last executing test programs: 13.883060627s ago: executing program 1 (id=708): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x3, @private2, 0xffffffff}}}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0x0, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @empty}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @empty}]}}]}, 0x50}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000380)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="400266"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r4) r5 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f01000000000000000000090581034000000000090582"], 0x0) syz_usb_ep_write(r5, 0x82, 0x0, 0x0) ioctl$EVIOCRMFF(r4, 0x4004550f, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40f0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000040)={0x0}, 0x19}, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e20, 0xfffffffc, @empty, 0x4}, 0x1c) readv(r8, &(0x7f0000002680)=[{&(0x7f0000000140)=""/19, 0x13}, {0x0, 0x42}], 0x2) mmap$KVM_VCPU(&(0x7f0000ffa000/0x3000)=nil, 0x0, 0x4, 0x20010, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000340)={'\x00', 0x3, 0xfffffff6, 0xffffffc0, 0x0, 0xfffffffffffff801, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r9, 0x2, &(0x7f00000003c0)) syz_emit_ethernet(0x6a, &(0x7f0000000400)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x5c, 0x0, 0x0, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "4bd5ffa8e842cdd19baeb25d342579f7e63d2d1e5317517e", "b1fe94141226cc71e718e86db665dd4fbd49b20523893e8724968b868600ac13"}}}}}}, 0x0) r10 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r10, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r10, 0x4020aed2, &(0x7f0000000100)={0x4, 0x11000}) 10.564460059s ago: executing program 1 (id=726): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) r3 = accept(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000ddc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mkdir(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x24, 0x0, 0x41046100, 0xffff, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x1}}, 0x50) r8 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000)=0x9, 0x4) syz_extract_tcp_res$synack(&(0x7f0000000100)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9eebfd", 0x18, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x2a}, @loopback, {[], {{0x4e22, 0x4e24, r9, 0x41424344, 0x1, 0x0, 0x6, 0xc2, 0xfffd, 0x0, 0x3, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) syz_extract_tcp_res(&(0x7f0000000200), 0x0, 0xb8) syz_emit_ethernet(0x382, &(0x7f0000002240)={@link_local, @empty, @void, {@ipv4={0x800, @generic={{0x0, 0x4, 0x0, 0x32, 0x0, 0x64, 0x0, 0x5, 0x1d, 0x0, @remote, @loopback, {[@timestamp_prespec={0x44, 0x0, 0xf5, 0x3, 0x9, [{@local, 0x1}, {@broadcast, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@rand_addr=0x64010100, 0x3}]}]}}, "dcefe4206692951edebfb0b68fe10603605fe46be351c6f489cd1b127b99b5f193ff84b733957907a0a34ddfeccd9173be0ffb4040b966fc7088e4a377e918feb4726ab3b31f5e83577fe9f1cc635eea65cd15d685975baa9bac1246a19fea113f3b0c36cdc810c4aa2f78e9de665f84ef19e68353b155a9bff89aa914dc1fe7c8b5a590292f17af568492e3f36ecde4e909b5296a003beb820c5770267a57275dfcdc5402bdef820524136281672814d807508e3f3fc371c6df4f7f8be2a26b73a0418cab6c18dbb2a8"}}}}, 0x0) syz_emit_ethernet(0x80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) syz_fuse_handle_req(r4, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000006d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x7, {0x0, 0x0, 0x20000000, 0x4, 0xfffffffd, 0x3, {0xffffffffffffffff, 0x0, 0x7, 0x0, 0x5, 0x6, 0x2, 0x8, 0x0, 0xc000, 0x0, r6, 0x0, 0x403}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004280)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0xe81, {0x6, 0x3, 0x2, 0x800000000400000, 0x81, 0x0, {0x1, 0xfffffffffffffffd, 0x80000000000, 0x80000000008, 0x400000000000, 0x20000000006, 0x200, 0xfffffffd, 0x1, 0xc000, 0x4000000, r6, r7, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r3) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000040)={0x0, 0xc, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.533898781s ago: executing program 4 (id=732): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pselect6(0x40, &(0x7f0000000040)={0xc, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0xb, @raw_data="435330386d7045c07d0ced83659145ec87cda60fea0195e62c84f08c70a667dd931f3e0944ae0769d1db71d24638f00994f04ca9318da48efe59ecd5c4bc7e620f0052cf7501c6cb0bc9d6ea9d7f7fd580f51ffdc2205484a488b21c86765b2b6b13822337775fbb604bc443655025b4e6aab93c145aa062dab666d7bee24b65b2f7bed94cbd28be632bb7f7c6c5b301700f7c4af1bf90dd769f7de1d2e4a3e7c70f55979f51c2a89922c00cb68b7869210e8a823b63f4f65558c6d4688870907c1ad8e7ef553988"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080015"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0/../file0\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="a4000000084c280600a294580a3811d36abe667464990bd680fdbfe84eeb18bc4620d0ecb5e0f07d7ac54013aeff30f76d89fd967d1e2c36cceebc76a881dde185dbaeda1f5e90873d6a47d2e6a12d42faa789eaf6737188c169faaeed5efdd7b463ce6a371486ce8f703ee0a398b9e5ceb6db6b26fe361759ba40f831138a880d7695cba9daed4f22460c7599e0a52ae48b064aeb6e68c92de9240091e052c2c440d9f710734712236bb15ad24c7115bb6a25b5b8ac35b421dd9f00ec84fcb0dea046b49bb30f3e4e444bf531cdd712d75a7c8b324f5f45cb211510eeb691940c049c9db661b49ed9638e7fc6743b49f99fe83e", @ANYRES16=r6, @ANYBLOB="010028bd7040010000000f00000008000b00ee0e000005002f0000000000"], 0x24}}, 0x18) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"/325, @ANYRES16=r6, @ANYBLOB="00042bbd7000fbdbdf250f00000008003200060000000800390002040000000000000000000005002f00010000000500330000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4048000}, 0x4004080) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x8000000000201) r9 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$VIDIOC_G_FMT(r9, 0xc0d05604, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000440)="3e45d9fab9800000c00f3235010000000f300f20d83e2e6465490f38f65a0bc4e18173f53866baf80c3e400f01c8c402e3f6bd4000000066bafc0c66b88e0071c0c01aa8000041a9", 0x48}], 0x1, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) waitid(0x1, 0x0, &(0x7f0000000180), 0x1000000, &(0x7f00000000c0)) 8.104119605s ago: executing program 0 (id=734): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60000000100039042cbd7000eaffffff000003e4", @ANYRES32=r1, @ANYBLOB="001100000000000040001280080001007369740034000280050009002900000008000200ac1414bb08000c000000010006000d"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 7.853882637s ago: executing program 0 (id=737): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = getpgrp(0xffffffffffffffff) kcmp(r0, r0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0xd733043595a52279}, "a8e0930a1a884884", "74743275e5fc20c3ab14916504a8ca92"}, 0x28) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4, 0x0, @loopback, 0x5}, 0x1c) splice(0xffffffffffffffff, &(0x7f0000000080)=0x7, 0xffffffffffffffff, &(0x7f0000000100)=0x7, 0x7fffffff, 0x0) 7.396797888s ago: executing program 1 (id=738): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x9, 0x7ffc0002}]}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x122) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000400)=@v3={0x3000000, [{0x9}, {0x9, 0x3d9b}]}, 0x18, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x48, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xe}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r6 = accept$alg(r5, 0x0, 0x0) sendmsg$alg(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0', [], 0xa, "7cb384767a9c24d4e161d839da9f73cad6061bbbd9541b47baa608a07d9a27b10d1a06d4fb197114de0ae700d7bd1f3f4e6abafe528b6ada0453031274da4891e78504463e04f429492b0ca1d97344d880fae7f097d34a9a5fcd5468b896f44b36acf76a80a82af1de4fd6aeaf9bd66546b65062629b1e24f0ae37d8cd51006596c597a272105871f87e088597719e99204b3e"}, 0x9e) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}]}, 0x3c}}, 0x0) r7 = syz_open_dev$video4linux(&(0x7f00000001c0), 0xf, 0x60100) ioctl$VIDIOC_QUERYMENU(r7, 0xc02c5625, &(0x7f0000000000)={0x8, 0xffff, @value=0x400}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x5) 6.930544871s ago: executing program 2 (id=739): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000340)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x2, 0x2e, 0x4c, 0x65, 0x0, 0x2, 0x6, 0x0, @private=0xa010100, @remote, {[@ssrr={0x89, 0xf, 0xb1, [@private=0xa010101, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3b}]}, @generic={0x44, 0x10, "0900000040fd314ad965f954de4f"}, @timestamp_prespec={0x44, 0x4, 0x87, 0x3, 0x6}]}}, {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x0, 0x0, 0xfb}}}}}}, 0x0) socket$unix(0x1, 0x2, 0x0) 6.856090962s ago: executing program 2 (id=740): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x406, r1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x40000000}) getpid() (async) r3 = getpid() r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r2, &(0x7f0000000100)={r1, r2}) socket$rxrpc(0x21, 0x2, 0x2) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x29, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0xb2400, 0x0) (async) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0xb2400, 0x0) write$vga_arbiter(r5, &(0x7f0000000140)=@unlock_all, 0xb) syz_open_dev$vbi(&(0x7f00000001c0), 0x3, 0x2) (async) r6 = syz_open_dev$vbi(&(0x7f00000001c0), 0x3, 0x2) setxattr$incfs_size(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000500)=0x9, 0x8, 0x1) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4, 0x5, 0x8}, 0x0) flock(r5, 0x6) (async) flock(r5, 0x6) r7 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2000) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r8, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x154, r9, 0x0, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc5a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xeb2}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe5ac}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1bfcbeba}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) ioctl$SNDRV_PCM_IOCTL_STATUS32(r7, 0x806c4120, &(0x7f0000000080)) (async) ioctl$SNDRV_PCM_IOCTL_STATUS32(r7, 0x806c4120, &(0x7f0000000080)) ioctl$VIDIOC_G_SLICED_VBI_CAP(r6, 0xc0745645, &(0x7f00000008c0)={0x8, [0x0, 0x18, 0x5, 0xc, 0x0, 0xfff9, 0xa, 0xefd, 0xd, 0x2, 0x0, 0x4bf, 0x0, 0x6, 0x800, 0x6, 0x37, 0x5, 0x3cb, 0xfff6, 0xca, 0x6, 0x7fff, 0x6cc9, 0x3, 0x8, 0x3, 0x1, 0x2, 0xfff, 0x6, 0x400, 0x7ff, 0x9, 0x8, 0x3, 0x5, 0x7fff, 0x5, 0x8000, 0x5, 0x0, 0x0, 0x7, 0xa, 0x2, 0x7, 0x1000], 0x2}) set_mempolicy_home_node(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0) (async) set_mempolicy_home_node(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0) 6.653110855s ago: executing program 4 (id=741): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x5c}, 0x6e) listen(r0, 0xffffffff) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) syz_io_uring_setup(0x7440, &(0x7f00000004c0)={0x0, 0xa6e9, 0x10100, 0x2, 0x26}, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce, 0x0, 0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000440)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x8, 0x8000, 0x34, 0xe, {{0x28, 0x4, 0x0, 0x9, 0xa0, 0x67, 0x0, 0x4, 0x2f, 0x0, @loopback, @loopback, {[@timestamp_addr={0x44, 0x3c, 0x38, 0x1, 0x5, [{@empty, 0x3}, {@multicast1, 0x1a}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x1000}, {@loopback, 0xa9}, {@loopback, 0x7}, {@empty, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}, @generic={0x82, 0xd, "5fc98143a69855c5cfeb06"}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1b, 0xf4, [@rand_addr=0x64010101, @remote, @private=0xa010102, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @timestamp={0x44, 0x20, 0x8d, 0x0, 0xf, [0x7, 0x1, 0xe7a4, 0xa1a, 0x8, 0x5, 0x2]}, @end, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000600)={'ip6tnl0\x00', 0x0, 0x29, 0x9, 0x8, 0x3, 0x76, @private2, @private1, 0x1, 0x8, 0x3580, 0x2}}) sendmsg$nl_route(r5, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000800)=ANY=[@ANYBLOB="78000000550000042bbd7000fedbdf2507000000062c57405832c3cbf68a9510fcffff5739ccc536f559e421d9378eeae2f02a22c08b0ef5473a4ed5b666be79ca852a956a", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r7, @ANYBLOB="00020400fc0100000000000000000000000000000000000020000100", @ANYRES32=r8, @ANYBLOB="00020300ac14142a00000000000000000000000086dd000020000100", @ANYRES32=r9, @ANYBLOB="01000000fe8800000000000000000000000000018edd0000"], 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x1) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x3, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000240)=@urb_type_interrupt={0x1, {0x3}, 0x80000000, 0x0, &(0x7f0000000180)="effeafcedc8fe9e4455fe27e0cf6f0f7b17034d2d4f19f98b2b3cab83df33765ed8c3c80490389d234491272debcfcdd472ed0fcf9006b1a7e98a7b897abfdd82a6d269415d9c7b6f6c7ce94fedc095f96b99576b8f902de7e9d040a77097a0773c2a65c6743e58e5dc424c5c07104d54b20e5dba4271c97d081982fa54afb620bba4f6dcf17135ce0bf82a74b7159ed1dee2439afaa", 0x96, 0xe6b, 0x331, 0x0, 0xb0, 0x3, &(0x7f0000000040)="b65249d1d50faa223ac29453dda24a78686dec52cce283ca6fdcb2f05781769e2b325434ebaba7d1e137bbc41d6d995ba2424d8695b79b2699"}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000013000500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c617665", @ANYRES32=0x0, @ANYBLOB="0c004580"], 0x48}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f00000007c0)={0xfffffffffffffff5, 0x4, 0x8001, 0xfff, 0x80, 0x4, "72dd60cc3071830525dd9d9b1b054b2a", 0x6, 0x5, 0x3, 0x8, 0xc, 0x8, 0x6}) 6.426598585s ago: executing program 0 (id=742): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) copy_file_range(r2, 0x0, r3, 0x0, 0x4, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000470bdfff"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0xd}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x10) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r11, 0x0, 0x0, 0x0, 0x322, 0x1, {0x1}}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) 5.658514168s ago: executing program 4 (id=743): r0 = socket$inet(0x2, 0x4000000000000001, 0x100) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000380)=[0x0, 0x0], 0x0, 0x0, 0xf, 0x0, 0x0, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x100001d, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001500)=ANY=[@ANYBLOB="33159ff22b3537e603773440695222cd8456a0c396a7a12b36c17b03d00ff3d311d2b27cd63ef06060ee97dcf2beeedea38dbeff3ff5bd5d22f0fae5cb5beb3fbdbbc854bc2c4a85187592102c4d21a2d417011a0664aee9146cb47f2ce163d169e9a949cc21edc113c96147554d52257e84522adf3c33b09c06233ca46621c6c0ebac66496cbd42fd47e1e03d4e9b323c68c821f4ef20983916979b925c2d673903c54c44144f7208a3b6370c816a72045827b74ab2d27c93f69cba9fcb31b03d04a99c5319e73ae57c80274eb8d0c41e32d85560ad7b779a5c4e3bd1185aa4b6f62e8edc199ef9c772170b3f90e0a2de6eb196e92d356f3b15a661bf136b10264b47431f948d93a33415ab15fc46026c9ae23ad22a816dcbd5e8e0361aa02173f5a081252c4f9d5509c2df44a196ed4b86fb78731f238e765eaab4948c687de88c9d1a3e6053d64d81632df4b10c38085a74ab2003c5bdf437b4904d2258dc5569c873b557668417139c169063d4472de2ec482502a44f28801c7818edd310e07047e9bf9d53985db8991f29e7c621b0ace22739f31eae8348a68a392c0f4fb3499c5672955e8d7ca50045cb6861dad66131af4cfc9c02394966500e9d75f1fb016b044b33328f43aa2f5196ca955193fcb1cf43ec64e92f3e2fa181a89b54c64403c78dcdc4f7e790c7f0d361df3ee43020dd2dd087327d2bb4a97bfa250a30a5a939bf44c936f60819115705c46f81ace22b93789e73dac51195dd16556bd871381a4bd269f941878784abb0ddd7122e4416708cdff89984095333e9e5dd7b5e6a86d5b5623e8c25bcccc3054f0354570242e388f8deb0365d1d651011404ea84ca0e057eac93528771ee270f0dd32f62c5f1b57839d4692176d268437e519df5ec3871562053dbf5d0f3606cc769d9e7087df7cfb7689579e657a142684dc79009e53837937241559d2d75bcfe367b564a3ba217e72f930252d272e3acbc37faafed039beb0cc9b90bb9d60c2f4754d2c4b417fe3cf9666e6d3b7b791553d3f62fa3c012f6230101f6cf01ddbd7bc8f66f8b7ae65fd0d7f2c5a4d00c91841aa7d65f17d4390d63463c02be56d2a62585cf4ec91c05d2c92c2b9dc89b602732a4835447ab383f05aec5f4daddb749db1c799c8c64a045590c3589c055594ce41bc21300e85a76ab08f48e3148cc34b2df553b40b249e5433867ce02f16764e9b9a21d6711c9c12c6e27319ab137dda30e31fca62c5b59e1d09ae39839263d2d378528b6af5d9a709725b0fbd72826c1458d2e2aaa4d863e874f29b9e83b4033bb9aee7325348f8ec849317874d2fde512421a218416d6ed8a6a7f53037254c302819fa21a695869647b691fb7667adb0c8cf017588e731e814a9a97170a264bd36ebe894174188308510bb7dd9420120679bed5aafb2abd69a5999ff6d8e2159e5d88d153be2a30ec4f7c2afdb9f79735ac9628e7f7dd93c84715da1d7682cce5da8281e2103075be3588472da49fe24fa8c22a963e2c21ffb6e08e801a2b9a17954668cbe31951c8096ba7b443ac4ef1eeaf2b84103d21f5a0a43091ebd68f566b4987d411aa66d44de81a49e972230c62e9a74e4f661235bbf8a6f17ebef134b2ef2345b073d25a2b45e165aa59117eae8de6b638e5db05ca545f49aede1d79b2e8844e930fe20b537f7eaa2d70b057d9d36e011047f550aeaa328c79bd82bf105788de17695e6f78917e60d6a1c798f43717dbfec289d036d3ac8e18f470c734fe5647bc6a78ef84baf75e80e41d4441668e40ba19826960024e101b5bb02beba1f6691d3c804a971b468e2d44385fc9ff90c883513c93beb26fd7b9f1f24722b03213e4b1969f822d120954db558199f270ceeb86aed2f9a1015c81889611e368d510c94f3e18cec8ce3bfbd311f9a3002cc8acbb1c177ce96849486e441540f673548173735e086f0b0338016c5e9524659da6dad6927216738a611c26b660ba84df8d4514e83a86d65e3b49db6ac13f53c38b197007e3ebab3ab29e64e381af76312ce3fecf83fb9d1b7e51bd62b4f39ace33d64849c95670e60f073a627540e527c23cb61c92396b6a6a2cbbb4bbc683e4380949f94300ca949e03e94cc1bae665766f69af9132aac4a4da49fde56fa893cdfaf1b8093ea332aeb4afa822c49bb2d038e1db9ad887211e006e02361d360d400ac6fab9fa1ec8e2f056c9ff6c19fa20ecb5a7fcde69c642850e7f473a18c086f342d12a29442c3f90aec4402343f4d76e8f0feea18e957ca38f0fc0c903d03b86b8d3a25ebf972e11616f827463eaf2ed975b9397e72240dfa3e0bb79de7b32154bba73e27c7195f4e746e1271685de1c991c2ab944281a436bcf788b50c30bbf44dbd8b916e079c56170b139fb36ecece189639b9ffed6f1804382ad33866e5ee99f73c48d78f20da828bc4cd7ac78aaba9631e3905a5832139d4c1c9f249de4726215392ada295b517ea3df1c44680a63653f347674edbf7287daa8611f4b41652403e07c49a2c2540ce669ae3ba3aff6453777e8c0b36f0c797b90d5ac0ac5898085dd54f0de90bf8e69ceeb5d769e6a3f8c385af56aaa995af1074808ccbaccfc8ba95c72cac34c436d9d71c52b0fd2d78c2187c5004ce4f02ace63fe0e59c7ef123cc1a9f13ccf7ab1c732210ccbc14ffef8dcdceb66612b6f133ce73c2f71561df36f91243316c690ed8dc32cd8b4dde785ebc14cfb86813951e5f20c7cff92cd3c05c5a0a0555f384d9c1a1239d8039496f512c39bcf0470de02a7f1f8f45e72dbd4d85d2b16d14a0601b509d1bce1fe8ec7c58a5e6c4d5d21da7e875f3d2cbca56e01768ee87457d0fc1c79b2ccacf8eb97662404c622ae07a2975dd8125740ea6f29035292f43740d99e033a10f92f910beaab602509007137e201ebf9cf9ba85df7c7edd171ca60c897e8b0d22bb9e147bf1d9a557b54edb31366b087bd3056dce8f943e75b05d76cbe68266a5e3f267e015d04c131a316214fb01cb7dc162f642679aff517c4b6813426e03562b7995defba6f3f0587e7d4722bd3b68b4a1db1bfdd32205097891d6dd3f1c77e2487c9b22622b25e00a9ae14b67fa9eef72bb21b61fbbfc6b47d46bd609b7cde344bd182693fa026283c2dd790cb1d8a52442e2324350b4188e4b8f585995497f65a0e15b8010bc24b287133ca559c20c46b006dca71954d6463a7b89b106b67d5f0cd7854e25e60ffa8a407dbbe8e95660fdc113b9575775ca94e9f743f5185e2e0d9461a839625916ad747ececd984bdbd19fdf85388d145d82db08ccc723ba33bf2b639eb8b1d9e5985567c5b12f754e4cb611a7f09095a61221b2dca25c6e1b6cbcaa86bdbc1f376f6b80fdd5a6e3eab7020c3a111a7ab5141c4ffb651ef53fef02795862960a89a628c09b060bb301c8a2c8079fd98d463454b10960332c395032c6a668d1167ef81ea1890ee4327710a848562761feb827ec914995736007ef0b25856fbea95286b5517287a8f0b05f5d2bf38aa51fd5a6d2a93621b1c733f21098985607a64c5dbe514f6ef629b65eb2248ded7acafd8ebae0c8f2373b6b03c5d5940f2de9f5a65b4258aa328a3ebc67e28ba3186be9bb2b641a3b2233c6b129facfa99f6456f413098789dc461b7c936612154d03b931fd11999ced8138572a45c54a0d5f32056a50fc9e93ed1013d7945125fd2fe8a760f0948f81bd2fc5aff75d091b700fd088ff3301166a150dfcf1d3b500302dd14f9f210c67a0f4a962b80e8ba1228d33353a0f975fd87b1f6b8056707e3c161324b4cebdc2aac77dba7b6d5e542869786ac0ba8534389908dfc7051b192f8d49dfa1072ff2d799582579946a419361cc23ee5dc756d6574a57a624d6eb0a1266c82354c9b322858e5a031fe4e3249c1cc990e49fd552a34fefe4ba9e607f37223afe6ec7513fa55181154fb3cd8564dfda22db66e2aaf68cbae491917b74be607c64fa268e774756e3fbdd8e059c2dc6353715f2e04775a8e46d4a83c22db0e54d6c9ed10842e6fcd81377ce3a008acd6ea36b5ba934313e33d15f1921549aad8e1c57b31cf2fae89825b93834f7b929241bd97ee6e2baf0d8684eb47fe604f9c8cbf54b604577aa6fa52a360f17dea14f1d6db95742719388e7f19c9ffea4693c010232529298a6820a39084963d56c7be966fd3311f77e8e616cfdf3fb3a8a2a476216f34fa555b26584c13a519ef8c9dc76ad13dc8f9c64608aaee4f6a77d1c1f547bbc95c559c3af09bbe175b03b26642a607db4ea285761a3f9722a59f0ced2f018cb0ea2d515954d8cb4de7756c3c40c53f9c94f4d9ad83cb1b285ac517124b74ec7e99a01b23f544f3acdfa74b1efeca3173fd6a482d78683addb4200706c59c6ba143a86417dc351290e8a6f369dda95fabea199216500f299378e44ae3795a3971437f613c8e18c0316fbf5f0e7c78a3d5aaf62cb23c9d1a31eb3e58d3f57fcb1ac94e4eba712ed19d5db17025055d2927bc20b1182ba783ac848dcb3e9ba5a3b909a9bd94e31fffcd1030eba38a0952062a5703bd42f3637320b355d0f79e7ba62d6a675ec6a886e03cbc38a5e497981085da146861b85f26822ee98ebe8dd4d0786f15573eb2bd0722adcb72bb6b35438b531da1a1f87f8f888d5eff421ed0b4431a5a4c4bff722dba2c4b0885725516417829d1ab167bc412856f7cbf3fe2a932175c72e427d441352d040ceeb0d251e34f1a8d716405a4d33c39806b89fc59dce31a8a2bb69a849f80b90550b2e195d63296afb1b24d16130c46da5642cd4a01022ae7119ce77fe166967899d784d8da0f2dba4595c00c2767759eb0e550184b1925da8b1cf6dd0e5e91da332384327547852362bd41acaba2884a0215d1478789a1e8851f478c496b77f1f45638e6ccecd6d38675254967f922b11ecbc881b4b3e95f40c642ef15b2f51368e5fc97553af0fc3a1ea6e72fc938f7faaa9bef9b2cc4671bd2a9cd00a720c05a54020bf9a0ed9460f8b2a75db67deba5e0846ecdf373b132268ebce6403be55f155fe02c3c00610c2b2f25d66cd0c139f4b74f6bac9e821dcebb85b3af2336d7806dbba3085d551dd2674ec906eef944aa8a3ea77f8a0b193f7b50a885a27c2663554b0c625924b9c2e93013ac6de806dd63dbc3378bfb888d00248b7f3887af85ef523eeaafaea23cb532450888d1ed86462e78f53312ff49429fb362767458e2595d8293469e42c5faab0d055557669ec4c7dad95f5168854e2a539f1c55f361c1bb5129a001f7bea2c070944ee15c2dc77c662e1964ec56b684f8c6f79f29c2917377d16625fc6af82e1d6e86ea832400b5d593e5621b1bbbf498afee3e4513c258104c34e01eaf7f3e5acbd5cc660e0d0ba5b735c0b460c5d2e84959f7e507e6beb5c1a0b6a4a5a9af603c113373cabb8d5a938ad719931b5bd20f02c558c2054d198014f03a6ce54db49d2dd1b4bc60d61ac85f9c17dae989fc8489aa6489ee0581c5212bf398bef3ddf774e49af727a86556aea5143be0936c6eb4f36a5bf3b543ed093701f45122a9fafbe7c7923f21699b5d83c6867dea6f49056792cfe8296d9372a476f4ee15dbfce2e1fe554c36309d1d6254dd4a9a3bc60aa60a4834aafa71891103a59b5136aa6972a8b0abc2cd8c00b19edf2e8427170ce8b8d106918b83e86f0aac62ddfc7e65a88489dadc9c9dbbe132e338067caf48ba0e0766760d5ab7481f6cc857a710e9f054165b59d1b224ca0f563bb899c2bdca129ee4c9f88c8acc45e", @ANYRES16, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xb, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="186500001000000000000000050000007579fcff0400000018000000f7ffffff000000002900000018910000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000"], &(0x7f0000000400)='GPL\x00', 0xfffffffb, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x10, 0x400, 0x7fffffff}, 0x10, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @mcast1, @loopback}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r7) sendmsg$TIPC_NL_MON_GET(r8, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000b80)=ANY=[@ANYBLOB="14010000ffb888b2c640c29ad690f48788fd13dd94e87fbdc61639b4db2bca20e2beac26a7994b01f459b2205a5ae3830226d1ee376d177b70f66ba29790c7e43f7929ae9ef46d94846442926fbb95298ec73b87285b9b0387cc036bf546b003708597e44f590ae54621dd7f31005925d6059e3810ff3f77d3bcb19bca79c237f1bb", @ANYRES16=r9, @ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x20000850}, 0x20000000) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r10, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r11, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(r10, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r11, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r10, 0x3b83, &(0x7f00000008c0)={0x28, 0x4, r11, r11, 0x3, 0xfffffffffffffffa, 0x3fff}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0xc02}) readv(r13, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) r14 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r12, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) ioctl$IOMMU_IOAS_MAP$PAGES(r10, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r11, 0x0, &(0x7f00004f9000/0x4000)=nil, 0x4000, 0xf3}) 5.42806447s ago: executing program 2 (id=744): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0xffffffffffffffde, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(&(0x7f00000005c0)={0x4000000, &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000300)=0x0, {0x39}, &(0x7f0000000340)=""/191, 0xbf, &(0x7f0000000400)=""/124, &(0x7f0000000580)=[0xffffffffffffffff, 0x0], 0x2}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x40, 0x3, "9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd656422a633a39f0300000000000000000000000100000000000000"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f00000001c0)={0x1d, r8, 0x2, {0x1, 0xf0}}, 0x18) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000001440)={'vcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000100)={0x1d, r10, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)="871125000200e7a500", 0x9}], 0x1}, 0x8041) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r8, {0xfff3, 0x10}, {0xc, 0xffff}, {0x2, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x24008095}, 0x20000050) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0xfdff) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x183481, 0x0) syz_emit_ethernet(0x58, &(0x7f00000009c0)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x22, 0x3a, 0xff, @private0, @remote, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x22, 0x1, "683059d2c59b"}, {0x1f}]}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1b2}, &(0x7f0000000180)=0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) 5.198109651s ago: executing program 4 (id=745): r0 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000105804165000000000000109022400010000c04009040000010300000009210900000122a00009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x20, 0x10, 0x27, {0x27, 0x23, "54b5ad3f01b44daa4fe67d9a97bf8f0fb21d689e7296820879588bbc77c1ffa0b28ca36538"}}, &(0x7f0000000380)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}}, &(0x7f0000000500)={0x44, &(0x7f0000000140)={0x0, 0x7, 0x1f, "acb2a45b4359edc9ece69dce4a38418d6844dacdec48b889175c212cf32601"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000240)={0x20, 0x81, 0x1, '1'}, &(0x7f0000000280)={0x20, 0x82, 0x2, "ab61"}, &(0x7f00000002c0)={0x20, 0x83, 0x1, "8d"}, &(0x7f0000000300)={0x20, 0x84, 0x4, '\x00\x00\x00\x00'}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "8efec6"}}) (async) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x80) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000880), 0x1e9b40, 0x0) (async) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000600)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x221, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x60, 0x9, [{{0x9, 0x4, 0x0, 0x4a, 0x1, 0x3, 0x1, 0x2, 0xe, {0x9, 0x21, 0x3, 0x9, 0x1, {0x22, 0x52d}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x80, 0xff, 0xe}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x9, 0x74, 0xd8}}]}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x201, 0x95, 0x2, 0x3e, 0x10, 0x9}, 0x1a, &(0x7f0000000680)={0x5, 0xf, 0x1a, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x5, 0x0, 0x9, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0xd5, 0x61, 0xf}]}, 0x1, [{0x1c, &(0x7f00000006c0)=@string={0x1c, 0x3, "755847d6a3bb6c3bb204ed8e664bae2da15641244e5ecbc76f7c"}}]}) (async) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x0, 0x15, 0x2, 'Zv'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$HIDIOCSUSAGES(r2, 0x501c4814, 0x0) 4.672244214s ago: executing program 3 (id=747): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) (async, rerun: 32) semop(r0, &(0x7f0000001240)=[{}, {0x2, 0x0, 0x2000}], 0x2) (rerun: 32) semctl$GETZCNT(r0, 0x2, 0xf, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) (async, rerun: 32) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) mremap(&(0x7f0000aaf000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (rerun: 32) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r3, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8652b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r5, r6, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r7, &(0x7f00000000c0)='lp\x00', 0xfffffdef) (async) dup2(r7, r3) (async) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) (async) syz_emit_ethernet(0x82, &(0x7f0000000700)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "954a5b", 0x4c, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x6, 0x1, [], "bf3f030b7d27"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x56a]}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x48, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x5, 0xee, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}}}}}}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async, rerun: 32) socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) memfd_create(0x0, 0xb) (async, rerun: 32) syz_usb_connect(0x3, 0x24, &(0x7f0000000c40)={{0x12, 0x1, 0x200, 0xa2, 0xb8, 0xd2, 0x40, 0x21bb, 0x2070, 0x870b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa0, 0x8, 0x0, 0x4, [{{0x9, 0x4, 0xc8, 0x1e, 0x0, 0x1, 0x3, 0xf7, 0x9}}]}}]}}, 0x0) (async, rerun: 32) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x30) (async, rerun: 64) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) (rerun: 64) 4.482736442s ago: executing program 3 (id=748): syz_usb_connect(0x4, 0x12f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x7d, 0xe3, 0x1a, 0x8, 0x16c1, 0x1cde, 0xe79e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11d, 0x1, 0x8, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x64, 0x4c, 0xa, 0xf6, 0xa, 0xe9, 0xd, [@uac_as={[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x3, 0x44, 0x1, "7ff2", '_\t'}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x4, 0x1, 0xf, 0xe, "5ff96f75b7091a6cd2"}]}], [{{0x9, 0x5, 0x6, 0x10, 0x40, 0x9, 0xff}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0x7, 0x4, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xfd, 0xff}, @generic={0x6, 0x8, "c15e5173"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x6b, 0xc4, 0x9}}, {{0x9, 0x5, 0x5, 0x1, 0x40, 0x4, 0x6, 0x81, [@generic={0x69, 0xe, "5ec96c5bc54d7154480a250f2b15a5f08b55dc469e6de652e354cbbdbc17c74e2498e6a8d5d96886eb271f5efd65aeb5fa87dcc0eb6ea5a5e19d0c1c024d9c737fbb3ff020999120bfa6b2a45f5215dda1a31a30dc988e2872b343bc2459d714b0a5eb03d64547"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x8, 0x2, 0x6, 0x14}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x80, 0x6, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x9}]}}, {{0x9, 0x5, 0x9f, 0x3, 0x40, 0x9c, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x4}]}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x8, 0x2, 0x44}}, {{0x9, 0x5, 0x5, 0x8, 0x0, 0x8, 0x3, 0x9, [@generic={0x10, 0x22, "e5dba651cf636fa72a9643e68d33"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x3, 0x8, 0x9}}]}}]}}]}}, 0x0) 4.440367703s ago: executing program 1 (id=749): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x882) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000480)={{}, {0x2}, 0x23, 0x0, 0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)="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", 0x195, 0x0, &(0x7f0000000340)={0x2, 0xcf, {0x0, 0xc, 0x4, "c54312c0", 0xbe, "d100a33c8c6c0e596578137f81ee35d4c66d9aa8ff1e55fcde0314d1d03bfe00899db5a36b8aeecb20916c160facf49a96cb3d5f30ab92d9b9627ef2b8f636e973c5c89e5ff194ae6a7397bbcb1bc26d1a880eece67746c1673d66e0ba48d90f3c4afb859a9782f2cec3007177cfbbf2c075f5344731a1a374d3c8a5bb175b5b914cbb57aecf593c9c23dfbbc4c2423f72f6f8ce09f852254bdc10c262ea56d29c737f59e51e0a5e7aa807d0560c064ab50ef81b02801e782b0231838ee7"}, 0x3e, "fcb3fb46025a66f2bddab9de13e87d4bebb9994bb72ae075078545b7f393f8d4beb35f313116346a7d16618ac31dbf4336828902b6f0512d67aefc6f5c48"}, 0x119}) write$sndseq(r0, &(0x7f0000000140)=[{0x5, 0x0, 0x3, 0xfd, @tick=0x40000000, {0xfd}, {}, @quote={{0x6, 0x7f}, 0x4}}], 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x7ff, @remote}, 0x1c) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000540)={0x1, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000500)={0x2, 0x2, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) 4.182564893s ago: executing program 1 (id=750): ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000380)={0x0, 0x0, '\x00', @raw_data=[0x5, 0x7, 0x7ff, 0x5, 0xffffff01, 0x7, 0x1, 0x401, 0xff, 0xffff, 0x6, 0x7f, 0xfffffff6, 0x245a, 0x1, 0x15, 0x9, 0x1, 0xf, 0x9, 0x4, 0x5, 0x3, 0xfff, 0x4, 0x6245, 0x1, 0x351, 0x9, 0x4, 0xfff, 0x7]}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e24, 0x0, @empty}}, 0x0, 0x0, 0x46, 0x0, "84938cc82adb3eed9f2281b8a0d5064cf5d6a26a8515cb45f8abb31740f6d32be235a676bfeb244e97d23745b87103744a9ca1ab21697cab6fd37fddba7b96d522139b5e9b67f45dd008afa7c9b851e0"}, 0xd8) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x6071, 0x0, 0xe6}}}}}}, 0x0) write$sndseq(r0, &(0x7f0000000180)=[{0x4, 0xd, 0xf7, 0x0, @time={0x0, 0x380c}, {0x10, 0x7}, {0x0, 0x4}, @control={0x9, 0x4, 0x2}}, {0x7f, 0x81, 0xf, 0xa, @time={0x2, 0x3}, {0xd, 0x4}, {0xf, 0xc}, @quote={{0x59, 0x1}, 0x101, &(0x7f0000000000)={0xc6, 0xd, 0x8, 0x8, @tick=0x3ff, {0x48}, {0x3, 0x10}, @control={0xfb, 0x3, 0x7}}}}], 0x38) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7fffffff}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) recvmsg(r1, &(0x7f0000000340)={&(0x7f0000000440)=@vsock, 0x80, &(0x7f0000002a00)=[{&(0x7f0000000100)=""/32, 0x20}, {&(0x7f0000000680)=""/135, 0x87}, {&(0x7f00000004c0)=""/108, 0x6c}, {&(0x7f0000000740)=""/204, 0xcc}, {&(0x7f0000000840)=""/74, 0x4a}, {&(0x7f00000008c0)=""/72, 0x48}, {&(0x7f0000000940)=""/190, 0xbe}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000000180)}, {&(0x7f0000001a00)=""/4096, 0x1000}], 0xa, &(0x7f0000002ac0)=""/101, 0x65}, 0x40000000) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 4.076493814s ago: executing program 0 (id=751): socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000002c0)={0x0, 0x0, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r5, 0xc02064a4, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x10001, 0xfffffe0000000005, 0xfa11, 0xffffffff}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x18c) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0xa, r7}, 0x10) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) semctl$SETALL(0x0, 0x0, 0x14, 0x0) ioctl$TCSETS(r0, 0x5402, 0x0) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) execve(0x0, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000440)={r5, 0x3, {0x0, 0x0, 0x0, 0x7ff, 0xde1d, 0x0, 0x4, 0x10, 0x8, "34639f01b94e9148334ccd2a88371e3c368e46231d7c92b65772acb352d5c873751ab0fe497a04f704cb7f1dc71acb7ef7894d3f679da069131cf928dce45946", "c190a16f5d7629472c5493e4610a20cdcca03de9422b2f9741c00a9404847cf0a182dac8285b0034d454d82988c47f35a57b6e450e3ad6125c51bb4f4bfcba78", "68897459f1c6304fe0dd634937c6225bed6856adf3a492e388839ea9c33e3080", [0xa1cc, 0x7]}}) 3.894574015s ago: executing program 4 (id=752): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000"], 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000240)={0x0, 0x6862, 0x8, 0x1, 0x1c0}, &(0x7f00000002c0), &(0x7f0000000300)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r1, &(0x7f0000000340)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x102c, 0x2f, 0xff, @local, @mcast2, {[@routing={0x3a, 0xa, 0x1, 0xa6, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}]}, @dstopts={0x2e, 0x1f0, '\x00', [@generic={0x5f, 0xf81, "749ee09ebe742c6f0ee5d35e7cd752e884a457a2d0f8e90188e304e1bafdb830a9b4af58afc0242e6eba3c3b223acf8ccb115d2211397f6f90de054d922d82bd16d70ecdf651c137e9273136245c76430b6c4fa0bfa5cb5ebe25f00c2b27a8404e2767c2372ac83e1c455381f352b845b088520adfdc40d4e4557d66aa0f7e44193d3ec8a3af03ba4ba236ebea768ad7027d9b7376017f4fbef11371583188a22d5e0e127a05de7339c0571d0dfab8943e941cb8dc9e751b2dae740aacff2f5191c8ddaca12e2d9aa45269271404fcb4e83538e55840f5e7e965b796d268a0d2b1af6be4626a817ddb8667be602ecd1d0c9d24e003cc72b81dda653efb665a3fbb5e121f644c70a79f021cbf7d1ecfc0c8d0a62f121ecb73175485178c0937b2520e2cd645ab23046f149ac31d53573b7e04cf639bd81042d83b498f0a33261199730eacd10293bea789490ad476c0a20a46d2816965711b1124f9e2c6ba8d4e879af9239b9811bd148c42cdb7092ad81a8cf2bc0e4f3360d88f9d3d5b5f29b21de7fd76e3a0333969e4f5ceb313651675ac289b2901e59e7f40f8a217ab584b404f837ba9b12c0ee44bfafeab5989b6655c5f505ef6904c6642518c3ff432ddf889dbcbd88dccbe535937a28a822539fadcd53b315b57081aa06b1c5795481e0cc04e57d45e0cbe8eac9d13a1da77fb586b35d19039cf5b180ce42c9061cc7b901ef25899982571d646f2a6f2b827a87e816b093723072e3cc121dcf0a22dc961aa307f8761c18b1efc96ba34ead1c8e9a01d8ecc3f75095868babf41bbc005f836d0dcf6493ff34bbb0827e971d799b3f14c84ce1262db35dc7bcdf85b723441eae590f595d47f01e48375ba18a212f2de3dca1c849a99a1186efdcb703ad48dc9e5a27c337da11b15cbc0772becf4c47a090eaf6210c3176e3288fb35d17bed84791feceb39cec5b0771cff8eef64b78fef42217510eb33d45825265499d7decc1e967a2634ac91b9c344def739e2664a94baa71961b014d1bfe2b109c73f7639a479eb3415a2ab518b5692e26d4b9ba834c45854adcbafa11ef5452a7ca55a667eafd66fac091c7029f22648f60b10add6cef60eb352204a519fa5210ab9715c2d0d3765beac81a5e836e0ed5616ff998f89bf7d49aaf1d5936922d4bd827854857ff94dbc508fbf271bee0ed8cca21d17d3a968015dceb0f9038d43b192f7c511b0d03fba02de529bf8ecc71b3a05e81af7afc108ebd486fc0f7ff1cbf5201eb582753f880aae3cdb8c5023abb8d85d2c807a8d7656dd64a4d5f49e3c8568d226da114221b74d617907febcd8dcc1bf05e3845d064bf3bf933dd78cdc76feb1b38bdb3232247876a2102e512cb364d0882de6ad870d3c2ff61fa407aa57ca64c0775bdb52cb95099f72f616203cec9fd4ce7bd0d395e3a4f4a301eb2dae9a1e24de7684629217a9a0c94fcee0e202b9b6dca667bb124b6dfc68e75926ee94eb79ae5bc3cc07ac58ecdc21cb5b059546975e688f6ed94cecc140cc280b63d74df164e7cc3bd7578ee935449ad015edad2515b8c9a9d55d74ecb77dbb8a69ea9476b06ccedad7a4c057ecbcb5eb2f1363cf48d4d76df6c4002e8b9a1a917ce53568a259704d27e86b4131fa50bab5953ead82c2eb48e17368fb1c471128a4efa83a23c9ba81c112e58c8d47cb37f077b456f5ed741e5794c82e716270f11ac7a650fb7958dd083076354d567a9fce553c7bcf0f76ccd43ce7736e806926ba7d49720560644fa22207f06e4b90fc6ed1d37370da6b9f6a3ac8919ba8c8920dc065bec0b9b59e98465ac0f331f04fe43d8a614653866f95676fcec71de9a5bfae20503103db134dcb0fb2db5f213c8d3929a620c7bd74e0d86b3b9ee6e80ad23e3ac082937e31192ad84254223a73a70c0b1249b89598eb7975842e5fc0402b7b6c5dfc8564d2c546866712ff73c69a16c0626cbe2021fb22f55ffd0dc66e5d8c417007ae9383ef9cad360f79f030901675bf2820a21b3efd7bd46306b8d232091bbda6cf7e3cd8a19a84e92b20decbc2077ce38bcb174f720ce819d1f85e2fb688642734a877fda92fc01b397dabf602e29e00bd8244b18e2c86b43f216fc0ed0bbff10e98817a101873c3912c21ff17aacaed92d7ba2d07c6dde40c88166541f8ae84b3fc23eccbb3cf905781a453cdc649431dc0009158d99898800e674e96f1153d7986abe80c0980fd194a9d098f374e36df8be84f7dc22f56e30a7806f1faa101fc1a8909ea77de32b40625f67112083b53661415bd1e7c443f50e80ec630e988ce1b27af94193fd3fc40a342e53249046441771e3342ef4e6c26615b858f6fbe308b28cd530ed281c869cb03a424a0d9961c6cd0dc5eed0238845407de07daa6f45b7973cce6b118fed7cec0df2f3076707954994c8d5101a4b689c86038b7e9b266a2bb0fc9f8a5cfbc28729286d139ffa29f3bfdd7bb5b35cafa912c6b84f8710aa92c1ccf5e8104f9d605fe9b8d81dc577af4e30b35bad4bad111a852cd93a71398cc12945424b044788d1998ee9cf9d153b7b4fa253200489b6cfa1ec2c39bfbc930088d27ee121fdcbd8a11c125b4455ae8cf7f7800663f041a53023daf9a2f2e0a576d307ae6e0784ada646a7c6d9b85c3d27c1386fa4614e65c30d3c2f1f1ff5a6f7e12ad358e35269928773d0f3eb18e1f63e15cbca2ff526335634ddf778e432ee51e4f6fa9b39b842cb0367ca46c01398facb86ad33b0a3e64a63458c83697a91fb20f3dac2c6013f051923c8d46f3e8511510d93f02492d3d2cb6db433e9a20b3a051746a509f89c3a5760ad462c4b16ec7066b3d1ab4b3038d80cc83913be834e6344c655a1107eb93a59a8d48a7a8f1336539d72be020bc415d00182f1b8f67f561dab38593182535595fbf620bd8fbad251d0e742f167ebf234570cffde775165eb0ac3e9e4e991f7f45dfac585d8f41660f82dfcac84902d0be35bf6a004243092d883e1cc41defcf86555c36d134523d02fd45ba4289e91d7891875176a20c6a089f9ae2aca673f183f1835734081692bc9cddcb18af66f0c4ba26bd989f61faa75aac8f89b16c43d8c8c70c065d3c0159e7afa595252dac5105ad577817c161be8fcaac1c47a0f99b6cddf3b52563f26025bbf291fd791fae643cdb0c272511507c81e77c764190f7526171dd0f020c78d6c5d62ef982d50232a1b6d384ef8f6f3741bed854dc249c39536d9ad5371fb9a06d3819e19288001400158d5909323c07970b105132b2d655b27ba8e1699a17647be6cbd00ee8c0017b71d5d0a07ce2458006b5e8b8bec5e4abcdd4a3d04b29aa3d6a09d391908aef0cc928bb10455fe687dd6556cbdf27382aa37636fd18c4ff9ae66e92b197e31f216eca255902817b8a5f523125e2efcc493b4b9cd40db2a30b95006f690fec4d228be55bf629b1995967ddd9d51a351ea3f53c10a0c839ac740091c660077207d21e7936d823e1d2328a0a00a29b47d6c880d38b9ebca8d27527ddf00991eb9ac74d71c8d39881954c541a083b885d5ff25b3eee84e2b450cee41de0c3210885969057fb5f71b52c724a02df2ffe796e33db457f3c5963aa427f237f8834ecd2d0fc8c4ce574cbe50181296a73ce154707e867a269e3713f51c4493c070df514efd22f4833de05670305a9704619bc22c62de09cd60cbafcfa340a4368844157209401bbd71db183bc45569c782c1dd396b4ba5c214a1c8bc7a899a7b4ccf85653b90a6c97d8cb4a92b20ca4eb1057462afa6a784b7611f5aaa1de11546b52bfc930b162fa84b9f141592f20eeaeef99a57f1a26c206ab916322b1dfa99350f589a3377f1ace5078c9391d8096e75cce3da353cc73da20268c7513f31e1b2cce273f22dff6a65c43b522cd50e18d836ef2fb55885a8f355e60640380f9ff43831d8bfba0e82c3c61df58968a239ce9d0929cee93fcb95965d10870308b810427c5acf207e1fbe92d575ec6c47923a1cac68622f03e459a86d7927fa28a2232512214108cb4ba5ff327ce3b8acdfe605786cce23254abb5cb3e32ff2b46494b5ed899b1d02c4644fbbbd388e66705bd95c5ba6a38da91be1fbcd626e82578411de8240dc48e5d52b497d7f9cc5a8a21aad2fc9b7406ae3c47305e831a8dac12d2b800cb0bf52ebc92fc608996d01a4ffe8c9ed382ad232ff75c4b2cc1b0799efb62cd3b2b6c22ed326fc9797dbfd0cc7b9800da3598decdeb5f37cbcf187a077e3d08c9accff556ab86dea639d50de7750a73dbf7eca84a68d8b6913660cddaa5f9d7574cb10c288ec63d3dd89b2f1ee679599c9b6822d8b061701ff79195a4bbef0cd3c6b7dd8b8befdc0812cbd257cda7993891c489cd5f54344fd05564be6818384ef588c0dbe6daf29bba2be78125ad6102946f690a2ed744aeffabd684f6e8ddc842a40ad7271540122e2abfb77f391e19ed2a8ff0867ade53111b54d78e9252074faca676bfa0e6409ab73ac0490650c677a8009da479e01401d94f9f107d0244ce520b16404cdacfc93349ced900989ca217af2bb6c606a3f21a12716f928d5aab9f5fa7eb3cb2e8a4eece4c35af1d295c7589adb4da08712d49b7272035a36c710d63285f9d6bdcb7e06fc03279a7801523e0eb004c64f0faa428cdb1a5bbd5d67ba69a8cc208d680e54f66802514fd19535c9d8cb1771de66ceb25a78ab1d9b669b99ba1ea7ef1b5deee63e25f42d846a1d704180002cf262df7a17e0dca792e3820cc83812285305dd9d3b0646dc0a885be1e3c4ade7295b96f6b9fb1a902ebc0abcae9866ecfd19c95a61693d671c4fbfd6fa92f85719db02fe67d2c2c25fae813bd48e540a2cc34bc1e9d15b4434695462c4e521f89cbbcea8ce35d16dc7b3208f3c472b46be2003aa725dd5f34997907d655734b0615127fa7a773b169c8e85caae68a4fed0af7d8a7372afcc6343c5d7e64c1629b0d1d2feb3559bce2b8bac73d458bd4d5cbb86a62f91cd017732049aa59be20866963f341783244b27543df72e760d5fac114f327594f793d83faaa9ef6d7efc986fa834ac94d603f6a3c408f0c552bf5dcb73967bea864e6719537a4fad9b54e092fe66da0ea29efa73cf7828af6a73ba534156dabf2e9c166d78389a5391358e5fe387fcd88bbba72b5ad4de47988b70ec4d756e5f94d446a0d995c2b5aa565616740519622669c28a287895f8538983c7007fc8d1764bde984b672127c3410f831f32536d663aacc06712d0740eddab5b33e103a4460aa4be43c36cb0921b417b884318f03a6a1d8a4512fec95857a30d4caffe1c58d9f9357d9e225c5dd60085ece673a8a314c73dab21c1f4b02fc5347de78f2851f348ab8586bb7259fd5af1a577bdffc619e6a7f378af7338eeabab332cc4111cee6ca256e9639ee04c714d38663b9e7a924dde2a296daa9c094b75546b8f9e777bdb4f3eaf46a15c7583e94de5a9c6115d6f3d5be964266b56d2e78f018e6486a3f128827f8cfeee7a1e0ce01c61367c7bf3c0c720f4bad0f943d3465b9a4e186d50dcf523afe5c976e24f9e97fe196d204ae24a93a46aa4b5b444fca22b1d9fbad3e00a79f8a61555e"}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0x1c, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x1062) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000003c0)=[0xfffffffb, 0x8], 0x2) r4 = socket(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000280)={0x0, 0xec25, 0x400, 0x3, 0x40000333}, &(0x7f00000006c0), &(0x7f0000000240)) (async) r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000280)={0x0, 0xec25, 0x400, 0x3, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r7, 0x47ba, 0x0, 0x28, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000100)=@nat={'nat\x00', 0x19, 0x4, 0xcc8, [0x200000000700, 0x0, 0x0, 0x200000000730, 0x200000000760], 0x0, &(0x7f00000000c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x3, 0x30, 0x1cbb, 'nicvf0\x00', 'pimreg0\x00', 'dvmrp0\x00', 'erspan0\x00', @empty, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0xa6, [], [], @arpreply={'arpreply\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, 0x2}}}}, {0x11, 0x1, 0x8100, 'veth0_to_hsr\x00', 'veth0_to_team\x00', 'dvmrp1\x00', 'nr0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0x0, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0x956, 0x956, 0x9a6, [@among={{'among\x00', 0x0, 0x880}, {{@offset=0xc, @offset=0x420, 0x2, {[0xff, 0x7ff, 0x1, 0x7fff, 0x1, 0x2, 0x6, 0x8, 0x2, 0x200, 0x2000000, 0xfffffffd, 0x7, 0x6, 0x4, 0x8, 0x7, 0x9, 0x101, 0xd4ab, 0x2, 0x3ce4, 0x999, 0x8, 0x9, 0x6, 0x3, 0x7f, 0x9, 0x400, 0x8001, 0x1000, 0x7, 0x8, 0x10001, 0x1, 0x4, 0x2, 0xfffffffb, 0x4, 0x9, 0x8, 0x30c, 0xff, 0x0, 0xfff, 0x6, 0x8, 0x6, 0x7, 0x1, 0x4, 0xb, 0x8, 0x5, 0x0, 0x1ff, 0xfffffff3, 0x1000, 0xffff, 0x10000, 0xfff, 0x0, 0x5, 0x6, 0x9, 0x0, 0x6, 0xffffffff, 0x3, 0x1, 0x10, 0x9, 0x43, 0x1, 0xfffffb79, 0x101, 0x2376, 0x6, 0x9, 0x1, 0x5, 0x24398574, 0x7f, 0xfffffffc, 0x9, 0x42, 0x5, 0x2, 0x3, 0x8000000, 0x9, 0x4, 0x6, 0x7f, 0xa, 0x6, 0xdf9, 0x2, 0xf, 0x23c33d54, 0x9, 0xcb, 0xf, 0x8, 0x6, 0xeec3, 0x42, 0x9e0, 0x2, 0x7, 0x7, 0x3, 0x4, 0x62, 0x9, 0x18, 0x7, 0x6b, 0x101, 0xe, 0x8, 0xee1, 0x7, 0x9, 0x2, 0x5e, 0x800, 0x3ff, 0x61, 0x10000, 0x3, 0xfff, 0x1, 0x4, 0x6, 0x2, 0xffffffff, 0x4, 0xc9, 0x7, 0x318, 0x2, 0x1c9, 0x0, 0x8, 0x7fffffff, 0x5, 0x80000000, 0x2, 0xfffffff9, 0x3, 0xf0, 0xc, 0x3, 0xffffaf6f, 0xffffffff, 0x101, 0x58, 0x1, 0xffff, 0x5, 0x3, 0x4456, 0x7ff, 0x6, 0x8, 0x9, 0x4, 0x1, 0x507, 0x26a3, 0x2, 0x6, 0x8, 0x8, 0x9, 0xa, 0x9, 0xe498, 0x6731, 0x5, 0x4, 0x7, 0x3, 0xfff, 0xb5, 0x5, 0x1, 0x4, 0x9, 0x400, 0x5, 0x4, 0x0, 0x1, 0xe1, 0x9, 0x8, 0x7, 0x4, 0x7, 0x5, 0x8, 0x101, 0x3, 0x7, 0x5, 0xf, 0x8, 0x7ff, 0xfe0, 0x5, 0xfb68, 0xfffff000, 0x2d5b, 0x9, 0x1, 0xff, 0x3, 0xb, 0x8, 0xa0, 0x7, 0x7, 0x7fff, 0x0, 0x98b5, 0x986, 0x1ff000, 0x7, 0x7a3, 0x1, 0x6, 0x10000000, 0x4, 0x2, 0x6, 0x6000, 0x5, 0x6, 0x1ff, 0x9, 0xc8bb76df, 0x36, 0x5, 0x6, 0x3, 0x5, 0xa30, 0x5b, 0x2, 0xfffffffd, 0x0, 0x9, 0x3, 0x8], 0x1, [{[0x5b, 0x9d], @rand_addr=0x64010101}]}, {[0x8, 0x697d1bc0, 0x0, 0x5, 0x6, 0xa, 0x6, 0x5, 0x1, 0x8e8a, 0x3, 0xffffffff, 0x6, 0xc0000000, 0x5e1c, 0x2, 0x6, 0x5, 0x9, 0x3, 0x8001, 0xffff, 0x3, 0x0, 0x3, 0xc, 0x7, 0x6, 0x0, 0x5, 0xff, 0x8, 0x8, 0x9, 0xb, 0x3, 0x50a3, 0x0, 0x6, 0x2986b000, 0x6, 0xfff, 0x200, 0x5, 0xf49, 0x6c01, 0x6, 0x6, 0x9, 0x0, 0x3f, 0x0, 0x6055, 0x8, 0x4, 0x7, 0xfffffff8, 0x8, 0xffffff00, 0x4, 0x8, 0x10000, 0xfffffff1, 0x80000000, 0xfffffffc, 0x8, 0xa786, 0x1, 0xc, 0x7, 0x7, 0xe, 0xa, 0x3, 0x3, 0x4, 0xffffffff, 0xed, 0x929, 0x1, 0x2, 0x6, 0x6, 0x1, 0xaa, 0xffffc000, 0x10000, 0x48e, 0xfffffff7, 0x7, 0x9, 0x6, 0x1, 0x4, 0x0, 0x2, 0x4, 0xffffffff, 0x9, 0x9, 0x9, 0xd, 0x4, 0x2, 0x7, 0x9, 0x5, 0x6, 0x5, 0xa, 0x2, 0x2, 0x2, 0x6, 0x1, 0x3, 0x1ff, 0x7fffffff, 0x3, 0x1, 0x0, 0x1, 0xfffffffd, 0x0, 0x8, 0x6c18, 0x168a, 0x2, 0x7fffffff, 0x13, 0x2, 0x8, 0x815f, 0x2, 0x10000, 0x0, 0x1216, 0x0, 0x3, 0x7, 0x8a0, 0x7fff, 0x7, 0x2, 0x1000000, 0x9, 0x0, 0x0, 0x6, 0x8, 0x7, 0x1, 0x4, 0x6, 0x9, 0x9, 0x10, 0x0, 0xc4e5, 0x0, 0x7, 0x5, 0xe7a0, 0x8b, 0x9, 0x3, 0x1, 0xfffffffb, 0x6, 0x5, 0xfff, 0x7, 0x7, 0xe7b0, 0x0, 0xf88a, 0x6, 0x2, 0x1800, 0x7, 0x8, 0x7fff, 0x0, 0xfffffff8, 0x1, 0x5, 0x3, 0xe, 0xbefc, 0x2, 0x4, 0x101, 0xc00, 0xb, 0x8ac, 0x7, 0x4, 0x5ed47d39, 0x7fff, 0x400, 0x5, 0x5, 0x6, 0x5, 0x7fffffff, 0x9, 0x5, 0x2, 0x5, 0x80, 0x40, 0xff, 0x3, 0x10, 0x2, 0xe1, 0x0, 0xf8cd, 0x4, 0xfff, 0x6, 0x1, 0x8000, 0x1, 0xd15, 0xd85, 0x8001, 0xfffffc01, 0x0, 0xfffffff9, 0x1, 0x400, 0x4, 0x0, 0x5, 0x5, 0x6, 0xfffffffd, 0xfff, 0x570, 0x2, 0x9, 0x9, 0x80000001, 0x5, 0x6, 0xc9fa, 0x100, 0x3, 0x4, 0x5, 0x17f, 0x7c, 0xb03a, 0x6, 0x0, 0x8], 0x7, [{[0x8, 0x80000001], @private=0xa010101}, {[0x370d, 0xfffffffa], @multicast2}, {[0x6, 0x1], @remote}, {[0x4, 0x9], @initdev={0xac, 0x1e, 0x0, 0x0}}, {[0x4, 0xffff], @local}, {[0x7, 0x2c], @private=0xa010100}, {[0x8, 0x7], @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}}, @quota={{'quota\x00', 0x0, 0x18}, {{0x1, 0x0, 0xfffffffffffffffd, {0x4}}}}], [], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x7, {0x31}}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x0, 0x12, 0x9100, 'netdevsim0\x00', 'veth1_to_batadv\x00', 'syzkaller0\x00', 'sit0\x00', @empty, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], @broadcast, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x10}}}], @snat={'snat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}}}}, {0x3, 0x8, 0x6004, 'veth0_to_team\x00', 'veth0_to_batadv\x00', 'vxcan1\x00', 'bond_slave_1\x00', @local, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@local, 0xfffffffffffffffd}}}], @snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xfffffffffffffffc}}}}]}]}, 0xd40) (async) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000100)=@nat={'nat\x00', 0x19, 0x4, 0xcc8, [0x200000000700, 0x0, 0x0, 0x200000000730, 0x200000000760], 0x0, &(0x7f00000000c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x3, 0x30, 0x1cbb, 'nicvf0\x00', 'pimreg0\x00', 'dvmrp0\x00', 'erspan0\x00', @empty, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0xa6, [], [], @arpreply={'arpreply\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, 0x2}}}}, {0x11, 0x1, 0x8100, 'veth0_to_hsr\x00', 'veth0_to_team\x00', 'dvmrp1\x00', 'nr0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0x0, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0x956, 0x956, 0x9a6, [@among={{'among\x00', 0x0, 0x880}, {{@offset=0xc, @offset=0x420, 0x2, {[0xff, 0x7ff, 0x1, 0x7fff, 0x1, 0x2, 0x6, 0x8, 0x2, 0x200, 0x2000000, 0xfffffffd, 0x7, 0x6, 0x4, 0x8, 0x7, 0x9, 0x101, 0xd4ab, 0x2, 0x3ce4, 0x999, 0x8, 0x9, 0x6, 0x3, 0x7f, 0x9, 0x400, 0x8001, 0x1000, 0x7, 0x8, 0x10001, 0x1, 0x4, 0x2, 0xfffffffb, 0x4, 0x9, 0x8, 0x30c, 0xff, 0x0, 0xfff, 0x6, 0x8, 0x6, 0x7, 0x1, 0x4, 0xb, 0x8, 0x5, 0x0, 0x1ff, 0xfffffff3, 0x1000, 0xffff, 0x10000, 0xfff, 0x0, 0x5, 0x6, 0x9, 0x0, 0x6, 0xffffffff, 0x3, 0x1, 0x10, 0x9, 0x43, 0x1, 0xfffffb79, 0x101, 0x2376, 0x6, 0x9, 0x1, 0x5, 0x24398574, 0x7f, 0xfffffffc, 0x9, 0x42, 0x5, 0x2, 0x3, 0x8000000, 0x9, 0x4, 0x6, 0x7f, 0xa, 0x6, 0xdf9, 0x2, 0xf, 0x23c33d54, 0x9, 0xcb, 0xf, 0x8, 0x6, 0xeec3, 0x42, 0x9e0, 0x2, 0x7, 0x7, 0x3, 0x4, 0x62, 0x9, 0x18, 0x7, 0x6b, 0x101, 0xe, 0x8, 0xee1, 0x7, 0x9, 0x2, 0x5e, 0x800, 0x3ff, 0x61, 0x10000, 0x3, 0xfff, 0x1, 0x4, 0x6, 0x2, 0xffffffff, 0x4, 0xc9, 0x7, 0x318, 0x2, 0x1c9, 0x0, 0x8, 0x7fffffff, 0x5, 0x80000000, 0x2, 0xfffffff9, 0x3, 0xf0, 0xc, 0x3, 0xffffaf6f, 0xffffffff, 0x101, 0x58, 0x1, 0xffff, 0x5, 0x3, 0x4456, 0x7ff, 0x6, 0x8, 0x9, 0x4, 0x1, 0x507, 0x26a3, 0x2, 0x6, 0x8, 0x8, 0x9, 0xa, 0x9, 0xe498, 0x6731, 0x5, 0x4, 0x7, 0x3, 0xfff, 0xb5, 0x5, 0x1, 0x4, 0x9, 0x400, 0x5, 0x4, 0x0, 0x1, 0xe1, 0x9, 0x8, 0x7, 0x4, 0x7, 0x5, 0x8, 0x101, 0x3, 0x7, 0x5, 0xf, 0x8, 0x7ff, 0xfe0, 0x5, 0xfb68, 0xfffff000, 0x2d5b, 0x9, 0x1, 0xff, 0x3, 0xb, 0x8, 0xa0, 0x7, 0x7, 0x7fff, 0x0, 0x98b5, 0x986, 0x1ff000, 0x7, 0x7a3, 0x1, 0x6, 0x10000000, 0x4, 0x2, 0x6, 0x6000, 0x5, 0x6, 0x1ff, 0x9, 0xc8bb76df, 0x36, 0x5, 0x6, 0x3, 0x5, 0xa30, 0x5b, 0x2, 0xfffffffd, 0x0, 0x9, 0x3, 0x8], 0x1, [{[0x5b, 0x9d], @rand_addr=0x64010101}]}, {[0x8, 0x697d1bc0, 0x0, 0x5, 0x6, 0xa, 0x6, 0x5, 0x1, 0x8e8a, 0x3, 0xffffffff, 0x6, 0xc0000000, 0x5e1c, 0x2, 0x6, 0x5, 0x9, 0x3, 0x8001, 0xffff, 0x3, 0x0, 0x3, 0xc, 0x7, 0x6, 0x0, 0x5, 0xff, 0x8, 0x8, 0x9, 0xb, 0x3, 0x50a3, 0x0, 0x6, 0x2986b000, 0x6, 0xfff, 0x200, 0x5, 0xf49, 0x6c01, 0x6, 0x6, 0x9, 0x0, 0x3f, 0x0, 0x6055, 0x8, 0x4, 0x7, 0xfffffff8, 0x8, 0xffffff00, 0x4, 0x8, 0x10000, 0xfffffff1, 0x80000000, 0xfffffffc, 0x8, 0xa786, 0x1, 0xc, 0x7, 0x7, 0xe, 0xa, 0x3, 0x3, 0x4, 0xffffffff, 0xed, 0x929, 0x1, 0x2, 0x6, 0x6, 0x1, 0xaa, 0xffffc000, 0x10000, 0x48e, 0xfffffff7, 0x7, 0x9, 0x6, 0x1, 0x4, 0x0, 0x2, 0x4, 0xffffffff, 0x9, 0x9, 0x9, 0xd, 0x4, 0x2, 0x7, 0x9, 0x5, 0x6, 0x5, 0xa, 0x2, 0x2, 0x2, 0x6, 0x1, 0x3, 0x1ff, 0x7fffffff, 0x3, 0x1, 0x0, 0x1, 0xfffffffd, 0x0, 0x8, 0x6c18, 0x168a, 0x2, 0x7fffffff, 0x13, 0x2, 0x8, 0x815f, 0x2, 0x10000, 0x0, 0x1216, 0x0, 0x3, 0x7, 0x8a0, 0x7fff, 0x7, 0x2, 0x1000000, 0x9, 0x0, 0x0, 0x6, 0x8, 0x7, 0x1, 0x4, 0x6, 0x9, 0x9, 0x10, 0x0, 0xc4e5, 0x0, 0x7, 0x5, 0xe7a0, 0x8b, 0x9, 0x3, 0x1, 0xfffffffb, 0x6, 0x5, 0xfff, 0x7, 0x7, 0xe7b0, 0x0, 0xf88a, 0x6, 0x2, 0x1800, 0x7, 0x8, 0x7fff, 0x0, 0xfffffff8, 0x1, 0x5, 0x3, 0xe, 0xbefc, 0x2, 0x4, 0x101, 0xc00, 0xb, 0x8ac, 0x7, 0x4, 0x5ed47d39, 0x7fff, 0x400, 0x5, 0x5, 0x6, 0x5, 0x7fffffff, 0x9, 0x5, 0x2, 0x5, 0x80, 0x40, 0xff, 0x3, 0x10, 0x2, 0xe1, 0x0, 0xf8cd, 0x4, 0xfff, 0x6, 0x1, 0x8000, 0x1, 0xd15, 0xd85, 0x8001, 0xfffffc01, 0x0, 0xfffffff9, 0x1, 0x400, 0x4, 0x0, 0x5, 0x5, 0x6, 0xfffffffd, 0xfff, 0x570, 0x2, 0x9, 0x9, 0x80000001, 0x5, 0x6, 0xc9fa, 0x100, 0x3, 0x4, 0x5, 0x17f, 0x7c, 0xb03a, 0x6, 0x0, 0x8], 0x7, [{[0x8, 0x80000001], @private=0xa010101}, {[0x370d, 0xfffffffa], @multicast2}, {[0x6, 0x1], @remote}, {[0x4, 0x9], @initdev={0xac, 0x1e, 0x0, 0x0}}, {[0x4, 0xffff], @local}, {[0x7, 0x2c], @private=0xa010100}, {[0x8, 0x7], @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}}, @quota={{'quota\x00', 0x0, 0x18}, {{0x1, 0x0, 0xfffffffffffffffd, {0x4}}}}], [], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x7, {0x31}}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x0, 0x12, 0x9100, 'netdevsim0\x00', 'veth1_to_batadv\x00', 'syzkaller0\x00', 'sit0\x00', @empty, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], @broadcast, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x10}}}], @snat={'snat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}}}}, {0x3, 0x8, 0x6004, 'veth0_to_team\x00', 'veth0_to_batadv\x00', 'vxcan1\x00', 'bond_slave_1\x00', @local, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@local, 0xfffffffffffffffd}}}], @snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xfffffffffffffffc}}}}]}]}, 0xd40) sendmsg$nl_generic(r10, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) rename(0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4048aec9, 0x0) (async) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4048aec9, 0x0) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, 0x0, 0x0) 3.774553447s ago: executing program 3 (id=753): r0 = socket$kcm(0x10, 0x2, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x5, "cdfaaf7254f4ef6249f068fcdd7e1cbd"}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000880)="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", 0x15d}, {&(0x7f0000000240)="92c8308f50bba2da5ee082c3b8dfae49dd913523b57daa0c3360c48ac2dfb3c6966fcbe70c4b01053f175c14d0139d4521b8458fcc5c4950702163dabc8596fafcbf867a70f93838c529160935b2e8d215daa857d8d8af704772858ca50a7a49e610c807b96eae4617639b498aec97ad751e6a924fbe1ce6c356f36146cc623822d4", 0x82}, {&(0x7f0000002500)="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", 0xad8}], 0x3}, 0x810) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x35, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000000c0)='source', &(0x7f00000003c0)='\xbar$s\xfe\xd8/\xb75F\x98++\b\xbf\x93I^\xc4U\xdc\x80\xa4\xed:Y\xa3\xee\xd7]\xdb\x06\xf5\xc6^\x99U\x82\x1e\x03\v\x18\x8a5 7@5\x17L\xb7\xba[\x1c\xca`\x166\xe8{B\xdd*a-\xf6K\xae\xc4-YN\v\xf4(\xadx\xab1\x01k\xb7k\"$\x9b\x11w\x9es\xc9\x1b\xcf\xfd]\x1c4ex\xe72\xa8\x9a\xd0\x11\x04X8\x8b}\xc7\xaa?\xcd\xbcxw', 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@getchain={0x64, 0x66, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x8, 0xc}, {0x8, 0x2}, {0x10, 0x7}}, [{0x8, 0xb, 0x8001}, {0x8, 0xb, 0x2c5ce2ef}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x12e}, {0x8, 0xb, 0x101}, {0x8}, {0x8}, {0x8, 0xb, 0x5}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd25, 0x25df9bfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x7, 0xffff}}]}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048090}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="fc6be8ef29fa9c555d0bd5d2aca8a9fdf64fe6e1eacc04da274d2be070b702ef24053a487cb020edf70544f93e7d949e006d3ac90ceb1ed8bc96a086c4b77e369934ba77581c20b86c79ff811b2e026b9b6c40ca145e68e3f90087661e93af65f7899c4e1f03fddd1d2386fdc978343592765e2ca23b1d194d258247c607a04af186dbe81dcde552620ec1becfedbf8dea5372ff3bb88ada409edcc370797b0d4b8a48ec04c47a375b568ebc6bc3e90206e58d7b6e74f0c8ab0812a5ba7dde847133a42b1d00d915116861922484", @ANYRESOCT=r1, @ANYRESDEC=r8, @ANYBLOB="1b2629e8eb71d95002f821ffa3a6e05e09435c365980049c07a89c76f27ea0d3954499bb489cd218aa0d95c51108259a4d0e3b05fa2a14d1d9db8fdaff3f408d46283ac5b281e7972e46485ae98768657a8bf3aad2a231f23df80838bdf40855ec28675441853a9b12ff00809c09bbd567979e00535f837c1a5f3bb1a94d06283290989b5ad505c0d2883be2bcf3df67f84bb2a07bf2d7ba3196baa74cf7a8fea083dafbe8e9b941", @ANYRESDEC, @ANYRESOCT=r5, @ANYRESDEC=r5], 0x2c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) 2.759546502s ago: executing program 3 (id=754): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x82881, 0x0) pwritev2(r0, 0x0, 0x0, 0xffffffff, 0x800, 0x19) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r1, 0xffffff61, 0x0) (async) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='1\x00'], 0x20) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020600) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, r2, 0x0, 0x46) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x20}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) 2.307994986s ago: executing program 3 (id=755): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYRESOCT, @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x2400c440) r0 = openat$kvm(0x0, &(0x7f0000000300), 0x22382, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x5, @empty, 0x3}, 0x1c) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv2(r3, &(0x7f0000000300)=[{&(0x7f0000000340)=""/65}, {&(0x7f00000000c0)=""/157}, {&(0x7f0000000180)=""/226, 0x3b}], 0x3a, 0x2, 0x80000400, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="3400000000000000000000000000ff0000000080fcd35f31f6178dda5a9c6ea8b252f4f84ceef4793299c043aac0008df5f752685675f76af552c810ed129b48724402535de9c9bcd0530b8e9ad5a619552a74f3698f82f1ea8c48f5a9c486c0473fc86c8b536eb7ec0519a41d3fd92dd2877e3a48f0fd0be82dfa4d5623513501bbe93817d24854e67ed9b98118419c11696d8ea97c97150d76bfa236ae4b0856d649e2c4b5991f76da510b1426e6253e0c4696cb2d0623a2d385d9", @ANYRES32=0x0, @ANYBLOB="00000000239804001400128009000100766574680000000004000280"], 0x34}}, 0x4000004) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r8, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/57, 0x39}, 0x202) sendmsg$nl_route(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000061000001400b801a1b699ab1be8ee47676ee39a3f69627c7612800b000100011cc738892d92f04c6a"], 0x40}, 0x1, 0x0, 0x0, 0x48085}, 0x40080c0) io_setup(0x28d8, &(0x7f0000000040)) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder1\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) ptrace$ARCH_GET_GS(0x1e, 0x0, &(0x7f0000000080), 0x1004) eventfd(0xfffffffb) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 1.940818951s ago: executing program 3 (id=756): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a40)={{0x12, 0x1, 0x0, 0x40, 0xd0, 0x7d, 0x40, 0x1286, 0x1fa4, 0xfb16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x70, 0x0, 0x1, 0xee, 0x67, 0x8, 0x0, [], [{{0x9, 0x5, 0x2, 0x10, 0x400, 0x3, 0x3}}]}}]}}]}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x14) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000100)={@local, @random="be9689ce9f88", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2d, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @redirect={0x5, 0x1, 0x0, @local, {0x10, 0x4, 0x2, 0x8, 0x2, 0x67, 0x1442, 0x6, 0x33, 0x7, @local, @private=0xa010100, {[@cipso={0x86, 0x29, 0x3, [{0x1, 0x3, "1d"}, {0x0, 0xa, "f72d954f1ef68f49"}, {0x1, 0x10, "5d7923f880c66fae940c4981c5b4"}, {0x5, 0x6, "d53be383"}]}]}}}}}}}, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x20000004, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x8d2, 0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0x30, 0x6000, @fd_index=0x4, 0x0, 0xf8, 0x306, 0x1, 0x0, {0x2}}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 1.938389969s ago: executing program 0 (id=757): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip6gretap0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r0, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="5b00000000000000000000000020000000010000d5af10a742440c1bd8d3de051c28fcd028660d6eecf792dd2bb123bca68ebc1ee1fdc91fec5c1d8130399bc3bfaf58daf15c838018030b97521870711c42992689af73e34483c94ba2ae37d622b0b3ec84", @ANYRES8=r1, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYRES16=r1, @ANYRES8=r1, @ANYRESHEX=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040bd28050900000000000109022400010000000009040200010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00017c"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3f, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0xc040) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x26000, 0x0) open(0x0, 0x8001, 0x104) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x240640, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) mprotect(&(0x7f00004a4000/0x3000)=nil, 0x3000, 0x3000005) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000200), 0x80000001, 0x5a400) syz_open_dev$sndctrl(&(0x7f0000000280), 0x1, 0x539202) syz_open_procfs(0x0, &(0x7f0000000540)='net/igmp\x00') openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18) set_mempolicy(0x2, 0x0, 0xf5) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 1.870702846s ago: executing program 2 (id=758): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) accept$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x1c) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r1) tkill(r1, 0x2) unshare(0x2c020400) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340), &(0x7f0000000240)) socket$inet(0x10, 0xa, 0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x24000000) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x890042, 0x0) ioctl$SNDCTL_DSP_STEREO(r5, 0xc0045003, &(0x7f0000000040)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r7, 0x0, 0x29, 0x0, 0x28) r8 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000340)={0x2, @vbi={0x4, 0x5, 0x6, 0x3447504d, [0x8000, 0x8], [0xffffffff, 0x1], 0x13a}}) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) 1.767813627s ago: executing program 4 (id=759): syz_usb_connect(0x3, 0x2d, &(0x7f0000002280)=ANY=[], 0x0) syz_usb_connect$cdc_ncm(0x4, 0x78, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x2, 0x1, 0x0, 0x60, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, 'x-'}, {0x5, 0x24, 0x0, 0x3}, {0x24, 0x24, 0xf, 0x1, 0x1, 0x6, 0x5, 0x4}, {0x6, 0x24, 0x1a, 0x8, 0x2a}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x6, 0xfffe}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x81, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x40, 0x1, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6, 0xa, 0x81}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x40, 0x9, 0x5, 0x10, 0x2}, 0x195, &(0x7f0000000100)={0x5, 0xf, 0x195, 0x6, [@generic={0xf8, 0x10, 0xb, "f151ec19dfa0245fb1524ba1ede55785ed51f428e3f30683f84ad340baa604cbbbc4cbd20bf846aeb67b376cd070634c4afedb700fce50bc5e199395d2adaa2406c9da65781b1faefa87429177e3c543f0696a8ecd7110006d79a07d31c311cd08fbc7f8a8d62d4f1c147efc0797120bfea5b70e0055349e0c8bcb823046d45a4c19acfa914a7dc83e71958040749078479a1b94c919f746ce78f9d0307219e2f1162b101a0803109467916f958f1c517c33e7fdc1c28e16ce2ccfdd4c9f7bd673333d3efc4c5c61437e2dccbb4841b73afb73090d40bc5a5b6ef95ab99d33911314495bbdb005dfd11616bd8f04d4d8f0318de2d2"}, @generic={0x74, 0x10, 0x3, "bb8e58e1b4b35e9f65d95eed09cfba5dcc405002a9b43e5b27192fb64059034bc105eedf2f34847001a8bdf2de4ddcab8f39765bc81abff4b37dceaf093e6275df62ebf94f6ee36e8d918952f61e3cf80f793efa44eab9261b3001a2dfa10db9865212e5b22c66436ab7d049a022a08ef0"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x60, 0x4, 0xf3, 0x0, 0x1}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0xa, 0xff, 0x3, 0x101, 0xcb}, @wireless={0xb, 0x10, 0x1, 0x4, 0x6, 0x9, 0x40, 0x7, 0x3}]}, 0x7, [{0x30, &(0x7f00000002c0)=@string={0x30, 0x3, "223c2e33b8e544eef2b71b27b8b8ab4952d79821072b0d0ab758bb073134e4a9bb871c0f297000b79747b5b34353"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1801}}, {0x40, &(0x7f0000000340)=@string={0x40, 0x3, "3edbb7ac686c9b8c15534a98a8855a18a6888f9480a0f691e36a533d3469e9808346f62fa292e62c7b809819380c3cbe98456d016d72fbfb84d8612c6a90"}}, {0xbf, &(0x7f0000000380)=@string={0xbf, 0x3, "7be254ed808ef3100b3f63d9db0f5a49edb01a1ce0dc4693bcd3ec93cdbd185abf37bda782381973e2034c4d5d08f0c31f985afbe4082e702e59a9e59c8b3478fe986fbede0a954bc4e938cc4f8cc41a42b3bb8331cccf31b9b51f4d0d7e93d8fdaeda7e5535d1ded5b350f35c501f68f545ee5d33847946510e1699fbf80866a5aa22bc9306cb434f952ad946d8015ac8fe1c22ce53af4715a9fc6fff0dbf1f374d1f3db9e867b473835ff508791b491dff61b387082798e59ca33ef6"}}, {0x50, &(0x7f0000000440)=@string={0x50, 0x3, "d100147cec8539343e1d7c387f981107d666f645b286dcabbcceb5d6568d6f6697b6b420e73e2c2d65f6cc533033431f4384c269360ff1fbecbf9a5efd1eccee7741b5595018b12e144525b9f073"}}, {0xdc, &(0x7f00000004c0)=@string={0xdc, 0x3, "cc4ff9ffea6f975e4b110307e08e68f98b6c8009189b0653c17095286e40fc0af8187b5fdb52bb30cb96824c728e7938dd17a7af289d939ec2a76479a07710cb9790e75ea99c643292f77bea8c53dd23bfbde75a81b0d16e218f141a6dc3422766ca892c479f4816cfb359aa5d9424def98ecb265c4529b25448a54d21f7b56e1987c412b055ea2c511a479babb2b72eee3f5c6a9bbfd12ca9bc51e537a54d7684b21b5fb0d1aebf3cd054adafb0b5e5f8ffe995d29d0afbde70fec33b9a9757c8543a15f8e74e04dfbaae3d3a04f9a324786b6b209aae86d0fd"}}, {0xb4, &(0x7f00000005c0)=@string={0xb4, 0x3, "8d4c42ee693a381d4f875a616827c9ff0cde78607ff1b38306501141729f3739e5f8db495c5ba13f8401709cdce6cdafc34417e8a18444883ee6dba583a7d61f4b64dfa9b472011b8a99b79f38bb556c778a9132b36b171153763997f0bf6d8afd103e4312400ffa5cf90d2247cd8df89fbfa89b27c18377748cdce52b05a834b96a5379ba46157d8f867b4e4cd814457b41daad8d7994fd510793d3f10558782c0d6abc24d041e1b4e6cc463dbcdfd5bf03"}}]}) r0 = syz_open_dev$audion(&(0x7f0000000040), 0x7b, 0x801) write$UHID_INPUT(r0, &(0x7f0000000800)={0x8, {"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", 0x1000}}, 0x1006) 970.620251ms ago: executing program 2 (id=760): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[], 0x7c}}, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x88}}, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000a06010200000000000000000a000013050001"], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x104}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, 0x0, &(0x7f0000000440)='GPL\x00'}, 0x94) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x204202, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000580)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f7928c4c1c1d38601000000", 0x4c}], 0x1, 0x21, 0x0, 0x0) symlink(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040850}, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)={0x9f5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x288042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f00000000c0)="e06921e8682d85ff97828d11e0", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4000000}, 0x50) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0x2, 0x0, 0x0}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x5, 0x80000001, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x10000, 0x3, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x40}, {0x2, 0x10000, 0xc, 0xff, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x4000, 0x1000, 0xc, 0x0, 0x6, 0xc4, 0x0, 0xf, 0x7, 0x0, 0x0, 0xfc}, {0x1, 0x0, 0x9, 0x0, 0x1, 0x0, 0x9, 0xff, 0x8, 0x0, 0x4}, {0x6000, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x4b, 0x2, 0x0, 0x0, 0xff, 0x5}, {0xeeef0000, 0xeeee8000, 0x10, 0x4, 0x0, 0x0, 0xa1, 0x20}, {0x0, 0x6000, 0x0, 0x0, 0x0, 0x7, 0x28, 0x40, 0x26, 0x1, 0x0, 0xa}, {0x80a0000, 0x3}, {0x5000}, 0xfdfcfffb, 0x0, 0x0, 0x100, 0x3, 0xf801, 0x0, [0x80000001, 0x0, 0x1]}) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000240)=@arm64={0xd, 0xa, 0x2, '\x00', 0x2}) 650.620921ms ago: executing program 2 (id=761): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, 0x0, 0x0, 0x7, 0x0) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x13, 0x0, 0x40) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), 0x0, 0x2402, &(0x7f0000000400)=ANY=[@ANYBLOB="66d1fc67f39a61afa251bc4bd76c4b642d71c760989b5fcc8189071e729385ef35af3ce720858eb12a1fb01003319364137ff53328c17b2efa77e1275a4a68af84892abe673b47408a94e4ea757c6b94cb9483bb6e3ce5a0e1922272255dd0ae218b10bba5be4d38550c9b184e2fe752096b", @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000002060108000000000000000004000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e657400000000"], 0x50}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000706010800000000000000000000000005000100060000009ab1ac3260a9f31955a940310a592d0f609ae61dfcc6694c35f065322b944b97279843cba178ec3d243c7b241729b236831e23b10f5c7b75ec50ea59914bf8499b3a9ab10a48240edb38815b6484d5a533e563c38454f62f5bf58f66fcb613739ce471d033e3144176c1aedc000000000000000091eba5f0fdf5b48f6ca78a054fdc87b253114aa7618491829b78e7eec076839935fdb1b2055f01f99dffcee9cdf0c8eae21c2628d96dbeebf56343a52b32ffa97e2db8fb73dfd0"], 0x1c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0xffffffffffffff92, 0x0, 0x1, 0x0, 0x0, 0x4000c0c0}, 0x800) lremovexattr(&(0x7f0000002840)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="759b3867d8"]) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0xaf0b, 0x8, 0x1004, 0xfb}, &(0x7f0000000340)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) write$UHID_INPUT(r0, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) 312.859908ms ago: executing program 1 (id=762): socket(0xa, 0x3, 0x3a) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000580)=0xe) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$l2tp(0x2, 0x2, 0x73) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1}, 0x0, &(0x7f0000000300)}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0xf}, {0x1, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfb, 0x86, "d97cff", 0x101, 0x6}]}}}, 0x12) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f00000003c0)={0xa, 0x0, 0x0, {0x80000004, 0x1, 0x2, 0x8800001}}) read$dsp(r0, &(0x7f0000000400)=""/174, 0xae) sendto$inet6(r5, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e", 0x87, 0x0, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="61102600000f00000000a66222f4f90200"/28], &(0x7f0000000200)='GPL\x00'}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x11, 0x3, 0x4000000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000880)={'ip6gretap0\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{0x0}, {0x0, 0xdd12}], 0x2, 0x0, 0x0, 0x24000880}, 0x20040051) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)=0x6) dup3(r1, r2, 0x80000) 0s ago: executing program 0 (id=763): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111, 0xa}}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'vlan0\x00', 0x1000}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x50000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'veth1_macvtap\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'rose0\x00'}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x200008b1}, 0x4000) (async) sendmmsg$unix(r2, &(0x7f0000000180)=[{{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001980)}}], 0x1, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x400000000000384, 0x40002100, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f00000003c0)={0x38, 0x5, 0x1000005d, 0x8001, 0x0, 0x9, 0x3, 0x7, 0xfa11, 0xffffffff}, 0x0) (async) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c02cacff324f9ce5b82578c3a63934bc8fb", @ANYRES16=r10, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c0002800c00018008000100030000000c0001800800"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) (async) r11 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x4000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000540)="3e45d9fab9800000c03d32660f38806f110f30670f303e2e6465490f38f65a0bc4e18173f53866baf80c3e400f01c8c402e3f6bd4000000066bafc0c66b88e0066ba4100b000eec01aa8000041460f2007", 0x51}], 0x1, 0x23, 0x0, 0x0) (async) ioctl$KVM_RUN(r12, 0xae80, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bond0\x00'}) kernel console output (not intermixed with test programs): 9890][ T10] nzxt-smart2 0003:1E71:2009.0019: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 197.810447][ T7578] loop2: detected capacity change from 0 to 7 [ 197.817660][ T7578] loop2: [ 197.821381][ T7578] loop2: partition table partially beyond EOD, truncated [ 198.628686][ T7556] delete_channel: no stack [ 198.894429][ T7561] tun0: tun_chr_ioctl cmd 2147767517 [ 199.253153][ T7589] netlink: 132 bytes leftover after parsing attributes in process `syz.0.424'. [ 199.357651][ T6232] usb 2-1: USB disconnect, device number 20 [ 199.364763][ T5902] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 199.673657][ T5902] usb 3-1: Using ep0 maxpacket: 32 [ 199.776699][ T7595] bridge0: entered promiscuous mode [ 199.791153][ T5902] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 199.815072][ T5902] usb 3-1: config 0 has no interface number 0 [ 199.821251][ T7595] bridge0: entered allmulticast mode [ 199.831370][ T5902] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 199.852199][ T5902] usb 3-1: config 0 interface 85 has no altsetting 0 [ 199.891386][ T5902] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 199.900887][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.909097][ T5902] usb 3-1: Product: syz [ 199.913288][ T5902] usb 3-1: Manufacturer: syz [ 199.918136][ T5902] usb 3-1: SerialNumber: syz [ 199.925402][ T5902] usb 3-1: config 0 descriptor?? [ 200.148026][ T5902] appletouch 3-1:0.85: Failed to read mode from device. [ 200.172292][ T5902] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 200.233756][ T5881] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 200.314277][ T6232] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 200.442792][ T5911] gspca_stk1135: reg_w 0x352 err -71 [ 200.448217][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 200.457717][ T5911] gspca_stk1135: serial bus timeout: status=0x00 [ 200.475304][ T5881] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.486620][ T5911] gspca_stk1135: Sensor write failed [ 200.491955][ T5911] gspca_stk1135: serial bus timeout: status=0x00 [ 200.519723][ T5881] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.530866][ T6232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.543228][ T5902] usb 3-1: USB disconnect, device number 25 [ 200.556435][ T5911] gspca_stk1135: Sensor write failed [ 200.561743][ T5911] gspca_stk1135: serial bus timeout: status=0x00 [ 200.582349][ T5881] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 200.584518][ T6232] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 200.623780][ T5911] gspca_stk1135: Sensor read failed [ 200.629024][ T5911] gspca_stk1135: serial bus timeout: status=0x00 [ 200.632643][ T6232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.643992][ T5881] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 200.666755][ T6232] usb 4-1: config 0 descriptor?? [ 200.683769][ T5911] gspca_stk1135: Sensor read failed [ 200.688978][ T5911] gspca_stk1135: Detected sensor type unknown (0x0) [ 200.727679][ T5881] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 200.754081][ T5911] gspca_stk1135: serial bus timeout: status=0x00 [ 200.763662][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 200.771652][ T5881] usb 2-1: SerialNumber: syz [ 200.780863][ T5911] gspca_stk1135: Sensor read failed [ 200.794357][ T5911] gspca_stk1135: serial bus timeout: status=0x00 [ 200.800688][ T5911] gspca_stk1135: Sensor read failed [ 200.814917][ T5911] gspca_stk1135: serial bus timeout: status=0x00 [ 200.821249][ T5911] gspca_stk1135: Sensor write failed [ 200.830181][ T5881] hub 2-1:1.0: bad descriptor, ignoring hub [ 200.841011][ T5881] hub 2-1:1.0: probe with driver hub failed with error -5 [ 200.853229][ T5911] gspca_stk1135: serial bus timeout: status=0x00 [ 200.862347][ T5911] gspca_stk1135: Sensor write failed [ 200.867778][ T5881] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 200.876577][ T5911] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 200.891325][ T6232] usbhid 4-1:0.0: can't add hid device: -71 [ 200.904244][ T5911] usb 5-1: USB disconnect, device number 22 [ 200.932376][ T6232] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 200.976594][ T6232] usb 4-1: USB disconnect, device number 28 [ 201.283957][ T7595] raw-gadget.0 gadget.1: fail, usb_ep_set_halt returned -11 [ 201.297521][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.431'. [ 201.514571][ T5911] usb 2-1: USB disconnect, device number 21 [ 201.583683][ T6232] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 201.588495][ T7616] netlink: 40 bytes leftover after parsing attributes in process `syz.2.432'. [ 201.847232][ T6232] usb 4-1: Using ep0 maxpacket: 32 [ 201.871737][ T6232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.883140][ T6232] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 201.908964][ T7621] loop2: detected capacity change from 0 to 7 [ 201.922898][ T6232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.927495][ T6770] loop2: [ 201.941243][ T6770] loop2: partition table partially beyond EOD, truncated [ 202.094735][ T6232] usb 4-1: config 0 descriptor?? [ 202.104313][ T7621] loop2: [ 202.107465][ T7621] loop2: partition table partially beyond EOD, truncated [ 202.110285][ T6232] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 202.148406][ T6232] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 202.577642][ T24] usb 4-1: USB disconnect, device number 29 [ 202.585096][ T24] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 202.693711][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 203.633919][ T5888] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 203.784059][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 203.805341][ T5888] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.816894][ T5888] usb 1-1: config 0 interface 0 has no altsetting 0 [ 203.823640][ T5888] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 203.842425][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.855076][ T5888] usb 1-1: config 0 descriptor?? [ 204.314873][ T5888] nzxt-smart2 0003:1E71:2009.001A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 205.407574][ T7627] delete_channel: no stack [ 205.576168][ T7669] netlink: 'syz.2.443': attribute type 30 has an invalid length. [ 206.043715][ T5895] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 206.213811][ T5895] usb 3-1: Using ep0 maxpacket: 16 [ 206.221537][ T5895] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.275918][ T5895] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 206.312797][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.432120][ T24] usb 1-1: USB disconnect, device number 21 [ 206.559438][ T7676] loop2: detected capacity change from 0 to 7 [ 206.606789][ T5895] usb 3-1: Product: syz [ 206.610974][ T5895] usb 3-1: Manufacturer: syz [ 206.636165][ T7676] loop2: [ 206.639140][ T7676] loop2: partition table partially beyond EOD, truncated [ 206.663784][ T5895] usb 3-1: SerialNumber: syz [ 206.794756][ T5895] usb 3-1: config 0 descriptor?? [ 206.816016][ T5895] mcba_usb 3-1:0.0: Can't find endpoints [ 207.633760][ T24] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 207.868053][ T24] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 207.894088][ T24] usb 2-1: config 6 has no interface number 0 [ 207.933940][ T24] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 207.968998][ T24] usb 2-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 208.018733][ T24] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 208.053491][ T24] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 208.063377][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.210555][ T7702] syzkaller0: entered promiscuous mode [ 208.217072][ T7702] syzkaller0: entered allmulticast mode [ 208.231830][ T24] usb 2-1: Product: syz [ 208.242268][ T24] usb 2-1: Manufacturer: syz [ 208.247015][ T5911] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 208.304120][ T24] usb 2-1: SerialNumber: syz [ 208.445723][ T24] hso 2-1:6.2: Failed to find INT IN ep [ 208.458864][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.476943][ T5911] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 208.540795][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.565554][ T983] usb 3-1: USB disconnect, device number 27 [ 208.570263][ T5911] usb 1-1: config 0 descriptor?? [ 208.868722][ T5911] usbhid 1-1:0.0: can't add hid device: -71 [ 208.874824][ T5911] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 208.884822][ T5911] usb 1-1: USB disconnect, device number 22 [ 209.228582][ T7708] netlink: 'syz.3.453': attribute type 1 has an invalid length. [ 209.387644][ T5911] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 209.460609][ T7708] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.643684][ T5911] usb 1-1: Using ep0 maxpacket: 32 [ 209.651385][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.677570][ T5911] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 209.690562][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.701682][ T5911] usb 1-1: config 0 descriptor?? [ 210.206921][ T5911] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 210.226392][ T5911] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 210.393416][ T7721] kvm: pic: non byte read [ 210.398492][ T7721] kvm: pic: non byte read [ 210.463871][ T5895] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 210.531223][ T5911] usb 2-1: USB disconnect, device number 22 [ 210.623776][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 210.639947][ T5895] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.668757][ T5895] usb 5-1: config 0 interface 0 has no altsetting 0 [ 210.676407][ T983] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 210.689641][ T5895] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 210.705372][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.723174][ T5895] usb 5-1: config 0 descriptor?? [ 210.747473][ T6232] usb 1-1: USB disconnect, device number 23 [ 210.757513][ T6232] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 210.833858][ T983] usb 4-1: device descriptor read/64, error -71 [ 211.003725][ T5911] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 211.084050][ T983] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 211.152285][ T5895] nzxt-smart2 0003:1E71:2009.001B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 211.164491][ T5911] usb 2-1: Using ep0 maxpacket: 8 [ 211.171404][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 211.183062][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 211.197126][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 211.208073][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 211.218392][ T5911] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 211.229046][ T5911] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 211.234504][ T983] usb 4-1: device descriptor read/64, error -71 [ 211.247220][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.260062][ T5911] usb 2-1: config 0 descriptor?? [ 211.358833][ T7732] netlink: 16 bytes leftover after parsing attributes in process `syz.0.459'. [ 211.369158][ T7732] netlink: 16 bytes leftover after parsing attributes in process `syz.0.459'. [ 211.369732][ T983] usb usb4-port1: attempt power cycle [ 211.475696][ T5911] usb 2-1: USB disconnect, device number 23 [ 211.605972][ T5881] usb 5-1: USB disconnect, device number 23 [ 211.743669][ T983] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 211.764403][ T24] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 211.777219][ T983] usb 4-1: device descriptor read/8, error -71 [ 211.925059][ T24] usb 1-1: config 0 has an invalid interface number: 245 but max is 0 [ 211.933293][ T24] usb 1-1: config 0 has no interface number 0 [ 211.939502][ T24] usb 1-1: New USB device found, idVendor=699b, idProduct=9cbd, bcdDevice=76.2a [ 211.948588][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.958564][ T24] usb 1-1: config 0 descriptor?? [ 212.034457][ T983] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 212.064412][ T983] usb 4-1: device descriptor read/8, error -71 [ 212.188018][ T983] usb usb4-port1: unable to enumerate USB device [ 212.358755][ T7711] delete_channel: no stack [ 212.553691][ T5881] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 212.697271][ T5881] usb 2-1: device descriptor read/64, error -71 [ 212.946908][ T5881] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 213.083963][ T5881] usb 2-1: device descriptor read/64, error -71 [ 213.196337][ T5881] usb usb2-port1: attempt power cycle [ 213.205135][ T7751] netlink: 'syz.4.464': attribute type 3 has an invalid length. [ 213.429530][ T7757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.564615][ T5881] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 213.612237][ T5881] usb 2-1: device descriptor read/8, error -71 [ 213.784123][ T7759] netlink: 16 bytes leftover after parsing attributes in process `syz.4.466'. [ 213.883742][ T5881] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 213.923687][ T50] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 213.941517][ T5881] usb 2-1: device descriptor read/8, error -71 [ 213.950126][ T5911] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 213.958331][ T50] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 213.966172][ T5902] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 214.055669][ T5881] usb usb2-port1: unable to enumerate USB device [ 214.114732][ T5881] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 214.208651][ T5902] usb 4-1: Using ep0 maxpacket: 32 [ 214.267791][ T5902] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 214.288173][ T5902] usb 4-1: config 0 has no interface number 0 [ 214.297706][ T5902] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 214.308496][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.317830][ T5911] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 214.332307][ T5902] usb 4-1: Product: syz [ 214.336731][ T5902] usb 4-1: Manufacturer: syz [ 214.341343][ T5902] usb 4-1: SerialNumber: syz [ 214.353360][ T5902] usb 4-1: config 0 descriptor?? [ 214.370120][ T24] usb 1-1: string descriptor 0 read error: -71 [ 214.382458][ T24] usb-storage 1-1:0.245: USB Mass Storage device detected [ 214.399774][ T5902] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 214.490273][ T24] usb 1-1: USB disconnect, device number 24 [ 214.550454][ T7769] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 214.557475][ T7769] team0: Device ipvlan2 failed to register rx_handler [ 214.620421][ T5902] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 214.708545][ T5902] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 215.013113][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 215.013627][ T983] usb 4-1: USB disconnect, device number 34 [ 215.028642][ T5895] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 215.054480][ T983] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 215.071525][ T983] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 215.097279][ T983] quatech2 4-1:0.51: device disconnected [ 215.193665][ T5895] usb 3-1: Using ep0 maxpacket: 16 [ 215.207941][ T5895] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.228315][ T5895] usb 3-1: config 0 interface 0 has no altsetting 0 [ 215.236291][ T5895] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 215.250679][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.272185][ T5895] usb 3-1: config 0 descriptor?? [ 216.082634][ T5895] nzxt-smart2 0003:1E71:2009.001C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 216.143679][ T5902] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 216.578814][ T5902] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 216.607797][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 216.666797][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 216.670254][ T5895] usb 3-1: USB disconnect, device number 28 [ 216.682585][ T5902] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 216.721779][ T5902] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 216.735708][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.821972][ T5902] usb 2-1: config 0 descriptor?? [ 216.839689][ T7779] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 217.271419][ T5902] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 217.527142][ T7810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.479'. [ 217.537530][ T5902] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 217.553704][ T24] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 217.600099][ T7811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.612156][ T7811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.673722][ T5902] usb 4-1: device descriptor read/64, error -71 [ 217.685346][ T7814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.700102][ T7814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.708489][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 217.719221][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 217.719235][ T30] audit: type=1804 audit(1762997763.793:62): pid=7811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.472" name="/newroot/103/file1" dev="fuse" ino=1 res=1 errno=0 [ 217.748046][ T24] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 217.762039][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 217.785742][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 217.800045][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 217.819996][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 217.833782][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 217.842903][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.943820][ T5902] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 218.013821][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 218.061463][ T24] usb 3-1: GET_CAPABILITIES returned 0 [ 218.067073][ T24] usbtmc 3-1:16.0: can't read capabilities [ 218.077940][ T5902] usb 4-1: device descriptor read/64, error -71 [ 218.204743][ T5902] usb usb4-port1: attempt power cycle [ 218.321410][ T10] usb 3-1: USB disconnect, device number 29 [ 218.532847][ T7825] netlink: 'syz.0.483': attribute type 13 has an invalid length. [ 218.553667][ T5902] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 218.611366][ T5902] usb 4-1: device descriptor read/8, error -71 [ 218.625561][ T7827] binder: BINDER_SET_CONTEXT_MGR already set [ 218.648706][ T7827] binder: 7826:7827 ioctl 4018620d 200000000100 returned -16 [ 218.661668][ T7784] delete_channel: no stack [ 218.767171][ T7827] binder: 7826:7827 ioctl c0306201 200000000080 returned -11 [ 218.873708][ T5902] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 218.951699][ T7835] netlink: 24 bytes leftover after parsing attributes in process `syz.0.486'. [ 218.965473][ T7838] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 218.965473][ T7838] The task syz.4.485 (7838) triggered the difference, watch for misbehavior. [ 219.014313][ T5902] usb 4-1: device descriptor read/8, error -71 [ 219.060295][ T7840] loop6: detected capacity change from 0 to 524288000 [ 219.134139][ T5902] usb usb4-port1: unable to enumerate USB device [ 219.258076][ T983] usb 2-1: USB disconnect, device number 28 [ 219.654307][ T983] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 219.803960][ T983] usb 2-1: Using ep0 maxpacket: 16 [ 219.813969][ T983] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.832911][ T983] usb 2-1: config 0 interface 0 has no altsetting 0 [ 219.843840][ T5895] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 219.873635][ T983] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 219.923695][ T983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.982091][ T983] usb 2-1: config 0 descriptor?? [ 220.076560][ T5895] usb 3-1: Using ep0 maxpacket: 32 [ 220.095615][ T5895] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 220.113660][ T5895] usb 3-1: config 0 has no interface number 0 [ 220.134638][ T5895] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 220.195535][ T5895] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 220.210246][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.230467][ T5895] usb 3-1: Product: syz [ 220.234787][ T5895] usb 3-1: Manufacturer: syz [ 220.239496][ T5895] usb 3-1: SerialNumber: syz [ 220.262318][ T5895] usb 3-1: config 0 descriptor?? [ 220.281928][ T7849] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 220.534001][ T983] nzxt-smart2 0003:1E71:2009.001E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 220.545919][ T7849] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 220.771430][ T7849] netlink: 'syz.2.491': attribute type 1 has an invalid length. [ 220.903150][ T5911] usb 2-1: USB disconnect, device number 29 [ 220.953746][ T5902] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 221.103681][ T983] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 221.261276][ T7867] bond3: (slave bridge2): making interface the new active one [ 221.276566][ T5902] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.334858][ T7867] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 221.335080][ T5902] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 221.377012][ T5902] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 221.479966][ T983] usb 5-1: Using ep0 maxpacket: 32 [ 221.509026][ T983] usb 5-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 221.523697][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.523884][ T983] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 221.570401][ T983] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 221.571316][ T5902] usb 4-1: config 0 descriptor?? [ 221.580033][ T983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.595864][ T983] usb 5-1: Product: syz [ 221.615175][ T983] usb 5-1: Manufacturer: syz [ 221.620058][ T983] usb 5-1: SerialNumber: syz [ 221.640689][ T983] usb 5-1: config 0 descriptor?? [ 221.859778][ T5902] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 221.879940][ T5895] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 221.880721][ T5902] dvb-usb: bulk message failed: -22 (3/0) [ 221.950936][ T5902] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 221.961476][ T5911] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 221.970004][ T5902] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 221.977189][ T5902] usb 4-1: media controller created [ 221.987765][ T5902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 221.991712][ T5895] asix 3-1:0.188: probe with driver asix failed with error -32 [ 222.067501][ T5895] usb 3-1: USB disconnect, device number 30 [ 222.174944][ T5911] usb 2-1: unable to get BOS descriptor or descriptor too short [ 222.266220][ T5902] dvb-usb: bulk message failed: -22 (6/0) [ 222.279746][ T5902] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 222.288956][ T5911] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.319858][ T5911] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 222.336038][ T5902] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input25 [ 222.393959][ T5911] usb 2-1: config 1 interface 1 has no altsetting 0 [ 222.403818][ T5902] dvb-usb: schedule remote query interval to 150 msecs. [ 222.473991][ T5902] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 222.542289][ T5911] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 222.571973][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.604387][ T5895] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 222.629019][ T5911] usb 2-1: Product: syz [ 222.635883][ T5902] dvb-usb: bulk message failed: -22 (1/0) [ 222.639911][ T7877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.497'. [ 222.653784][ T7877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.497'. [ 222.653814][ T5902] dvb-usb: error while querying for an remote control event. [ 222.674225][ T5911] usb 2-1: Manufacturer: syz [ 222.696374][ T5911] usb 2-1: SerialNumber: syz [ 222.763698][ T5895] usb 1-1: Using ep0 maxpacket: 8 [ 222.779494][ T5895] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 222.788903][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.805447][ T5895] usb 1-1: Product: syz [ 222.821546][ T5895] usb 1-1: Manufacturer: syz [ 222.836576][ T5895] usb 1-1: SerialNumber: syz [ 222.852621][ T5895] usb 1-1: config 0 descriptor?? [ 222.887011][ T5895] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244) [ 222.963170][ T5902] dvb-usb: bulk message failed: -22 (1/0) [ 223.046451][ T5902] dvb-usb: error while querying for an remote control event. [ 223.054995][ T5881] usb 4-1: USB disconnect, device number 39 [ 223.187182][ T5881] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 223.283298][ T7874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.294242][ T7874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.579938][ T5895] radio-usb-si4713 1-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 223.673867][ T5895] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 223.736248][ T5881] usb 5-1: USB disconnect, device number 24 [ 223.746843][ T5895] usb 1-1: USB disconnect, device number 25 [ 224.219964][ T7893] netlink: 48 bytes leftover after parsing attributes in process `syz.3.500'. [ 224.584116][ T983] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 224.695459][ T7908] netlink: 7 bytes leftover after parsing attributes in process `syz.3.507'. [ 224.728984][ T7908] netlink: 68 bytes leftover after parsing attributes in process `syz.3.507'. [ 224.773918][ T983] usb 3-1: Using ep0 maxpacket: 16 [ 224.785005][ T983] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.796039][ T983] usb 3-1: config 0 interface 0 has no altsetting 0 [ 224.807572][ T983] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 224.842583][ T983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.867527][ T983] usb 3-1: config 0 descriptor?? [ 225.102118][ T5911] usb 2-1: USB disconnect, device number 30 [ 225.262002][ T7915] fuse: Unknown parameter '0000000000000000000000400000000000000000003' [ 225.278520][ T7915] ipip0: entered promiscuous mode [ 225.284817][ T7915] ipip0: entered allmulticast mode [ 225.307374][ T7915] netlink: 28 bytes leftover after parsing attributes in process `syz.3.508'. [ 225.317349][ T7915] netlink: 72 bytes leftover after parsing attributes in process `syz.3.508'. [ 225.337031][ T983] nzxt-smart2 0003:1E71:2009.001F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 225.494428][ T5911] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 225.657498][ T5911] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 225.666386][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.679340][ T5911] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 225.700779][ T5911] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 225.710141][ T5911] usb 2-1: Manufacturer: syz [ 225.721458][ T5911] usb 2-1: config 0 descriptor?? [ 225.768165][ T983] usb 3-1: USB disconnect, device number 31 [ 225.795406][ T7926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.805299][ T7926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.853673][ T5911] rc_core: IR keymap rc-hauppauge not found [ 225.859795][ T5911] Registered IR keymap rc-empty [ 225.871384][ T5911] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 225.886779][ T5911] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input27 [ 225.947509][ T5895] usb 2-1: USB disconnect, device number 31 [ 226.023695][ T43] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 226.173899][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 226.185635][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 226.213545][ T7934] syz.4.512: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 226.213749][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.213778][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.230350][ T7934] ,cpuset= [ 226.241092][ T43] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 226.255310][ T7934] /,mems_allowed=0-1 [ 226.263830][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.266193][ T7934] CPU: 0 UID: 0 PID: 7934 Comm: syz.4.512 Not tainted syzkaller #0 PREEMPT(full) [ 226.266214][ T7934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 226.266225][ T7934] Call Trace: [ 226.266232][ T7934] [ 226.266240][ T7934] dump_stack_lvl+0x189/0x250 [ 226.266267][ T7934] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 226.266303][ T7934] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.266331][ T7934] ? __pfx__printk+0x10/0x10 [ 226.266349][ T7934] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 226.266371][ T7934] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 226.266401][ T7934] warn_alloc+0x214/0x310 [ 226.266426][ T7934] ? stack_depot_save_flags+0x41b/0x860 [ 226.266455][ T7934] ? __pfx_warn_alloc+0x10/0x10 [ 226.266479][ T7934] ? kasan_save_track+0x3e/0x80 [ 226.266500][ T7934] ? __kasan_kmalloc+0x93/0xb0 [ 226.266524][ T7934] ? xsk_setsockopt+0x4dc/0x8d0 [ 226.266542][ T7934] ? do_sock_setsockopt+0x17c/0x1b0 [ 226.266557][ T7934] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 226.266572][ T7934] ? do_syscall_64+0xfa/0xfa0 [ 226.266593][ T7934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.266620][ T7934] __vmalloc_node_range_noprof+0x125/0x12d0 [ 226.266671][ T7934] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 226.266698][ T7934] ? __kasan_kmalloc+0x93/0xb0 [ 226.266727][ T7934] vmalloc_user_noprof+0xad/0xf0 [ 226.266749][ T7934] ? xskq_create+0xbf/0x170 [ 226.266771][ T7934] xskq_create+0xbf/0x170 [ 226.266794][ T7934] xsk_init_queue+0xb0/0x110 [ 226.266817][ T7934] xsk_setsockopt+0x4dc/0x8d0 [ 226.266852][ T7934] ? __pfx_xsk_setsockopt+0x10/0x10 [ 226.266875][ T7934] ? __pfx_aa_sk_perm+0x10/0x10 [ 226.266900][ T7934] ? aa_sock_opt_perm+0xff/0x1b0 [ 226.266928][ T7934] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 226.266946][ T7934] ? __pfx_xsk_setsockopt+0x10/0x10 [ 226.266966][ T7934] do_sock_setsockopt+0x17c/0x1b0 [ 226.266988][ T7934] __x64_sys_setsockopt+0x13f/0x1b0 [ 226.267010][ T7934] do_syscall_64+0xfa/0xfa0 [ 226.267031][ T7934] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.267053][ T7934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.267070][ T7934] ? clear_bhb_loop+0x60/0xb0 [ 226.267090][ T7934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.267107][ T7934] RIP: 0033:0x7f20df98f6c9 [ 226.267123][ T7934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.267137][ T7934] RSP: 002b:00007f20e08e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 226.267155][ T7934] RAX: ffffffffffffffda RBX: 00007f20dfbe5fa0 RCX: 00007f20df98f6c9 [ 226.267167][ T7934] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 226.267178][ T7934] RBP: 00007f20dfa11f91 R08: 0000000000000052 R09: 0000000000000000 [ 226.267189][ T7934] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.267200][ T7934] R13: 00007f20dfbe6038 R14: 00007f20dfbe5fa0 R15: 00007f20dfd0fa28 [ 226.267230][ T7934] [ 226.268413][ T7934] Mem-Info: [ 226.288870][ T43] usb 1-1: config 0 descriptor?? [ 226.327070][ T7934] active_anon:6167 inactive_anon:0 isolated_anon:0 [ 226.327070][ T7934] active_file:12548 inactive_file:39967 isolated_file:0 [ 226.327070][ T7934] unevictable:768 dirty:219 writeback:0 [ 226.327070][ T7934] slab_reclaimable:10033 slab_unreclaimable:97491 [ 226.327070][ T7934] mapped:30355 shmem:1379 pagetables:1303 [ 226.327070][ T7934] sec_pagetables:0 bounce:0 [ 226.327070][ T7934] kernel_misc_reclaimable:0 [ 226.327070][ T7934] free:1313558 free_pcp:14491 free_cma:0 [ 226.333731][ T5911] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 226.482250][ T7934] Node 0 active_anon:24768kB inactive_anon:0kB active_file:50192kB inactive_file:159668kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125420kB dirty:876kB writeback:0kB shmem:3980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12508kB pagetables:5268kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 226.664097][ T7934] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 226.718228][ T7934] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 226.750685][ T7934] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 226.773726][ T5911] usb 4-1: Using ep0 maxpacket: 8 [ 226.788575][ T7934] Node 0 DMA32 free:1348264kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24728kB inactive_anon:0kB active_file:50192kB inactive_file:159668kB unevictable:1536kB writepending:888kB zspages:0kB present:3129332kB managed:2565156kB mlocked:0kB bounce:0kB free_pcp:37216kB local_pcp:18448kB free_cma:0kB [ 226.789314][ T5911] usb 4-1: unable to get BOS descriptor or descriptor too short [ 226.824166][ T983] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 226.844699][ T5911] usb 4-1: config 0 has an invalid interface number: 238 but max is 0 [ 226.852935][ T5911] usb 4-1: config 0 has no interface number 0 [ 226.861636][ T5911] usb 4-1: config 0 interface 238 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1023 [ 226.872060][ T7934] lowmem_reserve[]: 0 0 0 0 0 [ 226.878463][ T5911] usb 4-1: config 0 interface 238 has no altsetting 0 [ 226.886594][ T7934] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 226.916480][ T7934] lowmem_reserve[]: 0 0 0 0 0 [ 226.923888][ T7934] Node 1 Normal free:3890736kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20352kB local_pcp:8160kB free_cma:0kB [ 226.959033][ T7934] lowmem_reserve[]: 0 0 0 0 0 [ 226.960079][ T5911] usb 4-1: New USB device found, idVendor=06e0, idProduct=f108, bcdDevice=9e.70 [ 226.973260][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.982886][ T7934] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 226.991540][ T5911] usb 4-1: Product: syz [ 226.999883][ T5911] usb 4-1: Manufacturer: syz [ 227.004873][ T5911] usb 4-1: SerialNumber: syz [ 227.005068][ T983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.020692][ T7934] Node 0 DMA32: 2381*4kB (UM) 770*8kB (UME) 300*16kB (UM) 232*32kB (ME) 73*64kB (UME) 72*128kB (UME) 63*256kB (UME) 24*512kB (UME) 11*1024kB (UM) 2*2048kB (M) 308*4096kB (UM) = 1347140kB [ 227.040288][ T7934] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 227.047895][ T983] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 227.052120][ T5911] usb 4-1: config 0 descriptor?? [ 227.067681][ T7932] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 227.075487][ T7934] Node 1 Normal: 192*4kB (UE) 46*8kB (UME) 40*16kB (UME) 102*32kB (UME) 22*64kB (UME) 10*128kB (UME) 4*256kB (UME) 4*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 946*4096kB (M) = 3890736kB [ 227.094553][ T983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.105738][ T7934] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 227.121099][ T7934] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 227.126211][ T983] usb 3-1: config 0 descriptor?? [ 227.131509][ T5881] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 227.144424][ T7934] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 227.155527][ T7934] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 227.165365][ T7934] 53871 total pagecache pages [ 227.170358][ T7934] 0 pages in swap cache [ 227.175267][ T7934] Free swap = 124996kB [ 227.179505][ T7934] Total swap = 124996kB [ 227.184596][ T7934] 2097051 pages RAM [ 227.188633][ T7934] 0 pages HighMem/MovableOnly [ 227.193339][ T7934] 424120 pages reserved [ 227.198871][ T7934] 0 pages cma reserved [ 227.273948][ T5881] usb 2-1: device descriptor read/64, error -71 [ 227.286813][ T5911] ti_usb_3410_5052 4-1:0.238: TI USB 3410 1 port adapter converter detected [ 227.303052][ T5911] ti_usb_3410_5052 4-1:0.238: missing endpoints [ 227.323479][ T5911] usb 4-1: USB disconnect, device number 40 [ 227.358835][ T983] usbhid 3-1:0.0: can't add hid device: -71 [ 227.372730][ T983] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 227.377642][ T43] usbhid 1-1:0.0: can't add hid device: -71 [ 227.387909][ T43] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 227.395072][ T983] usb 3-1: USB disconnect, device number 32 [ 227.445473][ T43] usb 1-1: USB disconnect, device number 26 [ 227.514997][ T5881] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 227.663690][ T5881] usb 2-1: device descriptor read/64, error -71 [ 227.774431][ T5881] usb usb2-port1: attempt power cycle [ 227.853967][ T43] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 227.875142][ T983] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 228.023674][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 228.032894][ T43] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 228.046197][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.046216][ T983] usb 3-1: Using ep0 maxpacket: 32 [ 228.054644][ T43] usb 1-1: Product: syz [ 228.054662][ T43] usb 1-1: Manufacturer: syz [ 228.054676][ T43] usb 1-1: SerialNumber: syz [ 228.057291][ T43] usb 1-1: config 0 descriptor?? [ 228.079200][ T5895] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 228.090355][ T983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.104035][ T983] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 228.113107][ T983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.129732][ T983] usb 3-1: config 0 descriptor?? [ 228.133876][ T5881] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 228.154290][ T5881] usb 2-1: device descriptor read/8, error -71 [ 228.156551][ T983] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 228.179456][ T983] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 228.235203][ T5895] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 228.243375][ T5895] usb 5-1: config 0 has no interface number 0 [ 228.257599][ T5895] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 228.272308][ T5895] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 228.294685][ T5895] usb 5-1: config 0 interface 255 has no altsetting 0 [ 228.294797][ T43] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 228.301469][ T5895] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 228.301493][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.364839][ T5895] usb 5-1: config 0 descriptor?? [ 228.380810][ T5895] ums-realtek 5-1:0.255: USB Mass Storage device detected [ 228.393698][ T5881] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 228.414276][ T5881] usb 2-1: device descriptor read/8, error -71 [ 228.524283][ T5881] usb usb2-port1: unable to enumerate USB device [ 228.590123][ T5881] usb 5-1: USB disconnect, device number 25 [ 228.678064][ T5895] usb 3-1: USB disconnect, device number 33 [ 228.686082][ T5895] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 228.895818][ T43] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 228.896258][ T7950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.518'. [ 228.921659][ T7950] bond_slave_0: entered promiscuous mode [ 228.927371][ T7950] bond_slave_1: entered promiscuous mode [ 228.933100][ T7950] macvlan2: entered promiscuous mode [ 228.938682][ T7950] bond0: entered promiscuous mode [ 228.945615][ T7950] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 228.974306][ T5895] usb 1-1: USB disconnect, device number 27 [ 229.303675][ T43] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 229.463674][ T5881] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 229.536258][ T43] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 229.553994][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.573325][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.586220][ T24] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 229.594043][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 229.611010][ T43] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 229.621075][ T43] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 229.629241][ T5881] usb 5-1: Using ep0 maxpacket: 16 [ 229.634428][ T43] usb 4-1: Manufacturer: syz [ 229.643481][ T43] usb 4-1: config 0 descriptor?? [ 229.651445][ T5881] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 229.662021][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.670111][ T5881] usb 5-1: Product: syz [ 229.674868][ T5881] usb 5-1: Manufacturer: syz [ 229.679456][ T5881] usb 5-1: SerialNumber: syz [ 229.688977][ T5881] usb 5-1: config 0 descriptor?? [ 229.697494][ T5881] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 229.706144][ T5881] usb 5-1: Detected FT232H [ 229.715177][ T7970] netlink: 'syz.0.524': attribute type 4 has an invalid length. [ 229.763651][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 229.770067][ T24] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.781491][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 229.789110][ T24] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 229.798212][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.817071][ T24] usb 3-1: config 0 descriptor?? [ 229.909381][ T5881] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 230.068327][ T7977] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 230.164675][ T43] usbhid 4-1:0.0: can't add hid device: -71 [ 230.179572][ T43] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 230.238796][ T43] usb 4-1: USB disconnect, device number 41 [ 230.265262][ T24] nzxt-smart2 0003:1E71:2009.0020: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 230.341873][ T5881] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 230.541122][ T10] usb 5-1: USB disconnect, device number 26 [ 230.589280][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 230.631204][ T10] ftdi_sio 5-1:0.0: device disconnected [ 230.693886][ T5895] usb 3-1: USB disconnect, device number 34 [ 230.853755][ T43] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 231.025384][ T43] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 231.042617][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.075450][ T43] usb 1-1: config 0 descriptor?? [ 231.519915][ T7984] netlink: 'syz.0.527': attribute type 8 has an invalid length. [ 231.540718][ T43] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 231.553674][ T5881] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 231.715852][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.728435][ T5881] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 231.742867][ T43] [drm:udl_init] *ERROR* Selecting channel failed [ 231.755014][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.781071][ T43] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 231.800536][ T5881] usb 2-1: config 0 descriptor?? [ 231.819277][ T43] [drm] Initialized udl on minor 2 [ 231.835022][ T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 231.848093][ T43] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 231.885269][ T43] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 231.917047][ T24] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 231.947856][ T43] usb 1-1: USB disconnect, device number 28 [ 231.964000][ T24] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 232.029089][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.043900][ T5881] usbhid 2-1:0.0: can't add hid device: -71 [ 232.049952][ T10] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 232.050383][ T5881] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 232.067668][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.090654][ T5881] usb 2-1: USB disconnect, device number 36 [ 232.118642][ T10] usb 3-1: config 0 descriptor?? [ 232.174041][ T6232] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 232.323779][ T6232] usb 4-1: device descriptor read/64, error -71 [ 232.343168][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 232.354428][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 232.372987][ T10] usb 3-1: USB disconnect, device number 35 [ 232.487609][ T8027] netlink: 'syz.4.540': attribute type 16 has an invalid length. [ 232.497453][ T8027] netlink: 156 bytes leftover after parsing attributes in process `syz.4.540'. [ 232.537406][ T8029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.541'. [ 232.568226][ T8029] netlink: 14 bytes leftover after parsing attributes in process `syz.0.541'. [ 232.584149][ T6232] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 232.594602][ T5881] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 232.696359][ T8029] team0 (unregistering): Port device team_slave_0 removed [ 232.711261][ T8029] team0 (unregistering): Port device team_slave_1 removed [ 232.720008][ T6232] usb 4-1: device descriptor read/64, error -71 [ 232.746944][ T5902] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 232.754628][ T5881] usb 2-1: Using ep0 maxpacket: 32 [ 232.762584][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.774783][ T5881] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 232.788846][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.805093][ T5881] usb 2-1: config 0 descriptor?? [ 232.814715][ T5881] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 232.831289][ T5881] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 232.843685][ T10] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 232.851652][ T6232] usb usb4-port1: attempt power cycle [ 232.905794][ T5902] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 190, using maximum allowed: 30 [ 232.921911][ T5902] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 190 [ 232.954200][ T5902] usb 5-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 232.964759][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.989414][ T5902] usb 5-1: config 0 descriptor?? [ 233.005758][ T5902] usb 5-1: selecting invalid altsetting 3 [ 233.014038][ T5902] comedi comedi5: could not set alternate setting 3 in high speed [ 233.022112][ T5902] usbduxsigma 5-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 233.034602][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 233.036038][ T5902] usbduxsigma 5-1:0.0: probe with driver usbduxsigma failed with error -22 [ 233.044407][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.060269][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 233.070826][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.082451][ T10] usb 3-1: config 0 descriptor?? [ 233.203702][ T983] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 233.205319][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.540'. [ 233.225372][ T6232] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 233.227493][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.540'. [ 233.241821][ T8027] bridge_slave_1: left allmulticast mode [ 233.247591][ T8027] bridge_slave_1: left promiscuous mode [ 233.253357][ T8027] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.261500][ T6232] usb 4-1: device descriptor read/8, error -71 [ 233.272818][ T8027] bridge_slave_0: left allmulticast mode [ 233.279350][ T8027] bridge_slave_0: left promiscuous mode [ 233.285413][ T8027] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.307734][ T5888] usb 2-1: USB disconnect, device number 37 [ 233.321954][ T5888] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 233.353690][ T983] usb 1-1: Using ep0 maxpacket: 16 [ 233.360305][ T983] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.374045][ T983] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 233.383097][ T983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.402123][ T983] usb 1-1: config 0 descriptor?? [ 233.452925][ T5895] usb 5-1: USB disconnect, device number 27 [ 233.494690][ T8013] netlink: 32 bytes leftover after parsing attributes in process `syz.2.536'. [ 233.512983][ T8013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.536'. [ 233.522448][ T6232] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 233.544710][ T6232] usb 4-1: device descriptor read/8, error -71 [ 233.555943][ T10] kye 0003:0458:5016.0021: control desc unexpectedly large [ 233.569057][ T10] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0021/input/input28 [ 233.656126][ T6232] usb usb4-port1: unable to enumerate USB device [ 233.667426][ T10] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0021/input/input29 [ 233.739880][ T10] kye 0003:0458:5016.0021: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 233.753837][ T8013] xt_TCPMSS: Only works on TCP SYN packets [ 233.817495][ T983] mcp2221 0003:04D8:00DD.0022: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 234.026316][ T8036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.048793][ T8036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.105648][ T983] usb 3-1: USB disconnect, device number 36 [ 234.262195][ T8036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.271251][ T8036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.280128][ T8036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.296827][ T5902] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 234.314198][ T10] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 234.376297][ T6232] usb 1-1: USB disconnect, device number 29 [ 234.463662][ T5902] usb 2-1: Using ep0 maxpacket: 16 [ 234.477319][ T5902] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.493828][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 234.503751][ T5902] usb 2-1: config 0 interface 0 has no altsetting 0 [ 234.507331][ T10] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 235.036427][ T5902] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 235.070469][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.102335][ T5902] usb 2-1: config 0 descriptor?? [ 235.130941][ T10] usb 5-1: config 0 has no interface number 0 [ 235.162161][ T10] usb 5-1: config 0 interface 184 has no altsetting 0 [ 235.174638][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 235.184111][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.192167][ T10] usb 5-1: Product: syz [ 235.196496][ T10] usb 5-1: Manufacturer: syz [ 235.201090][ T10] usb 5-1: SerialNumber: syz [ 235.208738][ T10] usb 5-1: config 0 descriptor?? [ 235.219016][ T10] smsc75xx v1.0.0 [ 235.402777][ T8059] SET target dimension over the limit! [ 235.608099][ T5902] nzxt-smart2 0003:1E71:2009.0023: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 235.677747][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 235.699889][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 235.946324][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 235.960997][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 235.996521][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 236.007696][ T43] usb 2-1: USB disconnect, device number 38 [ 236.059528][ T8064] fido_id[8064]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 236.203999][ T10] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 236.284892][ T10] usb 5-1: USB disconnect, device number 28 [ 236.963687][ T43] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 237.143644][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 237.165628][ T43] usb 5-1: config 0 has an invalid interface number: 68 but max is 0 [ 237.188551][ T43] usb 5-1: config 0 has no interface number 0 [ 237.203786][ T43] usb 5-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.245851][ T43] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 237.272314][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.286080][ T43] usb 5-1: Product: syz [ 237.294865][ T43] usb 5-1: Manufacturer: syz [ 237.308868][ T43] usb 5-1: SerialNumber: syz [ 237.329758][ T43] usb 5-1: config 0 descriptor?? [ 237.351326][ T43] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 237.405974][ T8088] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.554'. [ 237.417442][ T8088] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 237.549896][ T50] usb 5-1: Failed to submit usb control message: -71 [ 237.557255][ T43] usb 5-1: USB disconnect, device number 29 [ 237.595641][ T8091] FAULT_INJECTION: forcing a failure. [ 237.595641][ T8091] name failslab, interval 1, probability 0, space 0, times 0 [ 237.595830][ T50] usb 5-1: unable to send the bmi data to the device: -71 [ 237.631277][ T50] usb 5-1: unable to get target info from device [ 237.637789][ T50] usb 5-1: could not get target info (-71) [ 237.649185][ T50] usb 5-1: could not probe fw (-71) [ 237.650230][ T8091] CPU: 0 UID: 0 PID: 8091 Comm: syz.2.556 Not tainted syzkaller #0 PREEMPT(full) [ 237.650250][ T8091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 237.650260][ T8091] Call Trace: [ 237.650267][ T8091] [ 237.650273][ T8091] dump_stack_lvl+0x189/0x250 [ 237.650298][ T8091] ? __pfx____ratelimit+0x10/0x10 [ 237.650320][ T8091] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.650341][ T8091] ? __pfx__printk+0x10/0x10 [ 237.650363][ T8091] ? __pfx___might_resched+0x10/0x10 [ 237.650386][ T8091] should_fail_ex+0x414/0x560 [ 237.650414][ T8091] should_failslab+0xa8/0x100 [ 237.650433][ T8091] __kvmalloc_node_noprof+0x158/0x910 [ 237.650456][ T8091] ? do_raw_spin_lock+0x121/0x290 [ 237.650476][ T8091] ? simple_xattr_set+0x80/0x380 [ 237.650502][ T8091] simple_xattr_set+0x80/0x380 [ 237.650519][ T8091] ? do_raw_spin_unlock+0x122/0x240 [ 237.650544][ T8091] shmem_xattr_handler_set+0x1a0/0x2d0 [ 237.650565][ T8091] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 237.650581][ T8091] __vfs_setxattr+0x43c/0x480 [ 237.650616][ T8091] __vfs_setxattr_noperm+0x12d/0x660 [ 237.650646][ T8091] vfs_setxattr+0x16b/0x2f0 [ 237.650667][ T8091] ? __pfx_vfs_setxattr+0x10/0x10 [ 237.650693][ T8091] filename_setxattr+0x274/0x600 [ 237.650718][ T8091] ? __pfx_filename_setxattr+0x10/0x10 [ 237.650737][ T8091] ? getname_flags+0x1e5/0x540 [ 237.650759][ T8091] path_setxattrat+0x364/0x3a0 [ 237.650787][ T8091] ? __pfx_path_setxattrat+0x10/0x10 [ 237.650804][ T8091] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 237.650852][ T8091] ? ksys_write+0x22a/0x250 [ 237.650882][ T8091] ? __pfx_ksys_write+0x10/0x10 [ 237.650907][ T8091] __x64_sys_lsetxattr+0xbf/0xe0 [ 237.650928][ T8091] do_syscall_64+0xfa/0xfa0 [ 237.650947][ T8091] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.650968][ T8091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.650984][ T8091] ? clear_bhb_loop+0x60/0xb0 [ 237.651008][ T8091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.651023][ T8091] RIP: 0033:0x7f4a6918f6c9 [ 237.651037][ T8091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.651051][ T8091] RSP: 002b:00007f4a6a0b2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 237.651069][ T8091] RAX: ffffffffffffffda RBX: 00007f4a693e5fa0 RCX: 00007f4a6918f6c9 [ 237.651081][ T8091] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 00002000000000c0 [ 237.651091][ T8091] RBP: 00007f4a6a0b2090 R08: 0000000000000002 R09: 0000000000000000 [ 237.651101][ T8091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.651111][ T8091] R13: 00007f4a693e6038 R14: 00007f4a693e5fa0 R15: 00007f4a6950fa28 [ 237.651140][ T8091] [ 237.777857][ T8092] capability: warning: `syz.1.555' uses 32-bit capabilities (legacy support in use) [ 238.141836][ T8116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.560'. [ 238.433621][ T8119] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 238.716732][ T43] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 238.885804][ T43] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 238.893943][ T43] usb 5-1: config 0 has no interface number 0 [ 238.901802][ T43] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.914524][ T43] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.924515][ T43] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 239.013675][ T5881] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 239.033290][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.080822][ T43] usb 5-1: config 0 descriptor?? [ 239.134053][ T5902] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 239.163673][ T5881] usb 1-1: Using ep0 maxpacket: 16 [ 239.180093][ T5881] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.193971][ T5881] usb 1-1: config 0 interface 0 has no altsetting 0 [ 239.201261][ T5881] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 239.212193][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.243107][ T5881] usb 1-1: config 0 descriptor?? [ 239.298933][ T5902] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 239.314695][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.324669][ T8123] netlink: 84 bytes leftover after parsing attributes in process `syz.4.562'. [ 239.334544][ T8123] netlink: 64 bytes leftover after parsing attributes in process `syz.4.562'. [ 239.345295][ T8133] netlink: 24 bytes leftover after parsing attributes in process `syz.2.565'. [ 239.370353][ T5902] usb 2-1: Product: syz [ 239.375432][ T5902] usb 2-1: Manufacturer: syz [ 239.380073][ T5902] usb 2-1: SerialNumber: syz [ 239.410517][ T5902] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 239.442475][ T5911] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 239.470540][ T30] audit: type=1326 audit(1762997785.543:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8139 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6918f6c9 code=0x7ffc0000 [ 239.575190][ T8128] kvm: user requested TSC rate below hardware speed [ 239.578024][ T43] input: HID 04d9:a055 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:04D9:A055.0024/input/input30 [ 239.612828][ T30] audit: type=1326 audit(1762997785.573:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8139 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f4a6918f6c9 code=0x7ffc0000 [ 239.683000][ T8149] FAULT_INJECTION: forcing a failure. [ 239.683000][ T8149] name failslab, interval 1, probability 0, space 0, times 0 [ 239.696034][ T8149] CPU: 1 UID: 0 PID: 8149 Comm: syz.2.568 Not tainted syzkaller #0 PREEMPT(full) [ 239.696056][ T8149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 239.696069][ T8149] Call Trace: [ 239.696076][ T8149] [ 239.696083][ T8149] dump_stack_lvl+0x189/0x250 [ 239.696109][ T8149] ? __pfx____ratelimit+0x10/0x10 [ 239.696131][ T8149] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.696152][ T8149] ? __pfx__printk+0x10/0x10 [ 239.696175][ T8149] ? __pfx___might_resched+0x10/0x10 [ 239.696192][ T8149] ? fs_reclaim_acquire+0x7d/0x100 [ 239.696213][ T8149] should_fail_ex+0x414/0x560 [ 239.696242][ T8149] should_failslab+0xa8/0x100 [ 239.696262][ T8149] __kmalloc_node_track_caller_noprof+0xcd/0x800 [ 239.696283][ T8149] ? simple_xattr_set+0xda/0x380 [ 239.696300][ T8149] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 239.696321][ T8149] ? do_raw_spin_lock+0x121/0x290 [ 239.696347][ T8149] kstrdup+0x42/0x100 [ 239.696368][ T8149] simple_xattr_set+0xda/0x380 [ 239.696393][ T8149] shmem_xattr_handler_set+0x1a0/0x2d0 [ 239.696414][ T8149] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 239.696431][ T8149] __vfs_setxattr+0x43c/0x480 [ 239.696468][ T8149] __vfs_setxattr_noperm+0x12d/0x660 [ 239.696500][ T8149] vfs_setxattr+0x16b/0x2f0 [ 239.696522][ T8149] ? __pfx_vfs_setxattr+0x10/0x10 [ 239.696548][ T8149] filename_setxattr+0x274/0x600 [ 239.696574][ T8149] ? __pfx_filename_setxattr+0x10/0x10 [ 239.696594][ T8149] ? getname_flags+0x1e5/0x540 [ 239.696616][ T8149] path_setxattrat+0x364/0x3a0 [ 239.696645][ T8149] ? __pfx_path_setxattrat+0x10/0x10 [ 239.696662][ T8149] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 239.696712][ T8149] ? ksys_write+0x22a/0x250 [ 239.696736][ T8149] ? __pfx_ksys_write+0x10/0x10 [ 239.696762][ T8149] __x64_sys_lsetxattr+0xbf/0xe0 [ 239.696783][ T8149] do_syscall_64+0xfa/0xfa0 [ 239.696806][ T8149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.696822][ T8149] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 239.696839][ T8149] ? clear_bhb_loop+0x60/0xb0 [ 239.696857][ T8149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.696874][ T8149] RIP: 0033:0x7f4a6918f6c9 [ 239.696889][ T8149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.696903][ T8149] RSP: 002b:00007f4a6a0b2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 239.696922][ T8149] RAX: ffffffffffffffda RBX: 00007f4a693e5fa0 RCX: 00007f4a6918f6c9 [ 239.696935][ T8149] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 00002000000000c0 [ 239.696946][ T8149] RBP: 00007f4a6a0b2090 R08: 0000000000000002 R09: 0000000000000000 [ 239.696956][ T8149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.696966][ T8149] R13: 00007f4a693e6038 R14: 00007f4a693e5fa0 R15: 00007f4a6950fa28 [ 239.696997][ T8149] [ 239.702681][ T30] audit: type=1326 audit(1762997785.573:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8139 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6918f6c9 code=0x7ffc0000 [ 239.815503][ T8152] syz_tun: entered allmulticast mode [ 239.823364][ T30] audit: type=1326 audit(1762997785.573:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8139 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f4a6918f6c9 code=0x7ffc0000 [ 239.823407][ T30] audit: type=1326 audit(1762997785.573:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8139 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6918f6c9 code=0x7ffc0000 [ 239.823445][ T30] audit: type=1326 audit(1762997785.583:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8139 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4a6918f6c9 code=0x7ffc0000 [ 239.823481][ T30] audit: type=1326 audit(1762997785.583:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8139 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6918f6c9 code=0x7ffc0000 [ 239.982902][ T5881] nzxt-smart2 0003:1E71:2009.0025: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 239.989317][ T30] audit: type=1326 audit(1762997785.583:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8139 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4a6918f6c9 code=0x7ffc0000 [ 240.082405][ T8158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.157203][ T8151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.569'. [ 240.174143][ T30] audit: type=1326 audit(1762997785.583:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8139 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6918f6c9 code=0x7ffc0000 [ 240.198939][ T30] audit: type=1326 audit(1762997785.583:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8139 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6918f6c9 code=0x7ffc0000 [ 240.200543][ T8158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.240060][ T43] holtek_kbd 0003:04D9:A055.0024: input,hidraw1: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.4-1/input1 [ 240.261209][ T8158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.273753][ T8151] syz_tun (unregistering): left allmulticast mode [ 240.298812][ T8158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.315390][ T43] usb 5-1: USB disconnect, device number 30 [ 240.326306][ T8158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.365779][ T8158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.495605][ T8162] fido_id[8162]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 240.576988][ T5911] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 240.586219][ T5911] ath9k_htc: Failed to initialize the device [ 240.848325][ T5911] usb 2-1: ath9k_htc: USB layer deinitialized [ 241.078572][ T10] usb 2-1: USB disconnect, device number 39 [ 241.116157][ T8168] netlink: 'syz.2.571': attribute type 20 has an invalid length. [ 241.124151][ T8168] IPv6: NLM_F_CREATE should be specified when creating new route [ 241.249779][ T8177] PKCS7: Unknown OID: [5] (bad) [ 241.260911][ T8177] PKCS7: Only support pkcs7_signedData type [ 241.876852][ T5911] usb 1-1: USB disconnect, device number 30 [ 241.900375][ T8188] fuse: Unknown parameter '' [ 241.902589][ T8188] netlink: 44 bytes leftover after parsing attributes in process `syz.2.577'. [ 242.184085][ T5881] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 242.453698][ T5881] usb 3-1: Using ep0 maxpacket: 8 [ 242.526633][ T8201] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 242.563805][ T5881] usb 3-1: New USB device found, idVendor=0403, idProduct=f0c8, bcdDevice= 2.56 [ 242.580275][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.726652][ T5881] usb 3-1: config 0 descriptor?? [ 242.752434][ T5881] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 242.776633][ T5881] ftdi_sio ttyUSB0: unknown device type: 0x256 [ 242.813934][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 242.937571][ T8202] syzkaller1: entered promiscuous mode [ 242.985360][ T8202] syzkaller1: entered allmulticast mode [ 243.913474][ T8212] syzkaller1: entered promiscuous mode [ 243.920834][ T8212] syzkaller1: entered allmulticast mode [ 244.146244][ T8191] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 244.202027][ T8210] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 245.312222][ T10] usb 3-1: USB disconnect, device number 37 [ 245.319739][ T10] ftdi_sio 3-1:0.0: device disconnected [ 245.492330][ T8225] program syz.4.587 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 245.580789][ T8221] input input31: cannot allocate more than FF_MAX_EFFECTS effects [ 245.883366][ T8239] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 245.894530][ T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 245.913647][ T5911] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 246.053988][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 246.069035][ T8243] netlink: 16 bytes leftover after parsing attributes in process `syz.1.592'. [ 246.072078][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 246.078274][ T5911] usb 5-1: Using ep0 maxpacket: 16 [ 246.079817][ T5911] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.168549][ T10] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 246.179732][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.187806][ T10] usb 1-1: Product: syz [ 246.192029][ T10] usb 1-1: Manufacturer: syz [ 246.197291][ T10] usb 1-1: SerialNumber: syz [ 246.229652][ T10] usb 1-1: config 0 descriptor?? [ 246.240241][ T10] hub 1-1:0.0: bad descriptor, ignoring hub [ 246.246609][ T10] hub 1-1:0.0: probe with driver hub failed with error -5 [ 246.258403][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 246.454919][ T5911] usb 5-1: config 0 interface 0 has no altsetting 0 [ 246.468360][ T5911] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 246.476076][ T8232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.489867][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.499041][ T8232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.541753][ T5911] usb 5-1: config 0 descriptor?? [ 246.562665][ T8251] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 246.590990][ T10] usb 1-1: USB disconnect, device number 31 [ 247.041011][ T5911] nzxt-smart2 0003:1E71:2009.0026: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 247.258466][ T8264] netlink: 60 bytes leftover after parsing attributes in process `syz.3.597'. [ 247.783357][ T8280] netlink: 'syz.0.601': attribute type 1 has an invalid length. [ 248.133924][ T8291] syzkaller0: entered promiscuous mode [ 248.143683][ T8291] syzkaller0: entered allmulticast mode [ 248.200413][ T8291] netlink: 10 bytes leftover after parsing attributes in process `syz.1.604'. [ 248.268722][ T8292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.604'. [ 248.913322][ T6232] usb 5-1: USB disconnect, device number 31 [ 249.126829][ T8322] ip6gretap0: entered promiscuous mode [ 249.253706][ T5881] usb 1-1: new low-speed USB device number 32 using dummy_hcd [ 249.346995][ T8326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.614'. [ 249.425050][ T5881] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 249.433886][ T6232] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 249.435169][ T5881] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 249.474774][ T5881] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.487608][ T5881] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 249.499271][ T5881] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 249.525106][ T5881] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 249.532531][ T5881] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 249.557223][ T5881] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.570816][ T5881] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 249.582206][ T5881] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 249.600906][ T5881] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 249.608491][ T5881] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 249.620363][ T5881] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.624407][ T6232] usb 4-1: Using ep0 maxpacket: 32 [ 249.634344][ T5881] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 249.640061][ T6232] usb 4-1: config 0 has an invalid interface number: 219 but max is 0 [ 249.648712][ T5881] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 249.659964][ T6232] usb 4-1: config 0 has no interface number 0 [ 249.672693][ T5881] usb 1-1: string descriptor 0 read error: -22 [ 249.674901][ T6232] usb 4-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 249.681480][ T5881] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 249.692504][ T6232] usb 4-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 249.692530][ T6232] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 249.692558][ T6232] usb 4-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 249.702374][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.742321][ T6232] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 249.751985][ T5881] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 249.772888][ T6232] usb 4-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 249.783014][ T6232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.791522][ T6232] usb 4-1: Product: syz [ 249.796717][ T6232] usb 4-1: Manufacturer: syz [ 249.801389][ T6232] usb 4-1: SerialNumber: syz [ 249.807953][ T6232] usb 4-1: config 0 descriptor?? [ 249.813533][ T8324] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 249.853670][ T10] usb 2-1: new low-speed USB device number 40 using dummy_hcd [ 249.863355][ T8038] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 250.023788][ T10] usb 2-1: Invalid ep0 maxpacket: 32 [ 250.029260][ T8038] usb 3-1: Using ep0 maxpacket: 8 [ 250.042407][ T8038] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 250.050390][ T8038] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 250.067138][ T8038] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 250.093627][ T8038] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 250.123845][ T5881] usb 1-1: USB disconnect, device number 32 [ 250.304314][ T8038] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 250.337997][ T6232] etas_es58x 4-1:0.219: Starting syz syz (Serial Number syz) [ 250.354379][ T10] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 250.362322][ T6232] etas_es58x 4-1:0.219: could not retrieve the product info string [ 250.375446][ T8038] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 250.382925][ T8038] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 250.423670][ T8038] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 250.443354][ T6232] usb 4-1: USB disconnect, device number 46 [ 250.460574][ T6232] etas_es58x 4-1:0.219: Disconnecting syz syz [ 250.466887][ T8038] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 250.479408][ T8038] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 250.500739][ T8038] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 250.509015][ T8038] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 250.520520][ T8038] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 250.703662][ T10] usb 2-1: Invalid ep0 maxpacket: 32 [ 250.872502][ T10] usb usb2-port1: attempt power cycle [ 250.889922][ T8038] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 251.060185][ T8038] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 251.087956][ T8038] usb 3-1: string descriptor 0 read error: -22 [ 251.094386][ T8038] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 251.108752][ T8038] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.151979][ T8038] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 251.273683][ T10] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 251.324249][ T10] usb 2-1: Invalid ep0 maxpacket: 32 [ 251.349275][ T5824] Bluetooth: hci4: unexpected subevent 0x04 length: 7 < 11 [ 251.362800][ T8331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.381991][ T8331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.463039][ T5881] usb 3-1: USB disconnect, device number 38 [ 251.544154][ T10] usb 2-1: new low-speed USB device number 43 using dummy_hcd [ 251.588650][ T10] usb 2-1: Invalid ep0 maxpacket: 32 [ 251.605321][ T10] usb usb2-port1: unable to enumerate USB device [ 251.748390][ T8352] netlink: 24 bytes leftover after parsing attributes in process `syz.4.622'. [ 252.024173][ T5911] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 252.194467][ T5911] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 252.204414][ T5881] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 252.212977][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.231449][ T5911] usb 5-1: Product: syz [ 252.235774][ T5911] usb 5-1: Manufacturer: syz [ 252.240380][ T5911] usb 5-1: SerialNumber: syz [ 252.253402][ T5911] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 252.282876][ T43] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 252.393720][ T5881] usb 3-1: Using ep0 maxpacket: 16 [ 252.401026][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.428591][ T5881] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 252.456792][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.494457][ T10] usb 5-1: USB disconnect, device number 32 [ 252.504925][ T5881] usb 3-1: config 0 descriptor?? [ 252.626800][ T8383] PKCS7: Unknown OID: [5] (bad) [ 252.633735][ T8383] PKCS7: Only support pkcs7_signedData type [ 252.716127][ T8386] netlink: zone id is out of range [ 252.721370][ T8386] netlink: zone id is out of range [ 252.728331][ T8386] netlink: zone id is out of range [ 252.733525][ T8386] netlink: zone id is out of range [ 252.739169][ T8386] netlink: zone id is out of range [ 252.744343][ T8386] netlink: zone id is out of range [ 252.749490][ T8386] netlink: zone id is out of range [ 252.754667][ T8386] netlink: zone id is out of range [ 252.759788][ T8386] netlink: zone id is out of range [ 252.765086][ T8386] netlink: zone id is out of range [ 252.920892][ T5881] mcp2221 0003:04D8:00DD.0027: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 253.129941][ T8368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.181141][ T8368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.276092][ T8392] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 253.374764][ T43] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 253.399997][ T43] ath9k_htc: Failed to initialize the device [ 253.414774][ T8368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.425791][ T8368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.457770][ T10] usb 5-1: ath9k_htc: USB layer deinitialized [ 253.571173][ T5881] usb 3-1: USB disconnect, device number 39 [ 253.710154][ T8398] netlink: 20 bytes leftover after parsing attributes in process `syz.1.635'. [ 254.053765][ T43] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 254.235716][ T43] usb 2-1: config 0 has an invalid interface number: 15 but max is 0 [ 254.275503][ T43] usb 2-1: config 0 has no interface number 0 [ 254.393245][ T43] usb 2-1: New USB device found, idVendor=0b05, idProduct=171f, bcdDevice=32.06 [ 254.436614][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.578339][ T43] usb 2-1: Product: syz [ 254.585692][ T43] usb 2-1: Manufacturer: syz [ 254.598373][ T43] usb 2-1: SerialNumber: syz [ 254.663689][ T8038] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 254.770656][ T43] usb 2-1: config 0 descriptor?? [ 254.829389][ T8038] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 254.840833][ T8038] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.861817][ T8038] usb 3-1: Product: syz [ 254.882820][ T8038] usb 3-1: Manufacturer: syz [ 254.898527][ T8038] usb 3-1: SerialNumber: syz [ 254.928910][ T8038] usb 3-1: config 0 descriptor?? [ 254.950195][ T8038] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 255.003888][ T43] dvb-usb: found a 'ASUS My Cinema U3000 Mini DVBT Tuner' in warm state. [ 255.177395][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 255.217980][ T43] dvbdev: DVB: registering new adapter (ASUS My Cinema U3000 Mini DVBT Tuner) [ 255.246399][ T43] usb 2-1: media controller created [ 255.296461][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 255.296471][ T30] audit: type=1400 audit(1762997801.373:83): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B706212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD503EAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C68502F7F549FA66F30E7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE16559268A265EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F041 [ 255.364622][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 255.654055][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.663704][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.103965][ T10] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 256.263545][ T43] DVB: Unable to find symbol dib7000p_attach() [ 256.274161][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 256.282785][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 256.283649][ T43] dvb-usb: no frontend was attached by 'ASUS My Cinema U3000 Mini DVBT Tuner' [ 256.312623][ T10] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 64 [ 256.336429][ T10] usb 4-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 256.383688][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 256.403260][ T10] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 256.424004][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.443635][ T10] usb 4-1: Product: syz [ 256.443675][ T43] rc_core: IR keymap rc-dib0700-rc5 not found [ 256.447829][ T10] usb 4-1: Manufacturer: syz [ 256.483968][ T10] usb 4-1: SerialNumber: syz [ 256.492231][ T43] Registered IR keymap rc-empty [ 256.504504][ T8410] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 256.551374][ T43] dvb-usb: could not initialize remote control. [ 256.578242][ T43] dvb-usb: ASUS My Cinema U3000 Mini DVBT Tuner successfully initialized and connected. [ 256.653958][ T43] usb 2-1: USB disconnect, device number 44 [ 256.716278][ T8410] netlink: 'syz.3.638': attribute type 8 has an invalid length. [ 256.772469][ T43] dvb-usb: ASUS My Cinema U3000 Mini DVBT Tuner successfully deinitialized and disconnected. [ 256.797949][ T8410] kvm: emulating exchange as write [ 256.941071][ T30] audit: type=1326 audit(1762997802.983:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8426 comm="syz.1.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c938f6c9 code=0x7ffc0000 [ 256.973213][ T10] usb 4-1: USB disconnect, device number 47 [ 256.989869][ T8434] fuse: Unknown parameter '017777777777777777777770x0000000000000003h-6}>Ƭ9t'"V1["?' [ 257.003668][ T30] audit: type=1326 audit(1762997802.993:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8426 comm="syz.1.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f83c938f6c9 code=0x7ffc0000 [ 257.059395][ T30] audit: type=1326 audit(1762997802.993:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8426 comm="syz.1.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c938f6c9 code=0x7ffc0000 [ 257.111871][ T30] audit: type=1326 audit(1762997802.993:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8426 comm="syz.1.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c938f6c9 code=0x7ffc0000 [ 257.162725][ T30] audit: type=1326 audit(1762997802.993:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8426 comm="syz.1.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f83c938f6c9 code=0x7ffc0000 [ 257.223311][ T30] audit: type=1326 audit(1762997802.993:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8426 comm="syz.1.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c938f6c9 code=0x7ffc0000 [ 257.275335][ T30] audit: type=1326 audit(1762997802.993:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8426 comm="syz.1.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c938f6c9 code=0x7ffc0000 [ 257.501799][ T8038] gspca_stk1135: reg_w 0x300 err -71 [ 257.511243][ T8038] gspca_stk1135: serial bus timeout: status=0x00 [ 257.538227][ T8038] gspca_stk1135: Sensor write failed [ 257.547454][ T8038] gspca_stk1135: serial bus timeout: status=0x00 [ 257.564297][ T8038] gspca_stk1135: Sensor write failed [ 257.590774][ T30] audit: type=1326 audit(1762997802.993:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8426 comm="syz.1.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f83c938f6c9 code=0x7ffc0000 [ 257.615743][ T8038] gspca_stk1135: serial bus timeout: status=0x00 [ 257.626004][ T8038] gspca_stk1135: Sensor read failed [ 257.650930][ T8038] gspca_stk1135: serial bus timeout: status=0x00 [ 257.664301][ T8038] gspca_stk1135: Sensor read failed [ 257.672398][ T30] audit: type=1326 audit(1762997802.993:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8426 comm="syz.1.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c938f6c9 code=0x7ffc0000 [ 257.707044][ T8038] gspca_stk1135: Detected sensor type unknown (0x0) [ 257.733428][ T8038] gspca_stk1135: serial bus timeout: status=0x00 [ 257.801673][ T8038] gspca_stk1135: Sensor read failed [ 257.808836][ T8038] gspca_stk1135: serial bus timeout: status=0x00 [ 257.816071][ T8038] gspca_stk1135: Sensor read failed [ 257.821285][ T8038] gspca_stk1135: serial bus timeout: status=0x00 [ 258.089139][ T8038] gspca_stk1135: Sensor write failed [ 258.097158][ T8038] gspca_stk1135: serial bus timeout: status=0x00 [ 258.112508][ T8038] gspca_stk1135: Sensor write failed [ 258.120918][ T8038] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 258.261259][ T8038] usb 3-1: USB disconnect, device number 40 [ 258.693705][ T983] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 259.153742][ T983] usb 5-1: Using ep0 maxpacket: 32 [ 259.160843][ T983] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.316500][ T983] usb 5-1: config 0 has no interfaces? [ 259.346249][ T983] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 259.355362][ T983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.425256][ T983] usb 5-1: Product: syz [ 259.433689][ T983] usb 5-1: Manufacturer: syz [ 259.446611][ T983] usb 5-1: SerialNumber: syz [ 259.498846][ T983] usb 5-1: config 0 descriptor?? [ 259.615113][ T8469] bond2: Removing last arp target with arp_interval on [ 259.665004][ T8469] bond2: entered allmulticast mode [ 259.670562][ T8469] 8021q: adding VLAN 0 to HW filter on device bond2 [ 259.717812][ T8469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.654'. [ 259.740311][ T8478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.754156][ T8478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.782715][ T983] usb 5-1: USB disconnect, device number 33 [ 259.899730][ T8485] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 260.000896][ T8489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.658'. [ 260.011924][ T8489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.658'. [ 260.164263][ T8038] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 260.171889][ T6232] usb 2-1: new low-speed USB device number 45 using dummy_hcd [ 260.355599][ T8038] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 260.366754][ T8038] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 260.647394][ T6232] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 260.655855][ T6232] usb 2-1: config 179 has no interface number 0 [ 260.662115][ T8038] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 260.671911][ T6232] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 260.757596][ T8038] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 260.766746][ T6232] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 260.783628][ T8038] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.799307][ T6232] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 260.838710][ T8038] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 260.879744][ T6232] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 260.923630][ T6232] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 261.010549][ T6232] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 261.024836][ T6232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.071361][ T8486] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 261.084386][ T8038] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 261.159676][ T6232] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 261.188126][ T6232] xpad 2-1:179.65: probe with driver xpad failed with error -90 [ 261.364484][ T6232] usb 3-1: USB disconnect, device number 41 [ 261.999313][ T8511] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4243739199 (8487478398 ns) > initial count (2409167910 ns). Using initial count to start timer. [ 263.101987][ T8516] trusted_key: encrypted_key: keylen parameter is missing [ 263.420885][ T5161] usb 2-1: USB disconnect, device number 45 [ 263.528015][ T5824] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 263.624428][ T8527] netlink: 'syz.3.666': attribute type 10 has an invalid length. [ 264.354105][ T8527] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 264.894170][ T8544] input: syz1 as /devices/virtual/input/input36 [ 265.524611][ T10] usb 1-1: new low-speed USB device number 33 using dummy_hcd [ 265.733687][ T6232] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 265.741285][ T10] usb 1-1: device descriptor read/64, error -71 [ 265.893661][ T6232] usb 4-1: Using ep0 maxpacket: 16 [ 265.904913][ T6232] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 265.914248][ T6232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.922281][ T6232] usb 4-1: Product: syz [ 265.927068][ T6232] usb 4-1: Manufacturer: syz [ 265.931658][ T6232] usb 4-1: SerialNumber: syz [ 265.951508][ T6232] r8152-cfgselector 4-1: Unknown version 0x0000 [ 265.958049][ T6232] r8152-cfgselector 4-1: config 0 descriptor?? [ 265.983665][ T10] usb 1-1: new low-speed USB device number 34 using dummy_hcd [ 266.098465][ T8555] net_ratelimit: 33 callbacks suppressed [ 266.098482][ T8555] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.115508][ T10] usb 1-1: device descriptor read/64, error -71 [ 266.252842][ T10] usb usb1-port1: attempt power cycle [ 266.593788][ T10] usb 1-1: new low-speed USB device number 35 using dummy_hcd [ 266.634379][ T10] usb 1-1: device descriptor read/8, error -71 [ 266.765080][ T8558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.675'. [ 266.782883][ T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.795002][ T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.804286][ T8558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.675'. [ 266.813283][ T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.842319][ T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.886759][ T10] usb 1-1: new low-speed USB device number 36 using dummy_hcd [ 266.915583][ T10] usb 1-1: device descriptor read/8, error -71 [ 267.024512][ T10] usb usb1-port1: unable to enumerate USB device [ 268.153658][ T5881] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 268.313688][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 268.324441][ T5881] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 268.336122][ T5881] usb 2-1: config 0 has no interface number 0 [ 268.356201][ T5881] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 268.379294][ T5881] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 268.396329][ T5881] usb 2-1: config 0 interface 41 has no altsetting 0 [ 268.417574][ T5881] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 268.427693][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.457687][ T5881] usb 2-1: Product: syz [ 268.470047][ T5881] usb 2-1: Manufacturer: syz [ 268.484615][ T5881] usb 2-1: SerialNumber: syz [ 268.496451][ T5881] usb 2-1: config 0 descriptor?? [ 268.510053][ T8569] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 268.510204][ T8569] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 268.648749][ T8581] fuse: Unknown parameter '0fgMD.َeXըղ [ 268.648749][ T8581] m?e?/Ta"֍VpuY$ LEx'`ҒG\z'#Z$W-H%G ' [ 268.712613][ T8569] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 268.729089][ T8569] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 268.855485][ T8592] bond3: option all_slaves_active: invalid value (9) [ 268.881730][ T8595] syz.0.684 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 268.910671][ T8592] bond3 (unregistering): Released all slaves [ 268.934062][ T8596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.098523][ T6232] r8152-cfgselector 4-1: Unknown version 0x0000 [ 269.115437][ T6232] r8152-cfgselector 4-1: bad CDC descriptors [ 269.176577][ T6232] r8152-cfgselector 4-1: USB disconnect, device number 48 [ 269.269020][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.688'. [ 269.419849][ T5881] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 269.664044][ T6232] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 269.671688][ T5895] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 269.805151][ T6232] usb 4-1: device descriptor read/64, error -71 [ 269.823994][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 269.834504][ T5895] usb 5-1: unable to get BOS descriptor or descriptor too short [ 269.855013][ T5895] usb 5-1: config 50 has an invalid interface number: 75 but max is 0 [ 269.863769][ T5895] usb 5-1: config 50 has no interface number 0 [ 269.875678][ T5895] usb 5-1: config 50 interface 75 altsetting 42 endpoint 0x3 has invalid maxpacket 592, setting to 64 [ 269.886945][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 269.886959][ T30] audit: type=1326 audit(1762997815.953:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8617 comm="syz.2.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6918f6c9 code=0x7ffc0000 [ 269.918000][ T5895] usb 5-1: config 50 interface 75 altsetting 42 bulk endpoint 0x2 has invalid maxpacket 32 [ 269.933447][ T5895] usb 5-1: config 50 interface 75 has no altsetting 0 [ 269.949026][ T30] audit: type=1326 audit(1762997815.953:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8617 comm="syz.2.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f4a6918f6c9 code=0x7ffc0000 [ 269.971638][ T30] audit: type=1326 audit(1762997815.953:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8617 comm="syz.2.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6918f6c9 code=0x7ffc0000 [ 269.995846][ T30] audit: type=1326 audit(1762997815.953:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8617 comm="syz.2.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a6918f6c9 code=0x7ffc0000 [ 269.996054][ T5895] usb 5-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 270.018655][ T30] audit: type=1326 audit(1762997815.953:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8617 comm="syz.2.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6918f6c9 code=0x7ffc0000 [ 270.032324][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.057710][ T30] audit: type=1326 audit(1762997815.953:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8617 comm="syz.2.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6918f6c9 code=0x7ffc0000 [ 270.081349][ T6232] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 270.151482][ T5895] usb 5-1: Product: syz [ 270.159108][ T5895] usb 5-1: Manufacturer: syz [ 270.172899][ T5895] usb 5-1: SerialNumber: syz [ 270.185088][ T8616] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 270.223709][ T6232] usb 4-1: device descriptor read/64, error -71 [ 270.265951][ C1] sd 0:0:1:0: [sda] tag#175 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 270.276305][ C1] sd 0:0:1:0: [sda] tag#175 CDB: Read(6) 08 00 00 00 03 44 [ 270.307027][ T8622] netlink: 16 bytes leftover after parsing attributes in process `syz.2.692'. [ 270.343892][ T6232] usb usb4-port1: attempt power cycle [ 270.403464][ T5881] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 270.422952][ T5881] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 270.445348][ T5881] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 270.490557][ T5895] radioshark 5-1:50.75: Invalid radioSHARK device [ 270.523112][ T5895] radioshark 5-1:50.75: probe with driver radioshark failed with error -22 [ 270.587312][ T5881] usb 2-1: USB disconnect, device number 46 [ 270.600218][ T5895] usbhid 5-1:50.75: couldn't find an input interrupt endpoint [ 270.663519][ T5895] usb 5-1: USB disconnect, device number 34 [ 270.683781][ T6232] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 270.703595][ T8628] syzkaller0: entered promiscuous mode [ 270.715560][ T6232] usb 4-1: device descriptor read/8, error -71 [ 270.744430][ T8628] syzkaller0: entered allmulticast mode [ 270.903240][ T8637] ip6tnl1: entered allmulticast mode [ 270.979413][ T6232] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 271.073693][ T6232] usb 4-1: device descriptor read/8, error -71 [ 271.255822][ T6232] usb usb4-port1: unable to enumerate USB device [ 271.286379][ T8642] all (unregistering): Released all slaves [ 271.579361][ T8646] geneve2: entered promiscuous mode [ 271.591284][ T8646] geneve2: entered allmulticast mode [ 272.015899][ T8651] ipip1: entered promiscuous mode [ 272.020978][ T8651] ipip1: entered allmulticast mode [ 272.553673][ T5895] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 272.698097][ T8661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.701'. [ 272.735399][ T5895] usb 1-1: Using ep0 maxpacket: 16 [ 272.773736][ T5895] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.833815][ T5895] usb 1-1: config 0 interface 0 has no altsetting 0 [ 272.840565][ T5895] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 272.850401][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.865605][ T5895] usb 1-1: config 0 descriptor?? [ 273.189405][ T8673] netlink: 72 bytes leftover after parsing attributes in process `syz.4.704'. [ 273.199526][ T8673] netlink: 72 bytes leftover after parsing attributes in process `syz.4.704'. [ 273.309147][ T5895] nzxt-smart2 0003:1E71:2009.0028: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 273.491863][ T8657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.509097][ T8657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.549463][ T5895] usb 1-1: USB disconnect, device number 37 [ 274.261401][ T6232] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 274.415514][ T6232] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 274.429238][ T6232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.573894][ T6232] usb 3-1: config 0 descriptor?? [ 274.600339][ T6232] cp210x 3-1:0.0: cp210x converter detected [ 274.623643][ T5895] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 274.773655][ T5895] usb 2-1: Using ep0 maxpacket: 16 [ 274.786348][ T5895] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.803700][ T5895] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.813770][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 274.863601][ T5895] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 48421, setting to 64 [ 274.881253][ T5895] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 274.913973][ T5895] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 274.933192][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 274.943647][ T5895] usb 2-1: SerialNumber: syz [ 274.975565][ T5895] hub 2-1:1.0: bad descriptor, ignoring hub [ 275.001940][ T5895] hub 2-1:1.0: probe with driver hub failed with error -5 [ 275.022440][ T5895] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 275.278013][ T8708] fuse: Unknown parameter 'd' [ 275.390116][ T8691] raw-gadget.1 gadget.1: fail, usb_ep_set_wedge returned -11 [ 275.405563][ T8718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.534304][ T8718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.547390][ T8719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.588591][ T8719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.694943][ T8718] random: crng reseeded on system resumption [ 276.825250][ T8038] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 276.993866][ T8038] usb 5-1: Invalid ep0 maxpacket: 32 [ 277.060702][ T8740] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 277.136517][ T8038] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 277.261346][ T8744] fuse: Unknown parameter '00000000000000000000fd' [ 277.335590][ T8038] usb 5-1: Invalid ep0 maxpacket: 32 [ 277.341465][ T8038] usb usb5-port1: attempt power cycle [ 277.418165][ T10] usb 2-1: USB disconnect, device number 47 [ 277.543425][ T6232] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 277.557218][ T6232] cp210x 3-1:0.0: querying part number failed [ 277.573358][ T6232] usb 3-1: cp210x converter now attached to ttyUSB0 [ 277.606418][ T6232] usb 3-1: USB disconnect, device number 42 [ 277.626884][ T6232] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 277.638228][ T6232] cp210x 3-1:0.0: device disconnected [ 277.704072][ T8038] usb 5-1: new low-speed USB device number 37 using dummy_hcd [ 277.744947][ T8038] usb 5-1: Invalid ep0 maxpacket: 32 [ 277.753708][ T10] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 277.895444][ T8038] usb 5-1: new low-speed USB device number 38 using dummy_hcd [ 277.924458][ T8038] usb 5-1: Invalid ep0 maxpacket: 32 [ 277.930460][ T8038] usb usb5-port1: unable to enumerate USB device [ 277.937313][ T10] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 277.948126][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.981574][ T10] usb 2-1: config 0 has no interface number 0 [ 278.003107][ T10] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 278.040699][ T8756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.727'. [ 278.052657][ T10] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 278.096292][ T10] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 278.112438][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.123221][ T10] usb 2-1: Product: syz [ 278.127555][ T10] usb 2-1: Manufacturer: syz [ 278.132152][ T10] usb 2-1: SerialNumber: syz [ 278.143376][ T10] usb 2-1: config 0 descriptor?? [ 279.283699][ T43] usb 3-1: new low-speed USB device number 43 using dummy_hcd [ 279.447678][ T43] usb 3-1: config 1 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 279.484174][ T43] usb 3-1: config 1 interface 0 altsetting 16 endpoint 0x82 is Bulk; changing to Interrupt [ 279.514633][ T43] usb 3-1: config 1 interface 0 altsetting 16 endpoint 0x3 is Bulk; changing to Interrupt [ 279.556703][ T8778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.566741][ T43] usb 3-1: config 1 interface 0 has no altsetting 0 [ 279.589192][ T43] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 279.601292][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.627396][ T43] usb 3-1: Product: ⠊ [ 279.640004][ T43] usb 3-1: Manufacturer: 璮읦ୟ䝦﫛ƺ鰂썈搇豝젰᫔颽課ē뷚熀翀뚸Ꮿ徢丯⡜ꋫ疼嵝夑맊큣ܨ㵍虁賽ف觨썕䇟텳ھ榘Xⷋ콐똪婣沃帎尬픾䠒汚潮砢큪耕뎪楪碌痥ꢙ쑤羙峵瑖ꝶ쉘귐䥟띙遑寄쨣ℴᆮ靄ˎ萍ࡳ佚溫ᢍﹴᩞ筵퓝省ⵅ立ᠼ艥⾥⯘뚖뫷熶鄫忌컫␴讏 [ 279.748087][ T8770] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 279.756421][ T8770] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 279.768559][ T8770] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 279.780705][ T8781] netlink: 16 bytes leftover after parsing attributes in process `syz.0.734'. [ 279.786293][ T30] audit: type=1326 audit(1762997825.863:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cae98f6c9 code=0x7ffc0000 [ 279.944817][ T30] audit: type=1326 audit(1762997825.863:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cae98f6c9 code=0x7ffc0000 [ 280.039042][ T30] audit: type=1326 audit(1762997825.943:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8cae98f6c9 code=0x7ffc0000 [ 280.149703][ T30] audit: type=1326 audit(1762997825.943:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cae98f6c9 code=0x7ffc0000 [ 280.219195][ T8770] libceph: resolve '0.' (ret=-3): failed [ 280.246214][ T30] audit: type=1326 audit(1762997825.943:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cae98f6c9 code=0x7ffc0000 [ 280.290859][ T30] audit: type=1326 audit(1762997825.943:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8cae98f6c9 code=0x7ffc0000 [ 280.364850][ T30] audit: type=1326 audit(1762997825.943:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cae98f6c9 code=0x7ffc0000 [ 280.432712][ T30] audit: type=1326 audit(1762997825.943:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cae98f6c9 code=0x7ffc0000 [ 280.464925][ T5161] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 280.548628][ T10] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 280.562633][ T30] audit: type=1326 audit(1762997825.943:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f8cae98f6c9 code=0x7ffc0000 [ 280.613763][ T10] usb 2-1: USB disconnect, device number 48 [ 280.650192][ T30] audit: type=1326 audit(1762997825.943:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cae98f6c9 code=0x7ffc0000 [ 280.719818][ T5161] usb 4-1: unable to get BOS descriptor or descriptor too short [ 280.728979][ T5161] usb 4-1: not running at top speed; connect to a high speed hub [ 280.742972][ T5161] usb 4-1: config 3 has an invalid interface number: 98 but max is 0 [ 280.751710][ T5161] usb 4-1: config 3 has no interface number 0 [ 280.763281][ T5161] usb 4-1: config 3 interface 98 altsetting 10 endpoint 0x2 has invalid wMaxPacketSize 0 [ 280.962992][ T43] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 280.984598][ T5161] usb 4-1: config 3 interface 98 has no altsetting 0 [ 281.087711][ T43] usb 3-1: USB disconnect, device number 43 [ 281.109306][ T5161] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=b9.a8 [ 281.119301][ T5161] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.128028][ T5161] usb 4-1: Product: syz [ 281.133836][ T5161] usb 4-1: Manufacturer: syz [ 281.164767][ T5161] usb 4-1: SerialNumber: syz [ 283.044800][ T5161] usb 4-1: USB disconnect, device number 53 [ 283.153650][ T5902] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 283.304440][ T5902] usb 5-1: Using ep0 maxpacket: 16 [ 283.326811][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.453937][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.497465][ T5902] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 283.532235][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.557720][ T5902] usb 5-1: config 0 descriptor?? [ 283.797648][ T8841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.806417][ T8841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.829597][ T8841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.870365][ T8841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.995798][ T8830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.744'. [ 284.011480][ T5902] usbhid 5-1:0.0: can't add hid device: -71 [ 284.018783][ T5902] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 284.033675][ T10] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 284.054577][ T5902] usb 5-1: USB disconnect, device number 39 [ 284.236699][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 284.245892][ T10] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 284.271176][ T10] usb 2-1: config 0 has no interface number 0 [ 284.283977][ T10] usb 2-1: config 0 interface 89 has no altsetting 0 [ 284.307199][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 284.320343][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.339013][ T10] usb 2-1: Product: syz [ 284.343174][ T10] usb 2-1: Manufacturer: syz [ 284.369369][ T10] usb 2-1: SerialNumber: syz [ 284.392275][ T10] usb 2-1: config 0 descriptor?? [ 284.411515][ T10] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 284.421551][ T10] em28xx 2-1:0.89: Video interface 89 found: bulk [ 284.533763][ T5902] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 284.763633][ T5902] usb 5-1: Using ep0 maxpacket: 16 [ 284.777294][ T5902] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.813287][ T5902] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 284.832777][ T5902] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 284.832803][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.846639][ T5902] usb 5-1: config 0 descriptor?? [ 285.083243][ T8856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.752'. [ 285.104513][ T10] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 285.128589][ T8855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.752'. [ 285.631723][ T5902] usb 5-1: USB disconnect, device number 40 [ 286.175532][ T8872] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 286.263743][ T8038] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 286.313646][ T5902] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 286.444227][ T6232] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 286.453658][ T8038] usb 4-1: config 0 has an invalid interface number: 112 but max is 0 [ 286.461905][ T8038] usb 4-1: config 0 has no interface number 0 [ 286.465584][ T5902] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 286.468268][ T8038] usb 4-1: config 0 interface 112 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 286.476850][ T5902] usb 1-1: config 0 has no interface number 0 [ 286.491671][ T8038] usb 4-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 286.493429][ T5902] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.502908][ T8038] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.519230][ T5902] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.524078][ T8038] usb 4-1: Product: syz [ 286.535963][ T8038] usb 4-1: Manufacturer: syz [ 286.537564][ T5902] usb 1-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 286.540672][ T8038] usb 4-1: SerialNumber: syz [ 286.550413][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.558441][ T8038] usb 4-1: config 0 descriptor?? [ 286.570408][ T5902] usb 1-1: config 0 descriptor?? [ 286.583695][ T6232] usb 5-1: device descriptor read/64, error -71 [ 286.601045][ T8038] mvusb_mdio 4-1:0.112: probe with driver mvusb_mdio failed with error -5 [ 286.833859][ T6232] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 286.996262][ T5902] uclogic 0003:28BD:0905.0029: Interface probing failed: -22 [ 287.001723][ T6232] usb 5-1: device descriptor read/64, error -71 [ 287.022070][ T5902] uclogic 0003:28BD:0905.0029: interface is invalid, ignoring [ 287.133975][ T6232] usb usb5-port1: attempt power cycle [ 287.231512][ T8038] usb 1-1: USB disconnect, device number 38 [ 287.309531][ T10] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 287.318017][ T10] em28xx 2-1:0.89: board has no eeprom [ 287.384084][ T10] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 287.396563][ T10] em28xx 2-1:0.89: analog set to bulk mode. [ 287.403126][ T5895] em28xx 2-1:0.89: Registering V4L2 extension [ 287.551614][ T6232] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 287.575637][ T10] usb 2-1: USB disconnect, device number 49 [ 287.583319][ T10] em28xx 2-1:0.89: Disconnecting em28xx [ 287.590054][ T6232] usb 5-1: device descriptor read/8, error -71 [ 287.690402][ T5895] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 287.705085][ T5895] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 287.724499][ T5895] em28xx 2-1:0.89: No AC97 audio processor [ 287.752076][ T5895] usb 2-1: Decoder not found [ 287.765634][ T5895] em28xx 2-1:0.89: failed to create media graph [ 287.857706][ T6232] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 287.908063][ T6232] usb 5-1: device descriptor read/8, error -71 [ 287.921122][ T5895] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 287.945269][ T5895] em28xx 2-1:0.89: Registering snapshot button... [ 287.964267][ T5895] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input39 [ 287.976071][ T5895] em28xx 2-1:0.89: Remote control support is not available for this card. [ 287.987997][ T10] em28xx 2-1:0.89: Closing input extension [ 287.996516][ T8889] ================================================================== [ 287.996528][ T10] em28xx 2-1:0.89: Deregistering snapshot button [ 288.004584][ T8889] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 288.004611][ T8889] Read of size 8 at addr ffff88807bbf0740 by task v4l_id/8889 [ 288.004625][ T8889] [ 288.004635][ T8889] CPU: 1 UID: 0 PID: 8889 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 288.004653][ T8889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 288.004671][ T8889] Call Trace: [ 288.004679][ T8889] [ 288.004686][ T8889] dump_stack_lvl+0x189/0x250 [ 288.004710][ T8889] ? __virt_addr_valid+0x1c8/0x5c0 [ 288.004731][ T8889] ? rcu_is_watching+0x15/0xb0 [ 288.004750][ T8889] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.004770][ T8889] ? rcu_is_watching+0x15/0xb0 [ 288.004787][ T8889] ? lock_release+0x4b/0x3e0 [ 288.004803][ T8889] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 288.004824][ T8889] ? __virt_addr_valid+0x1c8/0x5c0 [ 288.004845][ T8889] ? __virt_addr_valid+0x4a5/0x5c0 [ 288.004866][ T8889] print_report+0xca/0x240 [ 288.004885][ T8889] ? v4l2_fh_open+0xac/0x420 [ 288.004900][ T8889] kasan_report+0x118/0x150 [ 288.004918][ T8889] ? v4l2_fh_open+0xac/0x420 [ 288.004936][ T8889] v4l2_fh_open+0xac/0x420 [ 288.004952][ T8889] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 288.004976][ T8889] em28xx_v4l2_open+0x157/0x9a0 [ 288.005004][ T8889] v4l2_open+0x1bf/0x3a0 [ 288.005023][ T8889] chrdev_open+0x4cc/0x5e0 [ 288.005040][ T8889] ? __pfx_chrdev_open+0x10/0x10 [ 288.005057][ T8889] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 288.005076][ T8889] ? __pfx_chrdev_open+0x10/0x10 [ 288.005090][ T8889] do_dentry_open+0x953/0x13f0 [ 288.005114][ T8889] vfs_open+0x3b/0x340 [ 288.005129][ T8889] ? path_openat+0x2ecd/0x3830 [ 288.005150][ T8889] path_openat+0x2ee5/0x3830 [ 288.005182][ T8889] ? __pfx_path_openat+0x10/0x10 [ 288.005209][ T8889] do_filp_open+0x1fa/0x410 [ 288.005228][ T8889] ? __lock_acquire+0xab9/0xd20 [ 288.005244][ T8889] ? __pfx_do_filp_open+0x10/0x10 [ 288.005271][ T8889] ? _raw_spin_unlock+0x28/0x50 [ 288.005290][ T8889] ? alloc_fd+0x64c/0x6c0 [ 288.005316][ T8889] do_sys_openat2+0x121/0x1c0 [ 288.005336][ T8889] ? __pfx_do_sys_openat2+0x10/0x10 [ 288.005355][ T8889] ? exc_page_fault+0x82/0x100 [ 288.005376][ T8889] ? do_user_addr_fault+0xc85/0x1380 [ 288.005393][ T8889] __x64_sys_openat+0x138/0x170 [ 288.005414][ T8889] do_syscall_64+0xfa/0xfa0 [ 288.005435][ T8889] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.005455][ T8889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.005471][ T8889] ? clear_bhb_loop+0x60/0xb0 [ 288.005489][ T8889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.005505][ T8889] RIP: 0033:0x7f99d60a7407 [ 288.005520][ T8889] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 288.005541][ T8889] RSP: 002b:00007ffe74def080 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 288.005559][ T8889] RAX: ffffffffffffffda RBX: 00007f99d681c880 RCX: 00007f99d60a7407 [ 288.005572][ T8889] RDX: 0000000000000000 RSI: 00007ffe74deff1c RDI: ffffffffffffff9c [ 288.005584][ T8889] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 288.005594][ T8889] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 288.005605][ T8889] R13: 00007ffe74def2d0 R14: 00007f99d6983000 R15: 00005653a9d6d4d8 [ 288.005624][ T8889] [ 288.005631][ T8889] [ 288.053252][ T6232] usb usb5-port1: unable to enumerate USB device [ 288.057708][ T8889] Allocated by task 5895: [ 288.057719][ T8889] kasan_save_track+0x3e/0x80 [ 288.057743][ T8889] __kasan_kmalloc+0x93/0xb0 [ 288.349426][ T8889] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 288.354780][ T8889] em28xx_v4l2_init+0x10b/0x2e70 [ 288.359699][ T8889] em28xx_init_extension+0x120/0x1c0 [ 288.364977][ T8889] process_scheduled_works+0xae1/0x17b0 [ 288.370500][ T8889] worker_thread+0x8a0/0xda0 [ 288.375069][ T8889] kthread+0x711/0x8a0 [ 288.379199][ T8889] ret_from_fork+0x4bc/0x870 [ 288.383773][ T8889] ret_from_fork_asm+0x1a/0x30 [ 288.388514][ T8889] [ 288.390811][ T8889] Freed by task 5895: [ 288.394761][ T8889] kasan_save_track+0x3e/0x80 [ 288.399413][ T8889] __kasan_save_free_info+0x46/0x50 [ 288.404587][ T8889] __kasan_slab_free+0x5c/0x80 [ 288.409329][ T8889] kfree+0x19a/0x6d0 [ 288.413198][ T8889] em28xx_v4l2_init+0x1683/0x2e70 [ 288.418196][ T8889] em28xx_init_extension+0x120/0x1c0 [ 288.423803][ T8889] process_scheduled_works+0xae1/0x17b0 [ 288.429320][ T8889] worker_thread+0x8a0/0xda0 [ 288.433885][ T8889] kthread+0x711/0x8a0 [ 288.437931][ T8889] ret_from_fork+0x4bc/0x870 [ 288.443026][ T8889] ret_from_fork_asm+0x1a/0x30 [ 288.447776][ T8889] [ 288.450090][ T8889] The buggy address belongs to the object at ffff88807bbf0000 [ 288.450090][ T8889] which belongs to the cache kmalloc-8k of size 8192 [ 288.464117][ T8889] The buggy address is located 1856 bytes inside of [ 288.464117][ T8889] freed 8192-byte region [ffff88807bbf0000, ffff88807bbf2000) [ 288.478066][ T8889] [ 288.480369][ T8889] The buggy address belongs to the physical page: [ 288.486763][ T8889] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7bbf0 [ 288.495500][ T8889] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 288.503972][ T8889] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 288.511500][ T8889] page_type: f5(slab) [ 288.515461][ T8889] raw: 00fff00000000040 ffff88801a027280 ffffea0000a5f200 dead000000000002 [ 288.524021][ T8889] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 288.532581][ T8889] head: 00fff00000000040 ffff88801a027280 ffffea0000a5f200 dead000000000002 [ 288.541226][ T8889] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 288.549874][ T8889] head: 00fff00000000003 ffffea0001eefc01 00000000ffffffff 00000000ffffffff [ 288.558525][ T8889] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 288.567168][ T8889] page dumped because: kasan: bad access detected [ 288.573569][ T8889] page_owner tracks the page as allocated [ 288.579265][ T8889] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8221, tgid 8220 (syz.3.585), ts 245541988660, free_ts 245467540884 [ 288.600511][ T8889] post_alloc_hook+0x240/0x2a0 [ 288.605256][ T8889] get_page_from_freelist+0x2365/0x2440 [ 288.610776][ T8889] __alloc_frozen_pages_noprof+0x181/0x370 [ 288.616559][ T8889] alloc_pages_mpol+0x232/0x4a0 [ 288.621395][ T8889] allocate_slab+0x96/0x350 [ 288.625876][ T8889] ___slab_alloc+0xf56/0x1990 [ 288.630538][ T8889] __slab_alloc+0x65/0x100 [ 288.634926][ T8889] __kmalloc_noprof+0x471/0x7f0 [ 288.639750][ T8889] ops_init+0x7b/0x5c0 [ 288.643788][ T8889] setup_net+0xfe/0x320 [ 288.647918][ T8889] copy_net_ns+0x34e/0x4e0 [ 288.652306][ T8889] create_new_namespaces+0x3f3/0x720 [ 288.657566][ T8889] unshare_nsproxy_namespaces+0x11c/0x170 [ 288.663258][ T8889] ksys_unshare+0x4c8/0x8c0 [ 288.667747][ T8889] __x64_sys_unshare+0x38/0x50 [ 288.672492][ T8889] do_syscall_64+0xfa/0xfa0 [ 288.676978][ T8889] page last free pid 8222 tgid 8220 stack trace: [ 288.683275][ T8889] __free_frozen_pages+0xbc4/0xd30 [ 288.688363][ T8889] __put_partials+0x146/0x170 [ 288.693012][ T8889] put_cpu_partial+0x1f2/0x2e0 [ 288.697752][ T8889] __slab_free+0x2b9/0x390 [ 288.702143][ T8889] qlist_free_all+0x97/0x140 [ 288.706716][ T8889] kasan_quarantine_reduce+0x148/0x160 [ 288.712158][ T8889] __kasan_slab_alloc+0x22/0x80 [ 288.716988][ T8889] kmem_cache_alloc_node_noprof+0x433/0x710 [ 288.722855][ T8889] __alloc_skb+0x112/0x2d0 [ 288.727244][ T8889] rtmsg_ifinfo_build_skb+0x84/0x260 [ 288.732505][ T8889] rtnetlink_event+0x1b7/0x270 [ 288.737243][ T8889] notifier_call_chain+0x1b6/0x3e0 [ 288.742329][ T8889] call_netdevice_notifiers+0x88/0xc0 [ 288.747691][ T8889] __tun_chr_ioctl+0x16cb/0x1df0 [ 288.752605][ T8889] __se_sys_ioctl+0xfc/0x170 [ 288.757167][ T8889] do_syscall_64+0xfa/0xfa0 [ 288.761651][ T8889] [ 288.763949][ T8889] Memory state around the buggy address: [ 288.769557][ T8889] ffff88807bbf0600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 288.777604][ T8889] ffff88807bbf0680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 288.785638][ T8889] >ffff88807bbf0700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 288.793669][ T8889] ^ [ 288.799795][ T8889] ffff88807bbf0780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 288.807824][ T8889] ffff88807bbf0800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 288.815856][ T8889] ================================================================== [ 288.855210][ T8889] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 288.862417][ T8889] CPU: 1 UID: 0 PID: 8889 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 288.871352][ T8889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 288.881408][ T8889] Call Trace: [ 288.884671][ T8889] [ 288.887589][ T8889] dump_stack_lvl+0x99/0x250 [ 288.892160][ T8889] ? __asan_memcpy+0x40/0x70 [ 288.896730][ T8889] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.901914][ T8889] ? __pfx__printk+0x10/0x10 [ 288.906503][ T8889] vpanic+0x237/0x6d0 [ 288.910466][ T8889] ? __pfx_vpanic+0x10/0x10 [ 288.914956][ T8889] ? preempt_schedule+0xae/0xc0 [ 288.919805][ T8889] ? __pfx_preempt_schedule+0x10/0x10 [ 288.925167][ T8889] panic+0xb9/0xc0 [ 288.928874][ T8889] ? __pfx_panic+0x10/0x10 [ 288.933271][ T8889] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 288.939145][ T8889] ? is_module_address+0x17/0xf0 [ 288.944064][ T8889] ? v4l2_fh_open+0xac/0x420 [ 288.948633][ T8889] check_panic_on_warn+0x89/0xb0 [ 288.953555][ T8889] ? v4l2_fh_open+0xac/0x420 [ 288.958122][ T8889] end_report+0x78/0x160 [ 288.962351][ T8889] kasan_report+0x129/0x150 [ 288.966838][ T8889] ? v4l2_fh_open+0xac/0x420 [ 288.971412][ T8889] v4l2_fh_open+0xac/0x420 [ 288.975813][ T8889] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 288.981784][ T8889] em28xx_v4l2_open+0x157/0x9a0 [ 288.986634][ T8889] v4l2_open+0x1bf/0x3a0 [ 288.990861][ T8889] chrdev_open+0x4cc/0x5e0 [ 288.995262][ T8889] ? __pfx_chrdev_open+0x10/0x10 [ 289.000180][ T8889] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 289.006509][ T8889] ? __pfx_chrdev_open+0x10/0x10 [ 289.011423][ T8889] do_dentry_open+0x953/0x13f0 [ 289.016172][ T8889] vfs_open+0x3b/0x340 [ 289.020221][ T8889] ? path_openat+0x2ecd/0x3830 [ 289.024966][ T8889] path_openat+0x2ee5/0x3830 [ 289.029549][ T8889] ? __pfx_path_openat+0x10/0x10 [ 289.034473][ T8889] do_filp_open+0x1fa/0x410 [ 289.038959][ T8889] ? __lock_acquire+0xab9/0xd20 [ 289.043789][ T8889] ? __pfx_do_filp_open+0x10/0x10 [ 289.048811][ T8889] ? _raw_spin_unlock+0x28/0x50 [ 289.053645][ T8889] ? alloc_fd+0x64c/0x6c0 [ 289.057966][ T8889] do_sys_openat2+0x121/0x1c0 [ 289.062627][ T8889] ? __pfx_do_sys_openat2+0x10/0x10 [ 289.067807][ T8889] ? exc_page_fault+0x82/0x100 [ 289.072559][ T8889] ? do_user_addr_fault+0xc85/0x1380 [ 289.077825][ T8889] __x64_sys_openat+0x138/0x170 [ 289.082661][ T8889] do_syscall_64+0xfa/0xfa0 [ 289.087148][ T8889] ? lockdep_hardirqs_on+0x9c/0x150 [ 289.092327][ T8889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.098371][ T8889] ? clear_bhb_loop+0x60/0xb0 [ 289.103027][ T8889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.108897][ T8889] RIP: 0033:0x7f99d60a7407 [ 289.113295][ T8889] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 289.132877][ T8889] RSP: 002b:00007ffe74def080 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 289.141271][ T8889] RAX: ffffffffffffffda RBX: 00007f99d681c880 RCX: 00007f99d60a7407 [ 289.149220][ T8889] RDX: 0000000000000000 RSI: 00007ffe74deff1c RDI: ffffffffffffff9c [ 289.157172][ T8889] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 289.165123][ T8889] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 289.173072][ T8889] R13: 00007ffe74def2d0 R14: 00007f99d6983000 R15: 00005653a9d6d4d8 [ 289.181025][ T8889] [ 289.184280][ T8889] Kernel Offset: disabled [ 289.188584][ T8889] Rebooting in 86400 seconds..