last executing test programs: 5m35.199593699s ago: executing program 0 (id=403): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc8, 0xc8, 0xb, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0xf, 0x2}, {0x1, 0x5}, {0x10, 0x4}, {0x1}, {0x1, 0x3}, {0xe, 0x1}, {0xc}]}, @struct={0x8, 0xa, 0x0, 0x4, 0x0, 0x7, [{0xe, 0x5, 0x3}, {0x9, 0x4, 0xdef5}, {0xc, 0x4, 0x2}, {0x1, 0x2, 0x3}, {0xe, 0x2, 0x6}, {0x8, 0x1, 0x2}, {0x8, 0x4, 0xb2c7}, {0x3, 0x10, 0xff4}, {0x2, 0x5, 0x4}, {0x1, 0x0, 0x1}]}]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0x30, 0x2e, 0x0, 0x2e, 0x2e]}}, &(0x7f00000003c0)=""/114, 0xeb, 0x72, 0x1, 0x7}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0xfffffe75, 0x0, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1}, 0x50) r2 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r3, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7fffffff}]}) keyctl$join(0x1, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000080)={0x4, 0x2, 0x4, 0x9d, 0xc, 0x7}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="811100000000000014000390d2c76d006272696467655f736c6176655f30000008000400d400000008000a00", @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0xc884}, 0x4008015) 5m35.020368104s ago: executing program 0 (id=406): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50005008200000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000b0ff005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200002018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m34.815816813s ago: executing program 0 (id=407): r0 = getpid() r1 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x140000, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@allow_other}, {@default_permissions}, {@allow_other}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1000}}, {@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x8}}, {@max_read={'max_read', 0x3d, 0x9}}], [{@uid_eq={'uid', 0x3d, 0xee00}}]}}, 0x1, 0x0, &(0x7f0000000200)="556b99a68f7911fad8e428291e7eb35a557ab07031b44be8c0389e4d2b89ae630e5f63cb5f9a074380bb77018e92e25acda85585d49711730e1e0e02178ac9dc21dcd5eedba9547f7e6e00f0849dee7975ffc45088d0690a0e2c20a866ef250b9e1e5009203e56f221f74d62cb1613e02ed7efee8a40edabcd6a426a69241dd6ec919b752cc02e4790e288c47b77545a6127cb161a156b80d34776cbfce88041c1f37d1c1f598aeecfd77a7c55751ebc5865b5fa068cc1e36ba8ee9cd900b31cc14507f294c5c23cec7e8ac023205b0557b3362154933714516e7e48dd51ebb1b2285c59b65c7b2d7c1575") unlinkat(r1, &(0x7f0000000300)='./file0\x00', 0x0) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000003c0)=@o_path={&(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, 0x4000, r2}, 0x18) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000400), 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x521000, 0x6, 0x22}, 0x18) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000800)={0x2, 0xc, {r0}, {0x0}, 0x5, 0x4}) getresgid(&(0x7f0000000840)=0x0, &(0x7f0000000880)=0x0, &(0x7f00000008c0)) sendmmsg$unix(r2, &(0x7f0000000940)=[{{&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000540)="c3bf875d251925d5c7782c90cc99808ee38475b684b54d74ff11f9772d125fb6644b83368469e93abaa191d307570881ecbba4151b1dfea9eb8a377aacfbaf8224089f61eaad4df9c04ebb83639b793e86241dcd4d8c387e979cf9df9d8894b730434cce27db582f38d5725826cf2a22284e75d61338f60fcccd6668f965c1594b60c558a8", 0x85}, {&(0x7f0000000600)="67fc35e69de3059373e9ae07a76a325cbd938a0f386fc8c3484709109d8503219ce1f910fc96c71e37ee0b114fcfcf23b0ca08136ecc4e853bcb18bdf3ac6b724a79132d1a3fc8a88f62023ec9fea102edbb20e45a1db8", 0x57}, {&(0x7f0000000680)="2dd25f500542eb7cb50d1b56a7dae66cdd04718ab02e", 0x16}, {&(0x7f00000006c0)="5585685f81242dc3bffbe5d796c64d07df63639e9f69ece8a5dcd8", 0x1b}, {&(0x7f0000000700)="77e95d44178140c782d1a14033195cd462dd59123456e072db4c11c866c3b7e20f27666b19ca179ffbbdbca0e4f92085c0781324007a2df025f923ffd826c2f8849f4354cca5886ba7cc84bc7298d79c", 0x50}, {0xfffffffffffffffc}], 0x6, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {r0, r5, r6}}}], 0x20, 0x4080}}], 0x1, 0x4) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000980)={0x6, 0xf1, 0x9}) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f00000009c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000a00)={0x48, 0x2, r8}) ioctl$SNDCTL_TMR_TIMEBASE(r2, 0xc0045401, &(0x7f0000000a80)=0x173) write$cgroup_int(r2, &(0x7f0000000ac0)=0x6, 0x12) r9 = accept4$inet6(r2, &(0x7f0000000b00)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000b40)=0x1c, 0x800) sendmmsg$inet6(r9, &(0x7f0000002500)=[{{&(0x7f0000000b80)={0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000000bc0)="ed78831e3d24aeee3b25146bddd45b890ce15d51390ae697e89660d32c7cabdf0132b32980ce75762999fbcc54a29567b33180d3fcf9daf96dd8e2ef8e", 0x3d}], 0x1, &(0x7f0000000c40)=[@flowinfo={{0x14, 0x29, 0xb, 0x5}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @dstopts={{0x1078, 0x29, 0x37, {0x6, 0x20b, '\x00', [@generic={0xf, 0x49, "194d32fd7a8ddce791eb3adeeb7932f9ab02cfc7e0a3803bfb9e1d0911b85dd020b7019a8a549bc91f354adca719bf5a67384bc5e5c603c415514bc2116de8b5594d450a99937c02f6"}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x8fb2}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @generic={0x4, 0x1000, "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"}]}}}, @rthdrdstopts={{0x88, 0x29, 0x37, {0x16, 0xd, '\x00', [@calipso={0x7, 0x58, {0x0, 0x14, 0x6, 0x6, [0x100000001, 0x9, 0x8, 0x7, 0xfffffffffffffff9, 0x5, 0x2, 0x2, 0x0, 0x0]}}, @calipso={0x7, 0x10, {0x2, 0x2, 0x9, 0x650, [0x1ff]}}]}}}], 0x1130}}, {{&(0x7f0000001d80)={0xa, 0x4e23, 0x80, @rand_addr=' \x01\x00', 0x10000}, 0x1c, &(0x7f0000002100)=[{&(0x7f0000001dc0)="0be2430ba721af9769391361a99c6981b099f11d31ed1cfa6759c02de0a6c485c88e015e98de72e2d643dbbe7badc0c727ccd8944eff075d94309135ed3c71e5714bccd3d7e8b4cf9dae566f9474846ce0e8f86d4ad173f0a87417e2d0fe4b3f614ecb51ba1374582fbb87e515d35fbc72c0b30810145158ab7ca6021f1543b2aadd6d05f999dcff34b124644eb21abb12f95a370f38dc4399a732176f21f36abe", 0xa1}, {&(0x7f0000001e80)="3592acf3240e8c226514ecad8ef91dcd694a5a0c27ff0b81ca", 0x19}, {&(0x7f0000001ec0)="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", 0xfa}, {&(0x7f0000001fc0)="83628bf5b74f06fa1bb4a68459319d31f190bcaa9a8ea835f9bd49efd21de1116d822f11815ac283a9e3577862b0007bd8e058f6564b5a39a7a67158d548831f4da39708e70362f2301f0cbd188d94a0642bc55cd797007220a4e09189c9efbba20c389efe0159fcc1e7d9286ef6a50f1145ebea1fda60146947a138503701c043c829f8505b0d39903e0c4230fa7d25df19daf0fd1c596a1c1a5bcac6f24791379d0356d9f4c48d7fbc69c948f0c5446f5f8ecc30b3d261d849afa42f0d28916dc78214ddfe3de34b4b1066fd063cc35380c227dbe9c16937cc27ee2901ccadbb9fbfcd753e93f3847bb4", 0xeb}, {&(0x7f00000020c0)="9f660ca400f472c9b73e7b3d7b45dab6f10e10b33d365a4d80173bec2bfb1d48da364b3fd54ba8bf601a4b735f222b5b50b274a33a99189f874111f8", 0x3c}], 0x5, &(0x7f0000002180)=[@tclass={{0x14, 0x29, 0x43, 0xffff19c4}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x2}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @hoplimit={{0x14, 0x29, 0x34, 0x3ff}}, @dstopts_2292={{0x40, 0x29, 0x4, {0x29, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @jumbo={0xc2, 0x4, 0x1ff}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast2}]}}}], 0xa8}}, {{&(0x7f0000002240)={0xa, 0x4e23, 0x8, @private0, 0x8}, 0x1c, &(0x7f00000024c0)=[{&(0x7f0000002280)="3a75b391e5c1a14987746367d3af8fcc16aea6afd2724394da2d674863a7c593df3116a88dec6d209bb292b6dcd323656501a89c991774ad4a82a5de5a90a8ef9005c99903cf55a1dc278b37d919b6c8c40f7f71a8a42520f1d5c74fa986f8a690c54080a61d9fc7a53035a8eae10eb8f414b043f3df427d443fe39695e6850687c7ac5b8ec55e33c8958fdddb5f26ea515e0f72bc33dc94d1a64329bf12efcfad090b2c019da50a00f64da555227034583ad9bf0506bfa3b437a3f096d9c0b7ce31", 0xc2}, {&(0x7f0000002380)="ba3e93fe56d29b79d23714e825312e4549e330fa97f0e8e02caf8761f3c2a0", 0x1f}, {&(0x7f00000023c0)="49f0fd09cc625f89412fb469670d197f0954e60ad9735952b7970ae5a9aa79f4dd08e228715b73d50568acce88d969e0eeed1e7c4a6a35a2c0eb236bbe3d6713a7bfa0893fe0631ae537bfc2a0717ca70f2dd45090b836d0e54d3f2a17933e2786f2366dc4b8bba41136323e1ad1048f99690620dc92e7534607d152af6c26ca0539ccc5c56c02f014c1eb900773eeaed665a9860f9caf6f8d745eddf933b823b2dcd30b134a67475d50376bdc68b757ccfa4aa96cdc1943713662c50c79f8f62f1494ce1e13807b269bd5", 0xcb}], 0x3}}], 0x3, 0x20000004) ioctl$FE_SET_PROPERTY(r2, 0x40106f52, &(0x7f0000002700)={0x14, &(0x7f00000025c0)=[{0x32, '\x00', @st={0x4, [{0x0, @svalue=0x1}, {0x1, @uvalue=0x3}, {0x3, @svalue=0x200}, {0x1, @svalue=0xfffffffffffffff5}]}, 0x1}, {0x21, '\x00', @data=0x6, 0x9}, {0x3a, '\x00', @data=0x7, 0x7}, {0x32, '\x00', @st={0x4, [{0xa929b7407bda849a, @svalue=0x9}, {0x3, @svalue=0x1}, {0x0, @svalue=0x6}, {0x2, @uvalue=0x9}]}, 0x1000}]}) getsockopt$inet_mreqn(r2, 0x0, 0x7, &(0x7f0000002740)={@rand_addr, @remote, 0x0}, &(0x7f0000002780)=0xc) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f00000027c0)={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, r10}, 0xc) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000002800)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) fstat(r2, &(0x7f0000004d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r11, &(0x7f0000002840)="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", 0x2000, &(0x7f0000004fc0)={&(0x7f0000004840)={0x50, 0xffffffffffffffda, 0x76bc, {0x7, 0x2d, 0x6, 0x44000010, 0x8, 0x7, 0x2, 0x100, 0x0, 0x0, 0x10, 0x400}}, &(0x7f00000048c0)={0x18, 0xfffffffffffffffe, 0x100, {0x6}}, &(0x7f0000004900)={0x18, 0x0, 0x400, {0x3}}, &(0x7f0000004940)={0x18, 0x0, 0x2, {0x10000}}, &(0x7f0000004980)={0x18, 0x0, 0x3f, {0x9c}}, &(0x7f00000049c0)={0x28, 0x0, 0x5, {{0x4, 0xb, 0x0, r4}}}, &(0x7f0000004a00)={0x60, 0xffffffffffffffda, 0x5, {{0x9, 0x178, 0x9, 0x1, 0x8, 0x7, 0x2, 0x9}}}, &(0x7f0000004a80)={0x18, 0x0, 0x8001, {0x4}}, &(0x7f0000004ac0)={0x18, 0x0, 0x3, {'(:@-#[:\x00'}}, &(0x7f0000004b00)={0x20, 0x0, 0x10001, {0x0, 0x7}}, &(0x7f0000004b40)={0x78, 0x0, 0x1000, {0x337, 0x3, 0x0, {0x2, 0x5, 0x3, 0x4, 0x5, 0x5, 0x6, 0x2, 0x100, 0xbbba01e673e4a32d, 0xa82, r5, r7, 0x7f, 0x3}}}, &(0x7f0000004bc0)={0x90, 0x0, 0x1, {0x1, 0x0, 0x8acd, 0x7, 0x6, 0x75, {0x2, 0x5da, 0x1, 0x8000000000000001, 0x1, 0x80000001, 0x3, 0x69f1, 0x0, 0xc000, 0x101, r5, r7}}}, &(0x7f0000004c80)={0x30, 0x0, 0x1, [{0x2, 0xffff, 0x2, 0xfffffffa, '-%'}]}, &(0x7f0000004cc0)={0x10, 0xfffffffffffffff5, 0x1}, &(0x7f0000004d80)={0xa0, 0x0, 0x6, {{0x1, 0x0, 0x6, 0x7, 0x3, 0x868, {0x6, 0x2, 0xd523, 0x3, 0x8, 0x5, 0x3, 0x0, 0x4, 0xa000, 0x8, r5, r12, 0x47691029, 0x6}}, {0x0, 0x8}}}, &(0x7f0000004e40)={0x20, 0x0, 0xfffffffffffffffa, {0x1, 0x0, 0x9, 0x1}}, &(0x7f0000004e80)={0x130, 0xffffffffffffffda, 0xd, {0x3, 0x4, 0x0, '\x00', {0x200, 0xc, 0x4eb4, 0xdc, r5, r6, 0x6000, '\x00', 0x1, 0x9, 0x1, 0x40, {0xc, 0x5}, {0x0, 0x5}, {0x1, 0x2}, {0x2, 0x3}, 0x0, 0x7fff, 0xc, 0x9}}}}) write$sysctl(r2, &(0x7f0000005080)='2\x00', 0x2) write$sysctl(r11, &(0x7f00000050c0)='3\x00', 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000005100), r11) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r2, 0xc0106450, &(0x7f0000005140)={0x0, 0x1, 0x2}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r2, 0xc0106450, &(0x7f0000005180)={r13, 0x1, 0x1}) r14 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r14, 0x6, 0x21, &(0x7f00000051c0)="9d1cfc465092d283c148a3be2f8b1aa8", 0x10) 5m34.687233093s ago: executing program 0 (id=409): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x44, r5, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x80000008, 0x6, 0x0, 0x1f2e, 0x2, 0x3, 0x56}]}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000840)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) 5m34.396347571s ago: executing program 0 (id=412): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, 0x0, 0x5, 0x2) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) flistxattr(r1, &(0x7f00000000c0)=""/242, 0xf2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x1}, 0x6e) ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x20008090) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) removexattr(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_setup(0xd7, &(0x7f00000003c0)={0x0, 0xf83e, 0x80, 0x2000002, 0x361}, 0x0, 0x0, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) r8 = socket$kcm(0x2, 0x1, 0x84) socket$packet(0x11, 0x2, 0x300) (async) sendmsg$inet(r8, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1, 0x0, 0x33}, 0x4000080) (async) ppoll(&(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) (async) syz_usb_disconnect(r0) r9 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000000904004001030000000921010000012205"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) 5m34.123726628s ago: executing program 0 (id=413): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000007, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @sdr={0x584e4f53, 0xfffffffa}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @sdr={0x584e4f53, 0xfffffffa}}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r4 = epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername$inet(r2, &(0x7f0000000380), &(0x7f00000003c0)=0x10) (async) getpeername$inet(r2, &(0x7f0000000380), &(0x7f00000003c0)=0x10) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000018c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000060014000000020a010200000000000000000000000038000000140a01010000000000000000020000000900010073797a30000000000c00064000000000000000050c000640000000000000000070000000000a03000000000000000000020000005a00060082f9d3e9f1b2151fa27c66e3ce9e28e7e90b9e3384a089e394c3734e310bfbefe4a40e00e838e1f36186a2dbef89be0dd258dea2de0de5c6421d93672c2ea067e37d4119b06609bf82ae52aed8f58a3c1975f782d2530000200000000e0a01030000000000000000010000000900010073797a3000000000140000001100010000000000000000000000000a6576abf03c0ac77453200be36eda2ed13ed4916993e39a3806f105575fb0856b45d013752c6997f160e9544160d935e4b037ffc5576aa6cab3614c23169814ae8d3424e2a03dee8fd698e827d492af374c3947cc48907d8610607c59b7942abd33f50d71"], 0x104}, 0x1, 0x0, 0x0, 0x2000c080}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000240)={0x80000011}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xb, &(0x7f0000000000)=0xe, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000017c0)=ANY=[@ANYBLOB="70000000020603000000000000000000000000072c00078008000840000000990800174000003a950500140021000040000000060900020073796d06000000b319290d800800094000000000000000000000000005000400030000000500040003000000070004b306a42fd13c5fb3aa3f6cc1b15c05505a4082740ef451fa1d17f4ff8c03dd185eb0c469119d351a1d2db6f4c17aac92861d2eadea1c119683f77db9117cd1dbd1396a72a9e7c3bc7d190ecf333577826536ab1bdb5af482805548dc8610a715fbb2e3f7aad80725"], 0x70}, 0x1, 0x0, 0x0, 0x4004800}, 0x20004000) sendto$packet(r6, &(0x7f0000000400)="567dea4429f6226b31943b8afc2f41e6860ac416ffb443cd7342368c8a9b5488eb27f5ed11ee59ad23ea39263286fd9a50f9fb77cdb961fe57f7a6dc707cb32b8837090d3acd99eea4ea931e937ed90dda3d5e4cafce37943b56e6f093101ab762dfcf3ccb03be7df024cc398cb1595e856486931aa23245c6446cd8801cfb9d7e4d676ce76f070947d8d362189e2e38a8f9e5781c3b268c46b1c40fc0375ed68d65c5d310af111988b71c8aeb452c0aefe6288301a8003ceea5457bfb23f8", 0xbf, 0x2400c885, &(0x7f00000003c0)={0x11, 0x15, r7, 0x1, 0xe8, 0x6, @multicast}, 0x14) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f00000001c0), 0x8) socket$inet_tcp(0x2, 0x1, 0x0) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) (async) r9 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r9, 0x8108551b, &(0x7f0000000000)={0x0, 0x1, "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"}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) (async) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r8, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) (async) sendto$inet(r8, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r3, 0x806c4120, &(0x7f0000000300)) (async) ioctl$SNDRV_PCM_IOCTL_STATUS32(r3, 0x806c4120, &(0x7f0000000300)) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001700)="a274ca20f89520907eab2d7ba11c275d53bdfb0b7b1c6762c145f4e531ab696a9ea097ac9c1dd5ad7a319ab8607a3267fe21572f18d84b2a66e2d79c7832718f93db1959685cff0913980e2e36240029b24082de6cda0e5338bc05ff93a571ab800caaf2337b39f2a160beb2ef01f91cf25060621ed7152f718507f43721b3894b35e09880d056886d34987bcb55e99435c3e7b2017fec541381628bd01e70237931b15ccb63674ff9", 0xa9) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001700)="a274ca20f89520907eab2d7ba11c275d53bdfb0b7b1c6762c145f4e531ab696a9ea097ac9c1dd5ad7a319ab8607a3267fe21572f18d84b2a66e2d79c7832718f93db1959685cff0913980e2e36240029b24082de6cda0e5338bc05ff93a571ab800caaf2337b39f2a160beb2ef01f91cf25060621ed7152f718507f43721b3894b35e09880d056886d34987bcb55e99435c3e7b2017fec541381628bd01e70237931b15ccb63674ff9", 0xa9) sendmsg$nl_route(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001a40)=ANY=[@ANYRES8=r1, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r10, @ANYBLOB="0ca1db0b9de3d18f2ede2fb5d1319639e99c4809a441684e7e4afc3cf7a36ea7175df893d9e98cbc2639239ed0becc657ced5c06d53e40a0ffa53620ae42c27853867d3ca96879f8ac0ed329402b8d909bb7cf60ac7f06cc48066b03bf49ba09f45dcb0dfd9dbcb5cd2961d1a41833c5c8be23942174c5a22c55d4f01761e0ff6c21f313"], 0x38}, 0x1, 0xba01, 0x0, 0x4000050}, 0x20004000) recvfrom(r8, &(0x7f0000000640)=""/4103, 0x1007, 0x40010023, 0x0, 0x0) (async) recvfrom(r8, &(0x7f0000000640)=""/4103, 0x1007, 0x40010023, 0x0, 0x0) 5m19.127214202s ago: executing program 32 (id=413): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000007, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @sdr={0x584e4f53, 0xfffffffa}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @sdr={0x584e4f53, 0xfffffffa}}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r4 = epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername$inet(r2, &(0x7f0000000380), &(0x7f00000003c0)=0x10) (async) getpeername$inet(r2, &(0x7f0000000380), &(0x7f00000003c0)=0x10) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x2000c080}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000240)={0x80000011}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xb, &(0x7f0000000000)=0xe, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000017c0)=ANY=[@ANYBLOB="70000000020603000000000000000000000000072c00078008000840000000990800174000003a950500140021000040000000060900020073796d06000000b319290d800800094000000000000000000000000005000400030000000500040003000000070004b306a42fd13c5fb3aa3f6cc1b15c05505a4082740ef451fa1d17f4ff8c03dd185eb0c469119d351a1d2db6f4c17aac92861d2eadea1c119683f77db9117cd1dbd1396a72a9e7c3bc7d190ecf333577826536ab1bdb5af482805548dc8610a715fbb2e3f7aad80725"], 0x70}, 0x1, 0x0, 0x0, 0x4004800}, 0x20004000) sendto$packet(r6, &(0x7f0000000400)="567dea4429f6226b31943b8afc2f41e6860ac416ffb443cd7342368c8a9b5488eb27f5ed11ee59ad23ea39263286fd9a50f9fb77cdb961fe57f7a6dc707cb32b8837090d3acd99eea4ea931e937ed90dda3d5e4cafce37943b56e6f093101ab762dfcf3ccb03be7df024cc398cb1595e856486931aa23245c6446cd8801cfb9d7e4d676ce76f070947d8d362189e2e38a8f9e5781c3b268c46b1c40fc0375ed68d65c5d310af111988b71c8aeb452c0aefe6288301a8003ceea5457bfb23f8", 0xbf, 0x2400c885, &(0x7f00000003c0)={0x11, 0x15, r7, 0x1, 0xe8, 0x6, @multicast}, 0x14) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f00000001c0), 0x8) socket$inet_tcp(0x2, 0x1, 0x0) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) (async) r9 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r9, 0x8108551b, &(0x7f0000000000)={0x0, 0x1, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e008104df635e731a5bfcd942f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd4f6cfdfe756bc00d08e36655c00"}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) (async) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r8, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) (async) sendto$inet(r8, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r3, 0x806c4120, &(0x7f0000000300)) (async) ioctl$SNDRV_PCM_IOCTL_STATUS32(r3, 0x806c4120, &(0x7f0000000300)) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001700)="a274ca20f89520907eab2d7ba11c275d53bdfb0b7b1c6762c145f4e531ab696a9ea097ac9c1dd5ad7a319ab8607a3267fe21572f18d84b2a66e2d79c7832718f93db1959685cff0913980e2e36240029b24082de6cda0e5338bc05ff93a571ab800caaf2337b39f2a160beb2ef01f91cf25060621ed7152f718507f43721b3894b35e09880d056886d34987bcb55e99435c3e7b2017fec541381628bd01e70237931b15ccb63674ff9", 0xa9) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001700)="a274ca20f89520907eab2d7ba11c275d53bdfb0b7b1c6762c145f4e531ab696a9ea097ac9c1dd5ad7a319ab8607a3267fe21572f18d84b2a66e2d79c7832718f93db1959685cff0913980e2e36240029b24082de6cda0e5338bc05ff93a571ab800caaf2337b39f2a160beb2ef01f91cf25060621ed7152f718507f43721b3894b35e09880d056886d34987bcb55e99435c3e7b2017fec541381628bd01e70237931b15ccb63674ff9", 0xa9) sendmsg$nl_route(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001a40)=ANY=[@ANYRES8=r1, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r10, @ANYBLOB="0ca1db0b9de3d18f2ede2fb5d1319639e99c4809a441684e7e4afc3cf7a36ea7175df893d9e98cbc2639239ed0becc657ced5c06d53e40a0ffa53620ae42c27853867d3ca96879f8ac0ed329402b8d909bb7cf60ac7f06cc48066b03bf49ba09f45dcb0dfd9dbcb5cd2961d1a41833c5c8be23942174c5a22c55d4f01761e0ff6c21f313"], 0x38}, 0x1, 0xba01, 0x0, 0x4000050}, 0x20004000) recvfrom(r8, &(0x7f0000000640)=""/4103, 0x1007, 0x40010023, 0x0, 0x0) (async) recvfrom(r8, &(0x7f0000000640)=""/4103, 0x1007, 0x40010023, 0x0, 0x0) 2m31.119717158s ago: executing program 3 (id=926): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000780), 0x2000000000000002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac000600", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) 2m30.784751393s ago: executing program 3 (id=930): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002e00090027bd7000feffffff0400000004000e0004001d00cc0ef8eab2e946f1d515fc2df229e60d1cc4ca69185e2d1a494a70409168f437e68341a9659f2f99a9bbe731e0a978898dea4ecdc2092b5d6cf781498b3255aebb71310a16d817b69b3435b049a7b9406f26fd92d5d99543d923f0c5946bad5163c1d3a716fb11680c484c3cc0df2370f198101a26c8a09c9eaa864761f2b9e64b1b1f01726ef1dfae15f193f7ec5cfe57619a0fd537c552ab9d2e668669dcab3d068eeb4a3025f04fb80ba1f1c79195da6fc2"], 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x1) (async) unshare(0x60000600) (async) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x5, 0x24, &(0x7f00000014c0)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000740)={0x1c, &(0x7f0000000200)={0x0, 0xf, 0x1, "ff"}, 0x0, 0x0}) (async) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast1, @empty}, &(0x7f00000000c0)=0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r5) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=ANY=[@ANYBLOB="4c060000", @ANYRES16=r6, @ANYBLOB="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"], 0x64c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) r7 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) (async) writev(r7, &(0x7f0000000200), 0x20) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e70405000100070000003069"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 2m29.266151214s ago: executing program 3 (id=934): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x1}, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r5, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x82}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000"], 0x18}, 0x24004800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = socket$kcm(0x11, 0x2, 0x300) recvmsg$kcm(r8, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@multicast2}, {@private=0xa0100ff, 0x1}]}, @ssrr={0x89, 0xb, 0xce, [@local, @remote]}, @lsrr={0x83, 0x3, 0x1}]}}, {{0x4e20, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x3}}}}}}, 0x0) r11 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r11, 0xc05c6104, &(0x7f0000000340)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x200000, 0x9, "00000000020000000900", "00004702", "03000800", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff"]}) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r11, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x7, 0x0, 0x4, 0x1000002, "550000000100", "5922b1fa", "0725eade", '\'q6O', ["aabe8459c62224475793e8a7", "00000000000000deff00", "fa0700f22b42a3023be516d1", "000000000001001b00800001"]}) r12 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x13, r12, 0x2000) getsockopt$IP_SET_OP_GET_BYINDEX(r2, 0x1, 0x53, &(0x7f0000000000)={0x7, 0x7, 0x3}, &(0x7f0000000040)=0x28) ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 2m25.641309822s ago: executing program 3 (id=948): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="b8010000100001002cbc7000000000002b80c0c91e9877c892bc0e0cf70280eefc010000000000000000e2ffffff000100000000000000000000ffff7f000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1b8}}, 0x44050) 2m25.395659088s ago: executing program 3 (id=949): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50005008200000018120000", @ANYRES32=r0, @ANYBLOB="000000ffb0000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m24.755778045s ago: executing program 3 (id=951): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001080), 0x1a3000, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffff800, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0x0, "810000cc2b05e300000000fa25ffff00ffffff"}) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000900)={0x1fa, 0x9, &(0x7f0000000500)}) (async) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000900)={0x1fa, 0x9, &(0x7f0000000500)}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x11, r2, 0xd0b05000) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000020303000000000005000000000000000800010001", @ANYRESHEX=r1], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xd8, 0x1403, 0x300, 0x70bd2d, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dvmrp1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'nicvf0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_virt_wifi\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'caif0\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40800}, 0x20000045) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4) (async) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x142000) setgroups(0x8, &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) (async) setgroups(0x8, &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf) r7 = socket(0xf, 0x2, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000200), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0x0, 0xffff, 0x52424752, 0x0, 0x0, 0x4, 0xb}}) syz_io_uring_setup(0x231e, &(0x7f0000000c40)={0x0, 0x9d59, 0x0, 0x1, 0x88}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000040)) (async) r9 = syz_io_uring_setup(0x231e, &(0x7f0000000c40)={0x0, 0x9d59, 0x0, 0x1, 0x88}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_BUFFERS(r9, 0x8, 0x2, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r9, 0x18, &(0x7f00000002c0)={0x80000001, r3, 0x31, {0x10001, 0x7}, 0xc}, 0x1) write(r7, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) (async) write(r7, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 2m9.53704237s ago: executing program 33 (id=951): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001080), 0x1a3000, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffff800, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0x0, "810000cc2b05e300000000fa25ffff00ffffff"}) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000900)={0x1fa, 0x9, &(0x7f0000000500)}) (async) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000900)={0x1fa, 0x9, &(0x7f0000000500)}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x11, r2, 0xd0b05000) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000020303000000000005000000000000000800010001", @ANYRESHEX=r1], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xd8, 0x1403, 0x300, 0x70bd2d, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dvmrp1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'nicvf0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_virt_wifi\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'caif0\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40800}, 0x20000045) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4) (async) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x142000) setgroups(0x8, &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) (async) setgroups(0x8, &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf) r7 = socket(0xf, 0x2, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000200), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0x0, 0xffff, 0x52424752, 0x0, 0x0, 0x4, 0xb}}) syz_io_uring_setup(0x231e, &(0x7f0000000c40)={0x0, 0x9d59, 0x0, 0x1, 0x88}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000040)) (async) r9 = syz_io_uring_setup(0x231e, &(0x7f0000000c40)={0x0, 0x9d59, 0x0, 0x1, 0x88}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_BUFFERS(r9, 0x8, 0x2, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r9, 0x18, &(0x7f00000002c0)={0x80000001, r3, 0x31, {0x10001, 0x7}, 0xc}, 0x1) write(r7, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) (async) write(r7, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 1m45.808107857s ago: executing program 4 (id=1086): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x41, 0x1ff) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="f78dffffffffffffff79ff5c55c32d6d", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, &(0x7f0000000040)={0x4e5, {0x0, 0x9, 0xf829, 0x1, 0x1}}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x23) 1m44.638134177s ago: executing program 4 (id=1088): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380100002100010000000000feffffff00000000000000000000000000000000fe80000000000000000000000000001dfffc0000000100000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0200000000000000e8001100fe800000000000000000000000000011e0000002000000000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000bb3c001100000000000a000a00fe80"], 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m44.058994789s ago: executing program 4 (id=1091): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='-^@\x95/\x00', &(0x7f0000000180)='\x00', 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x107) r2 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x870bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6d8, 0x8, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x60, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xfff3}, {0x0, 0xfff1}, {0x1, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x2, 0xe, 0x2fd, 0x80, 0x8001}, {0xb4, 0x1, 0xb5d1, 0x5, 0x3, 0x8}, 0xff, 0x0, 0x1226}}]}}, @TCA_RATE={0x6, 0x5, {0xfe, 0x9}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40098}, 0x48c0) (async) write$dsp(r1, &(0x7f0000000200)='m', 0x1) (async) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) (async) r5 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r5, &(0x7f0000000200)="a3", 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x5, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_REWIND(r5, 0x40084146, &(0x7f0000000140)=0xfff) 1m42.899541245s ago: executing program 4 (id=1097): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) syz_emit_ethernet(0xfc1, &(0x7f0000001200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xa9365e32e8a9ace6}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfb3, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x2, 0x0, 0x1}, "228446654c44e4675940c7f87329cd5dfbbf24ce36025c42ad2c3e54f493272c47a33824832d270488223b6ceabd527ba98447a4a2274cdcfc02839d682da033a7562906830332c33fa7fcee0e5753dce092b25f12d9d5e89822738a5e3107efe3053ccd6006f675bc2b309afcb4b6e5dadf4ea8cca9a26f0a1e252bf069bb49a7aa7d34d414126b2c99c86d0810eedba03296cf0e053d36374519fcc29e24f6aaef00e360d7ace6313696aeaf3cf50fc14d67874c0b7dc7f66eaaa1e5952dc6abbb7faf14ceae3d77bb95e54f90877a68b1f95c853da77d94700812dc66acf5b1dd5197b34303f2801dfa190527eec7b712845b1ce6f0bc9dcb21d6593902fe384bf441ba90985786f2a87aa9b0a37f728a390b42b3aa79db7229d5e1f955e4ecaed016577c3860377625b1940489380699ad3442ad026c9d1d3bce33406b2a288b3385678d95f40338cfc2797333801f098446c684f894801dae71060063d798010e4ed160aa4489ab9f7b5ad311e346e02a93182196767118c3e1d3993b23e7362886fbf31ddac0f5eae3df9874ba0b1a3d5fb35f3dca917c680167f96f8182056d4c43cf888757f402d038379c64716ed1b1f9ac5d0b949901f3e500aefe04e599cbd38f0548686bf38990722b37bd2ae68410624728b9b0d58d710d3bc6d9996bad92c94c3a823700ed12baf5d34ffabb41593c974cfdde60f1c51910869e09ec1ab321c339e351727f0ffa51b30b5297e0d5a968ada712004902677d3d684c30d7a02eee8d8ae187980ba70a3e50c9fe9229b3f8a964f924b9a5a3fb67f1f79562c8f74982f3f1982f2953b55d44978c560aaef3e239e89f2802406ba6a9ed668005ea522f96dd5f5c9e4454586abf2e56f10a842e71b1af279d9540fca0995cd418ddccf592c1155d8351b024522fdacaae48d019dd439252117fcb1b113420c162e5227c728e6b7658bad64f1334647f2619b721a9cb7f61013f277f6aae3b32b8f0221936c534fea89ce689de528d667575ff10678d96e3f34cbbd2e13b5ebb9822cd73c2811dde9e60e9dcf9706979b3d0ff84809c34c38c36b1a0c24fde1c190622c883938d102eba28d2d30691382630e8baa88ef258143dc1fd6f8a01abae84e6e0683df84fda8ae2e5ef62a8b61547ac82fe93f364feb89dbb1ba261b2d62da578c75f1229e0946ab37a7652b249b8b4e74d15c7f1692c51eda938d847e6a20579d4e26249d9a6c0de31e3f9a933af642da1c0b24155f32841063bd686d32a6abba49762432c27cd46954ece9e811a496913cd90489def7bd8b086b44258433dd351ac050cc545ffeb25967ae7455b7aa39a20ff7177bc926e51228335dfd05d41cc4946d93413236e60944153544f669332faa60797e4bfcebf06d889599250bf065170757b6706c6ed1f9a111ad6ed5ff02b8384d80de16ce266bcad483c585679836c6cfa299a230e9401d7c97611b76185877210dcb82cb86dd164c82c7850259b1883cb40747e27560e120ef6ada0903ecb6a5d1651bb7f5a103b7f61822fb9fe80061ef48becb6d7e3bbef6d7aa2562751d742f11a09bc669006d30cf19738c094d7ecbae05c3f4018adf04f4fad8cd52c64b056e4292a62ba99d7213dee0f2958bee85f32790a05ce0039cbd4cfb5c95008e7278fbe3d2bb19796ca9c3d5aabfcba9b524dc06f3ddcbff14b2676bbf0d5084d31eba9d98c167fd2988a1180fa7d9db6cb15fc2e7f78743f64fecff27c70e46e740fc407bc6959302044f95547572a58480912fd9ad087d12aab2d0399a482f4478318fb0ee0fdf73d535fed5ca2db3fae5df4a046e6e2c6005e0121f8e46eac22a804d149c7bac7eb90477c95832f0ef666967e45d346dac73ce0debb7f0bcf871356b98511a734dc6a6f21ad1d69ca46f24a2be9d4c40b7ee603cbeec10d3cd0944e3c94f4fdc11235fd36e3387f916bc3ee0f4d9fb636bcc699262a19a914adb74fe640ecc731d730b8ea842406ef923cd48bd318d0e184a33b81038d5776851b4e1b6cb8a42edf449c2ec7f2319d51db0a3490ddfa4f4ab1ea52229d65e6ed40f6f94885c361f6c4fb581e39aeaf0d0f1d8cd2354a2f36c62cd1333bd290df0c1b3804054c9faa20a36654c09c0b3bbba512d65aea737a8a58c6e690f519d420b998b2dd28cb0efdfcda09a56ac7f433a8ae75f6265871e0ed80edce1998d11cae16247cc6b324412b4a68d11981d0900899129c1b092e7fc241239d1b14cdc5269d57cffa72d54e017554972b7d223b5a9aa532f576abb2d4b1e8961d0063d55f86385bbc36d7f4a2e33e6cbd74d2c99782be56485c4a987b5be0b268e2af0deb353eade5e9892cdfa5f552fbbedf77c0f7b5ee821c404ebb2f9c0e973163b35d390209ac4b0272d225ff28a712a8829bc47f9e3522b75a9871c596b10741e2eaaae7f98a20c649803712f67512b1a451d08583ea0594363a7f476b0d6b6c25d5552af12432c358172106053f187379d56cb75da7c49bfaf9d0c46df0b510b7e403c3a02b48669490f77471ce74f185b9edaf11f29bb39e0c34c4f5c8bee38261e8fd8a84e4adce4b2d8f98bc2ab2f334a7bb4c3f8e909497c4026ccd3c4e27d50a994ef6631ddfc2c06ddea05684578bdcd6d12642f5ed490f56518e68d08229b73c8071a3d3a0531b98cb5d1d5f65f7586ba608dfdfdcc5ebabf833a8041a462d06ee643fc2e116c12f278c301f90eba7b4497c6cfcdfe664b79c87d7284e996e141eb9c80f8b7aa50360191618667e4cfb0f467ddf51ae6619fce9ba48a5b87ffcff30a0e6a669e6117bcd6dcddb0814c4900e37d81630c024da284d43698fd5f48b727c4168c20d97174c910fa7a7d9e38168aa4e117384d9ab331e5c0fa79c5fe9faf99fa52f89aebfbd3b67fb0a07a0298718895d8ed97c38d3c539ecded8275ec100abd02bde690e24ff840f549423d01b64f1c9065033db38664b565a896858587b4935a76e1fede047c6a6eebb9a8f67ca83d678759e96aaaf548031948141991a759e9cbf067caa0049be031685561942c081b777985e7e815f8aaf5f2a8527d86fe876d888c6026228c75c6aca21023204e97e6e905c00b6b762c23ad8aebc52bbfd553afce21aaa1383e93ea10995657be33d623b21617ceb78edb6a7b8451e718135ecd2d770bc84df2876d5455b7a3861024a98795d7d7ab91046c2a9799764b7bc25131f9807c5036044c477a7b3cafc975e1b2f49b0446de1a9e390cd6b1c203672ac81bddba0f7d3273b950bb2533717f4205fc6ff1d51a5f1002a4a4e620994a0cff24b84698abc635b11635536e550734a767a91245a657e864803dfbc09ea0d5572f3abdf20c211e60f1cf47642066cdb10a2f0ffabaab15cc6d7ce5f14cdede66c0b9b350e6ee1a674dc4cb981d260b4ce3b8d82aaa600a1093bc6100caf46105489317493316bac6a13b86c07ad794555025189fdd1f5b8c0841f12c7aaec4d31b3840e433f990bfff1b140050dac8b8a4beb2d3d3a26bf12ad6905cfffd52d983ec0e1e2d1585daf9725fa376de0e5067f75d6ca0d2e653a841e5b4f23317125a97d0e6560c58f3f1676774a1c73c29bf7c0565f7275637e3fb63e44a29abf34456216c3b9dcb9290dacbdca87506f963b06815976d0266b36f259bd1d2870eecc94da256669810e62226492cab97af83f8eeef860b1eecd8da4bdf8f2e78a97088a39cb344900eef251f0308dc4b889914fbb87bd22fae108bc9aa6ccb42b984b09ec09b24adbe4de602beded4925ba32448713e6953f6774881de4603c6fd9cdc09dd73fcad1bd6d2c90175ce32248bbd487cf1c9ac304e65dee1475cc66259cc9f877b96c841f8b08f68a3c4883f7e1070540d7c1daa5196650dcc41329368b94aa3053bf7cd9556debbd479734ac1a9e4a9142fbdd8588060d7010f5a7e768a73c3234d84f676c8908dabeb38d71db61dfd0a039744c91d173cd851855dc450b433f9e137ef9e3bb9a7ba7ddbb20b130db03796195fe477e2ef2b75928df52bfe5a9d04c1582e56e535b08b6a1ce6c474deb6c2813fba6c7d921b7ddd813ff05924e3d2528968158a155570d16d4474cf71a7417d9cd5a0e7226a33a46766431478faff8b706935cf4b19aed13f297695b91fab27525324069c08ebd3c713e9bce447641a6a2bdab6d6e57abb3ea6af21a0355c512d49c2a367b24b25615f49bf54ae103a9e0f85ca0f58050dd09169b74a22916325ceeeb1cc37823b58e93161673227d35b7f2d2e8223d79e264c30d3f5031f5c8b8a066799a0358ecbdde8f327cfdee65f13df40dbaea554aaa39f2a50e28ed98d4867f51b2c60ce541f6eaa41f69ac3865fed2d7817911a3a1c873487d665e262c62e98b9a50d576fae19313ac5cd7102c2442b69bd29c60a754298af3d8358699a141be768d79db4b4b7aadaeb0fc6729711d12f5947979d0d3566404c4a1a3684dbf9d43f016425c375e10b1f72d41e67a17d9f97712d0827ce68abe5fd663edf8ec1a12d90adce086728fc1fb7cc1d84897d3337909b57bff2c942ef6650f34477aa46056e242bb74a3bd4e4c55b404268c5bc43fdd3be765b023b26cdce4b29d92026ca9abe9291302a526ed05fa11bd19d90a0d9edde7d21b29fc0861e5aa3f0fb7485fad52b02461e57f1b02b236e4307ed67e25a1a892655e4e16c0f34b4e2c098387507ae773316a5e7aad0d24dd7c0a8efb4a04c648fb2b7ce0435152cb4eaf9b94a2472e3672a39b3ce3377c994da7d231848190992c2456a73a5c983331b3c6917a84c94f915cbfcb289cf323a91c7d2a1aebb7ad2b4b4de72548f9fae5eb970eea56bfdb17960317439a8724e83b4421ac37f38d12628a128c2c8965a80990539ff2224262905a0a7558495c4c4822c87bd94927d45dfbe90e77679f22b88a11521cb580917bd2541ffc908de8cffb6ecf018a086cbe326625230f1398b3fefe86549f18ad40d2aa24e2770e91449d5abc9e80926e94a0d8622b2d5226da67c7490f1c83a160a03eaf04a255ad7e0ef31297bda23f643a442ed74f611baba288d43b964487af3f51c0a1eca7ee2189d3645a9083e7d49374ac09fb0ff94082b2b0d897dd5f6e4df916fa4325b370ec1477070b3c75c3d491059bd7e213e8aa2a1e42601fcba822440c2c998d40ec9d1bdc24bdbbf5a084ac64fc2372745ce3890f5ce1a2524ab4f9208a46cbd26664a8b18b1f322394fc613e6ffd71af828b1997a61886a0bebf6123b951cb1b44dc2db347474ccc56688f900ffa8b1bc3d59ba4c724c4d4820ef75138e985b1174c048b23ef0be5953f74f78849502a2cbf12b0c9eee8181eb660a70c9d26ec912b10cf08d086090000000000000028a41da8379d24f3212f8f1c9a3a73c4255a54717cc50e4818d056054de44c1cf90dd4f036cd0b61608eb090f933fedcbcdfeb80c3bba146673a1c1b36723e7eaa5bca35bc8e6d92280dc1986fbec715e9044e208f98abb2065b77afdec03a53dcfccf9967272b6c21f4dfd7443c800761ea66d0cbc7d5c57e1abfe237577ac697c473ee95c398ef25531a32b989d9a07c03572d8dd6a4dccdce2af84a7255947b6dfa07f0dfc191d5bfd1"}}}}}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000080)={0x92}, 0x0) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, 0x0) 1m27.364422925s ago: executing program 34 (id=1097): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) syz_emit_ethernet(0xfc1, &(0x7f0000001200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xa9365e32e8a9ace6}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfb3, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x2, 0x0, 0x1}, "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"}}}}}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000080)={0x92}, 0x0) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, 0x0) 9.771897945s ago: executing program 7 (id=1446): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000cb6fcf20d813200031f7000000010902120001800000000904"], 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000)="c3ec4ad12136a37aa5b980226e9825449df160d2", 0x14, r1}, 0x68) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="f78d", 0x2}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x23) 8.272093539s ago: executing program 7 (id=1449): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7}, 0x16) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x3c1, 0x3, 0x570, 0x0, 0x8, 0x7f02ae, 0x348, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x320, 0x348, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r1}}, @common=@hbh={{0x48}, {0xd5b8, 0x7, 0x1, [0x5, 0xd48, 0x0, 0x1, 0x0, 0x9, 0x1, 0xf001, 0x98, 0x3, 0x7, 0xff, 0x8, 0x0, 0xc, 0x401], 0xd}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@remote, @private2, [], [], 'veth0_to_team\x00', 'veth0_macvtap\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00', 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x17, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) set_mempolicy(0x3, &(0x7f0000000040)=0x6c189bb5, 0x4) (async) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) (async) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (async) socket(0x2a, 0x80001, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async) recvmmsg(r2, &(0x7f0000006900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000002f80)=""/4093, 0xffd}, {&(0x7f00000013c0)=""/232, 0xe8}, {&(0x7f0000001700)=""/158, 0x9e}], 0x3}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001b80)=""/130, 0x82}, {&(0x7f0000001e40)=""/4105, 0x1009}, {&(0x7f0000001840)=""/165, 0xa5}, {&(0x7f0000001980)=""/155, 0x9b}, {&(0x7f0000002e80)=""/251, 0xfb}, {&(0x7f0000001d40)=""/249, 0xf9}, {&(0x7f0000000040)=""/107, 0x6b}, {&(0x7f0000001900)=""/94, 0x5e}, {&(0x7f0000001a80)=""/85, 0x55}], 0x9}, 0x81}], 0x4, 0x40012032, 0x0) 8.103408784s ago: executing program 7 (id=1450): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) (async, rerun: 64) syz_usb_connect$cdc_ecm(0x0, 0x66, &(0x7f0000000100)={{0x12, 0x1, 0x100, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x54, 0x1, 0x1, 0x78, 0x60, 0x7, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0x3, {{0x8, 0x24, 0x6, 0x0, 0x0, "58c9d0"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x23, 0x2, 0x90}, [@network_terminal={0x7, 0x24, 0xa, 0xc, 0xf9, 0x1, 0xf7}, @ncm={0x6, 0x24, 0x1a, 0x9, 0x20}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x30, 0xa}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0xf, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x3a, 0x4, 0x5a}}}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x0, 0x40, 0x2, 0x9, 0xff, 0xb0}, 0xb5, &(0x7f00000002c0)=ANY=[@ANYBLOB="050fb500060b100104620017040600fd0710020804f359071002021103008d10012dfe12da52b1d685ceb1c314aba8a0e71d6a93885304a063cd4e4f41777088335275efb34bf8b2628e639edb477b56683cfed9bb8949d15802de9e8ac0e5da05a9a701264fa42e8da8cb01d7ef80a8fe33f53890b49a5fa7d025259b2b1675108c61421aa2bdae7ece4ea20502e98131239dc9185933dfc556696103ea78ff88c84ba1bb4c6e48ae041307100200104fd003100b"], 0x7, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xf4ff}}, {0xad, &(0x7f00000003c0)=@string={0xad, 0x3, "8a9b9cca60b9dd0b4ea2d14dc17bcc7cd2c5fb8fb7babb98a4c38926241cf0450347869e0861f37e859f4d2906b638041d064566fa04b6e8491df66de0b5f41ea27da14ddbc0b6466717b281003563c33865d48dc6266086bf68441bb2430f5fbfceb4fdfce37e7b76cdf081859b9238e9705e459306929fd0d6abfd93a3a870a54b0945c1c6949caec0ab5f2913eddeb2337f23f903ef57eda6add7e964704f57886437765aef206c2745"}}, {0xaa, &(0x7f0000000480)=@string={0xaa, 0x3, "da45afd47f3daeb1e83d64ee68bbfe77f4990aeaf54b37d85415e37feabb87872ee2a5f358f51c6747dca3d428ec55c300afb739f3415bc0d40b3f46fb44aff36cb9b7e8985ab87ca6cc07075b69d298f8f72bd79afcab54c89178ff523a0d81a4bb4bb284c5007e7e8a06ebf7f5d103366a08e37a9d855ac62f810371017ec28967ad5e0d642e50fb626d71d913019d7097709707c91e9f68295f78f30d6dd07f29cd6a853e8669"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x414}}, {0x4a, &(0x7f0000000200)=@string={0x4a, 0x3, "5bc8dcec3788e32671fdc6cae21a2465b9f9e471c5977ef319239efdde41a871e806bcccd86034db70dee413eec85304efb71244b786ae3fa5f3971e150a8e8a9be4c3e2ac67984d"}}, {0x1e, &(0x7f00000005c0)=@string={0x1e, 0x3, "a6989bf605046c461b33fb8e2686a6af2516c40b7e486603541ee1c0"}}, {0xf7, &(0x7f00000009c0)=ANY=[@ANYBLOB="f70340f844c41aec48ac206596cc3dab64b5c602c418368f4f4ac9004f0991508f266f82947e9de74e84867711c90bc5a63bd9093e4ca59732f8b0425cd3414e14b68bb430df2c87ab460ff99e4144ea3ae279825b3237deef6ae17eafe13eeebf4aaa425ee8d230c8c557f2a0aff0794cf4182476f22da2877f48a885586ef23cb95ad397e01a0455238eb3c85915caddf8df44d5f467eee16dd08cfeb6aa9ec70cce09ca42e6379e8264fae8342dcb0525f9b916d57ab30a4b22b4f9150db07690d7e34ee317986c1af86c1af42d24634ad50b5c6042a83c63c03744dfcacd33f8a5b5cacdbcb8e64b82a40c46fd4e1c073750ef27a27b4482666d48bb19e5766bcb0f9f7f20ae39e3bc69e9fafb264d13a5c31637c73728dc6ef423d88f27b09050b8d34222c5a4dd5db60382835b9044829397bd5ea4d0858e07903d4348ef721225c0b41f57d84fd12d27fedd5588d3b48cd1bf32ddf2abe641a3964810e9116f8edb829e392c946d2294a6cf3829b82de1ce124ffe74e2b26f4eba29140d70b716cad58bdc527158bcb10ae74440bbe7aa1c6e804338aaebfa87e0d948113e2be691ee1db1d0cd870000000000000000000000000085a2441ae0d1b0095cca59695b4d3551a5eebfb3b7cd79f224e2c95f114757387a40992b40285a67538ebed437ce3fbe37a9d46e602bc7a08bd2a06fb36e28307ce1f3fddddfc2e20315d4f46f17732e1c0a62e63753803aacb69eb84443a7ae"]}]}) (async, rerun: 64) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f00000006c0), 0x80040, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002480)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000003d00)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00']) (async, rerun: 64) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t'], 0x24}, 0x1, 0x5502000000000000}, 0x0) (async) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0xe, 0x2000) (async) r5 = socket$tipc(0x1e, 0x5, 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000680)={0xc, 0x7, {0xffffffffffffffff}, {0xee01}, 0x1}) quotactl$Q_GETQUOTA(0x1, &(0x7f0000000640)=@nbd={'/dev/nbd', 0x0}, r6, &(0x7f0000000800)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0x12, 0x60d, 0x1d8, 0x202, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xff], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x74, 0x2}}, @common=@icmp6={{0x28}, {0xd, "ea9c", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x5, 0x8001, 0xf53, 'syz0\x00', 'syz1\x00', {0xffffffffffffff7f}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003400)=@base={0x1c, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x48) getpeername$tipc(r5, 0x0, 0x0) (async, rerun: 64) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f00000001c0)={0x3, 0x14, 0x23, 0x1, "a09fc910bb060bdc0d40cfcd10bf99f7a0f281ca7cbeb8216bef5c543cf861aa"}) (rerun: 64) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580), 0x80000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r8, 0xc0189378, &(0x7f0000000600)={{0x1, 0x1, 0x18, r4, {r2}}, './file0\x00'}) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000880), &(0x7f00000008c0)=0x30) 7.801985788s ago: executing program 1 (id=1451): syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000010c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x24, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d0001000060000904008002030000000921060400012205000905810320000908070905020340"], 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_ep_read(r1, 0x2, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x181000, 0x0) (async) syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000380), &(0x7f00000000c0), &(0x7f0000000000)) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_usb_ep_write(r1, 0x81, 0x10, &(0x7f0000000080)="116b41319ef13386d7fd40ac5cf9181c") (async) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r4 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000001040), 0x80200) futex(&(0x7f0000000580), 0x189, 0x0, &(0x7f0000000600)={0x77359400}, 0x0, 0x2) (async) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r7, 0x8) (async) landlock_restrict_self(r7, 0xc) write$UHID_INPUT(r6, &(0x7f0000000000)={0x9, {"a2e3ad214fc752f91b5d090932f70e0dd038e7ff7fc6e5539b324c078b089b3434076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b353b0d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 7.696092867s ago: executing program 7 (id=1453): r0 = syz_open_dev$cec(&(0x7f0000000600), 0x0, 0x80000) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f00000082c0)=0xf1) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYRES32=r0], 0x0) r2 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) unlinkat(r3, &(0x7f00000000c0)='./bus\x00', 0x200) syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x56, &(0x7f0000000400)={0x5, 0xf, 0x56, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x1, 0x7, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0x89, 0xff, 0x7, 0x5, 0xd5}, @generic={0x3c, 0x10, 0x7, "914d2af4a9f829d1edefff0508a64d5207caae6dc1f883d8cb801d076f394f009a50443b1fe9b9d5cad1d2b441236f5155df2ed496921926a0"}]}}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 7.239555304s ago: executing program 6 (id=1456): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) listen(0xffffffffffffffff, 0x4000) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000c80)=@vmx={0xa, 0x0, 0x2080, {0xeeee0000, 0xeeee0000, {0x3}, 0x0, 0x2}, {"1825798aaa9126869efb01ec2a476d0f811d4106ee6e5e406358d0c9fa20f4bbd45710086971c7b8914605caf4ed7452abe0ffa85ed068c68179244a8210ac8b7c539eaa7b3af4743787942509617404f181f29cb3e25b9e473f432684a1b49fbd536919c586abe0bdd41c0661d2ede3dbfb62b7cf52998dd93906a0ea9a21d2bd1ebffa5871e5b3f3812e342d77fa8144b0ee2fbd5860aa838c0983555b3734ad2c0411e439a1ccfd9bc359e4461545f7385874c23318540e0f850591f0f2fc55e565df7a49bc2e05ca30732fa017704473780a03b9636506da459392f7e39b4faddeccdd4ae4073e16760c59544cd2d1c1d990c39ffc16b65dfe9d7654b943b79e182d6e6042a451c21d7a238b4f6970e9c72244fabfe151a0bd863b8ec66498d76bb9475393012d04406149a341cc98eb66ce66629e2c55593a175f854ad61b4d4cfd945eed17cbdc3bf5dfca9d755a10332eca0401077a6447c52bda82cdbe2e5279d14d9443032df9110a8a19e2a2e6402d8ec31e2f1ecfe702239cc438a0ac7c045196aa42a334f8df5ba9609a573aaf64d5bed66e47129133edbbbf76f596518c360ec797d907e03ac9a983304145fb3ebdafcb777c6eb69b901bf724fb100fdd1fdd5578d68e62fabae659763974537b35d2973a3c02b4d22603e2648a204a01056c23407bf30eac9a9693db627bc0a40a65756b9ebcb0ee090c73e69d948551d509d9f784933d844846d04eb4b26d4b75c64950e525338b2451994316d156e9ca1076be136ca7b00e596caa0269e9cf8de45267e4872dde636e92efae24ee0e6086aa27b168dce060277825cc42c3dd9861f8b0847287207abed9b59bd49addc0f08b9f027b51720c99ea04eb003440e7308ef79bd3f6f332fe46ed3ab2eeaa9e557cb076249adbef98ef6f18a055dad4ba5d2cbcc87f7af00834dcedf6e42b9fca320ef5db389a9561bfb1f7e733056e92ad0fd71d2d64dc7d494084ab5ec1c4698f884b9974176d7dfed2205ec7df30b96a2eb2dd2f4d94dcb91694f86faced1b858bbc6b37e149208527147950075a6517a7cd85766408d2cb4008668da4deac327307611695351e516a1ef6094785ee5de8070a99ce743b4325341992e79531f44e1b1599622b3cc2ddb78fdc59a32d767c98580039a8f1f5bc58e135c61972ec917d5a948632b04063b088b5b1ae5c9d6184af055235196b30c4e46f313ddb064a73a2ecababca27499f62f7dfd87fd2dd40bf028d00d3fe82db56b97c937a31bcfcdc35409674cbdfd9a081540c3d82d20ab03bf9603a6f0abc659dea38c2d12808f7bd5e448e7d8fec2125ae30a0d1ad733da06475172e7edf4a60055303d5b03cd02f37eff560eb27c4d8ec85e398ae58339b97b432b69f7f9c621975dafc0d63aabd8af6f4761151445d456ac489cd9d4d9e249d09977bbd6605871622fdf1aeadc03f0d8c020c8504a54a54aa23afe1bdfca6b02c434d7b2dd32824da6634776a0454b5cdb17c9a8795c8ba2c6c3151cfe7c0660ea04dfe0190e1c6c66ef170a7059bd03ccd573819853f2c8fde8a4e2e499d92a697def836da8bbb885421f4c1344d99056820e33130e5f7872beb70a62e11fd450e3e1bf64cc2ef4e3de649e77010e76d7e00ecc5264761e6e2154329bb98ae29647a03c7afe1dbb664333ae6919c21d95f3b4d8043364b3172569b9017381d1e43196386fee59fbb40d429c5afadfd5f1b197e148a4835e1fb718433c4613636e39a9e156e774101940ed2f20f8b2fa3a1ce3fd47637d3d307b8d6e224ae932ad06307356ffc0f9dd27fa8d6e734855dba8f62f16b7419c331d40edc129cbd56cc87b7e3c66ab4e3336f4855d56a24affe63ab420d03e28f091811a6b799306ee446750a3482e440b7289d88b131e1ec35b5c64e09ea47dd6e3b77e60b0d6d9c7cd5bec5be64eb5f03e5ec64c47ebbe410b5d4017d5f7918705c2c8e90a888dc2b9c397519c616ecd547000909594dbf23c5cdf84fefef66cbd63e4a211901dc29d6e2218c40ba4d785f70d7b0ee49ee8c1502b8795d3e7817e9e33f39c6b58d092320bdb28011517be5f9883bc3034568e37c5b65d764729880942b52b081fbe2f77038901ec3679df74eb9735bd60115bd3b1f6a7bb4c3d39ebf0eec6fc69eae5e34dcbeaff9a5fb0fb09341683c10b9bd852de4a09de14a46bc493a5d4cb4db99d9c3f6be78ef746da53d1402921e42f44c8fd04b4d4d918ba2e4ed8a9cda4e7dff0e5c82dede9d6cc3ce31ad8da680358ad24f9e466e0d55753bad4e3a7867f21bccd51f0c44ce1ce93726199970a802da6310120f0f0ee4a3e90b75abff318be3a82aa239e04de8c630e245763a58c524cf3ed4f2831e2717e8c97067ed0d21c65dda16b65e573c7d44e5f255cf3462ef6761b8d098d7c68eb9744294e0cd854bdc4334e6929a0cab178dd2cb1eadec5550a2a9083d3ceb8c27993908118384d9c81d5526a159e268053b391dfffccebc9680f204a57de1210a5221843a7b1884ea01453219f70e8550aa0d4925dafcdf77130ae06cfc97a0c8cb5e877f2a1d448312845cddb5740b6cf637bc68ce5aae630b2c9f7360f8a16a9f4a3876b9e00aba06114de15b647db1701c2d3ea98d5275462f56e597734fe77cc4d85e0a876bfacf5f3b19edb52b5d7033acf407cae48641eee33e19ddf9fbd3e46f66f760e6a0cdc5f5427e573a78542f24aa62ddcef1ac0c3143f85e8e7dc913b35a80cdd058512214aaabbbafc81aaa5c9ca3d36fcf4821f42499ce228852538ed2a4f227adcc4d18d37ec42a52383027a596a286c93cbd4c57efc69b3bc016aff7bae7626f16b896dd843df59680e6f92cd6507c29b70dbbf278972c891e3d1646d6def048d73a3f7c05edb8d1f89b10104f7ed1fd483fbe4a03da4dbe17609a5249fab991f8245c5c52f51fdc8bcea3ef62a679a95b76f6f55e4a9f5d1c77339f5f3e933f82cf943d6bafb114c5754b4d33f4007436bbd521801b736a2136bbdc9ddd6a112540d552f548069050b8d5911b8fb44f9a6c41865faafe65bbbce7878ee08ddb44b9dd57acbf1a0dfd6602b25b43efb6ec1b1287ce203b2702f009732761eb2a738aebceafbc2dbf2a57ba33900ba020f69890210021f75d175423c48fbe9f45ef5566c241820649a1ecc336d47f5538bfdb5c26b821ad36c7e43058317a4ab06c769d993fb5f77d80365007bddeb6a043093bb4059c26bf06e8d4064d9cad563f6e6b132ef5dc127b730c4aa9c5465101a7d2174393a72d148c7cdd959b5b14322fd25857aef1da91e37f483f9f4a5b3b00619847de1cb91594e027733c6e96ff811850d7c64fdb973a77306d1bd513318775111e8db9033549afc665b8df01ba69d5cc2f056c1e776a5c96d87c547e1b05acd1e99610d2efd738ffaf5f13c7d3f74af6fa6a17f59d7724b6e23c449907e42d3e504d29b95735dcbb9365fef6c839fc6deb4cd2ac44302fb3017ad7315aca708341fea3a98402b6c4bbfb056f7f32b17ed72c7f6790c3492a8f7445e033d293809f3a7eda2d1152bb96bb1f23fdb51edb7df29a0165eb8e9236006bf6bd9db996f8cd32c1913491d1d58d3608c357b4e770b564406a638577d9bd6cf578339205e2517e2e650945b13cd173139f197a50db6de5e05e3b3113801c6497d27e86c11ef2e9b2f040da392fa10f6114d1dde6d63d749d9f0ec0b677ef6526a3bb7390e7044f6d19ad814d0e5d64ac4d71037afed75fb19f465aff4436b6284079b4d8a67cc4837e12bda690910e4ca27762fec609729ca193c79ba629096e3dcaeca8409ac8346dd11783f5757bc6699c2298ee0161ef2ea28210af93da35b29d5a7d895eb6f3e2000ccd906c8bfc712f1c66cb488ff4625994d254704ba0dcc0b91128d5923a23784bd70b1c4f8a9a112a3f3fba477b4030c4adff86710c3e0f3cecfcb9199cf26f5eb6f3212adf81a96c6952258d5d184b6821dd76ad2da05379b40967127c958d28153579025b4adef6d487e89a201a29401a30920933effb3f327289a4acc48e94638dcacdd10d6f18c57615706ae841489718e642526a4f86e383fcfc7b8674140e532446a5940fcea185c416cbe026f72a1355af65532088460ea604733e1c24f09a9f4be85712d10b8698575666fd5bfc45dbec494c0410aadde3c2873181ba3ad714bf09f0551ac46e9076606ee401849fcb89ad4ddead4026a7059738de69e8c88f94959e87698a83f57c2e5e3f96e44ae5eaa7021e0006fcdc1a7ecc9a59443168371f9827b7b37c40cb2fb2472e2e1450b6576ec74f7a8c69739eb11deb5713fe7d39453b7d2838ce665ecd21226030cb5385a9f12cae67f6cf1160cf10241de3e62d5f51d250e088cfa240deb8b7897b5a352ede5f960e06c2c8326de4d7d550b607e90dd6bd250c8a09985220ca63f9c18b6ec7051193a9d6019f79121e244fee05aa1e37f798e73d66de0bebeecbbf1abed92714b0f204f27cd426d834fb87694e7ece7064b4f48663af702fa40dff371d67ddd3f0fe704a479741378a9e543c001b2aebe7e752806295f237312a3d3b63c463e602c9befd8f0eef3210e20377d61e5159ac188559a4dd93ddae1e7eb7d40e535f10074878fb401be5267658328c1f641dc60f6e79bb129336ff6d3bd775ea84cff84e44743901c9cb24a3901620f3915f3d7cee58a241332d9beaed332fd7a0b90686efc2495edaefb3ccbcc7c5b4c657f8f6f7eb316bf5a164946883c3ee1962fa2672c3f21a8cb6c3d4d805f447581d9f51568102f9f61be35d465cf41625fad2773fa97c79f70814ec8ed84234db3057362107ef4d079bef94d27c8e5923d3405faa64d2f306202167ce1b659dd0fc9c998d240da5154008c704bb584abe01e2ed59a14bf144d3bd6fdad0458c80a34a066eda3388dfd84f70e0a7a750a10e6ee4e3cd06d6aa008a5670e2d07292056bc7e089deb6061946669168cbf7a69868521df997c10284774e6a660ee7df5ee5a95e9edff99c172b0263a17f91300efbaad2f5aa3dccce0d142d44c7cb05483e88c4a5e21d024e6aef2c3d64fea0d285e582859181aa1bf52a7e82d2b6412b3cfb031d2088f5be3998b664cae4b5cc53d51076b7ccc43ad3cdcc871beaa5cdde3bf1a2753a49baca138a2f74bb96d3aa08c4f4331fe44e2ee2da80a230944d32a1dd9d769e9c5739e03f1382346189984e053267be5d2bb8d27bffdcdf2b73b3c92e4ca4b0acbda99cc1044943fc660aa25b56577b89ec15597d0ba465217b26ef7863399e120e37b630653f0c929137f4dd7079ac9bfefd9e5ee551c58899a6562149ab11c298cc4a712ebbf88643f870ba5c5e058e3a15cdcfdfe79a680b4d5cd980a808f0a691778587ceecbbcf5c56f4a535203026b5803e63bca97c17f54d2a358b9c74fef84b4f91082bb10811fc8654b3d25012306d67035bb6584cea0b3e2763255e593a74e25390251551328474fe5d3c6e1c3591ca43832f017cdbc24ecc884b02c3a70ea44272a0b99e1b23af2aa43f056e5d5a2aaa22051bd45098606736664d80381c160a5843e99ad4216326fc508d4f24f5a705c8488b5a808f39379e5d5fc2c020563eedf5422699268c206731676f9181a2b54ba2619bb760235e4f4d966d4a5cb67222ca5ff4f26598f5dc31a627fac58f729a1a3ceac858fbccbd81478b92d01bed3e7498c9f850baf43db232e3ff9a66d6cb8bf423dc8695c701734597011988272aa59c4bf9a7fd2571ecdbad166c47", "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"}}) (async) writev(r2, &(0x7f0000000c40)=[{&(0x7f00000005c0)="c2", 0x1}, {0x0, 0x500}], 0x2) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r3, 0x4188aea7, &(0x7f0000000240)={0xb, 0x4, [{0x80000000, 0x0, 0x1}, {0xffffffef, 0x0, 0x9457}, {0x3ff, 0x0, 0x80}, {0x78, 0x0, 0x6}, {0x6, 0x0, 0x4}, {0x3, 0x0, 0x2}, {0xb9f, 0x0, 0x7}, {0x2, 0x0, 0x4}, {0x6, 0x0, 0x5}, {0x10, 0x0, 0x5}, {0x6}, {0x4, 0x0, 0x101}, {0x4}, {0x1d7d28e9, 0x0, 0xffffffff}, {0x3, 0x0, 0x401}, {0x4}]}) 6.803669184s ago: executing program 6 (id=1458): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8004, 0x0, 0x9, 0xda, 0x2, 0x2, 0x7}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f00000002c0)={0x140, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x26b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x27464126}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x92}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xee}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}]}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x9800}, 0x8000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x6, 0x0, 0x97, 0x7ffffdbb}, {0x101, 0x0, 0x60, 0x6}]}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0xc0844123, &(0x7f0000000040)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x380, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2b0, 0xffffffff, 0xffffffff, 0x2b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x0, 0x2, 0x1}}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x49240, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[]) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMIWAIT(r4, 0x545c, 0x0) 6.695754576s ago: executing program 1 (id=1459): ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba0000", @ANYRES32=0x0, @ANYBLOB="800002010800000008001b000000000008000d"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x20004000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) 6.101623091s ago: executing program 1 (id=1460): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1a, 0x0, &(0x7f00000007c0)="e3ef7f670000ec6789b424154494000000000000000000000004", 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) fchown(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x1}, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x85) 5.595661621s ago: executing program 1 (id=1461): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2000a, 0x600a8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}, @IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x13}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xf3}, 0x24008040) 4.695539555s ago: executing program 1 (id=1464): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x0, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) writev(0xffffffffffffffff, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)}, {&(0x7f0000000900)}], 0x3) r2 = timerfd_create(0x8, 0x80000) timerfd_settime(r2, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket(0x1e, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r6, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_newneigh={0x2c, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r4, 0x80, 0xff, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_FDB_EXT_ATTRS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) socket$kcm(0x29, 0x4, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) recvmsg$unix(r5, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f00000002c0)=""/11, 0xb}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/8, 0x8}], 0x3, &(0x7f0000001d00)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x10040) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b, 0x200000a00000}) r9 = syz_clone(0x190411, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) timerfd_gettime(r8, &(0x7f0000000300)) ptrace$setregset(0x4205, r9, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r10, 0x0, 0x20044014) syz_usb_connect$uac2(0x2, 0x0, 0x0, 0x0) 4.604524803s ago: executing program 7 (id=1465): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001f000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000005900008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r1, 0xffffffffffffffff, 0x16, 0x0, @val=@tracing={0x0, 0x3}}, 0x20) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x7, 0xfa11, 0x7ff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000020303000000000000"], 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a0506020000000000000000000007140000001100010000000000000000000000000abf08bfba86d940a23b5f8f0800b5c2522473ad089eb3d4040fc86fa5760f8692707c6259e5e1fa5dceca1730e4de7a2786974036740b1deb991601c408dcc2e639f6cb8cedec0dfc688e28b5cbbe662b3e3a36de87224299b6955337562eb68ac0a8c3a022aa45fb3d9a50ac3e88e0ece968fba6f0c908b78c856a05e43bbedc523138c6cdaa615d04187794605d52"], 0x3c}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = socket$kcm(0xa, 0x5, 0x11) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) r7 = socket(0xa, 0x3, 0xff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$inet6(r7, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="671723d7c6012c", 0x7}, {&(0x7f0000000180)="9e91d91a92dc7c8f06c24fbe79d9284d0c66c92c658bb539e2ffb332c99223a7df", 0x21}], 0x2}, 0x20008b88) syz_usb_connect(0x3, 0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02000905000000000000000705e37e1b"], 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0x41000, 0xb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x1}, {0x0, 0x60000, 0x3, 0x0, 0x0, 0x17, 0xf9, 0x6, 0x0, 0x0, 0x0, 0x42}, {0xeeef0000, 0x6000, 0x13, 0x3, 0x0, 0x0, 0x81, 0x0, 0x4, 0xe, 0x1, 0x3}, {0x8080000, 0x0, 0x4}, {0x7000, 0x1000, 0x3, 0x0, 0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x1a}, {0xe000, 0xd000, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x84}, {0x4, 0x5000, 0x9, 0x4, 0x3, 0x0, 0x0, 0x0, 0x3}, {0x1, 0x100000, 0x0, 0xf9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {0x70000}, {0x1, 0xfffe}, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x1, 0x900, [0xfffffffffffffffc, 0x0, 0x0, 0x3]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 4.051113915s ago: executing program 6 (id=1467): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb70300000000b0ffb704000000000000b50005009700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.94031389s ago: executing program 6 (id=1468): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000780), 0x2000000000000002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00000000000000005500", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) 3.927352941s ago: executing program 2 (id=1469): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="b8010000100001002cbc7000000000002b80c0c91e9877c892bc0e0cf70280eefc010000000000000000e2ffffff000100000000000000000000ffff7f000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1b8}, 0x1, 0x18000000}, 0x44050) 3.79441006s ago: executing program 6 (id=1470): ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f0000000000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x5, 0x3, 0x8, 0x0, 0x2}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r1, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={r1, 0x9f2d}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000180)={0xff, 0x4, 0x1, 0x9e4, r2}, &(0x7f00000001c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r2, &(0x7f0000000240)=0x4) (async) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000280)={0x6, 0x7, 0x0, 0x9, 0xd1, 0x6, 0xb0, 0x0, 0xa, 0x8, 0x5c, 0xb, 0x7f, 0xe}, 0xe) (async) preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/136, 0x88}, {&(0x7f0000000380)=""/33, 0x21}, {&(0x7f00000003c0)=""/227, 0xe3}], 0x3, 0x2, 0x9bb56de) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000600)={0x0, &(0x7f0000000500)=[@nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_load_code={0x12e, 0x90, {0x1, "c441475dfac744240003000000c74424022b000000c7442406000000000f011424b9cb020000b89bf30000ba000000000f30c4c12dc25c1b5ee366b8f4008ec0c744240032000000c7442402b8bd0000ff1c242e0f3066410f381ddfc442d9989fd9bfffffc7442400a8000000c744240200380000ff1c24"}}, @wrmsr={0x65, 0x20, {0x40000071}}], 0xc8}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_SMI(r3, 0xaeb7) (async) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000640), 0x80100, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000680)={{0x200000, 0x80a0000, 0x3, 0x0, 0x0, 0x3, 0xf9, 0xd1, 0x4, 0x3, 0xd6, 0x2}, {0x3000, 0x13f1004, 0x3, 0x3, 0x5a, 0x9, 0x3e, 0x7, 0x3, 0x80, 0x8, 0x6}, {0x9000, 0x26000, 0x0, 0x3, 0x7f, 0xf, 0x0, 0x15, 0x6e, 0x4, 0x6, 0x8}, {0x25000, 0x4, 0xa, 0x1, 0x0, 0xa, 0x6, 0x4, 0xa, 0x0, 0x1, 0x40}, {0x1000, 0x50000, 0xb, 0x7f, 0x10, 0x40, 0x3, 0xfb, 0xe, 0x2, 0x8, 0x9}, {0xc000, 0x50000, 0x8, 0x6, 0x4, 0xcc, 0xab, 0x5, 0xd, 0x40, 0x3, 0x3}, {0x9000, 0x0, 0x10, 0x5, 0x10, 0xa1, 0x8, 0x0, 0x7, 0x6, 0xa, 0x7}, {0x50000, 0xffff1000, 0xc, 0x9, 0xff, 0x2, 0x0, 0x9, 0x3, 0xe7, 0x0, 0x4}, {0xf000, 0x6c}, {0xe000, 0x8}, 0x19, 0x0, 0x9000, 0x100020, 0xe, 0x0, 0xeeee0000, [0x9, 0x7, 0x80000000, 0x8]}) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) (async) clock_gettime(0x0, &(0x7f0000000800)={0x0, 0x0}) futex(&(0x7f00000007c0)=0x2, 0xa, 0x0, &(0x7f0000000840)={r5, r6+60000000}, &(0x7f0000000880)=0x2, 0x1) (async) read$FUSE(r4, &(0x7f00000008c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) getsockopt$inet_buf(r4, 0x0, 0x30, &(0x7f0000002900)=""/175, &(0x7f00000029c0)=0xaf) ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, &(0x7f0000002a00)={0x1, [0x6]}) (async) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000002a40)=0x4) (async) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002cc0)={0x6, 0x13, &(0x7f0000002a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xb}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000002b40)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000002b80)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000002bc0)={0x2, 0xb, 0x20000000, 0x6}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000002c00)=[r4, r4, r4, r4, r4], &(0x7f0000002c40)=[{0x4, 0x5, 0x2}, {0x5, 0x3, 0xc, 0x9}, {0x1, 0x3, 0x5}, {0x0, 0x2, 0x2, 0x6}, {0x1, 0x2, 0x7, 0x2}, {0x0, 0x3, 0x6, 0x3}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000002f80)={r8, 0x0, 0xdf, 0x0, &(0x7f0000002d80)="2c0ee9bb51a6a91469a5cf415a03620a7b4f45e968820253d4ad5c54ce0cb91b8a8d7cf80ac3c04a1fbc6ca0de0c293ae53269c000f5cf1dec9cc13c969ce6735d594d5d86d8cdbc175c3c12af12d3c05c1fed6c95e7bc3b7768826428ccf1dc787e3e340fd0f7838390f3e20421c564c8458f84d9f4313e4d1c5b35ff62dec8ca63ac1893ff5107404472b912b95e63974f22af01c6910deff4ee0b42542db68b5feeee265f3f98698dc082e50a9aa7860bac18eb631b4cf195d6dce4e89185cbfe6804e7a98c3403a0afeb0a3934b85f53b383ace8d69717de571955887c", 0x0, 0x4, 0x0, 0xdc, 0x0, &(0x7f0000002e80)="b074af28aae615917ec7d02a2c3ce8304b8b5e5f44829e25c6b3900438f2c727cea24f479cd240cde37904fa17155ee256030ef678dbba467ba5455e5db530d0bc62d0e86071f38c83c6071474af1ccabb166b83efed08ee59d6b847b04fc162aae8deb12b8e266f9aa06a95688c79b4dbff1d2b5f352f0ce3a9c9cb3e4bea0b2b169363be9e9f8f4a68037bcd9de712570f3e26ccd7f98898c99a54172da0a84569b0588820180b1bd9f9c1df19d9298e5b170601e59462bd488cd497742ad98e619ebe1e395600812b4feafcdf1fef4508b5314ff258291d85d67c", 0x0, 0x2, 0x0, 0x1}, 0x50) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x8010, r4, 0x8bd30000) (async) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f0000003000)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01864c2, &(0x7f0000003040)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc03064ca, &(0x7f0000003100)={&(0x7f0000003080)=[r9, r10, 0x0], &(0x7f00000030c0)=[0x80, 0xea3b, 0x7], 0x6, 0x3, 0x2}) (async) ptrace$poke(0x5, r7, &(0x7f0000003140), 0x8) 3.70750327s ago: executing program 2 (id=1471): ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4048aecb, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x4734, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000740)="98e2d24a2d8ce4a509d138cc91611ed14f69b7d7aebfeca49d719bfbb537aef2a00ebefaf03915f43ec35efc4f2f060cab2fa2b5236842aaac0b9519376ea044a920d446a5c2a54c1ff847b71d1aab9f7b8323243230b8c20dc28ce7715a595fb6b0b71597c4888d791ba8eab8", 0x6d, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x2, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r1 = socket(0x400000000010, 0x3, 0x0) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x1, 0x0, 0x25}, 0x10) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) r2 = fsopen(&(0x7f0000000100)='romfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000140)='-^@\x95/\x00', &(0x7f0000000180)='\x00', 0x0) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mkdir(&(0x7f00000000c0)='./file0\x00', 0x17c) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000003c0)={0x0, 0x5, 0x7, 0x7, 0x89, 0x9}, &(0x7f0000000400)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000500)={r5, @in={{0x2, 0x4e21, @remote}}, [0x8000, 0x6, 0x1, 0x8000000000000001, 0x100000000, 0x0, 0xeb, 0x4, 0x9, 0x1, 0x1, 0x7352, 0xd1, 0xa4bc, 0x8]}, &(0x7f0000000600)=0x100) sendmmsg$inet6(r4, &(0x7f0000001600)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x9, @mcast2, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="280000000000000029000000390000002c02020100000000fc0200000000000000000000000000008870dfcdf4af89f9cf1b555839daec80014a023df890387e9883455c918e1480b156f25dfbf05882470c4c"], 0x28}}], 0x1, 0x20000000) r6 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYRESDEC=r1]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f00000000c0)='./file0\x00', r2, 0x4000, r2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sync() r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x500, 0x0) ioctl$VIDIOC_DECODER_CMD(r4, 0xc0485660, &(0x7f0000000540)={0x1, 0x1, @raw_data=[0x400, 0x95, 0x9, 0x3, 0x5, 0xcb, 0x8, 0x5, 0x3, 0x1000, 0x0, 0x1, 0x0, 0xfffffff7, 0x0, 0x8001]}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2b) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r7 = openat$cgroup_ro(r4, &(0x7f0000000200)='cpuset.effective_cpus\x00', 0x275a, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX]) write$binfmt_script(r7, &(0x7f0000000100), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 2.652318305s ago: executing program 2 (id=1474): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x330, 0x40000, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x260, 0xffffffff, 0xffffffff, 0x260, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0xff000000, 0x0, 0xffffff00], [], 'veth0_macvtap\x00', 'bridge0\x00', {}, {0xff}}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x40, 0x7, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private1, [], [], 'rose0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x4, 0xfffffffa, 0xfffffffb, 'pptp\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x390) 2.556562415s ago: executing program 7 (id=1475): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_IOC_READY(r3, 0x541b, 0x20000000) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x4955, &(0x7f0000000300)={0x0, 0xe1d6, 0x2, 0x2, 0x144}, 0x0, &(0x7f0000000380), &(0x7f0000000000)=0x0) close(r4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c0, 0x0, 0x190, 0x260, 0x420, 0x260, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0xff000000, 0xffffffff, 0x0, 0xffffff00], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r7 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcda) r8 = open_tree(r7, &(0x7f0000000100)='.\x00', 0x80100) faccessat(r8, &(0x7f0000000000)='./file0\x00', 0x5) getpid() r9 = socket(0x2b, 0x1, 0x1) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) setsockopt$inet6_IPV6_RTHDR(r9, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'pimreg1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRESDEC=r9, @ANYBLOB="08000500", @ANYRES32=r5, @ANYBLOB="1c0012800b0001006970766c616e00000c000280060001000200000018ba67142bd854a83c7358a84c47772638d206d7ca129dfbcf71e48b4df5bc8c5359cf0aa672ef31f003f2fb0505c510184fc7bd3f8cb35cdcce18610a18a93e4b9f1f343b3105344a359cfc884b315d0f9c3a58e9f4692ad771e17a261abcf8fbdafbaa39014724c575f106679b8a68951d5b1bae6d870d7f59985199fefda6e8ec670d01e0a992c264bc69a57f47cd08e0134b044620f28f3f28fdc4a64b26d17ecfb929cd4a6087fce2e6517221776601245e35cf97b08f72916b7ecdf8891470785d2596c630a7b606397993fa28"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x404c050) 2.340386568s ago: executing program 2 (id=1476): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000201001818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.183641767s ago: executing program 2 (id=1477): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x0, 0xa, 0x4e, {0x4e, 0x2f, "daf6d5eaef9ee36b18ca8dd134b5f7c24f62d46cbe2ad26fc9a51e158c14a6c8e3335395cb1deff1dd9320652d42eac6566a600482c48fc7e983b5fc8cb8d9805d3f634b079c3f01392da568"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x837}}}, &(0x7f0000000600)={0x44, &(0x7f0000000200)={0x40, 0xc, 0x2f, "6dcc07fc2cab57cf9ff3456dbf0e567cd661c818b15f7a2c030926bf95560ddb49378ed86d80dee525ffbfede0c0db"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xfc}, &(0x7f00000002c0)={0x20, 0x81, 0x3, "aa54c4"}, &(0x7f0000000300)={0x20, 0x82, 0x2, '3A'}, &(0x7f0000000340)=ANY=[@ANYBLOB="2083640401b3e4f00bfc13"], &(0x7f0000000580)={0x20, 0x84, 0x1, "83"}, &(0x7f00000005c0)={0x20, 0x85, 0x3, "f57c49"}}) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x14, 0xcec, 0x0, 0x4, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x7) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) 1.824350806s ago: executing program 5 (id=1478): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb70300000000b0ffb704000000000000b5000500d300000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.598367131s ago: executing program 1 (id=1479): unshare(0x8040480) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000140)={0xfffffffc, 0x3, {0x3, 0x0, 0x0, 0x3}}) r1 = socket(0x1e, 0x1, 0x0) listen(r1, 0x0) ppoll(&(0x7f0000000180)=[{r1}], 0x1, &(0x7f0000000200), 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') close(0x3) fsopen(&(0x7f00000009c0)='hpfs\x00', 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x0, 0x5, 0x6a, {0x6a, 0xc, "33d1296fc4adde441f7706bb2737695ec5c76fb465a4e0b3929f44bd0f87e906708122527f858acf4a65f84a5e8078fbae596411e1fedf2859ff68e0990001a65c317c538595640d3f9d3a4171af1d7e274c897b92f0f1be4408436055e2915ca3cb1d71f46060e4"}}, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c1400000000000008"]}, &(0x7f00000003c0)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="0071259f30488fb4e58f916c2bb9837bb549b39ccdb30c38407077960d70749c8198f55c06660100f27f12e60d61f22369680e3329e2cdc7d65e82ad7be0495d55e00fd86d7c37c53395476cb0be6f53c59e444b156d23d3e04f3d34921a20f3aa05e1734431d2a0edfd9eee37c049ebbc318609bcac782657168aedffffffffffffff000000f8dad7c67ca0fd2233eff31622b65848fcf9c6fdc001d60478ac134700"/174], &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000340)={0xc0, 0x5, 0x1, "9a"}, &(0x7f0000000140)=ANY=[@ANYBLOB="403a4007148585a6c6f97a70ed762850ef38f1e600000000b3954669381ae00ab881b692295c6f4e2ab58d04cdfba416a0"]}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x5, 0xfffffffd, 0x0, {0x2}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x58}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x68}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) 1.516419067s ago: executing program 5 (id=1480): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000780), 0x2000000000000002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00ffffffffffffaa5500", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) 864.360273ms ago: executing program 5 (id=1481): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="b8010000100001002cbc7000000000002b80c0c91e9877c892bc0e0cf70280eefc010000000000000000e2ffffff000100000000000000000000ffff7f000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1b8}, 0x1, 0x19000000}, 0x44050) 586.68809ms ago: executing program 5 (id=1482): r0 = fsopen(&(0x7f0000000100)='romfs\x00', 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000002c0)=0x9, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}}, 0x4000800) r2 = epoll_create1(0x80000) r3 = socket$unix(0x1, 0x5, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x90, 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0xa002a008}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@gettaction={0x18, 0x32, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x24044092) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='-^@\x95/\x00', &(0x7f0000000180)='\x00', 0x0) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x107) r5 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b HID v0.00 Device [syz1] on syz0 [ 403.274276][ T5717] usb 7-1: device descriptor read/64, error -71 [ 403.534658][ T5717] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 403.694464][ T5717] usb 7-1: device descriptor read/64, error -71 [ 403.702308][ T5682] kaweth 3-1:8.111: couldn't find required endpoints [ 403.753155][ T5682] usb 3-1: USB disconnect, device number 73 [ 403.825380][ T5717] usb usb7-port1: attempt power cycle [ 404.184490][ T5717] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 404.226429][ T5717] usb 7-1: device descriptor read/8, error -71 [ 404.324272][ T5682] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 404.484220][ T5682] usb 3-1: Using ep0 maxpacket: 16 [ 404.484460][ T5717] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 404.500932][ T5682] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.524855][ T5682] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 404.544427][ T5682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.556175][ T5717] usb 7-1: device descriptor read/8, error -71 [ 404.586610][ T5682] usb 3-1: config 0 descriptor?? [ 404.684962][ T5717] usb usb7-port1: unable to enumerate USB device [ 405.038277][T10123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.067486][T10123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.148470][ T5682] mcp2221 0003:04D8:00DD.0014: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 405.301198][T10128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1166'. [ 405.306825][ T5682] usb 3-1: USB disconnect, device number 74 [ 405.500573][T10128] 8021q: adding VLAN 0 to HW filter on device bond6 [ 405.572958][T10131] macvlan2: entered promiscuous mode [ 405.596098][T10131] macvlan2: entered allmulticast mode [ 405.616222][T10131] bond6: entered promiscuous mode [ 405.636744][T10131] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 405.661183][T10131] bond6: left promiscuous mode [ 405.754342][T10135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1168'. [ 406.320532][ T5625] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 406.337462][ T5625] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 406.350463][ T5625] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 406.368230][ T5625] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 406.379921][ T5625] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 406.485428][T10147] binder: 10146:10147 ioctl 40046205 0 returned -22 [ 406.662775][ T5689] IPVS: starting estimator thread 0... [ 406.784520][T10153] IPVS: using max 33 ests per chain, 79200 per kthread [ 406.994261][ T5717] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 407.014798][ T5689] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 407.186537][ T5717] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 407.222580][ T5717] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 407.265144][ T5689] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 407.284483][ T5717] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 407.306192][ T5689] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 407.324327][ T5717] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.349299][ T5689] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 407.372433][T10156] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 407.384948][ T5689] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.431535][ T5717] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 407.453914][ T5689] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 407.492834][ T5689] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 407.529961][ T5689] usb 3-1: Product: syz [ 407.554855][ T5689] usb 3-1: Manufacturer: syz [ 407.646283][ T5689] cdc_wdm 3-1:1.0: skipping garbage [ 407.687630][ T5689] cdc_wdm 3-1:1.0: skipping garbage [ 407.725431][ T5689] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 407.743469][ T5717] usb 7-1: USB disconnect, device number 10 [ 407.753535][ T5689] cdc_wdm 3-1:1.0: Unknown control protocol [ 407.911594][T10163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.944884][T10163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.315636][ T5717] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 408.476395][ T4942] Bluetooth: hci6: command tx timeout [ 408.489447][ T5717] usb 7-1: device descriptor read/64, error -71 [ 408.784491][ T5717] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 408.954469][ T5717] usb 7-1: device descriptor read/64, error -71 [ 409.094552][ T5717] usb usb7-port1: attempt power cycle [ 409.124417][ T5682] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 409.173262][T10150] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.193815][T10150] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.214599][T10150] bridge_slave_0: entered allmulticast mode [ 409.239864][T10150] bridge_slave_0: entered promiscuous mode [ 409.275218][T10150] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.302448][T10150] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.314335][ T5682] usb 2-1: Using ep0 maxpacket: 16 [ 409.329519][ T5682] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.331432][T10150] bridge_slave_1: entered allmulticast mode [ 409.389150][ T5682] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.413517][T10150] bridge_slave_1: entered promiscuous mode [ 409.430150][ T5682] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 409.454435][ T5717] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 409.472256][ T5682] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 409.506472][ T5717] usb 7-1: device descriptor read/8, error -71 [ 409.535410][ T5682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.635040][ T5682] usb 2-1: config 0 descriptor?? [ 409.764318][ T5717] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 409.822006][ T5717] usb 7-1: device descriptor read/8, error -71 [ 409.960719][ T5717] usb usb7-port1: unable to enumerate USB device [ 410.039279][T10150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.089507][ T5682] usbhid 2-1:0.0: can't add hid device: -71 [ 410.142205][T10150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.170218][ T5682] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 410.258137][ T5682] usb 2-1: USB disconnect, device number 68 [ 410.311003][T10183] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 410.355179][T10183] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.433222][T10150] team0: Port device team_slave_0 added [ 410.496430][T10150] team0: Port device team_slave_1 added [ 410.554707][ T4942] Bluetooth: hci6: command tx timeout [ 410.748135][T10150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.777347][T10150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.815312][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 410.819375][ T5682] usb 3-1: USB disconnect, device number 75 [ 410.822161][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 410.833920][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 410.895979][T10150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.958792][T10150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.998572][T10150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.056867][T10150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.164398][ T24] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 411.247908][T10150] hsr_slave_0: entered promiscuous mode [ 411.261960][T10150] hsr_slave_1: entered promiscuous mode [ 411.273292][T10150] debugfs: 'hsr0' already exists in 'hsr' [ 411.281605][T10150] Cannot create hsr debugfs directory [ 411.344474][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 411.362051][ T24] usb 2-1: config 0 has an invalid interface number: 242 but max is 0 [ 411.392908][ T24] usb 2-1: config 0 has an invalid descriptor of length 27, skipping remainder of the config [ 411.424297][ T24] usb 2-1: config 0 has no interface number 0 [ 411.452770][ T24] usb 2-1: config 0 interface 242 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 411.494314][ T24] usb 2-1: config 0 interface 242 has no altsetting 0 [ 411.514619][ T24] usb 2-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00 [ 411.544493][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.544557][ T5619] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 411.581658][ T24] usb 2-1: config 0 descriptor?? [ 411.607128][ T24] usbhid 2-1:0.242: couldn't find an input interrupt endpoint [ 411.727636][ T5619] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 411.761796][ T5619] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 411.807418][ T5619] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 411.840225][ T5619] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 411.887674][ T5619] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 411.906644][ T5619] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.946467][ T5619] usb 7-1: config 0 descriptor?? [ 411.963140][T10208] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 412.129362][T10150] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 412.161656][T10150] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 412.185771][T10150] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 412.207495][T10150] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 412.221372][T10150] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 412.242415][T10150] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 412.278150][T10150] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 412.303785][T10150] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 412.541732][T10219] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1186'. [ 412.571152][T10219] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1186'. [ 412.584038][T10150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.644782][ T4942] Bluetooth: hci6: command tx timeout [ 412.680488][T10150] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.729341][ T5619] usbhid 7-1:0.0: can't add hid device: -71 [ 412.732329][ T8139] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.742505][ T8139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.743091][ T5619] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 412.773353][ T5619] usb 7-1: USB disconnect, device number 15 [ 412.810559][ T8139] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.817821][ T8139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.979385][T10150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.110718][T10150] veth0_vlan: entered promiscuous mode [ 413.150343][T10150] veth1_vlan: entered promiscuous mode [ 413.260819][T10150] veth0_macvtap: entered promiscuous mode [ 413.306084][T10150] veth1_macvtap: entered promiscuous mode [ 413.395526][T10150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.431453][T10150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.468886][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.488699][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.526330][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.554795][ T24] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 413.554868][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.701838][T10231] binder: BINDER_SET_CONTEXT_MGR already set [ 413.728990][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.751134][ T8141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.751900][T10231] binder: 10230:10231 ioctl 4018620d 200000000040 returned -16 [ 413.769877][ T8141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.788634][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.820298][ T24] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 413.837976][ T8141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.850451][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.855335][ T8141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.902864][ T24] usb 3-1: config 0 descriptor?? [ 413.961350][ T5690] usb 2-1: USB disconnect, device number 69 [ 414.271197][T10235] netlink: 'syz.1.1192': attribute type 10 has an invalid length. [ 414.397690][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 414.419433][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 414.483434][ T24] usb 3-1: USB disconnect, device number 76 [ 414.716946][ T4942] Bluetooth: hci6: command tx timeout [ 414.722722][ T5703] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 414.758644][T10235] team0: Port device veth0_to_hsr added [ 414.894906][ T5703] usb 8-1: device descriptor read/64, error -71 [ 414.918646][T10260] IPVS: ip_vs_add_dest(): server weight less than zero [ 414.932531][ T5681] IPVS: starting estimator thread 0... [ 415.054522][T10262] IPVS: using max 35 ests per chain, 84000 per kthread [ 415.059569][T10265] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1195'. [ 415.154269][ T5703] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 415.234855][ T24] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 415.305141][ T5703] usb 8-1: device descriptor read/64, error -71 [ 415.440336][ T24] usb 7-1: config 4 has an invalid interface number: 44 but max is 0 [ 415.464722][ T5703] usb usb8-port1: attempt power cycle [ 415.477270][ T24] usb 7-1: config 4 has no interface number 0 [ 415.508316][ T24] usb 7-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 415.548403][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.584502][ T24] usb 7-1: Product: syz [ 415.604473][ T24] usb 7-1: Manufacturer: syz [ 415.621392][ T24] usb 7-1: SerialNumber: syz [ 415.652084][T10260] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 415.815828][ T5703] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 415.838515][ T5710] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 415.875778][ T5703] usb 8-1: device descriptor read/8, error -71 [ 416.027500][ T5710] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.069280][ T5710] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.096310][ T5710] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 416.117860][ T5710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.130296][ T5703] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 416.145310][ T24] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 416.156127][ T5710] usb 2-1: config 0 descriptor?? [ 416.169594][ T5703] usb 8-1: device descriptor read/8, error -71 [ 416.185665][ T24] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 416.227155][ T24] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 416.259784][ T24] usb 7-1: media controller created [ 416.284982][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 416.294706][ T5703] usb usb8-port1: unable to enumerate USB device [ 416.382848][T10273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1201'. [ 416.437655][T10273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1201'. [ 416.515947][ T5710] usbhid 2-1:0.0: can't add hid device: -71 [ 416.539850][ T5710] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 416.551505][ T24] DVB: Unable to find symbol dib7000p_attach() [ 416.595082][ T24] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 416.614540][ T5710] usb 2-1: USB disconnect, device number 70 [ 416.764560][ T24] rc_core: IR keymap rc-dib0700-rc5 not found [ 416.781576][ T24] Registered IR keymap rc-empty [ 416.802201][ T24] dvb-usb: could not initialize remote control. [ 416.827798][ T24] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 416.859664][ T24] dib0700: rc submit urb failed [ 417.120210][ T5710] usb 7-1: USB disconnect, device number 16 [ 417.199202][ T5710] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 417.411902][ T30] audit: type=1326 audit(1777319947.915:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10282 comm="syz.5.1204" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f732599cdd9 code=0x0 [ 417.520073][T10289] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1204'. [ 418.344773][ T5703] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 418.514275][ T5703] usb 3-1: Using ep0 maxpacket: 16 [ 418.536706][ T5703] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 418.561724][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.590562][ T5703] usb 3-1: Product: syz [ 418.613766][ T5703] usb 3-1: Manufacturer: syz [ 418.632090][ T5703] usb 3-1: SerialNumber: syz [ 418.648435][T10318] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1212'. [ 418.667708][ T5703] usb 3-1: config 0 descriptor?? [ 419.096231][T10301] lo: Caught tx_queue_len zero misconfig [ 419.112697][T10301] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 419.144089][ T5703] dvb_usb_dtv5100 3-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 419.193392][ T5703] usb 3-1: USB disconnect, device number 77 [ 420.201175][T10340] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1220'. [ 420.235896][ T5689] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 420.426598][ T5689] usb 2-1: Using ep0 maxpacket: 16 [ 420.460919][ T5689] usb 2-1: config 0 has no interfaces? [ 420.499092][ T5689] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 420.546401][ T5689] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 420.602255][ T5689] usb 2-1: Manufacturer: syz [ 420.660367][ T5689] usb 2-1: config 0 descriptor?? [ 421.114593][ T5703] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 421.305892][ T5703] usb 8-1: Using ep0 maxpacket: 8 [ 421.481041][ T5703] usb 8-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 421.558131][ T5703] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.602022][ T5703] usb 8-1: Product: syz [ 421.621922][ T5703] usb 8-1: Manufacturer: syz [ 421.650026][ T5703] usb 8-1: SerialNumber: syz [ 421.715694][ T5703] usb 8-1: config 0 descriptor?? [ 421.728507][ T5703] gspca_main: se401-2.14.0 probing 047d:5003 [ 422.350795][ T5703] input: se401 as /devices/platform/dummy_hcd.7/usb8/8-1/input/input27 [ 422.435345][ T5682] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 422.561911][ T5703] usb 8-1: USB disconnect, device number 6 [ 422.614232][ T5682] usb 3-1: Using ep0 maxpacket: 8 [ 422.647169][ T5682] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.718369][ T5682] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.767040][ T5682] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 422.786464][ T5682] usb 3-1: config 0 interface 0 has no altsetting 0 [ 422.808527][ T5682] usb 3-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 422.838642][ T5682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.903653][ T5682] usb 3-1: config 0 descriptor?? [ 423.775291][T10374] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1232'. [ 424.194926][T10381] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1233'. [ 424.284260][ T5703] usb 2-1: USB disconnect, device number 71 [ 424.516065][T10390] loop4: detected capacity change from 0 to 7 [ 424.585941][T10390] Dev loop4: unable to read RDB block 7 [ 424.623709][T10390] loop4: unable to read partition table [ 424.674004][T10390] loop4: partition table beyond EOD, truncated [ 424.721226][T10390] loop_reread_partitions: partition scan of loop4 (ўшЂЋxќ—ŸбрЖ ) failed (rc=-5) [ 424.861061][T10369] FAULT_INJECTION: forcing a failure. [ 424.861061][T10369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.952122][T10369] CPU: 0 UID: 0 PID: 10369 Comm: syz.6.1229 Tainted: G L syzkaller #0 PREEMPT(full) [ 424.952152][T10369] Tainted: [L]=SOFTLOCKUP [ 424.952158][T10369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 424.952169][T10369] Call Trace: [ 424.952177][T10369] [ 424.952184][T10369] dump_stack_lvl+0xe8/0x150 [ 424.952212][T10369] should_fail_ex+0x412/0x560 [ 424.952239][T10369] _copy_to_user+0x31/0xb0 [ 424.952266][T10369] copy_siginfo_to_user+0x22/0xc0 [ 424.952286][T10369] x64_setup_rt_frame+0x77b/0xcb0 [ 424.952329][T10369] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 424.952363][T10369] arch_do_signal_or_restart+0x424/0x830 [ 424.952392][T10369] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 424.952424][T10369] ? ksys_write+0x1fc/0x270 [ 424.952454][T10369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.952473][T10369] exit_to_user_mode_loop+0x86/0x480 [ 424.952491][T10369] ? rcu_is_watching+0x15/0xb0 [ 424.952513][T10369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.952532][T10369] do_syscall_64+0x33e/0xf80 [ 424.952553][T10369] ? clear_bhb_loop+0x40/0x90 [ 424.952575][T10369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.952593][T10369] RIP: 0033:0x7fe91435d60e [ 424.952610][T10369] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 424.952625][T10369] RSP: 002b:00007fe9151f7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 424.952646][T10369] RAX: 0000000000000001 RBX: 00007fe9151f86c0 RCX: 00007fe91435d60e [ 424.952657][T10369] RDX: 0000000000000001 RSI: 00007fe9151f8090 RDI: 0000000000000006 [ 424.952668][T10369] RBP: 00007fe9151f8090 R08: 0000000000000000 R09: 0000000000000000 [ 424.952679][T10369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 424.952689][T10369] R13: 00007fe914616128 R14: 00007fe914616090 R15: 00007fe91473fa48 [ 424.952716][T10369] [ 425.423551][T10395] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 425.451489][T10395] bond1 (unregistering): Released all slaves [ 425.904301][ T5682] usbhid 3-1:0.0: can't add hid device: -71 [ 425.960395][ T5682] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 426.006239][ T5682] usb 3-1: USB disconnect, device number 78 [ 426.115621][T10408] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1241'. [ 426.222695][T10414] FAULT_INJECTION: forcing a failure. [ 426.222695][T10414] name failslab, interval 1, probability 0, space 0, times 0 [ 426.300568][T10414] CPU: 1 UID: 0 PID: 10414 Comm: syz.2.1243 Tainted: G L syzkaller #0 PREEMPT(full) [ 426.300598][T10414] Tainted: [L]=SOFTLOCKUP [ 426.300604][T10414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 426.300615][T10414] Call Trace: [ 426.300621][T10414] [ 426.300627][T10414] dump_stack_lvl+0xe8/0x150 [ 426.300652][T10414] should_fail_ex+0x412/0x560 [ 426.300678][T10414] should_failslab+0xa8/0x100 [ 426.300704][T10414] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 426.300727][T10414] ? __alloc_skb+0x186/0x7d0 [ 426.300746][T10414] ? __alloc_skb+0x1d0/0x7d0 [ 426.300762][T10414] ? __local_bh_enable_ip+0xd0/0x130 [ 426.300785][T10414] __alloc_skb+0x1d0/0x7d0 [ 426.300808][T10414] netlink_sendmsg+0x5d4/0xb40 [ 426.300835][T10414] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.300856][T10414] ? aa_sock_msg_perm+0xf1/0x1b0 [ 426.300879][T10414] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 426.300903][T10414] ____sys_sendmsg+0x972/0x9f0 [ 426.300924][T10414] ? __might_fault+0xaf/0x130 [ 426.300949][T10414] ? __pfx_____sys_sendmsg+0x10/0x10 [ 426.300966][T10414] ? import_iovec+0x73/0xa0 [ 426.300981][T10414] ___sys_sendmsg+0x2a5/0x360 [ 426.300993][T10414] ? __lock_acquire+0x6b5/0x2cf0 [ 426.301005][T10414] ? __pfx____sys_sendmsg+0x10/0x10 [ 426.301033][T10414] ? __fget_files+0x2a/0x420 [ 426.301045][T10414] ? __fget_files+0x3a0/0x420 [ 426.301060][T10414] __x64_sys_sendmsg+0x1bd/0x2a0 [ 426.301074][T10414] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 426.301090][T10414] ? __pfx_ksys_write+0x10/0x10 [ 426.301108][T10414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.301119][T10414] do_syscall_64+0x15f/0xf80 [ 426.301130][T10414] ? trace_irq_disable+0x3b/0x140 [ 426.301145][T10414] ? clear_bhb_loop+0x40/0x90 [ 426.301157][T10414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.301167][T10414] RIP: 0033:0x7f696859cdd9 [ 426.301177][T10414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.301186][T10414] RSP: 002b:00007f69693be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 426.301198][T10414] RAX: ffffffffffffffda RBX: 00007f6968815fa0 RCX: 00007f696859cdd9 [ 426.301205][T10414] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 426.301211][T10414] RBP: 00007f69693be090 R08: 0000000000000000 R09: 0000000000000000 [ 426.301217][T10414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.301222][T10414] R13: 00007f6968816038 R14: 00007f6968815fa0 R15: 00007f696893fa48 [ 426.301237][T10414] [ 426.607117][T10413] netlink: 'syz.7.1241': attribute type 12 has an invalid length. [ 427.104754][ T5682] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 427.280111][ T5682] usb 3-1: Using ep0 maxpacket: 16 [ 427.305533][ T5682] usb 3-1: config 0 has no interfaces? [ 427.345765][ T5682] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 427.361859][ T5682] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 427.371239][ T5682] usb 3-1: Manufacturer: syz [ 427.391851][T10437] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 427.460867][ T5682] usb 3-1: config 0 descriptor?? [ 427.557852][T10439] loop4: detected capacity change from 0 to 7 [ 427.616858][T10439] Dev loop4: unable to read RDB block 7 [ 427.645191][T10439] loop4: unable to read partition table [ 427.663768][T10439] loop4: partition table beyond EOD, truncated [ 427.701279][T10439] loop_reread_partitions: partition scan of loop4 (ўшЂЋxќ—ŸбрЖ ) failed (rc=-5) [ 427.754536][ T5689] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 427.924704][ T5689] usb 2-1: Using ep0 maxpacket: 16 [ 428.096061][ T5689] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 428.164043][T10443] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 428.247477][ T5689] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 428.260176][T10443] bond1 (unregistering): Released all slaves [ 428.303163][ T5689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.358905][ T5689] usb 2-1: Product: syz [ 428.387848][ T5689] usb 2-1: Manufacturer: syz [ 428.405300][ T5689] usb 2-1: SerialNumber: syz [ 428.444993][ T5689] usb 2-1: config 0 descriptor?? [ 428.666681][ T5689] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 428.877316][T10454] x_tables: duplicate underflow at hook 1 [ 429.758293][ T8131] usb 2-1: Failed to submit usb control message: -110 [ 429.776938][T10461] af_packet: tpacket_rcv: packet too big, clamped from 1500 to 4294967272. macoff=96 [ 429.799974][ T8131] usb 2-1: unable to send the bmi data to the device: -110 [ 429.833221][ T8131] usb 2-1: unable to get target info from device [ 429.917067][ T8131] usb 2-1: could not get target info (-110) [ 429.973586][ T8131] usb 2-1: could not probe fw (-110) [ 429.987685][T10466] xt_hashlimit: size too large, truncated to 1048576 [ 430.363884][ T5703] usb 3-1: USB disconnect, device number 79 [ 430.573488][T10478] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1258'. [ 430.974519][ T5690] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 431.164533][ T5690] usb 7-1: Using ep0 maxpacket: 16 [ 431.176678][ T5690] usb 7-1: unable to get BOS descriptor or descriptor too short [ 431.199187][ T5690] usb 7-1: language id specifier not provided by device, defaulting to English [ 431.249173][ T5690] usb 7-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 431.300735][ T5690] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.330545][ T5690] usb 7-1: Product: Т‚ъƒцОЅЭ тЌъ‹‡ЧЉф…‹хЋ‹5 [ 431.361075][ T5690] usb 7-1: SerialNumber: syz [ 431.636069][T10481] vivid-000: disconnect [ 431.668617][T10480] vivid-000: reconnect [ 431.718380][ T5690] usb 7-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 431.765566][ T5710] usb 2-1: USB disconnect, device number 72 [ 431.959278][ T5690] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 432.027149][ T5690] usb 7-1: USB disconnect, device number 17 [ 432.077622][ T9064] udevd[9064]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 432.613288][T10498] loop4: detected capacity change from 0 to 7 [ 432.660117][T10498] Dev loop4: unable to read RDB block 7 [ 432.690011][T10498] loop4: unable to read partition table [ 432.711237][T10498] loop4: partition table beyond EOD, truncated [ 432.751647][T10498] loop_reread_partitions: partition scan of loop4 (ўшЂЋxќ—ŸбрЖ ) failed (rc=-5) [ 432.752607][T10496] trusted_key: encrypted_key: insufficient parameters specified [ 433.105672][T10501] netlink: 'syz.6.1265': attribute type 10 has an invalid length. [ 433.333682][T10501] team0: Port device dummy0 added [ 433.434281][ T5682] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 433.684844][ T5682] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.762325][ T5682] usb 7-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 433.798691][ T5682] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.846966][ T5682] usb 7-1: config 0 descriptor?? [ 433.897410][ T5682] dvb-usb: found a 'TeVii S662' in warm state. [ 433.923928][ T5682] dw2102: su3000_power_ctrl: 1, initialized 0 [ 433.934828][T10506] netlink: 'syz.5.1267': attribute type 1 has an invalid length. [ 433.971224][ T5682] dvb-usb: bulk message failed: -22 (2/0) [ 434.115829][ T5682] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 434.158465][T10509] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1267'. [ 434.261821][ T5682] dvb-usb: TeVii S662 error while loading driver (-19) [ 434.302033][T10506] bond1: entered promiscuous mode [ 434.348719][T10506] 8021q: adding VLAN 0 to HW filter on device bond1 [ 434.633096][T10516] netlink: 'syz.2.1268': attribute type 11 has an invalid length. [ 435.526881][ T5682] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 435.724698][ T5682] usb 2-1: Using ep0 maxpacket: 8 [ 435.740840][ T5682] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 435.751013][ T5682] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 435.769048][ T5682] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 435.792416][ T5682] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 435.820932][ T5682] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 435.853694][ T5682] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 435.874501][ T5682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.103127][ T5689] usb 7-1: USB disconnect, device number 18 [ 436.109586][ T5682] usb 2-1: GET_CAPABILITIES returned 0 [ 436.109634][ T5682] usbtmc 2-1:16.0: can't read capabilities [ 436.313845][T10538] usb 2-1: usbtmc_ioctl_clear_out_halt returned -32 [ 436.594384][ T5689] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 436.769069][ T5689] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.799330][ T5689] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.834309][ T5689] usb 7-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 436.864268][ T5689] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.897327][ T5689] usb 7-1: config 0 descriptor?? [ 436.961830][T10553] kvm: pic: non byte write [ 437.051937][T10553] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1280'. [ 437.082663][T10553] openvswitch: netlink: IPv4 frag type 64 is out of range max 2 [ 437.148806][T10549] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1279'. [ 437.176257][T10549] syz_tun: entered promiscuous mode [ 437.186545][T10549] macvtap1: entered promiscuous mode [ 437.192329][T10549] macvtap1: entered allmulticast mode [ 437.203048][T10562] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1279'. [ 437.205621][T10549] syz_tun: entered allmulticast mode [ 437.263206][T10562] syz_tun: left allmulticast mode [ 437.273752][T10562] syz_tun: left promiscuous mode [ 437.306309][ T5689] usbhid 7-1:0.0: can't add hid device: -71 [ 437.324547][ T5689] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 437.375103][ T5689] usb 7-1: USB disconnect, device number 19 [ 438.114767][ T5682] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 438.264333][T10578] batadv_slave_1: entered promiscuous mode [ 438.272894][ T24] usb 2-1: USB disconnect, device number 73 [ 438.325243][ T5682] usb 3-1: Using ep0 maxpacket: 32 [ 438.340098][ T5682] usb 3-1: config index 0 descriptor too short (expected 164, got 36) [ 438.378915][ T5682] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.424225][ T5682] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.459929][ T5682] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 438.491784][ T5682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.506107][ T5682] usb 3-1: config 0 descriptor?? [ 438.576558][T10577] batadv_slave_1: left promiscuous mode [ 438.978608][ T30] audit: type=1326 audit(1777319969.475:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10586 comm="syz.5.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f732599cdd9 code=0x7ffc0000 [ 439.043679][ T30] audit: type=1326 audit(1777319969.485:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10586 comm="syz.5.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f732599cdd9 code=0x7ffc0000 [ 439.226919][ T30] audit: type=1326 audit(1777319969.625:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10586 comm="syz.5.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f732599cdd9 code=0x7ffc0000 [ 439.343181][ T30] audit: type=1326 audit(1777319969.625:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10586 comm="syz.5.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f732599cdd9 code=0x7ffc0000 [ 439.357334][T10607] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1295'. [ 439.489816][T10607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1295'. [ 439.562015][ T30] audit: type=1326 audit(1777319969.705:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10586 comm="syz.5.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f732599cdd9 code=0x7ffc0000 [ 439.623964][ T5710] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 439.658060][ T30] audit: type=1326 audit(1777319969.705:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10586 comm="syz.5.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f732599cdd9 code=0x7ffc0000 [ 439.748857][ T30] audit: type=1326 audit(1777319969.705:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10586 comm="syz.5.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f732599cdd9 code=0x7ffc0000 [ 439.773593][ T30] audit: type=1326 audit(1777319969.905:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10586 comm="syz.5.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f732599cdd9 code=0x7ffc0000 [ 439.800598][ T30] audit: type=1326 audit(1777319969.905:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10586 comm="syz.5.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f732599cdd9 code=0x7ffc0000 [ 439.835508][ T30] audit: type=1326 audit(1777319969.905:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10586 comm="syz.5.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f732599cdd9 code=0x7ffc0000 [ 439.862069][ T5710] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.874277][ T5710] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.886565][ T5710] usb 7-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 439.920120][ T5710] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.018827][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.028565][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.082459][ T5710] usb 7-1: config 0 descriptor?? [ 440.401432][T10610] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1297'. [ 440.456517][T10610] syz_tun: entered promiscuous mode [ 440.463902][T10611] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1297'. [ 440.605496][T10610] syz_tun: entered allmulticast mode [ 440.736583][T10611] syz_tun: left allmulticast mode [ 440.744051][T10611] syz_tun: left promiscuous mode [ 440.772583][ T5710] usbhid 7-1:0.0: can't add hid device: -71 [ 440.789964][ T5710] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 440.905389][ T5710] usb 7-1: USB disconnect, device number 20 [ 442.040635][T10621] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1299'. [ 442.452291][ T5682] usbhid 3-1:0.0: can't add hid device: -71 [ 442.534283][ T5682] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 442.598542][ T5682] usb 3-1: USB disconnect, device number 80 [ 443.074315][ T5690] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 443.244241][ T5710] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 443.244468][ T5690] usb 8-1: Using ep0 maxpacket: 32 [ 443.301040][ T5690] usb 8-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 443.320621][ T5690] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.366642][ T5690] usb 8-1: config 0 descriptor?? [ 443.404025][ T5690] gspca_main: sunplus-2.14.0 probing 041e:400b [ 443.565143][ T5710] usb 2-1: config index 0 descriptor too short (expected 8192, got 36) [ 443.574389][ T24] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 443.598210][ T5710] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.628769][ T5710] usb 2-1: config 0 has no interfaces? [ 443.659194][ T5710] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 443.685904][ T5710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.711658][ T5710] usb 2-1: config 0 descriptor?? [ 443.764563][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 443.793884][ T24] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 443.857677][ T24] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 443.898600][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.935251][ T24] usb 3-1: Product: syz [ 443.954532][ T24] usb 3-1: Manufacturer: syz [ 443.976257][ T24] usb 3-1: SerialNumber: syz [ 444.935230][ T5690] gspca_sunplus: reg_w_riv err -110 [ 444.952308][ T5690] sunplus 8-1:0.0: probe with driver sunplus failed with error -110 [ 445.585354][ T5710] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 445.760167][ T5710] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 445.779226][ T5710] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 445.852259][ T5710] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 445.897521][ T5710] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 445.955274][ T5710] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 446.004095][ T5710] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.054020][ T5710] usb 7-1: config 0 descriptor?? [ 446.087070][T10668] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 446.417347][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1313'. [ 446.459181][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1313'. [ 446.644404][ T5710] usbhid 7-1:0.0: can't add hid device: -71 [ 446.672759][ T5710] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 446.722221][ T5710] usb 7-1: USB disconnect, device number 21 [ 447.303971][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 447.303987][ T30] audit: type=1326 audit(1777319977.805:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10674 comm="syz.5.1316" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f7325996b57 code=0x0 [ 447.356464][ T5703] usb 2-1: USB disconnect, device number 74 [ 447.808362][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 447.808512][ T5703] usb 8-1: USB disconnect, device number 7 [ 448.146896][ T5710] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 448.216250][ T24] usb 3-1: USB disconnect, device number 81 [ 448.325918][ T5710] usb 7-1: unable to get BOS descriptor or descriptor too short [ 448.460628][ T5710] usb 7-1: config 63 has an invalid interface number: 66 but max is 0 [ 448.547388][ T5710] usb 7-1: config 63 contains an unexpected descriptor of type 0x2, skipping [ 448.566305][ T5710] usb 7-1: config 63 has an invalid descriptor of length 9, skipping remainder of the config [ 448.705675][ T5710] usb 7-1: config 63 has no interface number 0 [ 448.712896][ T5710] usb 7-1: config 63 interface 66 has no altsetting 0 [ 448.741268][ T5710] usb 7-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 448.810253][ T5710] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.853013][ T5710] usb 7-1: Product: syz [ 448.891538][ T5710] usb 7-1: Manufacturer: syz [ 448.902253][ T5710] usb 7-1: SerialNumber: syz [ 448.954574][ T24] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 449.134430][ T5710] uvcvideo 7-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 449.160749][ T5710] uvcvideo 7-1:63.66: No valid video chain found. [ 449.167666][ T24] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 449.167700][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 449.167727][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 449.167754][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 449.167796][ T24] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 449.167819][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.170479][ T24] usb 8-1: config 0 descriptor?? [ 449.181423][ T5682] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 449.246720][T10711] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 449.287174][ T5710] usb 7-1: USB disconnect, device number 22 [ 449.384356][ T5703] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 449.526262][T10720] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1327'. [ 449.536891][ T5682] usb 3-1: unable to get BOS descriptor or descriptor too short [ 449.547957][ T5703] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 449.557917][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.566983][ T5682] usb 3-1: config 8 has an invalid interface number: 178 but max is 2 [ 449.577327][T10720] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1327'. [ 449.587443][ T5682] usb 3-1: config 8 has an invalid interface number: 112 but max is 2 [ 449.600763][ T5703] usb 2-1: Product: syz [ 449.609580][ T5703] usb 2-1: Manufacturer: syz [ 449.615121][ T5682] usb 3-1: config 8 has no interface number 1 [ 449.621643][ T5703] usb 2-1: SerialNumber: syz [ 449.632100][ T5682] usb 3-1: config 8 has no interface number 2 [ 449.640027][ T5682] usb 3-1: too many endpoints for config 8 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 449.667041][ T5682] usb 3-1: config 8 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 449.680471][ T5710] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 449.711797][ T5682] usb 3-1: config 8 interface 178 has no altsetting 0 [ 449.746630][ T5682] usb 3-1: config 8 interface 112 has no altsetting 0 [ 449.814854][ T5682] usb 3-1: New USB device found, idVendor=05c6, idProduct=9201, bcdDevice=c5.50 [ 449.836488][ T5682] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.866111][ T5710] usb 7-1: config 63 has an invalid interface number: 66 but max is 0 [ 449.891154][ T5710] usb 7-1: config 63 contains an unexpected descriptor of type 0x2, skipping [ 449.900588][ T5682] usb 3-1: Product: syz [ 449.914260][ T5682] usb 3-1: Manufacturer: syz [ 449.935975][ T5710] usb 7-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 449.951186][ T5682] usb 3-1: SerialNumber: syz [ 449.985437][ T5710] usb 7-1: config 63 has 2 interfaces, different from the descriptor's value: 1 [ 449.994998][ T5703] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 450.022829][ T5710] usb 7-1: config 63 has no interface number 1 [ 450.045506][ T5703] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 450.063479][ T5710] usb 7-1: config 63 interface 66 has no altsetting 0 [ 450.089773][ T5710] usb 7-1: New USB device found, idVendor=0471, idProduct=0307, bcdDevice=e4.df [ 450.111658][ T5703] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 450.133234][ T5710] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.155725][ T5703] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 450.216043][ T5703] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 450.233329][T10716] tipc: Enabled bearer , priority 10 [ 450.276578][ T5703] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 450.291320][T10727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.315112][ T30] audit: type=1326 audit(1777319980.815:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.1.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a1b9cdd9 code=0x7ffc0000 [ 450.351560][T10727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.384454][ T5710] usb 7-1: string descriptor 0 read error: -71 [ 450.394290][ T5703] usb 2-1: USB disconnect, device number 75 [ 450.414738][T10716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.448739][ T5710] uvcvideo 7-1:63.66: Found UVC 0.07 device (0471:0307) [ 450.464973][T10716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.483892][ T30] audit: type=1326 audit(1777319980.815:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.1.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a1b9cdd9 code=0x7ffc0000 [ 450.521754][ T5710] uvcvideo 7-1:63.66: No valid video chain found. [ 450.552898][ T5710] pwc: Philips PCVC675K (Vesta) USB webcam detected. [ 450.585717][ T5710] pwc: send_video_command error -71 [ 450.600749][ T30] audit: type=1326 audit(1777319980.855:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.1.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe8a1b5d60e code=0x7ffc0000 [ 450.625719][ T5682] usb 3-1: selecting invalid altsetting 1 [ 450.637715][ T5710] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 450.654299][ T5682] usb 3-1: Could not set interface, error -22 [ 450.662991][ T5710] Philips webcam 7-1:63.0: probe with driver Philips webcam failed with error -71 [ 450.685782][ T5682] usb 3-1: USB disconnect, device number 82 [ 450.710158][ T30] audit: type=1326 audit(1777319980.855:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.1.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe8a1b9ca6b code=0x7ffc0000 [ 450.753545][ T5710] usb 7-1: USB disconnect, device number 23 [ 450.803218][ T30] audit: type=1326 audit(1777319980.855:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.1.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe8a1b9ca6b code=0x7ffc0000 [ 450.826302][ T5703] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 450.903398][ T30] audit: type=1326 audit(1777319980.875:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.1.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe8a1b9ca6b code=0x7ffc0000 [ 451.011577][ T30] audit: type=1326 audit(1777319980.875:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.1.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe8a1b9ca6b code=0x7ffc0000 [ 451.039466][ T5703] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 451.083129][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.120409][ T5703] usb 2-1: Product: syz [ 451.143593][ T5703] usb 2-1: Manufacturer: syz [ 451.156523][ T30] audit: type=1326 audit(1777319981.185:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.1.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe8a1b9ca6b code=0x7ffc0000 [ 451.190848][ T5703] usb 2-1: SerialNumber: syz [ 451.228509][ T5710] tipc: Node number set to 1566234396 [ 451.244684][ T5703] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 451.286756][ T30] audit: type=1326 audit(1777319981.255:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.1.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe8a1b9ca6b code=0x7ffc0000 [ 451.360162][ T5710] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 451.808249][ T24] usbhid 8-1:0.0: can't add hid device: -71 [ 451.848922][ T24] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 451.920201][ T24] usb 8-1: USB disconnect, device number 8 [ 452.085554][T10725] libceph: resolve '0.' (ret=-3): failed [ 452.115851][T10725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1330'. [ 452.246905][ T24] usb 2-1: USB disconnect, device number 76 [ 452.338659][T10748] syzkaller1: entered promiscuous mode [ 452.382548][T10748] syzkaller1: entered allmulticast mode [ 452.556527][ T5710] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 452.590503][ T5710] ath9k_htc: Failed to initialize the device [ 452.624534][ T24] usb 2-1: ath9k_htc: USB layer deinitialized [ 453.214422][ T5710] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 453.284786][ T5682] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 453.324593][ T5703] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 453.384671][ T5710] usb 3-1: Using ep0 maxpacket: 8 [ 453.392901][ T5710] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 453.424370][ T5710] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 453.456613][ T5682] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 453.469957][ T5710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.488418][ T5682] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.498946][ T5703] usb 2-1: Using ep0 maxpacket: 32 [ 453.512536][ T5710] usb 3-1: config 0 descriptor?? [ 453.528259][ T5703] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 453.540528][ T5682] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 453.564833][ T5703] usb 2-1: config 0 has no interface number 0 [ 453.581653][ T5682] usb 8-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 453.595424][ T5703] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 453.615674][ T5682] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.625722][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.646570][ T5703] usb 2-1: Product: syz [ 453.655032][ T5682] usb 8-1: config 0 descriptor?? [ 453.662573][ T5703] usb 2-1: Manufacturer: syz [ 453.678653][ T5703] usb 2-1: SerialNumber: syz [ 453.728485][ T5703] usb 2-1: config 0 descriptor?? [ 453.780750][ T5710] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 454.112204][ T5682] magicmouse 0003:05AC:0265.0015: unknown main item tag 0x0 [ 454.144627][ T5682] magicmouse 0003:05AC:0265.0015: unknown main item tag 0x0 [ 454.167324][ T5682] magicmouse 0003:05AC:0265.0015: unknown main item tag 0x0 [ 454.167363][ T5682] magicmouse 0003:05AC:0265.0015: unknown main item tag 0x0 [ 454.167392][ T5682] magicmouse 0003:05AC:0265.0015: unknown main item tag 0x0 [ 454.167419][ T5682] magicmouse 0003:05AC:0265.0015: unknown main item tag 0x0 [ 454.167487][ T5682] magicmouse 0003:05AC:0265.0015: unknown main item tag 0x0 [ 454.167520][ T5682] magicmouse 0003:05AC:0265.0015: unknown main item tag 0x0 [ 454.167548][ T5682] magicmouse 0003:05AC:0265.0015: unknown main item tag 0x0 [ 454.167615][ T5682] magicmouse 0003:05AC:0265.0015: unknown main item tag 0x0 [ 454.226743][ T5682] magicmouse 0003:05AC:0265.0015: hidraw0: USB HID v0.03 Device [HID 05ac:0265] on usb-dummy_hcd.7-1/input0 [ 454.277983][T10765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.383846][T10765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.502319][ T5682] usb 8-1: USB disconnect, device number 9 [ 454.675012][ T5703] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 454.710811][ T5703] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 454.788627][T10768] loop4: detected capacity change from 0 to 7 [ 454.839724][T10768] Dev loop4: unable to read RDB block 7 [ 454.864550][T10768] loop4: unable to read partition table [ 454.880778][T10768] loop4: partition table beyond EOD, truncated [ 454.899056][T10768] loop_reread_partitions: partition scan of loop4 (ўшЂЋxќ—ŸбрЖ ) failed (rc=-5) [ 454.939130][ T5703] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 454.993660][ T5703] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 455.164318][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1345'. [ 455.177989][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1345'. [ 455.929121][ T5717] usb 3-1: USB disconnect, device number 83 [ 456.123549][ T5703] usb 2-1: USB disconnect, device number 77 [ 456.433223][T10799] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1348'. [ 457.494273][ T808] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 457.704585][ T808] usb 2-1: Using ep0 maxpacket: 16 [ 457.737690][ T808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 457.759830][T10823] loop4: detected capacity change from 0 to 7 [ 457.787607][ T808] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 457.806403][T10823] Dev loop4: unable to read RDB block 7 [ 457.833890][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.876703][T10823] loop4: unable to read partition table [ 457.883286][ T808] usb 2-1: Product: syz [ 457.896782][T10823] loop4: partition table beyond EOD, truncated [ 457.910160][ T808] usb 2-1: Manufacturer: syz [ 457.930907][ T808] usb 2-1: SerialNumber: syz [ 457.949831][T10823] loop_reread_partitions: partition scan of loop4 (ўшЂЋxќ—ŸбрЖ ) failed (rc=-5) [ 457.963053][ T808] usb 2-1: config 0 descriptor?? [ 457.991360][ T808] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 458.037505][ T808] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 458.558320][T10832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1357'. [ 458.590887][T10832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1357'. [ 458.604872][ T808] em28xx 2-1:0.0: chip ID is em2874 [ 458.883713][ T5710] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 459.263633][ T808] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 459.308320][ T808] em28xx 2-1:0.0: board has no eeprom [ 460.157627][ T5682] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 460.335100][ T5682] usb 3-1: Using ep0 maxpacket: 32 [ 460.360242][ T5682] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 460.394328][ T5682] usb 3-1: config 0 has no interface number 0 [ 460.425994][ T5682] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 460.439563][T10818] em28xx 2-1:0.0: writing to i2c device at 0xfe failed (error=-5) [ 460.457490][ T808] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 460.480592][ T5682] usb 3-1: config 0 interface 89 has no altsetting 0 [ 460.489320][ T808] em28xx 2-1:0.0: dvb set to bulk mode. [ 460.519155][ T5703] em28xx 2-1:0.0: Binding DVB extension [ 460.533074][ T5682] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 460.572242][ T808] usb 2-1: USB disconnect, device number 78 [ 460.586876][ T5682] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.624067][ T5682] usb 3-1: Product: syz [ 460.637658][ T808] em28xx 2-1:0.0: Disconnecting em28xx [ 460.649974][ T5682] usb 3-1: Manufacturer: syz [ 460.674966][ T5682] usb 3-1: SerialNumber: syz [ 460.708337][ T5682] usb 3-1: config 0 descriptor?? [ 460.757138][ T5682] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 460.803445][ T5682] em28xx 3-1:0.89: Video interface 89 found: [ 460.811118][ T5703] em28xx 2-1:0.0: Registering input extension [ 460.994819][ T5703] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 461.017585][ T5703] Registered IR keymap rc-empty [ 461.101745][ T5703] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 461.153473][ T5703] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input29 [ 461.191548][ T5703] em28xx 2-1:0.0: Input extension successfully initialized [ 461.203311][ T808] em28xx 2-1:0.0: Closing input extension [ 461.378560][ T5682] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 461.438187][ T808] em28xx 2-1:0.0: Freeing device [ 461.521534][T10888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1366'. [ 461.725192][T10888] FAULT_INJECTION: forcing a failure. [ 461.725192][T10888] name failslab, interval 1, probability 0, space 0, times 0 [ 461.764277][T10888] CPU: 0 UID: 0 PID: 10888 Comm: syz.1.1366 Tainted: G L syzkaller #0 PREEMPT(full) [ 461.764300][T10888] Tainted: [L]=SOFTLOCKUP [ 461.764304][T10888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 461.764310][T10888] Call Trace: [ 461.764315][T10888] [ 461.764320][T10888] dump_stack_lvl+0xe8/0x150 [ 461.764339][T10888] should_fail_ex+0x412/0x560 [ 461.764356][T10888] should_failslab+0xa8/0x100 [ 461.764372][T10888] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 461.764385][T10888] ? __alloc_skb+0x186/0x7d0 [ 461.764403][T10888] ? __alloc_skb+0x1d0/0x7d0 [ 461.764412][T10888] ? __local_bh_enable_ip+0xd0/0x130 [ 461.764426][T10888] __alloc_skb+0x1d0/0x7d0 [ 461.764436][T10888] ? netlink_ack_tlv_len+0x6c/0x210 [ 461.764449][T10888] netlink_ack+0x146/0xa50 [ 461.764459][T10888] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 461.764470][T10888] ? ref_tracker_free+0x693/0x840 [ 461.764484][T10888] ? __pfx_ref_tracker_free+0x10/0x10 [ 461.764495][T10888] ? __asan_memcpy+0x40/0x70 [ 461.764507][T10888] ? __skb_clone+0x63/0x7a0 [ 461.764528][T10888] netlink_rcv_skb+0x2b6/0x4b0 [ 461.764541][T10888] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 461.764552][T10888] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 461.764569][T10888] ? netlink_deliver_tap+0x2e/0x1b0 [ 461.764580][T10888] ? netlink_deliver_tap+0x2e/0x1b0 [ 461.764593][T10888] netlink_unicast+0x75c/0x8e0 [ 461.764609][T10888] netlink_sendmsg+0x813/0xb40 [ 461.764625][T10888] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.764638][T10888] ? aa_sock_msg_perm+0xf1/0x1b0 [ 461.764653][T10888] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 461.764669][T10888] ____sys_sendmsg+0x972/0x9f0 [ 461.764681][T10888] ? __might_fault+0xaf/0x130 [ 461.764696][T10888] ? __pfx_____sys_sendmsg+0x10/0x10 [ 461.764712][T10888] ? import_iovec+0x73/0xa0 [ 461.764728][T10888] ___sys_sendmsg+0x2a5/0x360 [ 461.764739][T10888] ? __lock_acquire+0x6b5/0x2cf0 [ 461.764752][T10888] ? __pfx____sys_sendmsg+0x10/0x10 [ 461.764790][T10888] ? __fget_files+0x2a/0x420 [ 461.764809][T10888] ? __fget_files+0x3a0/0x420 [ 461.764832][T10888] __x64_sys_sendmsg+0x1bd/0x2a0 [ 461.764845][T10888] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 461.764862][T10888] ? __pfx_ksys_write+0x10/0x10 [ 461.764875][T10888] ? handle_softirqs+0x715/0x840 [ 461.764888][T10888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.764899][T10888] do_syscall_64+0x15f/0xf80 [ 461.764912][T10888] ? clear_bhb_loop+0x40/0x90 [ 461.764923][T10888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.764933][T10888] RIP: 0033:0x7fe8a1b9cdd9 [ 461.764943][T10888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.764952][T10888] RSP: 002b:00007fe8a2a96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 461.764963][T10888] RAX: ffffffffffffffda RBX: 00007fe8a1e15fa0 RCX: 00007fe8a1b9cdd9 [ 461.764970][T10888] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 461.764977][T10888] RBP: 00007fe8a2a96090 R08: 0000000000000000 R09: 0000000000000000 [ 461.764983][T10888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 461.764988][T10888] R13: 00007fe8a1e16038 R14: 00007fe8a1e15fa0 R15: 00007fe8a1f3fa48 [ 461.765003][T10888] [ 462.474385][ T5682] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 462.485754][ T5682] em28xx 3-1:0.89: board has no eeprom [ 462.548968][ T5682] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 462.582007][ T5682] em28xx 3-1:0.89: analog set to bulk mode. [ 462.610065][ T808] em28xx 3-1:0.89: Registering V4L2 extension [ 462.677142][ T5682] usb 3-1: USB disconnect, device number 84 [ 462.750027][ T5682] em28xx 3-1:0.89: Disconnecting em28xx [ 462.765721][T10901] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1367'. [ 462.812243][T10908] netlink: 1363 bytes leftover after parsing attributes in process `syz.5.1368'. [ 462.824686][ T808] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 462.859638][ T808] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 462.891880][ T808] em28xx 3-1:0.89: No AC97 audio processor [ 462.953930][ T808] usb 3-1: Decoder not found [ 462.992985][T10908] ipvlan2: entered promiscuous mode [ 463.007193][ T808] em28xx 3-1:0.89: failed to create media graph [ 463.056731][T10908] ipvlan2: entered allmulticast mode [ 463.066778][ T808] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 463.107927][T10908] gretap0: entered allmulticast mode [ 463.234226][ T5717] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 463.303884][ T808] em28xx 3-1:0.89: Registering snapshot button... [ 463.361665][ T808] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input30 [ 463.391908][T10914] libceph: resolve ' [ 463.391908][T10914] -&ѕЬзfЭYЙЧВaзяХ2iˆ [ 463.391908][T10914] .жње?Ч§&*ЛЇ&' (ret=-3): failed [ 463.416118][ T808] em28xx 3-1:0.89: Remote control support is not available for this card. [ 463.426355][ T5717] usb 8-1: Using ep0 maxpacket: 16 [ 463.443997][ T5682] em28xx 3-1:0.89: Closing input extension [ 463.461902][ T5682] em28xx 3-1:0.89: Deregistering snapshot button [ 463.487520][ T5717] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.541547][ T5717] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 463.607212][ T5717] usb 8-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 463.645253][ T5717] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.719211][ T5717] usb 8-1: config 0 descriptor?? [ 463.780886][ T5717] pxrc 8-1:0.0: Could not find endpoint [ 463.837069][ T5717] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 463.839310][ T5682] em28xx 3-1:0.89: Freeing device [ 463.971277][ T808] usb 8-1: USB disconnect, device number 10 [ 464.028064][T10929] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1371'. [ 464.080059][T10929] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1371'. [ 464.264378][ T5682] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 464.469978][ T5682] usb 3-1: Using ep0 maxpacket: 8 [ 464.498360][ T5682] usb 3-1: unable to get BOS descriptor or descriptor too short [ 464.520088][ T5682] usb 3-1: no configurations [ 464.529799][ T5682] usb 3-1: can't read configurations, error -22 [ 464.606439][T10942] loop4: detected capacity change from 0 to 7 [ 464.627834][T10942] Dev loop4: unable to read RDB block 7 [ 464.659819][T10942] loop4: unable to read partition table [ 464.689750][T10942] loop4: partition table beyond EOD, truncated [ 464.696302][ T5682] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 464.724671][T10942] loop_reread_partitions: partition scan of loop4 (ўшЂЋxќ—ŸбрЖ ) failed (rc=-5) [ 464.874595][ T5682] usb 3-1: Using ep0 maxpacket: 8 [ 464.916457][ T5682] usb 3-1: unable to get BOS descriptor or descriptor too short [ 464.963790][ T5682] usb 3-1: no configurations [ 464.999003][ T5682] usb 3-1: can't read configurations, error -22 [ 465.021192][ T5682] usb usb3-port1: attempt power cycle [ 465.397547][ T5682] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 465.426206][ T5682] usb 3-1: Using ep0 maxpacket: 8 [ 465.438822][ T5682] usb 3-1: unable to get BOS descriptor or descriptor too short [ 465.458777][ T5682] usb 3-1: no configurations [ 465.479746][ T5682] usb 3-1: can't read configurations, error -22 [ 465.554726][ T5703] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 465.634484][ T5682] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 465.688854][ T5682] usb 3-1: Using ep0 maxpacket: 8 [ 465.698526][T10970] program syz.1.1381 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 465.714677][ T5703] usb 7-1: device descriptor read/64, error -71 [ 465.730261][ T5682] usb 3-1: unable to get BOS descriptor or descriptor too short [ 465.758203][ T5682] usb 3-1: no configurations [ 465.775827][ T5682] usb 3-1: can't read configurations, error -22 [ 465.783430][ T5682] usb usb3-port1: unable to enumerate USB device [ 465.941852][T10978] FAULT_INJECTION: forcing a failure. [ 465.941852][T10978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.976861][ T5703] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 465.999681][T10978] CPU: 0 UID: 0 PID: 10978 Comm: syz.1.1382 Tainted: G L syzkaller #0 PREEMPT(full) [ 465.999711][T10978] Tainted: [L]=SOFTLOCKUP [ 465.999718][T10978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 465.999728][T10978] Call Trace: [ 465.999735][T10978] [ 465.999742][T10978] dump_stack_lvl+0xe8/0x150 [ 465.999770][T10978] should_fail_ex+0x412/0x560 [ 465.999796][T10978] _copy_from_user+0x2d/0xb0 [ 465.999821][T10978] __sys_connect+0x156/0x450 [ 465.999844][T10978] ? __pfx___sys_connect+0x10/0x10 [ 465.999874][T10978] ? __pfx_ksys_write+0x10/0x10 [ 465.999903][T10978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.999922][T10978] __x64_sys_connect+0x7a/0x90 [ 465.999943][T10978] do_syscall_64+0x15f/0xf80 [ 465.999962][T10978] ? trace_irq_disable+0x3b/0x140 [ 465.999988][T10978] ? clear_bhb_loop+0x40/0x90 [ 466.000010][T10978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.000028][T10978] RIP: 0033:0x7fe8a1b9cdd9 [ 466.000044][T10978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.000059][T10978] RSP: 002b:00007fe8a2a96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 466.000078][T10978] RAX: ffffffffffffffda RBX: 00007fe8a1e15fa0 RCX: 00007fe8a1b9cdd9 [ 466.000091][T10978] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000004 [ 466.000101][T10978] RBP: 00007fe8a2a96090 R08: 0000000000000000 R09: 0000000000000000 [ 466.000112][T10978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.000123][T10978] R13: 00007fe8a1e16038 R14: 00007fe8a1e15fa0 R15: 00007fe8a1f3fa48 [ 466.000150][T10978] [ 466.274271][T10981] loop5: detected capacity change from 0 to 7 [ 466.297296][T10981] Dev loop5: unable to read RDB block 7 [ 466.356384][T10981] loop5: unable to read partition table [ 466.395650][T10981] loop5: partition table beyond EOD, truncated [ 466.410965][T10981] loop_reread_partitions: partition scan of loop5 (ўшЂЋxќ—Ÿбр– ) failed (rc=-5) [ 466.464250][ T5703] usb 7-1: device descriptor read/64, error -71 [ 466.574484][ T5703] usb usb7-port1: attempt power cycle [ 466.624821][ T5710] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 466.794700][ T5710] usb 8-1: Using ep0 maxpacket: 32 [ 466.839840][T10996] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1385'. [ 466.854911][ T5710] usb 8-1: config 0 has an invalid interface number: 35 but max is 0 [ 466.873306][ T5710] usb 8-1: config 0 has no interface number 0 [ 466.885054][ T5710] usb 8-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 466.900964][ T5710] usb 8-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 466.929419][ T5710] usb 8-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 466.939346][ T5703] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 466.968133][ T5710] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.978102][T10999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1387'. [ 466.990748][ T5710] usb 8-1: Product: syz [ 466.995207][T10999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1387'. [ 467.004394][ T5703] usb 7-1: device descriptor read/8, error -71 [ 467.011781][ T5710] usb 8-1: Manufacturer: syz [ 467.016676][ T5710] usb 8-1: SerialNumber: syz [ 467.040604][ T5710] usb 8-1: config 0 descriptor?? [ 467.253893][ T5710] radio-si470x 8-1:0.35: this is not a si470x device. [ 467.264370][ T5703] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 467.285717][ T5703] usb 7-1: device descriptor read/8, error -71 [ 467.409891][ T5703] usb usb7-port1: unable to enumerate USB device [ 467.455094][ T5710] radio-raremono 8-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 467.665920][ T5710] radio-raremono 8-1:0.35: V4L2 device registered as radio48 [ 467.864390][T11004] veth1_to_team: Caught tx_queue_len zero misconfig [ 468.088918][T11010] input: syz1 as /devices/virtual/input/input31 [ 468.952895][T11029] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1393'. [ 469.392349][T11032] FAULT_INJECTION: forcing a failure. [ 469.392349][T11032] name failslab, interval 1, probability 0, space 0, times 0 [ 469.465912][T11032] CPU: 1 UID: 0 PID: 11032 Comm: syz.1.1395 Tainted: G L syzkaller #0 PREEMPT(full) [ 469.465942][T11032] Tainted: [L]=SOFTLOCKUP [ 469.465948][T11032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 469.465958][T11032] Call Trace: [ 469.465968][T11032] [ 469.465976][T11032] dump_stack_lvl+0xe8/0x150 [ 469.466003][T11032] should_fail_ex+0x412/0x560 [ 469.466035][T11032] should_failslab+0xa8/0x100 [ 469.466064][T11032] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 469.466089][T11032] ? __alloc_skb+0x1d0/0x7d0 [ 469.466114][T11032] __alloc_skb+0x1d0/0x7d0 [ 469.466139][T11032] tipc_msg_build+0x162/0xf00 [ 469.466167][T11032] ? tipc_node_find+0x3bd/0x490 [ 469.466187][T11032] ? tipc_node_find+0xb3/0x490 [ 469.466204][T11032] ? __pfx_tipc_msg_build+0x10/0x10 [ 469.466241][T11032] __tipc_sendmsg+0x1902/0x2bc0 [ 469.466274][T11032] ? __lock_acquire+0x6b5/0x2cf0 [ 469.466293][T11032] ? __pfx___tipc_sendmsg+0x10/0x10 [ 469.466316][T11032] ? aa_file_perm+0x192/0x15e0 [ 469.466345][T11032] ? look_up_lock_class+0x57/0x110 [ 469.466366][T11032] ? register_lock_class+0x31/0x2e0 [ 469.466390][T11032] ? __lock_acquire+0x6b5/0x2cf0 [ 469.466418][T11032] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 469.466432][T11032] ? kstrtouint+0x6e/0xe0 [ 469.466449][T11032] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 469.466464][T11032] ? __pfx_woken_wake_function+0x10/0x10 [ 469.466481][T11032] ? __asan_memset+0x22/0x50 [ 469.466492][T11032] ? iov_iter_kvec+0xb8/0x180 [ 469.466506][T11032] tipc_connect+0x52d/0x700 [ 469.466516][T11032] ? __might_fault+0xaf/0x130 [ 469.466529][T11032] ? __pfx_tipc_connect+0x10/0x10 [ 469.466544][T11032] ? hook_socket_connect+0x107/0x190 [ 469.466558][T11032] ? bpf_lsm_socket_connect+0x9/0x20 [ 469.466572][T11032] __sys_connect+0x312/0x450 [ 469.466585][T11032] ? __pfx___sys_connect+0x10/0x10 [ 469.466601][T11032] ? __pfx_ksys_write+0x10/0x10 [ 469.466617][T11032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.466628][T11032] __x64_sys_connect+0x7a/0x90 [ 469.466640][T11032] do_syscall_64+0x15f/0xf80 [ 469.466650][T11032] ? trace_irq_disable+0x3b/0x140 [ 469.466664][T11032] ? clear_bhb_loop+0x40/0x90 [ 469.466676][T11032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.466686][T11032] RIP: 0033:0x7fe8a1b9cdd9 [ 469.466697][T11032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.466705][T11032] RSP: 002b:00007fe8a2a96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 469.466717][T11032] RAX: ffffffffffffffda RBX: 00007fe8a1e15fa0 RCX: 00007fe8a1b9cdd9 [ 469.466725][T11032] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000004 [ 469.466731][T11032] RBP: 00007fe8a2a96090 R08: 0000000000000000 R09: 0000000000000000 [ 469.466737][T11032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.466742][T11032] R13: 00007fe8a1e16038 R14: 00007fe8a1e15fa0 R15: 00007fe8a1f3fa48 [ 469.466759][T11032] [ 470.118750][T11036] loop5: detected capacity change from 0 to 7 [ 470.183745][T11036] Dev loop5: unable to read RDB block 7 [ 470.219275][T11036] loop5: unable to read partition table [ 470.250914][T11036] loop5: partition table beyond EOD, truncated [ 470.291939][T11036] loop_reread_partitions: partition scan of loop5 (ўшЂЋxќ—Ÿбр– ) failed (rc=-5) [ 470.616524][T11040] loop4: detected capacity change from 0 to 7 [ 470.623244][T11042] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1398'. [ 470.649220][T11042] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1398'. [ 470.716391][T11040] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 470.747004][T11040] loop4: partition table partially beyond EOD, truncated [ 470.797090][T11040] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 471.190108][ T5710] usb 8-1: USB disconnect, device number 11 [ 471.267074][ T5710] radio-raremono 8-1:0.35: Thanko's Raremono disconnected [ 471.414519][ T24] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 471.614558][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 471.652675][T11060] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1401'. [ 471.702820][ T24] usb 3-1: config 0 has no interfaces? [ 471.727236][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 471.756772][ T24] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 471.802086][ T24] usb 3-1: Manufacturer: syz [ 471.852314][ T24] usb 3-1: config 0 descriptor?? [ 472.195325][ T5710] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 472.260735][T11073] FAULT_INJECTION: forcing a failure. [ 472.260735][T11073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 472.306789][T11073] CPU: 0 UID: 0 PID: 11073 Comm: syz.5.1407 Tainted: G L syzkaller #0 PREEMPT(full) [ 472.306820][T11073] Tainted: [L]=SOFTLOCKUP [ 472.306827][T11073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 472.306837][T11073] Call Trace: [ 472.306845][T11073] [ 472.306853][T11073] dump_stack_lvl+0xe8/0x150 [ 472.306879][T11073] should_fail_ex+0x412/0x560 [ 472.306905][T11073] _copy_from_user+0x2d/0xb0 [ 472.306931][T11073] ___sys_recvmsg+0x175/0x590 [ 472.306953][T11073] ? get_pid_task+0x20/0x1f0 [ 472.306974][T11073] ? get_pid_task+0x20/0x1f0 [ 472.306999][T11073] ? __pfx____sys_recvmsg+0x10/0x10 [ 472.307026][T11073] ? __fget_files+0x2a/0x420 [ 472.307062][T11073] ? __fget_files+0x3a0/0x420 [ 472.307092][T11073] __x64_sys_recvmsg+0x1ba/0x2a0 [ 472.307117][T11073] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 472.307148][T11073] ? __pfx_ksys_write+0x10/0x10 [ 472.307180][T11073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.307199][T11073] do_syscall_64+0x15f/0xf80 [ 472.307219][T11073] ? trace_irq_disable+0x3b/0x140 [ 472.307245][T11073] ? clear_bhb_loop+0x40/0x90 [ 472.307267][T11073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.307285][T11073] RIP: 0033:0x7f732599cdd9 [ 472.307302][T11073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.307317][T11073] RSP: 002b:00007f732684c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 472.307336][T11073] RAX: ffffffffffffffda RBX: 00007f7325c15fa0 RCX: 00007f732599cdd9 [ 472.307349][T11073] RDX: 0000000000000023 RSI: 00002000000005c0 RDI: 0000000000000004 [ 472.307360][T11073] RBP: 00007f732684c090 R08: 0000000000000000 R09: 0000000000000000 [ 472.307370][T11073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.307380][T11073] R13: 00007f7325c16038 R14: 00007f7325c15fa0 R15: 00007f7325d3fa48 [ 472.307409][T11073] [ 472.511726][ T5682] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 472.536659][ T5710] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 472.545453][ T5710] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 472.555582][ T5710] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 472.564601][ T5710] usb 8-1: config 1 has no interface number 1 [ 472.570696][ T5710] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 472.583570][ T5710] usb 8-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 472.605178][ T5710] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 472.623580][ T5710] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.631715][ T5710] usb 8-1: Product: syz [ 472.636103][ T5710] usb 8-1: Manufacturer: syz [ 472.641197][ T5710] usb 8-1: SerialNumber: syz [ 472.674226][ T5682] usb 2-1: Using ep0 maxpacket: 32 [ 472.686882][ T5682] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 472.695310][ T5682] usb 2-1: config 0 has no interface number 0 [ 472.703866][ T5682] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 472.717086][ T5682] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 472.732249][ T5682] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.740585][ T5682] usb 2-1: Product: syz [ 472.747592][ T5682] usb 2-1: Manufacturer: syz [ 472.752787][ T5682] usb 2-1: SerialNumber: syz [ 472.782765][ T5682] usb 2-1: config 0 descriptor?? [ 472.800458][ T5625] Bluetooth: hci0: command 0x0406 tx timeout [ 472.827905][ T5682] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 472.919208][ T5682] em28xx 2-1:0.132: Video interface 132 found: [ 473.220635][ T5682] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 473.472763][T11047] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 473.512062][T11047] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 473.657003][ T5682] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 473.720662][ T5682] em28xx 2-1:0.132: board has no eeprom [ 473.916272][ T5682] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 473.961573][ T5682] em28xx 2-1:0.132: analog set to bulk mode. [ 473.999766][ T808] em28xx 2-1:0.132: Registering V4L2 extension [ 474.022832][ T5682] usb 2-1: USB disconnect, device number 79 [ 474.039855][T11082] FAULT_INJECTION: forcing a failure. [ 474.039855][T11082] name failslab, interval 1, probability 0, space 0, times 0 [ 474.061565][ T5682] em28xx 2-1:0.132: Disconnecting em28xx [ 474.109481][T11082] CPU: 0 UID: 0 PID: 11082 Comm: syz.6.1410 Tainted: G L syzkaller #0 PREEMPT(full) [ 474.109510][T11082] Tainted: [L]=SOFTLOCKUP [ 474.109516][T11082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 474.109527][T11082] Call Trace: [ 474.109534][T11082] [ 474.109541][T11082] dump_stack_lvl+0xe8/0x150 [ 474.109568][T11082] should_fail_ex+0x412/0x560 [ 474.109598][T11082] should_failslab+0xa8/0x100 [ 474.109625][T11082] __kvmalloc_node_noprof+0x178/0x8a0 [ 474.109652][T11082] ? nf_hook_entries_grow+0x288/0x720 [ 474.109684][T11082] nf_hook_entries_grow+0x288/0x720 [ 474.109710][T11082] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 474.109740][T11082] __nf_register_net_hook+0x2c9/0x930 [ 474.109768][T11082] ? nf_register_net_hook+0xc8/0x190 [ 474.109793][T11082] nf_register_net_hook+0xb2/0x190 [ 474.109818][T11082] nf_register_net_hooks+0x44/0x1b0 [ 474.109844][T11082] nf_ct_netns_do_get+0x212/0x5c0 [ 474.109867][T11082] ? rcu_is_watching+0x15/0xb0 [ 474.109890][T11082] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 474.109921][T11082] ? nf_ct_netns_get+0xe9/0x320 [ 474.109947][T11082] helper_mt_check+0x74/0x150 [ 474.109977][T11082] xt_check_match+0x4f1/0xc50 [ 474.110006][T11082] ? __pfx_xt_check_match+0x10/0x10 [ 474.110042][T11082] ? xt_find_match+0x20c/0x260 [ 474.110072][T11082] translate_table+0x1547/0x20b0 [ 474.110111][T11082] ? __pfx_translate_table+0x10/0x10 [ 474.110127][T11082] ? __might_fault+0xaf/0x130 [ 474.110151][T11082] ? __might_fault+0xaf/0x130 [ 474.110191][T11082] ? _copy_from_user+0x94/0xb0 [ 474.110221][T11082] do_ip6t_set_ctl+0x9fe/0xe10 [ 474.110241][T11082] ? rcu_is_watching+0x15/0xb0 [ 474.110261][T11082] ? trace_contention_end+0x3d/0x140 [ 474.110286][T11082] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 474.110322][T11082] ? __pfx___mutex_lock+0x10/0x10 [ 474.110343][T11082] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 474.110371][T11082] ? __pfx_aa_sk_perm+0x10/0x10 [ 474.110404][T11082] nf_setsockopt+0x26f/0x290 [ 474.110432][T11082] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 474.110453][T11082] do_sock_setsockopt+0x17c/0x1b0 [ 474.110478][T11082] __x64_sys_setsockopt+0x13d/0x1b0 [ 474.110502][T11082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.110522][T11082] do_syscall_64+0x15f/0xf80 [ 474.110540][T11082] ? trace_irq_disable+0x3b/0x140 [ 474.110565][T11082] ? clear_bhb_loop+0x40/0x90 [ 474.110587][T11082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.110604][T11082] RIP: 0033:0x7fe91439cdd9 [ 474.110621][T11082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.110636][T11082] RSP: 002b:00007fe915219028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 474.110654][T11082] RAX: ffffffffffffffda RBX: 00007fe914615fa0 RCX: 00007fe91439cdd9 [ 474.110667][T11082] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 474.110676][T11082] RBP: 00007fe915219090 R08: 0000000000000390 R09: 0000000000000000 [ 474.110688][T11082] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 474.110697][T11082] R13: 00007fe914616038 R14: 00007fe914615fa0 R15: 00007fe91473fa48 [ 474.110726][T11082] [ 474.423980][T11082] xt_helper: cannot load conntrack support for proto=10 [ 474.905714][ T5710] usb 8-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 474.913707][ T5710] usb 8-1: MIDIStreaming interface descriptor not found [ 475.054757][T11093] capability: warning: `syz.5.1413' uses 32-bit capabilities (legacy support in use) [ 475.269807][ T808] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 475.305396][ T5710] usb 8-1: USB disconnect, device number 12 [ 475.315789][ T808] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 475.346254][ T808] em28xx 2-1:0.132: No AC97 audio processor [ 475.423016][ T9293] udevd[9293]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 475.453063][ T808] usb 2-1: Decoder not found [ 475.480792][ T808] em28xx 2-1:0.132: failed to create media graph [ 475.515384][ T808] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 475.572738][ T808] em28xx 2-1:0.132: Remote control support is not available for this card. [ 475.628389][ T5682] em28xx 2-1:0.132: Closing input extension [ 475.672471][ T5682] em28xx 2-1:0.132: Freeing device [ 475.725094][T11075] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 475.832418][T11111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.920291][T11111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.063590][T11075] 8021q: adding VLAN 0 to HW filter on device bond1 [ 476.102814][T11075] 8021q: adding VLAN 0 to HW filter on device bond2 [ 476.285957][ T5717] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 476.464825][ T5717] usb 2-1: Using ep0 maxpacket: 32 [ 476.525266][ T5717] usb 2-1: unable to get BOS descriptor or descriptor too short [ 476.559898][ T5717] usb 2-1: config 1 has an invalid interface number: 255 but max is 2 [ 476.604363][ T5717] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 476.654067][ T5717] usb 2-1: config 1 has no interface number 2 [ 476.675246][ T5717] usb 2-1: config 1 interface 255 has no altsetting 0 [ 476.706361][ T5681] usb 3-1: USB disconnect, device number 89 [ 476.712492][ T5717] usb 2-1: config 1 interface 1 has no altsetting 0 [ 476.763888][ T5717] usb 2-1: New USB device found, idVendor=0582, idProduct=0009, bcdDevice= 0.40 [ 476.815755][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.847557][ T5717] usb 2-1: Product: syz [ 476.884888][ T5717] usb 2-1: Manufacturer: syz [ 476.911243][ T5717] usb 2-1: SerialNumber: syz [ 477.214309][ T5681] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 477.408621][ T5681] usb 3-1: Using ep0 maxpacket: 8 [ 477.424012][ T5717] usb 2-1: USB disconnect, device number 80 [ 477.433754][ T5681] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 477.472195][ T5681] usb 3-1: config 179 has no interface number 0 [ 477.508573][ T5681] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 477.590932][ T5681] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 477.596591][ T9064] udevd[9064]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 477.662467][ T5681] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 477.733855][ T5681] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 477.787927][ T5681] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 477.793801][T11131] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1423'. [ 477.825382][T11131] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1423'. [ 477.855574][ T5681] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 477.946501][ T5681] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.007823][T11118] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 478.410909][T11145] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1425'. [ 479.040539][ T808] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input32 [ 479.446526][ T24] bridge0: entered promiscuous mode [ 479.681417][T11154] xt_CT: You must specify a L4 protocol and not use inversions on it [ 480.833027][T11170] netlink: 'syz.7.1433': attribute type 1 has an invalid length. [ 480.851939][ T5681] usb 3-1: USB disconnect, device number 90 [ 480.852010][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 480.852062][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 480.951651][T11176] EXT4-fs: Conflicting test_dummy_encryption options [ 481.029998][T11180] binder: BINDER_SET_CONTEXT_MGR already set [ 481.047194][T11170] bond1: entered promiscuous mode [ 481.073579][T11180] binder: 11173:11180 ioctl 4018620d 200000000240 returned -16 [ 481.084788][T11170] 8021q: adding VLAN 0 to HW filter on device bond1 [ 481.141057][T11179] netem: incorrect gi model size [ 481.196327][T11179] netem: change failed [ 481.451031][T11189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.465858][T11190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.485418][T11189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.525949][T11191] tipc: Started in network mode [ 481.555592][T11191] tipc: Node identity c6472f401e96, cluster identity 4711 [ 481.564731][T11191] tipc: Enabled bearer , priority 0 [ 481.598777][T11191] syzkaller0: entered promiscuous mode [ 481.604373][T11190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.614690][T11190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.632835][T11191] syzkaller0: entered allmulticast mode [ 481.666284][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 481.666301][ T30] audit: type=1326 audit(1777320012.175:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11196 comm="syz.1.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a1b9cdd9 code=0x7ffc0000 [ 481.773272][ T30] audit: type=1326 audit(1777320012.175:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11196 comm="syz.1.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a1b9cdd9 code=0x7ffc0000 [ 481.808535][T11191] tipc: Resetting bearer [ 481.829564][T11191] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1437'. [ 481.847805][ T30] audit: type=1326 audit(1777320012.215:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11196 comm="syz.1.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe8a1b9cdd9 code=0x7ffc0000 [ 481.872864][ T5682] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 481.999238][ T30] audit: type=1326 audit(1777320012.215:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11196 comm="syz.1.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a1b9cdd9 code=0x7ffc0000 [ 482.088309][ T5682] usb 3-1: Using ep0 maxpacket: 16 [ 482.100942][ T30] audit: type=1326 audit(1777320012.215:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11196 comm="syz.1.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a1b9cdd9 code=0x7ffc0000 [ 482.133315][ T5682] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 482.163687][ T5682] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.189260][T11187] tipc: Resetting bearer [ 482.204420][ T808] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 482.245779][ T5682] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.260086][ T30] audit: type=1326 audit(1777320012.215:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11196 comm="syz.1.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe8a1b9cdd9 code=0x7ffc0000 [ 482.318870][ T5682] usb 3-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 482.334601][T11187] tipc: Disabling bearer [ 482.347350][ T5682] usb 3-1: config 7 interface 0 has no altsetting 0 [ 482.354303][ T30] audit: type=1326 audit(1777320012.255:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11196 comm="syz.1.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a1b9cdd9 code=0x7ffc0000 [ 482.380904][ T5682] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 482.391155][ T5682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.404870][ T30] audit: type=1326 audit(1777320012.255:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11196 comm="syz.1.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a1b9cdd9 code=0x7ffc0000 [ 482.431591][ T808] usb 7-1: Using ep0 maxpacket: 8 [ 482.450367][ T808] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 482.479726][ T808] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 482.495172][ T30] audit: type=1326 audit(1777320012.255:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11196 comm="syz.1.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe8a1b9cdd9 code=0x7ffc0000 [ 482.529351][ T808] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 52064, setting to 1024 [ 482.567562][ T808] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 482.593256][ T30] audit: type=1326 audit(1777320012.255:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11196 comm="syz.1.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a1b9cdd9 code=0x7ffc0000 [ 482.626419][ T808] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 482.640388][ T808] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 482.705857][ T808] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.865816][T11194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.890147][T11194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.916132][T11221] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 482.971106][ T808] usb 7-1: GET_CAPABILITIES returned 0 [ 482.981850][ T808] usbtmc 7-1:16.0: can't read capabilities [ 482.988067][ T5619] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 483.157618][ T5619] usb 8-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 483.193612][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 483.220781][ T5619] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.231907][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 483.241025][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 483.250125][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 483.259175][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 483.353450][ T5619] usb 8-1: selecting invalid altsetting 3 [ 483.366826][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 483.375953][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 483.385048][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 483.394124][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 483.500969][ T5619] comedi comedi5: could not set alternate setting 3 in high speed [ 483.538755][ T5619] usbduxsigma 8-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 483.564966][ T5619] usbduxsigma 8-1:128.0: probe with driver usbduxsigma failed with error -22 [ 483.589434][ T5619] usb 8-1: USB disconnect, device number 13 [ 483.631779][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 483.642783][T11221] netlink: 'syz.5.1444': attribute type 21 has an invalid length. [ 483.662397][T11194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.672574][T11221] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1444'. [ 483.690737][T11194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.700994][T11221] netlink: 'syz.5.1444': attribute type 4 has an invalid length. [ 483.709590][T11221] netlink: 'syz.5.1444': attribute type 3 has an invalid length. [ 483.719677][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 483.728783][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 483.737867][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 483.783016][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 483.792142][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 483.801217][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 483.810276][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 483.853312][ T5682] usbhid 3-1:7.0: can't add hid device: -71 [ 483.871892][ T5682] usbhid 3-1:7.0: probe with driver usbhid failed with error -71 [ 483.885497][T11221] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1444'. [ 483.925138][ T5682] usb 3-1: USB disconnect, device number 91 [ 483.959787][ T5619] usb 7-1: USB disconnect, device number 29 [ 484.212299][T11230] bond1: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 484.279307][T11230] bond1 (unregistering): Released all slaves [ 484.323418][T11238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.390009][T11238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.544460][ T5682] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 484.876711][ T5619] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 485.073753][ T5619] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 485.099018][ T5619] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 485.138176][ T5619] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 485.163869][ T5619] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.197025][ T5682] usb 8-1: device descriptor read/64, error -71 [ 485.423026][T11243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.432985][ T5619] usb 2-1: GET_CAPABILITIES returned 0 [ 485.451181][ T5619] usbtmc 2-1:16.0: can't read capabilities [ 485.464808][ T5682] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 485.485006][T11243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.608302][ T5619] usb 2-1: USB disconnect, device number 81 [ 485.647194][ T5682] usb 8-1: device descriptor read/64, error -71 [ 485.784644][ T5682] usb usb8-port1: attempt power cycle [ 485.830056][T11272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1459'. [ 485.876903][T11271] Cannot find set identified by id 0 to match [ 486.244217][ T5682] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 486.298474][T11274] cifs: Unknown parameter 'ђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџ [ 486.308198][ T5682] usb 8-1: device descriptor read/8, error -71 [ 486.506975][T11276] program syz.1.1460 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 486.848435][T11278] bond1: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 486.925158][ T5682] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 486.962132][T11278] bond1 (unregistering): Released all slaves [ 486.980904][ T5682] usb 8-1: device descriptor read/8, error -71 [ 486.990283][T11281] FAULT_INJECTION: forcing a failure. [ 486.990283][T11281] name failslab, interval 1, probability 0, space 0, times 0 [ 487.044342][T11281] CPU: 1 UID: 0 PID: 11281 Comm: syz.5.1462 Tainted: G L syzkaller #0 PREEMPT(full) [ 487.044361][T11281] Tainted: [L]=SOFTLOCKUP [ 487.044365][T11281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 487.044371][T11281] Call Trace: [ 487.044376][T11281] [ 487.044381][T11281] dump_stack_lvl+0xe8/0x150 [ 487.044397][T11281] should_fail_ex+0x412/0x560 [ 487.044414][T11281] should_failslab+0xa8/0x100 [ 487.044429][T11281] ? __proc_create+0x535/0xa60 [ 487.044450][T11281] kmem_cache_alloc_noprof+0x87/0x650 [ 487.044487][T11281] __proc_create+0x535/0xa60 [ 487.044502][T11281] ? rcu_is_watching+0x15/0xb0 [ 487.044515][T11281] ? __pfx___proc_create+0x10/0x10 [ 487.044530][T11281] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 487.044545][T11281] ? kstrdup+0x81/0x100 [ 487.044556][T11281] proc_create_seq_private+0xa8/0x1e0 [ 487.044574][T11281] htable_create+0x3fa/0x7a0 [ 487.044592][T11281] hashlimit_mt_check_common+0x719/0xa10 [ 487.044610][T11281] hashlimit_mt_check_v1+0x236/0x380 [ 487.044623][T11281] ? trace_contention_end+0x3d/0x140 [ 487.044637][T11281] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 487.044653][T11281] ? xt_find_match+0x20c/0x260 [ 487.044669][T11281] xt_check_match+0x4f1/0xc50 [ 487.044684][T11281] ? __pfx_xt_check_match+0x10/0x10 [ 487.044704][T11281] ? xt_find_match+0x20c/0x260 [ 487.044720][T11281] translate_table+0x1547/0x20b0 [ 487.044740][T11281] ? __pfx_translate_table+0x10/0x10 [ 487.044749][T11281] ? __might_fault+0xaf/0x130 [ 487.044762][T11281] ? __might_fault+0xaf/0x130 [ 487.044783][T11281] ? _copy_from_user+0x94/0xb0 [ 487.044799][T11281] do_ip6t_set_ctl+0x9fe/0xe10 [ 487.044810][T11281] ? rcu_is_watching+0x15/0xb0 [ 487.044822][T11281] ? trace_contention_end+0x3d/0x140 [ 487.044835][T11281] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 487.044854][T11281] ? __pfx___mutex_lock+0x10/0x10 [ 487.044866][T11281] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 487.044881][T11281] ? __pfx_aa_sk_perm+0x10/0x10 [ 487.044896][T11281] nf_setsockopt+0x26f/0x290 [ 487.044912][T11281] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 487.044924][T11281] do_sock_setsockopt+0x17c/0x1b0 [ 487.044938][T11281] __x64_sys_setsockopt+0x13d/0x1b0 [ 487.044951][T11281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.044962][T11281] do_syscall_64+0x15f/0xf80 [ 487.044973][T11281] ? trace_irq_disable+0x3b/0x140 [ 487.044987][T11281] ? clear_bhb_loop+0x40/0x90 [ 487.044999][T11281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.045009][T11281] RIP: 0033:0x7f732599cdd9 [ 487.045020][T11281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.045028][T11281] RSP: 002b:00007f732684c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 487.045039][T11281] RAX: ffffffffffffffda RBX: 00007f7325c15fa0 RCX: 00007f732599cdd9 [ 487.045046][T11281] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 487.045052][T11281] RBP: 00007f732684c090 R08: 0000000000000390 R09: 0000000000000000 [ 487.045058][T11281] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000002 [ 487.045064][T11281] R13: 00007f7325c16038 R14: 00007f7325c15fa0 R15: 00007f7325d3fa48 [ 487.045079][T11281] [ 487.137535][ T5682] usb usb8-port1: unable to enumerate USB device [ 487.802927][T11288] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.841694][T11287] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1465'. [ 487.900597][T11288] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 488.159877][ T4942] Bluetooth: hci1: command 0x0406 tx timeout [ 488.314751][ T5690] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 488.371442][T11298] loop4: detected capacity change from 0 to 7 [ 488.391296][T11298] Dev loop4: unable to read RDB block 7 [ 488.408612][T11298] loop4: unable to read partition table [ 488.422399][T11298] loop4: partition table beyond EOD, truncated [ 488.447650][T11298] loop_reread_partitions: partition scan of loop4 (ўшЂЋxќ—ŸбрЖ ) failed (rc=-5) [ 488.484518][ T5690] usb 8-1: Using ep0 maxpacket: 32 [ 488.506159][ T5690] usb 8-1: config 0 has an invalid interface number: 119 but max is 0 [ 488.532551][ T5690] usb 8-1: config 0 has no interface number 0 [ 488.563551][ T5690] usb 8-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 488.594197][ T5690] usb 8-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 488.638031][ T5690] usb 8-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 488.641579][T11305] sctp: [Deprecated]: syz.6.1470 (pid 11305) Use of int in maxseg socket option. [ 488.641579][T11305] Use struct sctp_assoc_value instead [ 488.674210][ T5690] usb 8-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 488.727194][ T5690] usb 8-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 488.746623][ T5690] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.774457][ T5690] usb 8-1: Product: syz [ 488.784682][ T5690] usb 8-1: Manufacturer: syz [ 488.804470][ T5690] usb 8-1: SerialNumber: syz [ 488.827233][ T5690] usb 8-1: config 0 descriptor?? [ 488.845216][T11290] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 488.873024][ T5690] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.119/input/input33 [ 488.903086][T11309] loop6: detected capacity change from 0 to 2640 [ 488.910697][ T4977] usb 8-1: BOGUS urb xfer, pipe 1 != type 3 [ 488.936478][T11309] Buffer I/O error on dev loop6, logical block 0, async page read [ 488.965358][T11309] Buffer I/O error on dev loop6, logical block 0, async page read [ 488.988365][T11314] fuse: Bad value for 'fd' [ 489.034519][T11315] Buffer I/O error on dev loop6, logical block 0, async page read [ 489.079520][ C0] bcm5974 8-1:0.119: trackpad urb failed: -19 [ 489.085792][ T5682] usb 8-1: USB disconnect, device number 18 [ 489.156713][T11309] Buffer I/O error on dev loop6, logical block 0, async page read [ 489.196046][T11315] Buffer I/O error on dev loop6, logical block 0, async page read [ 489.235525][T11309] Buffer I/O error on dev loop6, logical block 0, async page read [ 489.264575][T11309] Buffer I/O error on dev loop6, logical block 0, async page read [ 489.290738][T11309] Buffer I/O error on dev loop6, logical block 0, async page read [ 489.315739][T11309] Buffer I/O error on dev loop6, logical block 0, async page read [ 489.340089][T11309] Buffer I/O error on dev loop6, logical block 0, async page read [ 489.370700][T11309] ldm_validate_partition_table(): Disk read failed. [ 489.396805][T11309] Dev loop6: unable to read RDB block 0 [ 489.414955][T11309] loop6: unable to read partition table [ 489.428543][T11309] loop_reread_partitions: partition scan of loop6 (3Ÿ О‚Г˜) failed (rc=-5) [ 489.744217][ T5690] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 489.820655][T11319] xt_CT: You must specify a L4 protocol and not use inversions on it [ 489.943146][ T5690] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 489.971751][ T5690] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.001293][ T5690] usb 7-1: Product: syz [ 490.056730][ T5690] usb 7-1: Manufacturer: syz [ 490.108613][ T5690] usb 7-1: SerialNumber: syz [ 490.127349][ T5690] usb 7-1: config 0 descriptor?? [ 490.188531][ T5690] hub 7-1:0.0: bad descriptor, ignoring hub [ 490.218593][ T5690] hub 7-1:0.0: probe with driver hub failed with error -5 [ 490.236999][T11328] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 490.444778][ T5682] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 490.472773][T11328] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1475'. [ 490.656330][ T5682] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.729911][ T5682] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 490.845556][ T5682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.977279][T11334] loop4: detected capacity change from 0 to 7 [ 490.992950][ T5682] usb 3-1: config 0 descriptor?? [ 491.022320][T11334] Dev loop4: unable to read RDB block 7 [ 491.042817][ T5682] pwc: Askey VC010 type 2 USB webcam detected. [ 491.074401][T11334] loop4: unable to read partition table [ 491.114769][ T24] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 491.131792][T11334] loop4: partition table beyond EOD, truncated [ 491.220389][T11334] loop_reread_partitions: partition scan of loop4 (ўшЂЋxќ—ŸбрЖ ) failed (rc=-5) [ 491.247400][ T5682] pwc: send_video_command error -71 [ 491.294759][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 491.300048][ T5682] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 491.339361][ T24] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.341918][ T5682] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 491.414386][ T24] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.493545][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 491.495720][ T5682] usb 3-1: USB disconnect, device number 92 [ 491.564254][ T24] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 491.615396][ T24] usb 2-1: Product: syz [ 491.638340][ T24] usb 2-1: Manufacturer: syz [ 491.693047][ T24] hub 2-1:4.0: USB hub found [ 491.886684][ T24] hub 2-1:4.0: 2 ports detected [ 491.904310][ T5682] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 492.078133][ T5682] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 492.118823][ T5682] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 492.153850][ T5682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.233669][ T5682] usb 3-1: config 0 descriptor?? [ 492.286737][ T5682] pwc: Askey VC010 type 2 USB webcam detected. [ 492.474657][ T31] INFO: task syz.3.951:9346 blocked for more than 143 seconds. [ 492.501448][ T31] Tainted: G L syzkaller #0 [ 492.538264][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 492.582019][ T31] task:syz.3.951 state:D stack:26584 pid:9346 tgid:9345 ppid:5639 task_flags:0x400040 flags:0x00080002 [ 492.676366][ T31] Call Trace: [ 492.698039][ T31] [ 492.720623][ T31] __schedule+0x17b4/0x5680 [ 492.748813][ T31] ? __pfx___schedule+0x10/0x10 [ 492.774359][ T31] ? schedule+0x90/0x360 [ 492.782165][ T31] schedule+0x164/0x360 [ 492.787577][ T31] schedule_preempt_disabled+0x13/0x30 [ 492.793475][ T31] __mutex_lock+0x7f7/0x1550 [ 492.802086][ T31] ? __mutex_lock+0x608/0x1550 [ 492.808578][ T31] ? usbdev_open+0x182/0x770 [ 492.813357][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 492.823865][ T31] ? bus_find_device+0x27d/0x2d0 [ 492.829888][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 492.838117][ T31] ? usbdev_open+0xa7/0x770 [ 492.843279][ T31] ? __kmalloc_cache_noprof+0x15b/0x660 [ 492.849485][ T31] usbdev_open+0x182/0x770 [ 492.860609][ T31] ? kobject_get_unless_zero+0x167/0x1f0 [ 492.868743][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 492.874016][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 492.882083][ T31] chrdev_open+0x4cd/0x5e0 [ 492.888112][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 492.893266][ T31] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 492.898896][T11332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.944622][T11332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.946265][ T5682] pwc: recv_control_msg error -32 req 02 val 2700 [ 492.959582][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 492.974908][ T31] do_dentry_open+0x785/0x14e0 [ 492.990256][ T31] vfs_open+0x3b/0x340 [ 492.999539][ T5682] pwc: recv_control_msg error -32 req 02 val 2c00 [ 493.015093][ T31] ? path_openat+0x2df0/0x3860 [ 493.026766][ T5682] pwc: recv_control_msg error -32 req 04 val 1000 [ 493.037280][ T31] path_openat+0x2e08/0x3860 [ 493.044501][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 493.049374][ T5682] pwc: recv_control_msg error -32 req 04 val 1300 [ 493.068444][ T31] ? stack_depot_save_flags+0x33/0x810 [ 493.088731][ T31] ? __pfx_path_openat+0x10/0x10 [ 493.108119][ T31] ? __x64_sys_openat+0x138/0x170 [ 493.129400][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 493.152453][ T31] do_file_open+0x23e/0x4a0 [ 493.169679][ T31] ? __pfx_do_file_open+0x10/0x10 [ 493.192296][ T31] ? _raw_spin_unlock+0x28/0x50 [ 493.206212][ T24] hub 2-1:4.0: activate --> -90 [ 493.215760][ T31] ? alloc_fd+0x64b/0x6c0 [ 493.231781][ T31] do_sys_openat2+0x113/0x200 [ 493.250323][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 493.269487][ T31] ? exc_page_fault+0x6a/0xc0 [ 493.288273][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 493.306667][ T31] __x64_sys_openat+0x138/0x170 [ 493.334828][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.358282][ T31] do_syscall_64+0x15f/0xf80 [ 493.372605][ T31] ? trace_irq_disable+0x3b/0x140 [ 493.388397][ T31] ? clear_bhb_loop+0x40/0x90 [ 493.404449][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.422280][ T31] RIP: 0033:0x7fd7c815d60e [ 493.436803][ T31] RSP: 002b:00007fd7c8fc6b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 493.463998][ T31] RAX: ffffffffffffffda RBX: 00007fd7c8fc76c0 RCX: 00007fd7c815d60e [ 493.489254][ T31] RDX: 0000000000000002 RSI: 00007fd7c8fc6c00 RDI: ffffffffffffff9c [ 493.515165][ T31] RBP: 00007fd7c8fc6c00 R08: 0000000000000000 R09: 0000000000000000 [ 493.543068][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 493.567308][ T31] R13: 00007fd7c8416038 R14: 00007fd7c8415fa0 R15: 00007fd7c853fa48 [ 493.593673][ T31] [ 493.605503][ T31] [ 493.605503][ T31] Showing all locks held in the system: [ 493.630226][ T31] 2 locks held by kworker/0:1/10: [ 493.647507][ T31] 5 locks held by kworker/1:0/24: [ 493.664444][ T31] #0: ffff888021ac6540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 493.702469][ T31] #1: ffffc900001e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 493.743466][ T31] #2: ffff8880551bf1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 493.780055][ T31] #3: ffff88801e795568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x631/0x4f30 [ 493.811680][ T31] #4: ffff888029293090 (&hub->status_mutex){+.+.}-{4:4}, at: hub_ext_port_status+0x53/0x820 [ 493.851193][ T31] 6 locks held by kworker/1:1/29: [ 493.867465][ T31] 1 lock held by khungtaskd/31: [ 493.882958][ T31] #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 493.917059][ T31] 2 locks held by getty/5381: [ 493.932161][ T31] #0: ffff888031e1e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 493.967037][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 493.996495][ T24] hub 2-1:4.0: hub_ext_port_status failed (err = -71) [ 493.998420][ T5681] usb 2-1: USB disconnect, device number 82 [ 494.009771][ T31] 3 locks held by kworker/0:4/5619: [ 494.009791][ T31] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 494.066680][ T31] #1: ffffc90003d07c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 494.103008][ T31] #2: ffffffff8e963068 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 494.151366][ T31] 3 locks held by kworker/0:5/5681: [ 494.184748][ T31] #0: ffff888021ac6540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 494.216589][ T5682] pwc: recv_control_msg error -71 req 04 val 1400 [ 494.217688][ T31] #1: ffffc90004117c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 494.243689][ T5682] pwc: recv_control_msg error -71 req 02 val 2000 [ 494.278302][ T31] #2: ffff88802a24c1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 494.281221][ T5682] pwc: recv_control_msg error -71 req 02 val 2100 [ 494.300154][ T5682] pwc: recv_control_msg error -71 req 04 val 1500 [ 494.306723][ T31] 8 locks held by kworker/0:6/5682: [ 494.306743][ T31] 5 locks held by kworker/1:4/5690: [ 494.306754][ T31] #0: ffff888021ac6540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 494.313675][ T5682] pwc: recv_control_msg error -71 req 02 val 2500 [ 494.341208][ T5682] pwc: recv_control_msg error -71 req 02 val 2400 [ 494.342127][ T31] #1: [ 494.348436][ T5682] pwc: recv_control_msg error -71 req 02 val 2600 [ 494.359296][ T5682] pwc: recv_control_msg error -71 req 02 val 2900 [ 494.364639][ T31] ffffc900041a7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 494.368559][ T5682] pwc: recv_control_msg error -71 req 02 val 2800 [ 494.385965][ T5682] pwc: recv_control_msg error -71 req 04 val 1100 [ 494.393769][ T5682] pwc: recv_control_msg error -71 req 04 val 1200 [ 494.412209][ T31] #2: ffff88802a49b1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 494.415530][ T5682] pwc: Registered as video103. [ 494.444500][ T31] #3: ffff88807ddd91d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 494.456834][ T5682] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input34 [ 494.484470][ T31] #4: ffff88807a00b1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 494.495432][ T5682] usb 3-1: USB disconnect, device number 93 [ 494.514363][ T31] 4 locks held by udevd/9064: [ 494.546858][ T31] #0: ffff8880634eeab8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 494.577536][ T31] #1: ffff8880335b1c80 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 494.604347][ T31] #2: ffff888033a01e18 (kn->active#26){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 494.615642][ T31] #3: ffff88807ddd91d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 494.627102][ T31] 1 lock held by syz.3.951/9346: [ 494.632169][ T31] #0: ffff88802a47b1d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 494.643130][ T31] 1 lock held by syz.4.1097/9926: [ 494.648485][ T31] #0: ffff88802a47b1d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 494.658123][ T31] 1 lock held by syz.6.1473/11313: [ 494.663336][ T31] #0: ffffffff8e962f38 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 494.677930][ T31] 2 locks held by dhcpcd/11351: [ 494.682924][ T31] #0: ffff888032f08260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 494.692773][ T31] #1: ffffffff8e963068 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 494.707460][ T31] [ 494.718333][ T5690] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 494.760313][ T31] ============================================= [ 494.760313][ T31] [ 494.798699][ T31] NMI backtrace for cpu 0 [ 494.798719][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 494.798743][ T31] Tainted: [L]=SOFTLOCKUP [ 494.798749][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 494.798759][ T31] Call Trace: [ 494.798766][ T31] [ 494.798774][ T31] dump_stack_lvl+0xe8/0x150 [ 494.798804][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 494.798830][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 494.798851][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 494.798879][ T31] sys_info+0x135/0x170 [ 494.798900][ T31] watchdog+0xfd3/0x1030 [ 494.798931][ T31] ? watchdog+0x1c9/0x1030 [ 494.798961][ T31] kthread+0x388/0x470 [ 494.798984][ T31] ? __pfx_watchdog+0x10/0x10 [ 494.799006][ T31] ? __pfx_kthread+0x10/0x10 [ 494.799029][ T31] ret_from_fork+0x514/0xb70 [ 494.799050][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 494.799072][ T31] ? __switch_to+0xc79/0x1410 [ 494.799100][ T31] ? __pfx_kthread+0x10/0x10 [ 494.799124][ T31] ret_from_fork_asm+0x1a/0x30 [ 494.799158][ T31] [ 494.799184][ T31] Sending NMI from CPU 0 to CPUs 1: [ 494.880025][ T5690] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 494.881818][ C1] NMI backtrace for cpu 1 [ 494.881835][ C1] CPU: 1 UID: 0 PID: 5690 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 494.881856][ C1] Tainted: [L]=SOFTLOCKUP [ 494.881862][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 494.881872][ C1] Workqueue: usb_hub_wq hub_event [ 494.881893][ C1] RIP: 0010:format_decode+0x52b/0xe10 [ 494.881916][ C1] Code: 21 f6 49 89 ec 49 ff c4 4c 89 e0 48 c1 e8 03 48 ba 00 00 00 00 00 fc ff df 0f b6 04 10 84 c0 4c 8b 74 24 18 0f 85 cd 05 00 00 <41> 0f b6 04 24 4c 8d 2c 85 60 b4 0b 8d 44 0f b6 fb 41 c1 e7 08 4c [ 494.881928][ C1] RSP: 0018:ffffc900041a60d0 EFLAGS: 00000293 [ 494.881942][ C1] RAX: 0000000000000005 RBX: 0000000000000008 RCX: 000000008bcd8302 [ 494.881954][ C1] RDX: dffffc0000000000 RSI: 0000000000000075 RDI: 000000000000006c [ 494.881965][ C1] RBP: ffffffff8bcd83e9 R08: ffff88807706dc40 R09: 0000000000000002 [ 494.881976][ C1] R10: 0000000000000025 R11: 0000000000000002 R12: ffffffff8bcd83ea [ 494.881986][ C1] R13: 0000000000000075 R14: 0000000000000800 R15: 0000000000000008 [ 494.881996][ C1] FS: 0000000000000000(0000) GS:ffff888125393000(0000) knlGS:0000000000000000 [ 494.882009][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 494.882020][ C1] CR2: 0000000000000000 CR3: 00000000749a6000 CR4: 00000000003526f0 [ 494.882034][ C1] Call Trace: [ 494.882041][ C1] [ 494.882052][ C1] vsnprintf+0x102/0xee0 [ 494.882076][ C1] sprintf+0xe7/0x140 [ 494.882098][ C1] ? __pfx_sprintf+0x10/0x10 [ 494.882119][ C1] ? desc_read+0x179/0x410 [ 494.882140][ C1] info_print_prefix+0x16b/0x360 [ 494.882156][ C1] ? __pfx_info_print_prefix+0x10/0x10 [ 494.882170][ C1] ? _prb_read_valid+0xa95/0xab0 [ 494.882192][ C1] record_print_text+0x176/0x450 [ 494.882215][ C1] ? __pfx__prb_read_valid+0x10/0x10 [ 494.882233][ C1] ? __pfx_record_print_text+0x10/0x10 [ 494.882254][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 494.882275][ C1] printk_get_next_message+0x29c/0x880 [ 494.882299][ C1] ? __pfx_printk_get_next_message+0x10/0x10 [ 494.882319][ C1] ? ktime_get+0x45/0x220 [ 494.882339][ C1] ? lock_acquire+0x106/0x350 [ 494.882359][ C1] ? console_flush_all+0x123/0xb20 [ 494.882381][ C1] ? console_flush_all+0x4ac/0xb20 [ 494.882403][ C1] console_flush_all+0x501/0xb20 [ 494.882425][ C1] ? console_flush_all+0x123/0xb20 [ 494.882446][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 494.882468][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 494.882485][ C1] console_unlock+0xd1/0x1c0 [ 494.882503][ C1] ? vprintk_emit+0x2cf/0x560 [ 494.882521][ C1] ? __pfx_console_unlock+0x10/0x10 [ 494.882539][ C1] ? vprintk_emit+0x200/0x560 [ 494.882563][ C1] ? vprintk_emit+0x455/0x560 [ 494.882584][ C1] ? vprintk_emit+0x2cf/0x560 [ 494.882601][ C1] ? vprintk_emit+0x2cf/0x560 [ 494.882619][ C1] vprintk_emit+0x485/0x560 [ 494.882638][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 494.882661][ C1] _printk+0xdd/0x130 [ 494.882683][ C1] ? __pfx__printk+0x10/0x10 [ 494.882706][ C1] dvb_usb_download_firmware+0xf2/0x270 [ 494.882725][ C1] ? __pfx__printk+0x10/0x10 [ 494.882744][ C1] ? __pfx_dvb_usb_download_firmware+0x10/0x10 [ 494.882765][ C1] ? dib0700_identify_state+0xe6/0x140 [ 494.882783][ C1] dvb_usb_device_init+0xde2/0x2590 [ 494.882807][ C1] ? rcu_is_watching+0x15/0xb0 [ 494.882825][ C1] ? trace_rpm_return_int+0x83/0x200 [ 494.882847][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 494.882869][ C1] ? __pfx_dvb_usb_device_init+0x10/0x10 [ 494.882888][ C1] dib0700_probe+0xea/0x310 [ 494.882904][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 494.882922][ C1] ? __pfx_dib0700_probe+0x10/0x10 [ 494.882941][ C1] usb_probe_interface+0x659/0xc70 [ 494.882964][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 494.882981][ C1] really_probe+0x267/0xaf0 [ 494.883001][ C1] __driver_probe_device+0x1ef/0x380 [ 494.883020][ C1] driver_probe_device+0x4f/0x240 [ 494.883039][ C1] __device_attach_driver+0x279/0x430 [ 494.883058][ C1] bus_for_each_drv+0x258/0x2f0 [ 494.883079][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 494.883097][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 494.883118][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 494.883134][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 494.883151][ C1] __device_attach+0x2c5/0x450 [ 494.883169][ C1] ? __pfx___device_attach+0x10/0x10 [ 494.883188][ C1] ? _raw_spin_unlock+0x28/0x50 [ 494.883203][ C1] device_initial_probe+0xa1/0xd0 [ 494.883220][ C1] bus_probe_device+0x12a/0x220 [ 494.883242][ C1] device_add+0x7e9/0xbb0 [ 494.883260][ C1] usb_set_configuration+0x1a87/0x2110 [ 494.883288][ C1] usb_generic_driver_probe+0x8d/0x150 [ 494.883305][ C1] usb_probe_device+0x1c4/0x3b0 [ 494.883324][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 494.883340][ C1] really_probe+0x267/0xaf0 [ 494.883360][ C1] __driver_probe_device+0x1ef/0x380 [ 494.883379][ C1] driver_probe_device+0x4f/0x240 [ 494.883398][ C1] __device_attach_driver+0x279/0x430 [ 494.883417][ C1] bus_for_each_drv+0x258/0x2f0 [ 494.883438][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 494.883456][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 494.883476][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 494.883492][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 494.883509][ C1] __device_attach+0x2c5/0x450 [ 494.883526][ C1] ? __pfx___device_attach+0x10/0x10 [ 494.883549][ C1] ? _raw_spin_unlock+0x28/0x50 [ 494.883564][ C1] device_initial_probe+0xa1/0xd0 [ 494.883582][ C1] bus_probe_device+0x12a/0x220 [ 494.883604][ C1] device_add+0x7e9/0xbb0 [ 494.883621][ C1] usb_new_device+0xa08/0x16f0 [ 494.883648][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 494.883670][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 494.883686][ C1] hub_event+0x2a1c/0x4f30 [ 494.883701][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 494.883741][ C1] ? __pfx_hub_event+0x10/0x10 [ 494.883756][ C1] ? process_scheduled_works+0xa70/0x1860 [ 494.883776][ C1] ? process_scheduled_works+0xa70/0x1860 [ 494.883791][ C1] ? process_scheduled_works+0xa70/0x1860 [ 494.883807][ C1] process_scheduled_works+0xb5d/0x1860 [ 494.883835][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 494.883853][ C1] ? assign_work+0x3d5/0x5e0 [ 494.883870][ C1] worker_thread+0xa53/0xfc0 [ 494.883896][ C1] kthread+0x388/0x470 [ 494.883916][ C1] ? __pfx_worker_thread+0x10/0x10 [ 494.883930][ C1] ? __pfx_kthread+0x10/0x10 [ 494.883949][ C1] ret_from_fork+0x514/0xb70 [ 494.883966][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 494.883981][ C1] ? __switch_to+0xc79/0x1410 [ 494.884004][ C1] ? __pfx_kthread+0x10/0x10 [ 494.884022][ C1] ret_from_fork_asm+0x1a/0x30 [ 494.884047][ C1] [ 494.919168][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 494.919195][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 494.919221][ T31] Tainted: [L]=SOFTLOCKUP [ 494.919228][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 494.919239][ T31] Call Trace: [ 494.919248][ T31] [ 494.919257][ T31] vpanic+0x56c/0xa60 [ 494.919283][ T31] ? __pfx___schedule+0x10/0x10 [ 494.919303][ T31] ? __pfx_vpanic+0x10/0x10 [ 494.919332][ T31] panic+0xc5/0xd0 [ 494.919350][ T31] ? __pfx_panic+0x10/0x10 [ 494.919371][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 494.919401][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 494.919431][ T31] watchdog+0x102c/0x1030 [ 494.919462][ T31] ? watchdog+0x1c9/0x1030 [ 494.919492][ T31] kthread+0x388/0x470 [ 494.919516][ T31] ? __pfx_watchdog+0x10/0x10 [ 494.919538][ T31] ? __pfx_kthread+0x10/0x10 [ 494.919561][ T31] ret_from_fork+0x514/0xb70 [ 494.919584][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 494.919603][ T31] ? __switch_to+0xc79/0x1410 [ 494.919631][ T31] ? __pfx_kthread+0x10/0x10 [ 494.919654][ T31] ret_from_fork_asm+0x1a/0x30 [ 494.919688][ T31] [ 494.922630][ T31] Kernel Offset: disabled