000 [ 404.167833][ T29] audit: type=1326 audit(1738865464.549:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8890 comm="syz.0.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f828b58cde9 code=0x7ffc0000 [ 404.218862][ T5902] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 404.304376][ T29] audit: type=1326 audit(1738865464.589:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8890 comm="syz.0.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f828b58e617 code=0x7ffc0000 [ 404.688661][ T29] audit: type=1326 audit(1738865464.589:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8890 comm="syz.0.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f828b58ba4a code=0x7ffc0000 [ 404.731023][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.736638][ T29] audit: type=1326 audit(1738865464.589:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8890 comm="syz.0.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f828b58cde9 code=0x7ffc0000 [ 404.764691][ T29] audit: type=1326 audit(1738865464.589:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8890 comm="syz.0.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f828b58cde9 code=0x7ffc0000 [ 404.794714][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.830570][ T29] audit: type=1326 audit(1738865464.589:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8890 comm="syz.0.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f828b58cde9 code=0x7ffc0000 [ 404.846871][ T5902] usb 3-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 404.864636][ T29] audit: type=1326 audit(1738865464.589:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8890 comm="syz.0.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f828b58cde9 code=0x7ffc0000 [ 404.900014][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.917561][ T5902] usb 3-1: config 0 descriptor?? [ 404.941561][ T8902] loop8: detected capacity change from 0 to 7 [ 404.964167][ T8902] Dev loop8: unable to read RDB block 7 [ 404.974089][ T8902] loop8: unable to read partition table [ 404.984596][ T8902] loop8: partition table beyond EOD, truncated [ 404.992922][ T8902] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 404.992922][ T8902] ) failed (rc=-5) [ 405.430541][ T5902] usbhid 3-1:0.0: can't add hid device: -71 [ 405.447359][ T5902] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 405.483445][ T5902] usb 3-1: USB disconnect, device number 26 [ 405.860413][ T8908] netlink: 20 bytes leftover after parsing attributes in process `syz.1.803'. [ 406.506288][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 406.702962][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 406.722991][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.760135][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.781812][ T9] usb 5-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 406.797841][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.849782][ T9] usb 5-1: config 0 descriptor?? [ 407.111857][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 407.163377][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 407.198326][ T9] usb 5-1: USB disconnect, device number 26 [ 407.501067][ T8935] lo speed is unknown, defaulting to 1000 [ 408.456097][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 408.623784][ T9] usb 3-1: config 0 has no interfaces? [ 408.624948][ T8947] loop8: detected capacity change from 0 to 7 [ 408.629822][ T9] usb 3-1: New USB device found, idVendor=08ca, idProduct=0104, bcdDevice=32.8f [ 408.649768][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.661203][ T9] usb 3-1: config 0 descriptor?? [ 408.670908][ T8947] Dev loop8: unable to read RDB block 7 [ 408.676575][ T8947] loop8: unable to read partition table [ 408.683230][ T8947] loop8: partition table beyond EOD, truncated [ 408.690028][ T8947] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 408.690028][ T8947] ) failed (rc=-5) [ 409.209819][ T8955] netlink: 20 bytes leftover after parsing attributes in process `syz.4.816'. [ 410.156042][ T8952] xt_bpf: check failed: parse error [ 410.412070][ T8958] No control pipe specified [ 411.616887][ T8963] syz.3.820: attempt to access beyond end of device [ 411.616887][ T8963] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 411.631381][ T8963] hpfs: hpfs_map_sector(): read error [ 411.645324][ T5896] usb 3-1: USB disconnect, device number 27 [ 411.652780][ T8968] autofs: Unknown parameter '0x0000000000000000' [ 411.839178][ T8037] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 411.876029][ T8973] netlink: 44 bytes leftover after parsing attributes in process `syz.2.821'. [ 412.028948][ T8037] usb 5-1: Using ep0 maxpacket: 16 [ 412.060554][ T8037] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.113534][ T8037] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.130092][ T8037] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 412.147963][ T8037] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 412.158623][ T8037] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.198228][ T8037] usb 5-1: config 0 descriptor?? [ 413.095665][ T8037] microsoft 0003:045E:07DA.0012: invalid report_count 37667 [ 413.104634][ T8037] microsoft 0003:045E:07DA.0012: item 0 2 1 9 parsing failed [ 413.134194][ T8037] microsoft 0003:045E:07DA.0012: parse failed [ 413.161700][ T8037] microsoft 0003:045E:07DA.0012: probe with driver microsoft failed with error -22 [ 413.299263][ T8037] usb 5-1: USB disconnect, device number 27 [ 414.098153][ T8996] netlink: 20 bytes leftover after parsing attributes in process `syz.2.827'. [ 414.776627][ T8999] netlink: 48 bytes leftover after parsing attributes in process `syz.4.828'. [ 414.817323][ T9000] netlink: 48 bytes leftover after parsing attributes in process `syz.4.828'. [ 415.175388][ T9005] macsec1: entered promiscuous mode [ 415.229465][ T9005] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 415.236682][ T9005] macsec1: entered allmulticast mode [ 415.308904][ T9005] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 415.400570][ T9008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.830'. [ 415.411593][ T9008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.830'. [ 415.608877][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 415.634952][ T9015] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 415.683894][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 415.683915][ T29] audit: type=1804 audit(1738865477.209:142): pid=9015 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.833" name="/newroot/163/file0/file0" dev="ramfs" ino=24503 res=1 errno=0 [ 417.312610][ T9022] Invalid source name [ 417.316756][ T9022] UBIFS error (pid: 9022): cannot open "./file0", error -22 [ 417.618245][ T9] usb 1-1: config 0 has no interfaces? [ 417.647857][ T9] usb 1-1: New USB device found, idVendor=08ca, idProduct=0104, bcdDevice=32.8f [ 418.291490][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.302035][ T9] usb 1-1: config 0 descriptor?? [ 418.434781][ T9] usb 1-1: USB disconnect, device number 32 [ 418.558908][ T5902] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 418.719041][ T5902] usb 5-1: Using ep0 maxpacket: 32 [ 418.731540][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.763021][ T5902] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 418.798379][ T5902] usb 5-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 418.844972][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.859012][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 418.887538][ T5902] usb 5-1: config 0 descriptor?? [ 419.127181][ T9038] netlink: 20 bytes leftover after parsing attributes in process `syz.1.839'. [ 419.796547][ T9037] syz.2.840: attempt to access beyond end of device [ 419.796547][ T9037] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 419.858876][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 419.874633][ T5902] usbhid 5-1:0.0: can't add hid device: -71 [ 419.885195][ T9] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 419.894642][ T5902] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 419.902493][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.912930][ T5902] usb 5-1: USB disconnect, device number 28 [ 419.918917][ T9] usb 1-1: Product: syz [ 419.923905][ T9] usb 1-1: Manufacturer: syz [ 419.949139][ T9] usb 1-1: SerialNumber: syz [ 419.971052][ T9] usb 1-1: config 0 descriptor?? [ 419.986767][ T9] gspca_main: sq930x-2.14.0 probing 2770:930c [ 420.182594][ T9] gspca_sq930x: reg_r 001f failed -32 [ 420.188108][ T9] sq930x 1-1:0.0: probe with driver sq930x failed with error -32 [ 420.269162][ T9] usb 1-1: USB disconnect, device number 33 [ 420.668029][ T9056] autofs: Unknown parameter '0x0000000000000000' [ 420.715738][ T9060] netlink: 44 bytes leftover after parsing attributes in process `syz.0.843'. [ 420.734695][ T9060] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.742361][ T9060] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.901241][ T9060] netlink: 40 bytes leftover after parsing attributes in process `syz.0.843'. [ 421.286509][ T9070] netlink: 36 bytes leftover after parsing attributes in process `syz.4.844'. [ 422.179229][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 422.357181][ T9082] FAULT_INJECTION: forcing a failure. [ 422.357181][ T9082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.272055][ T9082] CPU: 1 UID: 0 PID: 9082 Comm: syz.0.849 Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0 [ 423.272087][ T9082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 423.272100][ T9082] Call Trace: [ 423.272107][ T9082] [ 423.272117][ T9082] dump_stack_lvl+0x241/0x360 [ 423.272158][ T9082] ? __pfx_dump_stack_lvl+0x10/0x10 [ 423.272191][ T9082] ? __pfx__printk+0x10/0x10 [ 423.272232][ T9082] ? __pfx_lock_release+0x10/0x10 [ 423.272263][ T9082] ? __lock_acquire+0x1397/0x2100 [ 423.272294][ T9082] should_fail_ex+0x40a/0x550 [ 423.272323][ T9082] _copy_from_user+0x2d/0xb0 [ 423.272346][ T9082] clear_refs_write+0x111/0xb60 [ 423.272379][ T9082] ? __pfx_clear_refs_write+0x10/0x10 [ 423.272402][ T9082] ? __pfx_lock_acquire+0x10/0x10 [ 423.272437][ T9082] ? rcu_read_lock_any_held+0xb7/0x160 [ 423.272459][ T9082] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 423.272496][ T9082] vfs_writev+0x5b8/0xbc0 [ 423.272536][ T9082] ? __pfx_clear_refs_write+0x10/0x10 [ 423.272559][ T9082] ? __pfx_vfs_writev+0x10/0x10 [ 423.272605][ T9082] ? __fget_files+0x2a/0x410 [ 423.272636][ T9082] ? __fget_files+0x395/0x410 [ 423.272661][ T9082] ? __fget_files+0x2a/0x410 [ 423.272698][ T9082] do_writev+0x1b6/0x360 [ 423.272731][ T9082] ? __pfx_do_writev+0x10/0x10 [ 423.272759][ T9082] ? do_syscall_64+0x100/0x230 [ 423.272792][ T9082] ? do_syscall_64+0xb6/0x230 [ 423.272821][ T9082] do_syscall_64+0xf3/0x230 [ 423.272848][ T9082] ? clear_bhb_loop+0x35/0x90 [ 423.272880][ T9082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.272908][ T9082] RIP: 0033:0x7f828b58cde9 [ 423.272943][ T9082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.272960][ T9082] RSP: 002b:00007f828c4bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 423.272984][ T9082] RAX: ffffffffffffffda RBX: 00007f828b7a5fa0 RCX: 00007f828b58cde9 [ 423.272999][ T9082] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000007 [ 423.273012][ T9082] RBP: 00007f828c4bd090 R08: 0000000000000000 R09: 0000000000000000 [ 423.273025][ T9082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.273038][ T9082] R13: 0000000000000000 R14: 00007f828b7a5fa0 R15: 00007ffe2ef90ad8 [ 423.273070][ T9082] [ 423.503385][ C1] vkms_vblank_simulate: vblank timer overrun [ 423.531430][ T9] usb 3-1: config 0 has no interfaces? [ 423.537084][ T9] usb 3-1: New USB device found, idVendor=08ca, idProduct=0104, bcdDevice=32.8f [ 423.547036][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.791375][ T9] usb 3-1: config 0 descriptor?? [ 425.218891][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 425.288996][ T25] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 425.528151][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.646298][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.736208][ T9112] netlink: 19 bytes leftover after parsing attributes in process `syz.1.857'. [ 426.076959][ T25] usb 1-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 426.105560][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.200826][ T25] usb 1-1: config 0 descriptor?? [ 426.318883][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 426.330300][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 426.331254][ T9115] netlink: 'syz.3.858': attribute type 3 has an invalid length. [ 426.338428][ T9] usb 5-1: config 0 has no interface number 0 [ 426.362588][ T8037] usb 3-1: USB disconnect, device number 28 [ 426.364872][ T9115] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.858'. [ 426.385276][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 426.395194][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.436512][ T9102] netlink: 16 bytes leftover after parsing attributes in process `syz.0.855'. [ 426.437940][ T9] usb 5-1: Product: syz [ 426.467133][ T9116] netlink: 'syz.3.858': attribute type 3 has an invalid length. [ 426.488849][ T9116] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.858'. [ 426.496382][ T9] usb 5-1: Manufacturer: syz [ 426.507103][ T9] usb 5-1: SerialNumber: syz [ 426.546481][ T9] usb 5-1: config 0 descriptor?? [ 426.562945][ T9] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 426.577272][ T9] usb 5-1: selecting invalid altsetting 1 [ 426.594566][ T9] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 426.647189][ T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 426.850766][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 426.857172][ T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 426.871448][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 426.879127][ T25] usb 1-1: USB disconnect, device number 34 [ 426.941873][ T9] usb 5-1: media controller created [ 427.036886][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 427.144300][ T9] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 427.172487][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 427.189153][ T9] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 428.009101][ T9] usb 5-1: USB disconnect, device number 29 [ 428.151440][ T9128] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 428.162295][ T9128] netlink: 224 bytes leftover after parsing attributes in process `syz.3.861'. [ 428.259230][ T8037] usb 1-1: new low-speed USB device number 35 using dummy_hcd [ 428.429236][ T8] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 428.431256][ T8037] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 428.455054][ T8037] usb 1-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 428.472060][ T8037] usb 1-1: config 0 has no interface number 0 [ 428.478463][ T8037] usb 1-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 428.498888][ T8037] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 428.510336][ T8037] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 428.523673][ T8037] usb 1-1: config 0 interface 52 has no altsetting 0 [ 428.531247][ T8037] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 428.540640][ T8037] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.551890][ T8037] usb 1-1: config 0 descriptor?? [ 428.652468][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 428.740303][ T9152] lo speed is unknown, defaulting to 1000 [ 428.839183][ T5872] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 429.049808][ T8] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 429.050315][ T5872] usb 5-1: config 0 has no interfaces? [ 429.087319][ T8037] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input8 [ 429.099391][ T8] usb 3-1: config 0 has no interface number 0 [ 429.258687][ T5872] usb 5-1: New USB device found, idVendor=08ca, idProduct=0104, bcdDevice=32.8f [ 429.270848][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 429.280098][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.288298][ T8] usb 3-1: Product: syz [ 429.313220][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.329239][ T8] usb 3-1: Manufacturer: syz [ 429.334037][ T8] usb 3-1: SerialNumber: syz [ 429.334260][ T5872] usb 5-1: config 0 descriptor?? [ 429.386490][ C0] synaptics_usb 1-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 429.386496][ T5872] usb 1-1: USB disconnect, device number 35 [ 429.421401][ T8] usb 3-1: config 0 descriptor?? [ 429.636320][ T9160] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 429.702374][ T29] audit: type=1804 audit(1738865491.229:143): pid=9160 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.871" name="/newroot/191/file0/file0" dev="ramfs" ino=26932 res=1 errno=0 [ 429.729020][ T9162] netlink: 56 bytes leftover after parsing attributes in process `syz.0.870'. [ 430.005537][ T8] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 430.132950][ T8] usb 3-1: No valid video chain found. [ 430.418411][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 430.473889][ T8] usb 3-1: USB disconnect, device number 29 [ 430.848071][ T9170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.873'. [ 430.857080][ T9170] netlink: 32 bytes leftover after parsing attributes in process `syz.3.873'. [ 431.053565][ T5836] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 431.064270][ T5836] CPU: 0 UID: 0 PID: 5836 Comm: kworker/u9:7 Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0 [ 431.064299][ T5836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 431.064315][ T5836] Workqueue: hci1 hci_rx_work [ 431.064342][ T5836] Call Trace: [ 431.064350][ T5836] [ 431.064359][ T5836] dump_stack_lvl+0x241/0x360 [ 431.064400][ T5836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.064434][ T5836] ? __pfx__printk+0x10/0x10 [ 431.064472][ T5836] ? __kmalloc_cache_noprof+0x243/0x390 [ 431.064500][ T5836] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 431.064529][ T5836] sysfs_create_dir_ns+0x2ce/0x3a0 [ 431.064555][ T5836] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 431.064590][ T5836] kobject_add_internal+0x435/0x8d0 [ 431.064632][ T5836] kobject_add+0x152/0x220 [ 431.064662][ T5836] ? do_raw_spin_unlock+0x13c/0x8b0 [ 431.064686][ T5836] ? device_add+0x3e7/0xbf0 [ 431.064715][ T5836] ? __pfx_kobject_add+0x10/0x10 [ 431.064747][ T5836] ? _raw_spin_unlock+0x28/0x50 [ 431.064775][ T5836] ? get_device_parent+0x165/0x410 [ 431.064800][ T5836] device_add+0x4e5/0xbf0 [ 431.064828][ T5836] hci_conn_add_sysfs+0xe8/0x200 [ 431.064863][ T5836] le_conn_complete_evt+0xc9f/0x12e0 [ 431.064906][ T5836] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 431.064931][ T5836] ? __mutex_unlock_slowpath+0x227/0x800 [ 431.064972][ T5836] ? skb_pull_data+0x112/0x230 [ 431.065005][ T5836] hci_le_conn_complete_evt+0x18c/0x420 [ 431.065040][ T5836] hci_event_packet+0xa55/0x1540 [ 431.065066][ T5836] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 431.065098][ T5836] ? __pfx_hci_event_packet+0x10/0x10 [ 431.065119][ T5836] ? do_raw_spin_unlock+0x13c/0x8b0 [ 431.065150][ T5836] ? hci_send_to_monitor+0xd8/0x7f0 [ 431.065178][ T5836] ? kcov_remote_start+0x97/0x7d0 [ 431.065208][ T5836] hci_rx_work+0x3f3/0xdb0 [ 431.065239][ T5836] ? process_scheduled_works+0x976/0x1840 [ 431.065268][ T5836] process_scheduled_works+0xa66/0x1840 [ 431.065323][ T5836] ? __pfx_process_scheduled_works+0x10/0x10 [ 431.065358][ T5836] ? assign_work+0x364/0x3d0 [ 431.065387][ T5836] worker_thread+0x870/0xd30 [ 431.065428][ T5836] ? __kthread_parkme+0x169/0x1d0 [ 431.065457][ T5836] ? __pfx_worker_thread+0x10/0x10 [ 431.065482][ T5836] kthread+0x7a9/0x920 [ 431.065507][ T5836] ? __pfx_kthread+0x10/0x10 [ 431.065537][ T5836] ? __pfx_worker_thread+0x10/0x10 [ 431.065562][ T5836] ? __pfx_kthread+0x10/0x10 [ 431.065588][ T5836] ? __pfx_kthread+0x10/0x10 [ 431.065620][ T5836] ? __pfx_kthread+0x10/0x10 [ 431.065646][ T5836] ? _raw_spin_unlock_irq+0x23/0x50 [ 431.065669][ T5836] ? lockdep_hardirqs_on+0x99/0x150 [ 431.065695][ T5836] ? __pfx_kthread+0x10/0x10 [ 431.065732][ T5836] ret_from_fork+0x4b/0x80 [ 431.065756][ T5836] ? __pfx_kthread+0x10/0x10 [ 431.065785][ T5836] ret_from_fork_asm+0x1a/0x30 [ 431.065826][ T5836] [ 431.065888][ T5836] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 431.368094][ T5836] Bluetooth: hci1: failed to register connection device [ 431.518827][ T8] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 432.009237][ T8] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 432.020320][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 432.068914][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.105200][ T5896] usb 5-1: USB disconnect, device number 30 [ 432.113939][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 432.152059][ T8] usb 3-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 432.192962][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.227234][ T8] usb 3-1: config 0 descriptor?? [ 433.325309][ T8] uclogic 0003:28BD:0055.0013: interface is invalid, ignoring [ 434.501567][ T8] usb 3-1: USB disconnect, device number 30 [ 434.813660][ T9207] mkiss: ax0: crc mode is auto. [ 434.979981][ T9214] netlink: 20 bytes leftover after parsing attributes in process `syz.3.884'. [ 435.212640][ T8] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 435.445791][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 435.555066][ T8] usb 3-1: config 0 has an invalid interface number: 9 but max is 0 [ 435.580045][ T8] usb 3-1: config 0 has no interface number 0 [ 435.651900][ T8] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 435.667478][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.706731][ T8] usb 3-1: Product: syz [ 435.738805][ T8] usb 3-1: Manufacturer: syz [ 435.763892][ T8] usb 3-1: SerialNumber: syz [ 435.805515][ T8] usb 3-1: config 0 descriptor?? [ 435.857317][ T8] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 436.499114][ T5902] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 437.606038][ T8] gspca_topro: reg_w err -110 [ 437.632364][ T5902] usb 4-1: config 0 has no interfaces? [ 437.649763][ T5902] usb 4-1: New USB device found, idVendor=08ca, idProduct=0104, bcdDevice=32.8f [ 437.659757][ T8] gspca_topro: Sensor soi763a [ 438.403774][ T9242] Invalid source name [ 438.407834][ T9242] UBIFS error (pid: 9242): cannot open "./file0", error -22 [ 438.643587][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.690788][ T8] usb 3-1: USB disconnect, device number 31 [ 439.289734][ T5902] usb 4-1: config 0 descriptor?? [ 439.789151][ T5872] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 440.051882][ T5902] usb 4-1: can't set config #0, error -71 [ 440.078404][ T5902] usb 4-1: USB disconnect, device number 24 [ 440.156899][ T9255] netlink: 16 bytes leftover after parsing attributes in process `syz.1.896'. [ 440.189663][ T5872] usb 5-1: Using ep0 maxpacket: 8 [ 440.203681][ T5872] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 440.214395][ T9258] openvswitch: netlink: IP tunnel dst address not specified [ 440.217281][ T5872] usb 5-1: config 179 has no interface number 0 [ 440.349534][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.380889][ T5872] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 440.392526][ T5872] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 440.403932][ T5872] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 440.415866][ T5872] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 440.427712][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.458749][ T5872] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 441.730649][ T5872] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 441.878970][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.909451][ T9250] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 442.284845][ T9273] netlink: 20 bytes leftover after parsing attributes in process `syz.0.898'. [ 442.442573][ T5902] usb 5-1: USB disconnect, device number 31 [ 442.442573][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 442.442752][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 443.076229][ T9281] netlink: 'syz.2.902': attribute type 1 has an invalid length. [ 445.588896][ T5902] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 445.760603][ T5902] usb 2-1: config 0 has no interfaces? [ 445.766393][ T5902] usb 2-1: New USB device found, idVendor=08ca, idProduct=0104, bcdDevice=32.8f [ 445.788908][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.819953][ T5902] usb 2-1: config 0 descriptor?? [ 446.093056][ T9322] netlink: 20 bytes leftover after parsing attributes in process `syz.3.913'. [ 446.932352][ T9329] 9pnet_fd: Insufficient options for proto=fd [ 446.944196][ T9328] sch_fq: defrate 2 ignored. [ 447.759083][ T25] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 448.208799][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 448.259795][ T25] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 448.278808][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.286874][ T25] usb 4-1: Product: syz [ 448.328064][ T25] usb 4-1: Manufacturer: syz [ 448.338810][ T25] usb 4-1: SerialNumber: syz [ 448.343004][ T8] usb 2-1: USB disconnect, device number 27 [ 448.352853][ T25] usb 4-1: config 0 descriptor?? [ 448.488162][ T9354] No control pipe specified [ 448.566768][ T25] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 449.750191][ T25] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 449.765973][ T25] usb 4-1: USB disconnect, device number 25 [ 449.897115][ T9385] netlink: 20 bytes leftover after parsing attributes in process `syz.0.927'. [ 450.898873][ T8037] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 450.958839][ T25] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 451.079160][ T8037] usb 4-1: Using ep0 maxpacket: 32 [ 451.088366][ T8037] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.099447][ T5872] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 451.110720][ T8037] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.124405][ T25] usb 5-1: config 0 has no interfaces? [ 451.131424][ T25] usb 5-1: New USB device found, idVendor=08ca, idProduct=0104, bcdDevice=32.8f [ 451.142758][ T9409] syz.1.933 (9409): /proc/9409/oom_adj is deprecated, please use /proc/9409/oom_score_adj instead. [ 451.155290][ T8037] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 451.164538][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.174211][ T8037] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.261753][ T8037] usb 4-1: config 0 descriptor?? [ 451.268195][ T25] usb 5-1: config 0 descriptor?? [ 451.279129][ T5872] usb 1-1: Using ep0 maxpacket: 32 [ 451.295818][ T5872] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.310464][ T5872] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.338505][ T5872] usb 1-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 451.368020][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.386059][ T5872] usb 1-1: Product: syz [ 451.400758][ T5872] usb 1-1: Manufacturer: syz [ 451.418138][ T5872] usb 1-1: SerialNumber: syz [ 451.429430][ T9409] netlink: 16 bytes leftover after parsing attributes in process `syz.1.933'. [ 451.710737][ T8037] savu 0003:1E7D:2D5A.0014: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 451.817209][ T9415] netlink: 'syz.0.937': attribute type 2 has an invalid length. [ 451.894284][ T9415] netlink: 'syz.0.937': attribute type 1 has an invalid length. [ 452.006465][ T9415] netlink: 204 bytes leftover after parsing attributes in process `syz.0.937'. [ 452.075529][ T9415] netlink: 125828 bytes leftover after parsing attributes in process `syz.0.937'. [ 452.155654][ T9415] netlink: 'syz.0.937': attribute type 2 has an invalid length. [ 452.213736][ T9415] netlink: 'syz.0.937': attribute type 1 has an invalid length. [ 452.242369][ T9401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.297480][ T9415] netlink: 204 bytes leftover after parsing attributes in process `syz.0.937'. [ 452.302724][ T9401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.326957][ T5902] usb 4-1: USB disconnect, device number 26 [ 452.634062][ T5872] usbhid 1-1:1.0: can't add hid device: -22 [ 452.650771][ T5872] usbhid 1-1:1.0: probe with driver usbhid failed with error -22 [ 452.682632][ T5872] usb 1-1: USB disconnect, device number 36 [ 453.402313][ T9432] overlayfs: failed to resolve './file1': -2 [ 454.131260][ T5872] usb 5-1: USB disconnect, device number 32 [ 454.426988][ T9450] netlink: 'syz.2.948': attribute type 27 has an invalid length. [ 454.481772][ T9454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.950'. [ 454.608812][ T8037] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 454.793897][ T8037] usb 2-1: Using ep0 maxpacket: 8 [ 454.806422][ T8037] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 454.829708][ T8037] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 454.834297][ T8] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 454.845067][ T8037] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 454.928843][ T8037] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 454.955508][ T8037] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 454.979032][ T8037] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 454.988354][ T8037] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.071450][ T9460] syz.0.952 (9460): drop_caches: 2 [ 455.080485][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 455.094745][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 455.121834][ T8] usb 3-1: config 0 interface 0 has no altsetting 1 [ 455.136151][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 455.154341][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.170125][ T8] usb 3-1: Product: syz [ 455.174335][ T8] usb 3-1: Manufacturer: syz [ 455.185725][ T8] usb 3-1: SerialNumber: syz [ 455.273343][ T8] usb 3-1: config 0 descriptor?? [ 455.283468][ T8] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 455.295324][ T8] gspca_stv06xx: st6422 sensor detected [ 455.328303][ T8037] usb 2-1: usb_control_msg returned -32 [ 455.344410][ T8037] usbtmc 2-1:16.0: can't read capabilities [ 456.304581][ T9484] netlink: 1256 bytes leftover after parsing attributes in process `syz.0.957'. [ 456.510683][ T8037] usb 2-1: USB disconnect, device number 28 [ 456.518593][ T9484] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 456.948871][ T8037] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 457.098873][ T25] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 457.131461][ T8037] usb 4-1: config 0 has no interfaces? [ 457.137018][ T8037] usb 4-1: New USB device found, idVendor=08ca, idProduct=0104, bcdDevice=32.8f [ 457.166676][ T8037] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.206405][ T8037] usb 4-1: config 0 descriptor?? [ 457.248969][ T46] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 457.268895][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 457.285119][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.328891][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.388793][ T25] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 457.605670][ T9497] FAULT_INJECTION: forcing a failure. [ 457.605670][ T9497] name failslab, interval 1, probability 0, space 0, times 0 [ 457.618498][ T9497] CPU: 0 UID: 0 PID: 9497 Comm: syz.2.961 Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0 [ 457.618526][ T9497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 457.618539][ T9497] Call Trace: [ 457.618548][ T9497] [ 457.618561][ T9497] dump_stack_lvl+0x241/0x360 [ 457.618602][ T9497] ? __pfx_dump_stack_lvl+0x10/0x10 [ 457.618636][ T9497] ? __pfx__printk+0x10/0x10 [ 457.618670][ T9497] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 457.618700][ T9497] ? __pfx___might_resched+0x10/0x10 [ 457.618722][ T9497] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 457.618752][ T9497] should_fail_ex+0x40a/0x550 [ 457.618779][ T9497] should_failslab+0xac/0x100 [ 457.618807][ T9497] kmem_cache_alloc_node_noprof+0x77/0x380 [ 457.618835][ T9497] ? dup_task_struct+0x57/0x8c0 [ 457.618861][ T9497] dup_task_struct+0x57/0x8c0 [ 457.618889][ T9497] copy_process+0x5d1/0x3d50 [ 457.618923][ T9497] ? migrate_enable+0x395/0x510 [ 457.618948][ T9497] ? __pfx_lock_acquire+0x10/0x10 [ 457.618978][ T9497] ? __pfx_migrate_enable+0x10/0x10 [ 457.619006][ T9497] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 457.619034][ T9497] ? __pfx___cant_migrate+0x10/0x10 [ 457.619057][ T9497] ? __pfx_copy_process+0x10/0x10 [ 457.619095][ T9497] kernel_clone+0x223/0x870 [ 457.619125][ T9497] ? __pfx_kernel_clone+0x10/0x10 [ 457.619168][ T9497] __x64_sys_clone+0x258/0x2a0 [ 457.619196][ T9497] ? __pfx___x64_sys_clone+0x10/0x10 [ 457.619232][ T9497] ? __secure_computing+0x125/0x370 [ 457.619274][ T9497] do_syscall_64+0xf3/0x230 [ 457.619303][ T9497] ? clear_bhb_loop+0x35/0x90 [ 457.619336][ T9497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.619364][ T9497] RIP: 0033:0x7fdfe5b8cde9 [ 457.619383][ T9497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.619401][ T9497] RSP: 002b:00007fdfe39d4fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 457.619422][ T9497] RAX: ffffffffffffffda RBX: 00007fdfe5da6160 RCX: 00007fdfe5b8cde9 [ 457.619438][ T9497] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000206000 [ 457.619451][ T9497] RBP: 00007fdfe39d5090 R08: 0000000000000000 R09: 0000000000000000 [ 457.619463][ T9497] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 457.619475][ T9497] R13: 0000000000000000 R14: 00007fdfe5da6160 R15: 00007ffccab6f358 [ 457.619506][ T9497] [ 457.952179][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.965957][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.003066][ T46] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 458.014177][ T25] usb 2-1: config 0 descriptor?? [ 458.038489][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.097677][ T46] usb 1-1: config 0 descriptor?? [ 458.358882][ T46] usbhid 1-1:0.0: can't add hid device: -71 [ 458.383593][ T46] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 458.429308][ T46] usb 1-1: USB disconnect, device number 37 [ 458.439830][ T9491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.469411][ T9491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.502634][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 458.531559][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 458.550735][ T25] usb 2-1: USB disconnect, device number 29 [ 458.868928][ T46] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 459.031779][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 459.039311][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.060812][ T46] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 459.093127][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.114631][ T46] usb 1-1: config 0 descriptor?? [ 460.106695][ T46] mcp2221 0003:04D8:00DD.0015: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 461.078328][ T8] STV06xx 3-1:0.0: probe with driver STV06xx failed with error -110 [ 461.210376][ T8] usb 4-1: USB disconnect, device number 27 [ 461.576176][ T9528] netlink: 48 bytes leftover after parsing attributes in process `syz.4.970'. [ 461.626871][ T9527] mmap: syz.4.970 (9527): VmData 37597184 exceed data ulimit 11. Update limits or use boot option ignore_rlimit_data. [ 462.235611][ T8037] usb 1-1: USB disconnect, device number 38 [ 463.620056][ T8] usb 3-1: USB disconnect, device number 32 [ 464.836874][ T9573] sctp: [Deprecated]: syz.1.981 (pid 9573) Use of struct sctp_assoc_value in delayed_ack socket option. [ 464.836874][ T9573] Use struct sctp_sack_info instead [ 464.885574][ T9573] netlink: 'syz.1.981': attribute type 61 has an invalid length. [ 465.181153][ T8037] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 465.239523][ T46] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 466.263976][ T46] usb 4-1: config 0 has no interfaces? [ 466.270765][ T46] usb 4-1: New USB device found, idVendor=08ca, idProduct=0104, bcdDevice=32.8f [ 466.343563][ T8037] usb 1-1: device descriptor read/64, error -71 [ 466.352223][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.368277][ T46] usb 4-1: config 0 descriptor?? [ 466.643491][ T8037] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 466.765439][ T9587] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 467.239280][ T46] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 467.469838][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 467.537778][ T46] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 467.593565][ T46] usb 5-1: config 0 has no interface number 0 [ 467.625869][ T46] usb 5-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 467.769298][ T46] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 467.808804][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.822501][ T46] usb 5-1: Product: syz [ 467.835103][ T46] usb 5-1: Manufacturer: syz [ 467.854082][ T46] usb 5-1: SerialNumber: syz [ 467.867902][ T46] usb 5-1: config 0 descriptor?? [ 467.949220][ T9595] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 467.975838][ T46] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 468.008679][ T46] em28xx 5-1:0.132: Video interface 132 found: bulk [ 468.018266][ T9] usb 4-1: USB disconnect, device number 28 [ 468.088903][ T8] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 468.253191][ T8] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 468.275537][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.296104][ T8] usb 3-1: Product: syz [ 468.301740][ T8] usb 3-1: Manufacturer: syz [ 468.306641][ T8] usb 3-1: SerialNumber: syz [ 468.323277][ T8] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 468.383397][ T46] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 468.432841][ T9] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 468.897783][ T46] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 468.911370][ T46] em28xx 5-1:0.132: board has no eeprom [ 469.958820][ T46] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 469.987454][ T9] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 470.000346][ T8] usb 3-1: USB disconnect, device number 33 [ 470.009255][ T9] ath9k_htc: Failed to initialize the device [ 470.025552][ T8] usb 3-1: ath9k_htc: USB layer deinitialized [ 470.118940][ T46] em28xx 5-1:0.132: analog set to bulk mode. [ 470.127967][ T25] em28xx 5-1:0.132: Registering V4L2 extension [ 470.156413][ T46] usb 5-1: USB disconnect, device number 33 [ 470.167080][ T46] em28xx 5-1:0.132: Disconnecting em28xx [ 470.327393][ T25] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 470.339367][ T25] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 470.354090][ T25] em28xx 5-1:0.132: No AC97 audio processor [ 470.375138][ T25] usb 5-1: Decoder not found [ 470.380572][ T25] em28xx 5-1:0.132: failed to create media graph [ 470.387261][ T25] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 470.412047][ T25] em28xx 5-1:0.132: Remote control support is not available for this card. [ 470.432513][ T46] em28xx 5-1:0.132: Closing input extension [ 470.486218][ T46] em28xx 5-1:0.132: Freeing device [ 470.639193][ T8037] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 470.851583][ T8037] usb 1-1: Using ep0 maxpacket: 16 [ 470.898862][ T8037] usb 1-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=9b.5e [ 470.907986][ T8037] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.947120][ T8037] usb 1-1: Product: syz [ 470.961535][ T8037] usb 1-1: Manufacturer: syz [ 470.978514][ T8037] usb 1-1: SerialNumber: syz [ 470.986368][ T8037] usb 1-1: config 0 descriptor?? [ 470.994968][ T8037] kalmia 1-1:0.0: probe with driver kalmia failed with error -22 [ 471.158969][ T9] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 471.189079][ T8] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 471.219854][ T5902] usb 1-1: USB disconnect, device number 41 [ 471.330606][ T9] usb 2-1: no configurations [ 471.335281][ T9] usb 2-1: can't read configurations, error -22 [ 471.381994][ T8] usb 5-1: config 0 has no interfaces? [ 471.387567][ T8] usb 5-1: New USB device found, idVendor=08ca, idProduct=0104, bcdDevice=32.8f [ 471.410592][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.422627][ T8] usb 5-1: config 0 descriptor?? [ 471.479749][ T9] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 471.644505][ T9] usb 2-1: no configurations [ 471.651717][ T9] usb 2-1: can't read configurations, error -22 [ 471.663170][ T9] usb usb2-port1: attempt power cycle [ 472.019702][ T9] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 472.051708][ T9] usb 2-1: no configurations [ 472.061680][ T9] usb 2-1: can't read configurations, error -22 [ 472.154411][ T9682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1013'. [ 472.208989][ T9] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 472.219022][ T8037] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 472.229810][ T9] usb 2-1: no configurations [ 472.234580][ T9] usb 2-1: can't read configurations, error -22 [ 472.241937][ T9] usb usb2-port1: unable to enumerate USB device [ 472.378827][ T8037] usb 4-1: Using ep0 maxpacket: 32 [ 472.386158][ T8037] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 472.394991][ T8037] usb 4-1: config 0 has no interface number 0 [ 472.404199][ T8037] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 472.413790][ T8037] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.422206][ T8037] usb 4-1: Product: syz [ 472.426543][ T8037] usb 4-1: Manufacturer: syz [ 472.431315][ T8037] usb 4-1: SerialNumber: syz [ 472.438128][ T8037] usb 4-1: config 0 descriptor?? [ 472.447332][ T8037] smsc95xx v2.0.0 [ 472.684712][ T8037] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 472.703273][ T8037] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 472.714681][ T8037] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 472.726107][ T8037] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 472.745346][ T8037] usb 4-1: USB disconnect, device number 29 [ 472.966450][ T9686] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 473.449671][ T8] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 473.666541][ T8] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 473.675414][ T8] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 473.727131][ T8] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 473.736643][ T8] usb 4-1: config 1 has no interface number 1 [ 473.742895][ T8] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 473.799388][ T8] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 474.080039][ T8] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 474.108017][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.130100][ T8] usb 4-1: Product: syz [ 474.134331][ T8] usb 4-1: Manufacturer: syz [ 474.156439][ T8] usb 4-1: SerialNumber: syz [ 474.225212][ T5902] usb 5-1: USB disconnect, device number 34 [ 474.397844][ T8] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 474.411946][ T8] usb 4-1: MIDIStreaming interface descriptor not found [ 474.471142][ T8] usb 4-1: USB disconnect, device number 30 [ 474.525478][ T838] usb 1-1: new low-speed USB device number 42 using dummy_hcd [ 474.714148][ T838] usb 1-1: config 1 interface 0 altsetting 15 endpoint 0x1 is Bulk; changing to Interrupt [ 474.786847][ T9724] Invalid source name [ 474.791030][ T9724] UBIFS error (pid: 9724): cannot open "./file0", error -22 [ 475.615664][ T838] usb 1-1: config 1 interface 0 altsetting 15 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 475.719368][ T838] usb 1-1: config 1 interface 0 has no altsetting 0 [ 475.772336][ T5825] udevd[5825]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 477.116271][ T9750] ip6gre1: entered allmulticast mode [ 477.154711][ T9752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1031'. [ 477.184544][ T9754] netlink: 'syz.3.1030': attribute type 10 has an invalid length. [ 477.503319][ T838] usb 1-1: string descriptor 0 read error: -71 [ 477.509758][ T838] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 477.529502][ T838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.975954][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 478.517898][ T838] usb 1-1: can't set config #1, error -71 [ 478.528672][ T838] usb 1-1: USB disconnect, device number 42 [ 478.812207][ T9754] bridge0: port 3(erspan0) entered disabled state [ 478.818890][ T9754] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.826318][ T9754] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.872054][ T9754] bridge0: port 3(erspan0) entered blocking state [ 478.878961][ T9754] bridge0: port 3(erspan0) entered forwarding state [ 478.888199][ T9754] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.895470][ T9754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.902949][ T9754] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.910207][ T9754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.048348][ T9754] team0: Port device bridge0 added [ 480.414212][ T9782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1038'. [ 480.441874][ T9784] macvlan0: entered allmulticast mode [ 480.460218][ T9784] veth1_vlan: entered allmulticast mode [ 480.715108][ T29] audit: type=1326 audit(1738865542.239:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9783 comm="syz.0.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f828b58cde9 code=0x7fc00000 [ 480.736847][ T8037] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 481.158179][ T9798] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1043'. [ 481.179320][ T9798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1043'. [ 481.206984][ T9799] lo speed is unknown, defaulting to 1000 [ 481.220392][ T8037] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 481.238915][ T8037] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 481.255151][ T29] audit: type=1326 audit(1738865542.779:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9783 comm="syz.0.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f828b58cde9 code=0x7fc00000 [ 481.317879][ T8037] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 481.352924][ T8037] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 481.358322][ T29] audit: type=1326 audit(1738865542.779:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9783 comm="syz.0.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f828b58cde9 code=0x7fc00000 [ 481.396371][ T8037] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 481.428800][ T29] audit: type=1326 audit(1738865542.779:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9783 comm="syz.0.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f828b58cde9 code=0x7fc00000 [ 481.434953][ T8037] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 481.498850][ T29] audit: type=1326 audit(1738865542.779:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9783 comm="syz.0.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f828b58cde9 code=0x7fc00000 [ 481.565218][ T8037] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.614943][ T29] audit: type=1326 audit(1738865542.779:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9783 comm="syz.0.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f828b58cde9 code=0x7fc00000 [ 481.641909][ T8037] usb 5-1: config 0 descriptor?? [ 481.652807][ T9782] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 481.683026][ T29] audit: type=1326 audit(1738865542.779:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9783 comm="syz.0.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f828b58cde9 code=0x7fc00000 [ 481.770330][ T5902] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 481.950453][ T5902] usb 4-1: device descriptor read/64, error -71 [ 481.973408][ T29] audit: type=1326 audit(1738865542.779:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9783 comm="syz.0.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f828b58cde9 code=0x7fc00000 [ 481.995232][ T29] audit: type=1326 audit(1738865542.779:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9783 comm="syz.0.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f828b58cde9 code=0x7fc00000 [ 482.453599][ T8037] plantronics 0003:047F:FFFF.0016: unknown main item tag 0xd [ 482.463796][ T29] audit: type=1326 audit(1738865542.779:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9783 comm="syz.0.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f828b58cde9 code=0x7fc00000 [ 482.494453][ T8037] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 482.524779][ T8037] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 482.569845][ T5902] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 482.778914][ T5902] usb 4-1: device descriptor read/64, error -71 [ 482.791371][ T8037] usb 5-1: USB disconnect, device number 35 [ 482.934828][ T5902] usb usb4-port1: attempt power cycle [ 482.949417][ T9814] can0: slcan on ttyS3. [ 483.149593][ T9815] can0 (unregistered): slcan off ttyS3. [ 483.158142][ T9815] Falling back ldisc for ttyS3. [ 483.289597][ T5902] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 483.327754][ T5902] usb 4-1: device descriptor read/8, error -71 [ 483.410531][ T9823] lo speed is unknown, defaulting to 1000 [ 483.714848][ T5902] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 483.942953][ T5902] usb 4-1: device descriptor read/8, error -71 [ 484.204022][ T5902] usb usb4-port1: unable to enumerate USB device [ 484.338863][ T8] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 484.568937][ T8] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 484.577080][ T8] usb 1-1: config 0 has no interface number 0 [ 484.607927][ T8] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 484.654536][ T8] usb 1-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 484.708340][ T8] usb 1-1: New USB device found, idVendor=1199, idProduct=9091, bcdDevice=2b.84 [ 484.738998][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.747077][ T8] usb 1-1: Product: syz [ 484.788819][ T8] usb 1-1: Manufacturer: syz [ 484.793491][ T8] usb 1-1: SerialNumber: syz [ 484.843262][ T8] usb 1-1: config 0 descriptor?? [ 485.227156][ T8037] usb 1-1: USB disconnect, device number 43 [ 488.355249][ T8] IPVS: starting estimator thread 0... [ 488.470980][ T9902] IPVS: using max 29 ests per chain, 69600 per kthread [ 489.180767][ T9912] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1062'. [ 489.243502][ T8037] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 489.440198][ T8037] usb 1-1: Using ep0 maxpacket: 16 [ 489.449038][ T5902] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 489.471501][ T8037] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 489.494033][ T8037] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 489.555727][ T8037] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 489.567015][ T8037] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.606783][ T8037] usb 1-1: Product: syz [ 489.614515][ T8037] usb 1-1: Manufacturer: syz [ 489.620600][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 489.633831][ T5902] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 489.644903][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 489.664341][ T5902] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 489.674619][ T8037] usb 1-1: SerialNumber: syz [ 489.702705][ T5902] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 489.718151][ T8037] usb 1-1: config 0 descriptor?? [ 489.725572][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.754512][ T5902] usb 5-1: config 0 descriptor?? [ 489.782369][ T8037] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 489.793345][ T8037] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 490.013721][ T5902] hdpvr 5-1:0.0: firmware version 0x6d dated ´e\@^oAqyάۛXH [ 490.058202][ T5902] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 490.268896][ T5872] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 490.403474][ T8037] em28xx 1-1:0.0: unknown em28xx chip ID (250) [ 490.448979][ T5872] usb 3-1: Using ep0 maxpacket: 32 [ 490.482812][ T5872] usb 3-1: config 0 has an invalid interface number: 23 but max is 0 [ 490.513322][ T5872] usb 3-1: config 0 has no interface number 0 [ 490.548219][ T5872] usb 3-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 490.567839][ T5902] hdpvr 5-1:0.0: Could not setup controls [ 490.586365][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.604287][ T5902] hdpvr 5-1:0.0: registering videodev failed [ 490.608814][ T8037] em28xx 1-1:0.0: Config register raw data: 0x37 [ 490.632246][ T5872] usb 3-1: config 0 descriptor?? [ 490.657919][ T8037] em28xx 1-1:0.0: I2S Audio (5 sample rate(s)) [ 490.672231][ T5902] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -71 [ 490.676972][ T5872] gspca_main: sunplus-2.14.0 probing 052b:1803 [ 490.685641][ T8037] em28xx 1-1:0.0: No AC97 audio processor [ 490.723271][ T5902] usb 5-1: USB disconnect, device number 36 [ 491.382654][ T5872] gspca_sunplus: reg_r err -110 [ 491.391516][ T5872] sunplus 3-1:0.23: probe with driver sunplus failed with error -110 [ 491.432744][ T5872] usb 3-1: USB disconnect, device number 34 [ 491.747503][ T8037] usb 1-1: USB disconnect, device number 44 [ 492.030950][ T46] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 492.409069][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 492.477505][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.849001][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.900078][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 492.940314][ T46] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 492.995957][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.041571][ T46] usb 2-1: config 0 descriptor?? [ 493.079542][ T9952] 9pnet_fd: Insufficient options for proto=fd [ 493.552622][ T46] ryos 0003:1E7D:31CE.0017: unknown main item tag 0x0 [ 493.605617][ T46] ryos 0003:1E7D:31CE.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:31ce] on usb-dummy_hcd.1-1/input0 [ 494.642727][ T9966] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1076'. [ 494.666215][ T9965] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1076'. [ 494.882211][ T838] usb 2-1: USB disconnect, device number 34 [ 496.334672][ T9981] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1080'. [ 496.429251][ T5902] kernel write not supported for file /snd/seq (pid: 5902 comm: kworker/0:7) [ 501.774114][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.781769][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.038871][ T5902] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 502.938828][ T5902] usb 1-1: Using ep0 maxpacket: 32 [ 503.001851][ T5902] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 503.044198][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.079706][ T5902] usb 1-1: config 0 descriptor?? [ 503.103950][ T5902] as10x_usb: device has been detected [ 503.112650][ T5902] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 503.168235][ T5902] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 503.275605][ T5902] as10x_usb: error during firmware upload part1 [ 503.298480][ T5902] Registered device nBox DVB-T Dongle [ 503.301261][ T9998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.379132][ T9998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.389015][ T8] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 503.483558][ T8037] usb 1-1: USB disconnect, device number 45 [ 503.572000][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 503.618315][ T8037] Unregistered device nBox DVB-T Dongle [ 503.629134][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.681394][ T8037] as10x_usb: device has been disconnected [ 503.685277][ T8] usb 2-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 4.00 [ 503.748822][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.765894][ T8] usb 2-1: config 0 descriptor?? [ 504.232316][ T8] wacom 0003:056A:00D0.0018: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 504.272451][ T8] wacom 0003:056A:00D0.0018: hidraw0: USB HID vff.fe Device [HID 056a:00d0] on usb-dummy_hcd.1-1/input0 [ 504.338967][ T8] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00D0.0018/input/input12 [ 505.259053][ T838] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 505.546637][ T838] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 505.597628][ T838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.669059][ T838] usb 5-1: Product: syz [ 505.673281][ T838] usb 5-1: Manufacturer: syz [ 505.677869][ T838] usb 5-1: SerialNumber: syz [ 505.745699][ T838] usb 5-1: config 0 descriptor?? [ 505.770504][ T838] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 506.592840][ T838] gspca_sunplus: reg_r err -71 [ 506.597762][ T838] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 506.695107][ T838] usb 5-1: USB disconnect, device number 37 [ 506.724407][T10036] fuse: Unknown parameter '000000000000000000000x000000000000000a' [ 507.693796][ T68] tipc: Subscription rejected, illegal request [ 509.008884][ T838] usb 3-1: new low-speed USB device number 35 using dummy_hcd [ 509.029001][ T46] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 509.432827][ T46] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 509.513692][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.544586][ T46] usb 5-1: Product: syz [ 509.641600][ T46] usb 5-1: Manufacturer: syz [ 509.661317][ T46] usb 5-1: SerialNumber: syz [ 509.684424][ T46] usb 5-1: config 0 descriptor?? [ 509.924282][ T46] hso 5-1:0.0: Failed to find BULK IN ep [ 509.961699][ T46] usb-storage 5-1:0.0: USB Mass Storage device detected [ 510.129300][ T46] usb 5-1: USB disconnect, device number 38 [ 510.172750][T10065] lo speed is unknown, defaulting to 1000 [ 510.228558][T10069] netlink: 'syz.0.1101': attribute type 10 has an invalid length. [ 510.310186][ T8] usb 2-1: USB disconnect, device number 35 [ 510.347608][T10069] team0: Port device dummy0 added [ 512.141473][ T838] usb 3-1: unable to get BOS descriptor or descriptor too short [ 512.153036][ T838] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 512.163340][ T838] usb 3-1: can't read configurations, error -71 [ 512.272438][ T8] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 512.433001][T10090] FAULT_INJECTION: forcing a failure. [ 512.433001][T10090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.446245][T10090] CPU: 0 UID: 0 PID: 10090 Comm: syz.2.1108 Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0 [ 512.446265][T10090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 512.446275][T10090] Call Trace: [ 512.446280][T10090] [ 512.446286][T10090] dump_stack_lvl+0x241/0x360 [ 512.446316][T10090] ? __pfx_dump_stack_lvl+0x10/0x10 [ 512.446339][T10090] ? __pfx__printk+0x10/0x10 [ 512.446365][T10090] ? snprintf+0xda/0x120 [ 512.446383][T10090] should_fail_ex+0x40a/0x550 [ 512.446403][T10090] _copy_to_user+0x31/0xb0 [ 512.446419][T10090] simple_read_from_buffer+0xca/0x150 [ 512.446438][T10090] proc_fail_nth_read+0x1e9/0x250 [ 512.446459][T10090] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 512.446479][T10090] ? rw_verify_area+0x243/0x630 [ 512.446501][T10090] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 512.446519][T10090] vfs_read+0x1f8/0xb40 [ 512.446542][T10090] ? fdget_pos+0x254/0x320 [ 512.446561][T10090] ? __pfx___mutex_lock+0x10/0x10 [ 512.446581][T10090] ? __pfx_vfs_read+0x10/0x10 [ 512.446606][T10090] ? __fget_files+0x2a/0x410 [ 512.446625][T10090] ? __fget_files+0x395/0x410 [ 512.446642][T10090] ? __fget_files+0x2a/0x410 [ 512.446667][T10090] ksys_read+0x18f/0x2b0 [ 512.446681][T10090] ? __pfx_ksys_read+0x10/0x10 [ 512.446695][T10090] ? do_syscall_64+0x100/0x230 [ 512.446717][T10090] ? do_syscall_64+0xb6/0x230 [ 512.446738][T10090] do_syscall_64+0xf3/0x230 [ 512.446757][T10090] ? clear_bhb_loop+0x35/0x90 [ 512.446780][T10090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.446799][T10090] RIP: 0033:0x7fdfe5b8b7fc [ 512.446811][T10090] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 512.446823][T10090] RSP: 002b:00007fdfe6912030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 512.446839][T10090] RAX: ffffffffffffffda RBX: 00007fdfe5da5fa0 RCX: 00007fdfe5b8b7fc [ 512.446850][T10090] RDX: 000000000000000f RSI: 00007fdfe69120a0 RDI: 0000000000000006 [ 512.446859][T10090] RBP: 00007fdfe6912090 R08: 0000000000000000 R09: 0000000000000000 [ 512.446868][T10090] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 512.446877][T10090] R13: 0000000000000000 R14: 00007fdfe5da5fa0 R15: 00007ffccab6f358 [ 512.446898][T10090] [ 513.660805][ T8] usb 4-1: device not accepting address 35, error -71 [ 516.058874][ T838] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 516.218869][ T838] usb 5-1: device descriptor read/64, error -71 [ 516.469989][ T838] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 516.720563][T10136] xfs: Unknown parameter 'Tll.k' [ 516.727338][T10136] CIFS mount error: No usable UNC path provided in device string! [ 516.727338][T10136] [ 516.737840][T10136] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 516.788793][ T8] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 516.796552][ T838] usb 5-1: device descriptor read/64, error -71 [ 516.925058][ T838] usb usb5-port1: attempt power cycle [ 516.962544][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.978831][ T5872] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 516.981621][ T8] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 516.988834][ T8037] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 516.999644][ T8] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 517.019702][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.036352][ T8] usb 2-1: config 0 descriptor?? [ 517.140381][ T5872] usb 1-1: config 0 has no interfaces? [ 517.145970][ T5872] usb 1-1: New USB device found, idVendor=08ca, idProduct=0104, bcdDevice=32.8f [ 517.178813][ T8037] usb 4-1: Using ep0 maxpacket: 8 [ 517.184024][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.200038][ T8037] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 517.209021][ T8037] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.241191][ T5872] usb 1-1: config 0 descriptor?? [ 517.250033][ T8037] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 517.268883][ T8037] usb 4-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 517.287351][ T8037] usb 4-1: Product: syz [ 517.297487][ T8037] usb 4-1: Manufacturer: syz [ 517.308641][ T8037] usb 4-1: config 0 descriptor?? [ 517.309185][ T838] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 517.387789][ T838] usb 5-1: device descriptor read/8, error -71 [ 517.639030][ T838] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 517.892797][ T838] usb 5-1: device descriptor read/8, error -71 [ 518.053757][ T838] usb usb5-port1: unable to enumerate USB device [ 518.563027][T10159] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1129'. [ 518.595695][T10159] ALSA: mixer_oss: invalid OSS volume 'u' [ 518.684993][T10161] netlink: 424 bytes leftover after parsing attributes in process `syz.2.1130'. [ 518.909021][ T838] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 519.059013][ T838] usb 5-1: device descriptor read/64, error -71 [ 519.248839][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 519.299077][ T838] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 519.379232][ T9] usb 3-1: device descriptor read/64, error -71 [ 519.412712][ T5872] usb 2-1: USB disconnect, device number 36 [ 519.448984][ T838] usb 5-1: device descriptor read/64, error -71 [ 519.596772][ T46] usb 4-1: USB disconnect, device number 37 [ 519.691842][ T838] usb usb5-port1: attempt power cycle [ 519.828934][ T9] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 520.030708][ T9] usb 3-1: device descriptor read/64, error -71 [ 520.079415][ T838] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 520.203331][ T838] usb 5-1: device descriptor read/8, error -71 [ 520.251666][ T9] usb usb3-port1: attempt power cycle [ 520.410443][T10170] No control pipe specified [ 520.482355][ T8] usb 1-1: USB disconnect, device number 46 [ 521.197667][ T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 521.234329][ T9] usb 3-1: device descriptor read/8, error -71 [ 521.258975][ T838] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 521.299512][ T838] usb 5-1: device descriptor read/8, error -71 [ 521.352771][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 521.352791][ T29] audit: type=1326 audit(1738865582.879:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10181 comm="syz.0.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f828b58cde9 code=0x7ffc0000 [ 521.409108][ T29] audit: type=1326 audit(1738865582.879:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10181 comm="syz.0.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f828b58cde9 code=0x7ffc0000 [ 521.446527][ T838] usb usb5-port1: unable to enumerate USB device [ 521.482922][ T29] audit: type=1326 audit(1738865582.879:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10181 comm="syz.0.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f828b58cde9 code=0x7ffc0000 [ 521.505863][ T29] audit: type=1326 audit(1738865582.879:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10181 comm="syz.0.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f828b58cde9 code=0x7ffc0000 [ 521.527899][ T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 521.560111][ T9] usb 3-1: device descriptor read/8, error -71 [ 521.576671][ T29] audit: type=1326 audit(1738865582.879:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10181 comm="syz.0.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f828b58cde9 code=0x7ffc0000 [ 521.651648][ T29] audit: type=1326 audit(1738865582.879:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10181 comm="syz.0.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f828b58cde9 code=0x7ffc0000 [ 521.688307][ T29] audit: type=1326 audit(1738865582.879:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10181 comm="syz.0.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f828b58cde9 code=0x7ffc0000 [ 521.711291][ T9] usb usb3-port1: unable to enumerate USB device [ 521.721049][ T29] audit: type=1326 audit(1738865582.879:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10181 comm="syz.0.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f828b58cde9 code=0x7ffc0000 [ 521.746377][ T29] audit: type=1326 audit(1738865582.879:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10181 comm="syz.0.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f828b58cde9 code=0x7ffc0000 [ 521.768728][ T29] audit: type=1326 audit(1738865582.879:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10181 comm="syz.0.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f828b58cde9 code=0x7ffc0000 [ 521.818809][ T46] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 521.948852][ T46] usb 1-1: device descriptor read/64, error -71 [ 522.230691][ T46] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 522.399342][ T46] usb 1-1: device descriptor read/64, error -71 [ 522.509441][ T46] usb usb1-port1: attempt power cycle [ 522.528071][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 522.865587][ T46] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 522.892287][T10212] xt_bpf: check failed: parse error [ 523.213149][ T46] usb 1-1: device descriptor read/8, error -71 [ 523.475095][ T46] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 523.520910][ T46] usb 1-1: device descriptor read/8, error -71 [ 523.624579][T10224] netlink: 'syz.3.1147': attribute type 7 has an invalid length. [ 523.641503][ T46] usb usb1-port1: unable to enumerate USB device [ 523.684340][T10221] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.708010][T10221] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.837203][T10221] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.854593][T10221] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.963996][T10229] x_tables: duplicate underflow at hook 2 [ 523.970625][T10221] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.999719][T10221] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.126826][T10221] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.156197][T10221] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.991660][T10221] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.007024][T10221] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.030822][T10221] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.058880][T10221] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.096729][T10221] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.215484][T10221] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.191079][T10221] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.232096][T10221] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.581123][ T46] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 526.640921][T10243] netlink: 'syz.1.1154': attribute type 1 has an invalid length. [ 526.956321][ T46] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 527.007727][ T46] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 527.154722][ T46] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 527.340792][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.525931][ T46] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 527.673606][ T46] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 527.899243][T10259] netlink: 'syz.1.1158': attribute type 10 has an invalid length. [ 528.014509][T10259] bond0: (slave bond_slave_0): Releasing backup interface [ 528.021609][ T9993] udevd[9993]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 528.730150][T10270] Invalid source name [ 528.734274][T10270] UBIFS error (pid: 10270): cannot open "./file0", error -22 [ 529.818934][ T5896] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 530.549904][ T5896] usb 4-1: Using ep0 maxpacket: 8 [ 530.572849][ T5896] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 530.589848][ T5896] usb 4-1: config 179 has no interface number 0 [ 530.608973][ T5896] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 530.793917][ T5896] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 530.812298][ T5896] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 530.838369][ T5896] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 530.849326][ T5896] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 530.876005][ T5896] usb 4-1: config 179 interface 65 has no altsetting 0 [ 530.883419][ T5896] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 530.922760][T10286] overlay: Unknown parameter 'fsmagic' [ 530.939849][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.004893][T10268] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 531.131290][ T5896] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input16 [ 531.488251][ T5896] usb 4-1: USB disconnect, device number 39 [ 531.494383][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 531.549123][ T5896] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 531.968886][ T8037] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 531.977277][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 532.119165][ T8037] usb 5-1: device descriptor read/64, error -32 [ 532.266482][T10300] xt_bpf: check failed: parse error [ 532.359383][ T8037] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 532.796238][ T46] usb 1-1: USB disconnect, device number 51 [ 532.810833][ T8037] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.822373][T10304] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 532.850105][ T8037] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.881481][ T8037] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 532.893364][ T8037] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.949402][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 532.949423][ T29] audit: type=1804 audit(1738865594.469:278): pid=10310 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.1170" name="/newroot/235/file0/file0" dev="ramfs" ino=35541 res=1 errno=0 [ 534.221721][ T8037] usb 5-1: config 0 descriptor?? [ 534.279202][T10320] Invalid source name [ 534.283329][T10320] UBIFS error (pid: 10320): cannot open "./file0", error -22 [ 535.252193][ T8037] usb 5-1: string descriptor 0 read error: -32 [ 535.562325][ T8037] usb 5-1: Max retries (5) exceeded reading string descriptor 200 [ 535.587555][ T8037] letsketch 0003:6161:4D15.0019: probe with driver letsketch failed with error -32 [ 536.140498][ T5896] usb 5-1: USB disconnect, device number 48 [ 536.258894][T10332] gfs2: not a GFS2 filesystem [ 536.284936][T10332] program syz.2.1176 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 537.097307][T10336] loop8: detected capacity change from 0 to 7 [ 537.157226][T10336] Dev loop8: unable to read RDB block 7 [ 537.167175][T10338] netlink: 'syz.2.1178': attribute type 1 has an invalid length. [ 537.176883][T10336] loop8: unable to read partition table [ 537.210539][T10336] loop8: partition table beyond EOD, truncated [ 537.252219][T10345] No control pipe specified [ 537.256681][T10338] 8021q: adding VLAN 0 to HW filter on device bond1 [ 537.264275][T10336] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 537.264275][T10336] ) failed (rc=-5) [ 537.347157][T10347] 8021q: adding VLAN 0 to HW filter on device bond1 [ 537.361750][T10347] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 538.213512][T10347] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 538.336822][T10359] lo: entered promiscuous mode [ 538.353092][T10359] lo: entered allmulticast mode [ 538.371309][T10359] tunl0: entered promiscuous mode [ 538.376418][T10359] tunl0: entered allmulticast mode [ 538.391901][T10359] gre0: entered promiscuous mode [ 538.397232][T10359] gre0: entered allmulticast mode [ 538.429555][T10363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1184'. [ 538.451299][T10367] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 538.503224][T10359] gretap0: entered promiscuous mode [ 538.530856][T10359] gretap0: entered allmulticast mode [ 538.653805][T10359] erspan0: entered promiscuous mode [ 538.664026][T10359] erspan0: entered allmulticast mode [ 538.901834][T10359] ip_vti0: entered promiscuous mode [ 538.907200][T10359] ip_vti0: entered allmulticast mode [ 538.918651][T10359] ip6_vti0: entered promiscuous mode [ 538.924154][T10359] ip6_vti0: entered allmulticast mode [ 538.936466][T10359] sit0: entered promiscuous mode [ 538.943267][T10359] sit0: entered allmulticast mode [ 539.155368][T10359] ip6tnl0: entered promiscuous mode [ 539.278623][T10359] ip6tnl0: entered allmulticast mode [ 539.287921][T10359] ip6gre0: entered promiscuous mode [ 539.310658][T10359] ip6gre0: entered allmulticast mode [ 539.333191][T10359] syz_tun: entered promiscuous mode [ 539.338562][T10359] syz_tun: entered allmulticast mode [ 539.547097][T10359] ip6gretap0: entered promiscuous mode [ 539.552940][T10359] ip6gretap0: entered allmulticast mode [ 539.577639][T10359] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.585086][T10359] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.600598][T10359] bridge0: entered promiscuous mode [ 539.605857][T10359] bridge0: entered allmulticast mode [ 539.624804][T10359] vcan0: entered promiscuous mode [ 539.642454][T10359] vcan0: entered allmulticast mode [ 539.655736][T10359] bond0: entered promiscuous mode [ 539.664689][T10359] bond_slave_0: entered promiscuous mode [ 539.673017][T10359] bond_slave_1: entered promiscuous mode [ 539.683039][T10359] bond0: entered allmulticast mode [ 539.688552][T10359] bond_slave_0: entered allmulticast mode [ 539.697561][ T29] audit: type=1326 audit(1738865601.219:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10383 comm="syz.0.1189" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f828b58cde9 code=0x0 [ 539.699409][T10359] bond_slave_1: entered allmulticast mode [ 539.730852][T10359] team0: entered promiscuous mode [ 539.736029][T10359] team_slave_0: entered promiscuous mode [ 539.742285][T10359] team_slave_1: entered promiscuous mode [ 539.748185][T10359] team0: entered allmulticast mode [ 539.753632][T10359] team_slave_0: entered allmulticast mode [ 539.760107][T10359] team_slave_1: entered allmulticast mode [ 539.768837][T10359] dummy0: entered promiscuous mode [ 539.773998][T10359] dummy0: entered allmulticast mode [ 539.780609][T10359] nlmon0: entered promiscuous mode [ 539.785739][T10359] nlmon0: entered allmulticast mode [ 539.793233][T10359] caif0: entered promiscuous mode [ 539.798326][T10359] caif0: entered allmulticast mode [ 539.804596][T10359] batadv0: entered promiscuous mode [ 539.810134][T10359] batadv0: entered allmulticast mode [ 539.817588][T10359] vxcan0: entered promiscuous mode [ 539.823008][T10359] vxcan0: entered allmulticast mode [ 539.829536][T10359] vxcan1: entered promiscuous mode [ 539.834698][T10359] vxcan1: entered allmulticast mode [ 539.841261][T10359] veth0: entered promiscuous mode [ 539.846305][T10359] veth0: entered allmulticast mode [ 539.854818][T10359] veth1: entered promiscuous mode [ 539.860235][T10359] veth1: entered allmulticast mode [ 539.872444][T10359] wg0: entered promiscuous mode [ 539.877335][T10359] wg0: entered allmulticast mode [ 539.885816][T10359] wg1: entered promiscuous mode [ 539.891046][T10359] wg1: entered allmulticast mode [ 539.898199][T10359] wg2: entered promiscuous mode [ 539.903465][T10359] wg2: entered allmulticast mode [ 539.911233][T10359] veth0_to_bridge: entered promiscuous mode [ 539.917179][T10359] veth0_to_bridge: entered allmulticast mode [ 539.927772][T10359] veth1_to_bridge: entered promiscuous mode [ 539.933924][T10359] veth1_to_bridge: entered allmulticast mode [ 539.947253][T10359] veth0_to_bond: entered promiscuous mode [ 539.953536][T10359] veth0_to_bond: entered allmulticast mode [ 539.962704][T10359] veth1_to_bond: entered promiscuous mode [ 539.968447][T10359] veth1_to_bond: entered allmulticast mode [ 539.977751][T10359] veth0_to_team: entered promiscuous mode [ 539.983875][T10359] veth0_to_team: entered allmulticast mode [ 539.996275][T10359] veth1_to_team: entered promiscuous mode [ 540.002251][T10359] veth1_to_team: entered allmulticast mode [ 540.014914][T10359] veth0_to_batadv: entered promiscuous mode [ 540.020932][T10359] veth0_to_batadv: entered allmulticast mode [ 540.029544][T10359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.037512][T10359] batadv_slave_0: entered promiscuous mode [ 540.043718][T10359] batadv_slave_0: entered allmulticast mode [ 540.052724][T10359] veth1_to_batadv: entered promiscuous mode [ 540.058649][T10359] veth1_to_batadv: entered allmulticast mode [ 540.066618][T10359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.074884][T10359] batadv_slave_1: entered promiscuous mode [ 540.080816][T10359] batadv_slave_1: entered allmulticast mode [ 540.090957][T10359] xfrm0: entered promiscuous mode [ 540.096017][T10359] xfrm0: entered allmulticast mode [ 540.103440][T10359] veth0_to_hsr: entered promiscuous mode [ 540.109445][T10359] veth0_to_hsr: entered allmulticast mode [ 540.117707][T10359] hsr_slave_0: entered allmulticast mode [ 540.127246][T10359] veth1_to_hsr: entered promiscuous mode [ 540.133102][T10359] veth1_to_hsr: entered allmulticast mode [ 540.141771][T10359] hsr_slave_1: entered allmulticast mode [ 540.151023][T10359] hsr0: entered promiscuous mode [ 540.156015][T10359] hsr0: entered allmulticast mode [ 540.163890][T10359] veth1_vlan: entered allmulticast mode [ 540.172822][T10359] veth0_vlan: entered allmulticast mode [ 540.182136][T10359] vlan0: entered promiscuous mode [ 540.187207][T10359] vlan0: entered allmulticast mode [ 540.192676][T10359] vlan1: entered promiscuous mode [ 540.197747][T10359] vlan1: entered allmulticast mode [ 540.204066][T10359] macvlan0: entered promiscuous mode [ 540.209711][T10359] macvlan0: entered allmulticast mode [ 540.222090][T10359] macvlan1: entered promiscuous mode [ 540.227442][T10359] macvlan1: entered allmulticast mode [ 540.237041][T10359] ipvlan0: entered promiscuous mode [ 540.242410][T10359] ipvlan0: entered allmulticast mode [ 540.247917][T10359] ipvlan1: entered promiscuous mode [ 540.253551][T10359] ipvlan1: entered allmulticast mode [ 540.259897][T10359] veth1_macvtap: entered allmulticast mode [ 540.267964][T10359] veth0_macvtap: entered allmulticast mode [ 540.277078][T10359] macvtap0: entered promiscuous mode [ 540.282534][T10359] macvtap0: entered allmulticast mode [ 540.290825][T10359] macsec0: entered promiscuous mode [ 540.296077][T10359] macsec0: entered allmulticast mode [ 540.304757][T10359] geneve0: entered promiscuous mode [ 540.310583][T10359] geneve0: entered allmulticast mode [ 540.318204][T10359] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.327420][T10359] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.337011][T10359] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.346116][T10359] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.355597][T10359] geneve1: entered promiscuous mode [ 540.361267][T10359] geneve1: entered allmulticast mode [ 540.369427][T10359] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 540.376889][T10359] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 540.389127][T10359] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 540.396445][T10359] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 540.408079][T10359] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 540.415725][T10359] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 540.425772][T10359] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 540.433130][T10359] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 540.442577][T10359] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 540.449698][T10359] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 540.457686][T10359] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 540.464919][T10359] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 540.472670][T10359] syztnl1: entered promiscuous mode [ 540.477940][T10359] syztnl1: entered allmulticast mode [ 540.484011][T10359] vlan2: entered promiscuous mode [ 540.489166][T10359] vlan2: entered allmulticast mode [ 540.494426][T10359] ipip0: entered promiscuous mode [ 540.499635][T10359] ipip0: entered allmulticast mode [ 540.710404][T10389] netlink: 'syz.0.1190': attribute type 4 has an invalid length. [ 540.783874][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1191'. [ 540.827063][T10395] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1193'. [ 540.926759][ T29] audit: type=1107 audit(1738865602.439:280): pid=10394 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='p?v&_q <,P~1wOBiԿ;̋$e5}rx]Xf? GiM]40' [ 541.349076][ T8037] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 541.651248][ T8037] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 541.688400][ T8037] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 542.128862][ T46] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 542.375734][ T8037] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 542.478790][ T8037] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 542.538589][T10413] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1197'. [ 542.547729][ T8037] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 542.582399][ T46] usb 1-1: not running at top speed; connect to a high speed hub [ 542.616123][ T46] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 542.626895][T10413] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1197'. [ 542.635972][ T8037] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 542.665881][ T8037] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.669074][ T46] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 542.691438][ T8037] usb 4-1: config 0 descriptor?? [ 542.701067][T10413] netlink: 'syz.2.1197': attribute type 2 has an invalid length. [ 542.710627][T10401] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 542.739956][T10417] kernel profiling enabled (shift: 63) [ 542.741103][ T46] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 542.763477][ T46] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 542.773475][T10417] profiling shift: 63 too large [ 542.786102][ T46] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 542.798335][ T46] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 542.816377][ T46] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 542.841195][ T46] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 542.852792][ T46] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 542.863995][ T46] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 542.900028][ T46] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 542.918991][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.946708][ T46] usb 1-1: Product: syz [ 542.954499][ T46] usb 1-1: Manufacturer: syz [ 542.961227][ T46] usb 1-1: SerialNumber: syz [ 543.401603][ T8037] plantronics 0003:047F:FFFF.001A: unknown main item tag 0xd [ 543.593313][ T46] usb 1-1: skipping empty audio interface (v1) [ 543.650004][ T8037] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 543.700218][ T8037] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 543.726449][ T46] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 543.764210][ T46] usb 1-1: USB disconnect, device number 52 [ 543.779345][ T8037] usb 4-1: USB disconnect, device number 40 [ 543.867754][ T29] audit: type=1326 audit(1738865605.389:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10428 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdc5cf8cde9 code=0x7ffc0000 [ 543.922778][ T29] audit: type=1326 audit(1738865605.389:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10428 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdc5cf8cde9 code=0x7ffc0000 [ 543.945710][ T29] audit: type=1326 audit(1738865605.389:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10428 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdc5cf8cde9 code=0x7ffc0000 [ 543.980994][ T29] audit: type=1326 audit(1738865605.389:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10428 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdc5cf8cde9 code=0x7ffc0000 [ 544.014909][ T29] audit: type=1326 audit(1738865605.389:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10428 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdc5cf8cde9 code=0x7ffc0000 [ 544.060961][ T9993] udevd[9993]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 544.106141][ T29] audit: type=1326 audit(1738865605.389:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10428 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdc5cf8cde9 code=0x7ffc0000 [ 544.177530][ T29] audit: type=1326 audit(1738865605.389:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10428 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdc5cf8cde9 code=0x7ffc0000 [ 544.794983][T10439] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 544.801553][T10439] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 544.893452][ T29] audit: type=1326 audit(1738865605.389:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10428 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdc5cf8cde9 code=0x7ffc0000 [ 544.915291][ T29] audit: type=1326 audit(1738865605.389:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10428 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdc5cf8cde9 code=0x7ffc0000 [ 544.937059][ T29] audit: type=1326 audit(1738865605.389:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10428 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdc5cf8cde9 code=0x7ffc0000 [ 544.941571][T10439] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 544.964760][T10439] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 544.987551][ T29] audit: type=1326 audit(1738865605.389:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10428 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdc5cf8cde9 code=0x7ffc0000 [ 545.010181][ T29] audit: type=1326 audit(1738865605.389:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10428 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdc5cf8cde9 code=0x7ffc0000 [ 545.032300][ T29] audit: type=1326 audit(1738865605.389:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10428 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdc5cf8cde9 code=0x7ffc0000 [ 545.054345][ T29] audit: type=1326 audit(1738865605.389:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10428 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdc5cf8cde9 code=0x7ffc0000 [ 545.076403][ T29] audit: type=1326 audit(1738865605.389:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10428 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdc5cf8cde9 code=0x7ffc0000 [ 545.108912][ T29] audit: type=1326 audit(1738865605.389:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10428 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdc5cf8cde9 code=0x7ffc0000 [ 545.193268][ T29] audit: type=1326 audit(1738865605.389:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10428 comm="syz.1.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdc5cf8cde9 code=0x7ffc0000 [ 545.242108][T10439] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 545.258962][T10439] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 545.265027][T10439] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 545.279410][T10439] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 545.285467][T10439] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 545.292946][T10439] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 545.299179][T10439] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 546.200354][T10454] gre1: entered promiscuous mode [ 546.400571][T10458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1209'. [ 546.470242][T10458] 8021q: adding VLAN 0 to HW filter on device team1 [ 546.478813][ T5896] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 546.568852][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 546.659806][ T5896] usb 3-1: Using ep0 maxpacket: 16 [ 546.669190][ T5896] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 546.681126][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.690729][ T5896] usb 3-1: Product: syz [ 546.696431][ T5896] usb 3-1: Manufacturer: syz [ 546.701697][ T5896] usb 3-1: SerialNumber: syz [ 546.756903][ T5896] r8152-cfgselector 3-1: Unknown version 0x0000 [ 546.786435][ T5896] r8152-cfgselector 3-1: config 0 descriptor?? [ 546.924282][T10469] xt_connbytes: Forcing CT accounting to be enabled [ 546.931997][T10469] xt_bpf: check failed: parse error [ 547.068853][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 547.289067][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 547.295739][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 547.369638][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 547.581825][ T5896] r8152-cfgselector 3-1: Unknown version 0x0000 [ 547.588895][ T5896] r8152-cfgselector 3-1: bad CDC descriptors [ 547.603474][ T5896] r8152-cfgselector 3-1: USB disconnect, device number 41 [ 548.650434][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 548.889118][ T9] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 548.998898][ T838] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 549.129371][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 549.272347][T10483] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 549.339333][ T9] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 549.413057][T10471] Bluetooth: hci3: command 0x0406 tx timeout [ 549.413080][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 549.438245][ T9] usb 4-1: config 0 has no interface number 0 [ 549.448905][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 549.459530][ T9] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 549.471671][ T9] usb 4-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 549.502955][ T838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 549.519336][ T838] usb 2-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 549.558854][ T838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.579235][ T838] usb 2-1: config 0 descriptor?? [ 549.587681][T10479] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 549.589395][ T9] usb 4-1: New USB device found, idVendor=1199, idProduct=9091, bcdDevice=2b.84 [ 549.604077][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.612391][ T9] usb 4-1: Product: syz [ 549.617691][ T9] usb 4-1: Manufacturer: syz [ 549.622489][ T9] usb 4-1: SerialNumber: syz [ 549.630981][ T9] usb 4-1: config 0 descriptor?? [ 549.893503][T10490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.924472][ T8037] usb 4-1: USB disconnect, device number 41 [ 549.931019][T10490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.138999][ T9] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 550.487595][ T838] input: HID 28bd:0933 Mouse as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0933.001B/input/input18 [ 550.612972][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 550.626261][ T838] uclogic 0003:28BD:0933.001B: input,hidraw0: USB HID v0.03 Mouse [HID 28bd:0933] on usb-dummy_hcd.1-1/input0 [ 550.656450][ T9] usb 1-1: config 1 has too many interfaces: 129, using maximum allowed: 32 [ 550.666699][ T9] usb 1-1: config 1 has an invalid descriptor of length 207, skipping remainder of the config [ 550.688603][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 129 [ 550.704126][ T9] usb 1-1: config 1 has no interface number 0 [ 550.713999][ T9] usb 1-1: too many endpoints for config 1 interface 30 altsetting 59: 161, using maximum allowed: 30 [ 550.750322][ T8037] usb 2-1: USB disconnect, device number 37 [ 550.896314][ T9] usb 1-1: config 1 interface 30 altsetting 59 has 0 endpoint descriptors, different from the interface descriptor's value: 161 [ 550.909918][ T9] usb 1-1: config 1 interface 30 has no altsetting 0 [ 550.918431][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 550.927808][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 550.936051][ T9] usb 1-1: SerialNumber: syz [ 550.952380][T10497] openvswitch: netlink: nsh attr 0 has unexpected len 96 expected 0 [ 550.965797][T10497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 551.249009][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 551.705658][T10485] syz.0.1217: attempt to access beyond end of device [ 551.705658][T10485] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 551.739174][T10498] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 551.745666][T10498] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 551.751954][T10498] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 551.758051][T10498] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 551.764197][T10498] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 551.970257][ T9] cdc_subset 1-1:1.30: probe with driver cdc_subset failed with error -22 [ 552.014415][ T9] usb 1-1: USB disconnect, device number 53 [ 552.216123][T10512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.251850][T10512] batadv_slave_0: entered promiscuous mode [ 552.486604][T10519] misc userio: Invalid payload size [ 552.499409][ T8037] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 552.699824][ T8037] usb 3-1: Using ep0 maxpacket: 8 [ 552.816620][ T8037] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 552.857007][ T8037] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.897419][ T8037] usb 3-1: Product: syz [ 552.936707][ T8037] usb 3-1: Manufacturer: syz [ 552.942404][ T8037] usb 3-1: SerialNumber: syz [ 553.108936][ T8037] usb 3-1: config 0 descriptor?? [ 553.316592][T10525] overlayfs: invalid origin (00000079009980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e) [ 553.349934][ T8037] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 553.528953][ T9] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 553.698915][ T9] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 554.501843][T10471] Bluetooth: hci4: command 0x0406 tx timeout [ 554.501994][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 554.508343][T10471] Bluetooth: hci2: command 0x0406 tx timeout [ 554.514119][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 554.520367][T10471] Bluetooth: hci0: command 0x0406 tx timeout [ 554.532442][ T9] usb 5-1: config 0 has no interface number 0 [ 554.566964][ T5872] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 554.693808][ T9] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 554.715639][ T9] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 554.752365][ T9] usb 5-1: config 0 interface 255 has no altsetting 0 [ 554.803742][ T5872] usb 4-1: config 0 has an invalid interface number: 74 but max is 1 [ 554.838061][ T5872] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.858202][ T9] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 554.894746][ T5872] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 554.903720][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.903748][ T9] usb 5-1: Product: syz [ 554.903767][ T9] usb 5-1: Manufacturer: syz [ 554.903783][ T9] usb 5-1: SerialNumber: syz [ 554.913458][ T9] usb 5-1: config 0 descriptor?? [ 555.019257][ T5872] usb 4-1: config 0 has no interface number 0 [ 555.037587][ T5872] usb 4-1: config 0 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 555.054726][ T5872] usb 4-1: config 0 interface 74 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 555.067713][ T5872] usb 4-1: config 0 interface 74 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 555.151143][ T5872] usb 4-1: config 0 interface 74 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 555.253294][ T5872] usb 4-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66 [ 555.318747][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.327122][ T5872] usb 4-1: Product: syz [ 555.336807][ T5872] usb 4-1: Manufacturer: syz [ 555.566588][ T5872] usb 4-1: SerialNumber: syz [ 556.325662][ T5872] usb 4-1: config 0 descriptor?? [ 556.361208][T10551] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 556.367392][T10551] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 556.373681][T10551] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 556.379878][T10551] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 556.385967][T10551] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 556.412567][ T46] usb 5-1: USB disconnect, device number 49 [ 556.481655][ T8037] usb write operation failed. (-71) [ 556.723702][ T8037] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 556.740949][ T5872] usb 4-1: can't set config #0, error -71 [ 556.751995][ T8037] dvbdev: DVB: registering new adapter (Terratec H7) [ 557.650506][ T5872] usb 4-1: USB disconnect, device number 42 [ 557.709621][ T8037] usb 3-1: media controller created [ 557.780129][T10562] 9pnet_fd: Insufficient options for proto=fd [ 557.793443][ T8037] usb read operation failed. (-71) [ 557.880267][T10562] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1237'. [ 557.893084][ T8037] usb write operation failed. (-71) [ 558.409381][T10538] Bluetooth: hci3: command 0x0406 tx timeout [ 558.415713][T10538] Bluetooth: hci2: command 0x0406 tx timeout [ 558.421954][T10471] Bluetooth: hci1: command 0x0406 tx timeout [ 558.429514][T10471] Bluetooth: hci0: command 0x0406 tx timeout [ 558.436281][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 558.993781][T10579] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 559.019348][T10579] overlayfs: conflicting options: userxattr,redirect_dir=on [ 560.072534][T10561] slab kmalloc-8k start ffff8880792c4000 pointer offset 80 size 8192 [ 560.081471][T10561] list_del corruption. prev->next should be ffffc9000cc27760, but was ffff8880792c4050. (prev=ffff8880792c4050) [ 560.093995][T10561] ------------[ cut here ]------------ [ 560.099489][T10561] kernel BUG at lib/list_debug.c:64! [ 560.104847][T10561] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 560.111810][T10561] CPU: 1 UID: 0 PID: 10561 Comm: syz.2.1236 Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0 [ 560.122593][T10561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 560.132672][T10561] RIP: 0010:__list_del_entry_valid_or_report+0x15c/0x190 [ 560.139736][T10561] Code: 5a 10 1b fd 42 80 3c 2b 00 74 08 4c 89 e7 e8 4b 4f 3c fd 49 8b 14 24 48 c7 c7 a0 ba 5f 8c 4c 89 fe 4c 89 e1 e8 55 e0 3f fc 90 <0f> 0b 4c 89 f7 e8 2a 10 1b fd 42 80 3c 2b 00 74 08 4c 89 e7 e8 1b [ 560.159374][T10561] RSP: 0018:ffffc9000cc27650 EFLAGS: 00010046 [ 560.165456][T10561] RAX: 000000000000006d RBX: 1ffff1100f25880a RCX: 4ed2db0368520800 [ 560.173433][T10561] RDX: ffffc9000d0e2000 RSI: 0000000000006214 RDI: 0000000000006215 [ 560.181421][T10561] RBP: ffffc9000cc27810 R08: ffffffff819f140c R09: 1ffff110170e519a [ 560.189400][T10561] R10: dffffc0000000000 R11: ffffed10170e519b R12: ffff8880792c4050 [ 560.197373][T10561] R13: dffffc0000000000 R14: ffff8880792c4050 R15: ffffc9000cc27760 [ 560.205347][T10561] FS: 00007fdfe69126c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 560.214278][T10561] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 560.220858][T10561] CR2: 00007fb7517a7bac CR3: 000000002848a000 CR4: 00000000003526f0 [ 560.228853][T10561] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 560.236834][T10561] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 560.244809][T10561] Call Trace: [ 560.248117][T10561] [ 560.251148][T10561] ? __die_body+0x5f/0xb0 [ 560.255496][T10561] ? die+0x9e/0xc0 [ 560.259228][T10561] ? do_trap+0x15a/0x3a0 [ 560.263477][T10561] ? __list_del_entry_valid_or_report+0x15c/0x190 [ 560.269898][T10561] ? do_error_trap+0x1dc/0x2c0 [ 560.274667][T10561] ? __list_del_entry_valid_or_report+0x15c/0x190 [ 560.281087][T10561] ? __pfx_do_error_trap+0x10/0x10 [ 560.286220][T10561] ? report_bug+0x3cd/0x500 [ 560.290750][T10561] ? handle_invalid_op+0x34/0x40 [ 560.295716][T10561] ? __list_del_entry_valid_or_report+0x15c/0x190 [ 560.302159][T10561] ? exc_invalid_op+0x38/0x50 [ 560.306889][T10561] ? asm_exc_invalid_op+0x1a/0x20 [ 560.311942][T10561] ? __wake_up_klogd+0xcc/0x110 [ 560.316801][T10561] ? __list_del_entry_valid_or_report+0x15c/0x190 [ 560.323418][T10561] __mutex_lock+0x9d8/0x1010 [ 560.328112][T10561] ? __mutex_lock+0x602/0x1010 [ 560.333239][T10561] ? az6007_i2c_xfer+0x86/0xbc0 [ 560.338095][T10561] ? __pfx___mutex_lock+0x10/0x10 [ 560.343130][T10561] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 560.349470][T10561] ? irqentry_exit+0x63/0x90 [ 560.354072][T10561] ? lockdep_hardirqs_on+0x99/0x150 [ 560.359370][T10561] az6007_i2c_xfer+0x86/0xbc0 [ 560.364067][T10561] ? __i2c_transfer+0x6f1/0x2220 [ 560.369025][T10561] ? __pfx_az6007_i2c_xfer+0x10/0x10 [ 560.374315][T10561] __i2c_transfer+0x866/0x2220 [ 560.379093][T10561] ? __pfx___i2c_transfer+0x10/0x10 [ 560.384297][T10561] ? __i2c_smbus_xfer+0x1740/0x2dd0 [ 560.389595][T10561] ? __i2c_smbus_xfer+0x174a/0x2dd0 [ 560.394812][T10561] __i2c_smbus_xfer+0x179a/0x2dd0 [ 560.399858][T10561] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 560.405250][T10561] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 560.411619][T10561] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 560.417580][T10561] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 560.424730][T10561] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 560.430138][T10561] ? i2c_smbus_xfer+0x125/0x3d0 [ 560.435009][T10561] i2c_smbus_xfer+0x291/0x3d0 [ 560.439706][T10561] ? __pfx_i2c_smbus_xfer+0x10/0x10 [ 560.445014][T10561] ? __might_fault+0xaa/0x120 [ 560.449710][T10561] i2cdev_ioctl_smbus+0x45b/0x6a0 [ 560.454748][T10561] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 560.460310][T10561] ? __might_fault+0xaa/0x120 [ 560.465006][T10561] i2cdev_ioctl+0x6b5/0x9f0 [ 560.469521][T10561] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 560.474559][T10561] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 560.479594][T10561] __se_sys_ioctl+0xf5/0x170 [ 560.484301][T10561] do_syscall_64+0xf3/0x230 [ 560.488844][T10561] ? clear_bhb_loop+0x35/0x90 [ 560.493548][T10561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.499469][T10561] RIP: 0033:0x7fdfe5b8cde9 [ 560.503906][T10561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 560.523544][T10561] RSP: 002b:00007fdfe6912038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 560.531980][T10561] RAX: ffffffffffffffda RBX: 00007fdfe5da5fa0 RCX: 00007fdfe5b8cde9 [ 560.539977][T10561] RDX: 0000200000000100 RSI: 0000000000000720 RDI: 0000000000000007 [ 560.548053][T10561] RBP: 00007fdfe5c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 560.556130][T10561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 560.564152][T10561] R13: 0000000000000000 R14: 00007fdfe5da5fa0 R15: 00007ffccab6f358 [ 560.572149][T10561] [ 560.575174][T10561] Modules linked in: [ 560.579087][T10561] ---[ end trace 0000000000000000 ]--- [ 560.584551][T10561] RIP: 0010:__list_del_entry_valid_or_report+0x15c/0x190 [ 560.591588][T10561] Code: 5a 10 1b fd 42 80 3c 2b 00 74 08 4c 89 e7 e8 4b 4f 3c fd 49 8b 14 24 48 c7 c7 a0 ba 5f 8c 4c 89 fe 4c 89 e1 e8 55 e0 3f fc 90 <0f> 0b 4c 89 f7 e8 2a 10 1b fd 42 80 3c 2b 00 74 08 4c 89 e7 e8 1b [ 560.611203][T10561] RSP: 0018:ffffc9000cc27650 EFLAGS: 00010046 [ 560.617303][T10561] RAX: 000000000000006d RBX: 1ffff1100f25880a RCX: 4ed2db0368520800 [ 560.625282][T10561] RDX: ffffc9000d0e2000 RSI: 0000000000006214 RDI: 0000000000006215 [ 560.633282][T10561] RBP: ffffc9000cc27810 R08: ffffffff819f140c R09: 1ffff110170e519a [ 560.641258][T10561] R10: dffffc0000000000 R11: ffffed10170e519b R12: ffff8880792c4050 [ 560.649235][T10561] R13: dffffc0000000000 R14: ffff8880792c4050 R15: ffffc9000cc27760 [ 560.657210][T10561] FS: 00007fdfe69126c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 560.666147][T10561] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 560.672760][T10561] CR2: 00007fb7517a7bac CR3: 000000002848a000 CR4: 00000000003526f0 [ 560.680845][T10561] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 560.688827][T10561] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 560.696838][T10561] Kernel panic - not syncing: Fatal exception [ 560.703198][T10561] Kernel Offset: disabled [ 560.707529][T10561] Rebooting in 86400 seconds..