last executing test programs: 9m43.657273277s ago: executing program 2 (id=4445): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x9, 0x6, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f0000000180)=0x10) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r2, 0x402, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r3, 0x6000000) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f00000012c0)={0x18}) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000680)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080046000020000000000011fe78ac1414ff"], 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r4, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000180)=0x3877, 0x4) connect$inet(r4, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto(r4, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e", 0x5f, 0x4008044, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f00000001c0)="94", 0x1) sendto$inet(r4, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x1050) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 9m41.734184125s ago: executing program 2 (id=4455): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40), 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f00000005c0)=[{0x0, 0x4, 0x5, 0x1, @tick=0x40001, {0x1, 0x10}, {0x3, 0x10}, @raw32={[0x0, 0x1, 0x81]}}, {0x2, 0x87, 0x7f, 0x1, @tick, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}, {0x5, 0x4, 0x9, 0x2, @time={0xa, 0x5d}, {0x9e, 0x66}, {0x52, 0x3c}, @result={0xb4c, 0x8}}, {0x3, 0x5, 0xff, 0x0, @tick=0x6, {0x1, 0x7}, {0x9, 0x81}, @connect={{0xd1, 0x83}, {0x1, 0x40}}}], 0x70) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4, 0x3, 0x1, 0x4ddf, 0x1}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) socket(0x40000000015, 0x5, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r7 = accept$alg(r6, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="18", 0x1}], 0x1, 0x0, 0x0, 0x1}], 0x1, 0x40c4844) readv(r7, &(0x7f00000000c0)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1) bind$can_j1939(r5, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}, 0x4048081) 9m39.956367273s ago: executing program 2 (id=4459): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_clone3(&(0x7f00000004c0)={0x80000, 0x0, 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r1, 0x4004550e, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000000)=0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) (async) syz_usb_disconnect(r1) (async) syz_clone3(&(0x7f00000004c0)={0x80000, 0x0, 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) (async) syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (async) ioctl$EVIOCRMFF(r1, 0x4004550e, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000000)=0x94) (async) 9m38.732820165s ago: executing program 2 (id=4468): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000380)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00') madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000500)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e000000006203005b", 0x48}], 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX]) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0600280012800b00010062726964676500001800028005002600000000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r7, 0x0, 0xf3a, 0x0) write$cgroup_pid(r7, &(0x7f0000000000), 0xffffff98) vmsplice(r7, &(0x7f0000000440)=[{&(0x7f0000000240)="f9", 0x1}], 0x1, 0xf) write(r3, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @local, 0x2}, 0x1c) 9m37.820331573s ago: executing program 2 (id=4472): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf5, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x3e, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001880)={&(0x7f0000000540)={0x1330, r0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x10001}, @ETHTOOL_A_LINKMODES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_LINKMODES_OURS={0x12dc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x80, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ':/&\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x43}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'(\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x2e, 0x5, "594401b4b83bfbfa2cdc18e31a5ebfeaa168db824cea3eff82bf94cac7773e4633ed7a3214ad8ec3063f"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8001}, @ETHTOOL_A_BITSET_MASK={0xf6, 0x5, "289fcc7663d4994c1a8a1d03fd99bae6c89a899fc6c6279f2f83b3f63994f06e5c64bb853ed81a301586297093fb92e659f1fe3351b1433f8c343ec3227d47f7560b39014273775aea0e6f593e8d25c3bb70f87de6c0551296104078a5517ccbd76d89bb187fc7043913a65cdcc1d3544c93d23979816a077ee916cd844225dacf3389a796b734f75a091eec59be49bf0d6148acbdfa403421a4cc1335cb4fb57eb5564a52a5b80fcebd0e25c906aaafafe6ecec943da3a9a9bfeab469f8f8312ef426f9a6ac7425876b37b384b4ab151e59cfec8b7619f7fb9abbc0e60a93511a1855e3bc6508f8903aa0c66fe2459291f5"}, @ETHTOOL_A_BITSET_MASK={0x7c, 0x5, "4e0a4a133a7c1c082bc3a713c0161193212b19cff0d64e4298ada2784c992233a9a6d3250ea45807b461cc41900e78f62b9739de9dda5bd5b32171d0887024b4df8339e748de4daed217a700eeccb9656c43019929763e08f309c5d999aefa087bb2c40c7b489b9331fdd48b63a9b71dd72538f0c7cfc837"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xa4, 0x4, "483211c2581d599b0c9051fd0b09dcea89de5d29669679d4ca7e6329c42d6b1ef3684581d85365f1a39b7d715aa2c3f692f935477b553f8489143ad92fcb4c7627f20e8ac2d7f4f213930e87d8a080a5dc5e6acee62fd7c753729b7d84c0cd8e9b6109bc858552251a4775cec1f1b60bb7ee85be15f771150e9f0952ca9296581285a5fdd5954dc6728acd407e3c76fecf4a16c0b19e24dc182d59f6c492a7c0"}]}]}, 0x1330}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000044) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @remote, 0x7}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r4, @in={{0x2, 0x0, @empty}}, 0xf4010000, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg0\x00'}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf5, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x3e, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001880)={&(0x7f0000000540)={0x1330, r0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x10001}, @ETHTOOL_A_LINKMODES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_LINKMODES_OURS={0x12dc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x80, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ':/&\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x43}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'(\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x2e, 0x5, "594401b4b83bfbfa2cdc18e31a5ebfeaa168db824cea3eff82bf94cac7773e4633ed7a3214ad8ec3063f"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8001}, @ETHTOOL_A_BITSET_MASK={0xf6, 0x5, "289fcc7663d4994c1a8a1d03fd99bae6c89a899fc6c6279f2f83b3f63994f06e5c64bb853ed81a301586297093fb92e659f1fe3351b1433f8c343ec3227d47f7560b39014273775aea0e6f593e8d25c3bb70f87de6c0551296104078a5517ccbd76d89bb187fc7043913a65cdcc1d3544c93d23979816a077ee916cd844225dacf3389a796b734f75a091eec59be49bf0d6148acbdfa403421a4cc1335cb4fb57eb5564a52a5b80fcebd0e25c906aaafafe6ecec943da3a9a9bfeab469f8f8312ef426f9a6ac7425876b37b384b4ab151e59cfec8b7619f7fb9abbc0e60a93511a1855e3bc6508f8903aa0c66fe2459291f5"}, @ETHTOOL_A_BITSET_MASK={0x7c, 0x5, "4e0a4a133a7c1c082bc3a713c0161193212b19cff0d64e4298ada2784c992233a9a6d3250ea45807b461cc41900e78f62b9739de9dda5bd5b32171d0887024b4df8339e748de4daed217a700eeccb9656c43019929763e08f309c5d999aefa087bb2c40c7b489b9331fdd48b63a9b71dd72538f0c7cfc837"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xa4, 0x4, "483211c2581d599b0c9051fd0b09dcea89de5d29669679d4ca7e6329c42d6b1ef3684581d85365f1a39b7d715aa2c3f692f935477b553f8489143ad92fcb4c7627f20e8ac2d7f4f213930e87d8a080a5dc5e6acee62fd7c753729b7d84c0cd8e9b6109bc858552251a4775cec1f1b60bb7ee85be15f771150e9f0952ca9296581285a5fdd5954dc6728acd407e3c76fecf4a16c0b19e24dc182d59f6c492a7c0"}]}]}, 0x1330}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000044) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r3, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @remote, 0x7}]}, &(0x7f0000000080)=0x10) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r4, @in={{0x2, 0x0, @empty}}, 0xf4010000, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) (async) 9m37.638455491s ago: executing program 2 (id=4473): socket$netlink(0x10, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x161d21) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = fsopen(&(0x7f00000001c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) (fail_nth: 33) syz_usb_connect(0x0, 0x181, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x48840}, 0x4048089) syz_usb_connect$uac2(0x2, 0x9d, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x582, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x3, 0x1, 0x9c, 0x60, 0x70, {0x8, 0xb, 0x1, 0x2, 0x1, 0x4, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4, 0x7, 0x25, 0xf}, [@mixer_unit={0x7, 0x24, 0x4, 0x2, 0x2, "cb4b"}, @source_unit={0x8, 0x24, 0xa, 0x30, 0x4, 0x2, 0x80, 0x1}, @processing_unit={0xd, 0x24, 0x8, 0x6, 0x5, [0x2, 0x2, 0x0, 0x5]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xb, 0x1a, 0x8, {0x8, 0x25, 0x1, 0x1, 0x6f, 0xe5, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xe4, 0x0, 0x7, {0x8, 0x25, 0x1, 0x1, 0x3c, 0x1, 0x17}}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x1, 0x7, 0x3, 0xff, 0x1}, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x42a}}]}) 9m37.052048479s ago: executing program 32 (id=4473): socket$netlink(0x10, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x161d21) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = fsopen(&(0x7f00000001c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) (fail_nth: 33) syz_usb_connect(0x0, 0x181, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x48840}, 0x4048089) syz_usb_connect$uac2(0x2, 0x9d, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x582, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x3, 0x1, 0x9c, 0x60, 0x70, {0x8, 0xb, 0x1, 0x2, 0x1, 0x4, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4, 0x7, 0x25, 0xf}, [@mixer_unit={0x7, 0x24, 0x4, 0x2, 0x2, "cb4b"}, @source_unit={0x8, 0x24, 0xa, 0x30, 0x4, 0x2, 0x80, 0x1}, @processing_unit={0xd, 0x24, 0x8, 0x6, 0x5, [0x2, 0x2, 0x0, 0x5]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xb, 0x1a, 0x8, {0x8, 0x25, 0x1, 0x1, 0x6f, 0xe5, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xe4, 0x0, 0x7, {0x8, 0x25, 0x1, 0x1, 0x3c, 0x1, 0x17}}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x1, 0x7, 0x3, 0xff, 0x1}, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x42a}}]}) 8m27.545979202s ago: executing program 1 (id=4797): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fe9000/0x2000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8m27.456309604s ago: executing program 1 (id=4798): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x0, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) epoll_wait(r2, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, 0x3) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000407d1e9c3100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000400)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) 8m24.41040625s ago: executing program 1 (id=4814): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xfffffffffffffffd, 0x9, 0xccb, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="a1d55892d365b2d08163d9ce0600000004000000101000008900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r4, 0x0, 0x7}, 0x38) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x40045b0a, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4}) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f00000002c0)) tgkill(0x0, 0x0, 0x4003f) bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000"], 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x4000000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0xc000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, 0x0) 8m21.376040827s ago: executing program 1 (id=4835): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0200000400000000000000deff80000000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000010000000500"/28], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x18, r3, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) r4 = socket(0x18, 0x2, 0x1) sendmsg$FOU_CMD_GET(r4, &(0x7f00000008c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x4028081) socket$packet(0x11, 0x2, 0x300) sendmsg$key(0xffffffffffffffff, 0x0, 0x2000c804) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000010100080400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="080002800400338008000900", @ANYRES32=r5], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x60842, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000280)="660f3a143500000000870fc76bb1c744240002000000c74424020b000080c7442406000000000f011c24660f080f073626f20f2dbc6a000000000fecc3660f3266b822008ee80f35", 0x48}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_GET_LAPIC(r8, 0x8400ae8e, &(0x7f0000000400)) close_range(r7, r8, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[], 0x50}, 0x1, 0xc3, 0x0, 0x20000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="02002acbd49621018918bd7000fddbdf2512000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x5) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 8m20.435848993s ago: executing program 1 (id=4843): openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fe9000/0x2000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8m20.390429428s ago: executing program 1 (id=4845): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x74, 0x103340) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f0000000140)=0xfffff5fe) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x2a, 0x65, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0xff, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x7}}}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}, 0x0) ioctl$USBDEVFS_RESET(r0, 0x5514) 8m5.296043321s ago: executing program 33 (id=4845): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x74, 0x103340) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f0000000140)=0xfffff5fe) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x2a, 0x65, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0xff, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x7}}}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}, 0x0) ioctl$USBDEVFS_RESET(r0, 0x5514) 6m6.971884561s ago: executing program 3 (id=5430): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc02c1, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000080)={0x1, 0x1, 0xfffffffffffffff8, 0x9c}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x7, 0xd) ioctl$DVB_DEMUX_DMX_START(r1, 0x6f29) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f00000b9000/0x4000)=nil, &(0x7f000006c000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00001be000/0x2000)=nil, &(0x7f000008e000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000025000/0x3000)=nil, &(0x7f0000110000/0x2000)=nil, &(0x7f000019a000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00001d9000/0x2000)=nil, &(0x7f0000000280)="46ce43b041d0fa5cd35c97b2d5b372869003624f313ad815ef64e5195e704f2fd16ab49c865205b4650b58b3b66b8b5512b542", 0x33, r0}, 0x68) r3 = fcntl$dupfd(r2, 0x406, r2) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) shutdown(r3, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) ioctl$BTRFS_IOC_SNAP_DESTROY(r4, 0x5000940f, &(0x7f0000000540)={{r2}, "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"}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x700, 0x10, 0x3c00000, 0x1, {{0x6, 0x4, 0x1, 0x6, 0x18, 0x67, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, {[@timestamp={0x44, 0x4, 0xd, 0x0, 0x3}]}}}}}) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@gettfilter={0x74, 0x2e, 0x8, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff1, 0xd}, {0xa, 0xa}, {0xb}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0xab2}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0xffffff37}, {0x8, 0xb, 0xa81}, {0x8, 0xb, 0xff}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x2000c041}, 0x50) 6m5.889727828s ago: executing program 3 (id=5436): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4004014) r2 = socket$alg(0x26, 0x5, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040), 0x0, 0x44800) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000dc}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 6m4.521766268s ago: executing program 3 (id=5437): r0 = socket$kcm(0x11, 0x3, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000300)={0xe2, 0x0, 0x5, "5c2b51696c1d513f613a0a4ae170e7781598bffd9e451b614d8a97189643e1523d374c5af88432d4532ecdb6cb1ea577cccf675872589d88e06bc5def47c0fbba48594a0e797e1691c9b328bfe895c6f34e6959add2a011924cb560cf4ab4a93ede944c67cddeed0bd6f3b996fce26cdcaf02546d97823c7b4ccdbb9a5a12c931c491969ffaced3b6ec146c9b1544165b28fa517bcbd049d199bf59bacf406f8f0c0e4d811b80bc55e06e68923bad16254e2db18b8288b00bae7bdecdc3d963f879cf0b6858613052356140d54ae8bacf14ddebdd166082344577a263f5063a3e388"}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x2, 0x4}, 0xc5, &(0x7f0000003740)=[{&(0x7f0000000600)="270502001a0014000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b0000000000000257", 0x4c}, {&(0x7f0000001a40)="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", 0xcdb}, {&(0x7f0000000180)="327cf14851c08389daa722d82150ffaaccf208e5dc950f26e715f25036644667ed63c66ca1416afa2f1694a8c16aa60b5b25483ef37b8eb0b580c6f050ddb35c77b46bb0d7bd6d0298d7c4e34fc303461509957a1bae88b16193cc3e6d8ffc7f1a7fb255049434485206b00393acd47e0b3edf7151f7e5b7a223239044d7e0b73a40a9e84a8052396198654087ec190a297cb2c976626bceb36f263acc7b117e692d3b403b71d52c5a3066ef9d27b7fbadda7772ac662488fd56c0e66d943802fced4d33bacb2da2b248c70aa77699e45e", 0xc8}, {&(0x7f0000000440)="a37d58a88d6d2538c5e11db645e1af0a93681a0a4739a0cb7b2afc54bcf8ef72e8e7aad4b35c3b27f382", 0x2a}, {&(0x7f0000002740)="08b0f48f0c9cac8a3b3c15bbf49b3783b8d585b4ed8bcf91116634e67500d1ae82651726bdfb5489ea8eb9ecb8855e7d44cdca8a4e16692280d2495373351c7ae531df3e5879dc16cf6bb23e4475d7c3977bba3d0370d55cd3ff5d4f32729dc7b360b56ab0968716f8df04c41ef266c8909e5c3e9d4e85f958764133e8dd044998d03f3eb0bc46f904425e1c3304e6c1719d2734f1adbd1c33e1d058468ed915256ff4ad58836aefa095cf96eee9a4e5ea50d9a80ae4ba5c12776628dea113351c025fb3d8c7f9c38df6e9b7309db6525f7ad75e89e8db833aa4fa5d6145e90522837c4407a32b2abfa7eacf9d65eeaa96376be2e4276cd8ceb12dcd9fa099fe6b88b71602ed9b55dd98604a0b6414415da124c05c13a6e0ef931a6e361c9fbff5c9a679840acecc227c5495314d0d425c78cd2fa15a2b1951bd248bca3b2f27a1", 0x141}], 0x5}, 0x1800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'veth0_to_bond\x00', @random="0131013000"}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0x9, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7f, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 6m4.069827255s ago: executing program 3 (id=5439): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e0000009000000000000000002000100000000000000000200000000030005000000000002000000e00000010000000000000000"], 0x50}}, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x8) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r6, 0x1, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) sendmsg$can_j1939(r4, &(0x7f0000000140)={&(0x7f00000001c0)={0x1d, r6, 0x7ffffffff000, {0x0, 0xf0, 0x2}, 0xff}, 0x18, &(0x7f0000000080)={0x0}, 0x4, 0x0, 0x0, 0x24004045}, 0x1) 6m1.759029974s ago: executing program 3 (id=5443): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, 0x0, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x20}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x8, 0x34, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1700000007000000c25e00000500000000200000", @ANYRES32, @ANYBLOB="0200"/18, @ANYRES32=r0, @ANYRES32, @ANYBLOB="01000000050000000100000000000000000000000000000000000000c2"], 0x50) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x281}, 0xc, &(0x7f0000001380)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83", 0x9e}, {0x0}, {&(0x7f00000005c0)="f2b314", 0x3}], 0x3}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000540)="a22caaffe37d4620d1a9427c00787b63b26c5b83ef8ce8f8fe823d77c642dd73361c1f115fdce55de92bede6e812191b97", 0x31}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {&(0x7f00000006c0)="138b9f8300af1d793c8e1a97c74fa040f70f2fe9", 0x14}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e91", 0x23}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f5ab26a8f1466d90f0f98ff1a0e2b1018604ef19bc70a", 0x5b}], 0x6}}], 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}]}, &(0x7f0000000040)=0x10) shutdown(r1, 0x2) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r2}, 0x8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"373ab6e870bf64ef25ad87deef94c3b7350df627ea76a6efbd6c33a19e5dde0b3718dac0c2b8e833beb9e0347000fc7332c43a3128856f23df4628fb1e54b1745094c19bc88c190192f58dda884b3296f7cd6373842bff61047e0697c9af6e9f62b88fd21621b527902efdae6efd3516c7e5a36f4aaa12cd1b3ac0686db46783f45fe6aa2515ab6996b4807b0d9575a9061a775ef515a40b97c34035e8e412b9200000001000000062a07ab97f50ff5deb8a5978611317016887694245b363252230bbe17ed0f591f935d8e4ae7563eeff2fdfad8a775f0a4b15f63f5c4851df9aef747ace240cec55ce1659c08d38714245835e15291c4973ade3b2006d8870a1d739eb8e7a284e23f660b2061e31a70627be4acb16ecbe8a4edde1c5397c761a2fe0690f5d580ebf35b8640441ddf47d1f67a5e2d892f14a4f88412ce3cc8ec4d0580729c8638502410837253d6ac316ee9c6a24eb5d83463ff9bdf81f31c12b04adec97fe1377d2f29067e5f6f48cc123f2c4c02afe60d224c7d974a63c1aa9b110d2187f18de3753b57c630eab26238e8201501a007da99f1d07f76c4da113859ab55792049a15c5d83051f41ae951912eb81154f2398a729b6d6c51d6850bddcd4b35b24996e4ec707d1a744dff58ea5030fcd6b46a468ac029f86be30c7c3d5708e3871fed2e63b9c3ad265350e87e9fc44696eadeecc1ff67e30b64be27f480180d26218d031380149bcc31bd712063e9c09ed5329a530800000025d79eb9d4491d82d2b7a3d7d0cf9286396fcb8c2ccf1655b3ba420c36c3fb88d788308e947cc15e0957a98a843911c954c2a2feccd60d0000da8330cd1de951bcd767cf211a241c882b8d5e608fc0e796afead2a7b05018b4ae6c034c4c4997868343a5d064838dd0aca0d21b429665a0a1b4fd17cd34e711cee01d2348dc5871cca7ab4e4924f6f4bc29e7dbfae6788549e600000000271cd7ddfabd45803a6d1145734a82b2b9a6a87c8e118629840a027fd3f8e5a6a5dccee1a480d6cd0402a64db2263b1a9de61848b1eb31b51189f4caa2fdf0c3a38275386522137fe573ec27693a337c324952480c9ae476a694010aa22095c6d8bfceb5e024cbc21d6c1d1b17fae63dc627a948c4eca7dfa3f8a5e628531472e00ed28f2d2b7fcf03b5ba1975fcc010482a08c7800b3c87587a9fea37402ffafcc9cabc16a123164765d10dafe323ce33f197af8a3cf57332dbbee3f263a16cb565b61690b5804341630437ad2277be4ff82d1aa32c15b0cf99c88c7bca0ecf47a3be490bf6079f19acdf9a71f636fff612167c849b5c149cb32d8dd98d2aa8bb0606a1214fc1f0da04476cd8c3c056ec88eefca4d331ecbd5416c356466202cb97ddfc320b7594d5ab2e9102d549ffa72300"}) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 6m1.385187915s ago: executing program 3 (id=5444): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000184e02800c000200060000001f000000060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000100)={0x5, 0x40, '\x00', 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) unshare(0x24020400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$sock_buf(r3, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f0000000540)) socket$kcm(0x29, 0x5, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/rt6_stats\x00') lseek(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r6, 0x0, 0xd0, 0x0, &(0x7f0000000000)=0xfffffe57) bind$packet(r4, &(0x7f0000000040)={0x11, 0xf5, r5, 0x1, 0xfc, 0x6, @multicast}, 0x14) 5m46.265574047s ago: executing program 34 (id=5444): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000184e02800c000200060000001f000000060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000100)={0x5, 0x40, '\x00', 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) unshare(0x24020400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$sock_buf(r3, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f0000000540)) socket$kcm(0x29, 0x5, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/rt6_stats\x00') lseek(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r6, 0x0, 0xd0, 0x0, &(0x7f0000000000)=0xfffffe57) bind$packet(r4, &(0x7f0000000040)={0x11, 0xf5, r5, 0x1, 0xfc, 0x6, @multicast}, 0x14) 11.682332813s ago: executing program 6 (id=6994): sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400"], 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="008393fb1800000008000a00", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x200000000000011, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getsockname$packet(r5, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) connect$unix(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x805, 0x0) syz_open_dev$sndctrl(0x0, 0x1, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f0000000300)=r0) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000000080000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) socket$nl_rdma(0x10, 0x3, 0x14) 8.486581508s ago: executing program 6 (id=7011): gettid() openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000700)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000ff0000fedbdf25030000005800018044000400200001000a000000000000040000000000003a00400000000000000104800000200002000a0000000000000000000000000000000000000000000000010000000d0001007564703a73"], 0x6c}}, 0x0) 8.337392181s ago: executing program 6 (id=7014): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x1e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x8, {0x77359400}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xcc, "18020023"}, 0x7, 0x1, {}, 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x6, 0x9, 0x80, 0x0, 0x6, 0x91b1}, [@TCA_NETEM_RATE={0x14, 0x6, {0x0, 0xfffffff7, 0x6, 0x2}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x5706f64601f79ec3}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000040)=0x1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,usuriid=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x800, 0xf0cb2f4a0c2cfc5d, 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(r8, 0x80047453, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xfffffffffffffe05, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000040)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, 'pim6reg\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r9, 0x4008b100, &(0x7f00000000c0)={0x18, 0x4000000, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, 'bond_slave_0\x00'}}) 6.361344709s ago: executing program 6 (id=7021): sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400"], 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="008393fb1800000008000a00", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x200000000000011, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getsockname$packet(r5, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x805, 0x0) syz_open_dev$sndctrl(0x0, 0x1, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f0000000300)=r0) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000000080000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) socket$nl_rdma(0x10, 0x3, 0x14) 6.149983081s ago: executing program 5 (id=7023): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c090}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r5, 0x4008af04, &(0x7f0000000740)=0xffffffffffffffff) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000440)) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x0, 0xf000}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) socket$inet6_sctp(0xa, 0x801, 0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 6.023295608s ago: executing program 5 (id=7024): r0 = syz_open_dev$vim2m(&(0x7f0000001580), 0x57, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x2d, 0x1, 0x4, "3a8e00000000c20500ca55e21e0000000400b2b679d200", 0x31435750}) 5.97416731s ago: executing program 5 (id=7025): timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x420b41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r2, 0x5402, 0x0) ioctl$TCSETS(r2, 0x5402, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40086602, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x26aadf42, 0x0) fchdir(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x24000000}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "5c8d02008239213c4d23edfcbe6d55b57cb15e63c15cee7ae7c53d570d81c3d624c716334e82788d"}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x8010}, 0x4040000) 5.30450822s ago: executing program 7 (id=7030): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0700000004000000060000000800000000000000313e02ca07283d72a93b8454cccb02dd64711e7abe387610aa0e2f60e4b9a823a5b7ff49cd440a0e5a36ccd1828b6eca4b141313a8d7707a791e54ae36b0e2e395e8771fd140cbdf400fc2c762403b058de54dcd15737af1f106dffb62b681dab1a9c441a4687372ee4fd300bac6ba8a720ddde9956bd1a83e3c33d1aa2110ec", @ANYRES32, @ANYBLOB="8300"/20, @ANYRES32=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xf7, 0x90, 0x2, "", [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x6, 0x0, 0x1}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x250, 0x0, 0x9, 0x3, 0xff, 0xf9}, 0x116, &(0x7f0000000480)={0x5, 0xf, 0x116, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x80, "521839f9517de2613f35c1e67464f0c2"}, @ssp_cap={0x14, 0x10, 0xa, 0x2c, 0x2, 0x7, 0xf00f, 0xc75d, [0x0, 0xff30]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x7, 0x9, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "2db7ebeab822e5039c6cd11d6342d3b6"}, @ss_container_id={0x14, 0x10, 0x4, 0x25, "034c0fe5d94e880d1e7bb1f760032f2c"}, @generic={0xb7, 0x10, 0x2, "8f0b900ae09402700a00595a64a3ee5277eeb6009ff847edcba40eeb628ac1031b467823e66bf5dfcdf4823c40eedad2d6eefc8bd58c691c25a7a38ef6805f0006ae76ad3a4f2b7030c7f431e0f226fa0f75c423fb8e2e6ea81867717e72f21a79273099bf586aed2cebe5996c36de903665a8ae51b837101d8315a3b0350598df579e1aac031b83cb0068c04ea52282b13ea3c06ef09c07efdbf355d432015a426d565308ea16c64c48a15647046ccd4cd5f6d2"}]}, 0x2, [{0x6, &(0x7f00000005c0)=@string={0x6, 0x3, "a6d85292"}}, {0x83, &(0x7f0000000600)=ANY=[@ANYBLOB="83030acbc974a99ef654f0fd5b3ad104e77c3fec98e4146b568c716c6367cdcb4e0b4a236dad9dfda452967ddc0095e83fda7193c4f553efe03c0509e7d0257539056ca29fce2d54931b40127c01196ef476ffd419493c8d2c0fc5fe3ff01ebf4f31e00925bb6a198b7bd7e92f5ead3d3413ef2c24d26e30cfa38ae03178e267"]}]}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) (async) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r3, 0x6, 0x1, 0xfffffffffffffffd, &(0x7f0000000000)=0x2000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x36900, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x1, 0x5c, 0x8, 0x0, 0x4, 0x9, 0x4, 0xf8, 0x7, 0x2, 0x8, 0x9d, 0x0, 0xfffffff9, 0x9, 0x9, 0x5, 0xb, 0xc9, '\x00', 0xe6, 0xffffffffffffffff}) r7 = socket(0x40000000015, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x271b, &(0x7f0000000580)=""/102385, &(0x7f0000000000)=0x41) (async) getsockopt(r7, 0x200000000114, 0x271b, &(0x7f0000000580)=""/102385, &(0x7f0000000000)=0x41) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x1a, 0x7, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x6900, 0x4, 0x0, 0x3, 0x8], 0x30000, 0x202}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000001000/0x2000)=nil, 0x2000}, 0x6}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCMIWAIT(r8, 0x545c, 0x0) (async) ioctl$TIOCMIWAIT(r8, 0x545c, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x94, &(0x7f0000019580)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x2, 0x1, 0x7, 0x30, 0x24, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "f124623d"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x9711, 0x81, 0x4}, {0x6, 0x24, 0x1a, 0x485, 0x20}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0xe}, @acm={0x4}, @dmm={0x7, 0x24, 0x14, 0x1, 0xfacc}, @dmm={0x7, 0x24, 0x14, 0x1, 0x8}, @acm={0x4, 0x24, 0x2, 0xa}, @dmm={0x7, 0x24, 0x14, 0x1, 0xa14}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0xfb, 0x10}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xa, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x7, 0xff, 0x3}}}}}}}]}}, &(0x7f0000019900)={0xa, &(0x7f0000019640)={0xa, 0x6, 0x310, 0x2, 0x6, 0x9b, 0x8, 0xa}, 0xf, &(0x7f0000019680)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x6e25b1d0e49e447, 0x7, 0x2, 0x9, 0xe}]}, 0x3, [{0xc4, &(0x7f00000196c0)=@string={0xc4, 0x3, "2f404aca5231bb03c295611aa4eff18c228b346bb32a89e03b0d2d4005bb6bb68a80f4da3146113c7394d961719395a424de8ea4159846107070222f6ad3ddd246399564e61477a5fd1eea1b8233fe15b3f8613ec959c4f6e8c7a1c8722ca715e291cdace5c7cc2c811728d9bd4be89f90f0c1db7b47cab8ac3164ace0ace8cd239984836198788158a947d7a1ad36d5de38b3e8f45c48f99e18099f9b416955a6941ff11b635be5557f7030dfa82b3643190b0167c6e91011ab20c9feafa5c2cfe3"}}, {0xc3, &(0x7f00000197c0)=@string={0xc3, 0x3, "e2f6806a3615a42173c97f33c9ae1fd262b091ec9e7ed690dc81d763ac4d870686b374631b78f56b572d5fa173e46ac81fac1d7627c8f917f3b50d38e666ab712db2b5a2e4d168f72bc5b71b738c1a62ac671c55f60029fff4ebf4abb87b090cdc1424daef3a285d2fcbbae6d24639af47cea6a0a2c85a8af81740cca37572211addedb7aa168b945f6de70bf3e6c84bbb6004fd3e0e0ca7963ba4fc29da8906d563338cc56d59366153d7bb68d050cbe6581bcdc36f26c11a7e29c7380d4c96e4"}}, {0x4, &(0x7f00000198c0)=@lang_id={0x4, 0x3, 0x816}}]}) (async) r9 = syz_usb_connect$cdc_ncm(0x6, 0x94, &(0x7f0000019580)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x2, 0x1, 0x7, 0x30, 0x24, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "f124623d"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x9711, 0x81, 0x4}, {0x6, 0x24, 0x1a, 0x485, 0x20}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0xe}, @acm={0x4}, @dmm={0x7, 0x24, 0x14, 0x1, 0xfacc}, @dmm={0x7, 0x24, 0x14, 0x1, 0x8}, @acm={0x4, 0x24, 0x2, 0xa}, @dmm={0x7, 0x24, 0x14, 0x1, 0xa14}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0xfb, 0x10}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xa, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x7, 0xff, 0x3}}}}}}}]}}, &(0x7f0000019900)={0xa, &(0x7f0000019640)={0xa, 0x6, 0x310, 0x2, 0x6, 0x9b, 0x8, 0xa}, 0xf, &(0x7f0000019680)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x6e25b1d0e49e447, 0x7, 0x2, 0x9, 0xe}]}, 0x3, [{0xc4, &(0x7f00000196c0)=@string={0xc4, 0x3, "2f404aca5231bb03c295611aa4eff18c228b346bb32a89e03b0d2d4005bb6bb68a80f4da3146113c7394d961719395a424de8ea4159846107070222f6ad3ddd246399564e61477a5fd1eea1b8233fe15b3f8613ec959c4f6e8c7a1c8722ca715e291cdace5c7cc2c811728d9bd4be89f90f0c1db7b47cab8ac3164ace0ace8cd239984836198788158a947d7a1ad36d5de38b3e8f45c48f99e18099f9b416955a6941ff11b635be5557f7030dfa82b3643190b0167c6e91011ab20c9feafa5c2cfe3"}}, {0xc3, &(0x7f00000197c0)=@string={0xc3, 0x3, "e2f6806a3615a42173c97f33c9ae1fd262b091ec9e7ed690dc81d763ac4d870686b374631b78f56b572d5fa173e46ac81fac1d7627c8f917f3b50d38e666ab712db2b5a2e4d168f72bc5b71b738c1a62ac671c55f60029fff4ebf4abb87b090cdc1424daef3a285d2fcbbae6d24639af47cea6a0a2c85a8af81740cca37572211addedb7aa168b945f6de70bf3e6c84bbb6004fd3e0e0ca7963ba4fc29da8906d563338cc56d59366153d7bb68d050cbe6581bcdc36f26c11a7e29c7380d4c96e4"}}, {0x4, &(0x7f00000198c0)=@lang_id={0x4, 0x3, 0x816}}]}) syz_usb_control_io$cdc_ncm(r9, &(0x7f0000019a80)={0x14, &(0x7f0000019940)={0x40, 0x8, 0xf7, {0xf7, 0xb, "7031dbe12f08c56e052302ce931c358095ffbfebac186f3c8750a0819fbf742ca19d1b1dff6a8b453db00e4cf908bc78e35e0b4e3b663150df5239ec69457e4caa17612715a8f5ff01874331b3c79fefa944910380d0b84d9bb6f3c43a9de8c195e4bd881f096fcd9d97b9f748b29b4db708c70a4cb1d0bf8bc806427dfd34fa48d4a1ae67a6d519e8d54e8513c8ce004e2bc64f5ae0d11d29b19bf7a840f1281c14ab2f343f11c05ee14969399de43e88f6051252f992a5d64bc58236f4286ad48fae31d64517834e7ef66617e3fdfd34b9c6d867dc0413e6107061cdca29c4edecd3cb96991661085aedf42f3503bc663f5db86c"}}, &(0x7f0000019a40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000019d00)={0x44, &(0x7f0000019ac0)={0x20, 0x18, 0x4a, "64550f2fe78389e98c1a0410dd7824293d20f9628a65edeaa3970648dd9578908c9892df3b680967c95b5d0b5ccb318dddf87ab155fde9e172f8d9b4a54506f790d19dfeaad238fc81c3"}, &(0x7f0000019b40)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000019b80)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000019bc0)={0x20, 0x80, 0x1c, {0xb1, 0x80, 0x7, 0x81, 0x4, 0x8a, 0x5, 0x78b, 0x8, 0x9, 0x7f, 0x2}}, &(0x7f0000019c00)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000019c40)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000019c80)={0x20, 0x87, 0x2, 0x37d}, &(0x7f0000019cc0)={0x20, 0x89, 0x2, 0x1}}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 5.29008581s ago: executing program 4 (id=7031): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x168, 0xffffff7a, 0xffffffff, 0x168, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xd0, 0x0, {0x11}, [@common=@unspec=@time={{0x38}, {0x5, 0xfbfffff1, 0x8428, 0x1286b, 0x80, 0xc, 0x2}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x38, 0x1d}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x41}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) 5.113556841s ago: executing program 4 (id=7032): set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) recvmsg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000340), 0x1a1002, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x80044dfe, &(0x7f0000000380)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0cc5640, &(0x7f00000000c0)={0x2, @sdr={0x32314d54, 0x400ffff}}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) listen(0xffffffffffffffff, 0x0) r6 = syz_open_dev$dri(0x0, 0x1ff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000280)={0x3, r8, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) r9 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r9, &(0x7f0000000480)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000240)=[{0x0}, {&(0x7f00000002c0)="c7934c2b8cb65b8c23a498c85d99e9882c0d3f090eb7b6464a188a6ca1063ebadb5174c27bc50eb4371c14763aa6c0f112a8cc72189a784b87bae2d958275336903661a0a591032beaf89091f5891cdfd0665e179b3314318cc59e9cfb071cc1d619147383bf86365e5983ca5d62e9ce64e72b100f3b2da44e33f9a23e71824a9d61afa13b6047a6a58eb2941cab19beefc368799df927217159207eb522fac33985454af74673e3e7fc20c6d29fc50e0723f9e0b92118dc7b6626c632c11dc5feffeb954570970df8f835580fd6", 0xce}, {&(0x7f00000001c0)="e7d80a430bd1407c7af58bfe09ff3e85b5409b1a718914c0196bb94b10e8b9f51a09dffd38f7e180465edefc1f68c436536dfee9b29796cf256dd33da3ad9417e5551481a27d31b24ea84362356695bf37b4d85ad1", 0x55}, {&(0x7f00000003c0)="96b773bf2015cb898f690deabd19147918e364b75cf349916c1331ff5f4e6600ba6aaca9d6f0f69db5b97b272c1c55c7695fe4b5ec690f81c7a0997697d8c23dbdbc1c5f2575232acda013c3b2b6ee882444320d55ca0f6abc658a45cb337d6bb30075f74264164ead3f221e8f3b27de07c069aa2a603d0e7f4c1ac409df32545f098a69336155b1a06d5e85ed", 0x8d}], 0x4, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c00000010004b0429bd7000faffffff7a000000", @ANYRES32=0x0, @ANYBLOB="08b0010006820000400012800b0001006272696467650000300002800c002200000000040000000005002400010000000600080088a80000080005000100000005002b00050000000a000100aa"], 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) 4.652242837s ago: executing program 6 (id=7033): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.current\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000106000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000900)=ANY=[@ANYBLOB="12011001000000406d0498c2400001020301090224000101ff78090904000d01030100ac3e5b0109058103060000000000000000feff5a1d5a0ff6082c6499d5a15aefa546e593a1018eee9b41a873a05df335370d9662a15a92b52a276121cb3dac7e7e9601c4ed236e0f947f92e53c2103dbeacb06c102587da013fdf14c637bd6adbd"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r1, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='io\x00') socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000240)={0xa, 0x2, 0x1, {0x8000005, 0x1001, 0x7, 0x86b}}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f0000004a80)=[{{&(0x7f0000000440)=@phonet, 0x80, &(0x7f0000000880)=[{&(0x7f00000004c0)}, {&(0x7f0000000600)=""/253, 0xfd}, {&(0x7f0000000700)=""/247, 0xf7}, {&(0x7f0000000800)=""/100, 0x64}], 0x4, &(0x7f00000008c0)=""/49, 0x31}, 0x7}, {{0x0, 0x0, &(0x7f0000004280)=[{&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/102, 0x66}, {&(0x7f0000003280)=""/4096, 0x1000}], 0x3, &(0x7f00000042c0)=""/183, 0xb7}, 0xd}, {{&(0x7f0000004380)=@nl=@proc, 0x80, &(0x7f0000004900)=[{&(0x7f0000004400)=""/104, 0x68}, {&(0x7f0000004480)=""/241, 0xf1}, {&(0x7f0000004640)=""/197, 0xc5}, {&(0x7f0000004740)=""/205, 0xcd}, {&(0x7f0000004840)=""/140, 0x8c}], 0x5, &(0x7f0000004980)=""/218, 0xda}, 0x4}], 0x3, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x25, 0x24e, 0x2, 0xb49, 0x1fffffffffff, 0x7, 0x8, 0x5}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x400c0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x5, &(0x7f00000021c0)=ANY=[@ANYRES64, @ANYRES8=r3], &(0x7f00000001c0)='syzkaller\x00', 0xcc, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000001200)="4c4228369f88e91870041ef4c8baa41449dc6ad5553764e898ddee1dfbb587ef4e6854a6bea12aecd99ac5dd4e39745d195df155a8628b7483b791d4de8609a893ccfbe9dc5c2ed555df193d92968b81da97fe3f0f220dd48b29c98152d9ecb2bb68cbf0bfe454a10e0adf453bd021ba3b502665c757d209f1fa9daa8979aa1fc22684d52bba1cd3c5946a6ea16b40f3bf8cc0134fb55a63817f6bac437682ed4c30147c2d86997f970ba094a19b0de4904bf83ff6fc3f0e46aba38692387ce1", 0x4}, 0x4c) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000540)={{0x0, 0x6}, {0x18}, 0x0, 0x7, 0x1}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r6], 0x0}, 0x0) mount$fuseblk(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x10c091, 0x0) 4.006749028s ago: executing program 4 (id=7035): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) r2 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="20140f0000288f76053e519b7b0f48ded62aba0538"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000001eb6034f2e8f67a60000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x2000000000000030, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x2000000000000030, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="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"], 0x13c}}, 0x800) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0'}, 0xb) socket$xdp(0x2c, 0x3, 0x0) (async) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'sit0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000002c0)=0x200000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10) (async) bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="030035650400000000000000", @ANYRES32=0x1, @ANYBLOB="f7ffffff00"/20, @ANYRES32=r10, @ANYRES32=r1, @ANYBLOB="05000000010000000300"/28], 0x50) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="030035650400000000000000", @ANYRES32=0x1, @ANYBLOB="f7ffffff00"/20, @ANYRES32=r10, @ANYRES32=r1, @ANYBLOB="05000000010000000300"/28], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3.777373647s ago: executing program 5 (id=7036): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_G_LOG_ADDRS(r0, 0x805c6103, &(0x7f0000000080)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0x0, 0x1}}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00', @ANYRES16=r6, @ANYBLOB="0800a4"], 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x4000840) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) unshare(0x20000400) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x6000000d}) r7 = socket$inet6(0xa, 0x1, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r9}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f00000007c0)={0x28, 0x3, r9, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) close_range(r7, 0xffffffffffffffff, 0x0) read$char_usb(r2, &(0x7f00000001c0)=""/4068, 0xfe4) r10 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000008bd2805090000000000010902240001000080000904f301010300020009211508fe0122070009058103"], 0x0) syz_usb_control_io(r10, &(0x7f0000000680)={0x2c, &(0x7f0000000500)={0x20, 0x10, 0x47, {0x47, 0xb, "ca9a65f6e503a04d9fa3b39b3203e30cbd42acea6205610756f0377a2671068e61e86bb70db603b1d5189a1b06717a1007615c53f18d11a01d95d4aae74b76adfc2f09aad0"}}, &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44d}}, &(0x7f00000005c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xe, 0x80, 0x6}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x0, 0x6d, 0x10, "38320237", "ea316995"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x3, 0xf7, 0x8, 0x4, 0xfff2, 0x1}}}, &(0x7f0000000b00)={0x84, &(0x7f00000006c0)={0x20, 0x10, 0x55, "7f572e1e480359d09750c5abf6af322062298718bb3e701085075dcc39dedb9e33dfe475c4c544c55171e9a416dcfe247c15fb16c3df5debd7acc08a57e992595321f69fe6376aac93efca7ce35c1edc452ade43a9"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000780)={0x0, 0x8, 0x1}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000800)=ANY=[@ANYBLOB="2000040000004001c574"], &(0x7f0000000840)={0x40, 0x7, 0x2, 0x27}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000008c0)={0x40, 0xb, 0x2, "1d5a"}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000940)={0x40, 0x13, 0x6, @local}, &(0x7f0000000980)={0x40, 0x17, 0x6, @random="1d0d798c6d63"}, &(0x7f00000009c0)={0x40, 0x19, 0x2, "fb47"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000ac0)={0x40, 0x21, 0x1, 0x2}}) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0939f1e1f1312fc6f4bb4f74"], 0x0}, 0x0) 3.590781837s ago: executing program 0 (id=7038): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8010) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x44f01}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0xc3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 3.289527078s ago: executing program 0 (id=7039): socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x28042, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRES16=r1, @ANYRESHEX=r1, @ANYRES64=0x0], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000680)="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", 0x158}, {&(0x7f00000001c0)="2338a41688d1e5c2052081ebef15ce5a81", 0x11}], 0x2}}], 0x1, 0x400cc04) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x40) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x7ff9, 0x0, 0x9, 0x10, 0xfffffe0000000001, 0xfa11, 0x6}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r2, &(0x7f0000000000)=""/43, 0x2b) getdents64(r2, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x22, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x9d3d, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x6e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) pread64(r5, 0x0, 0x3, 0x0) close(r5) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='uid_map\x00') preadv(r6, &(0x7f0000000540)=[{&(0x7f0000000080)=""/23, 0x1f}], 0x1, 0x2, 0x4) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) 2.253954493s ago: executing program 7 (id=7040): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x46, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x102, @local, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)='\t', 0x1}], 0x1, 0x0, 0x0, 0x7000000}, 0x41) 2.04752257s ago: executing program 4 (id=7041): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000401000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.93492136s ago: executing program 7 (id=7042): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) 1.866336859s ago: executing program 4 (id=7043): sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400"], 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="008393fb1800000008000a00", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x200000000000011, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getsockname$packet(r5, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x805, 0x0) syz_open_dev$sndctrl(0x0, 0x1, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f0000000300)=r0) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000000080000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) socket$nl_rdma(0x10, 0x3, 0x14) 1.827268676s ago: executing program 0 (id=7044): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xf5ff}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_PAYLOAD_OFFSET={0x8}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) 1.798394089s ago: executing program 7 (id=7045): set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) recvmsg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000340), 0x1a1002, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x80044dfe, &(0x7f0000000380)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0cc5640, &(0x7f00000000c0)={0x2, @sdr={0x32314d54, 0x400ffff}}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) listen(0xffffffffffffffff, 0x0) r6 = syz_open_dev$dri(0x0, 0x1ff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000280)={0x3, r8, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) r9 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r9, &(0x7f0000000480)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000240)=[{0x0}, {&(0x7f00000002c0)="c7934c2b8cb65b8c23a498c85d99e9882c0d3f090eb7b6464a188a6ca1063ebadb5174c27bc50eb4371c14763aa6c0f112a8cc72189a784b87bae2d958275336903661a0a591032beaf89091f5891cdfd0665e179b3314318cc59e9cfb071cc1d619147383bf86365e5983ca5d62e9ce64e72b100f3b2da44e33f9a23e71824a9d61afa13b6047a6a58eb2941cab19beefc368799df927217159207eb522fac33985454af74673e3e7fc20c6d29fc50e0723f9e0b92118dc7b6626c632c11dc5feffeb954570970df8f835580fd6", 0xce}, {&(0x7f00000001c0)="e7d80a430bd1407c7af58bfe09ff3e85b5409b1a718914c0196bb94b10e8b9f51a09dffd38f7e180465edefc1f68c436536dfee9b29796cf256dd33da3ad9417e5551481a27d31b24ea84362356695bf37b4d85ad1", 0x55}, {&(0x7f00000003c0)="96b773bf2015cb898f690deabd19147918e364b75cf349916c1331ff5f4e6600ba6aaca9d6f0f69db5b97b272c1c55c7695fe4b5ec690f81c7a0997697d8c23dbdbc1c5f2575232acda013c3b2b6ee882444320d55ca0f6abc658a45cb337d6bb30075f74264164ead3f221e8f3b27de07c069aa2a603d0e7f4c1ac409df32545f098a69336155b1a06d5e85ed", 0x8d}], 0x4, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c00000010004b0429bd7000faffffff7a000000", @ANYRES32=0x0, @ANYBLOB="08b0010006820000400012800b0001006272696467650000300002800c002200000000040000000005002400010000000600080088a80000080005000100000005002b00050000000a000100aa"], 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) 1.702145916s ago: executing program 0 (id=7046): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x300000000000000, 0xfffffffffffffffd, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0xff00, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) 1.500638521s ago: executing program 6 (id=7047): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) getpeername$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r2, 0x402, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r3, 0x6000000) syz_usb_connect$cdc_ecm(0x2, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109025100010100000309040000ff02020000052406000005240000000d240f010000000000000000000424130505240102"], 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r5 = dup(r4) io_setup(0x2017, &(0x7f00000009c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, r5}]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000040)=0x5) read$FUSE(r5, &(0x7f0000005380)={0x2020}, 0x2020) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f00000012c0)={0x18}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080046000020000000000011fe78ac1414ff"], 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r7, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000180)=0x3877, 0x4) connect$inet(r7, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) 1.368642421s ago: executing program 0 (id=7048): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x0, 0x0) r2 = gettid() r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000240)={0xf413, 0x10000, {r2}, {r4}, 0xed, 0x3}) pipe2$9p(0x0, 0x4080) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x107800, 0x0) sendfile(r5, r6, 0x0, 0x201f00) 894.903231ms ago: executing program 0 (id=7049): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20402) ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0x4) syz_usb_connect(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e201020301090224000100000000090471020216fa1f0009051408100000fa0009058202"], 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ppoll(&(0x7f00000002c0)=[{r1, 0x3000}, {r1, 0x200}], 0x2, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0)=0x2) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 338.457178ms ago: executing program 5 (id=7050): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400240000000000000200000938000480340001800b00010065787468647200002400028008000740000000170800064000000002050002000000000008000340fffffffd0900010073797a30000000000900020073797a320000"], 0x8c}}, 0x0) 233.624645ms ago: executing program 7 (id=7051): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x5}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000002400)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)="993f9c1af8c3e77309004bb415ed2244669814a2eb6aaa9a9a562bb761e5516ab245ee774d7249a97bceff21720849284148073a4d14805c6e61d91afd0e301d545369f63d7fc3c355c510ff695c6b6a90eb7cc704696e348b27bd", 0x5b}, {&(0x7f0000000580)="e3", 0x1}, {&(0x7f0000000cc0)="b6db6051d3a1d1848f67cae7aa98f670fd3a23f9242d7fc58648b9f7ad8d69cd5f82ca086db8138de47f21b1a7edb1a05ce8f2d98752aca87a5100d16f659e74ab11345d1e9c0db28e66aefc201c5d85ffb6569a36bbb7cb374f62d4fd65d4930d9411fad799038dec28996a7235a49e5ee71b9f34e7f7c61a9f3197b06c7aaa015567beca8d3d2b1fd392fa2631c2e28b54e9df466fccc87696795fbb19b1797065aad7bd351a60c6abbe7bd63d357e3a7ab1bb21f92c419b3b85ac4bb8dce30830af19591374e9b1204a23ece56d0cc5afe505819097dbc551322b07c45be8bb8dda86b49c5972f8e1", 0xea}, {&(0x7f0000000b80)="576e284ccce6a44a9d3907d5bd90fdbf6c31d0c2b385e8baf03db67513e9d8", 0x1f}], 0x4}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000dc0)="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", 0x132}], 0x1}}, {{0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000000180)="4ce5af4c9139549806e5650fec804a109c5b2042", 0x14}, {&(0x7f00000005c0)="c7e4fc732a13f3ea957639d3e176d9a2b63065090ef80f9bd6ce84bb624ffcd5aafacdb43db68037ed20fc41620ee072e8d873ac1ff085cd5013458e5e6f5e2658095d85a5e9bd373e77afc4af3d7cdf9e54e981468112f4982232e6fe55a242d2172b32df427c7dc287a840e8fb0afa4aad3539", 0x74}, {&(0x7f00000007c0)="ee516e9dfa94462a4f95b3a08e7f59d3d1c77c28e5efdd01ab4c03ab90f7ee6f5617ded41f3f49158dff981d32e584c296129cb428085290be986a4d2bc4435c48638894d626d5b25e8f49c20cf972078a6d60e134a3e97593cc0d03fa69ab19be4f02de0fcfb78be0", 0x69}, {&(0x7f0000000840)="63b6d44a6875396b0d879e7e9d16abc3ad9097ff5888b0de839897fea7376069dcdad2e469ecc4ce0c85a60a444ab4dd3ca60f0607bc24b6929b11587c7d05d1147ba877e6b22c9517cbe68e5241f3b09de051bf723b42452c445a5d12e31af791c6724239d9880e0903dc73f12023251391fe2aa421ac02343151a041d7df19a89cc28afb73d971c7ed22198610b81fd7da535e0afa95a566b31f66e698e580", 0xa0}, {&(0x7f0000000a00)="96272dbd02a6808afa870b6689317895dcd7e85fbb532624b10b2a99c9684c9d9cb9a8a969c9a5a489c671d2e040effa6dfc377a48539af53ed2220c891525291759ae6829e45cc2c8a37e0108586c6e7efaa38dd8b40d6fec12bc0b4d2456c9ee47d493817d93970ba7f168f4f49745d76387d300bb6aacdfa15c04bb5c282850d5e753c865f189eea592b96870e8ad949f2be0850f1e1ac04e900749b4fafebbbc8c3ca358c23a5da9988a2bbe8ef04678b726f39120b9159bbe375ae7011de7d3bf21f192bd7eaef518c87f067d46bc53d534a950050e513bd51d974f2685e9bf1b5a80e4ab0bf357", 0xea}, {&(0x7f0000001dc0)="27a1ac5e61caf895d316eaf8c381dd6c5d8e5b8a4c2af7d7087594924ebe0c91a0ccb9b7e73b734b6116dfb1529168ec2e1a36cc1a4f98246b90a2045060141a0fea5e9235dcda8f681e48e75cde9c04bf826b782f83dfba304ea5f08980574533a58f1769c74b63bd2b87115e561e8f88b1403f4577cc73c7920f1b3816689b4512c6200526a9b2c1c6a8240b400f9ad97959dbe9003cfb080efb6a780caa2f7fa08471b35d7b2aee3aa4e87eef54c562e2ef3702000c1428f894ad8c5c9302b36013bd0abf6a4c730f4d1af3c439eee192d959bbb223337b2f9e562b4682e4ea7e017670849da48a", 0xe9}, {&(0x7f0000004b00)="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", 0x1000}, {&(0x7f0000002500)="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", 0xff1}], 0x8}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000900)="f3044983dc21ddf8bc9c02815f4b383060906089be92daac8161b70d76a097156c69c454acd5813a511f001ba51633e35df2bcb0f6bfb442842b18cea7fc403429021320034cc723c2450430fa9173e1e67afc6633cd8e25d3cbde1d35febd3aca20a899abb4b415f281bb016099db32c0bbf054e0140c02d7755664d49e1578e604ed38bb4e1bbe997a14430593a09481062694ae44716df0a39d3229bd2ba5afb137eea4afaaba9356a079d16017a9acdb50f9cd41fb07329ff48eff16d8e4a943265f8998955226c6017d83120506a7a4c201dac8", 0xd6}, {&(0x7f0000000680)="4e3170311f1d1a5252b30b37fbc3747e0493f9cb1bb50c5941e7ea6e8b846da162c5f740c5be1a7b09e97f404e950724c3e3cde608aca8741c8e7cd31dbe72376bdb9e9ad2a6fa4006be3e6b940885f5b45dbbd1d591ea15830417983e2a4035d30a7f4dc5bdbca5ae4951928af4866540b1e3d24822bc15e839a067ab9f72edeb4163731fc7f965d3fc6505a150859bf3f02072bf9560740cf3191f77d2d9cc039c293f40215b60432e16437f9f83c7531c11d2da54338f02181e5ec7505d244123bfee10987b98b9d68ecb17866df156a6ea8207060bd2c2bbc2f4c041119419444bbc95d7be58abb685807fa12f9e4c511b0d26ec79", 0xf7}], 0x2}}], 0x4, 0x44008890) recvmmsg(r1, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$fuse(0x0, 0x0, 0x0, 0x1000, &(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r5 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0xb0000009}) ppoll(&(0x7f0000000200)=[{r5, 0x8202}], 0x1, &(0x7f0000000500), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, &(0x7f0000000640)=0xcbb9, 0x6, 0x1) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x16) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r6, 0x4068aea3, &(0x7f00000000c0)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd1, 0x40, 0x41, 0xfb, 0x0, 0xe, 0x1, 0xfb, 0x3e, 0xfe, 0x38}}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000b40)={0x50000, 0x4000, 0x1}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x7, 0x80000004000080, 0x8000000, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) 140.301998ms ago: executing program 4 (id=7052): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x100000005, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r5, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007500)={0x20, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x33}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc040) landlock_restrict_self(r5, 0x4) r8 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r9 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r9, 0x541b, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000080)={r10, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0xa, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}}) 50.080653ms ago: executing program 5 (id=7053): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xe472, 0x2, 0x0, 0x25a}, 0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket(0x840000000002, 0x3, 0xfa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004850) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a31000000000800044000000000"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_INIT(r4, &(0x7f0000002180)={0x50, 0x0, r6, {0x7, 0x27, 0x5, 0x1dd880, 0xffff, 0x81, 0x0, 0x4, 0x0, 0x0, 0x1, 0x2404}}, 0x50) read$FUSE(r4, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r4, &(0x7f0000002140)={0x20, 0x0, r7, {0x403, 0x0, 0x8, 0xfff}}, 0x20) syz_fuse_handle_req(r4, &(0x7f0000004340)="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", 0x2000, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)={0x78, 0x0, 0x7, {0x1, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x3, 0x8, 0x2, 0x0, 0x200800, 0x0, 0x0, 0x4000, 0xbca4, 0x0, r8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r5, 0x0, 0x20000) getdents64(r5, 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f000000a380)="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", 0x2000, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)=ANY=[@ANYBLOB='&\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x000:\x00'], 0x0, 0x0, 0x0, 0x0}) getsockname$inet(r2, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) lstat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, r9, 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) 0s ago: executing program 7 (id=7054): getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.kill\x00', 0x275a, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x200a00, 0x0) write$binfmt_script(r3, &(0x7f0000000480)={'#! ', './file0', [], 0xa, "1dd7a4269b44495fdf04cf5ed364096966184f11d61836dbfc99ccd54cc76504c7851821b0da17587d26022bcfe9237b527d4e80d1a8046cc726a1b9124156b6a98e7a0eb42d7294b0a5c360c4b7f94624289136c3c79780eabb8b0ac76cf47534e1b1207134f2d9e5a820afddeb0bd1719905f731"}, 0x80) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0x8000000, 0x104000}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000002c0)={0xdddd0000, 0x101000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000100)={0x80a0000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x2710, 0x0, 0xeeee8000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x2, 0x80805, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x4, @private2}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r7, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x101400, 0x0) kernel console output (not intermixed with test programs): d USB device number 39 using dummy_hcd [ 1553.105178][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 1553.116161][ T29] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1553.139600][ T29] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1553.157379][ T29] usb 8-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1553.167052][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.191558][ T29] usb 8-1: Product: syz [ 1553.195921][ T29] usb 8-1: Manufacturer: syz [ 1553.201678][ T29] usb 8-1: SerialNumber: syz [ 1553.275023][T17514] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1553.449679][T17514] usb 1-1: config 0 has no interfaces? [ 1553.467957][T17514] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1553.490363][T17514] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1553.502490][T17514] usb 1-1: config 0 descriptor?? [ 1553.551533][T30621] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1553.558101][T30621] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1553.570358][T30621] vhci_hcd vhci_hcd.0: Device attached [ 1553.743099][T18141] usb 1-1: USB disconnect, device number 65 [ 1553.761473][ T5879] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1553.761649][T17514] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1553.855051][ T5879] usb 41-1: new full-speed USB device number 11 using vhci_hcd [ 1553.889562][T30633] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6704'. [ 1553.960608][T30640] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6707'. [ 1553.974048][T17514] usb 7-1: Using ep0 maxpacket: 16 [ 1553.997952][T17514] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1554.038079][T17514] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1554.070863][ T29] usb 8-1: USB disconnect, device number 39 [ 1554.085432][T17514] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1554.111836][T17514] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.163676][T17514] usb 7-1: Product: syz [ 1554.178524][T17514] usb 7-1: Manufacturer: syz [ 1554.188876][T17514] usb 7-1: SerialNumber: syz [ 1554.194938][T18141] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1554.238300][T17514] usb 7-1: config 0 descriptor?? [ 1554.440734][T17514] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1554.469901][T18141] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1554.480528][T17514] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1554.488711][ T5914] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1554.554987][T30619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1554.555214][T18141] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1554.635528][T30619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1554.643458][T18141] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 1554.687014][T18141] usb 1-1: string descriptor 0 read error: -22 [ 1554.693404][T18141] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1554.734978][T18141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.814650][T30644] syzkaller0: entered allmulticast mode [ 1554.891301][T30644] syzkaller0: entered promiscuous mode [ 1554.959097][T18141] usb 1-1: Can't get UAC3 power state for id 10 [ 1554.990637][T30644] syzkaller0 (unregistering): left promiscuous mode [ 1555.014971][T30644] syzkaller0 (unregistering): left allmulticast mode [ 1555.321324][T30656] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1555.367899][T17514] em28xx 7-1:0.0: chip ID is em2870 [ 1555.383853][T30656] netlink: 'syz.5.6709': attribute type 10 has an invalid length. [ 1555.448852][T30659] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(12) [ 1555.455507][T30659] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1555.465935][T30659] vhci_hcd vhci_hcd.0: Device attached [ 1555.772148][T30660] vhci_hcd: connection closed [ 1555.782124][T30622] vhci_hcd: connection reset by peer [ 1555.785364][ T55] vhci_hcd vhci_hcd.4: stop threads [ 1555.819860][ T55] vhci_hcd vhci_hcd.4: release socket [ 1555.837380][ T55] vhci_hcd vhci_hcd.4: disconnect device [ 1555.856210][ T55] vhci_hcd vhci_hcd.4: stop threads [ 1555.869897][ T55] vhci_hcd vhci_hcd.4: release socket [ 1555.887372][ T55] vhci_hcd vhci_hcd.4: disconnect device [ 1556.131552][ C1] hrtimer: interrupt took 39503 ns [ 1556.680509][T17514] usb 7-1: USB disconnect, device number 54 [ 1556.707305][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 1556.707323][ T30] audit: type=1326 audit(1776089254.899:4621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30666 comm="syz.7.6712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328a99c819 code=0x7ffc0000 [ 1556.750228][T17514] em28xx 7-1:0.0: Disconnecting em28xx [ 1556.801067][T17514] em28xx 7-1:0.0: Freeing device [ 1556.855339][ T30] audit: type=1326 audit(1776089254.939:4622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30666 comm="syz.7.6712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f328a99c819 code=0x7ffc0000 [ 1556.950761][T30675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1557.151165][ T30] audit: type=1326 audit(1776089254.939:4623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30666 comm="syz.7.6712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328a99c819 code=0x7ffc0000 [ 1557.270098][T18141] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1557.302137][ T30] audit: type=1326 audit(1776089254.939:4624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30666 comm="syz.7.6712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f328a99c819 code=0x7ffc0000 [ 1557.518327][ T30] audit: type=1326 audit(1776089254.939:4625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30666 comm="syz.7.6712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328a99c819 code=0x7ffc0000 [ 1557.605956][ T30] audit: type=1326 audit(1776089254.939:4626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30666 comm="syz.7.6712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328a99c819 code=0x7ffc0000 [ 1557.711418][T18141] usb 1-1: USB disconnect, device number 66 [ 1557.765365][ T30] audit: type=1326 audit(1776089254.939:4627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30666 comm="syz.7.6712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f328a99c819 code=0x7ffc0000 [ 1557.935411][ T30] audit: type=1326 audit(1776089254.939:4628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30666 comm="syz.7.6712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328a99c819 code=0x7ffc0000 [ 1558.045678][T17514] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1558.214758][ T30] audit: type=1326 audit(1776089254.939:4629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30666 comm="syz.7.6712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328a99c819 code=0x7ffc0000 [ 1558.255910][ T30] audit: type=1326 audit(1776089254.949:4630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30666 comm="syz.7.6712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f328a99c819 code=0x7ffc0000 [ 1558.265607][T17514] usb 5-1: Using ep0 maxpacket: 8 [ 1558.324176][T17514] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 1558.333878][T17514] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.364956][T17514] usb 5-1: Product: syz [ 1558.373733][T17514] usb 5-1: Manufacturer: syz [ 1558.378737][T18141] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1558.400421][T17514] usb 5-1: SerialNumber: syz [ 1558.556438][T18141] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1558.572596][T18141] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1558.596047][T18141] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1558.613241][T18141] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1558.641858][T18141] usb 8-1: Manufacturer: syz [ 1558.694055][T18141] usb 8-1: config 0 descriptor?? [ 1558.849891][T17514] mxuport 5-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 1558.896403][T17514] mxuport 5-1:254.0: probe with driver mxuport failed with error -5 [ 1558.951981][T30703] FAULT_INJECTION: forcing a failure. [ 1558.951981][T30703] name failslab, interval 1, probability 0, space 0, times 0 [ 1558.966937][T30703] CPU: 0 UID: 0 PID: 30703 Comm: syz.6.6720 Tainted: G L syzkaller #0 PREEMPT(full) [ 1558.966966][T30703] Tainted: [L]=SOFTLOCKUP [ 1558.966972][T30703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1558.966984][T30703] Call Trace: [ 1558.966991][T30703] [ 1558.967005][T30703] dump_stack_lvl+0xe8/0x150 [ 1558.967035][T30703] should_fail_ex+0x412/0x560 [ 1558.967069][T30703] should_failslab+0xa8/0x100 [ 1558.967096][T30703] __kmalloc_noprof+0xe8/0x760 [ 1558.967118][T30703] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1558.967144][T30703] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1558.967167][T30703] ? tomoyo_path_number_perm+0x219/0x630 [ 1558.967184][T30703] tomoyo_path_number_perm+0x246/0x630 [ 1558.967201][T30703] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1558.967218][T30703] ? __lock_acquire+0x6b5/0x2cf0 [ 1558.967237][T30703] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1558.967271][T30703] ? __fget_files+0x2a/0x420 [ 1558.967282][T30703] ? __fget_files+0x2a/0x420 [ 1558.967291][T30703] ? __fget_files+0x3a0/0x420 [ 1558.967300][T30703] ? __fget_files+0x2a/0x420 [ 1558.967311][T30703] security_file_ioctl+0xc3/0x2a0 [ 1558.967327][T30703] __se_sys_ioctl+0x47/0x170 [ 1558.967343][T30703] do_syscall_64+0x14d/0xf80 [ 1558.967358][T30703] ? trace_irq_disable+0x3b/0x150 [ 1558.967373][T30703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.967385][T30703] ? clear_bhb_loop+0x40/0x90 [ 1558.967399][T30703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.967410][T30703] RIP: 0033:0x7ff20759c819 [ 1558.967421][T30703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1558.967431][T30703] RSP: 002b:00007ff208461028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1558.967444][T30703] RAX: ffffffffffffffda RBX: 00007ff207816180 RCX: 00007ff20759c819 [ 1558.967452][T30703] RDX: 0000200000000500 RSI: 00000000c058565d RDI: 000000000000000b [ 1558.967459][T30703] RBP: 00007ff208461090 R08: 0000000000000000 R09: 0000000000000000 [ 1558.967466][T30703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1558.967472][T30703] R13: 00007ff207816218 R14: 00007ff207816180 R15: 00007ff20793fa48 [ 1558.967489][T30703] [ 1558.986785][T17514] usb 5-1: USB disconnect, device number 96 [ 1559.175345][ T5879] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1559.209712][T30703] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1559.483983][T30694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1559.496403][T30694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1559.540489][T30716] tipc: Enabling of bearer rejected, already enabled [ 1559.780495][T30721] FAULT_INJECTION: forcing a failure. [ 1559.780495][T30721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1559.825242][T30721] CPU: 0 UID: 0 PID: 30721 Comm: syz.4.6727 Tainted: G L syzkaller #0 PREEMPT(full) [ 1559.825278][T30721] Tainted: [L]=SOFTLOCKUP [ 1559.825286][T30721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1559.825298][T30721] Call Trace: [ 1559.825306][T30721] [ 1559.825316][T30721] dump_stack_lvl+0xe8/0x150 [ 1559.825354][T30721] should_fail_ex+0x412/0x560 [ 1559.825388][T30721] _copy_from_user+0x2d/0xb0 [ 1559.825410][T30721] ___sys_sendmsg+0x1c6/0x360 [ 1559.825437][T30721] ? __pfx____sys_sendmsg+0x10/0x10 [ 1559.825480][T30721] ? __fget_files+0x2a/0x420 [ 1559.825495][T30721] ? __fget_files+0x3a0/0x420 [ 1559.825516][T30721] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1559.825541][T30721] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1559.825568][T30721] ? __pfx_ksys_write+0x10/0x10 [ 1559.825595][T30721] do_syscall_64+0x14d/0xf80 [ 1559.825616][T30721] ? trace_irq_disable+0x3b/0x150 [ 1559.825689][T30721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.825705][T30721] ? clear_bhb_loop+0x40/0x90 [ 1559.825725][T30721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.825740][T30721] RIP: 0033:0x7ff8ce59c819 [ 1559.825757][T30721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1559.825771][T30721] RSP: 002b:00007ff8cf496028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1559.825789][T30721] RAX: ffffffffffffffda RBX: 00007ff8ce816180 RCX: 00007ff8ce59c819 [ 1559.825803][T30721] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000005 [ 1559.825815][T30721] RBP: 00007ff8cf496090 R08: 0000000000000000 R09: 0000000000000000 [ 1559.825825][T30721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1559.825834][T30721] R13: 00007ff8ce816218 R14: 00007ff8ce816180 R15: 00007ff8ce93fa48 [ 1559.825858][T30721] [ 1560.191103][T18141] uclogic 0003:256C:006D.001E: failed retrieving string descriptor #200: -71 [ 1560.221063][T18141] uclogic 0003:256C:006D.001E: failed retrieving pen parameters: -71 [ 1560.245331][T18141] uclogic 0003:256C:006D.001E: failed probing pen v2 parameters: -71 [ 1560.331809][T18141] uclogic 0003:256C:006D.001E: failed probing parameters: -71 [ 1560.352618][T18141] uclogic 0003:256C:006D.001E: probe with driver uclogic failed with error -71 [ 1560.434957][ T5914] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 1560.457876][T30728] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6729'. [ 1560.495525][T18141] usb 8-1: USB disconnect, device number 40 [ 1560.535576][T30731] bridge0: entered promiscuous mode [ 1560.555255][T30731] bridge0: entered allmulticast mode [ 1560.592514][ T5914] usb 1-1: device descriptor read/64, error -71 [ 1560.854938][ T5914] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 1561.007038][ T5914] usb 1-1: device descriptor read/64, error -71 [ 1561.185192][ T5914] usb usb1-port1: attempt power cycle [ 1561.419312][T21209] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1561.515671][T30758] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1561.566184][ T5914] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 1561.605933][T30758] netlink: 'syz.7.6739': attribute type 10 has an invalid length. [ 1561.649362][ T5914] usb 1-1: device descriptor read/8, error -71 [ 1561.733477][T30764] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1561.924936][ T5914] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 1561.983871][ T5914] usb 1-1: device descriptor read/8, error -71 [ 1562.125668][ T5914] usb usb1-port1: unable to enumerate USB device [ 1563.038364][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 1563.038384][ T30] audit: type=1326 audit(1776089261.229:4678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30774 comm="syz.0.6744" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb0a339c819 code=0x0 [ 1563.319920][T30783] FAULT_INJECTION: forcing a failure. [ 1563.319920][T30783] name failslab, interval 1, probability 0, space 0, times 0 [ 1563.347121][T30783] CPU: 0 UID: 0 PID: 30783 Comm: syz.0.6746 Tainted: G L syzkaller #0 PREEMPT(full) [ 1563.347157][T30783] Tainted: [L]=SOFTLOCKUP [ 1563.347164][T30783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1563.347176][T30783] Call Trace: [ 1563.347184][T30783] [ 1563.347193][T30783] dump_stack_lvl+0xe8/0x150 [ 1563.347227][T30783] should_fail_ex+0x412/0x560 [ 1563.347262][T30783] should_failslab+0xa8/0x100 [ 1563.347290][T30783] __kmalloc_cache_noprof+0x88/0x660 [ 1563.347312][T30783] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 1563.347344][T30783] ? sctp_add_bind_addr+0x8c/0x370 [ 1563.347369][T30783] sctp_add_bind_addr+0x8c/0x370 [ 1563.347394][T30783] sctp_copy_local_addr_list+0x314/0x4f0 [ 1563.347419][T30783] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1563.347439][T30783] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1563.347461][T30783] ? sctp_v6_is_any+0x64/0x80 [ 1563.347483][T30783] ? sctp_copy_one_addr+0x93/0x360 [ 1563.347507][T30783] sctp_bind_addr_copy+0xb3/0x3c0 [ 1563.347528][T30783] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1563.347561][T30783] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1563.347588][T30783] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1563.347619][T30783] ? __local_bh_enable_ip+0xd0/0x130 [ 1563.347644][T30783] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1563.347668][T30783] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1563.347696][T30783] sctp_sendmsg+0x1528/0x2c10 [ 1563.347730][T30783] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1563.347753][T30783] ? aa_sk_perm+0x6d5/0x900 [ 1563.347784][T30783] ? __pfx_aa_sk_perm+0x10/0x10 [ 1563.347812][T30783] ? sock_rps_record_flow+0x19/0x400 [ 1563.347841][T30783] ? inet_sendmsg+0x2f4/0x370 [ 1563.347870][T30783] ____sys_sendmsg+0x80a/0x9f0 [ 1563.347905][T30783] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1563.347939][T30783] ? import_iovec+0x73/0xa0 [ 1563.347966][T30783] ___sys_sendmsg+0x2a5/0x360 [ 1563.347997][T30783] ? __pfx____sys_sendmsg+0x10/0x10 [ 1563.348052][T30783] ? __fget_files+0x2a/0x420 [ 1563.348070][T30783] ? __fget_files+0x3a0/0x420 [ 1563.348095][T30783] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1563.348123][T30783] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1563.348157][T30783] ? __pfx_ksys_write+0x10/0x10 [ 1563.348191][T30783] do_syscall_64+0x14d/0xf80 [ 1563.348217][T30783] ? trace_irq_disable+0x3b/0x150 [ 1563.348235][T30783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.348255][T30783] ? clear_bhb_loop+0x40/0x90 [ 1563.348280][T30783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.348299][T30783] RIP: 0033:0x7fb0a339c819 [ 1563.348318][T30783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1563.348342][T30783] RSP: 002b:00007fb0a15ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1563.348363][T30783] RAX: ffffffffffffffda RBX: 00007fb0a3615fa0 RCX: 00007fb0a339c819 [ 1563.348377][T30783] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 1563.348389][T30783] RBP: 00007fb0a15ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1563.348401][T30783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1563.348412][T30783] R13: 00007fb0a3616038 R14: 00007fb0a3615fa0 R15: 00007fb0a373fa48 [ 1563.348444][T30783] [ 1563.845734][T30791] syzkaller0: entered promiscuous mode [ 1563.854197][T30791] syzkaller0: entered allmulticast mode [ 1564.141538][T30801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6750'. [ 1564.809951][T30805] tipc: Enabling of bearer rejected, already enabled [ 1565.372324][T23499] usb 7-1: new full-speed USB device number 55 using dummy_hcd [ 1565.600975][T23499] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 1565.657253][T23499] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1565.770847][T23499] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1565.862351][T23499] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1565.898327][T23499] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1565.908068][T23499] usb 7-1: Product: syz [ 1565.912401][T23499] usb 7-1: Manufacturer: syz [ 1565.917513][T23499] usb 7-1: SerialNumber: syz [ 1565.989280][T23499] usb 7-1: config 0 descriptor?? [ 1566.059309][T23499] usb 7-1: selecting invalid altsetting 0 [ 1566.286522][T23499] usb 7-1: USB disconnect, device number 55 [ 1566.357190][T17312] udevd[17312]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1566.552497][ T30] audit: type=1326 audit(1776089264.739:4679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30822 comm="syz.0.6757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a339c819 code=0x7ffc0000 [ 1566.598673][ T30] audit: type=1326 audit(1776089264.769:4680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30822 comm="syz.0.6757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a339c819 code=0x7ffc0000 [ 1566.632214][ T30] audit: type=1326 audit(1776089264.769:4681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30822 comm="syz.0.6757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fb0a339c819 code=0x7ffc0000 [ 1566.656296][ T30] audit: type=1326 audit(1776089264.769:4682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30822 comm="syz.0.6757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a339c819 code=0x7ffc0000 [ 1566.688326][ T30] audit: type=1326 audit(1776089264.769:4683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30822 comm="syz.0.6757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a339c819 code=0x7ffc0000 [ 1566.739857][ T30] audit: type=1326 audit(1776089264.769:4684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30822 comm="syz.0.6757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb0a335d04e code=0x7ffc0000 [ 1566.770355][ T30] audit: type=1326 audit(1776089264.769:4685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30822 comm="syz.0.6757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a339c819 code=0x7ffc0000 [ 1566.838512][ T30] audit: type=1326 audit(1776089264.769:4686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30822 comm="syz.0.6757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a339c819 code=0x7ffc0000 [ 1566.844146][T30827] fuse: Bad value for 'fd' [ 1566.959914][ T30] audit: type=1326 audit(1776089264.769:4687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30822 comm="syz.0.6757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb0a339c819 code=0x7ffc0000 [ 1567.437418][T30841] syzkaller0: entered promiscuous mode [ 1567.445103][T23753] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1567.454668][T30841] syzkaller0: entered allmulticast mode [ 1567.627016][T23753] usb 1-1: Using ep0 maxpacket: 8 [ 1567.648291][T23753] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1567.716087][T23753] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.725843][T23753] usb 1-1: Product: syz [ 1567.735988][T23753] usb 1-1: Manufacturer: syz [ 1567.798417][T23753] usb 1-1: SerialNumber: syz [ 1567.866536][T23753] usb 1-1: config 0 descriptor?? [ 1567.953879][T23753] gspca_main: se401-2.14.0 probing 047d:5003 [ 1567.982107][T30857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6765'. [ 1568.030154][T30858] FAULT_INJECTION: forcing a failure. [ 1568.030154][T30858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1568.066778][T30858] CPU: 0 UID: 0 PID: 30858 Comm: syz.7.6767 Tainted: G L syzkaller #0 PREEMPT(full) [ 1568.066820][T30858] Tainted: [L]=SOFTLOCKUP [ 1568.066828][T30858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1568.066839][T30858] Call Trace: [ 1568.066847][T30858] [ 1568.066857][T30858] dump_stack_lvl+0xe8/0x150 [ 1568.066893][T30858] should_fail_ex+0x412/0x560 [ 1568.066927][T30858] _copy_from_user+0x2d/0xb0 [ 1568.066950][T30858] ___sys_sendmsg+0x1c6/0x360 [ 1568.066970][T30858] ? __pfx____sys_sendmsg+0x10/0x10 [ 1568.067011][T30858] ? __fget_files+0x2a/0x420 [ 1568.067030][T30858] ? __fget_files+0x3a0/0x420 [ 1568.067056][T30858] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1568.067082][T30858] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1568.067102][T30858] ? __pfx_ksys_write+0x10/0x10 [ 1568.067120][T30858] do_syscall_64+0x14d/0xf80 [ 1568.067136][T30858] ? trace_irq_disable+0x3b/0x150 [ 1568.067150][T30858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.067170][T30858] ? clear_bhb_loop+0x40/0x90 [ 1568.067194][T30858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.067213][T30858] RIP: 0033:0x7f328a99c819 [ 1568.067233][T30858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1568.067242][T30858] RSP: 002b:00007f328b813028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1568.067256][T30858] RAX: ffffffffffffffda RBX: 00007f328ac15fa0 RCX: 00007f328a99c819 [ 1568.067264][T30858] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000006 [ 1568.067271][T30858] RBP: 00007f328b813090 R08: 0000000000000000 R09: 0000000000000000 [ 1568.067278][T30858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1568.067284][T30858] R13: 00007f328ac16038 R14: 00007f328ac15fa0 R15: 00007f328ad3fa48 [ 1568.067306][T30858] [ 1568.754024][T23753] gspca_se401: ExtraFeatures: 48 [ 1568.763072][T23753] gspca_se401: Frame size: 0x256 bayer [ 1568.769175][T23753] gspca_se401: Frame size: 2048x0 bayer [ 1568.774720][T23753] gspca_se401: Frame size: 768x1 bayer [ 1568.786992][T23753] gspca_se401: Frame size: 0x65534 bayer [ 1568.806062][T30863] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1568.815788][T23753] gspca_se401: Frame size: 0x0 1/16th janggu [ 1568.825902][T23753] gspca_se401: Frame size: 0x0 1/16th janggu [ 1568.836143][T23753] gspca_se401: Frame size: 0x0 1/16th janggu [ 1568.842505][T23753] gspca_se401: Frame size: 0x0 1/16th janggu [ 1568.849329][T23753] gspca_se401: Frame size: 0x0 1/16th janggu [ 1568.871092][T23753] gspca_se401: Frame size: 0x0 1/16th janggu [ 1569.386408][T30870] netlink: 'syz.5.6770': attribute type 12 has an invalid length. [ 1569.423827][T30869] x_tables: duplicate underflow at hook 2 [ 1569.825169][ T5914] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1569.900478][T23753] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input111 [ 1569.913359][T30880] tipc: Enabling of bearer rejected, failed to enable media [ 1569.995595][ T5914] usb 6-1: Using ep0 maxpacket: 16 [ 1570.026627][ T5914] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1570.044090][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1570.075297][ T5914] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1570.176137][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.212033][ T5879] usb 1-1: USB disconnect, device number 71 [ 1570.241523][ T5914] usb 6-1: Product: syz [ 1570.260106][ T5914] usb 6-1: Manufacturer: syz [ 1570.294314][ T5914] usb 6-1: SerialNumber: syz [ 1570.357128][ T5914] usb 6-1: config 0 descriptor?? [ 1570.369206][ T5914] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1570.388186][ T5914] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1570.549943][T30893] netlink: 'syz.6.6776': attribute type 4 has an invalid length. [ 1570.619042][T30898] netlink: 'syz.6.6776': attribute type 4 has an invalid length. [ 1571.019825][ T5914] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1571.083343][T30875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1571.099732][T30875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1571.128383][ T5914] em28xx 6-1:0.0: Config register raw data: 0x41 [ 1571.151610][T30905] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6779'. [ 1571.354924][ T5879] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1571.371679][T23753] usb 6-1: USB disconnect, device number 62 [ 1571.381683][T30907] syzkaller0: entered promiscuous mode [ 1571.398256][T23753] em28xx 6-1:0.0: Disconnecting em28xx [ 1571.412696][T30907] syzkaller0: entered allmulticast mode [ 1571.421747][T23753] em28xx 6-1:0.0: Freeing device [ 1572.548724][T30923] netlink: 'syz.7.6784': attribute type 1 has an invalid length. [ 1572.624479][T30923] bond1: entered promiscuous mode [ 1572.633167][T30926] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1572.645295][T30923] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1572.663587][T30925] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6784'. [ 1573.054514][T30931] FAULT_INJECTION: forcing a failure. [ 1573.054514][T30931] name failslab, interval 1, probability 0, space 0, times 0 [ 1573.286043][T30931] CPU: 0 UID: 0 PID: 30931 Comm: syz.4.6785 Tainted: G L syzkaller #0 PREEMPT(full) [ 1573.286065][T30931] Tainted: [L]=SOFTLOCKUP [ 1573.286069][T30931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1573.286076][T30931] Call Trace: [ 1573.286081][T30931] [ 1573.286091][T30931] dump_stack_lvl+0xe8/0x150 [ 1573.286113][T30931] should_fail_ex+0x412/0x560 [ 1573.286136][T30931] should_failslab+0xa8/0x100 [ 1573.286152][T30931] ? skb_clone+0x212/0x3a0 [ 1573.286169][T30931] kmem_cache_alloc_noprof+0x87/0x650 [ 1573.286181][T30931] ? __netlink_lookup+0xc6/0x8b0 [ 1573.286198][T30931] skb_clone+0x212/0x3a0 [ 1573.286214][T30931] __netlink_deliver_tap+0x404/0x850 [ 1573.286231][T30931] ? netlink_deliver_tap+0x2e/0x1b0 [ 1573.286243][T30931] netlink_deliver_tap+0x19c/0x1b0 [ 1573.286255][T30931] netlink_unicast+0x7e3/0x9b0 [ 1573.286276][T30931] ? __pfx_netlink_unicast+0x10/0x10 [ 1573.286294][T30931] ? netlink_sendmsg+0x650/0xb40 [ 1573.286308][T30931] netlink_sendmsg+0x813/0xb40 [ 1573.286324][T30931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1573.286337][T30931] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1573.286355][T30931] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1573.286371][T30931] ____sys_sendmsg+0x972/0x9f0 [ 1573.286393][T30931] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1573.286411][T30931] ? import_iovec+0x73/0xa0 [ 1573.286427][T30931] ___sys_sendmsg+0x2a5/0x360 [ 1573.286444][T30931] ? __pfx____sys_sendmsg+0x10/0x10 [ 1573.286477][T30931] ? __fget_files+0x2a/0x420 [ 1573.286487][T30931] ? __fget_files+0x3a0/0x420 [ 1573.286502][T30931] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1573.286517][T30931] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1573.286536][T30931] ? __pfx_ksys_write+0x10/0x10 [ 1573.286556][T30931] do_syscall_64+0x14d/0xf80 [ 1573.286572][T30931] ? trace_irq_disable+0x3b/0x150 [ 1573.286583][T30931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.286594][T30931] ? clear_bhb_loop+0x40/0x90 [ 1573.286609][T30931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.286620][T30931] RIP: 0033:0x7ff8ce59c819 [ 1573.286632][T30931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1573.286641][T30931] RSP: 002b:00007ff8cf4b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1573.286654][T30931] RAX: ffffffffffffffda RBX: 00007ff8ce816090 RCX: 00007ff8ce59c819 [ 1573.286662][T30931] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000003 [ 1573.286669][T30931] RBP: 00007ff8cf4b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1573.286675][T30931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1573.286682][T30931] R13: 00007ff8ce816128 R14: 00007ff8ce816090 R15: 00007ff8ce93fa48 [ 1573.286698][T30931] [ 1573.747184][T30931] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6785'. [ 1573.872517][T30940] netlink: 'syz.5.6788': attribute type 13 has an invalid length. [ 1573.923231][T30940] netlink: 'syz.5.6788': attribute type 17 has an invalid length. [ 1573.974970][T18141] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1574.005798][T30937] bridge0: port 2(bridge_slave_1) entered blocking state [ 1574.013014][T30937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1574.020510][T30937] bridge0: port 1(bridge_slave_0) entered blocking state [ 1574.027844][T30937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1574.082692][T30937] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1574.144949][T18141] usb 8-1: Using ep0 maxpacket: 32 [ 1574.168212][ T5879] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1574.182227][ T5879] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1574.190312][ T5879] usb 1-1: can't read configurations, error -71 [ 1574.236275][T18141] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1574.254709][T30940] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1574.305825][T18141] usb 8-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1574.345375][T18141] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.393489][T18141] usb 8-1: Product: syz [ 1574.405079][T18141] usb 8-1: Manufacturer: syz [ 1574.411226][T18141] usb 8-1: SerialNumber: syz [ 1574.422231][T18141] usb 8-1: config 0 descriptor?? [ 1574.433670][T18141] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input112 [ 1574.456818][T18141] usbtouchscreen 8-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 1574.580106][T30955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6794'. [ 1574.601172][T18141] usbtouchscreen 8-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 1574.654927][T23778] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1574.805056][T23778] usb 5-1: Using ep0 maxpacket: 32 [ 1574.823352][T23778] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1574.844550][T23778] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 1574.873113][T23778] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1574.885317][T23778] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.110575][T30950] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1575.163285][T30950] netlink: 'syz.4.6793': attribute type 10 has an invalid length. [ 1575.189345][T30950] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6793'. [ 1575.224154][T30950] bridge0: port 3(dummy0) entered blocking state [ 1575.254419][T30950] bridge0: port 3(dummy0) entered disabled state [ 1575.279239][T30950] dummy0: entered allmulticast mode [ 1575.305067][T30950] dummy0: entered promiscuous mode [ 1575.323940][T30950] bridge0: port 3(dummy0) entered blocking state [ 1575.330464][T30950] bridge0: port 3(dummy0) entered forwarding state [ 1575.518331][T18141] usb 5-1: USB disconnect, device number 97 [ 1575.945055][T30968] x_tables: duplicate underflow at hook 2 [ 1576.208896][T30975] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1576.262404][T18141] usb 8-1: USB disconnect, device number 41 [ 1576.558865][T30981] netlink: 'syz.7.6801': attribute type 1 has an invalid length. [ 1576.658238][T30981] bond2: entered promiscuous mode [ 1576.696064][T30981] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1576.706487][T30984] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6801'. [ 1576.758207][T30984] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6801'. [ 1577.235491][T30991] Invalid argument reading file caps for ./file0 [ 1577.267952][T30991] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 1577.355178][ T5879] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1577.394155][T30993] bridge0: entered promiscuous mode [ 1577.409094][T30993] bridge0: entered allmulticast mode [ 1577.526108][ T5879] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1577.548649][ T5879] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1577.585854][ T5879] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1577.606967][ T5879] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.640733][ T5879] usb 8-1: Product: syz [ 1577.667128][ T5879] usb 8-1: Manufacturer: syz [ 1577.687172][ T5879] usb 8-1: SerialNumber: syz [ 1577.701112][ T5879] usb 8-1: config 0 descriptor?? [ 1577.712840][T30999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6805'. [ 1578.138531][ T5879] usb 8-1: USB disconnect, device number 42 [ 1578.198963][T18208] udevd[18208]: setting mode of /dev/mixer3 to 020660 failed: No such file or directory [ 1578.227142][T18208] udevd[18208]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 1579.607346][T31018] fuse: Bad value for 'fd' [ 1580.036888][T31030] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6813'. [ 1580.036948][T31031] netlink: 'syz.7.6813': attribute type 13 has an invalid length. [ 1580.057657][T31031] netlink: 'syz.7.6813': attribute type 13 has an invalid length. [ 1580.077332][T31031] netlink: 'syz.7.6813': attribute type 13 has an invalid length. [ 1580.091279][T31031] netlink: 'syz.7.6813': attribute type 13 has an invalid length. [ 1580.107241][T31030] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6813'. [ 1580.148277][T31031] netlink: 'syz.7.6813': attribute type 13 has an invalid length. [ 1580.156869][T31030] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6813'. [ 1580.172984][T31031] netlink: 'syz.7.6813': attribute type 13 has an invalid length. [ 1580.185174][T31030] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6813'. [ 1580.196957][T31031] netlink: 'syz.7.6813': attribute type 13 has an invalid length. [ 1580.207125][T31030] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6813'. [ 1580.220480][T31031] netlink: 'syz.7.6813': attribute type 13 has an invalid length. [ 1580.232329][T31030] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6813'. [ 1580.243641][T31031] netlink: 'syz.7.6813': attribute type 13 has an invalid length. [ 1580.262330][T31030] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6813'. [ 1580.294516][T31031] netlink: 'syz.7.6813': attribute type 13 has an invalid length. [ 1580.323656][T31030] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6813'. [ 1580.343000][T31031] netlink: 'syz.7.6813': attribute type 13 has an invalid length. [ 1580.376043][T31030] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6813'. [ 1580.392966][T31031] netlink: 'syz.7.6813': attribute type 13 has an invalid length. [ 1580.418531][T31030] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6813'. [ 1580.436457][T31031] netlink: 'syz.7.6813': attribute type 13 has an invalid length. [ 1580.511661][T31031] netlink: 'syz.7.6813': attribute type 13 has an invalid length. [ 1580.569631][T31031] netlink: 'syz.7.6813': attribute type 13 has an invalid length. [ 1580.609510][T31033] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 1580.616170][T31033] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1580.684366][T31033] vhci_hcd vhci_hcd.0: Device attached [ 1580.855241][T23753] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1580.939021][T23753] usb 43-1: new full-speed USB device number 12 using vhci_hcd [ 1581.337420][T31050] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1581.529633][T31057] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(16) [ 1581.536288][T31057] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1581.597552][T31057] vhci_hcd vhci_hcd.0: Device attached [ 1581.972105][T31058] vhci_hcd: connection closed [ 1581.982989][T31034] vhci_hcd: connection reset by peer [ 1581.997969][ T55] vhci_hcd vhci_hcd.5: stop threads [ 1582.020297][ T55] vhci_hcd vhci_hcd.5: release socket [ 1582.079665][ T55] vhci_hcd vhci_hcd.5: disconnect device [ 1582.105123][ T55] vhci_hcd vhci_hcd.5: stop threads [ 1582.146761][ T55] vhci_hcd vhci_hcd.5: release socket [ 1582.178915][ T55] vhci_hcd vhci_hcd.5: disconnect device [ 1583.035313][T23499] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1583.205056][T23499] usb 1-1: Using ep0 maxpacket: 16 [ 1583.217093][T23499] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 1583.235209][T23499] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1583.244993][T23499] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1583.253195][T23499] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1583.265744][T23499] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1583.274651][T23499] usb 1-1: config 0 has no interface number 0 [ 1583.280855][T23499] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1583.298216][T23499] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1583.312942][T23499] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1583.323149][T23499] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1583.342527][T23499] usb 1-1: config 0 interface 125 has no altsetting 0 [ 1583.350292][T23499] usb 1-1: config 0 interface 125 has no altsetting 2 [ 1583.361838][T23499] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1583.371679][T23499] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.390507][T23499] usb 1-1: Product: syz [ 1583.394800][T23499] usb 1-1: Manufacturer: syz [ 1583.399547][T23778] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1583.410826][T23499] usb 1-1: SerialNumber: syz [ 1583.445355][T23499] usb 1-1: config 0 descriptor?? [ 1583.480892][T23499] usb 1-1: selecting invalid altsetting 2 [ 1583.498200][T31072] tipc: Started in network mode [ 1583.503648][T31072] tipc: Node identity 0000000000003a004000000000000001, cluster identity 4711 [ 1583.516615][T31072] tipc: Enabling of bearer rejected, failed to enable media [ 1583.577132][T31076] bridge0: port 2(bridge_slave_1) entered disabled state [ 1583.584436][T31076] bridge0: port 1(bridge_slave_0) entered disabled state [ 1583.595136][T23778] usb 7-1: Using ep0 maxpacket: 8 [ 1583.600555][T31076] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1583.602416][T23778] usb 7-1: config 8 has an invalid interface number: 188 but max is 0 [ 1583.628998][T23778] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1583.646125][T23778] usb 7-1: config 8 has no interface number 0 [ 1583.673781][T23778] usb 7-1: config 8 interface 188 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1583.736847][T23778] usb 7-1: config 8 interface 188 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1583.792041][T23778] usb 7-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 1583.811470][T23778] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.827687][T23778] usb 7-1: Product: syz [ 1583.831914][T23778] usb 7-1: Manufacturer: syz [ 1583.836835][T23778] usb 7-1: SerialNumber: syz [ 1584.014970][T17514] usb 8-1: new full-speed USB device number 43 using dummy_hcd [ 1584.177943][T17514] usb 8-1: config 8 has an invalid interface number: 223 but max is 0 [ 1584.195964][T17514] usb 8-1: config 8 has no interface number 0 [ 1584.217207][T17514] usb 8-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1584.235876][T17514] usb 8-1: config 8 interface 223 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1584.256525][T17514] usb 8-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1584.258145][T23778] vmk80xx 7-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 1584.288964][T17514] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1584.320112][T17514] usb 8-1: Product: syz [ 1584.324063][T23778] usb 7-1: USB disconnect, device number 56 [ 1584.330459][ C0] usb 1-1: async_complete: urb error -32 [ 1584.338232][T23499] get_1284_register: usb error -32 [ 1584.372570][T17514] usb 8-1: Manufacturer: syz [ 1584.392163][T17514] usb 8-1: SerialNumber: syz [ 1584.640241][T31081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1584.675206][T31081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1584.726859][T17514] usb 8-1: USB disconnect, device number 43 [ 1585.132518][T31100] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1585.704951][T18141] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1585.866695][T18141] usb 6-1: device descriptor read/64, error -71 [ 1585.887556][T17514] usb 1-1: USB disconnect, device number 74 [ 1586.045028][T23753] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1586.065051][ T29] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1586.115091][T18141] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1586.236147][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 1586.254969][T18141] usb 6-1: device descriptor read/64, error -71 [ 1586.278396][ T29] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1586.298646][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.351834][ T29] usb 5-1: Product: syz [ 1586.375187][ T29] usb 5-1: Manufacturer: syz [ 1586.387846][T18141] usb usb6-port1: attempt power cycle [ 1586.396309][ T29] usb 5-1: SerialNumber: syz [ 1586.427206][ T29] usb 5-1: config 0 descriptor?? [ 1586.450815][ T29] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1586.513008][ T29] dvb-usb: bulk message failed: -22 (4/0) [ 1586.607544][ T29] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1586.669979][ T29] dvb-usb: bulk message failed: -22 (5/0) [ 1586.680501][ T29] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1586.699208][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1586.745420][ T29] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1586.757648][T18141] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1586.795184][ T29] usb 5-1: media controller created [ 1586.886987][T31119] tipc: Enabling of bearer rejected, failed to enable media [ 1586.955562][T18141] usb 6-1: device descriptor read/8, error -71 [ 1586.964246][T31117] syzkaller0: entered promiscuous mode [ 1586.974135][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1587.001866][T31117] syzkaller0: entered allmulticast mode [ 1587.061919][ T29] usb 5-1: selecting invalid altsetting 3 [ 1587.084790][ T29] ttusb2: set interface to alts=3 failed [ 1587.155693][ T29] DVB: Unable to find symbol tda10086_attach() [ 1587.200550][ T29] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1587.215678][T18141] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1587.255269][ T29] dvb-usb: bulk message failed: -22 (4/0) [ 1587.261054][ T29] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1587.319380][T18141] usb 6-1: device descriptor read/8, error -71 [ 1587.338596][T31129] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20003 [ 1587.353658][ T29] dvb-usb: bulk message failed: -22 (5/0) [ 1587.379472][ T29] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1587.415885][T31126] __nla_validate_parse: 56 callbacks suppressed [ 1587.415906][T31126] netlink: 112 bytes leftover after parsing attributes in process `syz.6.6838'. [ 1587.432924][ T29] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1587.463250][T31133] binder: 31132:31133 ioctl c0306201 2000000003c0 returned -14 [ 1587.471757][ T29] usb 5-1: USB disconnect, device number 98 [ 1587.479602][T18141] usb usb6-port1: unable to enumerate USB device [ 1587.491575][T31133] binder: 31132:31133 ioctl c0306201 200000000540 returned -14 [ 1587.574725][ T29] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1587.597433][T23753] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1587.766073][T23753] usb 1-1: Using ep0 maxpacket: 32 [ 1587.783216][T23753] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1587.814187][T23753] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 1587.859667][T23753] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1587.894156][T23753] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1588.146412][T31131] dummy0: left allmulticast mode [ 1588.159829][T31131] dummy0: left promiscuous mode [ 1588.176034][T31131] bridge0: port 3(dummy0) entered disabled state [ 1588.222181][T31141] FAULT_INJECTION: forcing a failure. [ 1588.222181][T31141] name failslab, interval 1, probability 0, space 0, times 0 [ 1588.228220][T31131] bridge_slave_0: left allmulticast mode [ 1588.261226][T31131] bridge_slave_0: left promiscuous mode [ 1588.271132][T31131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1588.272538][T31141] CPU: 0 UID: 0 PID: 31141 Comm: syz.6.6844 Tainted: G L syzkaller #0 PREEMPT(full) [ 1588.272566][T31141] Tainted: [L]=SOFTLOCKUP [ 1588.272573][T31141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1588.272585][T31141] Call Trace: [ 1588.272593][T31141] [ 1588.272601][T31141] dump_stack_lvl+0xe8/0x150 [ 1588.272632][T31141] should_fail_ex+0x412/0x560 [ 1588.272665][T31141] should_failslab+0xa8/0x100 [ 1588.272692][T31141] __kmalloc_cache_noprof+0x88/0x660 [ 1588.272713][T31141] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 1588.272734][T31141] ? sctp_v6_cmp_addr+0x15/0xd0 [ 1588.272753][T31141] ? sctp_add_bind_addr+0x8c/0x370 [ 1588.272777][T31141] sctp_add_bind_addr+0x8c/0x370 [ 1588.272801][T31141] sctp_copy_local_addr_list+0x314/0x4f0 [ 1588.272826][T31141] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1588.272846][T31141] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1588.272868][T31141] ? sctp_v6_is_any+0x64/0x80 [ 1588.272888][T31141] ? sctp_copy_one_addr+0x93/0x360 [ 1588.272911][T31141] sctp_bind_addr_copy+0xb3/0x3c0 [ 1588.272938][T31141] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1588.272969][T31141] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1588.272996][T31141] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1588.273026][T31141] ? __local_bh_enable_ip+0xd0/0x130 [ 1588.273050][T31141] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1588.273073][T31141] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1588.273100][T31141] sctp_sendmsg+0x1528/0x2c10 [ 1588.273137][T31141] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1588.273163][T31141] ? aa_sk_perm+0x6d5/0x900 [ 1588.273197][T31141] ? __pfx_aa_sk_perm+0x10/0x10 [ 1588.273226][T31141] ? sock_rps_record_flow+0x19/0x400 [ 1588.273255][T31141] ? inet_sendmsg+0x2f4/0x370 [ 1588.273283][T31141] ____sys_sendmsg+0x80a/0x9f0 [ 1588.273315][T31141] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1588.273347][T31141] ? import_iovec+0x73/0xa0 [ 1588.273372][T31141] ___sys_sendmsg+0x2a5/0x360 [ 1588.273400][T31141] ? __pfx____sys_sendmsg+0x10/0x10 [ 1588.273455][T31141] ? __fget_files+0x2a/0x420 [ 1588.273471][T31141] ? __fget_files+0x3a0/0x420 [ 1588.273498][T31141] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1588.273522][T31141] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1588.273559][T31141] ? __pfx_ksys_write+0x10/0x10 [ 1588.273590][T31141] do_syscall_64+0x14d/0xf80 [ 1588.273613][T31141] ? trace_irq_disable+0x3b/0x150 [ 1588.273629][T31141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1588.273647][T31141] ? clear_bhb_loop+0x40/0x90 [ 1588.273669][T31141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1588.273687][T31141] RIP: 0033:0x7ff20759c819 [ 1588.273706][T31141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1588.273721][T31141] RSP: 002b:00007ff2084a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1588.273740][T31141] RAX: ffffffffffffffda RBX: 00007ff207815fa0 RCX: 00007ff20759c819 [ 1588.273754][T31141] RDX: 0000000024000052 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1588.273767][T31141] RBP: 00007ff2084a3090 R08: 0000000000000000 R09: 0000000000000000 [ 1588.273779][T31141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1588.273789][T31141] R13: 00007ff207816038 R14: 00007ff207815fa0 R15: 00007ff20793fa48 [ 1588.273818][T31141] [ 1588.331327][T31145] validate_nla: 50 callbacks suppressed [ 1588.331345][T31145] netlink: 'syz.0.6840': attribute type 10 has an invalid length. [ 1588.624024][T31145] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6840'. [ 1588.647466][T31151] x_tables: duplicate underflow at hook 2 [ 1588.779384][T31131] bridge_slave_1: left allmulticast mode [ 1588.790534][T31131] bridge_slave_1: left promiscuous mode [ 1588.801578][T31131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1588.913831][T31131] bond0: (slave bond_slave_0): Releasing backup interface [ 1588.964021][T31131] bond0: (slave bond_slave_1): Releasing backup interface [ 1588.993043][T31131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1589.000465][T31164] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1589.032459][T31131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1589.066083][T31131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1589.088083][T31131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1589.111006][T31131] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1589.154968][T31145] bridge0: port 1(dummy0) entered blocking state [ 1589.167164][T31145] bridge0: port 1(dummy0) entered disabled state [ 1589.185661][T31145] dummy0: entered allmulticast mode [ 1589.201836][T31145] dummy0: entered promiscuous mode [ 1589.234761][T31157] syzkaller0: entered promiscuous mode [ 1589.251044][T31157] syzkaller0: entered allmulticast mode [ 1589.846596][T31176] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1589.880417][T31176] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1590.468090][T23778] usb 1-1: USB disconnect, device number 75 [ 1590.596834][T31183] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1590.626628][T31183] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1590.651528][T31183] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1590.675523][T23753] usb 8-1: new full-speed USB device number 44 using dummy_hcd [ 1590.886443][T23753] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1590.898484][T23753] usb 8-1: config 0 has no interface number 0 [ 1590.931442][T23753] usb 8-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1590.952854][T23753] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.978712][T23753] usb 8-1: Product: syz [ 1590.992914][T23753] usb 8-1: Manufacturer: syz [ 1591.008903][T23753] usb 8-1: SerialNumber: syz [ 1591.028320][T23753] usb 8-1: config 0 descriptor?? [ 1591.043438][T23753] usb 8-1: selecting invalid altsetting 1 [ 1591.056129][T23753] dvb_ttusb_budget: ttusb_init_controller: error [ 1591.064987][T23753] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1591.150071][T23753] DVB: Unable to find symbol stv0299_attach() [ 1591.238225][T31190] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6853'. [ 1591.251041][T23753] DVB: Unable to find symbol tda8083_attach() [ 1591.259100][T31190] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6853'. [ 1591.265532][T23753] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1591.281511][T23753] usb 8-1: USB disconnect, device number 44 [ 1591.377015][T31197] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1591.409761][T31197] netlink: 'syz.4.6854': attribute type 10 has an invalid length. [ 1591.421011][T31195] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1591.474330][T31195] syzkaller0: entered promiscuous mode [ 1591.484102][T31195] syzkaller0: entered allmulticast mode [ 1591.507361][T31195] tipc: Enabled bearer , priority 0 [ 1591.594556][T31194] tipc: Resetting bearer [ 1591.625829][T31194] tipc: Disabling bearer [ 1591.713654][T31200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6856'. [ 1591.999460][T31205] syzkaller0: entered promiscuous mode [ 1592.064334][T31205] syzkaller0: entered allmulticast mode [ 1592.735141][T31220] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1592.756720][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 1592.756737][ T30] audit: type=1326 audit(1776089290.939:4744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31201 comm="syz.0.6857" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb0a339c819 code=0x0 [ 1593.376797][T31232] sg_write: data in/out 262109/70 bytes for SCSI command 0x0-- guessing data in; [ 1593.376797][T31232] program syz.7.6863 not setting count and/or reply_len properly [ 1593.414972][T21203] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1593.947993][T31243] x_tables: duplicate underflow at hook 2 [ 1594.459520][T31260] syzkaller0: entered promiscuous mode [ 1594.489831][T31260] syzkaller0: entered allmulticast mode [ 1594.804927][T23777] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1594.904625][T31272] FAULT_INJECTION: forcing a failure. [ 1594.904625][T31272] name failslab, interval 1, probability 0, space 0, times 0 [ 1594.925070][T23499] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1594.952915][T31272] CPU: 1 UID: 0 PID: 31272 Comm: syz.5.6874 Tainted: G L syzkaller #0 PREEMPT(full) [ 1594.952946][T31272] Tainted: [L]=SOFTLOCKUP [ 1594.952954][T31272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1594.952966][T31272] Call Trace: [ 1594.952975][T31272] [ 1594.952983][T31272] dump_stack_lvl+0xe8/0x150 [ 1594.953015][T31272] should_fail_ex+0x412/0x560 [ 1594.953049][T31272] should_failslab+0xa8/0x100 [ 1594.953077][T31272] __kmalloc_cache_noprof+0x88/0x660 [ 1594.953100][T31272] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 1594.953122][T31272] ? sctp_add_bind_addr+0x8c/0x370 [ 1594.953147][T31272] sctp_add_bind_addr+0x8c/0x370 [ 1594.953171][T31272] sctp_copy_local_addr_list+0x314/0x4f0 [ 1594.953194][T31272] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1594.953215][T31272] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1594.953239][T31272] ? sctp_v6_is_any+0x64/0x80 [ 1594.953270][T31272] ? sctp_copy_one_addr+0x93/0x360 [ 1594.953294][T31272] sctp_bind_addr_copy+0xb3/0x3c0 [ 1594.953316][T31272] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1594.953348][T31272] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1594.953377][T31272] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1594.953408][T31272] ? __local_bh_enable_ip+0xd0/0x130 [ 1594.953431][T31272] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1594.953455][T31272] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1594.953482][T31272] sctp_sendmsg+0x1528/0x2c10 [ 1594.953518][T31272] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1594.953546][T31272] ? aa_sk_perm+0x6d5/0x900 [ 1594.953581][T31272] ? __pfx_aa_sk_perm+0x10/0x10 [ 1594.953612][T31272] ? sock_rps_record_flow+0x19/0x400 [ 1594.953641][T31272] ? inet_sendmsg+0x2f4/0x370 [ 1594.953670][T31272] ____sys_sendmsg+0x80a/0x9f0 [ 1594.953704][T31272] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1594.953739][T31272] ? import_iovec+0x73/0xa0 [ 1594.953765][T31272] ___sys_sendmsg+0x2a5/0x360 [ 1594.953794][T31272] ? __pfx____sys_sendmsg+0x10/0x10 [ 1594.953853][T31272] ? __fget_files+0x2a/0x420 [ 1594.953869][T31272] ? __fget_files+0x3a0/0x420 [ 1594.953897][T31272] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1594.953924][T31272] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1594.953959][T31272] ? __pfx_ksys_write+0x10/0x10 [ 1594.953992][T31272] do_syscall_64+0x14d/0xf80 [ 1594.954014][T31272] ? trace_irq_disable+0x3b/0x150 [ 1594.954031][T31272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1594.954051][T31272] ? clear_bhb_loop+0x40/0x90 [ 1594.954075][T31272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1594.954094][T31272] RIP: 0033:0x7fd4e9b9c819 [ 1594.954111][T31272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1594.954127][T31272] RSP: 002b:00007fd4eaad0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1594.954148][T31272] RAX: ffffffffffffffda RBX: 00007fd4e9e15fa0 RCX: 00007fd4e9b9c819 [ 1594.954162][T31272] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 1594.954175][T31272] RBP: 00007fd4eaad0090 R08: 0000000000000000 R09: 0000000000000000 [ 1594.954188][T31272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1594.954199][T31272] R13: 00007fd4e9e16038 R14: 00007fd4e9e15fa0 R15: 00007fd4e9f3fa48 [ 1594.954231][T31272] [ 1595.378289][T23777] usb 8-1: device descriptor read/64, error -71 [ 1595.413149][T31274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6875'. [ 1595.424350][T31274] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6875'. [ 1595.469194][T23499] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1595.483089][T23499] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1595.505477][T31276] netlink: 'syz.5.6876': attribute type 1 has an invalid length. [ 1595.519417][T23499] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.551689][T23499] usb 5-1: config 0 descriptor?? [ 1595.591683][T23499] pwc: Askey VC010 type 2 USB webcam detected. [ 1595.615242][T23777] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1595.756499][T23777] usb 8-1: device descriptor read/64, error -71 [ 1595.788467][T31268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1595.801077][T31268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1595.847887][T23499] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1595.864953][T23778] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1595.874351][T23499] pwc: recv_control_msg error -71 req 02 val 2700 [ 1595.883928][T23499] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1595.884324][T23777] usb usb8-port1: attempt power cycle [ 1595.891917][T23499] pwc: recv_control_msg error -71 req 04 val 1000 [ 1595.904745][T23499] pwc: recv_control_msg error -71 req 04 val 1300 [ 1595.914692][T23499] pwc: recv_control_msg error -71 req 04 val 1400 [ 1595.932648][T23499] pwc: recv_control_msg error -71 req 02 val 2000 [ 1595.942130][T23499] pwc: recv_control_msg error -71 req 02 val 2100 [ 1595.956855][T23499] pwc: recv_control_msg error -71 req 04 val 1500 [ 1595.967346][T23499] pwc: recv_control_msg error -71 req 02 val 2500 [ 1595.986519][T23499] pwc: recv_control_msg error -71 req 02 val 2400 [ 1595.995848][T23499] pwc: recv_control_msg error -71 req 02 val 2600 [ 1596.004919][T23778] usb 1-1: device descriptor read/64, error -71 [ 1596.012297][T23499] pwc: recv_control_msg error -71 req 02 val 2900 [ 1596.020538][T23499] pwc: recv_control_msg error -71 req 02 val 2800 [ 1596.028192][T23499] pwc: recv_control_msg error -71 req 04 val 1100 [ 1596.042324][T23499] pwc: recv_control_msg error -71 req 04 val 1200 [ 1596.051750][T23499] pwc: Registered as video103. [ 1596.070171][T23499] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input113 [ 1596.104453][T23499] usb 5-1: USB disconnect, device number 99 [ 1596.266380][T23778] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1596.305125][T23777] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1596.325646][T23777] usb 8-1: device descriptor read/8, error -71 [ 1596.348287][ T30] audit: type=1326 audit(1776089294.539:4745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31280 comm="syz.5.6879" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd4e9b9c819 code=0x0 [ 1596.444691][T31300] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1596.458833][T23778] usb 1-1: device descriptor read/64, error -71 [ 1596.473598][T31300] netlink: 'syz.6.6883': attribute type 10 has an invalid length. [ 1596.575219][T23778] usb usb1-port1: attempt power cycle [ 1596.594920][T23777] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1596.594960][T23499] usb 5-1: new low-speed USB device number 100 using dummy_hcd [ 1596.668866][T23777] usb 8-1: device descriptor read/8, error -71 [ 1596.744914][T23753] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1596.809845][T23499] usb 5-1: Invalid ep0 maxpacket: 32 [ 1596.816792][T23777] usb usb8-port1: unable to enumerate USB device [ 1596.929076][T23778] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1596.957202][T23753] usb 6-1: Using ep0 maxpacket: 32 [ 1596.975087][T23499] usb 5-1: new low-speed USB device number 101 using dummy_hcd [ 1596.990167][T23753] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1596.990167][T23778] usb 1-1: device descriptor read/8, error -71 [ 1596.990194][T23753] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1597.017445][T23753] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1597.027016][T23753] usb 6-1: config 1 has no interface number 0 [ 1597.036135][T23753] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1597.049461][T23753] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1597.083446][T23753] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1597.096399][T23753] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.110701][T23753] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1597.175053][T23499] usb 5-1: Invalid ep0 maxpacket: 32 [ 1597.202620][T23499] usb usb5-port1: attempt power cycle [ 1597.274957][T23778] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1597.308129][T23778] usb 1-1: device descriptor read/8, error -71 [ 1597.455257][T23778] usb usb1-port1: unable to enumerate USB device [ 1597.584990][T23499] usb 5-1: new low-speed USB device number 102 using dummy_hcd [ 1597.636159][T23499] usb 5-1: Invalid ep0 maxpacket: 32 [ 1597.747156][T31303] syzkaller0: entered promiscuous mode [ 1597.755116][T31303] syzkaller0: entered allmulticast mode [ 1597.783565][T23499] usb 5-1: new low-speed USB device number 103 using dummy_hcd [ 1597.847353][T23499] usb 5-1: Invalid ep0 maxpacket: 32 [ 1597.876776][T23499] usb usb5-port1: unable to enumerate USB device [ 1598.102416][T31307] netlink: 'syz.6.6885': attribute type 7 has an invalid length. [ 1598.110557][T31307] netlink: 'syz.6.6885': attribute type 8 has an invalid length. [ 1598.173706][T31311] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6886'. [ 1598.511502][ T30] audit: type=1326 audit(1776089296.699:4746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31277 comm="syz.0.6877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a339c819 code=0x7fc00000 [ 1599.123820][T31320] tipc: Enabling of bearer rejected, failed to enable media [ 1599.259278][T31326] bridge0: port 3(dummy0) entered disabled state [ 1599.265972][T31326] bridge0: port 2(bridge_slave_1) entered disabled state [ 1599.273581][T31326] bridge0: port 1(bridge_slave_0) entered disabled state [ 1599.299184][T31326] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1599.826131][T31340] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1599.867964][T31340] netlink: 'syz.6.6895': attribute type 10 has an invalid length. [ 1600.209139][T31344] syzkaller0: entered promiscuous mode [ 1600.215733][T31344] syzkaller0: entered allmulticast mode [ 1600.324933][T23499] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1600.538168][T23499] usb 5-1: no configurations [ 1600.542865][T23499] usb 5-1: can't read configurations, error -22 [ 1600.632727][T23753] snd_usb_pod 6-1:1.1: set_interface failed [ 1600.638974][T23753] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1600.696567][T23753] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 1600.705344][T23499] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1600.734392][T23753] usb 6-1: USB disconnect, device number 67 [ 1600.977992][T31348] Cannot find set identified by id 0 to match [ 1601.005714][T23499] usb 5-1: no configurations [ 1601.016328][T23499] usb 5-1: can't read configurations, error -22 [ 1601.023372][T23499] usb usb5-port1: attempt power cycle [ 1601.314922][ T5879] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1601.337843][T31358] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1601.387118][T23499] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1601.440161][T23499] usb 5-1: no configurations [ 1601.446663][T23499] usb 5-1: can't read configurations, error -22 [ 1601.464913][ T5879] usb 6-1: Using ep0 maxpacket: 8 [ 1601.493388][ T5879] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1601.543802][ T5879] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1601.584971][T23499] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1601.602133][ T5879] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1601.654461][T23499] usb 5-1: no configurations [ 1601.668261][ T5879] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1601.688026][T23499] usb 5-1: can't read configurations, error -22 [ 1601.715153][T23499] usb usb5-port1: unable to enumerate USB device [ 1601.724025][ T5879] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1601.766050][ T5879] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1601.769846][T31362] syzkaller0: entered promiscuous mode [ 1601.792773][ T5879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1601.810257][T31362] syzkaller0: entered allmulticast mode [ 1602.081672][ T5879] usb 6-1: usb_control_msg returned -32 [ 1602.121346][ T5879] usbtmc 6-1:16.0: can't read capabilities [ 1602.863685][T31372] syzkaller0: entered promiscuous mode [ 1602.871117][T31372] syzkaller0: entered allmulticast mode [ 1602.924492][T31373] netlink: 92 bytes leftover after parsing attributes in process `syz.0.6908'. [ 1603.384924][ T5879] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1603.548708][ T5879] usb 5-1: Using ep0 maxpacket: 32 [ 1603.563985][ T5879] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1603.577886][ T5879] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 1603.594274][T31390] netlink: 92 bytes leftover after parsing attributes in process `syz.0.6911'. [ 1603.604973][ T5879] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1603.629784][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.881521][T31380] dummy0: left allmulticast mode [ 1603.908481][T31380] dummy0: left promiscuous mode [ 1603.935447][T31380] bridge0: port 3(dummy0) entered disabled state [ 1603.956359][T31380] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1604.011387][T31394] netlink: 'syz.4.6910': attribute type 10 has an invalid length. [ 1604.044902][T31394] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6910'. [ 1604.095658][T23499] usb 6-1: USB disconnect, device number 68 [ 1604.189260][T31394] bridge0: port 3(dummy0) entered blocking state [ 1604.203432][T31394] bridge0: port 3(dummy0) entered disabled state [ 1604.221947][T31394] dummy0: entered allmulticast mode [ 1604.247938][T31394] dummy0: entered promiscuous mode [ 1604.711094][T31401] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6914'. [ 1605.005000][T23499] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1605.196087][T23499] usb 8-1: Using ep0 maxpacket: 16 [ 1605.237206][T23499] usb 8-1: config 0 has no interfaces? [ 1605.263957][T23499] usb 8-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1605.294470][T23499] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1605.326544][T23499] usb 8-1: Product: syz [ 1605.348815][T23499] usb 8-1: Manufacturer: syz [ 1605.369712][T23499] usb 8-1: SerialNumber: syz [ 1605.399846][T23499] usb 8-1: config 0 descriptor?? [ 1605.639682][T23499] usb 8-1: USB disconnect, device number 49 [ 1605.755029][T23777] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1605.924909][T23777] usb 1-1: Using ep0 maxpacket: 8 [ 1605.940730][T23777] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1605.969867][T23777] usb 1-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 1605.987198][T23777] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1605.998913][T23777] usb 1-1: config 0 descriptor?? [ 1606.012925][T23777] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1606.070034][T23499] usb 5-1: USB disconnect, device number 108 [ 1606.104995][T23753] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1606.253720][T23777] usb 1-1: USB disconnect, device number 80 [ 1606.264907][T23753] usb 6-1: Using ep0 maxpacket: 16 [ 1606.290361][T23753] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1606.327861][T23753] usb 6-1: config 0 has no interfaces? [ 1606.343903][T23753] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1606.360128][T23753] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1606.370550][T23753] usb 6-1: config 0 descriptor?? [ 1606.575194][T23499] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1606.582254][T23777] usb 6-1: USB disconnect, device number 69 [ 1606.726480][T23499] usb 5-1: config 0 has no interfaces? [ 1606.732142][T23499] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1606.741596][T23499] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1606.751724][T23499] usb 5-1: config 0 descriptor?? [ 1606.956599][T31420] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 1606.963141][T31420] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1606.972504][T31420] vhci_hcd vhci_hcd.0: Device attached [ 1607.079741][T23778] usb 5-1: USB disconnect, device number 109 [ 1607.167461][T23499] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1607.176928][T31428] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 1607.183477][T31428] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1607.197990][T31428] vhci_hcd vhci_hcd.0: Device attached [ 1607.224966][ T5879] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 1607.236970][T31434] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(15) [ 1607.243605][T31434] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1607.252533][T23499] usb 45-1: new full-speed USB device number 13 using vhci_hcd [ 1607.295549][T31434] vhci_hcd vhci_hcd.0: Device attached [ 1607.375146][ T5914] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1607.419144][ T5879] usb 8-1: no configurations [ 1607.423871][ T5879] usb 8-1: can't read configurations, error -22 [ 1607.455178][ T5914] usb 33-1: new full-speed USB device number 9 using vhci_hcd [ 1607.485797][T31442] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(14) [ 1607.492447][T31442] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1607.503716][T31442] vhci_hcd vhci_hcd.0: Device attached [ 1607.510520][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.517087][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.538124][T31444] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6925'. [ 1607.547349][T23778] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1607.581631][T31444] dummy0: Device is already in use. [ 1607.594934][ T5879] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1607.704944][T23778] usb 5-1: device descriptor read/64, error -71 [ 1607.799857][ T5879] usb 8-1: no configurations [ 1607.822413][ T5879] usb 8-1: can't read configurations, error -22 [ 1607.834206][T31435] vhci_hcd: connection closed [ 1607.839622][T21203] vhci_hcd vhci_hcd.6: stop threads [ 1607.862026][T31421] vhci_hcd: connection reset by peer [ 1607.870876][ T5879] usb usb8-port1: attempt power cycle [ 1607.893861][T21203] vhci_hcd vhci_hcd.6: release socket [ 1607.920101][T21203] vhci_hcd vhci_hcd.6: disconnect device [ 1607.929028][T31453] netlink: 'syz.5.6927': attribute type 2 has an invalid length. [ 1607.945710][T21203] vhci_hcd vhci_hcd.6: stop threads [ 1607.963770][T21203] vhci_hcd vhci_hcd.6: release socket [ 1607.969361][T23778] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1607.985595][T31453] : entered promiscuous mode [ 1607.994502][T21203] vhci_hcd vhci_hcd.6: disconnect device [ 1608.106094][T31455] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6928'. [ 1608.144975][T23778] usb 5-1: device descriptor read/64, error -71 [ 1608.222078][T31445] vhci_hcd: connection closed [ 1608.222461][T22402] vhci_hcd vhci_hcd.0: stop threads [ 1608.242380][T31429] vhci_hcd: connection reset by peer [ 1608.244941][ T5879] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 1608.261482][T22402] vhci_hcd vhci_hcd.0: release socket [ 1608.276057][T23778] usb usb5-port1: attempt power cycle [ 1608.286139][T22402] vhci_hcd vhci_hcd.0: disconnect device [ 1608.300885][T22402] vhci_hcd vhci_hcd.0: stop threads [ 1608.320051][ T5879] usb 8-1: no configurations [ 1608.324752][T22402] vhci_hcd vhci_hcd.0: release socket [ 1608.335907][ T5879] usb 8-1: can't read configurations, error -22 [ 1608.349046][T22402] vhci_hcd vhci_hcd.0: disconnect device [ 1608.405299][T23777] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1608.495061][ T5879] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 1608.545013][ T5879] usb 8-1: no configurations [ 1608.549915][ T5879] usb 8-1: can't read configurations, error -22 [ 1608.560839][ T5879] usb usb8-port1: unable to enumerate USB device [ 1608.604928][T23777] usb 6-1: Using ep0 maxpacket: 32 [ 1608.626519][T23777] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1608.635035][T23778] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1608.655517][T23778] usb 5-1: device descriptor read/8, error -71 [ 1608.700988][T23777] usb 6-1: config 0 has no interface number 0 [ 1608.734460][T23777] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1608.776304][T23777] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1608.814336][T23777] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.837584][T23777] usb 6-1: Product: syz [ 1608.847736][T23777] usb 6-1: Manufacturer: syz [ 1608.856955][T23777] usb 6-1: SerialNumber: syz [ 1608.905034][T23778] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1608.906512][T23777] usb 6-1: config 0 descriptor?? [ 1608.959732][T23778] usb 5-1: device descriptor read/8, error -71 [ 1609.015101][ T5879] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1609.087236][T23778] usb usb5-port1: unable to enumerate USB device [ 1609.164928][ T5879] usb 7-1: device descriptor read/64, error -71 [ 1609.361968][T23778] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1609.424926][ T5879] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1609.514977][T23778] usb 1-1: Using ep0 maxpacket: 8 [ 1609.527259][T23778] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1609.546444][T23778] usb 1-1: config 0 has no interface number 0 [ 1609.560667][T23778] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1609.579085][ T5879] usb 7-1: device descriptor read/64, error -71 [ 1609.594583][T23778] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1609.620031][T23778] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1609.642713][T23778] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1609.671383][T23778] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1609.692603][T23778] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1609.703688][ T5879] usb usb7-port1: attempt power cycle [ 1609.722115][T23778] usb 1-1: config 0 descriptor?? [ 1609.750161][T23778] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1609.956762][T31460] netlink: 'syz.0.6930': attribute type 6 has an invalid length. [ 1610.056048][ T5879] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1610.086330][ T5879] usb 7-1: device descriptor read/8, error -71 [ 1610.334954][ T5879] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1610.383602][ T5879] usb 7-1: device descriptor read/8, error -71 [ 1610.506576][ T5879] usb usb7-port1: unable to enumerate USB device [ 1610.567706][ T5879] usb 1-1: USB disconnect, device number 81 [ 1610.567768][ C1] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 1610.594792][T23777] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1610.621898][ T5879] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1610.623756][T23777] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1610.629022][T31460] ldusb: No device or device unplugged -19 [ 1610.669040][T23777] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1610.692313][T23777] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1610.703630][T23777] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1610.714152][T23777] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1610.724106][T23777] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 1610.745051][T23777] usb 6-1: USB disconnect, device number 70 [ 1610.918611][T31477] FAULT_INJECTION: forcing a failure. [ 1610.918611][T31477] name failslab, interval 1, probability 0, space 0, times 0 [ 1610.933143][T31477] CPU: 1 UID: 0 PID: 31477 Comm: syz.7.6935 Tainted: G L syzkaller #0 PREEMPT(full) [ 1610.933174][T31477] Tainted: [L]=SOFTLOCKUP [ 1610.933181][T31477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1610.933193][T31477] Call Trace: [ 1610.933202][T31477] [ 1610.933210][T31477] dump_stack_lvl+0xe8/0x150 [ 1610.933241][T31477] should_fail_ex+0x412/0x560 [ 1610.933276][T31477] should_failslab+0xa8/0x100 [ 1610.933302][T31477] __kmalloc_cache_noprof+0x88/0x660 [ 1610.933325][T31477] ? sctp_add_bind_addr+0x8c/0x370 [ 1610.933350][T31477] sctp_add_bind_addr+0x8c/0x370 [ 1610.933375][T31477] sctp_copy_local_addr_list+0x314/0x4f0 [ 1610.933399][T31477] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1610.933421][T31477] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1610.933444][T31477] ? sctp_v6_is_any+0x64/0x80 [ 1610.933467][T31477] ? sctp_copy_one_addr+0x93/0x360 [ 1610.933491][T31477] sctp_bind_addr_copy+0xb3/0x3c0 [ 1610.933513][T31477] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1610.933545][T31477] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1610.933572][T31477] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1610.933604][T31477] ? __local_bh_enable_ip+0xd0/0x130 [ 1610.933627][T31477] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1610.933651][T31477] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1610.933679][T31477] sctp_sendmsg+0x1528/0x2c10 [ 1610.933717][T31477] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1610.933744][T31477] ? aa_sk_perm+0x6d5/0x900 [ 1610.933780][T31477] ? __pfx_aa_sk_perm+0x10/0x10 [ 1610.933810][T31477] ? sock_rps_record_flow+0x19/0x400 [ 1610.933839][T31477] ? inet_sendmsg+0x2f4/0x370 [ 1610.933868][T31477] ____sys_sendmsg+0x80a/0x9f0 [ 1610.933901][T31477] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1610.933942][T31477] ? import_iovec+0x73/0xa0 [ 1610.933969][T31477] ___sys_sendmsg+0x2a5/0x360 [ 1610.933999][T31477] ? __pfx____sys_sendmsg+0x10/0x10 [ 1610.934057][T31477] ? __fget_files+0x2a/0x420 [ 1610.934074][T31477] ? __fget_files+0x3a0/0x420 [ 1610.934100][T31477] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1610.934127][T31477] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1610.934164][T31477] ? __pfx_ksys_write+0x10/0x10 [ 1610.934195][T31477] do_syscall_64+0x14d/0xf80 [ 1610.934221][T31477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1610.934240][T31477] ? clear_bhb_loop+0x40/0x90 [ 1610.934264][T31477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1610.934283][T31477] RIP: 0033:0x7f328a99c819 [ 1610.934302][T31477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1610.934318][T31477] RSP: 002b:00007f328b813028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1610.934339][T31477] RAX: ffffffffffffffda RBX: 00007f328ac15fa0 RCX: 00007f328a99c819 [ 1610.934353][T31477] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 1610.934366][T31477] RBP: 00007f328b813090 R08: 0000000000000000 R09: 0000000000000000 [ 1610.934378][T31477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1610.934389][T31477] R13: 00007f328ac16038 R14: 00007f328ac15fa0 R15: 00007f328ad3fa48 [ 1610.934419][T31477] [ 1611.488630][T31490] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 1611.495152][T31490] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1611.542499][T31490] vhci_hcd vhci_hcd.0: Device attached [ 1611.714974][ T5879] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1611.725149][T23778] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1611.795129][ T5879] usb 43-1: new full-speed USB device number 13 using vhci_hcd [ 1611.813281][T31500] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(15) [ 1611.820019][T31500] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1611.856025][T31500] vhci_hcd vhci_hcd.0: Device attached [ 1612.334514][T31502] vhci_hcd: connection closed [ 1612.334875][T21214] vhci_hcd vhci_hcd.5: stop threads [ 1612.340762][T31491] vhci_hcd: connection reset by peer [ 1612.364768][T21214] vhci_hcd vhci_hcd.5: release socket [ 1612.376662][T23499] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1612.391895][T21214] vhci_hcd vhci_hcd.5: disconnect device [ 1612.398734][T21214] vhci_hcd vhci_hcd.5: stop threads [ 1612.408656][T21214] vhci_hcd vhci_hcd.5: release socket [ 1612.426295][T21214] vhci_hcd vhci_hcd.5: disconnect device [ 1612.515376][T31512] tipc: Enabling of bearer rejected, failed to enable media [ 1612.605281][ T5914] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1612.885087][T23753] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 1612.998552][T31523] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6949'. [ 1613.085546][T23753] usb 8-1: no configurations [ 1613.094722][T23753] usb 8-1: can't read configurations, error -22 [ 1613.242636][T31533] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1613.257610][T23753] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 1613.314952][T23777] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1613.435431][T23753] usb 8-1: no configurations [ 1613.443160][T23753] usb 8-1: can't read configurations, error -22 [ 1613.459519][T23753] usb usb8-port1: attempt power cycle [ 1613.504916][T23777] usb 7-1: Using ep0 maxpacket: 32 [ 1613.512135][T23777] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1613.529823][T23777] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1613.564201][T23777] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1613.575234][T23777] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1613.611121][T23777] usb 7-1: config 0 descriptor?? [ 1613.815309][T23753] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 1613.831507][T31523] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1613.866841][T23753] usb 8-1: no configurations [ 1613.890983][T23753] usb 8-1: can't read configurations, error -22 [ 1614.069276][T23753] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 1614.164410][T23753] usb 8-1: no configurations [ 1614.184741][T23753] usb 8-1: can't read configurations, error -22 [ 1614.228225][T23753] usb usb8-port1: unable to enumerate USB device [ 1614.514124][T31546] x_tables: unsorted underflow at hook 2 [ 1614.681794][T23777] savu 0003:1E7D:2D5A.001F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 1614.835495][T31553] tipc: New replicast peer: 255.255.255.255 [ 1614.871730][T31553] tipc: Enabled bearer , priority 10 [ 1614.924456][T23777] usb 7-1: USB disconnect, device number 62 [ 1615.186532][ T5914] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 1615.215151][T31559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1615.228816][T31559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1615.318656][T31562] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6961'. [ 1615.339754][T31562] macsec1: entered promiscuous mode [ 1615.346212][T31562] bridge0: entered promiscuous mode [ 1615.352249][T31562] macsec1: entered allmulticast mode [ 1615.361943][T31562] bridge0: entered allmulticast mode [ 1615.368894][T31562] bridge0: port 3(macsec1) entered blocking state [ 1615.377145][T31562] bridge0: port 3(macsec1) entered disabled state [ 1615.389233][T31562] bridge0: left allmulticast mode [ 1615.397745][T31562] bridge0: left promiscuous mode [ 1615.397761][ T5914] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 1615.414002][ T5914] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1615.435891][T23777] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1615.473982][ T5914] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1615.527720][ T5914] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1615.584974][T23777] usb 5-1: device descriptor read/64, error -71 [ 1615.591023][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1615.692146][ T5914] usb 1-1: Product: syz [ 1615.711187][ T5914] usb 1-1: Manufacturer: syz [ 1615.724744][ T5914] usb 1-1: SerialNumber: syz [ 1615.743227][ T5914] usb 1-1: config 0 descriptor?? [ 1615.832865][ T5914] usb 1-1: selecting invalid altsetting 0 [ 1615.844912][T23777] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1616.012393][T23777] usb 5-1: device descriptor read/64, error -71 [ 1616.076831][T23753] usb 1-1: USB disconnect, device number 82 [ 1616.175309][T23777] usb usb5-port1: attempt power cycle [ 1616.525336][T23777] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1616.565979][T23777] usb 5-1: device descriptor read/8, error -71 [ 1616.815232][T23777] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1616.859998][T23777] usb 5-1: device descriptor read/8, error -71 [ 1616.935042][ T5879] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1616.988728][T23777] usb usb5-port1: unable to enumerate USB device [ 1617.319745][T31579] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6966'. [ 1617.405186][T31581] netlink: 92 bytes leftover after parsing attributes in process `syz.6.6967'. [ 1617.452582][T31583] FAULT_INJECTION: forcing a failure. [ 1617.452582][T31583] name failslab, interval 1, probability 0, space 0, times 0 [ 1617.470319][T31583] CPU: 1 UID: 0 PID: 31583 Comm: syz.6.6968 Tainted: G L syzkaller #0 PREEMPT(full) [ 1617.470344][T31583] Tainted: [L]=SOFTLOCKUP [ 1617.470348][T31583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1617.470355][T31583] Call Trace: [ 1617.470360][T31583] [ 1617.470367][T31583] dump_stack_lvl+0xe8/0x150 [ 1617.470390][T31583] should_fail_ex+0x412/0x560 [ 1617.470412][T31583] should_failslab+0xa8/0x100 [ 1617.470431][T31583] __kmalloc_cache_noprof+0x88/0x660 [ 1617.470444][T31583] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 1617.470459][T31583] ? sctp_add_bind_addr+0x8c/0x370 [ 1617.470473][T31583] sctp_add_bind_addr+0x8c/0x370 [ 1617.470486][T31583] sctp_copy_local_addr_list+0x314/0x4f0 [ 1617.470501][T31583] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1617.470513][T31583] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1617.470525][T31583] ? sctp_v6_is_any+0x64/0x80 [ 1617.470538][T31583] ? sctp_copy_one_addr+0x93/0x360 [ 1617.470553][T31583] sctp_bind_addr_copy+0xb3/0x3c0 [ 1617.470566][T31583] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1617.470585][T31583] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1617.470601][T31583] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1617.470622][T31583] ? __local_bh_enable_ip+0xd0/0x130 [ 1617.470637][T31583] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1617.470652][T31583] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1617.470669][T31583] sctp_sendmsg+0x1528/0x2c10 [ 1617.470690][T31583] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1617.470706][T31583] ? aa_sk_perm+0x6d5/0x900 [ 1617.470727][T31583] ? __pfx_aa_sk_perm+0x10/0x10 [ 1617.470745][T31583] ? sock_rps_record_flow+0x19/0x400 [ 1617.470762][T31583] ? inet_sendmsg+0x2f4/0x370 [ 1617.470779][T31583] ____sys_sendmsg+0x80a/0x9f0 [ 1617.470800][T31583] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1617.470819][T31583] ? import_iovec+0x73/0xa0 [ 1617.470835][T31583] ___sys_sendmsg+0x2a5/0x360 [ 1617.470852][T31583] ? __pfx____sys_sendmsg+0x10/0x10 [ 1617.470889][T31583] ? __fget_files+0x2a/0x420 [ 1617.470899][T31583] ? __fget_files+0x3a0/0x420 [ 1617.470914][T31583] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1617.470930][T31583] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1617.470949][T31583] ? __pfx_ksys_write+0x10/0x10 [ 1617.470969][T31583] do_syscall_64+0x14d/0xf80 [ 1617.470984][T31583] ? trace_irq_disable+0x3b/0x150 [ 1617.470995][T31583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.471006][T31583] ? clear_bhb_loop+0x40/0x90 [ 1617.471020][T31583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.471031][T31583] RIP: 0033:0x7ff20759c819 [ 1617.471043][T31583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1617.471053][T31583] RSP: 002b:00007ff2084a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1617.471066][T31583] RAX: ffffffffffffffda RBX: 00007ff207815fa0 RCX: 00007ff20759c819 [ 1617.471074][T31583] RDX: 0000000024000052 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1617.471081][T31583] RBP: 00007ff2084a3090 R08: 0000000000000000 R09: 0000000000000000 [ 1617.471089][T31583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1617.471095][T31583] R13: 00007ff207816038 R14: 00007ff207815fa0 R15: 00007ff20793fa48 [ 1617.471111][T31583] [ 1618.250394][T31596] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1618.428937][T31601] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6974'. [ 1618.452057][T31601] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6974'. [ 1618.585040][T31461] usb 6-1: new full-speed USB device number 71 using dummy_hcd [ 1618.778621][T31461] usb 6-1: config 0 has an invalid interface number: 113 but max is 0 [ 1618.829770][T31461] usb 6-1: config 0 has no interface number 0 [ 1618.877748][T31461] usb 6-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1618.944356][T31461] usb 6-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1618.993480][T31461] usb 6-1: config 0 interface 113 has no altsetting 0 [ 1619.091578][T31612] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6976'. [ 1619.115530][T31461] usb 6-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1619.161798][T31461] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.230032][T31461] usb 6-1: Product: syz [ 1619.240639][T31461] usb 6-1: Manufacturer: syz [ 1619.267872][T31461] usb 6-1: SerialNumber: syz [ 1619.315822][T31461] usb 6-1: config 0 descriptor?? [ 1619.395103][ C0] usb 6-1: NFC: Urb failure (status -71) [ 1619.407952][T31461] usb 6-1: NFC: Unable to get FW version [ 1619.440572][T31461] pn533_usb 6-1:0.113: probe with driver pn533_usb failed with error -90 [ 1619.955064][T31461] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 1620.134486][T31461] usb 8-1: Using ep0 maxpacket: 32 [ 1620.153004][T31461] usb 8-1: too many configurations: 65, using maximum allowed: 8 [ 1620.178272][T31461] usb 8-1: config 9 has an invalid descriptor of length 133, skipping remainder of the config [ 1620.229753][T31461] usb 8-1: config 9 has an invalid descriptor of length 133, skipping remainder of the config [ 1620.276777][T31461] usb 8-1: config 9 has an invalid descriptor of length 133, skipping remainder of the config [ 1620.309404][T31461] usb 8-1: config 9 has an invalid descriptor of length 133, skipping remainder of the config [ 1620.332010][T31461] usb 8-1: config 9 has an invalid descriptor of length 133, skipping remainder of the config [ 1620.365091][T31461] usb 8-1: config 9 has an invalid descriptor of length 133, skipping remainder of the config [ 1620.411270][T31461] usb 8-1: config 9 has an invalid descriptor of length 133, skipping remainder of the config [ 1620.444122][T31461] usb 8-1: config 9 has an invalid descriptor of length 133, skipping remainder of the config [ 1620.477853][T31461] usb 8-1: New USB device found, idVendor=0080, idProduct=0000, bcdDevice=6a.00 [ 1620.504912][T31461] usb 8-1: New USB device strings: Mfr=58, Product=207, SerialNumber=146 [ 1620.524905][T31461] usb 8-1: Product: syz [ 1620.544204][T31461] usb 8-1: Manufacturer: syz [ 1620.561640][T31461] usb 8-1: SerialNumber: syz [ 1620.625954][T31461] usbhid 8-1:9.0: couldn't find an input interrupt endpoint [ 1620.915631][T31626] futex_wake_op: syz.4.6981 tries to shift op by -1; fix this program [ 1621.184921][T18141] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1621.336824][T18141] usb 1-1: Using ep0 maxpacket: 16 [ 1621.356785][T18141] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1621.368069][T18141] usb 1-1: config 0 has no interfaces? [ 1621.373690][T18141] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1621.393305][T18141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1621.423058][T18141] usb 1-1: config 0 descriptor?? [ 1621.649522][T31461] usb 1-1: USB disconnect, device number 83 [ 1621.667812][ T5879] usb 6-1: USB disconnect, device number 71 [ 1621.835016][T31644] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6987'. [ 1621.875157][T18141] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1621.941408][T31650] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1622.035101][T18141] usb 5-1: Using ep0 maxpacket: 8 [ 1622.046881][T18141] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1622.066246][T18141] usb 5-1: config 0 has no interface number 0 [ 1622.080210][T18141] usb 5-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1622.114402][T18141] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1622.135181][T18141] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1622.157100][T18141] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.cb [ 1622.185458][T18141] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1622.223720][T18141] usb 5-1: config 0 descriptor?? [ 1622.260555][T18141] hso 5-1:0.1: Failed to find BULK IN ep [ 1622.453255][T31637] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6984'. [ 1622.479870][T18141] usb 5-1: USB disconnect, device number 118 [ 1622.599351][T31658] netlink: 'syz.0.6990': attribute type 1 has an invalid length. [ 1623.185291][T31667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6992'. [ 1623.485884][T18141] usb 8-1: USB disconnect, device number 58 [ 1623.534936][T23753] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1623.565315][T31461] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1623.695247][T23753] usb 7-1: Using ep0 maxpacket: 32 [ 1623.702245][T23753] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1623.714383][T23753] usb 7-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 1623.724491][T23753] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1623.745506][T31461] usb 6-1: Using ep0 maxpacket: 32 [ 1623.750927][T23753] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1623.760213][T31461] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1623.774404][T31461] usb 6-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 1623.798581][T31461] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1623.818465][T31461] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1623.865232][T23499] usb 5-1: new full-speed USB device number 119 using dummy_hcd [ 1623.970329][T31672] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1624.018571][T23499] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1624.041273][T23499] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1624.050317][T31688] syzkaller1: entered promiscuous mode [ 1624.057449][T31688] syzkaller1: entered allmulticast mode [ 1624.065592][T23499] usb 5-1: Product: syz [ 1624.073829][T23499] usb 5-1: Manufacturer: syz [ 1624.086874][T23499] usb 5-1: SerialNumber: syz [ 1624.092447][T31674] bond0: (slave dummy0): Releasing backup interface [ 1624.094185][T31689] netlink: 'syz.6.6994': attribute type 10 has an invalid length. [ 1624.119214][T23499] usb 5-1: config 0 descriptor?? [ 1624.126933][T31674] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1624.172233][T23499] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1624.179084][T31689] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6994'. [ 1624.221213][T31674] netlink: 'syz.5.6995': attribute type 10 has an invalid length. [ 1624.232594][T31674] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6995'. [ 1624.242393][T31674] bridge0: port 3(dummy0) entered blocking state [ 1624.250467][T31674] bridge0: port 3(dummy0) entered disabled state [ 1624.262575][T31674] dummy0: entered allmulticast mode [ 1624.270065][T31674] dummy0: entered promiscuous mode [ 1624.577841][T23499] gspca_stk1135: reg_w 0x3 err -71 [ 1624.595375][T23753] usb 8-1: new full-speed USB device number 59 using dummy_hcd [ 1624.628368][T23499] gspca_stk1135: serial bus timeout: status=0x00 [ 1624.639539][T23499] gspca_stk1135: Sensor write failed [ 1624.647042][T23499] gspca_stk1135: serial bus timeout: status=0x00 [ 1624.654532][T23499] gspca_stk1135: Sensor write failed [ 1624.660633][T23499] gspca_stk1135: serial bus timeout: status=0x00 [ 1624.670803][T23499] gspca_stk1135: Sensor read failed [ 1624.676454][T23499] gspca_stk1135: serial bus timeout: status=0x00 [ 1624.682925][T23499] gspca_stk1135: Sensor read failed [ 1624.688670][T23499] gspca_stk1135: Detected sensor type unknown (0x0) [ 1624.699989][T23499] gspca_stk1135: serial bus timeout: status=0x00 [ 1624.707803][T23499] gspca_stk1135: Sensor read failed [ 1624.715846][T23499] gspca_stk1135: serial bus timeout: status=0x00 [ 1624.722337][T23499] gspca_stk1135: Sensor read failed [ 1624.728739][T23499] gspca_stk1135: serial bus timeout: status=0x00 [ 1624.736508][T23499] gspca_stk1135: Sensor write failed [ 1624.741967][T23499] gspca_stk1135: serial bus timeout: status=0x00 [ 1624.744961][T23753] usb 8-1: device descriptor read/64, error -71 [ 1624.758812][T23499] gspca_stk1135: Sensor write failed [ 1624.770328][T23499] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 1624.809383][T23499] usb 5-1: USB disconnect, device number 119 [ 1624.998623][T23753] usb 8-1: new full-speed USB device number 60 using dummy_hcd [ 1625.145023][T23753] usb 8-1: device descriptor read/64, error -71 [ 1625.265609][T23753] usb usb8-port1: attempt power cycle [ 1625.415546][T21214] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1625.486963][T31713] fuse: Bad value for 'group_id' [ 1625.491971][T31713] fuse: Bad value for 'group_id' [ 1625.634967][T23753] usb 8-1: new full-speed USB device number 61 using dummy_hcd [ 1625.657802][T23753] usb 8-1: device descriptor read/8, error -71 [ 1625.735609][T18141] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 1625.892235][T18141] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1625.902728][T23753] usb 8-1: new full-speed USB device number 62 using dummy_hcd [ 1625.912310][T18141] usb 1-1: not running at top speed; connect to a high speed hub [ 1625.927330][T18141] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1625.937894][T18141] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1625.949755][T23753] usb 8-1: device descriptor read/8, error -71 [ 1625.976710][T18141] usb 1-1: New USB device found, idVendor=006d, idProduct=08c6, bcdDevice= 0.40 [ 1625.987037][T18141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1625.995593][T18141] usb 1-1: Product: syz [ 1625.999801][T18141] usb 1-1: Manufacturer: syz [ 1626.004565][T18141] usb 1-1: SerialNumber: syz [ 1626.065463][T23753] usb usb8-port1: unable to enumerate USB device [ 1626.359224][T23753] usb 7-1: USB disconnect, device number 63 [ 1626.397622][T23777] usb 6-1: USB disconnect, device number 72 [ 1626.446736][T31723] tipc: Enabling of bearer rejected, failed to enable media [ 1626.548729][T31726] FAULT_INJECTION: forcing a failure. [ 1626.548729][T31726] name failslab, interval 1, probability 0, space 0, times 0 [ 1626.548790][T31726] CPU: 1 UID: 0 PID: 31726 Comm: syz.5.7013 Tainted: G L syzkaller #0 PREEMPT(full) [ 1626.548816][T31726] Tainted: [L]=SOFTLOCKUP [ 1626.548828][T31726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1626.548840][T31726] Call Trace: [ 1626.548849][T31726] [ 1626.548858][T31726] dump_stack_lvl+0xe8/0x150 [ 1626.548892][T31726] should_fail_ex+0x412/0x560 [ 1626.548937][T31726] should_failslab+0xa8/0x100 [ 1626.548967][T31726] __kmalloc_noprof+0xe8/0x760 [ 1626.548990][T31726] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1626.549025][T31726] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1626.549058][T31726] genl_family_rcv_msg_doit+0xd9/0x330 [ 1626.549083][T31726] ? __asan_memcpy+0x40/0x70 [ 1626.549103][T31726] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1626.549136][T31726] ? apparmor_capable+0x126/0x170 [ 1626.549161][T31726] ? bpf_lsm_capable+0x9/0x20 [ 1626.549186][T31726] ? security_capable+0x7e/0x2c0 [ 1626.549220][T31726] genl_rcv_msg+0x61c/0x7a0 [ 1626.549251][T31726] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1626.549275][T31726] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 1626.549298][T31726] ? __lock_acquire+0x6b5/0x2cf0 [ 1626.549327][T31726] netlink_rcv_skb+0x232/0x4b0 [ 1626.549344][T31726] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1626.549368][T31726] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1626.549398][T31726] ? down_read+0x272/0x2e0 [ 1626.549422][T31726] ? genl_rcv+0xd/0x40 [ 1626.549445][T31726] genl_rcv+0x28/0x40 [ 1626.549465][T31726] netlink_unicast+0x80f/0x9b0 [ 1626.549497][T31726] ? __pfx_netlink_unicast+0x10/0x10 [ 1626.549524][T31726] ? netlink_sendmsg+0x650/0xb40 [ 1626.549540][T31726] ? skb_put+0x11b/0x210 [ 1626.549564][T31726] netlink_sendmsg+0x813/0xb40 [ 1626.549592][T31726] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1626.549612][T31726] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1626.549641][T31726] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1626.549664][T31726] ____sys_sendmsg+0x972/0x9f0 [ 1626.549697][T31726] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1626.549730][T31726] ? import_iovec+0x73/0xa0 [ 1626.549757][T31726] ___sys_sendmsg+0x2a5/0x360 [ 1626.549787][T31726] ? __pfx____sys_sendmsg+0x10/0x10 [ 1626.549843][T31726] ? __fget_files+0x2a/0x420 [ 1626.549861][T31726] ? __fget_files+0x3a0/0x420 [ 1626.549887][T31726] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1626.549914][T31726] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1626.549954][T31726] ? __pfx_ksys_write+0x10/0x10 [ 1626.549986][T31726] do_syscall_64+0x14d/0xf80 [ 1626.550011][T31726] ? trace_irq_disable+0x3b/0x150 [ 1626.550029][T31726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1626.550047][T31726] ? clear_bhb_loop+0x40/0x90 [ 1626.550073][T31726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1626.550089][T31726] RIP: 0033:0x7fd4e9b9c819 [ 1626.550106][T31726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1626.550120][T31726] RSP: 002b:00007fd4eaad0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1626.550133][T31726] RAX: ffffffffffffffda RBX: 00007fd4e9e15fa0 RCX: 00007fd4e9b9c819 [ 1626.550141][T31726] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000006 [ 1626.550148][T31726] RBP: 00007fd4eaad0090 R08: 0000000000000000 R09: 0000000000000000 [ 1626.550154][T31726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1626.550161][T31726] R13: 00007fd4e9e16038 R14: 00007fd4e9e15fa0 R15: 00007fd4e9f3fa48 [ 1626.550177][T31726] [ 1626.841319][T18141] usb 1-1: 1:1 : sample bitwidth 62 in over sample bytes 4 [ 1626.841347][T18141] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1626.843735][T18141] usb 1-1: failed to enable PITCH for EP 0x1 [ 1626.844301][T18141] usb 1-1: unit 2 not found! [ 1626.844315][T18141] usb 1-1: unit 0 not found! [ 1626.972802][T31731] fuse: Unknown parameter 'usuriid' [ 1626.996514][T18141] usb 1-1: USB disconnect, device number 84 [ 1627.105478][T17312] udevd[17312]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1627.196477][T31742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7016'. [ 1627.199143][T31742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7016'. [ 1627.590368][T18141] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1628.506543][T18141] usb 1-1: Using ep0 maxpacket: 16 [ 1628.519637][T18141] usb 1-1: config 0 has no interfaces? [ 1628.539462][T18141] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1628.583969][T18141] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1628.603131][T18141] usb 1-1: Manufacturer: syz [ 1628.659183][T18141] usb 1-1: config 0 descriptor?? [ 1628.723941][T31763] netlink: 'syz.5.7023': attribute type 10 has an invalid length. [ 1628.781435][T31763] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1628.805030][T23499] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1628.964956][T23499] usb 7-1: Using ep0 maxpacket: 32 [ 1628.978409][T23499] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1628.989114][T23499] usb 7-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 1629.000246][T23499] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1629.031055][T23499] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.230203][T31780] FAULT_INJECTION: forcing a failure. [ 1629.230203][T31780] name failslab, interval 1, probability 0, space 0, times 0 [ 1629.242875][T31780] CPU: 1 UID: 0 PID: 31780 Comm: syz.4.7029 Tainted: G L syzkaller #0 PREEMPT(full) [ 1629.242895][T31780] Tainted: [L]=SOFTLOCKUP [ 1629.242900][T31780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1629.242907][T31780] Call Trace: [ 1629.242914][T31780] [ 1629.242921][T31780] dump_stack_lvl+0xe8/0x150 [ 1629.242944][T31780] should_fail_ex+0x412/0x560 [ 1629.242966][T31780] should_failslab+0xa8/0x100 [ 1629.242983][T31780] ? fib6_add+0x3bd/0x18c0 [ 1629.242996][T31780] kmem_cache_alloc_noprof+0x87/0x650 [ 1629.243015][T31780] fib6_add+0x3bd/0x18c0 [ 1629.243031][T31780] ? __pfx_fib6_add+0x10/0x10 [ 1629.243046][T31780] ? ip6_route_add+0xc9/0x1b0 [ 1629.243061][T31780] ip6_route_add+0xde/0x1b0 [ 1629.243075][T31780] ipv6_route_ioctl+0x3ac/0x4f0 [ 1629.243090][T31780] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 1629.243116][T31780] inet6_ioctl+0x246/0x2e0 [ 1629.243134][T31780] ? __pfx_inet6_ioctl+0x10/0x10 [ 1629.243149][T31780] ? tomoyo_path_number_perm+0x219/0x630 [ 1629.243169][T31780] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1629.243185][T31780] sock_do_ioctl+0x101/0x320 [ 1629.243207][T31780] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1629.243222][T31780] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1629.243246][T31780] sock_ioctl+0x5c6/0x7f0 [ 1629.243263][T31780] ? __pfx_sock_ioctl+0x10/0x10 [ 1629.243279][T31780] ? __fget_files+0x2a/0x420 [ 1629.243290][T31780] ? __fget_files+0x3a0/0x420 [ 1629.243299][T31780] ? __fget_files+0x2a/0x420 [ 1629.243309][T31780] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1629.243331][T31780] ? __pfx_sock_ioctl+0x10/0x10 [ 1629.243346][T31780] __se_sys_ioctl+0xfc/0x170 [ 1629.243360][T31780] do_syscall_64+0x14d/0xf80 [ 1629.243376][T31780] ? trace_irq_disable+0x3b/0x150 [ 1629.243386][T31780] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1629.243398][T31780] ? clear_bhb_loop+0x40/0x90 [ 1629.243412][T31780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1629.243424][T31780] RIP: 0033:0x7ff8ce59c819 [ 1629.243436][T31780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1629.243445][T31780] RSP: 002b:00007ff8cf4d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1629.243458][T31780] RAX: ffffffffffffffda RBX: 00007ff8ce815fa0 RCX: 00007ff8ce59c819 [ 1629.243469][T31780] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000005 [ 1629.243476][T31780] RBP: 00007ff8cf4d8090 R08: 0000000000000000 R09: 0000000000000000 [ 1629.243484][T31780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1629.243494][T31780] R13: 00007ff8ce816038 R14: 00007ff8ce815fa0 R15: 00007ff8ce93fa48 [ 1629.243519][T31780] [ 1629.609262][T31759] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1629.640841][T31759] netlink: 'syz.6.7021': attribute type 10 has an invalid length. [ 1629.649179][T31759] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7021'. [ 1629.663280][T18141] usb 7-1: USB disconnect, device number 64 [ 1629.834937][T23499] usb 8-1: new full-speed USB device number 63 using dummy_hcd [ 1629.967861][T23499] usb 8-1: device descriptor read/64, error -71 [ 1630.241892][T23499] usb 8-1: new full-speed USB device number 64 using dummy_hcd [ 1630.404558][T18141] usb 1-1: USB disconnect, device number 85 [ 1630.417124][T23499] usb 8-1: device descriptor read/64, error -71 [ 1630.548441][T23499] usb usb8-port1: attempt power cycle [ 1630.594922][T31461] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1630.767597][T31461] usb 7-1: config 1 has an invalid descriptor of length 62, skipping remainder of the config [ 1630.797160][T31461] usb 7-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1630.834941][T31461] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1630.861341][T31461] usb 7-1: string descriptor 0 read error: -22 [ 1630.868729][T31461] usb 7-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.40 [ 1630.879382][T31461] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1630.914557][T31461] usbhid 7-1:1.0: couldn't find an input interrupt endpoint [ 1630.922190][T23499] usb 8-1: new full-speed USB device number 65 using dummy_hcd [ 1630.955764][T23499] usb 8-1: device descriptor read/8, error -71 [ 1631.185141][ T5914] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1631.205349][T23499] usb 8-1: new full-speed USB device number 66 using dummy_hcd [ 1631.208824][T31804] usb usb7: usbfs: process 31804 (syz.0.7037) did not claim interface 0 before use [ 1631.245758][T23499] usb 8-1: device descriptor read/8, error -71 [ 1631.328191][T31807] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1631.384227][ T5914] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1631.394169][T23499] usb usb8-port1: unable to enumerate USB device [ 1631.404194][T31807] bond1: (slave veth3): Enslaving as an active interface with an up link [ 1631.429474][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.445452][T31809] veth0_to_bond: entered promiscuous mode [ 1631.453790][ T5914] usb 5-1: Product: syz [ 1631.465615][ T5914] usb 5-1: Manufacturer: syz [ 1631.472915][T31809] bond1: (slave vlan3): Enslaving as an active interface with an up link [ 1631.490572][ T5914] usb 5-1: SerialNumber: syz [ 1631.736912][T31815] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1631.858924][ T30] audit: type=1326 audit(1776089330.039:4747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31812 comm="syz.0.7039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a339c819 code=0x7ffc0000 [ 1631.882728][ T30] audit: type=1326 audit(1776089330.049:4748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31812 comm="syz.0.7039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fb0a339c819 code=0x7ffc0000 [ 1631.911636][ T30] audit: type=1326 audit(1776089330.049:4749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31812 comm="syz.0.7039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a339c819 code=0x7ffc0000 [ 1631.934620][ T5914] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1631.946516][ T5914] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1631.957601][ T30] audit: type=1326 audit(1776089330.049:4750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31812 comm="syz.0.7039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a339c819 code=0x7ffc0000 [ 1631.984134][ T5914] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1631.999348][ T5914] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1632.008886][ T30] audit: type=1326 audit(1776089330.079:4751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31812 comm="syz.0.7039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb0a339c819 code=0x7ffc0000 [ 1632.033121][ T5914] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1632.042391][ T30] audit: type=1326 audit(1776089330.079:4752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31812 comm="syz.0.7039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a339c819 code=0x7ffc0000 [ 1632.085019][T18141] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 1632.109410][ T5914] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 1632.145791][ T30] audit: type=1326 audit(1776089330.079:4753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31812 comm="syz.0.7039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a339c819 code=0x7ffc0000 [ 1632.187814][ T30] audit: type=1326 audit(1776089330.149:4754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31812 comm="syz.0.7039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb0a335d04e code=0x7ffc0000 [ 1632.275806][ T30] audit: type=1326 audit(1776089330.149:4755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31812 comm="syz.0.7039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a339c819 code=0x7ffc0000 [ 1632.301242][T18141] usb 6-1: config 0 has an invalid interface number: 243 but max is 0 [ 1632.316189][T18141] usb 6-1: config 0 has no interface number 0 [ 1632.330625][T18141] usb 6-1: config 0 interface 243 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1632.355504][ T30] audit: type=1326 audit(1776089330.149:4756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31812 comm="syz.0.7039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a339c819 code=0x7ffc0000 [ 1632.382417][T18141] usb 6-1: config 0 interface 243 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1632.408263][T18141] usb 6-1: config 0 interface 243 has no altsetting 0 [ 1632.422870][T18141] usb 6-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 1632.473030][T18141] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.526869][T18141] usb 6-1: config 0 descriptor?? [ 1632.827413][ T5879] usb 5-1: USB disconnect, device number 120 [ 1633.280636][ T5879] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1633.374251][ T5914] usb 7-1: USB disconnect, device number 65 [ 1633.535097][ T5879] usb 5-1: Using ep0 maxpacket: 32 [ 1633.557337][ T5879] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1633.606344][ T5879] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 1633.626739][ T5879] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1633.636034][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1633.874960][T23777] usb 7-1: new full-speed USB device number 66 using dummy_hcd [ 1633.929094][T31829] dummy0: left allmulticast mode [ 1633.944597][T31829] dummy0: left promiscuous mode [ 1633.979404][T31829] bridge0: port 3(dummy0) entered disabled state [ 1633.996926][T31847] netlink: 'syz.4.7043': attribute type 10 has an invalid length. [ 1634.021592][T31847] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7043'. [ 1634.051766][T31829] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1634.070786][T31847] bridge0: port 3(dummy0) entered blocking state [ 1634.078072][T31847] bridge0: port 3(dummy0) entered disabled state [ 1634.095805][T31847] dummy0: entered allmulticast mode [ 1634.107634][T31847] dummy0: entered promiscuous mode [ 1634.131509][T23777] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1634.144940][T23777] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1634.160758][T23777] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1634.179573][T17514] usb 5-1: USB disconnect, device number 121 [ 1634.207510][T23777] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1634.230247][T23777] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1634.239514][T18141] usbhid 6-1:0.243: can't add hid device: -71 [ 1634.249057][T18141] usbhid 6-1:0.243: probe with driver usbhid failed with error -71 [ 1634.258341][T23777] usb 7-1: SerialNumber: syz [ 1634.273299][T18141] usb 6-1: USB disconnect, device number 73 [ 1634.301904][T23777] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 1634.315092][T23777] cdc_acm 7-1:1.0: This needs exactly 3 endpoints [ 1634.337359][T23777] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -22 [ 1634.354917][ T5914] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 1634.538331][ T5914] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 1634.562148][ T5914] usb 1-1: config 0 has no interface number 0 [ 1634.578720][ T5914] usb 1-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1634.599613][ T5914] usb 1-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1634.609896][ T5914] usb 1-1: config 0 interface 113 has no altsetting 0 [ 1634.632606][ T5914] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1634.642101][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.651241][ T5914] usb 1-1: Product: syz [ 1634.655860][ T5914] usb 1-1: Manufacturer: syz [ 1634.660621][ T5914] usb 1-1: SerialNumber: syz [ 1634.669231][ T5914] usb 1-1: config 0 descriptor?? [ 1634.678690][ T5914] pn533_usb 1-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 1634.942570][T31868] [ 1634.944925][T31868] ===================================================== [ 1634.951888][T31868] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1634.959605][T31868] syzkaller #0 Tainted: G L [ 1634.965576][T31868] ----------------------------------------------------- [ 1634.972497][T31868] syz.0.7049/31868 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1634.980572][T31868] ffff88807d6ee558 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1634.989267][T31868] [ 1634.989267][T31868] and this task is already holding: [ 1634.996632][T31868] ffff88807ce78028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1635.006634][T31868] which would create a new lock dependency: [ 1635.012536][T31868] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1635.020714][T31868] [ 1635.020714][T31868] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1635.030218][T31868] (&dev->event_lock#2){..-.}-{3:3} [ 1635.030247][T31868] [ 1635.030247][T31868] ... which became SOFTIRQ-irq-safe at: [ 1635.043155][T31868] lock_acquire+0xf0/0x2e0 [ 1635.047731][T31868] _raw_spin_lock_irqsave+0x40/0x60 [ 1635.053116][T31868] input_event+0x76/0xe0 [ 1635.057458][T31868] atp_complete_geyser_3_4+0x114e/0x1d90 [ 1635.063270][T31868] __usb_hcd_giveback_urb+0x376/0x540 [ 1635.068746][T31868] dummy_timer+0xbbd/0x4650 [ 1635.073365][T31868] __hrtimer_run_queues+0x53a/0xcc0 [ 1635.078658][T31868] hrtimer_run_softirq+0x182/0x5a0 [ 1635.083853][T31868] handle_softirqs+0x22a/0x870 [ 1635.088702][T31868] __irq_exit_rcu+0x5f/0x150 [ 1635.093376][T31868] irq_exit_rcu+0x9/0x30 [ 1635.097704][T31868] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1635.103417][T31868] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1635.109486][T31868] pv_native_safe_halt+0xf/0x20 [ 1635.114532][T31868] default_idle+0x9/0x20 [ 1635.118861][T31868] default_idle_call+0x72/0xb0 [ 1635.123801][T31868] do_idle+0x36a/0x5f0 [ 1635.127971][T31868] cpu_startup_entry+0x43/0x60 [ 1635.132830][T31868] rest_init+0x2de/0x300 [ 1635.137259][T31868] start_kernel+0x385/0x3d0 [ 1635.142834][T31868] x86_64_start_reservations+0x24/0x30 [ 1635.148428][T31868] x86_64_start_kernel+0x143/0x1c0 [ 1635.153718][T31868] common_startup_64+0x13e/0x147 [ 1635.158849][T31868] [ 1635.158849][T31868] to a SOFTIRQ-irq-unsafe lock: [ 1635.166382][T31868] (tasklist_lock){.+.+}-{3:3} [ 1635.166411][T31868] [ 1635.166411][T31868] ... which became SOFTIRQ-irq-unsafe at: [ 1635.179083][T31868] ... [ 1635.179093][T31868] lock_acquire+0xf0/0x2e0 [ 1635.186210][T31868] _raw_read_lock+0x36/0x50 [ 1635.190973][T31868] __do_wait+0xde/0x740 [ 1635.195225][T31868] do_wait+0x1e7/0x540 [ 1635.199428][T31868] kernel_wait+0xd6/0x1c0 [ 1635.203841][T31868] call_usermodehelper_exec_work+0xbe/0x230 [ 1635.209819][T31868] process_scheduled_works+0xb6e/0x18c0 [ 1635.215457][T31868] worker_thread+0xa53/0xfc0 [ 1635.220126][T31868] kthread+0x388/0x470 [ 1635.224270][T31868] ret_from_fork+0x51e/0xb90 [ 1635.228934][T31868] ret_from_fork_asm+0x1a/0x30 [ 1635.233775][T31868] [ 1635.233775][T31868] other info that might help us debug this: [ 1635.233775][T31868] [ 1635.243985][T31868] Chain exists of: [ 1635.243985][T31868] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 1635.243985][T31868] [ 1635.257542][T31868] Possible interrupt unsafe locking scenario: [ 1635.257542][T31868] [ 1635.265863][T31868] CPU0 CPU1 [ 1635.271238][T31868] ---- ---- [ 1635.276604][T31868] lock(tasklist_lock); [ 1635.280835][T31868] local_irq_disable(); [ 1635.287571][T31868] lock(&dev->event_lock#2); [ 1635.294766][T31868] lock(&client->buffer_lock); [ 1635.302218][T31868] [ 1635.305697][T31868] lock(&dev->event_lock#2); [ 1635.310552][T31868] [ 1635.310552][T31868] *** DEADLOCK *** [ 1635.310552][T31868] [ 1635.318694][T31868] 7 locks held by syz.0.7049/31868: [ 1635.323879][T31868] #0: ffff88802ba25118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0 [ 1635.333010][T31868] #1: ffff88801df46230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 1635.343109][T31868] #2: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 1635.352773][T31868] #3: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1635.362367][T31868] #4: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 1635.371580][T31868] #5: ffff88807ce78028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1635.381748][T31868] #6: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1635.390888][T31868] [ 1635.390888][T31868] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1635.401376][T31868] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1635.407034][T31868] IN-SOFTIRQ-W at: [ 1635.411083][T31868] lock_acquire+0xf0/0x2e0 [ 1635.417309][T31868] _raw_spin_lock_irqsave+0x40/0x60 [ 1635.424318][T31868] input_event+0x76/0xe0 [ 1635.430382][T31868] atp_complete_geyser_3_4+0x114e/0x1d90 [ 1635.437826][T31868] __usb_hcd_giveback_urb+0x376/0x540 [ 1635.445017][T31868] dummy_timer+0xbbd/0x4650 [ 1635.451321][T31868] __hrtimer_run_queues+0x53a/0xcc0 [ 1635.458692][T31868] hrtimer_run_softirq+0x182/0x5a0 [ 1635.465620][T31868] handle_softirqs+0x22a/0x870 [ 1635.472285][T31868] __irq_exit_rcu+0x5f/0x150 [ 1635.478698][T31868] irq_exit_rcu+0x9/0x30 [ 1635.484852][T31868] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1635.492409][T31868] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1635.500208][T31868] pv_native_safe_halt+0xf/0x20 [ 1635.506885][T31868] default_idle+0x9/0x20 [ 1635.512948][T31868] default_idle_call+0x72/0xb0 [ 1635.519599][T31868] do_idle+0x36a/0x5f0 [ 1635.525531][T31868] cpu_startup_entry+0x43/0x60 [ 1635.532229][T31868] rest_init+0x2de/0x300 [ 1635.538290][T31868] start_kernel+0x385/0x3d0 [ 1635.544607][T31868] x86_64_start_reservations+0x24/0x30 [ 1635.551877][T31868] x86_64_start_kernel+0x143/0x1c0 [ 1635.558798][T31868] common_startup_64+0x13e/0x147 [ 1635.565551][T31868] INITIAL USE at: [ 1635.569691][T31868] lock_acquire+0xf0/0x2e0 [ 1635.575833][T31868] _raw_spin_lock_irqsave+0x40/0x60 [ 1635.582859][T31868] input_inject_event+0xa5/0x340 [ 1635.589519][T31868] kbd_led_trigger_activate+0xbc/0x100 [ 1635.596797][T31868] led_trigger_set+0x535/0x960 [ 1635.603298][T31868] led_trigger_set_default+0x260/0x2a0 [ 1635.610473][T31868] led_classdev_register_ext+0x787/0x9c0 [ 1635.617828][T31868] input_leds_connect+0x517/0x790 [ 1635.624574][T31868] input_register_device+0xd00/0x1160 [ 1635.631671][T31868] atkbd_connect+0x731/0xa50 [ 1635.637999][T31868] serio_driver_probe+0x82/0xd0 [ 1635.644582][T31868] really_probe+0x267/0xaf0 [ 1635.650818][T31868] __driver_probe_device+0x18c/0x320 [ 1635.657857][T31868] driver_probe_device+0x4f/0x240 [ 1635.664789][T31868] __driver_attach+0x34c/0x640 [ 1635.671330][T31868] bus_for_each_dev+0x23b/0x2c0 [ 1635.677906][T31868] serio_handle_event+0x20a/0xdd0 [ 1635.684649][T31868] process_scheduled_works+0xb6e/0x18c0 [ 1635.691944][T31868] worker_thread+0xa53/0xfc0 [ 1635.698360][T31868] kthread+0x388/0x470 [ 1635.704165][T31868] ret_from_fork+0x51e/0xb90 [ 1635.710494][T31868] ret_from_fork_asm+0x1a/0x30 [ 1635.717008][T31868] } [ 1635.719582][T31868] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 1635.728820][T31868] -> (&client->buffer_lock){....}-{3:3} { [ 1635.734582][T31868] INITIAL USE at: [ 1635.738577][T31868] lock_acquire+0xf0/0x2e0 [ 1635.744570][T31868] _raw_spin_lock+0x2e/0x40 [ 1635.750637][T31868] evdev_pass_values+0xb9/0xbd0 [ 1635.757240][T31868] evdev_events+0x1e6/0x340 [ 1635.763300][T31868] input_pass_values+0x288/0x890 [ 1635.769801][T31868] input_event_dispose+0x330/0x6b0 [ 1635.776497][T31868] input_inject_event+0x1dd/0x340 [ 1635.783075][T31868] evdev_write+0x325/0x4c0 [ 1635.789131][T31868] vfs_write+0x29a/0xb90 [ 1635.794929][T31868] ksys_write+0x150/0x270 [ 1635.800827][T31868] do_syscall_64+0x14d/0xf80 [ 1635.807115][T31868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1635.814594][T31868] } [ 1635.817101][T31868] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 1635.825271][T31868] ... acquired at: [ 1635.829058][T31868] _raw_spin_lock+0x2e/0x40 [ 1635.833808][T31868] evdev_pass_values+0xb9/0xbd0 [ 1635.838815][T31868] evdev_events+0x1e6/0x340 [ 1635.843480][T31868] input_pass_values+0x288/0x890 [ 1635.848589][T31868] input_event_dispose+0x330/0x6b0 [ 1635.853869][T31868] input_inject_event+0x1dd/0x340 [ 1635.859088][T31868] evdev_write+0x325/0x4c0 [ 1635.863678][T31868] vfs_write+0x29a/0xb90 [ 1635.868092][T31868] ksys_write+0x150/0x270 [ 1635.872593][T31868] do_syscall_64+0x14d/0xf80 [ 1635.877361][T31868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1635.883474][T31868] [ 1635.885786][T31868] [ 1635.885786][T31868] the dependencies between the lock to be acquired [ 1635.885795][T31868] and SOFTIRQ-irq-unsafe lock: [ 1635.899418][T31868] -> (tasklist_lock){.+.+}-{3:3} { [ 1635.904727][T31868] HARDIRQ-ON-R at: [ 1635.908865][T31868] lock_acquire+0xf0/0x2e0 [ 1635.915271][T31868] _raw_read_lock+0x36/0x50 [ 1635.921763][T31868] __do_wait+0xde/0x740 [ 1635.927899][T31868] do_wait+0x1e7/0x540 [ 1635.934119][T31868] kernel_wait+0xd6/0x1c0 [ 1635.940438][T31868] call_usermodehelper_exec_work+0xbe/0x230 [ 1635.948405][T31868] process_scheduled_works+0xb6e/0x18c0 [ 1635.955958][T31868] worker_thread+0xa53/0xfc0 [ 1635.962573][T31868] kthread+0x388/0x470 [ 1635.968809][T31868] ret_from_fork+0x51e/0xb90 [ 1635.975396][T31868] ret_from_fork_asm+0x1a/0x30 [ 1635.982240][T31868] SOFTIRQ-ON-R at: [ 1635.986380][T31868] lock_acquire+0xf0/0x2e0 [ 1635.992787][T31868] _raw_read_lock+0x36/0x50 [ 1635.999287][T31868] __do_wait+0xde/0x740 [ 1636.005432][T31868] do_wait+0x1e7/0x540 [ 1636.011501][T31868] kernel_wait+0xd6/0x1c0 [ 1636.017823][T31868] call_usermodehelper_exec_work+0xbe/0x230 [ 1636.025710][T31868] process_scheduled_works+0xb6e/0x18c0 [ 1636.033333][T31868] worker_thread+0xa53/0xfc0 [ 1636.039939][T31868] kthread+0x388/0x470 [ 1636.046121][T31868] ret_from_fork+0x51e/0xb90 [ 1636.052701][T31868] ret_from_fork_asm+0x1a/0x30 [ 1636.059465][T31868] INITIAL USE at: [ 1636.063517][T31868] lock_acquire+0xf0/0x2e0 [ 1636.069833][T31868] _raw_write_lock_irq+0x3d/0x50 [ 1636.076675][T31868] copy_process+0x247a/0x3cd0 [ 1636.083301][T31868] kernel_clone+0x248/0x8e0 [ 1636.089706][T31868] user_mode_thread+0x110/0x180 [ 1636.096553][T31868] rest_init+0x23/0x300 [ 1636.102611][T31868] start_kernel+0x385/0x3d0 [ 1636.109083][T31868] x86_64_start_reservations+0x24/0x30 [ 1636.116565][T31868] x86_64_start_kernel+0x143/0x1c0 [ 1636.123585][T31868] common_startup_64+0x13e/0x147 [ 1636.130423][T31868] INITIAL READ USE at: [ 1636.134907][T31868] lock_acquire+0xf0/0x2e0 [ 1636.141655][T31868] _raw_read_lock+0x36/0x50 [ 1636.148504][T31868] __do_wait+0xde/0x740 [ 1636.155027][T31868] do_wait+0x1e7/0x540 [ 1636.161615][T31868] kernel_wait+0xd6/0x1c0 [ 1636.168342][T31868] call_usermodehelper_exec_work+0xbe/0x230 [ 1636.176610][T31868] process_scheduled_works+0xb6e/0x18c0 [ 1636.184502][T31868] worker_thread+0xa53/0xfc0 [ 1636.191436][T31868] kthread+0x388/0x470 [ 1636.197982][T31868] ret_from_fork+0x51e/0xb90 [ 1636.204998][T31868] ret_from_fork_asm+0x1a/0x30 [ 1636.212117][T31868] } [ 1636.214773][T31868] ... key at: [] tasklist_lock+0x18/0x40 [ 1636.223007][T31868] ... acquired at: [ 1636.227092][T31868] _raw_read_lock+0x36/0x50 [ 1636.231771][T31868] send_sigurg+0x12b/0x420 [ 1636.236352][T31868] sk_send_sigurg+0x6c/0x2e0 [ 1636.241240][T31868] queue_oob+0x42c/0x4f0 [ 1636.245725][T31868] unix_stream_sendmsg+0xcb1/0xe80 [ 1636.251060][T31868] ____sys_sendmsg+0x972/0x9f0 [ 1636.255990][T31868] ___sys_sendmsg+0x2a5/0x360 [ 1636.260923][T31868] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1636.266028][T31868] do_syscall_64+0x14d/0xf80 [ 1636.270911][T31868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1636.276965][T31868] [ 1636.279276][T31868] -> (&f_owner->lock){....}-{3:3} { [ 1636.284558][T31868] INITIAL USE at: [ 1636.288524][T31868] lock_acquire+0xf0/0x2e0 [ 1636.294681][T31868] _raw_write_lock_irq+0x3d/0x50 [ 1636.301345][T31868] __f_setown+0x67/0x370 [ 1636.307326][T31868] fcntl_dirnotify+0x3f9/0x6a0 [ 1636.313813][T31868] do_fcntl+0x77e/0x1a20 [ 1636.319776][T31868] __se_sys_fcntl+0xc8/0x150 [ 1636.326086][T31868] do_syscall_64+0x14d/0xf80 [ 1636.332400][T31868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1636.340024][T31868] INITIAL READ USE at: [ 1636.344431][T31868] lock_acquire+0xf0/0x2e0 [ 1636.351097][T31868] _raw_read_lock_irqsave+0x48/0x60 [ 1636.358454][T31868] send_sigio+0x38/0x370 [ 1636.364859][T31868] dnotify_handle_event+0x169/0x440 [ 1636.372253][T31868] fsnotify+0x1831/0x1ae0 [ 1636.378749][T31868] path_openat+0x15c2/0x3860 [ 1636.385535][T31868] do_file_open+0x23e/0x4a0 [ 1636.392204][T31868] do_sys_openat2+0x113/0x200 [ 1636.399050][T31868] __x64_sys_openat+0x138/0x170 [ 1636.406102][T31868] do_syscall_64+0x14d/0xf80 [ 1636.412860][T31868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1636.420976][T31868] } [ 1636.423555][T31868] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1636.432487][T31868] ... acquired at: [ 1636.436374][T31868] _raw_read_lock_irqsave+0x48/0x60 [ 1636.441739][T31868] send_sigio+0x38/0x370 [ 1636.446227][T31868] kill_fasync+0x24d/0x4d0 [ 1636.450893][T31868] tty_wakeup+0xbe/0x100 [ 1636.455300][T31868] pty_unthrottle+0x3c/0x60 [ 1636.460003][T31868] tty_unthrottle+0xb1/0x110 [ 1636.464774][T31868] n_tty_open+0x11c/0x150 [ 1636.469263][T31868] tty_ldisc_failto+0x1e1/0x330 [ 1636.474267][T31868] tty_ldisc_restore+0x57/0x110 [ 1636.479279][T31868] tty_set_ldisc+0x3a1/0x560 [ 1636.484078][T31868] tty_ioctl+0xc37/0xde0 [ 1636.488547][T31868] __se_sys_ioctl+0xfc/0x170 [ 1636.493323][T31868] do_syscall_64+0x14d/0xf80 [ 1636.498086][T31868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1636.504151][T31868] [ 1636.506455][T31868] -> (&new->fa_lock){....}-{3:3} { [ 1636.511569][T31868] INITIAL USE at: [ 1636.515566][T31868] lock_acquire+0xf0/0x2e0 [ 1636.521546][T31868] _raw_write_lock_irq+0x3d/0x50 [ 1636.528057][T31868] fasync_remove_entry+0xf1/0x1c0 [ 1636.534640][T31868] lease_modify+0x4f7/0x6c0 [ 1636.540710][T31868] locks_remove_file+0x5f0/0xf70 [ 1636.547211][T31868] __fput+0x3ae/0xa70 [ 1636.552758][T31868] task_work_run+0x1d9/0x270 [ 1636.558982][T31868] exit_to_user_mode_loop+0xed/0x480 [ 1636.565882][T31868] do_syscall_64+0x32d/0xf80 [ 1636.572075][T31868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1636.579532][T31868] INITIAL READ USE at: [ 1636.583845][T31868] lock_acquire+0xf0/0x2e0 [ 1636.590260][T31868] _raw_read_lock_irqsave+0x48/0x60 [ 1636.597546][T31868] kill_fasync+0x199/0x4d0 [ 1636.603963][T31868] sock_wake_async+0x137/0x160 [ 1636.610730][T31868] sock_wfree+0x6bf/0x750 [ 1636.617068][T31868] skb_release_head_state+0x30c/0x360 [ 1636.624441][T31868] __kfree_skb+0x24/0x210 [ 1636.630813][T31868] vti6_tnl_xmit+0x1212/0x1b20 [ 1636.637686][T31868] dev_hard_start_xmit+0x2d8/0x870 [ 1636.644805][T31868] __dev_queue_xmit+0x16d1/0x3890 [ 1636.651845][T31868] ip6_fragment+0x1915/0x1f30 [ 1636.658521][T31868] ip6_output+0x340/0x550 [ 1636.664940][T31868] ip6_mr_output+0x549/0x11c0 [ 1636.671776][T31868] ip6_send_skb+0x1d5/0x390 [ 1636.678290][T31868] udp_v6_send_skb+0xc17/0x1860 [ 1636.685130][T31868] udp_v6_push_pending_frames+0xa2/0x140 [ 1636.692752][T31868] udpv6_sendmsg+0xf36/0x2560 [ 1636.699432][T31868] ____sys_sendmsg+0x5c7/0x9f0 [ 1636.706211][T31868] ___sys_sendmsg+0x2a5/0x360 [ 1636.712884][T31868] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1636.719903][T31868] do_syscall_64+0x14d/0xf80 [ 1636.726482][T31868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1636.734365][T31868] } [ 1636.736848][T31868] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1636.745503][T31868] ... acquired at: [ 1636.749287][T31868] _raw_read_lock_irqsave+0x48/0x60 [ 1636.754640][T31868] kill_fasync+0x199/0x4d0 [ 1636.759313][T31868] evdev_pass_values+0x627/0xbd0 [ 1636.764492][T31868] evdev_events+0x1e6/0x340 [ 1636.769155][T31868] input_pass_values+0x288/0x890 [ 1636.774255][T31868] input_event_dispose+0x330/0x6b0 [ 1636.779535][T31868] input_inject_event+0x1dd/0x340 [ 1636.784767][T31868] evdev_write+0x325/0x4c0 [ 1636.789460][T31868] vfs_write+0x29a/0xb90 [ 1636.793876][T31868] ksys_write+0x150/0x270 [ 1636.798626][T31868] do_syscall_64+0x14d/0xf80 [ 1636.803581][T31868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1636.809647][T31868] [ 1636.812059][T31868] [ 1636.812059][T31868] stack backtrace: [ 1636.817957][T31868] CPU: 0 UID: 0 PID: 31868 Comm: syz.0.7049 Tainted: G L syzkaller #0 PREEMPT(full) [ 1636.817982][T31868] Tainted: [L]=SOFTLOCKUP [ 1636.817987][T31868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1636.817994][T31868] Call Trace: [ 1636.818001][T31868] [ 1636.818006][T31868] dump_stack_lvl+0xe8/0x150 [ 1636.818027][T31868] __lock_acquire+0x2a94/0x2cf0 [ 1636.818046][T31868] lock_acquire+0xf0/0x2e0 [ 1636.818058][T31868] ? kill_fasync+0x199/0x4d0 [ 1636.818072][T31868] _raw_read_lock_irqsave+0x48/0x60 [ 1636.818086][T31868] ? kill_fasync+0x199/0x4d0 [ 1636.818098][T31868] kill_fasync+0x199/0x4d0 [ 1636.818109][T31868] ? kill_fasync+0x53/0x4d0 [ 1636.818120][T31868] evdev_pass_values+0x627/0xbd0 [ 1636.818137][T31868] ? evdev_pass_values+0x5b1/0xbd0 [ 1636.818149][T31868] evdev_events+0x1e6/0x340 [ 1636.818167][T31868] ? evdev_events+0x79/0x340 [ 1636.818177][T31868] ? input_pass_values+0x8d/0x890 [ 1636.818187][T31868] input_pass_values+0x288/0x890 [ 1636.818198][T31868] ? input_handle_event+0x70c/0xf30 [ 1636.818213][T31868] input_event_dispose+0x330/0x6b0 [ 1636.818231][T31868] input_inject_event+0x1dd/0x340 [ 1636.818246][T31868] ? input_inject_event+0xb6/0x340 [ 1636.818259][T31868] evdev_write+0x325/0x4c0 [ 1636.818271][T31868] ? __pfx_evdev_write+0x10/0x10 [ 1636.818282][T31868] ? bpf_lsm_file_permission+0x9/0x20 [ 1636.818297][T31868] ? security_file_permission+0x75/0x260 [ 1636.818311][T31868] ? rw_verify_area+0x255/0x4d0 [ 1636.818322][T31868] ? __pfx_evdev_write+0x10/0x10 [ 1636.818333][T31868] vfs_write+0x29a/0xb90 [ 1636.818345][T31868] ? __pfx_vfs_write+0x10/0x10 [ 1636.818356][T31868] ? __fget_files+0x2a/0x420 [ 1636.818366][T31868] ? __fget_files+0x2a/0x420 [ 1636.818374][T31868] ? __fget_files+0x3a0/0x420 [ 1636.818383][T31868] ? __fget_files+0x2a/0x420 [ 1636.818393][T31868] ksys_write+0x150/0x270 [ 1636.818404][T31868] ? __pfx_ksys_write+0x10/0x10 [ 1636.818417][T31868] do_syscall_64+0x14d/0xf80 [ 1636.818431][T31868] ? trace_irq_disable+0x3b/0x150 [ 1636.818441][T31868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1636.818451][T31868] ? clear_bhb_loop+0x40/0x90 [ 1636.818463][T31868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1636.818473][T31868] RIP: 0033:0x7fb0a339c819 [ 1636.818485][T31868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1636.818495][T31868] RSP: 002b:00007fb0a15cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1636.818507][T31868] RAX: ffffffffffffffda RBX: 00007fb0a3616090 RCX: 00007fb0a339c819 [ 1636.818514][T31868] RDX: 0000000000000037 RSI: 0000200000000040 RDI: 0000000000000003 [ 1636.818521][T31868] RBP: 00007fb0a3432c91 R08: 0000000000000000 R09: 0000000000000000 [ 1636.818528][T31868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1636.818535][T31868] R13: 00007fb0a3616128 R14: 00007fb0a3616090 R15: 00007fb0a373fa48 [ 1636.818545][T31868] [ 1637.176101][T31869] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7053'. [ 1637.188588][T31869] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7053'. [ 1637.260182][T23777] usb 7-1: USB disconnect, device number 66 [ 1637.934879][T31461] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1638.095049][T31461] usb 6-1: Using ep0 maxpacket: 16 [ 1638.102003][T31461] usb 6-1: config 0 has no interfaces? [ 1638.108658][T31461] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1638.117984][T31461] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1638.127219][T31461] usb 6-1: Manufacturer: syz [ 1638.134063][T31461] usb 6-1: config 0 descriptor?? [ 1638.181637][T31461] usb 1-1: USB disconnect, device number 86 [ 1639.434136][T23777] usb 6-1: USB disconnect, device number 74