last executing test programs: 5m24.127270303s ago: executing program 4 (id=854): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r0, &(0x7f0000000040), 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',group_', @ANYRESDEC=0x0, @ANYBLOB="2c002d038e36de70825379d8417c0ffe8fc118d6ce0c288a31e6d169d49536620422b02ba1a54b1e647a6173dabb4a0f478665d7c83344774f61c7cc3aed1292a3484a941136274be58bd607a3f8758b93a9e293abe0985cbe7538b1c61dec40af54ae5464a9191af0880b86f18e2b8725b648371cdef3cc626c10b9d613f7e7ce4212d40764"]) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) syz_fuse_handle_req(r1, &(0x7f00000042c0)="0d9ec529eb18ec94a35378619cb10ff8c913f67139447b7ee0cca809e36c363ba1d3975a7446b70c6bdd99e2cff540eda7589ea89efeb498df568916036f0848ede5f089bf502b483c67c0432c34b98b1bc085a99e2981103397e0b0eed2ec64c1075798b56a42ea532091f5326c97622a47c53fbf42e71c3ed4b954c559424b49a13598c6c63ef65b62384b038b3e6e98ebecd178289831eaecd986a01c751e8cca7a57c009f2b5310fe9dd8a63b91c4b5b13d1c44d2b874b32ae3e961b9e96a511ffaa3ed20248dfb470460d305e44ffcd287b355380319fd31f7538c6d00de06ddb8f72b3a59c4699c94d7379e1e190c6dd7786e12096f9e963a038b6b4375535047135ecc07b16035ceeb27ed09d77f52b6eae27a03071e060b05bf347b9ba44a984e5db346d230ae9c5324ecfd4e7725bc5019a9f4d20237c820359d73b82f9c668ae71f6b85d5350140a16f988bb2b8010effb52636e0b728be1b1ed37c1b8868ec67edd52951dbf65b479aa25e92667a98c755d88995e6303a48a64317bd4b201fc6dea59381abfb5e0fb1035bbd32a97a6324b08f404fe3991879a0c6362032864031737941d9cc534697da61a43c8723ecd1062906b65c504d86383cdf9631f228372b13aee64f8ea8db00dffc37fa092ab5daeb7431dab37091c44f91c9202df60876a6e06ceee3e6a095406fe5cc1f83de1a4adf36fbef5a94a622132cc85e56fb53a9cff67bc69a24d8c259ccfe19b1925061f0cad95d6b4158c1394b8acfa9a8f52a566c6cb4e0b14dd30c85b309289a5f395e01d981735f6fce6ab30994643d70b2f322b7a233a339e621ea2eb00a0082a175c231b330a58062680546c28db8ff5b7e66c0e3df0a9b74ab72abfd241fcbe1e3d27a2d1eab44cf88180dcef4482c866324133f9e4780b891a7c5000b005cab0c131c225e944fd1aab5de9e8d17b8770b4472b6e4a13b6cce90ba152e5144acf74cd8a9821ce3eae72dc7ddc81b76482226098329c3a8ecb923822610aa0b086f44329522dd8f9ae355b4666d1a10911ef8e21377578b42fe6ee0b2a77917157488d6e0bb388951f80551dcaebf212b396d1f922aec595bd340390d310f6006c4b3efdd80838f39d25470db39d6205ba8f52bac634f8145a3c10ed007acc2f25c5dbfe911f18f44a0c57cee33725eb8c5f2d9112f91787c2c323b67b67d9d1f593d26430d77189d4678fd8d7c11c1f2d744ad59a03a8cffc52ee0293c90b00d61897c80184aa63fcf43c109b06af20c808035af0a0bf9cbe544681768f92a2ebe3b4458dd020fb0550822bc2f769631e00d63bd91e7100299bbc4ce53a35e993e24028dc5c81d46f5377d21f2f38a9688ed981044346b865161b68f3390a50c2e625052396cdb6637e9434904c63d8ca45aa2325626293cdd9cd0179b1d995be10281fa8d281db16320f520e42af268ff30dc2d8885aa3d9e7f294eadb4d827d195cd5d18632928f2153261345c231efd143288b881638b61dc5dab8114c1948d83b8ac4e278f131ec3eef4e87e43a36f4b41a699a741ef3a7cd4f0bc5dbd2dffb1d223a5c5b38b98e49092631a176d15c4f3c077d639726a3482bf2fdc73c2bdb09208aaf90bc64b5fee89d231bb1679de3e5d31962db2c5824ce9941f94500e5a11b8fe79da548efed8cc44e9bc1d5175dd77fc16f8219a83b83ccca2181bf411b0945312598817e08e5277530eccffff17d198613cc8c991349141ced56e79031ab6cb98f3f39e5f20bac76017083041a1ee99ca257d0e0cf95e59617139afb08cf0c6a607d3f2ac2b5d3f4394a4a063c9769bb884ec522d46138228c7e9b5c7ea5e3a6c70815b565ce15a13fd0a5deb28e710c15fe25c744b430b4f6482532fb96566381c56e12632c3c96a7d81ff76966e0f93c83c462bfcef230939e48c4983bfed78f68b0f540d1fff2196cbd1f1c1a1c310ec10f5a2745407000bc6db1fcc8540282cc7e96cf5582c4eaf874a2fe6369534176429b7505eb0aade883260806be2d86a42e76b315a76e5f686ca669f49e1f9054a77b8eaff14a43e9a9801244e8e94ff50a17b60dee0122ea70819bae3375070466c7f202c4ea0fc0c9aaae50c43c554e937f67689b3e18ed543749a7ef0997a7a7530b918c4ef935137137e1ee7e6a8919fb76a8f008ddcc2d8b2e18f3eb90f7a13cf4f49170ccf50c75de82e92a5e2d1f311e59071ff202b6cae4d6243fc3787cb9fbd401938cc18dcf5620f8b8f74e9e3b13dcde85ef896f31f5a2458118addae77206ab1506882f91873b4828950a7b91ddae74888155a9c486c7c60492813ac0e33362dc4e21e00538e5b05b78271d82486a0d156d4a5a07080100000000000000f18648a489352b5d05107909fe54b5d332cde2900c82c150b11071e028eeb275cc9a9614f1eda4e4830b128870e732d473100c24152aff2aa1659daa65d7e9591ebfcae5dca4e84c9a0965a01668e59843ef4a093d9b01067a0ae9d09e3d810c2cb63600ee05b10fc8685e8cb150e2d6d75baecfb8762f7a7d131417eb0721e19e1d21f5adcc1e09489f06b81d91b48608107fc7b3853e214a3c786a9812113ccbcf09907506d0e9cd72c79793584b4fe06a18a627bd969f628a5936367961f1e7d117d03a8fabc85f5ecdd0ddcfae49aa293893a2e5ae376be11031abc0e05ff250b35926345b52f8d3dc02b7497f7513e759247353db9b8e493120e73981aef4c4c9747621537a089848754c14cda1cad18084274e98ea2bf7400ca846184e0e31a571f9bd770222b1038a4ce60dcf8fe9cca4d60048cc29c37c1345de992e9dc7128ef093c1ce80232a88a3da7ae8bc87120c5b1f405d5186141288998fed9e021cd0ad6b12b51c217849390be3ea00cbd6c755958140bfb9b2a2765ad1f51ac045fdc5c28ee5886b1436015b88bd90d19328f91394110b0d891678e63b63d6cc4d35279f6f616d7692c6fe177a79d80ae8f7e4ad5078d8d7096f3ee664dcdb2f634eba98f4788de1f5e34f32ef09e2f0aee4fdc5bec4bc4aeec5721ac3a2da1bf52da017c3312095403d50dcde39671242b610f11832773796557f71455376a7741ab242a9fc94464180bf224d5e8c79b462e3a816f6c08ab0f5503386d34ddfd808b4b8d5d333548d4b873923c6c297b2fa1abe433ec9264385c50dca40316c37ed85db382e7c853ba331c727043cb3345de9f89b1c804e98205eda3d6b6e042c9c41877d456dcb8f12663e6dc1ba809229536fbcc4c58d01a137eb80af8596dfc7b5fa7a044cd141238aa82e440526e55a28c4ed2f4b26157a0eebb4a77c5ab66fcce2602e1a70aea07e5e7e7e5321d58ad128a5ea6b574730037f24a7300e0ad6fc96bd18e03763bbbf21bd3c388aff1cc5ea13728ba2f8e1eb70148d2603e55bb01cce0763c2020b5627a0ccb35ae3a9b3df380e6d9800d9506219a90971a3b8bde1dae6a43fce2aaecbc026be8f4e9bd749e10c87ed7d78f92014342fa449eef28e7175548e5a8ec4fe7d31fc86737aee63ef40b54485380b6898161676f0d82f76113b12a529fbce4482dd278a90aa416077c677aea623ddb3761bc81527ab7e3d73a3b4c8c3e4352c7c083cee8953ebd972a83caed837587e8d7cf360f28ce64e8744ba1098513bb6c7fdc6a3c7c8e5870223d6cc0b18b5d6edea926d5376aeb85488d3712e8f67128f0d3fb2b42f82363a0d4c1c806ff283f6e4ddc10ce4a0803be66a247207d6606c7dd67cd293dada159016d7fd7e88c4df53d09bdd9fd9fa3c732da45fb92bdf6f442eda15edd97bf1928a7699008f0b482240a684ff5efef0cadbf1b4f16888650d59b2bdaeae0d1112a79c5522dd0933ccc16fed7cd0ccabe929f625de8947b3b1532dc04253cca988a1584df2b30092b19410d6f681d614eaa20029592c00c948a98973a9fba87f1397f8859ba543edeb5c0b0db92f65462a1103947d780b539433332d65bd1418bc00c9e815f73e0cc0aca5fcc9f95f707c455013a55a0c4a29093b05b94edc5b5284ec7ccf3ec091002b4229036c174e2927127f40769ece890612bbeb960d9392f442765a2ca8990c52ad7d4441e975a7cf079d139945f2b2a8a34f0e85d76cbc96efbb52cf8b5ae681234e14b6648244d41cfee2d9b189cd831cc2f31ae7e5f11aaaff1629f8c2cf73494ac38e58da7010dd986f8b6134ee0dabfdcb30617d15720cffbec7651f22253aea21696d2ece4fe026543ea2f3473e4c12e65dbb3cbf764ffa0b3a396382b9b7f0c24eaaf3495554b2319b66f3cabf01a8d6cfd1382d94ab71cd11eae2a42e4dc841d4a9732c395688d3377c8ccff7e3f88a3129855a5f41a7de6b6a9ac40a87c288f4821295edfc4f5b8fe5a1fc0162e9820205c809935cc6047e8a835c651be02fb41c21de30ac770d7a7f2108c6a3f1cf2649cac444f028a6ebf4db422cbbdb7fd0cb39109a3130ffae17810bb58f5c557c99670224c2678fa07f1064911e6c665c0d1c26cd2f40f7089789208a48eb339bb8885910e035b4b8c69b1c3ad79270ac6e70b963493a6628b90501822878cdfac866268d914d8af2814612b0198f9e4c6b48e739e414d61f34e2f69ff7cdc4fc7ffe45a64c5faf191ef6c4e31cecebe09a2f6a63d60926ebaa7e925ccea5c93e403c7ec0ee55423ce4893471440006d4c09c141e489dda5577f73b57ecfc764ee5bc1bc88f7866dc6a494e3ee560c956dc12ae51842030251f1cedf2caca15549d0bb4ee3bef03702197350cd7586b5916ef6a0abcb5f30548d22ce5d8c4dbd82030b8d7b5481c51676b7d14d35c20346c74dcc7d96ea0b13f890f755a219993e88739da8246283ebbd82eb1b15956b5ec16ad523768c19ceba9199f97d7bb43b85fa11349ff7fb89a97b463b34c584ae9e2af6c8f20ab528750a22ff6c2297e400065fbd9a4660ec2c658afff6db9b67070352d2aa5e6cfe534eeb5ff271575b828dfd7f537e3627a1a6419ed0c84297fc3d362a52f3860a2eb7ae0a50f06d3c68c4a1463ec331ead7af2dba792332218b04d5b585de1a471d296df6e10316852d50f211e07643f749a1d75410e66e47db40bfcefe4b708d0b2879a50ccbd85939b89fe4b905a6a0d000000e28d18c048e66108a06d8b6a64ec5737b5ae283d914484167c8ac7dde7ec007aad1999854c4d6a0e5f887f99de3662610d5e8d49bac7d41d6fb7d90b4b04939638e2151ba67e75362aded50edfb7d9919b345b5b7df6a909193ce64b20470e3480c68bd764968f4d8a5779ffd9a35e58558272a214ae26a094360b9f2ec97c5e0a7693f4b7509b962cd8537e90ce7be70b54e9531e7295f894b94566df49c50c2265842392dff50e17ed3f7beb9ba4ad0520a73db1d8d3b39759e7fffcbf26517316bc74437fef944fc915ec24affc1a53748cfc883e3ddea9e25063ea8383b06f0d5c9db13a0ff335f52699226b391543060ae5e2c25b585b9ef7d5ff9495a4873cac58b5feff5f08717b04e81bfea349accc58fcc6a6505de3aa6ff4985d9c38bb83e8daa663ccb356df3ed52343ed7723687e416816f987c565eae22c7548c1d6b56a5b6819583da0ddf92739f65e604e37b3275a6cb1252d4ef7a515c4b1e9068d714be80066bf0d422f1e4d2ce6f95c9eac081d6e4596a6a8e16a57b732b575b7de16f176ff0e34e84b293d3fd77fa30a7b7cf12a1edd54170e56bf7f2d40620ad56acbc5cc615556300ff9e95ce3dda93c8333f23f0d97a5e666c438f5d0f40f911f614563d343ac6e4f9fee1d149c94fc75a97ac839b6d8d7b27c5efb870d2bfc6dbe6b688490b23597d83982d7858215c59011042b1957a0b386842621c72f89a9b524008794ffa0c179753ab48d0f73e5ff13624b3b90287edaf6a5367dcfe4094a21ffad3e881b428b77ccac6924d5bde9c781d4189654d8f29885fbde07e6334c6406dd3ece359c6ac7c6147f5c4906e56764e9980a669bfd00d9eb780e7f9988630d1eb098b3e4fd4c795f11441fb6d0ff7cf086eb291b1ec8d90092e1eaf9722ccdcd15408617cdb8c49043bf71a6eafaf22754fcb363f6c630501b619bbd87cc13d5df0948a176771d2d69236eb50dd313817d9687967e7d71f854db6bff803f4501d999dfe3da37ccfdf894a7914c4c113fa7a18c3468a52d646a5070614a6f02b7ff21c9f6927f5de55be85ba815f4bb9e29f26a94423c58338947c804e0627d69bc5a6e93fc5fe8cae851700253f2d494622c6127b4d77bf54a1ac27957234628cbe2fea1729ec53be7d90806d510ccddfd76fab1b9bf1207db8b05c3eaa88fa4c0a5db13cec9310f4e02c1d8114705446fd6649df3829aa12786b8d10b4540d8c1f1c8208c4b41998435e3fa1ec5199cb2d3d0c5c04c5e0b3ffd69112252106bb39333ff23b38d167a9b45ad1bdabf434c8695e2676d461b34c5f048e70b67a44d824baa090c8be13a22ef0d0970cc7a94ed4b77bfc3a40427c6c11abd2b415817243f6801d535a3adc9924a1671b645100e822a0c1876a37d9c9e230e3d762f1cfbb89a8b28255ba4cc5b46cb1635cf185578fa068b68bac93991982b48e7faacc09745a7e33bb12de6b25a2342a7e03cff06dde29b4d05de84e56c78fc6d9dcd180438da3136767d5846bfe7168faeac5b9434394bd747126c5c1ecc6621d10817ce9b6540433828a3bb8f6da0cd8f2b54a47cd5473f6bc3dc1234bd115a6890aa678d1bce7840d7a4559cda556740860079e46217c20e45ee59b8b7078d9b70cb6a249eb2e5e4071d044f456fb61649f261689b8d7a532afaf88eb30041242ce491fb7e654a1f06add370e2706f75c2fe1afe8e065804414c660ec4d96f496b1ad87592de8b7d04baa7ab142f580f262c64c57fce8ef933f18904f00064ca2ccf5eaf61bb7841bd408ae213deeb15d860f7ee7224b9d2dd38ee9f6c3fca6590335715c218db8f8c98e6339a6944817a1ce2e115ae984699861631b9893c143f594d6dde0895a0c7edb9912fe9cd8fd0765227b3963033306d15711387044bc373ac10d7be73cd80f1a79cf1ea0989ea9ae8a0dbbd1227bc33df652792a6bd95f1d21c6497c4c35b9a1eadc0217e322285a2eb832753aae74ef42fc983e58a126b7c23e4b0bac16f0de1eff7d41477bb25052f32cc9cc956ebd209d6b945b1fa9182857e180672a6be7edeb5234830668b1ea749d0a0dd3a244684d4dd76221c3bdf98c2f1eacb7a6dcccafd249b0ba2592c88790de40895799ea4dfb045cc2392dbb623bfe420b24e5a425b84a4b24d787a68bbec9db363ac4e9453df597f0224d8b7b2e4e552cc9e53accbae97e189cf9b59ebf8bb89591fe3fda450af548ffc46eff98b5216e238a9246e2fb95810f8f4d89504633a6d223484a765b9e6e5497159b31c51fa6cc10641bafa81b10c5ab853f3136fa1b4334bcbde99cb4689f077ca3c29c2f1aca2a05762943073d5992aac4d9b0d411ba25905c34fd02b8eb7b9db375a6f6516446cc195eb55eda1e007e26328e9e2642a9c4e90c56440cc60a1db77713860a56820901b3022d55c621e9d54f759dd17fc5b59331c63cf30e07081bf0cdee6cc94ddfe8c6179e7ed86607d4ba7d5f1e97fbc1139b43ae5fd04c1c715f4600f028d0852a421d472b1b48e591b6edfebcd86be3db2caf967b06776096e14f0deffc9bb126ec329c49ada996b963e942d9c404967dc23bdbd0eee951b2879f2ef7ae224d4ff25edac4ddeb2c0b8e579af283e87c625d3fae5286fa855930e45207af7054763937a9247dc38e37e6dee2e325b617280846012e463707b6ccfa2fc399a66e534221a456281d18c79d46f5c77c2d359e19ea870cd230709b5e33cd52fd43388ef91dea0a1e0df6c72688d9fd32bb67f489a3618604ef1dfa0d7f569d40cc68e39994e4ed8830d00008998f59485ce4723c1eeb7c72f7e833418bab47735a91c7ab24e8555d2ccf3a812b6c634c0c3a68271ec8b536aaa442e056945feca6fb4e54d2cf60a0334f494b2bdb6fbd59fde0ce9d2cf03333a0c7121e086aa4c657360fbfb60f3ce0fc0d90ff12b03464e8ff0e5e546ff79735c5c800a0f9b680a478c772f60173a760e280d8287681986038444f2103e2894d5809d062cfe8380e34bca86475da3d7634131c2a8cdc98c5927bc137db61f94eaf9a74f87cc85072c201766eae17fbd5b732859fb1b1c980b36e377aa41a95bca18ccea529420e742899af7b968c1fb890d181da9f86358dbeea877c3e9123a9289c362fa61d96c707ac94b427318a1e5f21078aa9d1fd7a52704e0d73e527f3ca65b7b459734dd30db5335c450f1dbcc1e4259d657d13b6d6b4adddc3d0eae034d1878cd0aa1825991d75f8e6b5b4c0d6d17e8ce709b19ff794a8ef856abdfac65cd13631f1b66b20f2ebf2f3122d18e03cbfff88206a5998fc3cb2b40634fcecdb8f5bdbfe044dbf169ccd2cd60f7bf033272f38f587943fcc75d2d65d9028c02891c8415706c2b2459b7a3c5cc82b0446088d3b3bcc033ad453136afd4ac4678320fc17288dbfa1c5180ad57508a2a298ed4ebc716ede34fded574d9779be5d56517d4dd40f197312390c488f46914b0927b13901ce70c1684801f2811168fab53391af2fdabbb6e683abfa021f6b80077f19455c34cecf5dbdb2fa6e3930eb5940cb14504050cc74249424310dff81116b8f2076b8ecace84c302e758fa90af5a1888aa8a5a2bff4aeb7ebd1c7a216bdbb84bf9c021caf3c8efbfdc5d3aede46381bcda372a5398c89868ad57287736fec2a70bed638974fde5875eafa506a6bd7f772d2b221f4bde4920fe0c56f8e0847e2a7e8387c64ddef4203d77a526c46d7871befe0c5f9128bd67319acd963fc040185aac4e7815d928bbd7ffd8f3d125e63320182f202fa9a52505be9585556a5d1308c118ccdf01978027cbace7ab339d6f53d15e795b7f3fedae4f86c3f257ed80ee634375dc2333ceed1ccaeab1b6be7a9611ff33d79dccdec2007558c06dfc06612d56d37882e5f1de340cf05f4fffbe1a5def6d045bc5bdaf633f07360f9028cedd103bf03fec8beb9fdbf8c5fc684d12efae1859c53e2cc3e2f508a9cd0410ec036648d3760dd591f7ae04e4cdd61a2566319c943f0b63d87e422dfe5c0d1edcb2dc515778a0d7bb2c93ced3b1435adbc51d3fdca9c13679397bc4260093d64869998d6a28bb862ead0fa411585289cc00dc199eac6c607b8a84123dad3be80dd8fd86aa202113131046336352235f34c05f5ea6d5265adda98edbbfd11d6839c5b1bfe4fad4e688558d633d4a281df44d9c0a35abd464e01f8ab01a1e272cc8cd155a40b8aca4c6b1dc894c0fdc02f15a8f67ce94c7f99b6fcc0e4a3a8a71365645ad7809d47bb26f46ed8bd02f6e8f3d277224f82f3d41695f367e343ac6d507413f4bdacf9e344a49156c4de36d68c075415f8004748055b38b8a4110f869fafcc59cdae5663eda72a05be365a50e98bfd4b00e35aef687afae7bd6622cdd725326776f6fb1476c8cf8c20a0e5223e2bea494a1bbe4e79b25a5e48ba34bc66a84ecc4a0aba98e74ca2b1f61893e61a29498d855a778a2a9ce7b7fcaa44b4aedcbd0e28d6c49bdb6776975bf69161f372b964e4288ce6a3b877c3126f90c4c9749d45b8c5c840983b035993e484a945be5fc9d2d1bd3f3de4e6de7bc74a7a07b13e9e82acc11db85454f1d928fe52ad42ca783fd20dd3e94471b498c2736af40d2a45ff74f9ef874639e33306daa8a667674571e2ed93a48f49b57e9e3382fa8090774bc795609ee510b6a1ca48d9833819cbe8ac77eeebb0e3b6c59ced2d1ab355264934ff1914a3f654249bba60a692dd36368b8a866b333320e57e9c7d3646c375696ff14e303780ffd7b957d89ccdf57823d2d1e158773c2075233dd2f331eafe3802da683c293eaa24cd8b63a7582ddb202cd6f8c837c74f823727641c7eb680fe51ce7f250adb34956e4cab17b8a5f10edf144c700e376c682dd46c8fc89830fee1a3cfafe0a5a2e7581d5d16ad6267d1dc2d5be8547f9352d1591b42de94f2559b44a80038360c6394541a77d95b196558a479b609882fc597b9cbe285ad7c7a41133ed85c8ab6e6dec5bf70f9e787985512d48865022705098a6703b255a6f2b05b62fc7ab32e67f06d785ccb33fb348205a76939e6c2991486c5aae8ec1556b2f8e30ca445a4a495cbf2c6013042b8cea615e58899fccbbf1fc4f17a6dc37e46b17ada0be033dc67904fbd7903086d3417e423af64338426a84ca0c2a3252db62695f9cdf10ebc09b9da5747d30e7f4adfb374e1d2bb24542b0373b1fb897690b49fe24d8575ec9800f019c9c76459421c11f002989ac82c13c04a202cf7f9f38b053f9a680d4d5012887a11d25cad201df20a4eee6d2c0474055579ac729c7514a88b1675bbf6b773448c6c1a5ccd157f44f7e032a6b848f2e734d773f029e48fd13c90d41666f9bd4e9bea91950737b6e7502f9d2677938f240e3f905d6095bb0f8bbe961b99b2d025538c3888bfff8957e3592ee5b26a75399b59c697f59fcdfbbe3bcffb8777340875611bf75486d2378e68de771800bfffe0572fb36ca855ec5fc8cb90c76455773c36ec40b101fb30c48f8a8e775f5220e024b4da9dddc2fcf4da413e7c5db9e0567cbb5fad0c91d779a0939debd9247d3f7d8107fd986f73a9c9067e6594fabde0b9e887040cfbe7d31332f41259de57b38f33275597725392efea51f290b8e1b5c243ffd9eb4c0231600f9b4b204344736849d527156c4720a463bbe88fbbdc333099d949853d5c6fda98bcd35ad3f1fb1d5a7d00541a8a202c8476649e1898f901fad37975d6dce9833956e7a78d0306f533d4aa3c9676017c7abc7e1f8a3f117774a4f5beba55d1c3cd580fb18defccc349cce24e94a4cf1f4c6f45d783ee0167a55369c9b5e1eb6d0a836f3eb2354fad3cd771a9d777ff84c63120baee86ddc52b3e6817dce339ac9c240e75f3e2f77afbffbc1d54eb5936d045370ce3b77365c5320892dc7bc36e488019461d2e552969de9f25bd8de049d693be450c43c5d22d7569fc384e8d56ddb577c5f3c3471f5ba2998bc0c697a06b6d8ba5f2f7236e78aaed69b468e761a5f07145c0326ebb94f50aaa8c5666c92006d8d139036f981003933f8e2eba106a0e251fa9f5407544e44aedbbb271a3bf1c660a9cb8c74dbd0713aaebba2dd046af8b9428709646521d6bf387a92996b35748e1e67b602309b7da0fb642e89de19f550925f4db082ef7e9821ac4b2aee93c9cf791c086751c4cb4172608a4f903dc40727858046851529205b45786e294c17abf5e5f6bc730cbfb8fd977c5501a8140ac7984a267880b53cb94157be9ac157be1cf12d8a9e5612947772b734ed6ae30e548a3b2faecf94a7e03f86317f52ac797aefb957d2a29de8f8ced414ce22c800e0dc7e49d3672fca633248f3e68c00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x78, 0x0, 0x9, {0x20000000000000, 0x0, 0x0, {0x4, 0xfffffffffffffffc, 0x2000000015, 0x80000001, 0x4, 0xa3, 0x9e9, 0xe, 0xb877, 0x1000, 0x7, 0x0, 0xee01, 0x3d}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 5m23.682288662s ago: executing program 4 (id=857): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x3c, r2, 0x1, 0x70bd2c, 0x65dfdbfc, {}, [{@nsim={{0xe}, {0x13, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x200}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r5, 0x598}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYBLOB="082bfaf27e5083767200e3ff04"], 0xe) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x12a0, 0x1100, 0x18c, 0x203, 0x0, 0x19030000, 0x11d0, 0x2e0, 0x2e0, 0x11d0, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0x10d8, 0x1100, 0x0, {0x1000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x7d, 0x1, 0x1, './cgroup.cpu/syz1\x00', 0xfffffffc, {0x3}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x9, 0x74c}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1300) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r7) r8 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r9, {0x6}, {0xffff, 0xffff}, {0x5, 0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3cf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x98, 0x0, 0x0, 0x260, 0x260, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x7fffff80, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6, 0x0, 0x5a}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x0, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xff, 0x2, [0x1a, 0x36, 0x1d, 0x1c, 0x23, 0x1e, 0x2c, 0x7, 0x1e, 0x7, 0x2d, 0x37, 0x30, 0x9, 0x3b, 0x16], 0x0, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 5m22.753089403s ago: executing program 4 (id=860): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000000706010200000000000000000a00000a0800064000000006050000000700000005000100070073797a31000000000800067fff000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4008888}, 0x24008000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="18000000780001062abd700000008ec20700240000020000"], 0x18}], 0x1, 0x0, 0x0, 0x2000}, 0x4000880) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000040)={0x0, 0xfdd0}) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x1c, 0x1e, 0xa01, 0x0, 0x0, {0x7}, [@nested={0x8, 0x6e, 0x0, 0x1, [@nested={0x4, 0x6c}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800d1}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x103241, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) read$FUSE(r6, 0x0, 0x0) 5m20.61963582s ago: executing program 4 (id=870): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fadvise64(r1, 0xfffffffffffffff8, 0xf, 0x2) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240), 0x40100, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) (async) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) fadvise64(r1, 0xfffffffffffffff8, 0xf, 0x2) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240), 0x40100, 0x0) (async) 5m20.256936412s ago: executing program 4 (id=872): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/245], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRAWPHYS(r2, 0x4004480d, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m19.684104397s ago: executing program 4 (id=876): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{&(0x7f0000000140)={0xa, 0xfffc, 0x0, @private0}, 0x1c, &(0x7f0000001900)=[{&(0x7f00000002c0)="fa0c68e1", 0x4}], 0x1}}], 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00004e20a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e0300020000", 0x44}], 0x1) 5m18.310872561s ago: executing program 32 (id=876): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{&(0x7f0000000140)={0xa, 0xfffc, 0x0, @private0}, 0x1c, &(0x7f0000001900)=[{&(0x7f00000002c0)="fa0c68e1", 0x4}], 0x1}}], 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00004e20a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e0300020000", 0x44}], 0x1) 11.930184096s ago: executing program 2 (id=1901): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0xb8, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) 11.796227467s ago: executing program 2 (id=1902): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x50, 0xffffffffffffffff, 0x27213000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) keyctl$clear(0x5, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f0000000340)={&(0x7f00000008c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x28}, 0x40c0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = io_uring_setup(0x45a6, &(0x7f0000000500)={0x0, 0xcdfd, 0x1, 0x0, 0x228}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r4 = add_key$user(&(0x7f0000000440), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000240)="8b", 0x1, 0xfffffffffffffffb) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006280)="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", 0x2000, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)={0x90, 0xfffffffffffffff5, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, 0xa, 0x400000000000b, 0xfffffffffffffffc, 0x10000000000000ff, 0x0, 0x0, 0x7, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x9, 0x40000003}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000ec0)=ANY=[@ANYRES64=r1], 0x104}, {&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x114}, {&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x458}], 0x3, &(0x7f0000000800)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60, 0x2000c844}, 0x40) r5 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r5, r4}, &(0x7f00000005c0)=""/208, 0xd0, &(0x7f0000000580)={&(0x7f0000000340)={'md5\x00'}}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}, 0x20) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) r6 = dup(r2) fallocate(r6, 0x10, 0x0, 0x72000) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) 10.371076308s ago: executing program 5 (id=1906): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000000000000010000000100000014000000000000000100000001000000", @ANYRES32=r3], 0x28, 0xc800}}], 0x1, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x20480, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000280)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9, &(0x7f0000000180)="e882faa06fbd27a8721b70b7a0a8563a3b97970e553085e9d4ca2a3dedf00e98642d1cc605c73118a7c721a9080c0fa4aa098c1d78f4d422b1e831df016b0afa732df979d91a8bf3ecf918fdfad74968fb4172232019960bdcec3d722b7e675fb299cff9910b13efbfff5e6559f0ab9f7833390ea10c4e46a52025764bde03808aa170a2d998dfe97f433cffb681233e68c9348ce7907974a1aa3a351ca2d3a552bffa93e6e167a17343a637e01bf0ee0708b6641d81d9366f"}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r4, 0x3ba0, &(0x7f0000000500)={0x48, 0x3, r5, 0x0, 0x5, 0xd4, &(0x7f0000000400)="3d928897ee7b6672707fb619600a2f71b4375b23cdb2cf58518bb71cd8e108584c08343041da96eb1a3133049051541b1f5e824a3fa5d495ed989b9cd05caad4002da5a264e3e557e2947411d270913f52139e26ba076f23560c4c3a7fc583be977cb105f79d819a6e9ee9d161e261031d593b32e3770d94bbc02baaa5571a3af6a679cebb1e39adb146464830221682763da5e170a9d4d6890137106db04fe86f1ae482a6ec75a00bdd3940b24c9f16295db768a31369edf941b5c4123221a9a20514e6cbac3736579f5ff10c796ab6ba93e92c"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r6, 0x61, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000005, 0x1010, r2, 0x0) io_uring_enter(r7, 0x3516, 0x483, 0x0, 0x0, 0x0) 9.69784673s ago: executing program 1 (id=1909): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0x2c2) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5d300987f70e06d038e7ff7fc6e5539b0d650e8b089b3f313b6c090890e0878f0e1ac6e7049b3b46959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) openat$urandom(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000340)={0x28, 0x0, 0x2710, @host}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) pread64(r6, &(0x7f0000000200)=""/123, 0x9e, 0xc8) 9.681888462s ago: executing program 2 (id=1910): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x8008) 9.024884433s ago: executing program 2 (id=1911): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x408200, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1e3002, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) move_pages(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x202000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f00000002c0)="9e", 0x1, 0x40011, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) r6 = socket(0x80000000000000a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000780)={'macvtap0\x00', &(0x7f0000000680)=@ethtool_link_settings={0x4c, 0x2, 0x0, 0x0, 0xf, 0xeb, 0x38, 0x2, 0x0, 0x4, [0xffffffff, 0xffffe022, 0xfffffe00, 0xfffff000, 0xe3a0, 0x4ac, 0x3c85aa8b, 0x6]}}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x280, 0x268, 0x300, 0x280, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x240, 0x280, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x100000000000, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x21, "6bb6778f9bdec125b0fb4f26be757b1e6f2fb8e9079627dc6726c4bc85e9"}}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x511) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, 0x0, 0x0) sendmsg$inet6(r5, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000900)="8d", 0x0, 0xf21bb4d410ace81, 0x0, 0x0) 7.016654407s ago: executing program 5 (id=1914): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000004c0)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 6.757094763s ago: executing program 0 (id=1916): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d689875", 0x2d, 0x2400c0c7, 0x1}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001021030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) 6.581263558s ago: executing program 3 (id=1917): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r0, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000044}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fb7fd, 0x20005}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x2054) bind$can_raw(r3, &(0x7f00000004c0)={0x1d, r5}, 0x10) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 6.478965501s ago: executing program 3 (id=1918): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) bind$unix(r0, 0x0, 0x0) 6.413386928s ago: executing program 0 (id=1919): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8008}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x1}]}}}]}, 0x44}}, 0x8000) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}], 0x20}}], 0x1, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_macvtap\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x10, 0x4, 0x3, 0x3118, 0x3, 0xe, 0xfffffffe, 0x8, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0, 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 6.326573944s ago: executing program 1 (id=1920): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x78d883) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000000480)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x8, 0x0, 0x11}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010300000000000000000000000005000400010000000900020073797a31000000000500010007000000050005000a00000014000780080011400000000005001500890000001300030068617368"], 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x40040000) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0x2, 0x4, 0x640, 0xffffffff, 0x368, 0x368, 0x238, 0xfeffffff, 0xffffffff, 0x570, 0x570, 0x570, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00'}, 0x2f2, 0x210, 0x238, 0x0, {}, [@common=@ah={{0x30}, {[], 0x0, 0x0, 0x6}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @private1, @mcast2, @loopback, @private0, @mcast2, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @local}, @empty, @mcast1, @loopback, @dev]}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@frag={{0x30}}, @common=@hl={{0x28}}]}, @common=@inet=@SET2={0x30}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'team_slave_1\x00', 'macvtap0\x00'}, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@private1, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @loopback}, @loopback, @mcast2, @remote, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @mcast1, @loopback, @mcast2, @ipv4={'\x00', '\xff\xff', @local}, @local, @empty, @local]}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}, {0xa, 0x4e22, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x13}}, 0x0, {[0x0, 0x3, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000040)={0x80, 0x400c, 0x2, 0xffffdffe}) set_mempolicy(0x8006, 0x0, 0x5) r7 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) 6.326158462s ago: executing program 3 (id=1921): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0x2c2) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) openat$urandom(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000340)={0x28, 0x0, 0x2710, @host}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) pread64(r6, &(0x7f0000000200)=""/123, 0x9e, 0xc8) 4.425716466s ago: executing program 3 (id=1922): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0x2c2) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5d300987f70e06d038e7ff7fc6e5539b0d650e8b089b3f313b6c090890e0878f0e1ac6e7049b3b46959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) openat$urandom(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000340)={0x28, 0x0, 0x2710, @host}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) pread64(r6, &(0x7f0000000200)=""/123, 0x9e, 0xc8) 4.336870763s ago: executing program 2 (id=1923): socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x88842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_open(&(0x7f0000000240)='/dev/video#\x00', 0x40, 0x80, &(0x7f0000000300)={0xfffffffffffffffb, 0x4, 0x3ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x8, 0x6, 0xfffffffd}, &(0x7f0000000140)=0x0, &(0x7f00000002c0)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc4c85513, &(0x7f0000000b80)={0x7, 0x0, 0x2008, 0x7, 'syz1\x00', 0x900005}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r2, 0x1e76, 0xf728, 0x5, 0x0, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffa000/0x1000)=nil) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000000040)="732fbfdb019d7da37edad2e06a44164ecdaa2c0071e55d0f2412f7561e683df8bf8b", 0x22) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x18}, 0x20000800) recvmmsg(r7, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/211, 0xd3}], 0x1}, 0x1}], 0x1, 0x140, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r8, 0x4004743d, 0x110e22ffe6) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES8=r8], 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) 3.803114174s ago: executing program 1 (id=1924): r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r0, 0x110, 0x6, 0x0, &(0x7f00000003c0)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/uts\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setresgid(0x0, 0xee01, 0xffffffffffffffff) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x800) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x6, 0xfffffffd}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={0x0, 0x0, 0x8}, 0x18) openat$vsock(0xffffffffffffff9c, 0x0, 0x2c0c2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) fsopen(0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) syz_emit_ethernet(0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000180c200000188a81b008100000086dd6000000000180600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="601503036b00"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) readlinkat(0xffffffffffffffff, &(0x7f0000000200)='./mnt\x00', 0x0, 0xfffffffffffffee6) setitimer(0x2, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000180)) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, 0x0, 0x1, {0x1, 0xff, 0x3}}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=ANY=[@ANYBLOB="24000000200001032cbd7000fddbdf25020000000000000510000000050016c7b1000000"], 0x24}}, 0x8800) 3.723608066s ago: executing program 0 (id=1925): r0 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000001a40)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x110, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@dev={0xac, 0x14, 0x14, 0x1}, @remote, 0xff, 0x0, 0x3, 0x9, {@mac=@remote, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x401, 0x6, 0x0, 0x400, 0x8, 'geneve0\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x0, 0x8b999478824e41}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @private=0xa010102, 0x4}}}, {{@arp={@loopback, @private=0xa010101, 0xff000000, 0xff, 0xe, 0x1, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@broadcast, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x3ff, 0x28, 0x8000, 0x5, 0xffff, 0x48a3, 'xfrm0\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0xc0}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x5, 0x1}}}, {{@arp={@rand_addr=0x64010101, @broadcast, 0xff, 0xff, 0x9, 0x7, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@remote, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x2, 0x39, 0x3137, 0x3, 0x1, 0x2, 'veth0\x00', 'batadv0\x00', {0xff}, {}, 0x0, 0xa}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x6, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000100)="8581092648b6ea2f6efdd0b3106c26129577a0b7d4120039f8b0ed3683fa56ef47665f9bf2c5e79077a393115319981cdf11c26d59aa8b54e3f79ed9172ad72cde79de391586600e0c3e0c18c3ded860eddb267dabd29ac9d10a270ef598fe95dc3a1f8c4e0d4d73df3160a9b61d548dad253ec538031e658d5622af31397a9eb6e47aefe6bd49745bc6f0c1451ae9abbc41a714a137753c1febf33985ac9b46e716618393390b898733111e2796a319da7d950f", 0xb4}], 0x1, 0x7c00, 0x0, 0x3) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x1cb041, 0x9) r3 = dup(r2) sendfile(r3, r0, 0x0, 0x8000fffffffc) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x14, 0x1, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0xffff}}, 0x14}}, 0x4040081) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000d0000000000000100000014000200776730000000000000000000000000003400088030000080080003000500000024000100f44da367a88ee6564f020211456727082f3febee8b1bf5eb7337341b459b3922"], 0x5c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="06000000bc0126a3ab28da47307552c60bfea2ca3889d7e59c6b583b4a3c5e6048ef0201ccd7bed133a42211dbd8fffb873c61fa018b781fddac3eb9358b6e72d2273996f0231ec21980c9c323ebc3995c97c019a97058a922c92152f1345bf470ee3a720794", @ANYRES16=r9, @ANYBLOB="010828bd7000fedbdf250c00000004000580"], 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x2400c000) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r4, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x101}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000) r10 = socket$kcm(0x10, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYRES16=r3, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r12, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x52, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) r13 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r13, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r12, 0x40505330, &(0x7f0000000380)={0x800100, 0xffffffff, 0x22, 0xe1d7, 0x10ff, 0xff}) umount2(&(0x7f0000000300)='./file0\x00', 0x4) chmod(&(0x7f0000002200)='./file0\x00', 0x42) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="d800000019007b29e00208ba0d8105040a601100fe02040b067c55a1bc001400030006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277c7f6bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a14c11ce1b14d6d930dfe1d1d322fe04fb95cae8c9fad95667e04adcdf634c1fdf48000000000000e1cace81ed0b7fece0b42a9ecbeeef7d93458c69e0cdf106a159031e9f05e9f16e9cb500020000000000000000000000009ae42a97718952ab98b6768e7a5f", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x8000) 3.545612106s ago: executing program 1 (id=1926): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x10, 0x2b, 0x1, @dev={0xfe, 0x80, '\x00', 0x25}, @local, {[@dstopts={0x2c, 0x0, '\x00', [@padn]}]}}}}}, 0x0) 3.434081917s ago: executing program 0 (id=1927): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0xffff, @empty}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000002680)='3', 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x18, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x148}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r1) syz_usb_connect(0x3, 0x24, &(0x7f00000012c0)={{0x12, 0x1, 0x300, 0x35, 0x40, 0x50, 0x10, 0x55f, 0xa800, 0xbfbf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x6c, 0x98, 0xc, [{{0x9, 0x4, 0xc7, 0x80, 0x0, 0xa4, 0xbc, 0x62, 0xf}}]}}]}}, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0}) 3.373273514s ago: executing program 5 (id=1928): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0x2c2) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) openat$urandom(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000340)={0x28, 0x0, 0x2710, @host}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) pread64(r6, &(0x7f0000000200)=""/123, 0x9e, 0xc8) 3.289337635s ago: executing program 1 (id=1929): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x2c, r4, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6(0xa, 0x3, 0x3c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRESDEC=r5, @ANYRES32=r5], 0x7c}, 0x1, 0x0, 0x0, 0x20004080}, 0x11) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c) writev(r6, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 2.232919474s ago: executing program 2 (id=1930): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) recvmmsg$unix(r2, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004740)=""/199, 0xc7}, {&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f0000004940)=""/255, 0xff}, {&(0x7f0000001600)=""/166, 0xa6}, {&(0x7f0000004b00)=""/191, 0xbf}, {&(0x7f0000000580)=""/4072, 0xfe8}, {&(0x7f0000005c00)=""/253, 0xfd}, {&(0x7f0000005d00)=""/215, 0xd7}], 0x8}}], 0x1, 0x0, 0x0) write(r2, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4081}, 0x60) syz_clone3(&(0x7f00000076c0)={0x40a1a200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000680), 0x76, 0x183301) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000200)={&(0x7f0000000180)=[{0xa, 0x1000, 0x0, 0x0}, {0x4, 0x6808, 0xfe, &(0x7f0000000240)="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"}], 0x2}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 1.77542776s ago: executing program 3 (id=1931): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) bind$unix(r0, 0x0, 0x0) 1.636830797s ago: executing program 3 (id=1932): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0c27cd21d8a48637cb781581aac75a2f848f285c99133f0435497bf6ae25625c64f82ec", 0x3c}, {&(0x7f0000000cc0)="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", 0x141}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="a7040f7dff0a4fed838b52a29c46952dfe5aff84e281448c520c4b0808bdb32447fc2ba2", 0x24}, {&(0x7f00000002c0)="d0f28c036a8b6293adbae6a1f4a98928a2efe08e665dac369f8749c5c15e9819ef3627a4cf2264401c991774440846e7b4146eca22035546a286d4571d16423012a6cc000f8a5fb3c2", 0x49}], 0x2}}], 0x3, 0x54004) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'gretap0\x00', &(0x7f00000003c0)={'erspan0\x00', 0x0, 0x1, 0x8, 0xa8, 0x9, {{0x26, 0x4, 0x0, 0x9, 0x98, 0x68, 0x0, 0x81, 0x4, 0x0, @multicast1, @broadcast, {[@end, @ssrr={0x89, 0x23, 0x4d, [@broadcast, @multicast2, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @empty, @multicast2]}, @cipso={0x86, 0x5d, 0x3, [{0x5, 0x12, "ba89d4663fd1f979c839c307093f4087"}, {0x2, 0x5, "1b9a77"}, {0x5, 0x6, "fb03b594"}, {0x2, 0x6, "5eebadbd"}, {0x0, 0x5, "710012"}, {0x2, 0xb, "35e593f00a1eefbdcb"}, {0x6, 0x12, "9f2cd69e5635dd8e028f65fcaa8c3f68"}, {0x5, 0x3, "10"}, {0x0, 0xf, "4d3973f33d409beda88a7d81ac"}]}]}}}}}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=@newqdisc={0x44, 0x24, 0x20, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff1}, {0xfff5, 0x4}, {0x4, 0x2adc7af85364f6b8}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3e9e}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x40}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x59}]}, 0x44}}, 0x4080) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x249, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x50, 0x7, [{{0x9, 0x4, 0x0, 0x7c, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x2, 0xbd, 0x1, {0x22, 0xa1b}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x7, 0x7}}}}}]}}]}}, 0x0) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x6, 0x11, 0x0, 0x0}, {0x5, 0x4e01, 0x36, &(0x7f00000017c0)="166e2a32055dbea94d2028f1d68b71716589b27cd2b4eb72634a3e2356e600ea1eb98c2b876db8d684337b0caa6625e6bd6712cec64f"}, {0xf, 0x810, 0x0, 0x0}], 0x3}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x40000) 1.441421975s ago: executing program 1 (id=1933): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'bridge_slave_1\x00', {0x1}, 0x4}) syz_usb_connect(0x4, 0x97, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x1f, 0x7f, 0x79, 0x40, 0x8087, 0xa5a, 0xbadf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x2, 0xfe, 0x1, 0xa0, 0x3, [{{0x9, 0x4, 0xb5, 0x1c, 0x1, 0xe2, 0xdd, 0xc, 0x4, [@generic={0x4a, 0x7, "542b34f95844aff7740eea82b5dfb5207c34fd95e1ef987e05b7d008466e2b306cbd56d0937c21e09f94d5c0f6c378d3c1298081c2fe2892e8fdcdb4600ea8c320002f0545c26afd"}, @hid_hid={0x9, 0x21, 0x4, 0xe, 0x1, {0x22, 0x3bc}}], [{{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x7f, 0xfd, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xb, 0x36a2}]}}]}}, {{0x9, 0x4, 0x6d, 0x3, 0x0, 0xff, 0x99, 0x83, 0x7f}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x7, 0x6, 0x7, 0x40, 0x10}, 0xa2, &(0x7f0000000300)={0x5, 0xf, 0xa2, 0x3, [@generic={0x8f, 0x10, 0x3, "ceab06affa4d37ed10a815734318c00b0a686fa1a92b0f22fe364e554a376695f3dc71ef04711a6f32b77229b0a4f3c4b5c6157b5ffcc6b2ed917635b06f69f369d33735a34eb1627807c16b40c228f75f1e50bcb035a17903806c54886c98c5bd326e4ddfb8ff6fd0eab815d74235bb1dab158af873ad85ef1ffbe6f930c671c39561e83a270260b1de4484"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0xd, 0x2, 0x6f, 0xf5}, @ptm_cap={0x3}]}, 0x2, [{0x31, &(0x7f0000000280)=@string={0x31, 0x3, "3418fffc0a726d3e9a6aeba0775a863477250b693a95b0e52dcfcac18694d49d1b66336d59212590da79853ef91e31"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1801}}]}) syz_open_dev$dri(&(0x7f00000000c0), 0x7, 0x40880) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000240)={&(0x7f0000000500)=[{0x6, 0x801, 0x0, 0x0}, {0x5, 0x2001, 0x0, 0x0}, {0x2, 0x4810, 0x0, 0x0}], 0x3}) 1.43315432s ago: executing program 5 (id=1934): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/notes', 0x200, 0x18c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000c40)=@allocspi={0x1ac, 0x16, 0x501, 0x70bd2c, 0x25dfdbfb, {{{@in6=@loopback, @in=@multicast2, 0x4e22, 0x6, 0x4e24, 0xfffa, 0x2, 0x80, 0x120, 0x88}, {@in=@private=0xa010101, 0x4d5, 0x33}, @in6=@empty, {0x1ff, 0xa2, 0x7, 0xfffffffffffffffc, 0x0, 0x4, 0x7fff, 0x48fe}, {0x4, 0x9, 0x5fdf, 0xb94}, {0x5, 0xfffffff8, 0x9}, 0x70bd26, 0x0, 0xa, 0x2, 0x7f, 0x1}, 0x3, 0xde}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x3456}, @policy={0xac, 0x7, {{@in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e22, 0x2, 0x4e21, 0xd, 0x2, 0x20, 0xa0, 0x32}, {0x2, 0x8, 0x10, 0x8, 0x2, 0x10, 0x9, 0x200}, {0xe49, 0xffffffffffffffd8, 0x9, 0x7}, 0x5, 0x6e6bb3, 0x1, 0x0, 0x0, 0x3}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4075}, 0xc800) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r7, 0x4068aea3, &(0x7f00000001c0)={0xbe, 0x0, 0x1}) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r8 = socket(0xb, 0x2, 0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @empty}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0xc0}}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 1.011083849s ago: executing program 0 (id=1935): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x94, r1, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xa}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40080}, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'vlan1\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="3303120081fd120000007ef52f555f2a0c09000000fd88a800f788a83baa", 0x1e, 0x40008c1, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0xcf, 0x6, @random="0fe6557a37c0"}, 0x14) 873.715094ms ago: executing program 0 (id=1936): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x2, 0x36, 0x0, 0x0) setxattr$incfs_size(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f00000003c0)=0x6e5, 0x8, 0x1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r2, &(0x7f0000004400), 0x400000000000203, 0x0) 302.214379ms ago: executing program 5 (id=1937): r0 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000001a40)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x110, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@dev={0xac, 0x14, 0x14, 0x1}, @remote, 0xff, 0x0, 0x3, 0x9, {@mac=@remote, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x401, 0x6, 0x0, 0x400, 0x8, 'geneve0\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x0, 0x8b999478824e41}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @private=0xa010102, 0x4}}}, {{@arp={@loopback, @private=0xa010101, 0xff000000, 0xff, 0xe, 0x1, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@broadcast, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x3ff, 0x28, 0x8000, 0x5, 0xffff, 0x48a3, 'xfrm0\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0xc0}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x5, 0x1}}}, {{@arp={@rand_addr=0x64010101, @broadcast, 0xff, 0xff, 0x9, 0x7, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@remote, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x2, 0x39, 0x3137, 0x3, 0x1, 0x2, 'veth0\x00', 'batadv0\x00', {0xff}, {}, 0x0, 0xa}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x6, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000100)="8581092648b6ea2f6efdd0b3106c26129577a0b7d4120039f8b0ed3683fa56ef47665f9bf2c5e79077a393115319981cdf11c26d59aa8b54e3f79ed9172ad72cde79de391586600e0c3e0c18c3ded860eddb267dabd29ac9d10a270ef598fe95dc3a1f8c4e0d4d73df3160a9b61d548dad253ec538031e658d5622af31397a9eb6e47aefe6bd49745bc6f0c1451ae9abbc41a714a137753c1febf33985ac9b46e716618393390b898733111e2796a319da7d950f", 0xb4}], 0x1, 0x7c00, 0x0, 0x3) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x1cb041, 0x9) r3 = dup(r2) sendfile(r3, r0, 0x0, 0x8000fffffffc) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x14, 0x1, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0xffff}}, 0x14}}, 0x4040081) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000d0000000000000100000014000200776730000000000000000000000000003400088030000080080003000500000024000100f44da367a88ee6564f020211456727082f3febee8b1bf5eb7337341b459b3922"], 0x5c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="06000000bc0126a3ab28da47307552c60bfea2ca3889d7e59c6b583b4a3c5e6048ef0201ccd7bed133a42211dbd8fffb873c61fa018b781fddac3eb9358b6e72d2273996f0231ec21980c9c323ebc3995c97c019a97058a922c92152f1345bf470ee3a720794", @ANYRES16=r9, @ANYBLOB="010828bd7000fedbdf250c00000004000580"], 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x2400c000) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r4, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x101}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000) r10 = socket$kcm(0x10, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYRES16=r3, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r12, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x52, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) r13 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r13, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r12, 0x40505330, &(0x7f0000000380)={0x800100, 0xffffffff, 0x22, 0xe1d7, 0x10ff, 0xff}) umount2(&(0x7f0000000300)='./file0\x00', 0x4) chmod(&(0x7f0000002200)='./file0\x00', 0x42) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="d800000019007b29e00208ba0d8105040a601100fe02040b067c55a1bc001400030006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277c7f6bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a14c11ce1b14d6d930dfe1d1d322fe04fb95cae8c9fad95667e04adcdf634c1fdf48000000000000e1cace81ed0b7fece0b42a9ecbeeef7d93458c69e0cdf106a159031e9f05e9f16e9cb500020000000000000000000000009ae42a97718952ab98b6768e7a5f", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x8000) 0s ago: executing program 5 (id=1938): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000004c0)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 7228][ T6005] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.646317][ T6005] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.673922][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 540.727689][ T5927] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 540.758090][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.766231][ T5927] usb 1-1: Product: syz [ 540.787094][ T5927] usb 1-1: Manufacturer: syz [ 540.807057][ T5927] usb 1-1: SerialNumber: syz [ 540.823340][ T5927] usb 1-1: config 0 descriptor?? [ 540.846807][ T5927] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 540.896665][ T5927] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 541.207736][T11398] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1430'. [ 541.653237][T11398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.664977][T11398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.017350][ T5927] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 542.132009][ T5927] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 542.141344][ T5927] em28xx 1-1:0.0: board has no eeprom [ 542.207001][ T5927] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 542.218584][ T5927] em28xx 1-1:0.0: dvb set to bulk mode. [ 542.243525][ T5834] em28xx 1-1:0.0: Binding DVB extension [ 542.523168][ T5834] em28xx 1-1:0.0: Registering input extension [ 543.088729][ T5928] usb 2-1: USB disconnect, device number 67 [ 543.178884][ T5834] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 543.244232][ T24] usb 1-1: USB disconnect, device number 69 [ 543.255969][ T24] em28xx 1-1:0.0: Disconnecting em28xx [ 543.274686][ T24] em28xx 1-1:0.0: Closing input extension [ 543.341775][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.373173][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.375847][ T24] em28xx 1-1:0.0: Freeing device [ 543.432264][ T5834] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 543.468572][ T5834] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 543.497156][ T5834] usb 4-1: Manufacturer: syz [ 543.514891][ T5834] usb 4-1: config 0 descriptor?? [ 544.031423][ T5834] pyra 0003:1E7D:2CF6.001F: unknown main item tag 0x0 [ 544.038843][ T5834] pyra 0003:1E7D:2CF6.001F: unknown main item tag 0x0 [ 544.066251][ T5834] pyra 0003:1E7D:2CF6.001F: unknown main item tag 0x0 [ 544.131081][ T5834] pyra 0003:1E7D:2CF6.001F: unknown main item tag 0x0 [ 544.146155][ T5834] pyra 0003:1E7D:2CF6.001F: unknown main item tag 0x0 [ 544.476408][ T5834] pyra 0003:1E7D:2CF6.001F: unknown main item tag 0x0 [ 544.569245][ T5834] pyra 0003:1E7D:2CF6.001F: unknown main item tag 0x0 [ 544.599124][ T5834] pyra 0003:1E7D:2CF6.001F: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 544.642251][ T5834] pyra 0003:1E7D:2CF6.001F: couldn't init struct pyra_device [ 544.670077][ T5834] pyra 0003:1E7D:2CF6.001F: couldn't install mouse [ 544.677024][ T24] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 544.776137][ T5834] pyra 0003:1E7D:2CF6.001F: probe with driver pyra failed with error -71 [ 544.827013][ T5834] usb 4-1: USB disconnect, device number 61 [ 544.847663][ T24] usb 6-1: device descriptor read/64, error -71 [ 545.143375][ T24] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 545.205167][T11434] fido_id[11434]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 545.318370][ T24] usb 6-1: device descriptor read/64, error -71 [ 545.430752][T11438] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1441'. [ 545.488354][ T24] usb usb6-port1: attempt power cycle [ 546.058778][ T24] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 546.104610][ T24] usb 6-1: device descriptor read/8, error -71 [ 546.257417][ T5928] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 546.369559][ T24] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 546.405934][ T24] usb 6-1: device descriptor read/8, error -71 [ 546.467056][ T5928] usb 2-1: Using ep0 maxpacket: 8 [ 546.482963][ T5928] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 546.515873][ T5928] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 546.528017][ T24] usb usb6-port1: unable to enumerate USB device [ 546.611293][ T5928] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 46624, setting to 1024 [ 546.674781][ T5928] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 546.729800][ T5928] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 546.801487][ T5928] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 546.836509][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.652959][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 549.652982][ T30] audit: type=1326 audit(1768294979.426:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11455 comm="syz.3.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa318f749 code=0x7ffc0000 [ 549.686394][ T30] audit: type=1326 audit(1768294979.426:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11455 comm="syz.3.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa318f749 code=0x7ffc0000 [ 549.713950][ T30] audit: type=1326 audit(1768294979.426:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11455 comm="syz.3.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7ffaa318f749 code=0x7ffc0000 [ 549.844375][ T30] audit: type=1326 audit(1768294979.426:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11455 comm="syz.3.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa318f749 code=0x7ffc0000 [ 549.905024][ T30] audit: type=1326 audit(1768294979.426:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11455 comm="syz.3.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7ffaa318f749 code=0x7ffc0000 [ 549.940268][ T30] audit: type=1326 audit(1768294979.426:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11455 comm="syz.3.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa318f749 code=0x7ffc0000 [ 550.005719][ T30] audit: type=1326 audit(1768294979.426:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11455 comm="syz.3.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa318f749 code=0x7ffc0000 [ 550.073627][ T5928] usb 2-1: usb_control_msg returned -71 [ 550.091976][ T5928] usbtmc 2-1:16.0: can't read capabilities [ 550.135352][ T5928] usb 2-1: USB disconnect, device number 68 [ 551.277020][ T24] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 551.427149][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 551.458767][ T24] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 551.468532][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.476738][ T24] usb 4-1: Product: syz [ 551.495876][ T24] usb 4-1: Manufacturer: syz [ 551.509564][ T24] usb 4-1: SerialNumber: syz [ 551.525634][ T24] usb 4-1: config 0 descriptor?? [ 551.733243][ T24] speedtch 4-1:0.0: speedtch_bind: data interface not found! [ 551.753187][ T24] speedtch 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 551.791698][ T24] usb 4-1: USB disconnect, device number 62 [ 551.839740][T11468] ipvlan2: entered promiscuous mode [ 551.864899][T11468] bridge0: port 3(ipvlan2) entered blocking state [ 551.884132][T11470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1448'. [ 551.907638][T11475] fuse: Unknown parameter 'rootmgde' [ 551.907930][T11468] bridge0: port 3(ipvlan2) entered disabled state [ 551.920991][T11468] ipvlan2: entered allmulticast mode [ 551.926670][T11468] bridge0: entered allmulticast mode [ 551.935211][T11468] ipvlan2: left allmulticast mode [ 551.942113][T11468] bridge0: left allmulticast mode [ 552.947005][ T24] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 553.097009][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 553.104149][ T24] usb 4-1: config 179 has an invalid interface number: 97 but max is 0 [ 553.113445][ T24] usb 4-1: config 179 has no interface number 0 [ 553.277244][ T24] usb 4-1: config 179 interface 97 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 553.291498][ T24] usb 4-1: config 179 interface 97 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 553.337768][ T24] usb 4-1: config 179 interface 97 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 553.349644][ T24] usb 4-1: config 179 interface 97 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 553.384194][ T24] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.ce [ 553.408362][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.456118][T11491] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 554.837452][T11533] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 554.914839][T11533] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 555.016191][ T30] audit: type=1800 audit(1768294984.786:463): pid=11534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1466" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 555.401785][T11545] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1470'. [ 555.656155][ T24] usb 4-1: USB disconnect, device number 63 [ 556.027660][T11555] netlink: 'syz.2.1472': attribute type 4 has an invalid length. [ 556.127164][T11555] netlink: 'syz.2.1472': attribute type 4 has an invalid length. [ 556.458553][ T5834] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 556.605398][T11565] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 556.626480][ T5834] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 556.679231][ T5834] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 556.728618][ T5834] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 556.774110][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.827761][T11559] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 556.855346][ T5834] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 557.053675][T11568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1477'. [ 557.244942][ T24] usb 6-1: USB disconnect, device number 27 [ 557.898993][T11583] sctp: [Deprecated]: syz.5.1481 (pid 11583) Use of int in max_burst socket option deprecated. [ 557.898993][T11583] Use struct sctp_assoc_value instead [ 558.208780][T11583] GUP no longer grows the stack in syz.5.1481 (11583): 200000009000-200000018000 (200000006000) [ 558.222461][T11583] CPU: 0 UID: 0 PID: 11583 Comm: syz.5.1481 Tainted: G L syzkaller #0 PREEMPT(full) [ 558.222497][T11583] Tainted: [L]=SOFTLOCKUP [ 558.222507][T11583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 558.222521][T11583] Call Trace: [ 558.222532][T11583] [ 558.222542][T11583] dump_stack_lvl+0xe8/0x150 [ 558.222575][T11583] __get_user_pages+0x2465/0x29f0 [ 558.222640][T11583] __gup_longterm_locked+0x3dc/0x1660 [ 558.222667][T11583] ? try_get_folio+0x633/0x660 [ 558.222693][T11583] gup_fast_fallback+0x1d26/0x2290 [ 558.222708][T11583] ? lruvec_stat_mod_folio+0x6f/0x2e0 [ 558.222743][T11583] ? __pfx_gup_fast_fallback+0x10/0x10 [ 558.222760][T11583] ? __kvmalloc_node_noprof+0x5f5/0x920 [ 558.222773][T11583] ? is_valid_gup_args+0x11f/0x200 [ 558.222790][T11583] ? pin_user_pages_fast+0x4d/0xb0 [ 558.222807][T11583] io_pin_pages+0xba/0x1b0 [ 558.222821][T11583] io_sqe_buffer_register+0x16f/0x2120 [ 558.222848][T11583] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 558.222863][T11583] ? trace_kmalloc+0x1f/0xb0 [ 558.222874][T11583] ? __kvmalloc_node_noprof+0x5f5/0x920 [ 558.222888][T11583] ? iovec_from_user+0x1ba/0x250 [ 558.222905][T11583] io_sqe_buffers_register+0x3b9/0x8e0 [ 558.222926][T11583] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 558.222946][T11583] ? __fget_files+0x3a0/0x420 [ 558.222961][T11583] ? __fget_files+0x2a/0x420 [ 558.222977][T11583] ? io_is_uring_fops+0xd/0x50 [ 558.222993][T11583] __se_sys_io_uring_register+0xac1/0x1200 [ 558.223007][T11583] ? __se_sys_futex+0x36f/0x400 [ 558.223022][T11583] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 558.223037][T11583] ? rcu_is_watching+0x15/0xb0 [ 558.223061][T11583] do_syscall_64+0xec/0xf80 [ 558.223078][T11583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.223097][T11583] ? trace_irq_disable+0x37/0x100 [ 558.223113][T11583] ? clear_bhb_loop+0x60/0xb0 [ 558.223127][T11583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.223140][T11583] RIP: 0033:0x7f95f338f749 [ 558.223153][T11583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.223165][T11583] RSP: 002b:00007f95f4282038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 558.223182][T11583] RAX: ffffffffffffffda RBX: 00007f95f35e5fa0 RCX: 00007f95f338f749 [ 558.223192][T11583] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000007 [ 558.223201][T11583] RBP: 00007f95f3413f91 R08: 0000000000000000 R09: 0000000000000000 [ 558.223209][T11583] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000000 [ 558.223218][T11583] R13: 00007f95f35e6038 R14: 00007f95f35e5fa0 R15: 00007f95f370fa28 [ 558.223241][T11583] [ 559.147019][ T5834] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 559.275827][T11609] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1489'. [ 559.338084][T11610] syz_tun: entered allmulticast mode [ 559.416949][ T5834] usb 4-1: Using ep0 maxpacket: 8 [ 559.439105][ T5834] usb 4-1: config 179 has an invalid interface number: 97 but max is 0 [ 559.448055][ T5834] usb 4-1: config 179 has no interface number 0 [ 559.454910][ T5834] usb 4-1: config 179 interface 97 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 559.472751][ T5834] usb 4-1: config 179 interface 97 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 559.489399][ T5834] usb 4-1: config 179 interface 97 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 559.540306][ T5834] usb 4-1: config 179 interface 97 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 559.587936][ T5834] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.ce [ 559.656983][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.688367][T11590] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 560.250564][T11612] tipc: Started in network mode [ 560.255910][T11612] tipc: Node identity 0ab18a85ebcf, cluster identity 4711 [ 560.265234][T11612] tipc: Enabled bearer , priority 0 [ 560.274231][T11612] syzkaller0: entered promiscuous mode [ 560.291982][T11612] syzkaller0: entered allmulticast mode [ 560.327615][T11612] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1490'. [ 560.345307][T11612] tipc: Resetting bearer [ 560.363374][T11611] tipc: Resetting bearer [ 560.390539][T11611] tipc: Disabling bearer [ 560.765504][T11616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1492'. [ 561.016956][ T5834] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 561.176978][ T5834] usb 6-1: Using ep0 maxpacket: 16 [ 561.204659][ T5834] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.238313][ T5928] usb 4-1: USB disconnect, device number 64 [ 561.313136][T11630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1497'. [ 561.338851][ T5834] usb 6-1: config 0 interface 0 has no altsetting 0 [ 561.398928][ T5927] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 561.411805][ T5834] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 561.430722][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.461938][ T5834] usb 6-1: config 0 descriptor?? [ 561.598116][ T5927] usb 2-1: Using ep0 maxpacket: 8 [ 561.614358][ T5927] usb 2-1: config 0 has no interfaces? [ 561.648768][ T5927] usb 2-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 561.658006][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.670100][ T5927] usb 2-1: Product: syz [ 561.674325][ T5927] usb 2-1: Manufacturer: syz [ 561.704908][ T5927] usb 2-1: SerialNumber: syz [ 561.723241][ T5927] usb 2-1: config 0 descriptor?? [ 562.070865][ T5834] nzxt-smart2 0003:1E71:2009.0020: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 562.112101][ T5928] usb 2-1: USB disconnect, device number 69 [ 562.182188][T11643] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1493'. [ 563.022656][T11656] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1503'. [ 563.039536][T11656] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1503'. [ 563.241133][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.260828][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.965157][ T5928] usb 6-1: USB disconnect, device number 28 [ 564.545500][T11676] netlink: 'syz.2.1509': attribute type 4 has an invalid length. [ 564.823009][T11676] netlink: 'syz.2.1509': attribute type 4 has an invalid length. [ 565.627599][T11684] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1512'. [ 566.326189][T11696] netlink: 'syz.0.1515': attribute type 12 has an invalid length. [ 567.136943][T11699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1516'. [ 567.302749][T11712] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1519'. [ 567.764230][ T30] audit: type=1326 audit(1768294997.536:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11716 comm="syz.5.1521" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f95f338f749 code=0x0 [ 568.138329][T11722] kvm: requested 25980 ns i8254 timer period limited to 200000 ns [ 568.162968][T11722] kvm: requested 138285 ns i8254 timer period limited to 200000 ns [ 568.190970][T11722] kvm: requested 54476 ns i8254 timer period limited to 200000 ns [ 568.393736][T11725] x_tables: duplicate underflow at hook 3 [ 568.805953][T11722] kvm: requested 18438 ns i8254 timer period limited to 200000 ns [ 568.829240][T11722] kvm: requested 75428 ns i8254 timer period limited to 200000 ns [ 569.113044][T11728] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1523'. [ 570.819784][ T30] audit: type=1326 audit(1768295000.596:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11756 comm="syz.0.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc298f749 code=0x7ffc0000 [ 570.914577][ T30] audit: type=1326 audit(1768295000.616:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11756 comm="syz.0.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f6bc298f749 code=0x7ffc0000 [ 570.981392][ T30] audit: type=1326 audit(1768295000.616:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11756 comm="syz.0.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc298f749 code=0x7ffc0000 [ 571.118999][T11765] netlink: 'syz.2.1532': attribute type 12 has an invalid length. [ 571.202386][ T30] audit: type=1326 audit(1768295000.616:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11756 comm="syz.0.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc298f749 code=0x7ffc0000 [ 571.299619][ T30] audit: type=1326 audit(1768295000.616:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11756 comm="syz.0.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f6bc298f749 code=0x7ffc0000 [ 571.380084][ T30] audit: type=1326 audit(1768295000.616:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11756 comm="syz.0.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc298f749 code=0x7ffc0000 [ 571.415968][ T30] audit: type=1326 audit(1768295000.616:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11756 comm="syz.0.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc298f749 code=0x7ffc0000 [ 571.680000][T11770] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1534'. [ 572.111839][T11778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1536'. [ 573.985916][T11797] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1539'. [ 574.486987][ T24] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 574.677072][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 574.707500][ T5927] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 574.788710][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 574.804758][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 574.853608][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 46624, setting to 1024 [ 574.954992][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 575.001039][ T5927] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 575.013498][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 575.043727][ T5927] usb 2-1: config 0 has no interface number 0 [ 575.068926][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 575.099234][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.099401][ T5927] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 575.203385][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.261923][ T5927] usb 2-1: config 0 descriptor?? [ 575.281500][ T5927] usb 2-1: selecting invalid altsetting 1 [ 575.291207][ T5927] dvb_ttusb_budget: ttusb_init_controller: error [ 575.299170][ T5927] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 575.327905][T11812] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1545'. [ 575.829618][ T5927] DVB: Unable to find symbol cx22700_attach() [ 576.055955][ T5927] DVB: Unable to find symbol tda10046_attach() [ 576.063880][ T5927] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 577.027209][T11822] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1547'. [ 578.047072][ T24] usb 6-1: usb_control_msg returned -71 [ 578.062000][ T24] usbtmc 6-1:16.0: can't read capabilities [ 578.125550][T11834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1549'. [ 578.249121][ T24] usb 6-1: USB disconnect, device number 29 [ 578.355935][ C1] scsi_io_completion_action: 6 callbacks suppressed [ 578.355978][ C1] sd 0:0:1:0: [sda] tag#6251 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 578.373405][ C1] sd 0:0:1:0: [sda] tag#6251 CDB: Read(6) 08 00 00 00 03 44 [ 578.423532][ T5927] usb 2-1: USB disconnect, device number 70 [ 578.617172][T11843] netlink: 'syz.2.1552': attribute type 2 has an invalid length. [ 579.105681][T11855] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1556'. [ 579.583693][T11862] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1557'. [ 580.406263][ T5834] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 580.466971][ T5927] usb 4-1: new low-speed USB device number 65 using dummy_hcd [ 580.576978][ T5834] usb 1-1: device descriptor read/64, error -71 [ 580.651925][ T5927] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 580.660957][ T5927] usb 4-1: config 0 has no interface number 0 [ 580.668081][ T5927] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 580.697161][T11881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1564'. [ 580.741696][ T5927] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 580.798560][ T5927] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 580.822297][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.832447][ T5834] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 580.848083][ T5927] usb 4-1: config 0 descriptor?? [ 580.899281][ T5927] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 581.007098][ T5834] usb 1-1: device descriptor read/64, error -71 [ 581.017013][ T5925] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 581.026984][ T24] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 581.116689][T11874] iowarrior 4-1:0.1: Error -90 while submitting URB [ 581.137403][ T5834] usb usb1-port1: attempt power cycle [ 581.386966][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 581.473109][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 581.489005][ T5925] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 581.508541][ T5925] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 581.532112][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.547788][ T24] usb 6-1: config 0 has an invalid interface number: 202 but max is 0 [ 581.579044][ T5925] usb 2-1: config 0 descriptor?? [ 581.586646][ T24] usb 6-1: config 0 has no interface number 0 [ 581.610394][ T5925] uvcvideo 2-1:0.0: probe with driver uvcvideo failed with error -22 [ 581.642418][ T24] usb 6-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=52.85 [ 581.657560][ T5834] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 581.680751][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.699230][ T5834] usb 1-1: device descriptor read/8, error -71 [ 581.706260][ T24] usb 6-1: Product: syz [ 581.716262][ T24] usb 6-1: Manufacturer: syz [ 581.731337][ T24] usb 6-1: SerialNumber: syz [ 581.784574][ T24] usb 6-1: config 0 descriptor?? [ 581.948815][ T5834] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 581.978654][ T5834] usb 1-1: device descriptor read/8, error -71 [ 582.091129][ T5834] usb usb1-port1: unable to enumerate USB device [ 583.075348][ T30] audit: type=1326 audit(1768295012.806:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11888 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7b518f749 code=0x7ffc0000 [ 583.232228][ T5927] usb 4-1: USB disconnect, device number 65 [ 583.267906][ T30] audit: type=1326 audit(1768295012.806:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11888 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb7b518f749 code=0x7ffc0000 [ 583.324196][T11895] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1567'. [ 583.367489][ T30] audit: type=1326 audit(1768295012.806:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11888 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7b518f749 code=0x7ffc0000 [ 583.413911][ T30] audit: type=1326 audit(1768295012.806:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11888 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb7b518f749 code=0x7ffc0000 [ 583.439068][ T5925] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 583.499210][ T30] audit: type=1326 audit(1768295012.806:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11888 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7b518f749 code=0x7ffc0000 [ 583.590275][ T30] audit: type=1326 audit(1768295012.806:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11888 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb7b518f749 code=0x7ffc0000 [ 583.630473][ T5925] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 583.657153][ T5927] usb 2-1: USB disconnect, device number 71 [ 583.675188][ T5925] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 583.687780][ T5925] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 583.718991][ T5928] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 583.729073][ T30] audit: type=1326 audit(1768295012.806:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11888 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7b518f749 code=0x7ffc0000 [ 583.799082][ T5925] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 583.810085][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 583.819152][ T5925] usb 3-1: Product: syz [ 583.823744][ T5925] usb 3-1: Manufacturer: syz [ 583.832198][ T5925] usb 3-1: SerialNumber: syz [ 583.837466][ T30] audit: type=1326 audit(1768295012.806:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11888 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb7b518f749 code=0x7ffc0000 [ 583.886008][ T30] audit: type=1326 audit(1768295012.806:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11888 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7b518f749 code=0x7ffc0000 [ 583.911101][ T5928] usb 1-1: Using ep0 maxpacket: 8 [ 583.947214][ T5928] usb 1-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=c4.18 [ 583.962145][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.985058][ T5928] usb 1-1: Product: syz [ 583.996222][ T30] audit: type=1326 audit(1768295012.806:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11888 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fb7b518f749 code=0x7ffc0000 [ 584.021544][ T5928] usb 1-1: Manufacturer: syz [ 584.039298][ T5928] usb 1-1: SerialNumber: syz [ 584.055994][ T5928] usb 1-1: config 0 descriptor?? [ 584.130284][ T5927] hid-generic 0003:0004:0000.0021: unknown main item tag 0x0 [ 584.154220][ T5928] esd_usb 1-1:0.0: sending version message failed [ 584.161805][ T5927] hid-generic 0003:0004:0000.0021: unknown main item tag 0x0 [ 584.164249][ T5928] esd_usb 1-1:0.0: probe with driver esd_usb failed with error -22 [ 584.205818][ T5927] hid-generic 0003:0004:0000.0021: unknown main item tag 0x0 [ 584.233876][ T5927] hid-generic 0003:0004:0000.0021: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 584.408419][ T5927] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 584.423005][T11897] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1569'. [ 584.460668][ T5834] usb 1-1: USB disconnect, device number 74 [ 584.631296][ T5927] usb 2-1: Using ep0 maxpacket: 16 [ 584.643738][ T5927] usb 2-1: config 0 has no interfaces? [ 584.650590][ T5927] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 584.651746][ T24] usb_8dev 6-1:0.202 can0: sending command message failed [ 584.660479][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.751083][ T5927] usb 2-1: config 0 descriptor?? [ 584.808425][ T24] usb_8dev 6-1:0.202 can0: can't get firmware version [ 585.000052][ T24] usb_8dev 6-1:0.202: probe with driver usb_8dev failed with error -22 [ 585.054453][ T24] usb 6-1: USB disconnect, device number 30 [ 585.314053][T11919] netlink: 'syz.5.1575': attribute type 4 has an invalid length. [ 585.398547][T11923] netlink: 'syz.5.1575': attribute type 4 has an invalid length. [ 585.453431][ T5928] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 585.621158][ T5928] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 585.635672][ T5928] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 585.647900][ T5834] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 585.651281][ T5928] usb 1-1: config 8 has no interface number 0 [ 585.678033][ T5928] usb 1-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 585.708769][ T5928] usb 1-1: config 8 interface 177 has no altsetting 0 [ 585.731692][ T5928] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 585.768923][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.836017][ T5928] ir_toy 1-1:8.177: required endpoints not found [ 585.849163][ T5834] usb 4-1: Using ep0 maxpacket: 32 [ 585.875105][ T5834] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 585.904760][ T5834] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 585.934730][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.152911][ T5834] usb 4-1: Product: syz [ 586.165962][ T5834] usb 4-1: Manufacturer: syz [ 586.191288][ T5834] usb 4-1: SerialNumber: syz [ 586.221909][ T5834] usb 4-1: config 0 descriptor?? [ 586.245131][T11922] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 586.273708][ T5834] hub 4-1:0.0: bad descriptor, ignoring hub [ 586.288740][ T5834] hub 4-1:0.0: probe with driver hub failed with error -5 [ 586.300133][ T5928] usb 1-1: USB disconnect, device number 75 [ 586.303724][ T5834] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input41 [ 586.542095][ T5834] usb 4-1: USB disconnect, device number 66 [ 586.548329][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 586.660728][ T5925] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 72 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 586.718823][ T5925] usb 3-1: USB disconnect, device number 72 [ 586.759192][ T5925] usblp0: removed [ 587.007925][T11930] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1579'. [ 587.101173][ T5927] usb 2-1: USB disconnect, device number 72 [ 587.257175][ T5925] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 587.427061][ T5925] usb 4-1: Using ep0 maxpacket: 8 [ 587.441691][ T5925] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 587.460057][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.489846][ T5925] pvrusb2: Hardware description: Terratec Grabster AV400 [ 587.527075][ T5925] pvrusb2: ********** [ 587.531276][ T5925] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 587.573162][ T5925] pvrusb2: Important functionality might not be entirely working. [ 587.603572][ T5925] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 587.619397][ T5925] pvrusb2: ********** [ 587.714000][T11931] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1578'. [ 587.767052][ T5927] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 587.779328][T11931] syzkaller1: entered promiscuous mode [ 587.785089][T11931] syzkaller1: entered allmulticast mode [ 587.802274][T11931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.898229][T11931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.937268][ T5927] usb 1-1: Using ep0 maxpacket: 32 [ 587.947863][ T5927] usb 1-1: config 0 has an invalid interface number: 202 but max is 0 [ 587.973317][ T5927] usb 1-1: config 0 has no interface number 0 [ 588.036069][ T2345] pvrusb2: Invalid write control endpoint [ 588.057137][ T5927] usb 1-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=52.85 [ 588.114725][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.150542][ T5927] usb 1-1: Product: syz [ 588.160695][ T5927] usb 1-1: Manufacturer: syz [ 588.165552][ T5927] usb 1-1: SerialNumber: syz [ 588.180023][ T5927] usb 1-1: config 0 descriptor?? [ 588.198991][T11957] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 588.215843][T11957] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 588.243599][T11931] pvrusb2: Killing an I2C write to 0 that is too large (desired=86 limit=61) [ 588.264129][ T2345] pvrusb2: Invalid write control endpoint [ 588.292703][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 588.304042][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 588.307570][ T5925] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 588.313304][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 588.333644][ T2345] pvrusb2: Device being rendered inoperable [ 588.343895][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 588.354150][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 588.371790][ T6529] usb 4-1: USB disconnect, device number 67 [ 588.387178][ T2345] pvrusb2: Attached sub-driver cx25840 [ 588.393697][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 588.405888][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 588.570929][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 588.598838][ T5925] usb 2-1: config 179 has an invalid interface number: 97 but max is 0 [ 588.607828][ T5925] usb 2-1: config 179 has no interface number 0 [ 588.632554][ T5925] usb 2-1: config 179 interface 97 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 588.660939][ T5925] usb 2-1: config 179 interface 97 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 588.675168][ T5925] usb 2-1: config 179 interface 97 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 588.688392][ T5925] usb 2-1: config 179 interface 97 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 588.834727][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 588.834752][ T30] audit: type=1326 audit(1768295018.586:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.5.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f338f749 code=0x7ffc0000 [ 588.913263][ T5925] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.ce [ 588.972694][ T30] audit: type=1326 audit(1768295018.586:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.5.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f95f338f749 code=0x7ffc0000 [ 589.027821][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.116218][T11959] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 589.158257][ T30] audit: type=1326 audit(1768295018.586:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.5.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f338f749 code=0x7ffc0000 [ 589.259607][ T30] audit: type=1326 audit(1768295018.586:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.5.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f95f338f749 code=0x7ffc0000 [ 589.344309][ T5834] usb 2-1: USB disconnect, device number 73 [ 589.389893][ T6529] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 589.408861][ T30] audit: type=1326 audit(1768295018.586:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.5.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f338f749 code=0x7ffc0000 [ 589.478251][ T5925] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 589.502999][T11981] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1595'. [ 589.538155][ T30] audit: type=1326 audit(1768295018.586:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.5.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f95f338f749 code=0x7ffc0000 [ 589.596392][ T6529] usb 4-1: Using ep0 maxpacket: 16 [ 589.615037][ T30] audit: type=1326 audit(1768295018.586:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.5.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f338f749 code=0x7ffc0000 [ 589.615112][ T6529] usb 4-1: config 7 has an invalid interface number: 226 but max is 2 [ 589.654233][ T6529] usb 4-1: config 7 has an invalid interface number: 150 but max is 2 [ 589.665748][ T6529] usb 4-1: config 7 has an invalid interface number: 46 but max is 2 [ 589.671740][ T5925] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 589.726927][ T6529] usb 4-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 589.738016][ T6529] usb 4-1: config 7 has no interface number 0 [ 589.744641][ T6529] usb 4-1: config 7 has no interface number 1 [ 589.744667][ T5925] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 589.761316][ T5925] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 589.763255][ T6529] usb 4-1: config 7 has no interface number 2 [ 589.780813][ T30] audit: type=1326 audit(1768295018.586:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.5.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f95f338f749 code=0x7ffc0000 [ 589.804013][ T6529] usb 4-1: config 7 interface 226 altsetting 249 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 589.892427][ T6529] usb 4-1: config 7 interface 226 altsetting 249 endpoint 0xD has an invalid bInterval 205, changing to 7 [ 589.904371][ T30] audit: type=1326 audit(1768295018.586:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.5.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f338f749 code=0x7ffc0000 [ 590.008825][ T6529] usb 4-1: config 7 interface 226 altsetting 249 bulk endpoint 0x3 has invalid maxpacket 1023 [ 590.023179][ T30] audit: type=1326 audit(1768295018.586:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.5.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f95f338f749 code=0x7ffc0000 [ 590.034354][ T6529] usb 4-1: config 7 interface 226 altsetting 249 has an invalid descriptor for endpoint zero, skipping [ 590.140916][ T6529] usb 4-1: config 7 interface 226 altsetting 249 endpoint 0x8 has invalid maxpacket 1072, setting to 64 [ 590.205390][ T6529] usb 4-1: config 7 interface 226 altsetting 249 endpoint 0xF has an invalid bInterval 89, changing to 10 [ 590.225002][ T6529] usb 4-1: config 7 interface 226 altsetting 249 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 590.241457][ T6529] usb 4-1: config 7 interface 150 altsetting 247 has a duplicate endpoint with address 0xD, skipping [ 590.257291][ T6529] usb 4-1: config 7 interface 150 altsetting 247 has a duplicate endpoint with address 0x3, skipping [ 590.276778][ T6529] usb 4-1: config 7 interface 150 altsetting 247 has a duplicate endpoint with address 0xC, skipping [ 590.304406][ T6529] usb 4-1: config 7 interface 150 altsetting 247 has a duplicate endpoint with address 0xB, skipping [ 590.304580][ T5925] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 590.317985][ T6529] usb 4-1: config 7 interface 150 altsetting 247 has a duplicate endpoint with address 0xF, skipping [ 590.336831][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 590.338397][ T6529] usb 4-1: config 7 interface 150 altsetting 247 has a duplicate endpoint with address 0xB, skipping [ 590.345475][ T5925] usb 6-1: Product: syz [ 590.345498][ T5925] usb 6-1: Manufacturer: syz [ 590.345515][ T5925] usb 6-1: SerialNumber: syz [ 590.383786][ T6529] usb 4-1: config 7 interface 150 altsetting 247 has a duplicate endpoint with address 0xB, skipping [ 590.403742][ T6529] usb 4-1: config 7 interface 150 altsetting 247 has a duplicate endpoint with address 0xE, skipping [ 590.454666][ T6529] usb 4-1: config 7 interface 150 altsetting 247 has a duplicate endpoint with address 0x5, skipping [ 590.469062][ T5834] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 590.486335][ T5927] usb_8dev 1-1:0.202 can0: sending command message failed [ 590.495004][ T5927] usb_8dev 1-1:0.202 can0: can't get firmware version [ 590.502129][ T5969] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 590.515815][ T6529] usb 4-1: config 7 interface 150 altsetting 247 has a duplicate endpoint with address 0x3, skipping [ 590.529944][ T6529] usb 4-1: config 7 interface 150 altsetting 247 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 590.545025][ T6529] usb 4-1: config 7 interface 46 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 590.560732][ T6529] usb 4-1: config 7 interface 46 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 590.573846][ T6529] usb 4-1: config 7 interface 46 altsetting 1 has an endpoint descriptor with address 0x9C, changing to 0x8C [ 590.586039][ T6529] usb 4-1: config 7 interface 46 altsetting 1 has a duplicate endpoint with address 0x8C, skipping [ 590.637006][ T5834] usb 3-1: device descriptor read/64, error -71 [ 590.667232][ T5969] usb 2-1: device descriptor read/64, error -71 [ 590.695907][ T6529] usb 4-1: config 7 interface 46 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 590.709136][ T6529] usb 4-1: config 7 interface 46 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 590.720390][ T6529] usb 4-1: config 7 interface 46 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 590.731835][ T6529] usb 4-1: config 7 interface 46 altsetting 1 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 590.744552][ T5927] usb_8dev 1-1:0.202: probe with driver usb_8dev failed with error -22 [ 590.800762][ T5927] usb 1-1: USB disconnect, device number 76 [ 590.810286][ T6529] usb 4-1: config 7 interface 46 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 590.825520][ T6529] usb 4-1: config 7 interface 226 has no altsetting 0 [ 590.833965][ T6529] usb 4-1: config 7 interface 150 has no altsetting 0 [ 590.854330][ T6529] usb 4-1: config 7 interface 46 has no altsetting 0 [ 590.886235][ T6529] usb 4-1: New USB device found, idVendor=1066, idProduct=0600, bcdDevice= e.92 [ 590.896198][ T6529] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.907164][ T6529] usb 4-1: Product: syz [ 590.911552][ T6529] usb 4-1: Manufacturer: syz [ 590.916271][ T6529] usb 4-1: SerialNumber: syz [ 590.947015][ T5834] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 590.954793][ T5969] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 590.971062][T11977] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 591.097140][ T5969] usb 2-1: device descriptor read/64, error -71 [ 591.103959][ T5834] usb 3-1: device descriptor read/64, error -71 [ 591.207353][ T5969] usb usb2-port1: attempt power cycle [ 591.220112][ T5834] usb usb3-port1: attempt power cycle [ 591.263528][ T6529] usbhid 4-1:7.46: couldn't find an input interrupt endpoint [ 591.305226][ T6529] usb 4-1: USB disconnect, device number 68 [ 591.577056][ T5969] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 591.596939][ T5834] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 591.609386][ T5969] usb 2-1: device descriptor read/8, error -71 [ 591.693418][T12002] netlink: 'syz.0.1601': attribute type 4 has an invalid length. [ 591.707651][T12002] netlink: 'syz.0.1601': attribute type 4 has an invalid length. [ 591.789301][ T5834] usb 3-1: device descriptor read/8, error -71 [ 592.008195][ T5969] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 592.028469][ T5969] usb 2-1: device descriptor read/8, error -71 [ 592.153674][ T5969] usb usb2-port1: unable to enumerate USB device [ 592.155251][ T5925] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 592.179158][ T5925] usb 6-1: USB disconnect, device number 31 [ 592.198243][ T5834] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 592.227797][ T5834] usb 3-1: device descriptor read/8, error -71 [ 592.232475][ T5925] usblp0: removed [ 592.337903][ T5834] usb usb3-port1: unable to enumerate USB device [ 594.039350][ T5916] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 594.066974][ T5834] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 594.197136][ T5916] usb 2-1: Using ep0 maxpacket: 8 [ 594.204670][ T5916] usb 2-1: config 179 has an invalid interface number: 97 but max is 0 [ 594.213552][ T5916] usb 2-1: config 179 has no interface number 0 [ 594.227078][ T5916] usb 2-1: config 179 interface 97 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 594.247023][ T5916] usb 2-1: config 179 interface 97 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 594.247109][ T5834] usb 3-1: Using ep0 maxpacket: 16 [ 594.258671][ T5916] usb 2-1: config 179 interface 97 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 594.258702][ T5916] usb 2-1: config 179 interface 97 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 594.268023][ T5834] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 594.302362][ T5834] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 594.312656][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.316961][ T5916] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.ce [ 594.323355][ T5834] usb 3-1: Product: syz [ 594.335718][ T5834] usb 3-1: Manufacturer: syz [ 594.357066][ T5969] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 594.366946][ T5834] usb 3-1: SerialNumber: syz [ 594.387629][ T5834] usb 3-1: config 0 descriptor?? [ 594.446463][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.475054][T12019] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 594.687515][ T5969] usb 4-1: Using ep0 maxpacket: 16 [ 594.724329][ T5969] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 0.02 [ 594.733724][ T5916] usb 2-1: USB disconnect, device number 78 [ 594.761632][ T5969] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=3 [ 594.779607][ T5969] usb 4-1: Manufacturer: syz [ 594.789859][ T5969] usb 4-1: SerialNumber: syz [ 594.892652][ T5969] usb 4-1: config 0 descriptor?? [ 594.911496][ T5969] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 594.921739][ T5969] usb 4-1: Detected SIO [ 594.938551][ T5969] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 595.131736][ T5969] usb 4-1: USB disconnect, device number 69 [ 595.140303][ T5969] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 595.248007][ T5969] ftdi_sio 4-1:0.0: device disconnected [ 596.428223][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 596.428243][ T30] audit: type=1326 audit(1768295026.206:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12056 comm="syz.1.1617" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a1498f749 code=0x0 [ 596.784724][ T5916] usb 3-1: USB disconnect, device number 77 [ 597.076695][T12075] batman_adv: batadv0: Adding interface: macvtap1 [ 597.112546][T12075] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 597.152276][T12075] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 597.220199][ T5916] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 597.357106][ T5916] usb 3-1: device descriptor read/64, error -71 [ 597.397000][ T5925] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 597.557018][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 597.565161][ T5925] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 597.576974][ T5928] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 597.586190][ T5925] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 597.596982][ T5916] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 597.616994][ T5925] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 597.646980][ T5925] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 597.676975][ T5925] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 597.686299][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.746987][ T5916] usb 3-1: device descriptor read/64, error -71 [ 597.753931][ T5928] usb 4-1: Using ep0 maxpacket: 8 [ 597.761688][ T5928] usb 4-1: config 179 has an invalid interface number: 97 but max is 0 [ 597.771599][ T5928] usb 4-1: config 179 has no interface number 0 [ 597.781136][ T5928] usb 4-1: config 179 interface 97 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 597.798605][ T5928] usb 4-1: config 179 interface 97 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 597.846958][ T5928] usb 4-1: config 179 interface 97 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 597.858552][ T5928] usb 4-1: config 179 interface 97 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 597.879798][ T5916] usb usb3-port1: attempt power cycle [ 597.886697][ T5928] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.ce [ 597.897718][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.919095][T12080] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 597.932875][ T5925] usb 2-1: GET_CAPABILITIES returned 0 [ 597.945808][ T5925] usbtmc 2-1:16.0: can't read capabilities [ 598.190067][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 598.199679][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 598.209001][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 598.217135][ T5916] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 598.219832][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 598.236409][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 598.245970][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 598.257575][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 598.266928][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 598.276072][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 598.277661][ T5916] usb 3-1: device descriptor read/8, error -71 [ 598.285468][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 598.305524][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 598.314863][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 598.324384][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 598.333867][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 598.343763][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 598.353662][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 598.361648][ T5925] usb 2-1: USB disconnect, device number 79 [ 598.527032][ T5916] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 598.547684][ T5916] usb 3-1: device descriptor read/8, error -71 [ 598.568872][T12116] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1636'. [ 598.657627][ T5916] usb usb3-port1: unable to enumerate USB device [ 599.777267][T12127] netlink: 'syz.1.1639': attribute type 4 has an invalid length. [ 599.786110][T12127] netlink: 'syz.1.1639': attribute type 4 has an invalid length. [ 599.888095][T12129] dummy0: entered promiscuous mode [ 599.900335][T12129] macsec1: entered promiscuous mode [ 599.920676][T12129] dummy0: left promiscuous mode [ 600.534040][ T5969] usb 4-1: USB disconnect, device number 70 [ 601.976587][T12153] netlink: 'syz.1.1645': attribute type 4 has an invalid length. [ 602.008013][T12153] netlink: 'syz.1.1645': attribute type 4 has an invalid length. [ 602.197472][ T30] audit: type=1326 audit(1768295031.856:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12151 comm="syz.3.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa318f749 code=0x7ffc0000 [ 602.226459][ T30] audit: type=1326 audit(1768295031.856:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12151 comm="syz.3.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffaa318f749 code=0x7ffc0000 [ 602.289167][ T30] audit: type=1326 audit(1768295031.866:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12151 comm="syz.3.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa318f749 code=0x7ffc0000 [ 602.374505][ T30] audit: type=1326 audit(1768295031.866:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12151 comm="syz.3.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffaa318f749 code=0x7ffc0000 [ 602.458926][ T30] audit: type=1326 audit(1768295031.866:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12151 comm="syz.3.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa318f749 code=0x7ffc0000 [ 602.499215][ T30] audit: type=1326 audit(1768295031.866:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12151 comm="syz.3.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa318f749 code=0x7ffc0000 [ 602.757179][ T30] audit: type=1326 audit(1768295031.876:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12151 comm="syz.3.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffaa318f749 code=0x7ffc0000 [ 602.829556][ T30] audit: type=1326 audit(1768295031.876:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12151 comm="syz.3.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa318f749 code=0x7ffc0000 [ 603.030428][ T30] audit: type=1326 audit(1768295031.876:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12151 comm="syz.3.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffaa318f749 code=0x7ffc0000 [ 603.117036][ T30] audit: type=1326 audit(1768295031.876:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12151 comm="syz.3.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa318f749 code=0x7ffc0000 [ 603.189307][T12163] FAULT_INJECTION: forcing a failure. [ 603.189307][T12163] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 603.219659][T12163] CPU: 1 UID: 0 PID: 12163 Comm: syz.5.1649 Tainted: G L syzkaller #0 PREEMPT(full) [ 603.219685][T12163] Tainted: [L]=SOFTLOCKUP [ 603.219690][T12163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 603.219698][T12163] Call Trace: [ 603.219703][T12163] [ 603.219709][T12163] dump_stack_lvl+0xe8/0x150 [ 603.219730][T12163] should_fail_ex+0x414/0x560 [ 603.219752][T12163] prepare_alloc_pages+0x22b/0x650 [ 603.219771][T12163] __alloc_frozen_pages_noprof+0x123/0x370 [ 603.219788][T12163] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 603.219806][T12163] ? policy_nodemask+0x27c/0x720 [ 603.219820][T12163] ? try_to_migrate+0x319/0x3d0 [ 603.219835][T12163] alloc_pages_mpol+0x232/0x4a0 [ 603.219852][T12163] alloc_migration_target_by_mpol+0x2e6/0x590 [ 603.219874][T12163] migrate_pages_batch+0x801/0x35e0 [ 603.219899][T12163] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 603.219920][T12163] ? __pfx_migrate_pages_batch+0x10/0x10 [ 603.219950][T12163] migrate_pages+0x1b9a/0x28e0 [ 603.219975][T12163] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 603.219996][T12163] ? __pfx_migrate_pages+0x10/0x10 [ 603.220010][T12163] ? mas_next_node+0xafd/0xd60 [ 603.220033][T12163] ? mas_next_slot+0xc20/0xcf0 [ 603.220058][T12163] __se_sys_mbind+0xa47/0xc40 [ 603.220072][T12163] ? __pfx_vfs_write+0x10/0x10 [ 603.220087][T12163] ? __pfx___se_sys_mbind+0x10/0x10 [ 603.220104][T12163] ? fput+0xa0/0xd0 [ 603.220119][T12163] ? ksys_write+0x22a/0x250 [ 603.220132][T12163] ? __pfx_ksys_write+0x10/0x10 [ 603.220146][T12163] ? __x64_sys_mbind+0x21/0xf0 [ 603.220161][T12163] do_syscall_64+0xec/0xf80 [ 603.220174][T12163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.220186][T12163] ? trace_irq_disable+0x37/0x100 [ 603.220201][T12163] ? clear_bhb_loop+0x60/0xb0 [ 603.220215][T12163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.220227][T12163] RIP: 0033:0x7f95f338f749 [ 603.220239][T12163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 603.220250][T12163] RSP: 002b:00007f95f4282038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 603.220265][T12163] RAX: ffffffffffffffda RBX: 00007f95f35e5fa0 RCX: 00007f95f338f749 [ 603.220275][T12163] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000400000 [ 603.220283][T12163] RBP: 00007f95f4282090 R08: 0000000000000000 R09: 0000000000000002 [ 603.220291][T12163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 603.220299][T12163] R13: 00007f95f35e6038 R14: 00007f95f35e5fa0 R15: 00007f95f370fa28 [ 603.220317][T12163] [ 604.554143][T12185] warning: `syz.2.1656' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 604.873150][T12195] netlink: 'syz.2.1659': attribute type 1 has an invalid length. [ 605.025873][T12195] 8021q: adding VLAN 0 to HW filter on device bond3 [ 605.081594][T12195] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1659'. [ 605.139652][T12195] bond3: entered promiscuous mode [ 605.481055][T12206] x_tables: unsorted underflow at hook 4 [ 605.585592][T12207] netlink: 'syz.5.1661': attribute type 12 has an invalid length. [ 605.930630][T12213] syzkaller0: entered promiscuous mode [ 606.163934][T12213] syzkaller0: entered allmulticast mode [ 606.988739][T12227] FAULT_INJECTION: forcing a failure. [ 606.988739][T12227] name failslab, interval 1, probability 0, space 0, times 0 [ 607.046705][T12227] CPU: 0 UID: 0 PID: 12227 Comm: syz.5.1668 Tainted: G L syzkaller #0 PREEMPT(full) [ 607.046741][T12227] Tainted: [L]=SOFTLOCKUP [ 607.046750][T12227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 607.046773][T12227] Call Trace: [ 607.046788][T12227] [ 607.046800][T12227] dump_stack_lvl+0xe8/0x150 [ 607.046838][T12227] should_fail_ex+0x414/0x560 [ 607.046874][T12227] should_failslab+0xa8/0x100 [ 607.046900][T12227] __kmalloc_noprof+0xdf/0x800 [ 607.046921][T12227] ? kernfs_fop_write_iter+0x158/0x540 [ 607.046951][T12227] kernfs_fop_write_iter+0x158/0x540 [ 607.046985][T12227] iter_file_splice_write+0x972/0x10b0 [ 607.047040][T12227] ? __pfx_iter_file_splice_write+0x10/0x10 [ 607.047087][T12227] ? __pfx_iter_file_splice_write+0x10/0x10 [ 607.047114][T12227] direct_splice_actor+0x101/0x160 [ 607.047145][T12227] splice_direct_to_actor+0x5a8/0xcc0 [ 607.047193][T12227] ? __pfx_direct_splice_actor+0x10/0x10 [ 607.047219][T12227] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 607.047257][T12227] do_splice_direct+0x181/0x270 [ 607.047285][T12227] ? __pfx_do_splice_direct+0x10/0x10 [ 607.047308][T12227] ? common_file_perm+0x1b5/0x220 [ 607.047335][T12227] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 607.047369][T12227] ? rw_verify_area+0x255/0x4d0 [ 607.047403][T12227] do_sendfile+0x4da/0x7e0 [ 607.047440][T12227] ? __pfx_do_sendfile+0x10/0x10 [ 607.047477][T12227] __se_sys_sendfile64+0xd9/0x190 [ 607.047505][T12227] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 607.047539][T12227] do_syscall_64+0xec/0xf80 [ 607.047565][T12227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.047585][T12227] ? trace_irq_disable+0x37/0x100 [ 607.047612][T12227] ? clear_bhb_loop+0x60/0xb0 [ 607.047647][T12227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.047669][T12227] RIP: 0033:0x7f95f338f749 [ 607.047690][T12227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 607.047708][T12227] RSP: 002b:00007f95f4282038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 607.047733][T12227] RAX: ffffffffffffffda RBX: 00007f95f35e5fa0 RCX: 00007f95f338f749 [ 607.047749][T12227] RDX: 0000200000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 607.047763][T12227] RBP: 00007f95f4282090 R08: 0000000000000000 R09: 0000000000000000 [ 607.047777][T12227] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 607.047790][T12227] R13: 00007f95f35e6038 R14: 00007f95f35e5fa0 R15: 00007f95f370fa28 [ 607.047825][T12227] [ 607.316730][T12229] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1670'. [ 607.350916][T12226] netlink: 'syz.2.1669': attribute type 1 has an invalid length. [ 607.514620][T12233] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 607.684997][T12241] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 607.732336][T12241] syzkaller1: linktype set to 769 [ 607.996971][ T5925] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 608.126942][ T5925] usb 3-1: device descriptor read/64, error -71 [ 608.386988][ T5925] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 608.537000][ T5925] usb 3-1: device descriptor read/64, error -71 [ 608.650364][ T5925] usb usb3-port1: attempt power cycle [ 608.815542][T12277] bond2: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 608.870198][T12277] bond2 (unregistering): Released all slaves [ 609.008355][ T5925] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 609.048496][ T5925] usb 3-1: device descriptor read/8, error -71 [ 609.299049][ T5925] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 609.360123][ T5925] usb 3-1: device descriptor read/8, error -71 [ 609.487382][ T5925] usb usb3-port1: unable to enumerate USB device [ 609.797055][ T5925] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 610.085717][ T5925] usb 6-1: Using ep0 maxpacket: 32 [ 610.158307][ T5925] usb 6-1: config 0 has an invalid interface number: 202 but max is 0 [ 610.258362][ T5925] usb 6-1: config 0 has no interface number 0 [ 610.311440][ T5925] usb 6-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=52.85 [ 610.323812][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.337209][ T5925] usb 6-1: Product: syz [ 610.382204][ T5925] usb 6-1: Manufacturer: syz [ 610.388718][ T5925] usb 6-1: SerialNumber: syz [ 610.415591][ T5925] usb 6-1: config 0 descriptor?? [ 611.247055][ T5927] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 611.649572][ T5927] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 611.659625][ T5927] usb 4-1: config 0 has no interface number 0 [ 611.668611][ T5927] usb 4-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 611.708968][ T5927] usb 4-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 611.824534][ T5927] usb 4-1: config 0 interface 113 has no altsetting 0 [ 611.848331][ T5927] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 611.857990][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.866241][ T5927] usb 4-1: Product: syz [ 611.876338][ T5927] usb 4-1: Manufacturer: syz [ 611.891364][ T5927] usb 4-1: SerialNumber: syz [ 611.965528][ T5927] usb 4-1: config 0 descriptor?? [ 612.015953][ C0] usb 4-1: NFC: Urb failure (status -71) [ 612.040162][ T5927] usb 4-1: NFC: Unable to get FW version [ 612.057392][ T5927] pn533_usb 4-1:0.113: probe with driver pn533_usb failed with error -90 [ 612.642758][ T5925] usb_8dev 6-1:0.202 can0: sending command message failed [ 612.652513][ T5925] usb_8dev 6-1:0.202 can0: can't get firmware version [ 612.839117][ T5925] usb_8dev 6-1:0.202: probe with driver usb_8dev failed with error -22 [ 612.933746][ T5925] usb 6-1: USB disconnect, device number 32 [ 613.336573][T12326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1692'. [ 613.815874][ T10] usb 4-1: USB disconnect, device number 71 [ 613.836476][T12331] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1694'. [ 613.913593][T12333] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1694'. [ 613.940368][T12333] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1694'. [ 615.066456][T12355] random: crng reseeded on system resumption [ 615.163250][T12347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1697'. [ 615.427404][ T5925] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 616.229680][ T5925] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 616.257060][ T5925] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 616.436486][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 616.436525][ T5925] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 616.466765][ T5925] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 616.516941][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.525282][ T5925] usb 6-1: Product: syz [ 616.585391][ T5925] usb 6-1: Manufacturer: syz [ 616.595556][ T5925] usb 6-1: SerialNumber: syz [ 616.615562][ T5925] usb 6-1: config 0 descriptor?? [ 616.629227][ T5925] garmin_gps 6-1:0.0: Garmin GPS usb/tty converter detected [ 616.652597][ T5925] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 616.680021][ T5925] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 616.796956][ T6928] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 616.904300][T12358] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1701'. [ 616.931361][T12358] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1701'. [ 616.946923][ T6928] usb 4-1: Using ep0 maxpacket: 8 [ 616.960875][ T6928] usb 4-1: unable to get BOS descriptor or descriptor too short [ 616.967254][T12358] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1701'. [ 616.979978][ T6928] usb 4-1: config 7 has an invalid interface number: 6 but max is 0 [ 617.016936][ T6928] usb 4-1: config 7 has no interface number 0 [ 617.038522][ T6928] usb 4-1: config 7 interface 6 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 617.087423][T12358] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1701'. [ 617.106744][ T6928] usb 4-1: config 7 interface 6 has no altsetting 0 [ 617.128953][ T6928] usb 4-1: New USB device found, idVendor=1a8d, idProduct=100d, bcdDevice=30.9e [ 617.157252][ T6928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.170468][ T6928] usb 4-1: Product: syz [ 617.174754][ T6928] usb 4-1: Manufacturer: syz [ 617.189839][ T6928] usb 4-1: SerialNumber: syz [ 617.410949][T12378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.421895][T12378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.478698][ T6928] option 4-1:7.6: GSM modem (1-port) converter detected [ 617.512050][T12389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1708'. [ 617.635390][ T6928] usb 4-1: USB disconnect, device number 72 [ 617.673436][ T6928] option 4-1:7.6: device disconnected [ 618.243717][T12407] netlink: 'syz.3.1712': attribute type 4 has an invalid length. [ 618.261820][T12407] netlink: 'syz.3.1712': attribute type 4 has an invalid length. [ 618.858086][ T6928] usb 6-1: USB disconnect, device number 33 [ 618.904559][ T6928] garmin_gps 6-1:0.0: device disconnected [ 619.486951][ T5927] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 619.498793][ T5969] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 619.727192][ T5969] usb 6-1: device descriptor read/64, error -71 [ 619.737655][ T5927] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 619.757673][ T5927] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 619.779726][ T5927] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 619.816922][ T5927] usb 3-1: config 0 interface 0 has no altsetting 0 [ 619.824974][ T5927] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 619.840228][ T5927] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 619.886907][ T5927] usb 3-1: config 0 interface 0 has no altsetting 0 [ 619.895178][ T5927] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 619.914320][ T5927] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 619.944880][ T5927] usb 3-1: config 0 interface 0 has no altsetting 0 [ 619.956094][ T5927] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 619.975819][ T5927] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 620.007100][ T5969] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 620.036749][ T5927] usb 3-1: config 0 interface 0 has no altsetting 0 [ 620.057769][ T5927] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 620.064575][T12422] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1719'. [ 620.066794][ T5927] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 620.133748][ T5927] usb 3-1: config 0 interface 0 has no altsetting 0 [ 620.150610][ T5927] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 620.168287][ T5927] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 620.179334][ T5969] usb 6-1: device descriptor read/64, error -71 [ 620.187807][ T5927] usb 3-1: config 0 interface 0 has no altsetting 0 [ 620.196658][ T5927] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 620.202187][T12426] xt_hashlimit: size too large, truncated to 1048576 [ 620.207530][ T5927] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 620.226566][ T5927] usb 3-1: config 0 interface 0 has no altsetting 0 [ 620.247726][ T5927] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 620.275912][ T5927] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 620.284426][T12427] tipc: Started in network mode [ 620.289210][ T5969] usb usb6-port1: attempt power cycle [ 620.318730][ T5927] usb 3-1: config 0 interface 0 has no altsetting 0 [ 620.333844][ T5927] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 620.338991][T12427] tipc: Node identity fa4a59406c6d, cluster identity 4711 [ 620.366942][ T5927] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 620.384094][ T5927] usb 3-1: Product: syz [ 620.391759][ T5927] usb 3-1: Manufacturer: syz [ 620.395310][T12427] tipc: Enabled bearer , priority 0 [ 620.397212][ T5927] usb 3-1: SerialNumber: syz [ 620.423638][T12433] syzkaller0: entered promiscuous mode [ 620.429802][ T5927] usb 3-1: config 0 descriptor?? [ 620.451649][ T5927] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 620.485893][T12433] syzkaller0: entered allmulticast mode [ 620.505732][T12427] syzkaller0: mtu less than device minimum [ 620.593738][T12425] tipc: Resetting bearer [ 620.614795][T12425] tipc: Disabling bearer [ 620.657041][ T5969] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 620.673523][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 620.673544][ T30] audit: type=1326 audit(1768295050.446:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12417 comm="syz.2.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7b518f749 code=0x7ffc0000 [ 620.714600][ T5969] usb 6-1: device descriptor read/8, error -71 [ 620.743312][ T30] audit: type=1326 audit(1768295050.446:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12417 comm="syz.2.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fb7b518f749 code=0x7ffc0000 [ 620.773619][ T30] audit: type=1326 audit(1768295050.446:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12417 comm="syz.2.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7b518f749 code=0x7ffc0000 [ 620.800755][ T30] audit: type=1326 audit(1768295050.496:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12417 comm="syz.2.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb7b518f749 code=0x7ffc0000 [ 620.827515][ T30] audit: type=1326 audit(1768295050.526:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12417 comm="syz.2.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7b518f749 code=0x7ffc0000 [ 620.850674][ T5927] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 620.861058][ T30] audit: type=1326 audit(1768295050.526:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12417 comm="syz.2.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7b518f749 code=0x7ffc0000 [ 620.884305][ T30] audit: type=1326 audit(1768295050.526:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12417 comm="syz.2.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb7b518f749 code=0x7ffc0000 [ 620.924618][ T30] audit: type=1326 audit(1768295050.526:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12417 comm="syz.2.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7b518f749 code=0x7ffc0000 [ 620.955899][ T30] audit: type=1326 audit(1768295050.526:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12417 comm="syz.2.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb7b518f749 code=0x7ffc0000 [ 620.980217][ T30] audit: type=1326 audit(1768295050.526:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12417 comm="syz.2.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7b518f749 code=0x7ffc0000 [ 621.005986][ T5925] usb 3-1: USB disconnect, device number 86 [ 621.017122][ T5969] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 621.043263][ T5925] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 621.044226][ T5927] usb 1-1: config index 0 descriptor too short (expected 65397, got 72) [ 621.060056][ T5969] usb 6-1: device descriptor read/8, error -71 [ 621.071068][ T5927] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 621.104753][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.126089][ T5927] usb 1-1: Product: syz [ 621.134727][ T5927] usb 1-1: Manufacturer: syz [ 621.144856][ T5927] usb 1-1: SerialNumber: syz [ 621.166340][ T5927] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 621.179853][ T5969] usb usb6-port1: unable to enumerate USB device [ 621.200141][ T10] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 621.406147][T12452] netlink: 'syz.3.1727': attribute type 4 has an invalid length. [ 621.423800][T12452] netlink: 'syz.3.1727': attribute type 4 has an invalid length. [ 621.647015][ T6928] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 621.696130][ T5927] usb 1-1: USB disconnect, device number 77 [ 621.920763][T12457] netlink: 'syz.2.1729': attribute type 4 has an invalid length. [ 621.930884][ T6928] usb 2-1: device descriptor read/64, error -71 [ 621.996693][T12458] netlink: 'syz.2.1729': attribute type 4 has an invalid length. [ 622.257061][ T6928] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 622.397427][ T6928] usb 2-1: device descriptor read/64, error -71 [ 622.508931][ T6928] usb usb2-port1: attempt power cycle [ 622.518030][ T10] usb 1-1: Service connection timeout for: 256 [ 622.527205][ T10] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 622.550693][ T10] ath9k_htc: Failed to initialize the device [ 622.567003][ T5925] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 622.666586][ T5927] usb 1-1: ath9k_htc: USB layer deinitialized [ 622.729290][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.741368][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.795772][ T5925] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 622.825480][ T5925] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 622.852096][ T5925] usb 6-1: Manufacturer: syz [ 622.857081][ T6928] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 622.877944][ T6928] usb 2-1: device descriptor read/8, error -71 [ 622.887753][ T5925] usb 6-1: config 0 descriptor?? [ 623.136977][ T6928] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 623.180594][T12460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.207661][T12460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.230966][ T6928] usb 2-1: device descriptor read/8, error -71 [ 623.347335][ T6928] usb usb2-port1: unable to enumerate USB device [ 623.536919][ T24] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 623.697055][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 623.805930][ T24] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 623.834275][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.914928][ T24] usb 4-1: Product: syz [ 623.941764][ T24] usb 4-1: Manufacturer: syz [ 623.968210][ T24] usb 4-1: SerialNumber: syz [ 624.027094][ T24] r8152-cfgselector 4-1: Unknown version 0x0000 [ 624.033944][ T24] r8152-cfgselector 4-1: config 0 descriptor?? [ 624.128908][ T5925] usbhid 6-1:0.0: can't add hid device: -71 [ 624.147140][ T5925] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 624.214067][ T5925] usb 6-1: USB disconnect, device number 38 [ 624.262131][ T24] r8152-cfgselector 4-1: Needed 1 retries to read version [ 624.585091][ T10] r8152-cfgselector 4-1: USB disconnect, device number 73 [ 624.681508][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.690791][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.114675][T12474] xt_CT: You must specify a L4 protocol and not use inversions on it [ 625.897014][ T5969] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 625.956999][ T5925] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 626.106115][T12491] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1740'. [ 626.137661][ T5969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 626.153113][ T5969] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 626.167245][ T5925] usb 1-1: Using ep0 maxpacket: 16 [ 626.181527][ T5925] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 626.192444][ T5925] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 626.207038][ T5969] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 626.226469][ T5969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.229404][ T5925] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 626.311684][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.318250][ T5969] usb 2-1: config 0 descriptor?? [ 626.320283][ T5925] usb 1-1: Product: syz [ 626.372049][T12487] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 626.511409][ T5925] usb 1-1: Manufacturer: syz [ 626.528341][ T5925] usb 1-1: SerialNumber: syz [ 626.657118][T12487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.682267][T12487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.711989][ T5969] usbhid 2-1:0.0: can't add hid device: -71 [ 626.746346][ T5969] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 626.848387][ T5969] usb 2-1: USB disconnect, device number 84 [ 626.887400][ T5925] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 626.935988][ T5925] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 627.001421][ T5925] usb 1-1: USB disconnect, device number 78 [ 627.026724][ T5886] udevd[5886]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 627.256968][ T5969] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 627.416961][ T5969] usb 2-1: Using ep0 maxpacket: 32 [ 627.425207][T12501] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1742'. [ 627.473935][T12502] netlink: 'syz.5.1743': attribute type 4 has an invalid length. [ 627.494232][ T5969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 627.511687][ T5969] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 627.538734][ T5969] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 627.555556][ T5969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.581758][T12503] netlink: 'syz.5.1743': attribute type 4 has an invalid length. [ 627.682572][ T5969] usb 2-1: config 0 descriptor?? [ 627.697540][ T5969] hub 2-1:0.0: bad descriptor, ignoring hub [ 627.716023][ T5969] hub 2-1:0.0: probe with driver hub failed with error -5 [ 628.221715][ T5969] hid-rmi 0003:06CB:81A7.0022: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.1-1/input0 [ 628.747650][ T5969] usb 2-1: USB disconnect, device number 85 [ 629.620847][T12524] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1747'. [ 630.646960][ T5927] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 630.837061][ T5927] usb 3-1: Using ep0 maxpacket: 8 [ 630.845641][ T5927] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 630.905026][ T5927] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 630.915718][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.964250][ T5927] usb 3-1: config 0 descriptor?? [ 630.972863][T12524] syz.1.1747 (12524): drop_caches: 2 [ 631.200023][T12527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1751'. [ 631.331834][ T5927] usbhid 3-1:0.0: can't add hid device: -71 [ 631.486412][ T5927] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 631.569244][ T5927] usb 3-1: USB disconnect, device number 87 [ 631.998760][T12565] netlink: 'syz.0.1760': attribute type 4 has an invalid length. [ 632.067128][T12567] netlink: 'syz.0.1760': attribute type 4 has an invalid length. [ 632.296928][ T5927] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 632.358653][T12573] x_tables: duplicate underflow at hook 1 [ 632.462529][ T5927] usb 2-1: Using ep0 maxpacket: 8 [ 632.482756][ T5927] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 632.516952][ T5927] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 632.559192][ T5927] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 46624, setting to 1024 [ 632.611639][ T5927] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 632.652838][ T5927] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 632.706931][ T5927] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 632.737077][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.095960][T12584] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1764'. [ 634.106270][ T6529] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 634.301438][ T6529] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 634.329176][ T6529] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 634.374836][ T6529] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 634.391922][ T6529] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.417022][T12587] netlink: 'syz.0.1763': attribute type 10 has an invalid length. [ 634.438856][T12587] 8021q: adding VLAN 0 to HW filter on device team0 [ 634.449789][T12587] bond0: (slave team0): Enslaving as an active interface with an up link [ 634.547190][ T6529] usb 6-1: config 0 descriptor?? [ 634.616029][T12594] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1766'. [ 634.775638][T12580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.787593][T12580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.296943][ T5927] usb 2-1: usb_control_msg returned -71 [ 635.348717][ T5927] usbtmc 2-1:16.0: can't read capabilities [ 635.431487][ T5927] usb 2-1: USB disconnect, device number 86 [ 635.656975][ T5916] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 635.823691][ T5916] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 635.836075][ T5916] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 636.084042][ T5916] usb 3-1: config 8 has no interface number 0 [ 636.090590][ T5916] usb 3-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 636.111338][ T5916] usb 3-1: config 8 interface 177 has no altsetting 0 [ 636.573973][ T5916] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 636.595346][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.653617][ T5916] ir_toy 3-1:8.177: required endpoints not found [ 636.744558][ T6529] usb 6-1: string descriptor 0 read error: -71 [ 636.756257][ T6529] usb 6-1: USB disconnect, device number 39 [ 636.878261][T12612] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1771'. [ 637.295603][T12620] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1772'. [ 637.481403][T12619] netlink: 'syz.0.1773': attribute type 4 has an invalid length. [ 637.550154][T12621] netlink: 'syz.0.1773': attribute type 4 has an invalid length. [ 638.099854][T12628] netlink: 'syz.1.1776': attribute type 1 has an invalid length. [ 638.443233][T12637] vlan2: entered promiscuous mode [ 638.443286][T12637] bridge0: entered promiscuous mode [ 638.483095][ T6529] usb 3-1: USB disconnect, device number 88 [ 638.619644][ T5927] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 638.797620][ T5927] usb 2-1: Using ep0 maxpacket: 8 [ 638.807869][ T5927] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 638.820917][ T5927] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 638.850075][ T5927] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 46624, setting to 1024 [ 638.884440][ T5927] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 638.920475][ T5927] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 638.970312][ T5927] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 639.008351][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.051799][ T6529] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 639.356961][ T6529] usb 3-1: config 0 has no interfaces? [ 639.367039][ T6529] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 639.525483][ T6529] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.580106][ T6529] usb 3-1: config 0 descriptor?? [ 639.696993][ T10] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 639.860927][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.876984][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 639.926424][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 639.949347][ T5925] usb 3-1: USB disconnect, device number 89 [ 639.983520][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.014833][ T10] usb 1-1: config 0 descriptor?? [ 640.298195][T12645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.307717][T12645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.922407][T12655] fuse: Bad value for 'fd' [ 641.270763][ T5927] usb 2-1: usb_control_msg returned -71 [ 641.282777][ T5927] usbtmc 2-1:16.0: can't read capabilities [ 641.983194][ T5927] usb 2-1: USB disconnect, device number 87 [ 642.347347][ T10] usb 1-1: string descriptor 0 read error: -71 [ 642.356009][ T10] usb 1-1: USB disconnect, device number 79 [ 642.419148][T12669] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1788'. [ 642.763853][T12674] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1789'. [ 642.989920][T12676] xt_CT: No such helper "netbios-ns" [ 644.681991][T12702] af_packet: tpacket_rcv: packet too big, clamped from 62 to 4294967286. macoff=82 [ 644.696990][ T5925] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 645.012796][ T5916] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 645.176960][ T5916] usb 1-1: Using ep0 maxpacket: 8 [ 645.194512][ T5925] usb 6-1: Using ep0 maxpacket: 32 [ 645.352370][ T5916] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 645.381713][ T5916] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 645.406668][T12706] syzkaller0: entered promiscuous mode [ 645.407077][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.421349][T12706] syzkaller0: entered allmulticast mode [ 645.426869][ T5916] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 46624, setting to 1024 [ 645.461094][ T5925] usb 6-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 645.478266][ T5916] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 645.491097][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.518650][ T5916] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 645.537860][ T5925] usb 6-1: config 0 descriptor?? [ 645.555371][ T5916] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 645.593189][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.992614][ T5925] asus 0003:048D:CE50.0023: item fetching failed at offset 6/7 [ 646.019152][ T5925] asus 0003:048D:CE50.0023: Asus hid parse failed: -22 [ 646.046518][ T5925] asus 0003:048D:CE50.0023: probe with driver asus failed with error -22 [ 646.290518][T12711] xt_CT: No such helper "netbios-ns" [ 647.545598][ T5916] usb 1-1: usb_control_msg returned -71 [ 647.577756][ T5916] usbtmc 1-1:16.0: can't read capabilities [ 647.621333][ T5916] usb 1-1: USB disconnect, device number 80 [ 647.866984][ T5834] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 647.911853][T12727] fuse: Bad value for 'fd' [ 648.107918][ T5834] usb 2-1: Using ep0 maxpacket: 32 [ 648.118823][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 648.162763][ T5834] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 648.200159][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.232465][ T5834] usb 2-1: config 0 descriptor?? [ 648.570493][ T5834] usbhid 2-1:0.0: can't add hid device: -71 [ 648.576526][ T5834] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 648.654219][ T5834] usb 2-1: USB disconnect, device number 88 [ 649.247042][ T5916] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 649.448899][ T5916] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 649.497089][ T5916] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 649.512279][ T5916] usb 2-1: config 8 has no interface number 0 [ 649.523246][ T5916] usb 2-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 649.540514][ T5916] usb 2-1: config 8 interface 177 has no altsetting 0 [ 649.547713][ T5916] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 649.564158][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.584469][ T5916] ir_toy 2-1:8.177: required endpoints not found [ 650.067544][ T5916] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 650.207040][ T5925] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 650.226937][ T5916] usb 3-1: Using ep0 maxpacket: 16 [ 650.234477][ T5916] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 650.251141][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 650.265239][ T5916] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 650.275173][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.286346][ T5916] usb 3-1: Product: syz [ 650.291773][ T5916] usb 3-1: Manufacturer: syz [ 650.296583][ T5916] usb 3-1: SerialNumber: syz [ 650.318012][ T5916] usb 3-1: config 0 descriptor?? [ 650.404204][ T5925] usb 1-1: config 0 has an invalid descriptor of length 200, skipping remainder of the config [ 650.429355][ T5916] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 650.441591][ T5925] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 650.478848][ T5916] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 650.486231][ T5925] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 650.495973][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.517665][ T5925] usb 1-1: config 0 descriptor?? [ 650.946562][ T5925] usb 1-1: string descriptor 0 read error: -71 [ 650.972766][ T5925] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 651.000520][ T5925] usb 1-1: USB disconnect, device number 81 [ 651.056106][ T5916] em28xx 3-1:0.0: chip ID is em2874 [ 651.259961][ T5927] usb 3-1: USB disconnect, device number 90 [ 651.267922][ T5927] em28xx 3-1:0.0: Disconnecting em28xx [ 651.281936][ T5927] em28xx 3-1:0.0: Freeing device [ 652.001839][ T5925] usb 2-1: USB disconnect, device number 89 [ 652.247948][T12773] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 652.282100][T12773] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 652.863237][ T5916] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 653.064567][ T5916] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 653.074924][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.091051][ T5916] usb 3-1: Product: syz [ 653.111978][ T5916] usb 3-1: Manufacturer: syz [ 653.145890][ T5916] usb 3-1: SerialNumber: syz [ 653.177097][ T5916] usb 3-1: config 0 descriptor?? [ 653.440903][T12776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1821'. [ 654.047600][T12784] netlink: 'syz.3.1823': attribute type 4 has an invalid length. [ 654.066422][T12784] netlink: 'syz.3.1823': attribute type 4 has an invalid length. [ 654.717188][T12793] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1826'. [ 654.767012][T12793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1826'. [ 655.122293][ T6928] usb 6-1: USB disconnect, device number 40 [ 655.256936][ T5834] usb 3-1: USB disconnect, device number 91 [ 656.186950][ T5927] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 656.236926][ T5834] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 656.504855][ T5834] usb 6-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 656.516307][ T5927] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 656.549294][ T5834] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 656.572838][ T5927] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 656.604313][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.628232][ T5927] usb 4-1: config 8 has no interface number 0 [ 656.645711][ T5927] usb 4-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 656.667098][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.678273][ T5834] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 656.727086][ T5927] usb 4-1: config 8 interface 177 has no altsetting 0 [ 656.734204][ T5927] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 656.743522][ T5834] usb 6-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 656.752966][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.767001][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.859955][ T5927] ir_toy 4-1:8.177: required endpoints not found [ 656.867246][ T5834] usb 6-1: config 0 descriptor?? [ 657.807131][ T5925] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 657.937257][ T5925] usb 2-1: device descriptor read/64, error -71 [ 658.093797][T12831] netlink: 'syz.2.1835': attribute type 12 has an invalid length. [ 658.177671][ T5925] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 658.396965][ T5925] usb 2-1: device descriptor read/64, error -71 [ 658.517238][ T5925] usb usb2-port1: attempt power cycle [ 658.777584][ T6928] usb 4-1: USB disconnect, device number 74 [ 658.867002][ T5925] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 658.907887][ T5925] usb 2-1: device descriptor read/8, error -71 [ 659.206962][ T6928] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 659.217945][ T5925] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 659.271547][ T5925] usb 2-1: device descriptor read/8, error -71 [ 659.400366][ T6928] usb 4-1: Using ep0 maxpacket: 16 [ 659.406304][ T5925] usb usb2-port1: unable to enumerate USB device [ 659.421872][ T6928] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 659.445694][ T6928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.464598][ T6928] usb 4-1: Product: syz [ 659.475889][ T6928] usb 4-1: Manufacturer: syz [ 659.480978][ T6928] usb 4-1: SerialNumber: syz [ 659.523172][ T6928] usb 4-1: config 0 descriptor?? [ 659.619146][ T5834] usbhid 6-1:0.0: can't add hid device: -71 [ 659.625299][ T5834] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 659.658077][ T5834] usb 6-1: USB disconnect, device number 41 [ 659.989329][ T6928] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 660.031150][ T6928] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 660.123790][ T6928] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 660.154525][ T6928] usb 4-1: media controller created [ 660.231520][T12854] netlink: 'syz.2.1843': attribute type 26 has an invalid length. [ 660.233625][ T6928] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 660.358673][ T6928] zl10353_read_register: readreg error (reg=127, ret==0) [ 660.399277][ T6928] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 660.419272][ T6928] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 660.449681][ T6928] usb 4-1: USB disconnect, device number 75 [ 660.530914][T12862] netlink: 'syz.5.1845': attribute type 11 has an invalid length. [ 660.544395][ T6928] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 660.890006][T12870] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1847'. [ 661.276496][T12877] netlink: 'syz.3.1848': attribute type 12 has an invalid length. [ 664.092476][T12930] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1863'. [ 664.119749][T12930] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1863'. [ 664.212971][T12933] netlink: 'syz.0.1863': attribute type 4 has an invalid length. [ 664.409921][T12934] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1864'. [ 664.585857][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 664.585875][ T30] audit: type=1326 audit(1768295094.326:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12928 comm="syz.3.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa318f749 code=0x7ffc0000 [ 664.871682][ T30] audit: type=1326 audit(1768295094.326:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12928 comm="syz.3.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffaa318f749 code=0x7ffc0000 [ 665.137980][ T30] audit: type=1326 audit(1768295094.336:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12928 comm="syz.3.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa318f749 code=0x7ffc0000 [ 665.173082][ T5834] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 665.280709][ T30] audit: type=1326 audit(1768295094.336:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12928 comm="syz.3.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffaa318f749 code=0x7ffc0000 [ 665.367198][ T5834] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 665.380775][ T5834] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 665.411126][ T5834] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 665.426905][ T30] audit: type=1326 audit(1768295094.386:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12928 comm="syz.3.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa318f749 code=0x7ffc0000 [ 665.504468][ T5834] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 665.513852][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 665.526867][ T5834] usb 4-1: Product: syz [ 665.531206][ T5834] usb 4-1: Manufacturer: syz [ 665.542421][ T30] audit: type=1326 audit(1768295094.566:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12928 comm="syz.3.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa318f749 code=0x7ffc0000 [ 665.572923][ T5834] usb 4-1: SerialNumber: syz [ 665.718515][ T30] audit: type=1326 audit(1768295094.566:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12928 comm="syz.3.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffaa318f749 code=0x7ffc0000 [ 665.784056][ T30] audit: type=1326 audit(1768295094.566:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12928 comm="syz.3.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa318f749 code=0x7ffc0000 [ 665.852347][ T5834] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 76 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 665.964716][ T30] audit: type=1326 audit(1768295094.576:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12928 comm="syz.3.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7ffaa318f749 code=0x7ffc0000 [ 666.011901][ T30] audit: type=1326 audit(1768295094.576:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12928 comm="syz.3.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa318f749 code=0x7ffc0000 [ 666.422216][ T5834] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 667.170976][ T5834] usb 2-1: config 0 has no interfaces? [ 667.178560][ T5834] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 667.188927][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.220665][ T5834] usb 2-1: config 0 descriptor?? [ 668.079550][ T5834] usb 4-1: USB disconnect, device number 76 [ 668.112926][ T5834] usblp0: removed [ 668.563877][T12979] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1874'. [ 668.616189][T12974] libceph: resolve '. [ 668.616189][T12974] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 668.616189][T12974] ' (ret=-3): failed [ 669.063772][T12988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1878'. [ 669.808292][ T6928] usb 2-1: USB disconnect, device number 94 [ 670.109297][T12998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1880'. [ 671.003880][T13006] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 671.348037][ T6928] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 671.557252][T13017] netlink: 'syz.2.1885': attribute type 4 has an invalid length. [ 671.727040][ T6928] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 671.740258][ T6928] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 671.846623][T13022] FAULT_INJECTION: forcing a failure. [ 671.846623][T13022] name failslab, interval 1, probability 0, space 0, times 0 [ 671.859797][ T6928] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 671.906280][ T6928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.926098][T13022] CPU: 1 UID: 0 PID: 13022 Comm: syz.1.1887 Tainted: G L syzkaller #0 PREEMPT(full) [ 671.926133][T13022] Tainted: [L]=SOFTLOCKUP [ 671.926142][T13022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 671.926156][T13022] Call Trace: [ 671.926165][T13022] [ 671.926175][T13022] dump_stack_lvl+0xe8/0x150 [ 671.926210][T13022] should_fail_ex+0x414/0x560 [ 671.926249][T13022] should_failslab+0xa8/0x100 [ 671.926278][T13022] kmem_cache_alloc_noprof+0x88/0x710 [ 671.926311][T13022] ? sk_prot_alloc+0x57/0x220 [ 671.926341][T13022] sk_prot_alloc+0x57/0x220 [ 671.926364][T13022] ? sk_alloc+0x27/0x390 [ 671.926391][T13022] sk_alloc+0x3a/0x390 [ 671.926420][T13022] inet_create+0x7a0/0x1000 [ 671.926452][T13022] ? inet_create+0x9c/0x1000 [ 671.926485][T13022] __sock_create+0x4b3/0x9d0 [ 671.926516][T13022] mptcp_subflow_create_socket+0xf0/0x800 [ 671.926548][T13022] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 671.926588][T13022] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 671.926619][T13022] ? do_raw_spin_lock+0x121/0x290 [ 671.926647][T13022] ? lock_sock_nested+0x6a/0x100 [ 671.926682][T13022] __mptcp_nmpc_sk+0x148/0x760 [ 671.926712][T13022] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 671.926743][T13022] ? __local_bh_enable_ip+0xd0/0x130 [ 671.926772][T13022] mptcp_setsockopt+0xedb/0x3590 [ 671.926814][T13022] ? aa_sk_perm+0x7ee/0x920 [ 671.926839][T13022] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 671.926870][T13022] ? __pfx_aa_sk_perm+0x10/0x10 [ 671.926898][T13022] ? __fget_files+0x2a/0x420 [ 671.926919][T13022] ? aa_sock_opt_perm+0xff/0x1a0 [ 671.926946][T13022] ? sock_common_setsockopt+0x36/0xc0 [ 671.926965][T13022] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 671.926986][T13022] do_sock_setsockopt+0x17c/0x1b0 [ 671.927015][T13022] __x64_sys_setsockopt+0x13f/0x1b0 [ 671.927047][T13022] do_syscall_64+0xec/0xf80 [ 671.927070][T13022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.927103][T13022] ? trace_irq_disable+0x37/0x100 [ 671.927130][T13022] ? clear_bhb_loop+0x60/0xb0 [ 671.927155][T13022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.927176][T13022] RIP: 0033:0x7f2a1498f749 [ 671.927196][T13022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 671.927213][T13022] RSP: 002b:00007f2a157cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 671.927237][T13022] RAX: ffffffffffffffda RBX: 00007f2a14be5fa0 RCX: 00007f2a1498f749 [ 671.927253][T13022] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000003 [ 671.927266][T13022] RBP: 00007f2a157cd090 R08: 0000000000000001 R09: 0000000000000000 [ 671.927279][T13022] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.927294][T13022] R13: 00007f2a14be6038 R14: 00007f2a14be5fa0 R15: 00007f2a14d0fa28 [ 671.927327][T13022] [ 672.297546][ T6928] usb 6-1: config 0 descriptor?? [ 672.545538][ T6928] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 673.440733][ T6928] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 673.526907][T13046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.537818][T13046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.877158][ T6928] usb 1-1: Using ep0 maxpacket: 16 [ 673.887253][ T6928] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 673.897149][ T6928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.908551][T13047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1896'. [ 673.920908][ T6928] usb 1-1: Product: syz [ 673.929328][ T6928] usb 1-1: Manufacturer: syz [ 673.946671][ T6928] usb 1-1: SerialNumber: syz [ 674.000463][ T6928] usb 1-1: config 0 descriptor?? [ 674.420296][ T6928] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 674.435792][ T6928] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 674.462822][ T6928] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 674.482147][ T6928] usb 1-1: media controller created [ 674.624184][ T6928] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 674.741313][ T6928] zl10353_read_register: readreg error (reg=127, ret==0) [ 674.749063][ T6928] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 674.758832][ T6928] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 675.599290][ T10] usb 6-1: USB disconnect, device number 42 [ 676.241951][ T6928] usb 1-1: USB disconnect, device number 82 [ 676.298341][ T6928] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 676.928387][T13089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1908'. [ 678.443579][T13103] xt_hashlimit: overflow, try lower: 17592186044416/11 [ 679.492033][T13105] netlink: 'syz.0.1912': attribute type 10 has an invalid length. [ 679.597306][T13105] team0: Port device dummy0 added [ 680.162794][T13117] netlink: 'syz.0.1916': attribute type 1 has an invalid length. [ 680.206019][T13117] 8021q: adding VLAN 0 to HW filter on device bond4 [ 680.219026][ T5925] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 680.219820][T13117] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1916'. [ 680.235961][T13117] bond4: entered promiscuous mode [ 680.377233][ T5925] usb 6-1: Using ep0 maxpacket: 16 [ 680.389807][ T5925] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 680.407768][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 680.467929][ T5925] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 680.471569][T13127] netlink: 'syz.0.1919': attribute type 4 has an invalid length. [ 680.529761][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.541095][ T5925] usb 6-1: Product: syz [ 680.549707][ T5925] usb 6-1: Manufacturer: syz [ 680.557045][ T5925] usb 6-1: SerialNumber: syz [ 680.621124][ T5925] usb 6-1: config 0 descriptor?? [ 680.692410][ T5925] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 680.702753][ T5925] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 681.645210][ T5925] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 681.725860][ T5925] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 682.346007][ T5925] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 682.353632][ T5925] em28xx 6-1:0.0: No AC97 audio processor [ 682.834139][T13147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1923'. [ 683.056146][T13150] syz.1.1924 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 683.242204][T13156] fuse: Bad value for 'fd' [ 683.258681][T13156] netlink: 'syz.0.1925': attribute type 20 has an invalid length. [ 683.373067][ T5925] usb 6-1: USB disconnect, device number 43 [ 683.382572][ T5925] em28xx 6-1:0.0: Disconnecting em28xx [ 683.405492][ T5925] em28xx 6-1:0.0: Freeing device [ 683.817282][ T9] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 684.336915][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 684.408006][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 684.488572][ T9] usb 1-1: config 3 has an invalid interface number: 199 but max is 0 [ 684.519373][ T9] usb 1-1: config 3 has no interface number 0 [ 684.755517][ T9] usb 1-1: config 3 interface 199 has no altsetting 0 [ 684.830800][ T9] usb 1-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=bf.bf [ 684.846864][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.879618][ T9] usb 1-1: Product: syz [ 684.883893][ T9] usb 1-1: Manufacturer: syz [ 684.927765][ T9] usb 1-1: SerialNumber: syz [ 685.136994][ T6928] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 685.173298][ T9] mdc800 1-1:3.199: probe fails -> wrong Interface [ 685.215357][ T9] usb 1-1: USB disconnect, device number 83 [ 685.296939][ T6928] usb 3-1: Using ep0 maxpacket: 32 [ 685.303730][ T6928] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 685.313280][ T6928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.349231][ T6928] usb 3-1: config 0 descriptor?? [ 685.568509][ T6928] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 685.606923][ T5925] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 685.617935][ T6928] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 685.627636][ T5916] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 685.642936][ T6928] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 685.650604][ T6928] usb 3-1: media controller created [ 685.664094][ T6928] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 685.739737][ T6928] DVB: Unable to find symbol dib7000p_attach() [ 685.745963][ T6928] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 685.757330][ T5925] usb 4-1: Using ep0 maxpacket: 8 [ 685.764990][ T5925] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 685.778211][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.786952][ T5916] usb 2-1: Using ep0 maxpacket: 32 [ 685.796739][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.810521][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.825925][ T5925] pvrusb2: Hardware description: Terratec Grabster AV400 [ 685.837878][ T5925] pvrusb2: ********** [ 685.857109][ T5925] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 685.869534][ T5916] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 685.883421][ T5925] pvrusb2: Important functionality might not be entirely working. [ 685.893680][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.907102][ T6928] rc_core: IR keymap rc-dib0700-rc5 not found [ 685.913273][ T6928] Registered IR keymap rc-empty [ 685.918395][ T5925] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 685.932055][ T5916] usb 2-1: config 0 descriptor?? [ 685.938316][ T6928] dvb-usb: could not initialize remote control. [ 685.944693][ T6928] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 685.953126][ T5925] pvrusb2: ********** [ 686.026065][ T2345] pvrusb2: Invalid write control endpoint [ 686.135899][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.147640][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.233876][T13180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.259885][ T2345] pvrusb2: Invalid write control endpoint [ 686.273738][T13180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.285683][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 686.304886][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 686.317537][T13180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.332174][T13180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.343665][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 686.356966][ T2345] pvrusb2: Device being rendered inoperable [ 686.369450][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 686.377385][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 686.391718][ T5916] ft260 0003:0403:6030.0024: unknown main item tag 0x0 [ 686.399776][ T5916] ft260 0003:0403:6030.0024: unknown main item tag 0x0 [ 686.406566][ T2345] pvrusb2: Attached sub-driver cx25840 [ 686.426533][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 686.440722][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 686.575016][T13201] fuse: Bad value for 'fd' [ 686.622000][ T5916] ft260 0003:0403:6030.0024: chip code: 6424 8183 [ 686.622066][T13201] netlink: 'syz.5.1937': attribute type 20 has an invalid length. [ 686.826006][ T5916] ft260 0003:0403:6030.0024: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 687.027344][ T5916] ft260 0003:0403:6030.0024: failed to retrieve status: -32, no wakeup [ 687.057291][ T5925] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 687.276971][ T5925] usb 6-1: Using ep0 maxpacket: 16 [ 687.284065][ T5925] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 687.305602][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 687.324285][ T5925] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 687.334439][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.343445][ T5925] usb 6-1: Product: syz [ 687.348162][ T5925] usb 6-1: Manufacturer: syz [ 687.353151][ T5925] usb 6-1: SerialNumber: syz [ 687.364861][ T5925] usb 6-1: config 0 descriptor?? [ 687.380309][ T5925] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 687.395928][ T5925] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 687.647474][ T5928] usb 2-1: reset high-speed USB device number 95 using dummy_hcd [ 687.785470][T13183] ------------[ cut here ]------------ [ 687.791046][T13183] usb 3-1: BOGUS control dir, pipe 80005c80 doesn't match bRequestType c0 [ 687.800155][T13183] WARNING: drivers/usb/core/urb.c:414 at usb_submit_urb+0x105c/0x18d0, CPU#0: syz.1.1933/13183 [ 687.810964][T13183] Modules linked in: [ 687.815373][T13183] CPU: 0 UID: 0 PID: 13183 Comm: syz.1.1933 Tainted: G L syzkaller #0 PREEMPT(full) [ 687.826566][T13183] Tainted: [L]=SOFTLOCKUP [ 687.831028][T13183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 687.841369][T13183] RIP: 0010:usb_submit_urb+0x111c/0x18d0 [ 687.841899][ T6928] usb 3-1: USB disconnect, device number 92 [ 687.847079][T13183] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b7 f2 ff ff 89 e9 [ 687.847123][T13183] RSP: 0018:ffffc9000bbc7940 EFLAGS: 00010246 [ 687.847148][T13183] RAX: 0000000000000000 RBX: ffff88802959b600 RCX: 0000000080005c80 [ 687.847173][T13183] RDX: ffff88804a690940 RSI: ffffffff8c140d20 RDI: ffffffff8f8ee730 [ 687.847191][T13183] RBP: 1ffff1100ac6a66c R08: 00000000000000c0 R09: 0000000000000000 [ 687.847207][T13183] R10: ffffc9000bbc7a40 R11: fffff52001778f54 R12: ffff8880326ae100 [ 687.847225][T13183] R13: ffff888056353360 R14: 0000000080005c80 R15: ffff88804a690940 [ 687.847244][T13183] FS: 00007f2a157cd6c0(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 687.929847][T13183] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 687.936447][T13183] CR2: 00007f4173142902 CR3: 0000000056678000 CR4: 00000000003526f0 [ 687.944648][T13183] Call Trace: [ 687.948044][T13183] [ 687.951001][T13183] ? __init_swait_queue_head+0xa9/0x150 [ 687.956665][T13183] usb_start_wait_urb+0x115/0x4f0 [ 687.961832][T13183] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 687.967607][T13183] usb_control_msg+0x232/0x3e0 [ 687.972389][T13183] dib0700_i2c_xfer+0xba7/0xf70 [ 687.977526][T13183] __i2c_transfer+0x79a/0x1f00 [ 687.982444][T13183] ? i2c_transfer+0xc8/0x2d0 [ 687.987191][T13183] i2c_transfer+0x1cc/0x2d0 [ 687.991842][T13183] i2cdev_ioctl_rdwr+0x460/0x740 [ 687.996928][T13183] i2cdev_ioctl+0x64b/0x820 [ 688.001649][T13183] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 688.007201][T13183] ? __fget_files+0x3a0/0x420 [ 688.011922][T13183] ? __fget_files+0x2a/0x420 [ 688.016723][T13183] ? bpf_lsm_file_ioctl+0x9/0x20 [ 688.021717][T13183] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 688.026766][T13183] __se_sys_ioctl+0xfc/0x170 [ 688.031497][T13183] do_syscall_64+0xec/0xf80 [ 688.036047][T13183] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.042331][T13183] ? trace_irq_disable+0x37/0x100 [ 688.047549][T13183] ? clear_bhb_loop+0x60/0xb0 [ 688.052264][T13183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.058288][T13183] RIP: 0033:0x7f2a1498f749 [ 688.062741][T13183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 688.082514][T13183] RSP: 002b:00007f2a157cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 688.091203][T13183] RAX: ffffffffffffffda RBX: 00007f2a14be5fa0 RCX: 00007f2a1498f749 [ 688.099417][T13183] RDX: 0000200000000240 RSI: 0000000000000707 RDI: 0000000000000007 [ 688.107551][T13183] RBP: 00007f2a14a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 688.115576][T13183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 688.123893][T13183] R13: 00007f2a14be6038 R14: 00007f2a14be5fa0 R15: 00007f2a14d0fa28 [ 688.132036][T13183] [ 688.135186][T13183] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 688.142564][T13183] CPU: 0 UID: 0 PID: 13183 Comm: syz.1.1933 Tainted: G L syzkaller #0 PREEMPT(full) [ 688.153989][T13183] Tainted: [L]=SOFTLOCKUP [ 688.158340][T13183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 688.168709][T13183] Call Trace: [ 688.172114][T13183] [ 688.175192][T13183] vpanic+0x1e0/0x670 [ 688.179693][T13183] panic+0xb9/0xc0 [ 688.183551][T13183] ? __pfx_panic+0x10/0x10 [ 688.188096][T13183] __warn+0x317/0x4b0 [ 688.192149][T13183] ? usb_submit_urb+0x105c/0x18d0 [ 688.197490][T13183] ? usb_submit_urb+0x105c/0x18d0 [ 688.202830][T13183] __report_bug+0x288/0x500 [ 688.207748][T13183] ? unwind_get_return_address+0x4d/0x90 [ 688.213765][T13183] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 688.220175][T13183] ? usb_submit_urb+0x105c/0x18d0 [ 688.225220][T13183] ? __pfx___report_bug+0x10/0x10 [ 688.230286][T13183] ? __pfx_stack_trace_save+0x10/0x10 [ 688.235790][T13183] report_bug_entry+0x19a/0x290 [ 688.240853][T13183] ? usb_submit_urb+0x111c/0x18d0 [ 688.246353][T13183] ? usb_submit_urb+0x1121/0x18d0 [ 688.251428][T13183] handle_bug+0xca/0x200 [ 688.255691][T13183] exc_invalid_op+0x1a/0x50 [ 688.260359][T13183] asm_exc_invalid_op+0x1a/0x20 [ 688.265324][T13183] RIP: 0010:usb_submit_urb+0x111c/0x18d0 [ 688.271071][T13183] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b7 f2 ff ff 89 e9 [ 688.291084][T13183] RSP: 0018:ffffc9000bbc7940 EFLAGS: 00010246 [ 688.297672][T13183] RAX: 0000000000000000 RBX: ffff88802959b600 RCX: 0000000080005c80 [ 688.305925][T13183] RDX: ffff88804a690940 RSI: ffffffff8c140d20 RDI: ffffffff8f8ee730 [ 688.314278][T13183] RBP: 1ffff1100ac6a66c R08: 00000000000000c0 R09: 0000000000000000 [ 688.322372][T13183] R10: ffffc9000bbc7a40 R11: fffff52001778f54 R12: ffff8880326ae100 [ 688.330394][T13183] R13: ffff888056353360 R14: 0000000080005c80 R15: ffff88804a690940 [ 688.338688][T13183] ? __init_swait_queue_head+0xa9/0x150 [ 688.344605][T13183] usb_start_wait_urb+0x115/0x4f0 [ 688.350127][T13183] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 688.355979][T13183] usb_control_msg+0x232/0x3e0 [ 688.360873][T13183] dib0700_i2c_xfer+0xba7/0xf70 [ 688.365772][T13183] __i2c_transfer+0x79a/0x1f00 [ 688.370575][T13183] ? i2c_transfer+0xc8/0x2d0 [ 688.375210][T13183] i2c_transfer+0x1cc/0x2d0 [ 688.379932][T13183] i2cdev_ioctl_rdwr+0x460/0x740 [ 688.385005][T13183] i2cdev_ioctl+0x64b/0x820 [ 688.389635][T13183] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 688.394776][T13183] ? __fget_files+0x3a0/0x420 [ 688.399569][T13183] ? __fget_files+0x2a/0x420 [ 688.404338][T13183] ? bpf_lsm_file_ioctl+0x9/0x20 [ 688.409386][T13183] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 688.414846][T13183] __se_sys_ioctl+0xfc/0x170 [ 688.419668][T13183] do_syscall_64+0xec/0xf80 [ 688.424199][T13183] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.430289][T13183] ? trace_irq_disable+0x37/0x100 [ 688.435329][T13183] ? clear_bhb_loop+0x60/0xb0 [ 688.440051][T13183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.446051][T13183] RIP: 0033:0x7f2a1498f749 [ 688.450526][T13183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 688.470340][T13183] RSP: 002b:00007f2a157cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 688.478989][T13183] RAX: ffffffffffffffda RBX: 00007f2a14be5fa0 RCX: 00007f2a1498f749 [ 688.487225][T13183] RDX: 0000200000000240 RSI: 0000000000000707 RDI: 0000000000000007 [ 688.495409][T13183] RBP: 00007f2a14a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 688.503876][T13183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 688.511972][T13183] R13: 00007f2a14be6038 R14: 00007f2a14be5fa0 R15: 00007f2a14d0fa28 [ 688.520082][T13183] [ 688.523747][T13183] Kernel Offset: disabled [ 688.528245][T13183] Rebooting in 86400 seconds..