last executing test programs: 9m22.932372746s ago: executing program 3 (id=331): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)="d8000000180081054e81f782db4cb9040a1d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8000900080008400400027c9c000461c1d67f6f94001600cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775010016a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920726f9a941", 0xd8}], 0x1}, 0x0) 9m22.707546637s ago: executing program 3 (id=332): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="382000001a000100000000000000000080000000", @ANYRES64], 0x38}}, 0x4840) 9m22.571641934s ago: executing program 3 (id=333): r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_ifreq(r0, 0x8923, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0xffffffffffffff8c, 0x3, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x4000)=nil, 0x7, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x24}) mmap$dsp(&(0x7f0000d96000/0x2000)=nil, 0x2000, 0x1, 0x1010, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x185, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x0, 0xe, 0x0, &(0x7f0000000200)="5c71f951c8c413551b2ac06c0800", 0x0, 0x0, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000000300)="1dc25645f4b230d1d8f005824c78ba746fd985a21b98b3e5e43365af3265c79d6c4ebbe9e141adc8175e5324bf3d689f7135bde2f706ee8025b986b0dcf5092de087fe86e34f9ec6f4b96b43cdd5dca80c626d7cba3c8fb772724a6221fde98137b0cf74b2ee3ebe28a1bfea19c38ee865b8a36e2b6246d04b36dfc8d05d1f30747c4b39e2b8391a66edd549000048bd110b093d9a764fc0c22a6bdc29ead4d876e60da144de739a924754a4bba218b74090874e0000003f5d65615630f39c92", 0x4}, 0x4c) 9m20.011747791s ago: executing program 3 (id=343): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r1 = io_uring_setup(0x1ec4, &(0x7f0000000640)={0x0, 0xfffffffe, 0x400, 0x400, 0x29e}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x1109, 0xfff, 0x9, 0xf8a, 0x6, "51d79e5f1388183ba842fcb558c5b72510b8e0"}) write$binfmt_aout(r2, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$int_in(r2, 0x5452, &(0x7f0000000340)=0x4) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, 0x0) syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00'], 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/vmstat\x00', 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000002c0)=r9) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xf, 0xb}, {0xd, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e22, @loopback}}, 0x0, 0x0, 0x27, 0x0, "a58fc096f806334033145c32b45013f5547000229e90bfdd2cbb775085438751fa41b217c492169b0cb51256adc3e5baedfa65fd3c4429b247e9dc51c16f89c5a42145bb09f23ab88b0bd564fd44893a"}, 0xd8) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000040)={@mcast1, r8}, 0x14) 9m16.898153961s ago: executing program 3 (id=354): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0xb, &(0x7f0000002e00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002120207b1a00fe00000000bfa10000000000000701000078ffffffb702000008000000b703000000000021850000005600000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 9m16.587664899s ago: executing program 3 (id=355): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x4c800) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002ec0), 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f8, 0x110, 0x110, 0x0, 0x310, 0x310, 0x310, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010100, @multicast2, 0x7, 0xffffffff}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffff00, 0x0, 0x10, 0xf, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x3, 0x6, 0x25, 0x9, 0x200, 0x3, 'virt_wifi0\x00', 'team_slave_0\x00', {}, {0xff}}, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @local, 0x2, 0xfffffffe}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x10b, 0x0, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0xffffffffffffffe5) r4 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb", 0x5, 0xfffffffffffffffb) unshare(0x4000400) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r5, 0xd2a727af3cb3995f, &(0x7f0000000900)}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0500000000f01f00060000007f00002001", @ANYRES32, @ANYBLOB="2300000000000000ab2efe680e5ab17e9900000022e178fefb3cc518d81752c1854f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) pselect6(0x40, &(0x7f0000000680)={0x3, 0x9, 0xc0000000, 0x40, 0x3, 0x1ff, 0x5, 0x8}, &(0x7f00000006c0)={0xaa4300000000000, 0x9, 0x2, 0xc52, 0x0, 0xfffffffffffffffe, 0x50e, 0x9f}, &(0x7f0000000700)={0x200, 0x4, 0x8, 0x7, 0x8, 0x8, 0xe0, 0x2}, &(0x7f0000000740)={0x77359400}, &(0x7f00000007c0)={&(0x7f0000000780)={[0x2]}, 0x8}) keyctl$revoke(0x3, r4) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000500)={'broute\x00', 0x0, 0x0, 0x0, [0x1000, 0xfffffffffffffbff, 0x8, 0xfb, 0x6, 0xffff]}, &(0x7f0000000580)=0x78) add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0, r4) 9m16.055495002s ago: executing program 32 (id=355): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x4c800) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002ec0), 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f8, 0x110, 0x110, 0x0, 0x310, 0x310, 0x310, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010100, @multicast2, 0x7, 0xffffffff}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffff00, 0x0, 0x10, 0xf, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x3, 0x6, 0x25, 0x9, 0x200, 0x3, 'virt_wifi0\x00', 'team_slave_0\x00', {}, {0xff}}, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @local, 0x2, 0xfffffffe}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x10b, 0x0, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0xffffffffffffffe5) r4 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb", 0x5, 0xfffffffffffffffb) unshare(0x4000400) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r5, 0xd2a727af3cb3995f, &(0x7f0000000900)}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0500000000f01f00060000007f00002001", @ANYRES32, @ANYBLOB="2300000000000000ab2efe680e5ab17e9900000022e178fefb3cc518d81752c1854f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) pselect6(0x40, &(0x7f0000000680)={0x3, 0x9, 0xc0000000, 0x40, 0x3, 0x1ff, 0x5, 0x8}, &(0x7f00000006c0)={0xaa4300000000000, 0x9, 0x2, 0xc52, 0x0, 0xfffffffffffffffe, 0x50e, 0x9f}, &(0x7f0000000700)={0x200, 0x4, 0x8, 0x7, 0x8, 0x8, 0xe0, 0x2}, &(0x7f0000000740)={0x77359400}, &(0x7f00000007c0)={&(0x7f0000000780)={[0x2]}, 0x8}) keyctl$revoke(0x3, r4) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000500)={'broute\x00', 0x0, 0x0, 0x0, [0x1000, 0xfffffffffffffbff, 0x8, 0xfb, 0x6, 0xffff]}, &(0x7f0000000580)=0x78) add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0, r4) 7.731500957s ago: executing program 5 (id=2776): socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xd7) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000100001002bbd7000f4dbdf250000", @ANYRES32=0x0, @ANYBLOB="00000000080002000000000004001680"], 0x38}}, 0x40) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = fcntl$dupfd(r5, 0x0, r6) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad"], 0x50}}, 0x4008840) sendto(r7, 0x0, 0x0, 0x800, &(0x7f0000000100)=@hci={0x1f, 0x1, 0x3}, 0x80) sendmmsg$inet_sctp(r4, &(0x7f0000003f40), 0x0, 0x200000d0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) 7.174134039s ago: executing program 2 (id=2779): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000380)={0x0, r2, r1}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d7dda4108911930800000102030109022400020000000009046802006e02c0000904680001253e5300090508"], 0x0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x10, 0xf0, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x7, 0x1, 0x0, 0x1e, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0xa, 0x0, 0x5}}}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0xa, 0x7, 0xe, 0x40, 0x2}, 0x44, &(0x7f00000000c0)={0x5, 0xf, 0x44, 0x6, [@ptm_cap={0x3}, @generic={0x20, 0x10, 0x1, "eb529815b3f5eff740671246d69c257cb7187196d63a8f81de45a24a78"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0xc, 0x8000}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0x8, 0x7f}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0xf, 0x81, 0x9, 0x8}]}, 0xa, [{0x30, &(0x7f0000000140)=@string={0x30, 0x3, "f3265f98367ef237626872fd2f076b559a26f0d72d47d295c4169442ebc18ab06029334429bce73050afae73b7db"}}, {0xd4, &(0x7f0000000180)=@string={0xd4, 0x3, "ff17a1a116b123934ca6f81ae9738535a0a8acfd2c8d64c39bc73845d9b35e646d89cbcc32d4bf403e3aa720c629cd4869f2ea77fc0ab4b27ec0637a5500a5b80f72fdbc452284a84c34d48e13bc9dc5e0046a32a89a21509d823b1644f13fc0330bc8ce594d881406b8164655bd11cbc0102f85cd0dc8581e988a9d375d291206d663bd1d9843f6800e246ccf1da696e1786831d33030bef2dd1b0a9e1a5f2ac355d132e152d51abf368b74442af487b88bb2123562ba46e6ed6fec88c719422b1cbc635b293f6e3330901bc673cbe572d9"}}, {0x3d, &(0x7f0000000280)=@string={0x3d, 0x3, "5df35b55d79ed3e8754204293ce08b8d94d28a43a62ef021a649b49931e4af8eeb4e880f8e0a373bb70df1d95095890f127e3dc32a198f2969ca3e"}}, {0xe8, &(0x7f00000002c0)=@string={0xe8, 0x3, "7f9e44b290e3405546d970eb9ebc283eddbc3042d42fa8703abb48cc07491fd61d9eeaaae30fc8eabcb7d6fed57c837a3fd22f084b7a252a75481c44c5edffd51d6ebc52ac8680c35ce0350dea3fec0717458ff7fbef19de147584d246c7496723df4f11f07717d1a73e23a216864a45589465ffdc0973e3ed9ceba5f938366ea5960e889d6fc3f6b5b21396c1ca8a286d40e3ec3037a965de44ca886f1d34ebeaceb52683b4ac3c3b5d54b02eca4ed4511c207df1cbce6963ba028476a109d25403c7a47c1613f3cf7ed33c73c01bc464f10f708f4efaf7e6c0b3a8c90c2a919eb558896243"}}, {0x85, &(0x7f00000004c0)=@string={0x85, 0x3, "09e71a57b4f6dd523a086288e5d590cc30a3df31830a9fed7c58622201249a3c0cc49b986f55994768031a61cc5fb3190860745b4438fc2ee673be2e262b32eef7ad8ba3b5850c2a8ce9bd5b77119221c366d63b1f0bb563058c323978a4b0a2df7ed4d0af4e7d4b9e4050051a868aa55e8770d81945603a9a289a9e213bfdc318f8e0"}}, {0x81, &(0x7f0000000580)=@string={0x81, 0x3, "609aa8eb1cbcdfbad96b9c9b590d88d7ba1d463f5bebdbc6f07cfa3121776a99ea0c99e1bda649f1a3e4fb7b40c577fd4b8cda7e3c92a6f2e9a7beb44ff5e16f3a1ebfa10ee500536328347399bda9d547e60410a3f0dab6410d190ea9ad24ba3c92e58a1ce24551d540ccce8d3789cff75845f2baa7458388949c161b9013"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x419}}, {0x6a, &(0x7f0000000640)=@string={0x6a, 0x3, "03e1cb80dc502bb11bf1b9d9328328867b7e056c7fe2f2a59543ad8eb96dc6506bca8891fce2fc0134ff105b4b01a217ef7f9280ef0920c0c453b8363eb02cbad8a433dfefd6692ffe55236190306675f7ba7b75518fd3f02bef61b6816dd3225303781f8839946b"}}, {0x11, &(0x7f0000000400)=@string={0x11, 0x3, "298f096b7fa00402171199fe16229c"}}, {0xc9, &(0x7f00000006c0)=@string={0xc9, 0x3, "5b7a0824740fa46096eaf1d94e762b18221c1c6a690cc707852c63032055e778e94a008ce01dbd53602b24c92841b4d47293126db620eea361c881ea3b57e984c72732e37d5be017f8d87d8a9661ecc5a4368f725ce8dea7cf9bcc5e1a992e3d51b80e8c6984c50103bf07cd1306fbc3807bc973e624a8870f418ff962a4058668e585f4cdda1df9d15f393d37c7b91619f4bf505a246825db0d7d3d24939815ca79fc5340959b6fa26d3f2d6ec550b3afcc9ffda215b95a21feaef571b1306c66503efcb5d51a"}}]}) 6.491910927s ago: executing program 5 (id=2781): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = gettid() sched_getattr(r2, &(0x7f0000000840)={0x38}, 0x38, 0x0) membarrier(0x10, 0x0) poll(0x0, 0x0, 0x1) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x189000, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r5, 0x80044dfb, &(0x7f0000000100)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x9, 0x8, 0x0, 0x3}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000400)="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", 0x1a8) r6 = io_uring_setup(0x2ef1, &(0x7f0000000000)={0x0, 0x5712, 0x80, 0x0, 0x1}) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) close_range(r6, r7, 0x0) unshare(0x24020400) 6.36530822s ago: executing program 0 (id=2784): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000ffffffffffffff8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) 6.245580447s ago: executing program 0 (id=2786): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000100)={{0xc, 0x1003fd}, {0x2, 0x1003fd}, 0xffffffff, 0x4}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000500)=""/10, 0xa}, {&(0x7f0000000080)=""/30, 0x1e}, {&(0x7f0000003a40)=""/4091, 0xffb}, {&(0x7f00000015c0)=""/4073, 0xfe9}], 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x40, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4b, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x11, 0x5, 0x0, 0x0, {[@md5sig={0x13, 0x12, "9352d97000000000998100"}]}}, {"ff"}}}}}}, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f00000001c0)={'\x00', 0x2, 0x2, 0x7}) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x180000020086, 0x47a500) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, {0x0, 0x0, 0x3001, 0x9, 0x3, 0x9, 0x1, 0x4}}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002000007f7119f13b14656d5d557e513be161580b1b9b0500a49aa8c34a0c0309d73067c3feeb3d0be80012897755719b071aba1a95879ed2cad3e4d02632619b95fbfa8578a5e86d16f41e89564d896c9ee8028d4a34c59480f73214eb0a9456c01d119d7e8320000"], 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x1, 0xdd9f83, 0x1, 0x9, 0x7, 0xfffff9ce, 0x5, 0x8d2c, 0x13, 0x7, 0x7f, 0x3f, 0x7, {0x0, 0x9}, 0x7, 0xed}}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r4, 0x81, 0x2, &(0x7f0000000080)="4004") 6.098691468s ago: executing program 4 (id=2787): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) (async) membarrier(0x2, 0x0) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000d40)={{0x12, 0x1, 0x200, 0x9a, 0x7, 0x8e, 0x10, 0x1a0a, 0x103, 0x6044, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x6, 0x20, 0xfa, [{{0x9, 0x4, 0xce, 0x7, 0x0, 0x24, 0xe3, 0x3e, 0xe}}]}}]}}, 0x0) 5.589582261s ago: executing program 5 (id=2788): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'tgr192\x00'}, 0x58) 5.573289755s ago: executing program 2 (id=2789): syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b0001000000000904"], 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x90, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x64, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x8, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_LINK={0x8}, @TCA_U32_INDEV={0x14, 0x8, 'netdevsim0\x00'}]}}]}, 0x90}}, 0x24040084) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x304000, 0x800, 0x0, 0x4}, 0x20) 4.744100418s ago: executing program 4 (id=2790): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000fedbdf250a"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 4.733761482s ago: executing program 4 (id=2791): socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xd7) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000100001002bbd7000f4dbdf250000", @ANYRES32=0x0, @ANYBLOB="00000000080002000000000004001680"], 0x38}}, 0x40) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = fcntl$dupfd(r5, 0x0, r6) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad"], 0x50}}, 0x4008840) sendto(r7, 0x0, 0x0, 0x800, &(0x7f0000000100)=@hci={0x1f, 0x1, 0x3}, 0x80) sendmmsg$inet_sctp(r4, &(0x7f0000003f40), 0x0, 0x200000d0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) 4.694064819s ago: executing program 5 (id=2792): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000003c00)=@nat={'nat\x00', 0x19, 0x1, 0x90, [0x200000003a40, 0x0, 0x0, 0x200000003a70, 0x200000003aa0], 0x0, 0x0, &(0x7f0000003a40)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000001512adc1021401ea00000000000000000000000000000000000000e6fffeffffff00000000"]}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007110430000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0xe8, 0x0, 0x260, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xff, 0xff, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'macvtap0\x00', 'veth1_to_hsr\x00', {}, {}, 0x87, 0x6, 0x4, 0xa}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbc, 0x7, 0x5aa9, @remote, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3980}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x0, {0x2000000}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x0, @loopback, @mcast1, @private1, [0x0, 0x0, 0xff], [], [], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) openat$cuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xb, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = socket(0x2a, 0x2, 0x0) syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x2b94, 0x80, 0x4, 0x3cf}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r11 = landlock_create_ruleset(&(0x7f0000000080)={0x2812, 0x1}, 0x18, 0x0) landlock_restrict_self(r11, 0x5) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r8, 0x0, 0x0}) 4.307949518s ago: executing program 0 (id=2793): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40283) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00^v']) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001500)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r6, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r5, &(0x7f00000000c0)='!', 0xb7f40}]) io_submit(r6, 0x47f, &(0x7f0000000740)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x256, r5, 0x0, 0x0, 0x9a1, 0x0, 0x0, r5}]) dup3(r5, r3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c000000100001002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a821000000000000140003006e657464657673696d30000000000200140014006e657464657673696d3000000000000034001680300001802c000c80140001"], 0x7c}}, 0x0) 4.187519747s ago: executing program 1 (id=2795): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000040)={'\x00', 0x2, 0x0, 0xa, 0x0, 0x4, 0x2000, 0xd000}) mkdir(&(0x7f0000000200)='./file0\x00', 0x3) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x878, 0x240, 0x0, 0x240, 0x0, 0x6d8, 0x7a8, 0x7a8, 0x7a8, 0x7a8, 0x7a8, 0x6, &(0x7f0000000240), {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, [0x101ffff00, 0x0, 0xff, 0xff000000], [0x0, 0xff, 0xff000000, 0xff000000], 'veth0\x00', 'pim6reg1\x00', {}, {0xff}, 0x33, 0xfa, 0x1, 0x48}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x18}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x29}, [0x0, 0xff000000, 0xffffff00, 0xff000000], [0x0, 0xffffffff, 0xff, 0xffffffff], 'vcan0\x00', 'ipvlan1\x00', {}, {0xff}, 0x87, 0x5, 0x4, 0x1}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0xffffffff], 0x6, 0x3, 0x2}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@empty, 0x1a, 0x3e, 0x3ff}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0xffffffff, 0xff000000, 0xffffffff, 0xff000000], [0xffffffff, 0xff000000, 0xff, 0xff000000], 'veth1_to_hsr\x00', 'veth1_to_batadv\x00', {}, {}, 0x5e, 0x1, 0x2}, 0x0, 0x248, 0x290, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0\x00', {}, 'pim6reg0\x00', {0xff}, 0x0, 0x5267350e5bf9735f}}, @common=@rt={{0x138}, {0xd, [0x5, 0x6], 0x7, 0x8, 0x0, [@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @private0, @remote, @mcast2, @local, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @local, @dev={0xfe, 0x80, '\x00', 0x42}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback], 0xa}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@empty, 0x29, 0xf}}}, {{@ipv6={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0x0, 0xff], 'pimreg\x00', 'vlan1\x00', {0x719b6b007aafa36f}, {0xff}, 0x2, 0x3, 0x4, 0x9}, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x2, [0x9], 0x502, 0x20, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @remote, @empty, @local, @private2, @dev={0xfe, 0x80, '\x00', 0x25}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @mcast2, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, @private1={0xfc, 0x1, '\x00', 0x1}, @local], 0x5}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0xb}}}, {{@ipv6={@local, @mcast2, [0xffffff00, 0xff, 0xffffffff, 0xffffff], [0x0, 0xff, 0xffffffff, 0xffffffff], 'vlan0\x00', '\x00', {0x1afc88c318715e46}, {0xff}, 0x3b, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x8d8) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000bc0)=0x8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000c00), 0x98800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000c40), &(0x7f0000000c80)=0x8) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000d00)={'geneve1\x00', &(0x7f0000000cc0)=@ethtool_wolinfo={0x6, 0x10000, 0x7ff, "26f7d6ee8b1e"}}) ftruncate(r1, 0x1ff) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000d40), 0x2, 0x0) write$6lowpan_enable(r6, &(0x7f0000000d80)='0', 0x1) syz_io_uring_setup(0x453c, &(0x7f0000000dc0)={0x0, 0x44c8, 0x4, 0x1, 0x394, 0x0, r0}, &(0x7f0000000e40), &(0x7f0000000e80)) readv(r4, &(0x7f0000002200)=[{&(0x7f0000000ec0)=""/26, 0x1a}, {&(0x7f0000000f00)=""/98, 0x62}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000001f80)=""/98, 0x62}, {&(0x7f0000002000)=""/197, 0xc5}, {&(0x7f0000002100)=""/255, 0xff}], 0x6) removexattr(&(0x7f0000002280)='./file0\x00', &(0x7f00000022c0)=@known='system.posix_acl_access\x00') sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000002440)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002400)={&(0x7f0000002340)={0xbc, 0x2, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x1000}]}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x48be}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x805}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x80f3}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x44880}, 0x4048050) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002480)={'hsr0\x00'}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000024c0)=0x90000) r7 = socket$caif_stream(0x25, 0x1, 0x1) sendmmsg(r2, &(0x7f0000004d40)=[{{&(0x7f0000002500)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @empty}, 0x4, 0x0, 0x2, 0x1}}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002580)="151a085c115bc787b4c724f8", 0xc}, {&(0x7f00000025c0)="4b3fd8e707fd3e35f663451ff56c599a248af3ac0cf1c191ee56d2215a043e4fd6ebbbdcbf57156842d99fc80176de6d86867d17d756067094d3967abbf2953aac720cfdd32a4845ac292baca06b3ded710ab987f4b35fde7d3ca664b2f96e9091d8fdf0601ba4b7fa4a16908975f7a133c80c82fea9d04d6d23658259fdc92f083a9d71424609defa3c6cdd3878196949e3452d73a6e4b46eb73380893adb1ecf6b50ab9e47c515561e7e0cbc9a9e83be857cf696f43eb043f85bd51188e918ae8707739159af5d58ae606d39aa89", 0xcf}, {&(0x7f00000026c0)="e074808d637a94e84ee68697d5db2433e59beb8cc1a0de6edb9fd4045f5a212e6067593a963278bd54fc8d2a1befe987e0aaa12ac20a47f523de2d3787f3a7eb2cd2197ef7afdb443326aee96cf5234c403408831387a90627bf3872cf2bac2109e63a994338411bf363f118c3221a64126d8f12bf6af745ae90ad0f2ef9a811393081e5c978290ad55311263ddc130bb385712fd289cf389a446ec3bbce50a7629554ee7595591db1e302c3194c5a2f26fad0945160b19484f5ef6c109704d5feafb4e89b6910136d541c47f51aa7400041175dc6ca1378e34b1c10b257bddc", 0xe0}], 0x3, &(0x7f0000002800)=[{0xe8, 0x107, 0x8000, "7fbd2ac43599a5068c2f88322cd054aa1595cb917c386a9a2af3d4928fb96c39f04f9742bbad713ffa203ee48994a49b8e6a64041cef830d79dd85b97b5d6b60e7c1c8781d944e2ed7b866854bba03db62b7d8f8318aaf4753d8a9a2bf31682c833a4f046f438e4c3050ab0f2d223ccf58291a83e29031a20de2be70cb30de62f3bc091de840765546180b896c58d037356d6e7eebd9471ebf69a7338fdf793881f9402dc01bc0dc6e2acbc06ac1626606b7c07733c1c1e0a259f549ac1392ba0b8421ed6957b86ef8e5b25ae0319fd2d747fe51d6"}, {0x1010, 0x117, 0xf2ba, "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"}, {0xc8, 0x1, 0xa, "a58060b162347f7074d3bda582237141c199b4c0a3843405f3557e8914c2242fa69ea64a2a275e6a7b22b42aaf3aed7e2037cecf940b39aab41b908d19170dda0effc3556761df18897a1a7187ecdaa89d74fb458090741bd600e11e4ba2ff1af0e38f47d9e5a7072d2cf684a0b995c94e7a7bb92ef159548ba9de7d0fa3fbc86b847b012e23f48951a021e7c920f922581681d728f0af2620540506f090cf5caf98a22484373154b448b66fc67c8bc6ebc6a0d51947"}], 0x11c0}}, {{&(0x7f00000039c0)=@pppoe={0x18, 0x0, {0x2, @random="c0e0e0aeff84", 'tunl0\x00'}}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000003a40)="33d44f5396351892add0affe4a620702d595b3a4f58efbfcddfc43ed43d420b5262f7e39393bc73cabd2c6c7073fe89657e1d02672c881a052a6b96f1450f6e8afb196cf11ac64920bb1bd4f9f814f2d37713e7a81ddc683c1c7633ce64f62b8b143101c204f3bf3863585222df13ab4334e2508a341e825f49ec91dc95030f17c252c1996da8ae6d94046f213171ce0d96131010d8dedcb280af051117ecd47bf562380a66d41fce950d4f732b741d6017ab4594130ccf67e0c11cebffd1d41f12be65a381e97c49475847a", 0xcc}, {&(0x7f0000003b40)="72664da59551dd5c2a323da37b1dbf4c53a9646e9d8db3ba36190b2bf09873c8a4a6727f12266eb713fa26e61b25e7d1730883c2d89434a33a3449e8856a52071e825c2d347c195022578a50e7cb89c3edeacbf65f387e9081d2ef78fd52e3219e08d84ec6ae02a5af8f7a892d94264dc84e3a5173894cdedce470e77e", 0x7d}, {&(0x7f0000003bc0)="00283af80161196fef28fd9be94dac3a6eed157035b3e6cb6b95672ad75d31e0a4e10cbdd2549452918054a1a48baa8132aa52b742a568bccbdf7d51e71696f9e696fc86de7bca5afb5aacfeec7437895da27215f1a491c1f2bf7d897a66d4a3fced5efc6eabcdccac770b04ffa76da4c0f7394884ee4c6977ab999c9ee7d70af750f1ef3cc299feaf4d0e8ff501f07a2610da48ea16e1527801321ec1c7bf", 0x9f}, {&(0x7f0000003c80)="8df3b576735bc1644502b091510892f221ee384018c80c9fa405642ac8e39adf8cfec406b7282d8bd56bcf4e8a4b297799de055c6dc97643ab9056d75b581f9d826d1a", 0x43}, {&(0x7f0000003d00)="e5351ba6e7c4cf6fe789ce7924e0f6fd91246735745bc851ac65c8c311536afbdd61d91790f69623d3d4778d8f3779ac1dc0d8fbe54c54ae1003a1b966c4afe3a868d8546eab7de607d36045f70e1cd0fd63471ba9e47441d9137b792a0a26080e7299ec66380d7fa9982dcb978be05d66ac18fc9d6ec465c1cfe0ec97cf6a1582b922b96fc9c88c5440fe7a1dbee6c152e1fd2e32f1e121d80e1c41ecc6d6715d1675b766ef18c8861d7d0a85174d", 0xaf}], 0x5, &(0x7f0000003e40)=[{0xf0, 0x102, 0x5, "557703ad7a83f284304094067dbd670e9923b86f4411393d3567d2280a0ca77b2f680d0f4618b072c561480ad5c5c5e737e29e7cbda20f506f6fccfdb1771c2f2fe2b997fbb3e627ad1523ae02830c1ffbce9da7c9f0610b3f5b8d73165a09e0a093970af8b70a825a5b2c3c5a3028a05745f7a43026495e81e2feb5a62f02ac0aa9879b03a710bfc66f0f4299dbf900f2e45530b598e0d6a652cd1ceedf2226f4f9b3cc5f77ec74afcf313c901364ee0376e802ec7f5917c2bcd80da7e3902e2cb1fad0866347024949a83252d74016a07e9ad6aaeae4f917a0aa"}, {0x58, 0x110, 0x5, "a783a2badd7313cb2bc65ee65482a251db675dcefde8fe5f83a45b864f7148da83ee8175da977b73c69d3480e739f56cf80c6cea04e490f4dcb9d5b967f064e75016"}, {0x80, 0x88, 0x6, "7bd284bae0b54e5a9d6c3f5bc6b501aad0e04ec9cb32055160eaf30d8bc00745113532992ed2a8ee6dd48af19077c2966e295f0c0ff3119d90631f6637484121b85ba4a99cbd6fad233fc61be62feca70f6d242f059219ad0c2d282d3f0e07097772fedfaf38679721"}, {0xe8, 0x10e, 0x1ff, "3fc89a76c1b5a6bc594607eaf744f0c7ad60d07820dda158d776416d72c564c596e90e59e0abe21f712066a65d18905e5e2d4e9df8b835f390a6db4f61433f833e52a59487b140cda6f4dfeb810ddb89c32c862e1e4c2747a4f0690c5d9014eac8cd95db7c92968d4f3be666add7f4f27f8bef393f584b54b33503ebfcbcaf8eb27c36b39139d1f356d693a0284346e57e492ac6c4e4a23b8441f23fed309a2f981c3e7265f35dd8d13a18f750b73e5eccd5136f313d7b5067167f48beb0b58cb203e982745147599f10e54edd6d71454c"}, {0xd8, 0x9f73be79253bf75c, 0xf9, "a1bc5a0e83d0f52e148ce0ce66ce468b2ac73f550288790adfa0496e3deac20f6eb2c5d6e67cbacfcab2ec3b44e2820b5d2bc7dd7e2327e9d70faf9df9d99ef5effcfb4907bcfcb57a0dc9f92ebb3812a2ecae2417cb0d0e86dbe5cb7bcaee4261c0a01e249c5de091942ff4838b308017dc1f5ae4a473b1769163f49aee93b7e185c8fe73fbb76aae608c35a867510f4a0f6d028a8a6ee9247527bc7bede137333b3cf4c9d5986b922f8b6b53b39dc2a7a69488c91de11fff9acfc42588a3176aeac98738269e"}, {0x88, 0x0, 0x6, "e13e0b028c66192771c5760133588a8a3f2b3b2ddf41b0aaeba5041984e7fdb83e2ba8c2f99d08ce13682e002e5978d6b3c5bd877e31cb8503d8b1803a1bf37cb3828272a969203d3589db41e27837af9455f6f944a762726d186b6051b44f1ff4a99c856ec4535045c15b29aed2b20be1176c1e"}, {0xd0, 0x11, 0x6, "b234439e8bba6af72afcc3d0613db6a13e295d42a87fc7d124f9363bc6e9ecd4f23dec2110f807b546648bc0addd43d8e71f6ae6e81be8f55a65285733eaa9fb85e5d8a8a83228ceeb1c950b0637027615da177310a55711e36b1acc43e64822224bf9c79199694367cd51a186c03146a315e0012be4e62e5ea49360cd41c4a41109b1f2f4adf50d6644ea01d7b4590277f305f529d4d0224196b90852c53d1abe3762341ebab9cf7bf00336f9b74e87d3fa74eeb95b3e2f509907e45c84d7"}, {0x108, 0x104, 0x7, "8f6aa51336c22c5be0ac4eb11a8ee7db85309361ad7cfb708767d2b3c2cf571793b0e868d276d0fd0ecfaa354f885747c7a28c1bfb3a94219079535db94752eac8f4735fc2d09bef79d600f89a3d3bec581150b130a385e7c9542481fe81504b2ed9d6853527d79701ab9fe6e7de8470162e3eace821255bf27c95adc59a0b1c443d3806d0e3839a7ad5d5a3f23ae5cba097a3d50065beaf287c042234bd231ef2f2f5b10e61131064acb968afbe05a0475fe5d07a44bc76232cbd2185c88aa20f1a24c3c1dcb237c8eb37baf220f1c5d0f34a8e0c5cc154873d15632c5f5a902aba2f300e412bfcf66a9d7013848e67e68332c1640b01"}, {0xb8, 0x11, 0x100, "b420aa5f65110b04c23174f747d1207a0dada158a13c1fb8503d80a80e4d4ba79595050685b0b3a2ff930480020238b401ecba74883c39786c2fec90255a30d08d4955b26ad45536dbdcea12d7eda0a6f399ddc418a3fb5972a2035d7822e1ed9293a9da347b1e4a1ec5a6e3c3b8464436d6e977f68caa482555ac32d5b5d88a675abad4313c09e9b48640aa9264954d91f79095b8dd19608f0ee964e28e71f9e08b"}], 0x6a0}}, {{&(0x7f0000004500)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e21, @broadcast}, 0x4, 0x0, 0x2, 0x1}}, 0x80, &(0x7f0000004740)=[{&(0x7f0000004580)="c10c0e5adcfa829183729b6bfb4dbbbb3d42c6abf6fd1579306377f6bdfc36da56eb5bb88809f3f3abae160597cdff69718300a4d065e378c5bb69160400b2b83fdb3c32d3f72f67b0184ba632498c2060c23ec8559d6cd2b0c43ee7e4d15db9627f710538326b4f738e6efd2bf3d3ab5f3c2a2d3f8c55650b4e5284cd0072ac85e1a24293b4dcb5c639a5c5f1ad740189dfe3a9b5439a0e8e19629c4dd20ded1dbd7774a1ae17ada7e685c637e097aeacf3fa7842f385a1efdb65aa9066a2fbd92a7287d7f40f61937f0f8edd12fbcd49d6bdf3df22298311886d3b31eb24043a510f", 0xe3}, {&(0x7f0000004680)}, {&(0x7f00000046c0)="7b56fc9c6ca590f5d51b996ab3f4e539ae1d5877b7db731497682e036d1ef3f058dc6de51486a4c98cada5feb2fae84f339a18701d8278de5c35b8a0a80c778c41c723b026acf4e0f632bb9d588337af22d243c2b853c8f413931bc89427c02afc84554ebef3d3aa04ac307d61048b28049f89bc96", 0x75}], 0x3, &(0x7f0000004780)=[{0xe0, 0x194, 0x4, "66f438fa97775198241018ad35f80770acc2cff3adffc570605e899031e7a3cdb3c2bca1627e0d6875c47e42ebf4a9982c2e504ad8a01513c9163e4d66116e20c0b029a29ad1213022bf3ea30f833ed24e2a49cf3cdb535ab0bbe16b428c0eb118132dcb8ded25ac220be850b4fe2bc2f89fe071b5d25e45038c864fb1cae7fe0a563a6189d77e6c070144c2c151c3cb8bf323d10eafb96beb27412c3e1c1da6fbfd7b9565af88a836f5ce75227009ab1b1e9ede3e9b8c3740053df307885afab163708046efccdc3e4d"}, {0x78, 0x84, 0x4, "6cd6628b03dc599bc2cdebe5defa69d701e421c30df5e9b8a2b4dfb85f892afff388fec3709ad77751b32e419ce3f50cfedc1275a278a5bb303acca382eefd2bed4225689ebbdd1717a67c07147d28b36b72ba2e87645e3c4970c2e0ff86baeb08"}, {0xc8, 0x103, 0x3, "e76081ccbd1d886453fbaee79c06c891df25f9e295f20d5f902d4eb2124f6ec069ff8db79e354729a6df7ebb5317c86eb0f3abc80a815426ca7214b85c513dde0f6cade27b8044ebc1e1515f943dcf885f72ab04510f31be04323ee2dc706d45bd43cde6a973fd8b1f157b8ee4271746902ed3f18bf6f82f98371407c9436c46c79ffa40c8624f23f97372f061f742d96af0dc165e87bc6a22d8dbb987f38ce714e38dedbc46a68480e47b93350fd7655313e16788caf2"}, {0xa0, 0x107, 0x3, "5e5e3b24e743bc99dbe1b859ef2f0f63f93d8c01848a1dda99529f52b01031ff5e204781639d64f8ac617430df0bb91023dd124f73966f3e84d523510ff4756e107ce8be77301736e3ca3e83f5df3ca4df5707786c1b341ffd7f04cc7e4d92f7d35df3790c44a684a145fbe80b56df6d2ccf81649efab88a04680fec3aba952273af4c2a888fbc9c8ff056a3"}, {0xa8, 0x10f, 0x2, "58b5d7209ec5a6abef480f9b4d9e223161e1c371e2f160af3f93e78c9c2384c6583bdaf7e6d17135c85ea45b9e7f781ca552a32064bbc86e2f3e66806cf69ac1952686f9c2a22cdf40e4c02a3ea035052872241d9d7ad8b6577208075efc6b001170a726a7d2512d7e61518f77cc37539b73f3ff692ce067185cabfd3c7ac0737afc9e19d4bfe24a2ac1c76abdd3f150675c277bb536"}, {0x78, 0x110, 0x81, "d406fd37fecbf1980a8cb4143495597c336d8ec606eeadd5f73a7cdb4776f488d1ba4290372420d887d56405557e91d798a23b34064bf115e6d189e0bc31ac443f7f5d138f885ef3ea5482edd758283fee63a5585dfc9b95a82d9b553c1fe8cb449dfabaef08e236"}, {0xb8, 0x1, 0xffff, "8e378b1542f13140ac82c28e2f7684316020183f219f2bd16bae6d37b9954afd99e0e6bb0a6c661fd49ee717675c7cb6f9a67d9bec48fbed3b86837777e58eff71b53eb38fc47b4dd1f30a5bb106fa0de81e739b3feeb1d2faf71f27eb350bcee998beac34421b6ec567ecd387fbc8ac98272eb757ecc59fcae36ded6f8f7bcc01bcb41b9dddc8448f5c734037e002a8c24bbe3fe126e1c859dd460de3683c0c0e641f057a"}, {0xf0, 0xff, 0x5, "eb32477b0b33335f631f030fd069891432bf46881a1514d7e99073582a2a37f5eb45374a4f352d52ec7d212959a6b4b03c1f499881d0fda4f6844697ac1511b4b44dd36bab1291ec13865456cb968321f0992bacc28e9382e73178a0e6d3678b3bf3212f5f72356b3d84520663d42b5e8f883f8d440ea304c9cc233871a0c88285b82f02596b5797eeae903a7707be00ceb1d0b0bb58e4031783933b5b9716aa34ab61fe4e4fdd639e7f32d4cdcc93f75abd28b25b28dc1235995232f91ed1077c04b2f76208d3c2938b6aba90f3ecb7901ac8669438c4e25f605f0af3e7"}], 0x588}}], 0x3, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000004f80)=@urb_type_iso={0x0, {0x5, 0x1}, 0xcb0b, 0x4, &(0x7f0000004e00)="89d96abf524aa3270970ae1fd79900aee93d49f67cea074f85d3e7c939f7cf80a6df6d5895a08b8375b7e0abb2a689fe5fa3ebae0810e1a20e8511d98cddc3cb1aa3d8bba3faa863e58e6d338a7adc2786d8135814ba043497f398d765c34f38890e9c9286e4361530fc16286e319746e2323eee18e63278999190db22f56327d44521df8253c5", 0x87, 0x9, 0x80000000, 0x26, 0xf14, 0x80, &(0x7f0000004ec0)="396b37764040801d0f2141c1034450c5587bd567d3fa53ae7de40689ec8f69cea05cea6e01cf6ef39632728121ec70a3b137986352dd34b11ee5e3d682d97530a45deaf52f3ac12950f15413809d58e343f9d2b5fdb5f7121d44e89338233f592326f838fab3b05f03b4bf756d82528503e68102fb13ce0f780345876f3e64094bb23106a52d4e177726ad380760a88830a454df6daa567f3a88f8b46c669cb0f91227155b142304184b20683308f88f0a021e06dc9645f28c379a4a", [{0x7, 0x83, 0x7fff}, {0x0, 0x1, 0x1000}, {0x5, 0x3, 0x1}, {0x3, 0xfffffffe, 0x7}, {0x2, 0x101, 0x2}, {0x2, 0x7, 0x772}, {0xffff, 0x9, 0xfff}, {0x20000000, 0xf, 0x6}, {0xff, 0x2, 0x80}, {0x0, 0xa39, 0x1}, {0xc, 0xb0, 0x5}, {0xffffff81, 0x5, 0xaf3f}, {0x3, 0x9666, 0x9}, {0x6, 0x1, 0x2}, {0x1, 0x8000, 0x2}, {0x46, 0x2, 0x3}, {0x0, 0xa, 0xa}, {0xffffffff, 0x26a8ea4c, 0x6}, {0x4, 0x7, 0x7ff}, {0x9, 0x0, 0x7f}, {0x2, 0x10000, 0x28e}, {0x8, 0x9, 0x2d2bee2}, {0x87e, 0x6, 0x6f}, {0x5, 0x1, 0x8}, {0x43, 0xfffffffc, 0x5}, {0x3, 0x8, 0x1}, {0x2, 0xf, 0x2}, {0x53a, 0x7fffffff}, {0x4, 0xe, 0x2}, {0x6, 0x2, 0x8}, {0x400, 0x8, 0x8}, {0xffff3e9a, 0x1, 0x7}, {0x8, 0x7fffffff, 0xca}, {0x2, 0x1, 0xfff}, {0x1f, 0x62e4, 0x3}, {0x10, 0x4, 0x9}, {0x8, 0x80000001, 0x401}, {0x3, 0x1ff, 0x5}]}) lstat(&(0x7f0000005180)='./file0\x00', &(0x7f00000051c0)) openat$vimc1(0xffffffffffffff9c, &(0x7f0000005240), 0x2, 0x0) read$FUSE(r0, &(0x7f0000005280)={0x2020}, 0x2020) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f00000072c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000007500)={0xecb0, 0xa397, 0x1, 0x9, 0x3, [0x1, 0x8, 0x6, 0x4]}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f0000007540)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 4.129192168s ago: executing program 2 (id=2796): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000010c0)={0x0, 0x2, 0x1, 0x1fe}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000001100)=""/4104, 0x1008}], 0x1, 0x33, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x2900, 0x0, 0x0) mmap(&(0x7f0000498000/0x2000)=nil, 0x2000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000140)=0x7ff00000, 0x4) write$UHID_INPUT(r2, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) 3.859884876s ago: executing program 1 (id=2797): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x81ff) 3.829035144s ago: executing program 2 (id=2798): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f00000000c0)="8151bea638c802a87d97ceb0f3f5e79fc4566670d8bebaaeeff6169c60", 0x1d}], 0x1) r3 = dup2(r0, r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_procs(r4, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) preadv(r5, &(0x7f0000000080), 0x0, 0x7, 0x8000) pread64(r5, &(0x7f0000001840)=""/4096, 0x1000, 0x1) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x2) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) syz_emit_vhci(0x0, 0x7) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6_udp(0xa, 0x2, 0x0) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYRES16=r9], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0x10, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r10, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0}}, 0x10) 3.766355987s ago: executing program 0 (id=2799): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x400, 0x3, 0x3d7}) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) r2 = syz_open_dev$loop(&(0x7f0000000000), 0xf01c, 0x1) r3 = syz_open_dev$loop(&(0x7f0000000040), 0xbac8, 0x140) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000400)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x8, 0x1, 0x0, 0x0, 0xfffffbff, 0x825711ff5544626c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x5, 0x1]}}) 3.655819271s ago: executing program 5 (id=2800): openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) setresgid(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5171bb672965593497418688ac68cb126474cd3660e5b9e2086e246728d7a040", '\x00\x00=*', "00000000593c1e1e"}, 0x38) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x9, @loopback, 0x1}}, 0x0, 0x0, 0x4b, 0x0, "5d9ed5ab7ede1bcf73742bc36c0ea13d3dec33e0b7cc1ff724fe1906cf9f7945230bc5d9dfea4ffd1e48aaf9a42d97f58da594d5eb926f70f03d01000000a6b62ee9d04ac1bf0bef969bcbd8e4700616"}, 0xd8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r1, 0x0, 0xffffffff) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000340)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000240)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0x0}}, './file0\x00'}) syz_emit_ethernet(0x4e, &(0x7f0000001e40)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x100, 0x0, 0x6, {[@window={0x3, 0x3, 0x8}]}}}}}}}}, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x1, &(0x7f0000000a40)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x5}}, {@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x21}}, {@blksize}, {@allow_other}], [{@smackfsdef={'smackfsdef', 0x3d, '~\x1d!\x1b\xc0[O\n3\x0e\xf7\xc6\xb9\xc9\xa6\xc1\xeb\'\xa5\xa4\x03do\x7f\xd1\xefW\xdb\xd4\xa0k/\x16\xa5\xf3-[Y\xa4\x91\xf7)\x89\xab#\x80v\x9c\x90\xdc\x9f\x7f\xe9\xd5\x93C*{\x85T\xdbn\xd2\xfe{\xe9)\x96\xb7h\xd0~\xee\xbd\xc8\xefl\x1b\xad\xf3\xbd\xe8J\t\x1e\xe8\x13KC\x11\x1a\xfbk\x128i\x98C\xddG\x832\xfc\x16*\xbfI=2\x1al\x8f\xf4\x110\xbdV\xc2\x95\x10\xd7\x8d\xd6\xbai\x10\xd0\xfa\x8a]\xed\xa9$t\x03\x05\xe7\x15B;\x7f\xf7\x9e\x05\xc0y\xe4\xf78\xe7\x85\xdd\xf2\xbf\xb5n\x8db\xcc\xc8\x9d\xe6?\x9b'}}]}}) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="2503582e7802006bd70008000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000228bd7000fcdbdf250500000006001a004e202054dd74d40c4d00000008000c000000000005001400030000000500140031c85359bb3ee636c640303b4b9200000014001f06fc020000000000000000e900"/98], 0x68}}, 0x20000080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0xee1, 0x4) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x7, 0x4, 0x3c0, 0x1d0, 0x0, 0x1d0, 0x2d8, 0x2d8, 0x2d8, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x3, 0xfff}}}, {{@arp={@broadcast, @broadcast, 0xff, 0x0, 0x6, 0xd, {@empty, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x3a, 0x6, 0x21, 0x8000, 0x8, 0xfffe, 'rose0\x00', 'batadv0\x00', {0xff}}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0xd8c8}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000280)=ANY=[@ANYBLOB="12011003000000206b1d01014000010203010902930003010900040904000000010100000a240101000e0201020d2407050100014c8d3ca75ddc0c240704010006f01fc273da0c2402050302010807000206090401000001020000090402000101020000090501094000070805072501007f050009040200000102000009040201"], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) 3.48067691s ago: executing program 0 (id=2801): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, 0x0) write$FUSE_NOTIFY_RESEND(r3, &(0x7f00000001c0)={0x14}, 0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d80)=@bpf_lsm={0x1d, 0x1b, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xf}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x9}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x0, 0xb, 0x18, 0xfffffffffffffffc}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='GPL\x00', 0xfa, 0xfc, &(0x7f0000000840)=""/252, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x1, 0x2, 0xfffffff8, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000d00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3], &(0x7f0000000d40)=[{0x2, 0x3, 0x2}, {0x2, 0x0, 0x5, 0x5}, {0x0, 0x1, 0xc, 0x9}], 0x10, 0x101, @void, @value}, 0x94) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001800090011000000000000001c140000fe02000100000000140012000200cfbc81c116946cf4a5b2f81c4d07"], 0x30}}, 0x4) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x8, 0x20a200) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x0) io_setup(0x81, &(0x7f0000001440)=0x0) r8 = syz_io_uring_setup(0x5099, &(0x7f0000000380)={0x0, 0x27ec, 0x13090, 0x0, 0xd}, &(0x7f0000000340), &(0x7f0000000080)) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d5304905) close(r10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582", @ANYRES16=r10], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) io_submit(r7, 0x5, &(0x7f0000000600)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0xf800, r9, &(0x7f00000001c0)="9efc5a8bcf0b3a61db8ed1be93380fda60bdade3d4a407e6695bb518b9243df1ae532e3e51d409c21a9aa6054e7cd89cd79bcfff7e93a73c9dbda1ad2fdb9302f34ce397b2417153f98603af63c118038c286b718e56c1a27995a5580819f0f028f75a274b7a50c73f27ba967596dd8d7679a43886ba4db0abbc793fe8deca397a48ebda78bb53da2ca9ebe8e0cabf20f0df2389214301782b1d4f7bbf2f0abd30a86b29a5a9c81c8004867b", 0xac, 0x3, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x1, 0xffffffffffffffff, &(0x7f0000000300)="95d9df216798ea564a3d0de3", 0xc, 0x0, 0x0, 0x1, r10}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x6, 0x6, r9, &(0x7f0000000440), 0x0, 0x3ff, 0x0, 0x0, r10}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x20, r11, &(0x7f0000000540)="57d505381243b4ee554c59c5b0f7d0835c9c40dd4a67a7f5ae50194f7afb445f7d30375c59143adf8024b55520f82361f31729d25f263178d225bcbafe6e60889a582d503dbd9684a2b1c0800b1d94cf1f2e4731f297a2ed2330328e40e878592673cf1d7685474663dbc2bf1c", 0x6d, 0x1, 0x0, 0x2, r10}]) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000140)={0x4, 0x15, 0x3, 0x1, 0x29, 0xf9b3, &(0x7f00000000c0)="83dcf137779d4efa18595c1567714d2f0ef488febc61ef2a618b713b0dacc784c9c88f74b32b27536c"}) 3.44036438s ago: executing program 1 (id=2802): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000fedbdf250a"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3.212594987s ago: executing program 1 (id=2803): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x74, 0x0, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRES64=r0, @ANYRES8=r0], 0x0, 0x0, 0x0}, 0x0) request_key(&(0x7f0000000040)='ceph\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f00000000c0)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\x93\x15\xa7\nT\xdd\xd1{\xff\xcb\xdb\xb1\x1a\xf5\xbc\xc3 \xe1XR?\xd2\xd3P\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xce\xabD\x00)m\xac\xc5\x01uK\xe1D\xa9\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\x06\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17Zf9\xcc\xdcR\xd24\xeb\xb5\xc2\xff\x1b!p\xbeV\xb7x\r@\x00'/157, 0xffffffffffffffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000004ac0)={0x2020}, 0x2020) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000380)="5fc9", 0x2}], 0x32e) r2 = io_uring_setup(0x194e, &(0x7f00000002c0)={0x0, 0x1994, 0x20, 0x40002, 0x2b0, 0x0, r1}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) userfaultfd(0x100001) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000280)) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(0xffffffffffffffff, &(0x7f0000002b40)={0x2020}, 0x2020) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r6, 0x10, 0x70bd2b, 0x25dfdbf9, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x8001}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0xff800004}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008851}, 0x840) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000006b00)=ANY=[@ANYBLOB="08dccdb4df41efd7a000000000", @ANYRES16=r4, @ANYBLOB="000229bd7000fddbdf258900000008000300", @ANYRES32=r7, @ANYBLOB="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"], 0xb94}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) read$FUSE(0xffffffffffffffff, &(0x7f0000000b00)={0x2020}, 0x2020) close_range(r2, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x420100, 0x0) ioctl$RNDGETENTCNT(r9, 0x80045200, &(0x7f0000000080)) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000001040f000002000000"], 0x1c}}, 0x200c005) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x8000) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000200)={@my=0x1}) 2.644029327s ago: executing program 4 (id=2804): syz_usb_connect(0x0, 0x3c, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c9d1c40899040a50b7e70102030109bb5e6c71047da486ab6aa2b0e1022a00010000000009049700010dd52362aac6428085ce000824020100000000090d000000000000000705a3f6d2065b"], 0x0) (async, rerun: 64) statfs(&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', &(0x7f00000002c0)=""/166) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x400, 0x3, 0x8}) (async) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001140)=""/4097, 0x1001}], 0x1, 0x372, 0x0) (async, rerun: 32) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) (rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)={&(0x7f0000000a40)=@newtaction={0x488, 0x30, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1100}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffc, 0x0, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffc01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5, 0x4}, {0x0, 0x0, 0x9, 0x0, 0x2}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x488}}, 0x801) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x1, 0x66c, 0x0, 'queue1\x00'}) (async, rerun: 32) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x9d) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) 2.465478308s ago: executing program 1 (id=2805): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r3, @ANYBLOB="0a000600080211000001000006006600c78800001a003300983d0500505050505050ffffffffffff50505050500800"], 0x50}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040), 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newrule={0x30, 0x20, 0x1, 0x70bd2d, 0x0, {0xa, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x30}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6800000010000305000000000000000000", @ANYRES32=0x0, @ANYRES32=r8], 0x68}}, 0xc0) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0xa800, 0x0) ioctl$RTC_WKALM_RD(r9, 0x80287010, &(0x7f0000000140)) close_range(r9, r9, 0x0) (async) close_range(r9, r9, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f0000000280)=0x7fffffff, 0x4) write$binfmt_script(r10, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r10, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r10, 0x0) preadv(r10, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) preadv(r10, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) syz_usb_connect(0x2, 0xa1, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003546ab520b1134200e4f50102030109028f0001050300030904f6040306a4000809050101000208fe0209050310ff0308"], &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async) r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) (async) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r11, 0xae80, 0x0) 2.428645011s ago: executing program 4 (id=2806): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x6, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r3 = fsopen(&(0x7f0000000040)='binder\x00', 0x1) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r4 = getpid() r5 = gettid() socket(0x15, 0x2, 0x7) rt_tgsigqueueinfo(r4, r5, 0x1f, &(0x7f00000002c0)={0x0, 0x0, 0x2}) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffffffffffffffff]}, 0x8, 0x0) read$FUSE(r6, &(0x7f0000003a40)={0x2020}, 0x2020) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r3, 0x0, 0x0) fchdir(r7) r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) getdents(r8, &(0x7f0000000000)=""/42, 0x2a) getdents(r8, 0xfffffffffffffffd, 0xbb) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r1, 0x0, r2}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10500, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="52010000fd9e1a40f30c74933bbc0000000109021b0001040000000904000065d4695e000905", @ANYBLOB="e1", @ANYRESOCT], 0x0) 1.919974283s ago: executing program 2 (id=2807): openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000003000/0x4000)=nil, 0x4000) (async) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) (async) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000b5"], 0xc8) r2 = socket$netlink(0x10, 0x3, 0x10) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000100)={0x9, 0x5, 0x9d}) r7 = dup(r6) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800009402"]) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b040000000000000000020000003400048014000180090001006c61737400000000040002801c0001800a00010072656469720000000c00028008000140000000150900010073797a30000000000900020073797a32"], 0x88}}, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4040) (async) r8 = dup(0xffffffffffffffff) (async) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a309c0e5e8f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050081001100000081ffffff000000008500000081ea6b033e"], 0x11d) (async) write$UHID_CREATE2(r9, &(0x7f0000001b00)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000027fec57e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030004000000ff0700008100000004000000"], 0x118) (async) futex(&(0x7f0000000040), 0xd, 0x1, &(0x7f00000000c0)={0x77359400}, 0x0, 0x1) (async) bind$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @local}, 0x10) (async) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f0000000340)={0x60, 0x2, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x3, &(0x7f00000002c0)=[{0x6, 0x7ff, 0xfff}, {0x8, 0x0, 0xe767}, {0x5e86, 0x9, 0x2}, {0x7, 0x255, 0x9}], 0x4, 0x400, 0x4c, 0x9, 0x8, 0x3f}) 1.669134491s ago: executing program 2 (id=2808): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000440)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x1, 0x7fff7ffc}]}) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1358, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) r1 = syz_open_dev$sndctrl(0x0, 0x8, 0x6b01) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x7800, 0x7, 0x6, 0x9, {{0xc, 0x4, 0x0, 0x7, 0x30, 0x67, 0x0, 0x2, 0x2f, 0x0, @rand_addr=0x64010101, @local, {[@timestamp_addr={0x44, 0x1c, 0x21, 0x1, 0x4, [{@local}, {@private=0xa010100, 0x6}, {@broadcast, 0x7fffffff}]}]}}}}}) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x0, 0x7, 0x0, 0x0, 0xe, 0x9, 0x0, 0x9}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x401, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xe9) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f00000002c0)="305c0607e1820825922f347e7f64d7982b8f57fb20a3adc9e3baa292ce8f0a861e6417acfc8648ad1b86400393d502b0cd490635d54cdf5bd0461690982b236949ab5e000000808ce41d86b9b949c50b000045b91e8fe7ec7c49750a1b0a", 0x5e, 0xfffffffffffffffe) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@deltfilter={0x24, 0x2d, 0x800, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x5}, {0xa, 0xf}, {0xf, 0x2}}}, 0x24}}, 0x8004) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a200000000b0a01030000000000000000020000090900010073797a300000000020000000050a05000000000000000000010000020900010073797a30000000002c000000050a01010000000000000000020000060900010073797a30"], 0x94}}, 0x4) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x2c) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) mmap(&(0x7f0000d78000/0x2000)=nil, 0x2000, 0x2000000, 0x2010, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffe6f) write$binfmt_register(0xffffffffffffffff, &(0x7f00000000c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '/dev/bus/usb/00#/00\\\x00', 0x3a, '/dev/bus/usb/00#/00#\x00', 0x3a, './file0'}, 0x51) 677.523956ms ago: executing program 1 (id=2809): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0xfffffffffffffeae, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') preadv(r3, 0x0, 0x0, 0x8, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) close(0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000dc0)=@newqdisc={0x174, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@TCA_STAB={0x150, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x38, 0x1b, 0xfff8, 0x10, 0x1, 0x8, 0x5, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x0, 0x76, 0x7, 0x5, 0x0, 0xee, 0x5b, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x1000, 0x0]}}, {{0x1c, 0x1, {0x5, 0x6, 0xfe01, 0x9, 0x1, 0x57ed, 0x4, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0xe2, 0xe, 0xfedc, 0x7, 0x0, 0x1, 0xaf4f30b, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x10, 0x5, 0xd, 0x26fd, 0x1, 0x80, 0x8, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0x6, 0x40, 0x10, 0x7ff, 0x2, 0x9, 0x401}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x5, 0x6}}, {0x10, 0x2, [0x4, 0x6, 0x7, 0x6ab, 0xfc7, 0x8]}}, {{0x1c, 0x1, {0x6, 0x38, 0x4, 0x7fffffff, 0x2, 0xffff7fff, 0x6, 0x1}}, {0x6, 0x2, [0x10]}}, {{0x1c, 0x1, {0x82, 0x1, 0xf001, 0x81, 0x0, 0x4, 0x2, 0x1}}, {0x6, 0x2, [0x8]}}]}]}, 0x174}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {0xf, 0xa}, {0xffe0, 0xa}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x84002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB="bd1b5c7809"], 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) 509.869901ms ago: executing program 4 (id=2810): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_read_local_version={{0xf}, {0x8, 0x5, 0x6, 0x0, 0xf001, 0x1392}}}}, 0xf) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000300)="13", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000ac0)='k', 0x1}], 0x1}}], 0x3, 0x10) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) shutdown(r0, 0x2) 405.05758ms ago: executing program 5 (id=2811): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r3 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000004080000280012800b0001006572f8b5303dd40104db02800600180001000000040012000500160002000000"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0xfffffffffffffffe}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 0s ago: executing program 0 (id=2812): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902120001000000000904000000020600007b098fcd1c8285684cd96c9ec2ab2772b5b018108f6134ad03472602f5ddad8d03"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000006c0)={0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="000004000000a7100c77"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x33, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) socket$unix(0x1, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080081004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x26}, 0x1, 0x0, 0x0, 0x20008805}, 0x15) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r6, 0x4008af04, &(0x7f0000000740)=0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001000)={0xf, {"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", 0x1000}}, 0x1006) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a01020000000000000000020000000c0002400000010073797a3100000000140000001100010000000000000000000000000a0000000000000000"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="5488fdd0a064468743aa31a741459f68c217146b72ccc8f0f2103478b2cfe2f68e6219a85bebb3e8e00f93e79d48621ea9d3c2e3271606cfb664743c0a597053eefff001b0f32b15ab0464bb520a78aea202d2deb2fbcfa2c82ebaa1075e47f839c571922ce6e247c42007fe8ee2481f455d7d0e5cd2f5f7fa89960068bb3089b9383120d9e8542204cb6a0ee3fee470a4e1436586801e931c50e8116969276c9dd1bf71ad007fc554cb70ba3e5ea31ec50c1d42023f57708e6d304eed46838184f8b3e24d9d494adbad4d838960f837833c24"], 0x80}}, 0x24004001) kernel console output (not intermixed with test programs): 3][ T9] usb 6-1: config 0 has no interface number 0 [ 666.347292][T15070] loop8: unable to read partition table [ 666.353158][T15070] loop8: partition table beyond EOD, truncated [ 666.362537][T15070] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 666.372167][ T9] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 666.387274][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.409014][ T9] usb 6-1: Product: syz [ 666.415975][ T9] usb 6-1: Manufacturer: syz [ 666.421870][ T9] usb 6-1: SerialNumber: syz [ 666.439079][ T9] usb 6-1: config 0 descriptor?? [ 666.469162][ T9] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 666.967474][T15098] syz.0.2489 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 667.021348][ T9] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 667.032010][T15098] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2489'. [ 667.121226][ T9] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 667.297042][ T5909] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 667.466603][ T5909] usb 1-1: config 0 has no interfaces? [ 667.481129][ T5909] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 667.490334][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.498414][ T5909] usb 1-1: Product: syz [ 667.508200][ T5909] usb 1-1: Manufacturer: syz [ 667.524605][ T5909] usb 1-1: SerialNumber: syz [ 667.542339][ T5909] usb 1-1: config 0 descriptor?? [ 667.773909][T15098] xt_hashlimit: size too large, truncated to 1048576 [ 667.780843][T15098] xt_hashlimit: Unknown mode mask 368, kernel too old? [ 668.505998][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 668.520695][ T5820] usb 6-1: USB disconnect, device number 121 [ 668.552556][ T5820] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 668.586266][ T5820] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 668.624818][ T5820] quatech2 6-1:0.51: device disconnected [ 668.957220][ T5820] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 669.112507][ T5820] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 669.121552][ T5820] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 669.426242][ T5820] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 669.512604][ T5820] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 669.550895][ T5820] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 669.641690][ T5820] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 669.651167][ T5820] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 669.659364][ T5820] usb 6-1: Product: syz [ 669.679826][ T5820] usb 6-1: Manufacturer: syz [ 669.727449][ T5882] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 669.782669][ T5820] cdc_wdm 6-1:1.0: skipping garbage [ 669.838428][ T5820] cdc_wdm 6-1:1.0: skipping garbage [ 669.853778][ T5820] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 669.927910][ T5923] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 669.942415][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 669.952668][ T5820] cdc_wdm 6-1:1.0: Unknown control protocol [ 669.958805][ T5882] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 669.960875][ T5909] usb 1-1: USB disconnect, device number 122 [ 669.996049][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.030108][T15129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2499'. [ 670.048163][ T5882] usb 3-1: config 0 descriptor?? [ 670.067215][ T5923] usb 5-1: device descriptor read/64, error -71 [ 670.260455][T15138] bond9: entered promiscuous mode [ 670.265510][T15138] bond9: entered allmulticast mode [ 670.287530][T15138] 8021q: adding VLAN 0 to HW filter on device bond9 [ 670.307075][ T5923] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 670.473100][ T5923] usb 5-1: device descriptor read/64, error -71 [ 670.494208][T15124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.508025][T15124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.522713][T15124] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2496'. [ 670.534122][ T5882] hid (null): invalid report_size -520815168 [ 670.544804][ T5882] itetech 0003:258A:6A88.0034: invalid report_size -520815168 [ 670.558139][ T5882] itetech 0003:258A:6A88.0034: item 0 4 1 7 parsing failed [ 670.566263][ T5882] itetech 0003:258A:6A88.0034: probe with driver itetech failed with error -22 [ 670.597735][ T5923] usb usb5-port1: attempt power cycle [ 670.970898][ T5923] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 671.012043][ T5923] usb 5-1: device descriptor read/8, error -71 [ 671.057189][ T5820] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 671.231501][ T5820] usb 2-1: config 0 has no interfaces? [ 671.252963][ T5820] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 671.262915][ T5923] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 671.278404][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.286412][ T5820] usb 2-1: Product: syz [ 671.293990][ T5923] usb 5-1: device descriptor read/8, error -71 [ 671.319084][ T5820] usb 2-1: Manufacturer: syz [ 671.332860][ T5820] usb 2-1: SerialNumber: syz [ 671.344987][ T5820] usb 2-1: config 0 descriptor?? [ 671.408295][ T5923] usb usb5-port1: unable to enumerate USB device [ 671.593701][ T5820] usb 6-1: USB disconnect, device number 122 [ 672.026994][ T5820] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 672.177657][ T5820] usb 6-1: Using ep0 maxpacket: 32 [ 672.185823][ T5820] usb 6-1: config 4 has an invalid interface number: 128 but max is 0 [ 672.202144][ T5820] usb 6-1: config 4 has no interface number 0 [ 672.215984][ T5820] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.412739][ T5820] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.423207][ T5820] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 672.437214][ T5820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.459705][ T5820] hub 6-1:4.128: USB hub found [ 672.616785][ T5923] usb 3-1: USB disconnect, device number 18 [ 672.860248][T15159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.887845][T15159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.978910][ T5820] hub 6-1:4.128: 2 ports detected [ 672.984032][ T5820] hub 6-1:4.128: Using single TT (err -22) [ 673.009530][ T5820] hub 6-1:4.128: hub_hub_status failed (err = -71) [ 673.016096][ T5820] hub 6-1:4.128: config failed, can't get hub status (err -71) [ 673.060610][ T5820] usb 6-1: USB disconnect, device number 123 [ 673.509082][T15181] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2512'. [ 673.990333][T15185] bond0: entered promiscuous mode [ 674.017191][T15185] bond_slave_0: entered promiscuous mode [ 674.077593][T15185] bond_slave_1: entered promiscuous mode [ 674.270453][ T5820] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 674.342047][ T5909] usb 2-1: USB disconnect, device number 37 [ 674.447215][ T5820] usb 3-1: Using ep0 maxpacket: 8 [ 674.454043][ T5820] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 674.482648][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.539674][ T30] audit: type=1400 audit(1747213829.826:803): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=3A3A0AE10CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A552C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=15193 comm="syz.5.2516" [ 674.640207][ T5820] usb 3-1: config 0 descriptor?? [ 674.699866][T15200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2518'. [ 674.827047][ T5909] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 674.903787][ T5820] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 674.998822][ T5909] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 675.007708][ T5909] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 675.024167][ T5909] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 675.045374][ T5909] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 675.062229][ T5909] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 675.063428][T15214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2523'. [ 675.076256][ T5909] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 675.089963][T15214] macsec1: entered allmulticast mode [ 675.097297][T15214] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 675.099185][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 675.112846][ T5909] usb 2-1: Product: syz [ 675.118495][ T5909] usb 2-1: Manufacturer: syz [ 675.119194][T15214] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 675.144573][ T5909] cdc_wdm 2-1:1.0: skipping garbage [ 675.161108][ T5909] cdc_wdm 2-1:1.0: skipping garbage [ 675.221401][ T5909] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 675.242905][T15217] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 675.262745][T15217] netlink: 'syz.0.2522': attribute type 10 has an invalid length. [ 675.287916][ T5909] cdc_wdm 2-1:1.0: Unknown control protocol [ 675.326769][T15220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2522'. [ 675.375848][T15217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.409621][T15217] team0: Port device bond0 added [ 676.138801][ T5820] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 676.164669][ T5820] asix 3-1:0.0: probe with driver asix failed with error -71 [ 676.266456][ T5820] usb 3-1: USB disconnect, device number 19 [ 676.679975][ T5820] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 676.882176][ T5820] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 676.967401][ T5923] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 677.000084][ T5820] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 677.081299][ T5820] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 677.103448][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.122397][ T5820] usb 3-1: Product: syz [ 677.135145][ T5820] usb 3-1: Manufacturer: syz [ 677.223081][ T5820] usb 3-1: SerialNumber: syz [ 677.503253][ T5820] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 677.540296][ T5909] usb 2-1: USB disconnect, device number 38 [ 677.683327][ T5820] usb 3-1: USB disconnect, device number 20 [ 678.118029][T15255] IPv6: Can't replace route, no match found [ 678.143949][T15260] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2533'. [ 678.575646][T15274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2535'. [ 678.671278][T15274] fuse: Unknown parameter '€' [ 679.417060][ T5909] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 679.527074][ T5820] usb 1-1: new full-speed USB device number 123 using dummy_hcd [ 679.570307][ T5909] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 679.579122][ T5909] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 679.609580][ T5909] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 679.669354][ T5909] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 679.741664][ T5909] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 679.766257][ T5820] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 679.777411][ T5820] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 679.807159][ T5820] usb 1-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 11 [ 679.938788][ T5909] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 679.957054][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 679.996321][ T5909] usb 6-1: Product: syz [ 680.000589][ T5820] usb 1-1: config 1 interface 0 has no altsetting 0 [ 680.007243][ T5909] usb 6-1: Manufacturer: syz [ 680.073314][ T5820] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 680.086887][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 680.113729][ T5909] cdc_wdm 6-1:1.0: skipping garbage [ 680.155996][ T5820] usb 1-1: SerialNumber: syz [ 680.160728][ T5909] cdc_wdm 6-1:1.0: skipping garbage [ 680.177319][ T5909] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 680.183424][ T5909] cdc_wdm 6-1:1.0: Unknown control protocol [ 680.197548][T15295] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 680.205281][T15295] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 680.470402][ T5820] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 680.516426][ T5820] usb 1-1: USB disconnect, device number 123 [ 680.587281][ T5882] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 680.739871][ T5882] usb 2-1: config 0 has no interfaces? [ 680.752180][ T5882] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 680.762101][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.779838][ T5882] usb 2-1: Product: syz [ 680.790023][ T5882] usb 2-1: Manufacturer: syz [ 680.804525][ T5882] usb 2-1: SerialNumber: syz [ 680.820096][ T5882] usb 2-1: config 0 descriptor?? [ 680.978976][T15309] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2545'. [ 681.171380][ T30] audit: type=1326 audit(1747213836.436:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15299 comm="syz.1.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2b18e969 code=0x7ffc0000 [ 681.273333][ T30] audit: type=1326 audit(1747213836.436:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15299 comm="syz.1.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2b18e969 code=0x7ffc0000 [ 681.366029][ T30] audit: type=1326 audit(1747213836.436:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15299 comm="syz.1.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fed2b18e969 code=0x7ffc0000 [ 681.419566][T15314] input: syz1 as /devices/virtual/input/input54 [ 681.440954][ T30] audit: type=1326 audit(1747213836.436:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15299 comm="syz.1.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2b18e969 code=0x7ffc0000 [ 681.544505][ T30] audit: type=1326 audit(1747213836.436:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15299 comm="syz.1.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2b18e969 code=0x7ffc0000 [ 681.601952][ T30] audit: type=1326 audit(1747213836.436:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15299 comm="syz.1.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fed2b18e969 code=0x7ffc0000 [ 681.697092][ T5820] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 681.747229][ T30] audit: type=1326 audit(1747213836.436:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15299 comm="syz.1.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2b18e969 code=0x7ffc0000 [ 681.844004][ T30] audit: type=1326 audit(1747213836.436:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15299 comm="syz.1.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2b18e969 code=0x7ffc0000 [ 681.859554][ T5820] usb 1-1: Using ep0 maxpacket: 32 [ 681.879928][ T30] audit: type=1326 audit(1747213836.436:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15299 comm="syz.1.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fed2b18e969 code=0x7ffc0000 [ 681.908554][ T30] audit: type=1326 audit(1747213836.436:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15299 comm="syz.1.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2b18e969 code=0x7ffc0000 [ 681.945806][ T5820] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 681.955172][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.984940][ T5820] usb 1-1: config 0 descriptor?? [ 681.996183][T15320] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2549'. [ 682.133783][ T5882] usb 6-1: USB disconnect, device number 124 [ 682.216175][ T5820] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 682.424148][ T5820] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 682.487857][ T5820] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 682.514267][ T5820] usb 1-1: media controller created [ 682.553153][ T5820] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 682.761715][ T5923] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 682.774130][T15315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.782870][T15315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.813873][ T5820] az6027: usb out operation failed. (-71) [ 682.819765][ T5820] stb0899_attach: Driver disabled by Kconfig [ 682.826198][ T5820] az6027: no front-end attached [ 682.826198][ T5820] [ 682.842186][ T5820] az6027: usb out operation failed. (-71) [ 682.881417][ T5820] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 682.907217][ T5820] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input55 [ 682.926305][ T5820] dvb-usb: schedule remote query interval to 400 msecs. [ 682.935278][ T5820] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 682.955226][ T5820] usb 1-1: USB disconnect, device number 124 [ 682.972869][ T5923] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=66.21 [ 682.998609][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.044540][ T5923] usb 6-1: config 0 descriptor?? [ 683.092759][ T5923] pegasus_notetaker 6-1:0.0: Invalid number of endpoints [ 683.106321][ T5923] pegasus_notetaker 6-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 683.115169][ T5820] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 683.223597][T15334] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2553'. [ 683.262827][T15327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.276184][T15326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.297834][T15327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.310899][ T5923] usb 2-1: USB disconnect, device number 39 [ 683.330448][T15326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.443655][ T5882] usb 6-1: USB disconnect, device number 125 [ 683.657039][ T5820] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 683.840853][ T5820] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 683.855104][ T5820] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 683.865635][ T5820] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 684.043273][ T5882] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 684.045906][T15359] openvswitch: netlink: Flow actions attr not present in new flow. [ 684.337310][ T5882] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 684.337379][ T5882] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 684.337402][ T5882] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 684.337444][ T5882] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 684.337475][ T5882] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 684.341137][ T5882] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 684.341159][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 684.341182][ T5882] usb 5-1: Product: syz [ 684.341200][ T5882] usb 5-1: Manufacturer: syz [ 684.438412][ T5882] cdc_wdm 5-1:1.0: skipping garbage [ 684.438435][ T5882] cdc_wdm 5-1:1.0: skipping garbage [ 684.442932][ T5882] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 684.442953][ T5882] cdc_wdm 5-1:1.0: Unknown control protocol [ 685.261511][ T5882] usb 2-1: new low-speed USB device number 40 using dummy_hcd [ 685.354125][T15375] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2565'. [ 685.470981][ T5882] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 685.479402][ T5882] usb 2-1: config 0 has no interface number 0 [ 685.485543][ T5882] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 685.520644][ T5882] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 685.547541][ T5882] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 685.590599][ T5882] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 685.610827][ T5882] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 685.631574][ T5882] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 685.645010][ T5882] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 685.657191][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.687644][ T5882] usb 2-1: config 0 descriptor?? [ 685.698471][T15372] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 685.705754][T15372] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 685.798478][ T5882] ldusb 2-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 685.813077][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.819613][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.148338][T15388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2569'. [ 686.237190][ T5882] usb 6-1: new full-speed USB device number 126 using dummy_hcd [ 686.257556][T15391] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2570'. [ 686.390868][ T5820] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 686.390958][ T5882] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 686.400188][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.412074][ T5820] usb 3-1: can't set config #1, error -71 [ 686.513953][ T5882] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 686.576351][ T5820] usb 3-1: USB disconnect, device number 21 [ 686.622909][ T5882] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 686.632641][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.653427][ T5882] usb 6-1: Product: syz [ 686.678482][ T5882] usb 6-1: Manufacturer: syz [ 686.732903][ T5882] usb 6-1: SerialNumber: syz [ 686.794789][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 686.795063][ T5881] usb 5-1: USB disconnect, device number 43 [ 686.801594][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 686.801615][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 686.837802][T10978] usb 2-1: USB disconnect, device number 40 [ 686.863603][T10978] ldusb 2-1:0.55: LD USB Device #1 now disconnected [ 687.143402][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 687.143421][ T30] audit: type=1326 audit(1747213842.426:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15409 comm="syz.4.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9826d8e969 code=0x7ffc0000 [ 687.243507][ T5882] usb 6-1: 0:2 : does not exist [ 687.273764][ T30] audit: type=1326 audit(1747213842.426:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15409 comm="syz.4.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9826d8e969 code=0x7ffc0000 [ 687.411117][ T30] audit: type=1326 audit(1747213842.426:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15409 comm="syz.4.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9826d8e969 code=0x7ffc0000 [ 687.584614][ T30] audit: type=1326 audit(1747213842.426:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15409 comm="syz.4.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9826d8e969 code=0x7ffc0000 [ 687.609211][T15383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.637967][T15383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.657697][ T5882] usb 6-1: USB disconnect, device number 126 [ 687.744555][ T30] audit: type=1326 audit(1747213842.426:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15409 comm="syz.4.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9826d8e969 code=0x7ffc0000 [ 687.836849][ T30] audit: type=1326 audit(1747213842.426:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15409 comm="syz.4.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9826d8e969 code=0x7ffc0000 [ 687.859983][ T30] audit: type=1326 audit(1747213842.426:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15409 comm="syz.4.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9826d8e969 code=0x7ffc0000 [ 687.877094][T15420] openvswitch: netlink: Flow actions attr not present in new flow. [ 687.883357][ T30] audit: type=1326 audit(1747213842.426:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15409 comm="syz.4.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9826d8e969 code=0x7ffc0000 [ 687.917064][ T5881] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 687.938546][ T30] audit: type=1326 audit(1747213842.426:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15409 comm="syz.4.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9826d8e969 code=0x7ffc0000 [ 687.961918][ T30] audit: type=1326 audit(1747213842.426:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15409 comm="syz.4.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f9826d8e969 code=0x7ffc0000 [ 688.085699][ T5881] usb 2-1: config 0 has an invalid descriptor of length 195, skipping remainder of the config [ 688.096274][ T5881] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 688.121638][ T5881] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 196 [ 688.159647][ T5881] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 688.179522][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.247135][ T5881] usb 2-1: config 0 descriptor?? [ 688.266561][ T5881] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 688.397983][T15436] xt_bpf: check failed: parse error [ 688.557317][ T5882] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 688.717636][ T5882] usb 6-1: Using ep0 maxpacket: 16 [ 688.746187][ T5882] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 688.795592][ T5882] usb 6-1: config 0 has no interface number 0 [ 688.829935][ T5882] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 688.885315][ T5882] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 688.938761][ T5882] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 688.954144][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 689.027287][ T5882] usb 6-1: Product: syz [ 689.036364][ T5882] usb 6-1: SerialNumber: syz [ 689.077839][ T5882] usb 6-1: config 0 descriptor?? [ 689.098599][ T5882] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 689.120788][ T5882] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input56 [ 689.296203][T15435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.297107][ T5881] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 689.305099][T15435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.375055][T15448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.397401][T15435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.398970][T15448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.406235][T15435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.488850][ T5881] usb 3-1: Using ep0 maxpacket: 32 [ 689.498813][ T5881] usb 3-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 689.520113][ T5881] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 689.545603][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 689.545687][ T5820] usb 6-1: USB disconnect, device number 127 [ 689.552844][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 689.631730][ T5881] usb 3-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 689.665610][ T5820] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 689.684800][ T5881] usb 3-1: config 0 interface 0 has no altsetting 0 [ 689.707368][ T5881] usb 3-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 689.720528][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.761861][ T5881] usb 3-1: config 0 descriptor?? [ 689.823121][T15457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2586'. [ 689.886654][T15459] syz.0.2586: vmalloc error: size 85983232, failed to allocated page array size 167936, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 689.916585][T15459] CPU: 0 UID: 0 PID: 15459 Comm: syz.0.2586 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 689.916612][T15459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 689.916627][T15459] Call Trace: [ 689.916634][T15459] [ 689.916643][T15459] dump_stack_lvl+0x189/0x250 [ 689.916679][T15459] ? __pfx_dump_stack_lvl+0x10/0x10 [ 689.916706][T15459] ? __pfx__printk+0x10/0x10 [ 689.916725][T15459] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 689.916744][T15459] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 689.916764][T15459] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 689.916786][T15459] warn_alloc+0x214/0x310 [ 689.916819][T15459] ? __pfx_warn_alloc+0x10/0x10 [ 689.916855][T15459] ? __get_vm_area_node+0x28f/0x300 [ 689.916897][T15459] __vmalloc_node_range_noprof+0x5f2/0x12c0 [ 689.916951][T15459] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 689.916979][T15459] ? __kasan_kmalloc_large+0x1a/0xa0 [ 689.917006][T15459] ? rcu_is_watching+0x15/0xb0 [ 689.917025][T15459] ? drm_property_create_blob+0x65/0x300 [ 689.917047][T15459] ? drm_property_create_blob+0x65/0x300 [ 689.917067][T15459] __kvmalloc_node_noprof+0x3a0/0x5e0 [ 689.917092][T15459] ? drm_property_create_blob+0x65/0x300 [ 689.917114][T15459] ? drm_dev_enter+0x49/0x150 [ 689.917142][T15459] ? acpi_ex_write_with_update_rule+0xee/0x330 [ 689.917165][T15459] drm_property_create_blob+0x65/0x300 [ 689.917192][T15459] drm_mode_createblob_ioctl+0xbf/0x400 [ 689.917220][T15459] drm_ioctl_kernel+0x2cc/0x390 [ 689.917247][T15459] ? __pfx_drm_mode_createblob_ioctl+0x10/0x10 [ 689.917270][T15459] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 689.917304][T15459] drm_ioctl+0x67f/0xb10 [ 689.917333][T15459] ? __pfx_drm_mode_createblob_ioctl+0x10/0x10 [ 689.917360][T15459] ? __pfx_drm_ioctl+0x10/0x10 [ 689.917396][T15459] ? __fget_files+0x3a0/0x420 [ 689.917420][T15459] ? __fget_files+0x2a/0x420 [ 689.917447][T15459] ? bpf_lsm_file_ioctl+0x9/0x20 [ 689.917471][T15459] ? __pfx_drm_ioctl+0x10/0x10 [ 689.917496][T15459] __se_sys_ioctl+0xfc/0x170 [ 689.917518][T15459] do_syscall_64+0xf6/0x210 [ 689.917545][T15459] ? clear_bhb_loop+0x60/0xb0 [ 689.917569][T15459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.917587][T15459] RIP: 0033:0x7f3d87d8e969 [ 689.917604][T15459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 689.917621][T15459] RSP: 002b:00007f3d88c14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 689.917640][T15459] RAX: ffffffffffffffda RBX: 00007f3d87fb6160 RCX: 00007f3d87d8e969 [ 689.917654][T15459] RDX: 00002000000000c0 RSI: 00000000c01064bd RDI: 0000000000000007 [ 689.917667][T15459] RBP: 00007f3d87e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 689.917678][T15459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 689.917689][T15459] R13: 0000000000000000 R14: 00007f3d87fb6160 R15: 00007f3d880dfa28 [ 689.917716][T15459] [ 689.984267][T15463] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2587'. [ 689.996204][T15459] Mem-Info: [ 690.144402][T15466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.155713][ T5820] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 690.237418][T15459] active_anon:9954 inactive_anon:0 isolated_anon:0 [ 690.237418][T15459] active_file:11574 inactive_file:3936 isolated_file:0 [ 690.237418][T15459] unevictable:768 dirty:126 writeback:0 [ 690.237418][T15459] slab_reclaimable:10520 slab_unreclaimable:122418 [ 690.237418][T15459] mapped:33500 shmem:4410 pagetables:1270 [ 690.237418][T15459] sec_pagetables:6 bounce:0 [ 690.237418][T15459] kernel_misc_reclaimable:0 [ 690.237418][T15459] free:1333824 free_pcp:215 free_cma:0 [ 690.295318][T15466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.324588][T15459] Node 0 active_anon:39916kB inactive_anon:0kB active_file:46256kB inactive_file:15608kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133964kB dirty:504kB writeback:0kB shmem:16100kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12260kB pagetables:5080kB sec_pagetables:24kB all_unreclaimable? no Balloon:0kB [ 690.358686][T15459] Node 1 active_anon:0kB inactive_anon:0kB active_file:40kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:0kB writeback:0kB shmem:1540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 690.398418][T15459] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 690.428882][T15459] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 690.435079][ T5820] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 690.444817][ T5820] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 690.455645][T15459] Node 0 DMA32 free:1408536kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:41144kB inactive_anon:0kB active_file:46256kB inactive_file:15528kB unevictable:1536kB writepending:504kB present:3129332kB managed:2564128kB mlocked:0kB bounce:0kB free_pcp:2080kB local_pcp:1148kB free_cma:0kB [ 690.488500][ T5820] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 690.498037][ T5820] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 690.510762][ T5820] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 690.521990][T15459] lowmem_reserve[]: 0 0 0 0 0 [ 690.526773][T15459] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 690.576985][T15459] lowmem_reserve[]: 0 0 0 0 0 [ 690.582173][T15459] Node 1 Normal free:3909740kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:40kB inactive_file:136kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 690.613618][ T5820] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 690.621875][T15445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.625051][ T5820] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 690.634040][T15445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.645313][ T5820] usb 6-1: Product: syz [ 690.653226][T15459] lowmem_reserve[]: 0 0 0 0 0 [ 690.656020][ T5881] zeroplus 0003:0C12:0030.0035: item fetching failed at offset 5/7 [ 690.673541][T15459] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 690.674014][ T5881] zeroplus 0003:0C12:0030.0035: parse failed [ 690.692495][ T5820] usb 6-1: Manufacturer: syz [ 690.706544][ T5820] cdc_wdm 6-1:1.0: skipping garbage [ 690.712525][ T5820] cdc_wdm 6-1:1.0: skipping garbage [ 690.721061][ T5820] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 690.721091][T15459] Node 0 [ 690.729473][ T5881] zeroplus 0003:0C12:0030.0035: probe with driver zeroplus failed with error -22 [ 690.741968][ T5820] cdc_wdm 6-1:1.0: Unknown control protocol [ 690.792517][T15459] DMA32: 111*4kB (UME) 83*8kB (UE) 327*16kB (UME) 462*32kB (UME) 191*64kB (UME) 221*128kB (UME) 58*256kB (UME) 37*512kB (UME) 18*1024kB (UM) 8*2048kB (UM) 312*4096kB (UM) = 1408196kB [ 690.837510][T15459] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 690.851423][T15459] Node 1 Normal: 235*4kB (UME) 74*8kB (UME) 33*16kB (UME) 239*32kB (UME) 92*64kB (UME) 23*128kB (UME) 12*256kB (UM) 8*512kB (UME) 5*1024kB (UME) 8*2048kB (UME) 943*4096kB (M) = 3909740kB [ 690.860483][ T5882] usb 3-1: USB disconnect, device number 22 [ 690.870440][T15459] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 690.870463][T15459] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 690.870481][T15459] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 690.870498][T15459] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 690.870514][T15459] 19916 total pagecache pages [ 690.870533][T15459] 0 pages in swap cache [ 690.939950][T15459] Free swap = 124996kB [ 690.952935][T15459] Total swap = 124996kB [ 690.999194][T15459] 2097051 pages RAM [ 691.003790][T15459] 0 pages HighMem/MovableOnly [ 691.009133][ T5881] usb 2-1: USB disconnect, device number 41 [ 691.011653][T15459] 424361 pages reserved [ 691.062944][T15459] 0 pages cma reserved [ 691.230154][T15468] program syz.1.2588 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 691.245702][T15468] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2588'. [ 691.686744][T15486] xt_bpf: check failed: parse error [ 691.742098][ T5881] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 691.972587][ T5881] usb 2-1: config 0 has no interfaces? [ 691.997309][ T5881] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 692.009470][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.018751][ T5881] usb 2-1: Product: syz [ 692.022986][ T5881] usb 2-1: Manufacturer: syz [ 692.068260][ T5881] usb 2-1: SerialNumber: syz [ 692.496247][ T5881] usb 2-1: config 0 descriptor?? [ 692.509299][T15492] openvswitch: netlink: Flow actions attr not present in new flow. [ 692.744452][ T5923] usb 6-1: USB disconnect, device number 2 [ 692.840662][T15480] netlink: 'syz.1.2590': attribute type 4 has an invalid length. [ 692.937273][T15498] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2594'. [ 692.963337][T15498] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2594'. [ 692.963372][ T5882] usb 5-1: new low-speed USB device number 44 using dummy_hcd [ 692.987610][T15499] binder: BINDER_SET_CONTEXT_MGR already set [ 692.995853][T15499] binder: 15472:15499 ioctl 4018620d 200000000040 returned -16 [ 693.207013][ T5882] usb 5-1: device descriptor read/64, error -71 [ 693.477553][ T5882] usb 5-1: new low-speed USB device number 45 using dummy_hcd [ 693.607134][ T5882] usb 5-1: device descriptor read/64, error -71 [ 693.717475][ T5882] usb usb5-port1: attempt power cycle [ 693.788200][T15513] xt_bpf: check failed: parse error [ 694.067029][ T5882] usb 5-1: new low-speed USB device number 46 using dummy_hcd [ 694.087708][ T5882] usb 5-1: device descriptor read/8, error -71 [ 694.327452][ T5882] usb 5-1: new low-speed USB device number 47 using dummy_hcd [ 694.337293][T15520] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2599'. [ 694.494457][ T5881] usb 2-1: USB disconnect, device number 42 [ 694.508614][ T5882] usb 5-1: device descriptor read/8, error -71 [ 694.676685][ T5882] usb usb5-port1: unable to enumerate USB device [ 694.784009][T15526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2601'. [ 695.327235][ T5923] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 695.337212][ T5882] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 695.479065][ T5923] usb 2-1: config 0 has no interfaces? [ 695.486515][ T5923] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 695.497212][ T5882] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 695.506925][ T5882] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 695.522519][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.530898][ T5882] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 695.550065][ T5923] usb 2-1: Product: syz [ 695.558396][ T5882] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 695.578499][ T5923] usb 2-1: Manufacturer: syz [ 695.599645][ T5923] usb 2-1: SerialNumber: syz [ 695.620320][ T5923] usb 2-1: config 0 descriptor?? [ 695.634021][ T5882] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 695.663819][ T5882] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 695.673104][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 695.682760][ T5882] usb 3-1: Product: syz [ 695.694858][ T5882] usb 3-1: Manufacturer: syz [ 695.725802][ T5882] cdc_wdm 3-1:1.0: skipping garbage [ 695.745497][ T5882] cdc_wdm 3-1:1.0: skipping garbage [ 695.777400][T15543] netlink: 'syz.5.2605': attribute type 10 has an invalid length. [ 695.789319][ T5882] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 695.795251][ T5882] cdc_wdm 3-1:1.0: Unknown control protocol [ 695.873125][ T5820] usb 2-1: USB disconnect, device number 43 [ 696.027033][ T5909] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 696.215141][ T5909] usb 6-1: unable to get BOS descriptor or descriptor too short [ 696.268824][ T5909] usb 6-1: config 0 has no interfaces? [ 696.277447][ T5909] usb 6-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 696.293246][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.311465][ T5909] usb 6-1: Product: syz [ 696.328887][ T5909] usb 6-1: Manufacturer: syz [ 696.337173][ T5909] usb 6-1: SerialNumber: syz [ 696.366684][ T5909] usb 6-1: config 0 descriptor?? [ 696.469784][T15562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2609'. [ 696.482455][T15562] FAULT_INJECTION: forcing a failure. [ 696.482455][T15562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 696.497894][T15562] CPU: 0 UID: 0 PID: 15562 Comm: syz.0.2609 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 696.497911][T15562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 696.497920][T15562] Call Trace: [ 696.497927][T15562] [ 696.497937][T15562] dump_stack_lvl+0x189/0x250 [ 696.497971][T15562] ? __pfx_dump_stack_lvl+0x10/0x10 [ 696.497997][T15562] ? __pfx__printk+0x10/0x10 [ 696.498027][T15562] should_fail_ex+0x414/0x560 [ 696.498044][T15562] _copy_from_user+0x2d/0xb0 [ 696.498063][T15562] __copy_msghdr+0x3c5/0x5b0 [ 696.498091][T15562] ___sys_sendmsg+0x1a5/0x2a0 [ 696.498120][T15562] ? __pfx____sys_sendmsg+0x10/0x10 [ 696.498180][T15562] ? __might_fault+0xb0/0x130 [ 696.498200][T15562] __sys_sendmmsg+0x227/0x430 [ 696.498221][T15562] ? __pfx___sys_sendmmsg+0x10/0x10 [ 696.498256][T15562] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 696.498296][T15562] ? ksys_write+0x1f0/0x250 [ 696.498317][T15562] ? rcu_is_watching+0x15/0xb0 [ 696.498337][T15562] __x64_sys_sendmmsg+0xa0/0xc0 [ 696.498357][T15562] do_syscall_64+0xf6/0x210 [ 696.498376][T15562] ? clear_bhb_loop+0x60/0xb0 [ 696.498411][T15562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.498429][T15562] RIP: 0033:0x7f3d87d8e969 [ 696.498444][T15562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 696.498460][T15562] RSP: 002b:00007f3d88c56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 696.498477][T15562] RAX: ffffffffffffffda RBX: 00007f3d87fb5fa0 RCX: 00007f3d87d8e969 [ 696.498488][T15562] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 696.498497][T15562] RBP: 00007f3d88c56090 R08: 0000000000000000 R09: 0000000000000000 [ 696.498505][T15562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 696.498513][T15562] R13: 0000000000000000 R14: 00007f3d87fb5fa0 R15: 00007f3d880dfa28 [ 696.498537][T15562] [ 696.698143][ C0] vkms_vblank_simulate: vblank timer overrun [ 696.743977][T15552] netlink: 'syz.1.2607': attribute type 1 has an invalid length. [ 696.773824][T15543] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2605'. [ 696.783405][T15543] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2605'. [ 696.816818][T15543] ipvlan0: entered promiscuous mode [ 696.829854][T15543] ipvlan0: left promiscuous mode [ 696.971627][T15563] xt_l2tp: missing protocol rule (udp|l2tpip) [ 697.417546][ T5882] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 697.572903][ T5882] usb 1-1: config 16 interface 0 has no altsetting 0 [ 697.581010][ T5882] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 697.590741][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 697.638563][ T5882] usb 1-1: Manufacturer: syz [ 697.886317][ T5882] (null): keene_cmd_main failed (-71) [ 697.899266][ T5882] video4linux radio48: keene_cmd_main failed (-71) [ 697.906180][ T5882] radio-keene 1-1:16.0: V4L2 device registered as radio48 [ 697.918022][ T5882] usb 1-1: USB disconnect, device number 125 [ 698.019969][ T5923] usb 3-1: USB disconnect, device number 23 [ 698.386228][ T5820] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 698.636440][ T5820] usb 5-1: config index 0 descriptor too short (expected 4114, got 18) [ 698.649876][ T5820] usb 5-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 698.684622][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.771055][ T5820] usb 5-1: Product: syz [ 698.782187][ T5820] usb 5-1: Manufacturer: syz [ 698.793678][ T5820] usb 5-1: SerialNumber: syz [ 698.807798][ T5820] usb 5-1: config 0 descriptor?? [ 698.846092][ T5909] usb 6-1: USB disconnect, device number 3 [ 699.030661][T15598] netlink: 368 bytes leftover after parsing attributes in process `syz.5.2618'. [ 699.064854][T15599] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2619'. [ 699.142391][T15602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2620'. [ 699.155280][T15602] FAULT_INJECTION: forcing a failure. [ 699.155280][T15602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 699.253250][T15602] CPU: 1 UID: 0 PID: 15602 Comm: syz.1.2620 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 699.253277][T15602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 699.253288][T15602] Call Trace: [ 699.253296][T15602] [ 699.253304][T15602] dump_stack_lvl+0x189/0x250 [ 699.253339][T15602] ? __pfx_dump_stack_lvl+0x10/0x10 [ 699.253367][T15602] ? __pfx__printk+0x10/0x10 [ 699.253398][T15602] should_fail_ex+0x414/0x560 [ 699.253421][T15602] _copy_to_user+0x31/0xb0 [ 699.253449][T15602] simple_read_from_buffer+0xe1/0x170 [ 699.253469][T15602] proc_fail_nth_read+0x1df/0x250 [ 699.253490][T15602] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 699.253511][T15602] ? rw_verify_area+0x258/0x650 [ 699.253525][T15602] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 699.253545][T15602] vfs_read+0x200/0x980 [ 699.253563][T15602] ? __pfx___mutex_lock+0x10/0x10 [ 699.253580][T15602] ? __pfx_vfs_read+0x10/0x10 [ 699.253596][T15602] ? __fget_files+0x2a/0x420 [ 699.253616][T15602] ? __fget_files+0x3a0/0x420 [ 699.253632][T15602] ? __fget_files+0x2a/0x420 [ 699.253655][T15602] ksys_read+0x145/0x250 [ 699.253669][T15602] ? rcu_is_watching+0x15/0xb0 [ 699.253682][T15602] ? __pfx_ksys_read+0x10/0x10 [ 699.253699][T15602] ? do_syscall_64+0xba/0x210 [ 699.253719][T15602] do_syscall_64+0xf6/0x210 [ 699.253736][T15602] ? clear_bhb_loop+0x60/0xb0 [ 699.253751][T15602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.253764][T15602] RIP: 0033:0x7fed2b18d37c [ 699.253776][T15602] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 699.253787][T15602] RSP: 002b:00007fed2bf34030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 699.253801][T15602] RAX: ffffffffffffffda RBX: 00007fed2b3b5fa0 RCX: 00007fed2b18d37c [ 699.253811][T15602] RDX: 000000000000000f RSI: 00007fed2bf340a0 RDI: 0000000000000005 [ 699.253819][T15602] RBP: 00007fed2bf34090 R08: 0000000000000000 R09: 0000000000000000 [ 699.253827][T15602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 699.253834][T15602] R13: 0000000000000000 R14: 00007fed2b3b5fa0 R15: 00007fed2b4dfa28 [ 699.253854][T15602] [ 699.484112][ T5820] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 699.865055][T15609] netlink: 'syz.5.2622': attribute type 2 has an invalid length. [ 699.886240][T15609] netlink: 'syz.5.2622': attribute type 2 has an invalid length. [ 700.208700][ T5820] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 700.230657][ T5820] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 700.268555][ T5820] asix 5-1:0.0: probe with driver asix failed with error -71 [ 700.287485][ T5923] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 700.305668][ T5820] usb 5-1: USB disconnect, device number 48 [ 700.410527][T15607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2621'. [ 700.437048][ T5923] usb 6-1: device descriptor read/64, error -71 [ 700.667148][ T5820] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 700.671087][T15620] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 700.696106][T15620] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 700.707022][ T5923] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 700.725568][T15620] netlink: 'syz.0.2625': attribute type 29 has an invalid length. [ 700.738408][T15620] netlink: 'syz.0.2625': attribute type 29 has an invalid length. [ 700.817345][ T5909] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 700.828861][ T5820] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 700.838997][ T5820] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 700.857889][ T5923] usb 6-1: device descriptor read/64, error -71 [ 700.872546][ T5820] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 700.896508][ T5820] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 700.910450][ T5820] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 700.924139][ T5820] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 700.934937][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 700.960707][ T5820] usb 5-1: Product: syz [ 700.971860][ T5820] usb 5-1: Manufacturer: syz [ 700.987048][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 701.002135][ T5923] usb usb6-port1: attempt power cycle [ 701.005665][ T5820] cdc_wdm 5-1:1.0: skipping garbage [ 701.014755][ T5909] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 701.034585][ T5909] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 701.054021][ T5882] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 701.077121][ T5820] cdc_wdm 5-1:1.0: skipping garbage [ 701.089156][ T5820] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 701.100452][ T5820] cdc_wdm 5-1:1.0: Unknown control protocol [ 701.113307][ T5909] usb 2-1: string descriptor 0 read error: -22 [ 701.119960][ T5909] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 701.131574][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.187547][ T5882] usb 1-1: device descriptor read/64, error -71 [ 701.367854][T15618] syzkaller1: entered allmulticast mode [ 701.375667][ T5923] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 701.397703][ T5923] usb 6-1: device descriptor read/8, error -71 [ 701.442277][ T5882] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 701.589350][ T5882] usb 1-1: device descriptor read/64, error -71 [ 701.652598][ T5923] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 701.679348][ T5923] usb 6-1: device descriptor read/8, error -71 [ 701.697530][ T5882] usb usb1-port1: attempt power cycle [ 701.789575][ T5923] usb usb6-port1: unable to enumerate USB device [ 702.017538][T15637] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 702.050755][ T5882] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 702.081621][ T5882] usb 1-1: device descriptor read/8, error -71 [ 702.327301][ T5923] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 702.334999][ T5882] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 702.357612][ T5882] usb 1-1: device descriptor read/8, error -71 [ 702.468030][ T5882] usb usb1-port1: unable to enumerate USB device [ 702.488840][ T5923] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 702.496878][ T5923] usb 3-1: config 0 has no interface number 0 [ 702.503321][ T5923] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.514649][ T5923] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 702.524516][ T5923] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 702.533959][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.545033][ T5923] usb 3-1: config 0 descriptor?? [ 702.824975][ T5923] usbhid 3-1:0.1: can't add hid device: -71 [ 702.832193][ T5923] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 702.853107][ T5923] usb 3-1: USB disconnect, device number 24 [ 702.892971][ T5820] usb 2-1: USB disconnect, device number 44 [ 703.123767][T15646] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2632'. [ 703.134033][T15646] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2632'. [ 703.397233][ T5923] usb 5-1: USB disconnect, device number 49 [ 703.609219][T15661] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2636'. [ 703.628613][T15660] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2634'. [ 703.733908][T15666] netlink: 312 bytes leftover after parsing attributes in process `syz.2.2635'. [ 704.677190][ T5909] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 704.877861][T15682] nvme_fabrics: missing parameter 'transport=%s' [ 704.937406][ T5909] usb 3-1: Using ep0 maxpacket: 16 [ 704.950388][ T5909] usb 3-1: config 2 has an invalid interface number: 32 but max is 3 [ 704.977100][ T5909] usb 3-1: config 2 has an invalid interface number: 55 but max is 3 [ 704.995597][ T5909] usb 3-1: config 2 has an invalid interface number: 196 but max is 3 [ 705.021585][ T5909] usb 3-1: config 2 has no interface number 1 [ 705.034073][ T5909] usb 3-1: config 2 has no interface number 2 [ 705.037236][T15682] nvme_fabrics: missing parameter 'nqn=%s' [ 705.051695][ T5909] usb 3-1: config 2 has no interface number 3 [ 705.091374][ T5909] usb 3-1: config 2 interface 32 has no altsetting 0 [ 705.199853][ T5909] usb 3-1: config 2 interface 0 has no altsetting 0 [ 705.216518][ T5909] usb 3-1: config 2 interface 55 has no altsetting 0 [ 705.265717][ T5909] usb 3-1: config 2 interface 196 has no altsetting 0 [ 705.315816][ T5909] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=65.11 [ 705.414061][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.458467][ T5909] usb 3-1: Product: syz [ 705.462656][ T5909] usb 3-1: Manufacturer: syz [ 705.479847][ T5909] usb 3-1: SerialNumber: syz [ 705.779509][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 705.839280][T15694] batman_adv: batadv0: Adding interface: gretap1 [ 705.847341][T10978] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 705.866102][T15694] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 705.905051][T15697] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2643'. [ 705.967024][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 705.976373][ T9] usb 2-1: config 211 has an invalid interface number: 98 but max is 0 [ 705.986801][ T9] usb 2-1: config 211 has no interface number 0 [ 705.993920][ T9] usb 2-1: config 211 interface 98 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 8 [ 706.004284][ T9] usb 2-1: config 211 interface 98 has no altsetting 0 [ 706.014495][ T9] usb 2-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=7c.8a [ 706.017155][T10978] usb 6-1: Using ep0 maxpacket: 16 [ 706.030333][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.038651][ T9] usb 2-1: Product: syz [ 706.051314][ T9] usb 2-1: Manufacturer: syz [ 706.063915][T15690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.072948][T15690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.094786][T10978] usb 6-1: unable to get BOS descriptor or descriptor too short [ 706.097490][ T9] usb 2-1: SerialNumber: syz [ 706.133073][T15691] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 706.147841][T10978] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 706.170377][T10978] usb 6-1: can't read configurations, error -71 [ 706.416687][ T9] mct_u232 2-1:211.98: MCT U232 converter detected [ 706.429002][ T9] mct_u232 ttyUSB0: expected endpoint missing [ 706.444804][ T9] usb 2-1: USB disconnect, device number 45 [ 706.456294][ T9] mct_u232 2-1:211.98: device disconnected [ 706.458421][ T5923] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 706.607168][ T5820] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 706.619513][ T5923] usb 5-1: Using ep0 maxpacket: 16 [ 706.636677][ T5923] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 706.663284][ T5923] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 706.688609][ T5923] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 706.716644][T15708] fuse: Unknown parameter 'fd˜–¡mšÒSN` 7cX˃翛ÀJD¥w–“îúô^5OHÔ äàþâ‹³î¶ :sÊ3hø914ùgMê«à‘oÆðñ4wP%ÆXøˆÑB‚ƶ7íÄØ‰r¾(@f' [ 706.716683][ T5923] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 706.734399][T15708] fuse: Unknown parameter 'fd˜–¡mšÒSN` 7cX˃翛ÀJD¥w–“îúô^5OHÔ äàþâ‹³î¶ :sÊ3hø914ùgMê«à‘oÆðñ4wP%ÆXøˆÑB‚ƶ7íÄØ‰r¾(@f' [ 706.745081][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.762576][ T5923] usb 5-1: Product: syz [ 706.766890][ T5923] usb 5-1: Manufacturer: syz [ 706.772140][ T5923] usb 5-1: SerialNumber: syz [ 706.773606][T15708] fuse: Unknown parameter 'fd˜–¡mšÒSN` 7cX˃翛ÀJD¥w–“îúô^5OHÔ äàþâ‹³î¶ :sÊ3hø914ùgMê«à‘oÆðñ4wP%ÆXøˆÑB‚ƶ7íÄØ‰r¾(@f' [ 706.795362][T15708] fuse: Unknown parameter 'fd˜–¡mšÒSN` 7cX˃翛ÀJD¥w–“îúô^5OHÔ äàþâ‹³î¶ :sÊ3hø914ùgMê«à‘oÆðñ4wP%ÆXøˆÑB‚ƶ7íÄØ‰r¾(@f' [ 706.812169][T15708] fuse: Unknown parameter 'fd˜–¡mšÒSN` 7cX˃翛ÀJD¥w–“îúô^5OHÔ äàþâ‹³î¶ :sÊ3hø914ùgMê«à‘oÆðñ4wP%ÆXøˆÑB‚ƶ7íÄØ‰r¾(@f' [ 706.826149][ T5820] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 706.835220][ T5820] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 706.853728][ T5820] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 706.869897][T15708] fuse: Unknown parameter 'fd˜–¡mšÒSN` 7cX˃翛ÀJD¥w–“îúô^5OHÔ äàþâ‹³î¶ :sÊ3hø914ùgMê«à‘oÆðñ4wP%ÆXøˆÑB‚ƶ7íÄØ‰r¾(@f' [ 706.886721][ T5820] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 706.898094][ T5820] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 706.912281][T15708] fuse: Unknown parameter 'fd˜–¡mšÒSN` 7cX˃翛ÀJD¥w–“îúô^5OHÔ äàþâ‹³î¶ :sÊ3hø914ùgMê«à‘oÆðñ4wP%ÆXøˆÑB‚ƶ7íÄØ‰r¾(@f' [ 706.927240][ T5820] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 706.939972][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 706.949709][T15708] fuse: Unknown parameter 'fd˜–¡mšÒSN` 7cX˃翛ÀJD¥w–“îúô^5OHÔ äàþâ‹³î¶ :sÊ3hø914ùgMê«à‘oÆðñ4wP%ÆXøˆÑB‚ƶ7íÄØ‰r¾(@f' [ 706.964334][ T5820] usb 1-1: Product: syz [ 706.970316][ T5820] usb 1-1: Manufacturer: syz [ 706.985656][ T5820] cdc_wdm 1-1:1.0: skipping garbage [ 706.995987][ T5820] cdc_wdm 1-1:1.0: skipping garbage [ 707.002284][T15708] fuse: Unknown parameter 'fd˜–¡mšÒSN` 7cX˃翛ÀJD¥w–“îúô^5OHÔ äàþâ‹³î¶ :sÊ3hø914ùgMê«à‘oÆðñ4wP%ÆXøˆÑB‚ƶ7íÄØ‰r¾(@f' [ 707.022797][ T5820] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 707.030447][ T5820] cdc_wdm 1-1:1.0: Unknown control protocol [ 707.053024][T15708] fuse: Unknown parameter 'fd˜–¡mšÒSN` 7cX˃翛ÀJD¥w–“îúô^5OHÔ äàþâ‹³î¶ :sÊ3hø914ùgMê«à‘oÆðñ4wP%ÆXøˆÑB‚ƶ7íÄØ‰r¾(@f' [ 707.123672][T15708] fuse: Unknown parameter 'fd˜–¡mšÒSN` 7cX˃翛ÀJD¥w–“îúô^5OHÔ äàþâ‹³î¶ :sÊ3hø914ùgMê«à‘oÆðñ4wP%ÆXøˆÑB‚ƶ7íÄØ‰r¾(@f' [ 707.142993][T15708] fuse: Unknown parameter 'fd˜–¡mšÒSN` 7cX˃翛ÀJD¥w–“îúô^5OHÔ äàþâ‹³î¶ :sÊ3hø914ùgMê«à‘oÆðñ4wP%ÆXøˆÑB‚ƶ7íÄØ‰r¾(@f' [ 707.159156][T15708] fuse: Unknown parameter 'fd˜–¡mšÒSN` 7cX˃翛ÀJD¥w–“îúô^5OHÔ äàþâ‹³î¶ :sÊ3hø914ùgMê«à‘oÆðñ4wP%ÆXøˆÑB‚ƶ7íÄØ‰r¾(@f' [ 707.176200][T15708] fuse: Unknown parameter 'fd˜–¡mšÒSN` 7cX˃翛ÀJD¥w–“îúô^5OHÔ äàþâ‹³î¶ :sÊ3hø914ùgMê«à‘oÆðñ4wP%ÆXøˆÑB‚ƶ7íÄØ‰r¾(@f' [ 707.195467][T15708] fuse: Unknown parameter 'fd˜–¡mšÒSN` 7cX˃翛ÀJD¥w–“îúô^5OHÔ äàþâ‹³î¶ :sÊ3hø914ùgMê«à‘oÆðñ4wP%ÆXøˆÑB‚ƶ7íÄØ‰r¾(@f' [ 707.198722][ T5923] usb 5-1: 0:2 : does not exist [ 707.212686][T15708] fuse: Unknown parameter 'fd˜–¡mšÒSN` 7cX˃翛ÀJD¥w–“îúô^5OHÔ äàþâ‹³î¶ :sÊ3hø914ùgMê«à‘oÆðñ4wP%ÆXøˆÑB‚ƶ7íÄØ‰r¾(@f' [ 707.234175][T15708] fuse: Unknown parameter 'fd˜–¡mšÒSN` 7cX˃翛ÀJD¥w–“îúô^5OHÔ äàþâ‹³î¶ :sÊ3hø914ùgMê«à‘oÆðñ4wP%ÆXøˆÑB‚ƶ7íÄØ‰r¾(@f' [ 707.255400][T15708] fuse: Unknown parameter 'fd˜–¡mšÒSN` 7cX˃翛ÀJD¥w–“îúô^5OHÔ äàþâ‹³î¶ :sÊ3hø914ùgMê«à‘oÆðñ4wP%ÆXøˆÑB‚ƶ7íÄØ‰r¾(@f' [ 707.274611][T15708] fuse: Unknown parameter 'fd˜–¡mšÒSN` 7cX˃翛ÀJD¥w–“îúô^5OHÔ äàþâ‹³î¶ :sÊ3hø914ùgMê«à‘oÆðñ4wP%ÆXøˆÑB‚ƶ7íÄØ‰r¾(@f' [ 707.289230][T15708] fuse: Unknown parameter 'fd˜–¡mšÒSN` 7cX˃翛ÀJD¥w–“îúô^5OHÔ äàþâ‹³î¶ :sÊ3hø914ùgMê«à‘oÆðñ4wP%ÆXøˆÑB‚ƶ7íÄØ‰r¾(@f' [ 707.338713][T15708] fuse: Unknown parameter 'fd˜–¡mšÒSN` 7cX˃翛ÀJD¥w–“îúô^5OHÔ äàþâ‹³î¶ :sÊ3hø914ùgMê«à‘oÆðñ4wP%ÆXøˆÑB‚ƶ7íÄØ‰r¾(@f' [ 707.437437][T15708] fuse: Unknown parameter 'fd˜–¡mšÒSN` 7cX˃翛ÀJD¥w–“îúô^5OHÔ äàþâ‹³î¶ :sÊ3hø914ùgMê«à‘oÆðñ4wP%ÆXøˆÑB‚ƶ7íÄØ‰r¾(@f' [ 707.463126][T15708] fuse: Unknown parameter 'fd˜–¡mšÒSN` 7cX˃翛ÀJD¥w–“îúô^5OHÔ äàþâ‹³î¶ :sÊ3hø914ùgMê«à‘oÆðñ4wP%ÆXøˆÑB‚ƶ7íÄØ‰r¾(@f' [ 707.487290][T15708] fuse: Unknown parameter 'fd˜–¡mšÒSN` 7cX˃翛ÀJD¥w–“îúô^5OHÔ äàþâ‹³î¶ :sÊ3hø914ùgMê«à‘oÆðñ4wP%ÆXøˆÑB‚ƶ7íÄØ‰r¾(@f' [ 707.517061][T15717] xt_bpf: check failed: parse error [ 707.517447][T15720] xt_bpf: check failed: parse error [ 707.568312][T15708] fuse: Unknown parameter 'fd˜–¡mšÒSN` 7cX˃翛ÀJD¥w–“îúô^5OHÔ äàþâ‹³î¶ :sÊ3hø914ùgMê«à‘oÆðñ4wP%ÆXøˆÑB‚ƶ7íÄØ‰r¾(@f' [ 707.645260][ T5909] usb 3-1: USB disconnect, device number 25 [ 707.808824][T15729] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2653'. [ 707.838121][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:2.55/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 707.881978][ T5977] udevd[5977]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:2.32/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 707.938579][T15732] udevd[15732]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:2.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 707.970941][ T8658] udevd[8658]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:2.196/sound/card7/controlC7/../uevent} for writing: No such file or directory [ 708.054620][ T5923] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 708.077742][T10978] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 708.197644][ T5923] usb 5-1: USB disconnect, device number 50 [ 708.264251][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 708.300468][T10978] usb 6-1: unable to get BOS descriptor or descriptor too short [ 708.311097][T10978] usb 6-1: no configurations [ 708.323110][T10978] usb 6-1: can't read configurations, error -22 [ 708.501604][T15742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2655'. [ 708.757261][ T5909] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 708.938600][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.004534][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 709.043787][ T5909] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 709.053437][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.074618][ T5909] usb 2-1: config 0 descriptor?? [ 709.288175][ T5909] cm6533_jd 0003:0D8C:0022.0036: unknown main item tag 0x0 [ 709.295579][ T5909] cm6533_jd 0003:0D8C:0022.0036: unknown main item tag 0x0 [ 709.307805][ T5909] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0036/input/input57 [ 709.347400][ T5909] cm6533_jd 0003:0D8C:0022.0036: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 709.376005][T10978] usb 1-1: USB disconnect, device number 4 [ 709.479017][ T5913] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 709.501256][ T5909] usb 2-1: USB disconnect, device number 46 [ 709.630108][T15767] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2663'. [ 709.669000][ T5913] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 709.681680][ T5913] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 709.699939][ T5913] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 709.740571][ T5913] usb 5-1: config 0 interface 0 has no altsetting 0 [ 709.800642][ T5913] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 709.812622][ T5913] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 709.840761][ T5913] usb 5-1: config 0 interface 0 has no altsetting 0 [ 709.856843][ T5913] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 709.867844][ T5913] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 709.886679][ T5913] usb 5-1: config 0 interface 0 has no altsetting 0 [ 709.909023][ T5913] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 709.931589][ T5913] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 709.964967][ T5913] usb 5-1: config 0 interface 0 has no altsetting 0 [ 710.053437][T15777] netlink: 'syz.1.2667': attribute type 1 has an invalid length. [ 710.062762][ T5913] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 710.074675][ T5913] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 710.088837][T15777] netlink: 'syz.1.2667': attribute type 2 has an invalid length. [ 710.103462][ T5913] usb 5-1: config 0 interface 0 has no altsetting 0 [ 710.168668][ T5913] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 710.186547][ T5913] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 710.263004][ T5913] usb 5-1: config 0 interface 0 has no altsetting 0 [ 710.271755][ T5913] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 710.283071][ T5913] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 710.295002][ T5913] usb 5-1: config 0 interface 0 has no altsetting 0 [ 710.314551][ T5913] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 710.327166][ T5913] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 710.341008][ T5913] usb 5-1: config 0 interface 0 has no altsetting 0 [ 710.350271][ T5913] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 710.363985][ T5913] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 710.375280][ T5913] usb 5-1: Product: syz [ 710.380020][T15788] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2669'. [ 710.389566][ T5913] usb 5-1: Manufacturer: syz [ 710.400798][ T5913] usb 5-1: SerialNumber: syz [ 710.623024][ T5913] usb 5-1: config 0 descriptor?? [ 710.671431][ T5913] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 710.910296][ C1] usb 5-1: yurex_control_callback - control failed: -2 [ 710.944435][ T5913] usb 5-1: USB disconnect, device number 51 [ 710.972009][ T5913] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 711.026645][T15795] vxcan0: entered promiscuous mode [ 711.065576][T15797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2671'. [ 711.074793][T15795] vxcan0: entered allmulticast mode [ 711.255086][T15795] netlink: 'syz.1.2671': attribute type 6 has an invalid length. [ 711.526340][ T5820] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 711.719015][ T5820] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 711.737580][ T5820] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 711.761133][ T5820] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 711.775685][ T5820] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 711.786824][ T5820] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 711.787006][ T5913] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 711.810210][ T5820] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 711.817518][T10978] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 711.819630][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 711.837691][ T5820] usb 5-1: Product: syz [ 711.843011][ T5820] usb 5-1: Manufacturer: syz [ 711.860999][ T5820] cdc_wdm 5-1:1.0: skipping garbage [ 711.866201][ T5820] cdc_wdm 5-1:1.0: skipping garbage [ 711.891183][ T5820] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 711.897291][ T5820] cdc_wdm 5-1:1.0: Unknown control protocol [ 711.957812][T10978] usb 6-1: device descriptor read/64, error -71 [ 711.967164][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 711.990643][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 712.005668][ T5913] usb 1-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 712.017642][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.039963][ T5913] usb 1-1: config 0 descriptor?? [ 712.217414][T10978] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 712.252702][ T5913] usbhid 1-1:0.0: can't add hid device: -71 [ 712.260346][ T5913] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 712.271652][ T5913] usb 1-1: USB disconnect, device number 5 [ 712.347119][ T5820] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 712.347153][T10978] usb 6-1: device descriptor read/64, error -71 [ 712.468083][T10978] usb usb6-port1: attempt power cycle [ 712.497688][T15827] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 712.506266][T15827] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 712.557296][ T5820] usb 3-1: Using ep0 maxpacket: 8 [ 712.567826][ T5820] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 712.579741][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.597686][ T5820] usb 3-1: config 0 descriptor?? [ 712.822238][ T5820] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 712.823659][T10978] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 712.836957][ T5820] asix 3-1:0.0: probe with driver asix failed with error -32 [ 712.867789][ T5820] usb 3-1: USB disconnect, device number 26 [ 712.890203][T10978] usb 6-1: device descriptor read/8, error -71 [ 713.137640][T10978] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 713.170281][T10978] usb 6-1: device descriptor read/8, error -71 [ 713.300472][T10978] usb usb6-port1: unable to enumerate USB device [ 713.728502][T15841] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 713.758467][T15843] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 713.768150][T15843] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 713.777111][T15843] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 713.785856][T15843] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 713.950212][T15849] netlink: 2036 bytes leftover after parsing attributes in process `syz.1.2688'. [ 713.960062][T15854] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2690'. [ 713.969276][T15849] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2688'. [ 714.292266][ T5909] usb 5-1: USB disconnect, device number 52 [ 714.479948][T15859] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20004 [ 715.077033][T15873] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2695'. [ 715.302437][T15882] xt_bpf: check failed: parse error [ 715.457192][ T5913] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 715.487360][T10978] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 715.617370][T10978] usb 1-1: device descriptor read/64, error -71 [ 715.632157][ T5913] usb 6-1: config 0 has no interfaces? [ 715.651716][ T5913] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 715.661060][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.685198][ T5913] usb 6-1: Product: syz [ 715.692842][ T5913] usb 6-1: Manufacturer: syz [ 715.698957][ T5913] usb 6-1: SerialNumber: syz [ 715.711032][ T5913] usb 6-1: config 0 descriptor?? [ 715.857080][T10978] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 715.966471][T15880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.977359][T15880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.260369][T10978] usb 1-1: device descriptor read/64, error -71 [ 716.321320][ T5923] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 716.377397][T10978] usb usb1-port1: attempt power cycle [ 716.457050][ T5923] usb 3-1: device descriptor read/64, error -71 [ 716.697073][ T5923] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 716.717069][T10978] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 716.737555][T10978] usb 1-1: device descriptor read/8, error -71 [ 716.777405][ T5909] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 716.837013][ T5923] usb 3-1: device descriptor read/64, error -71 [ 716.940217][ T5909] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 716.947563][ T5923] usb usb3-port1: attempt power cycle [ 717.094598][T10978] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 717.108091][ T5909] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 717.133141][ T5909] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 717.142422][ T5909] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 717.212125][ T5909] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 717.223784][T10978] usb 1-1: device descriptor read/8, error -71 [ 717.235401][ T5909] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 717.245561][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 717.254268][ T5909] usb 5-1: Product: syz [ 717.258817][ T5909] usb 5-1: Manufacturer: syz [ 717.293554][ T5909] cdc_wdm 5-1:1.0: skipping garbage [ 717.302037][ T5909] cdc_wdm 5-1:1.0: skipping garbage [ 717.313259][ T5909] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 717.332213][ T5909] cdc_wdm 5-1:1.0: Unknown control protocol [ 717.347459][T10978] usb usb1-port1: unable to enumerate USB device [ 717.407629][ T5923] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 717.458338][ T5923] usb 3-1: device descriptor read/8, error -71 [ 717.517038][ T5913] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 717.728792][ T5913] usb 2-1: Using ep0 maxpacket: 8 [ 717.738204][ T5913] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 717.751566][ T5913] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 717.772215][ T5913] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 2336, setting to 1024 [ 717.793927][ T5923] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 717.804223][ T5913] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 717.820553][ T5923] usb 3-1: device descriptor read/8, error -71 [ 717.834813][ T5913] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 717.851753][ T5913] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 717.861291][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.928843][ T5923] usb usb3-port1: unable to enumerate USB device [ 718.163770][ T5913] usb 2-1: GET_CAPABILITIES returned 0 [ 718.169407][ T5913] usbtmc 2-1:16.0: can't read capabilities [ 718.647028][ T5913] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 718.807373][ T5913] usb 1-1: Using ep0 maxpacket: 16 [ 718.816142][ T5913] usb 1-1: config 0 has an invalid interface number: 195 but max is 0 [ 718.824804][ T5913] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 718.843318][ T5913] usb 1-1: config 0 has no interface number 0 [ 718.845563][T15921] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 718.883958][ T5913] usb 1-1: New USB device found, idVendor=0421, idProduct=0418, bcdDevice=95.ff [ 718.901636][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.919261][ T5913] usb 1-1: Product: syz [ 718.923769][ T5913] usb 1-1: Manufacturer: syz [ 718.930783][ T5913] usb 1-1: SerialNumber: syz [ 718.954578][ T5913] usb 1-1: config 0 descriptor?? [ 718.992602][ T5913] rndis_host 1-1:0.195: More than one union descriptor, skipping ... [ 719.008602][ T5913] usb 1-1: bad CDC descriptors [ 719.016223][ T5913] cdc_acm 1-1:0.195: More than one union descriptor, skipping ... [ 719.044891][ T5909] usb 6-1: USB disconnect, device number 16 [ 719.196801][ T5913] usb 1-1: USB disconnect, device number 10 [ 719.447431][T15931] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2708'. [ 719.609699][ T5909] usb 5-1: USB disconnect, device number 53 [ 719.957469][ T5881] usb 2-1: USB disconnect, device number 47 [ 720.255155][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 720.255169][ T30] audit: type=1326 audit(1747213875.536:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15944 comm="syz.0.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d87d8e969 code=0x7ffc0000 [ 720.303445][ T30] audit: type=1326 audit(1747213875.536:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15944 comm="syz.0.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3d87d8e969 code=0x7ffc0000 [ 720.337148][T15946] syzkaller0: entered allmulticast mode [ 720.350071][T15946] syzkaller0 (unregistering): left allmulticast mode [ 720.411978][ T30] audit: type=1326 audit(1747213875.536:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15944 comm="syz.0.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d87d8e969 code=0x7ffc0000 [ 720.434680][ T5913] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 720.536201][ T30] audit: type=1326 audit(1747213875.536:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15944 comm="syz.0.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f3d87d8e969 code=0x7ffc0000 [ 720.621664][ T30] audit: type=1326 audit(1747213875.536:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15944 comm="syz.0.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d87d8e969 code=0x7ffc0000 [ 720.645102][ T5913] usb 5-1: Using ep0 maxpacket: 8 [ 720.661251][ T5913] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 720.692492][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.725216][ T5913] usb 5-1: Product: syz [ 720.745324][ T5913] usb 5-1: Manufacturer: syz [ 720.756620][ T30] audit: type=1326 audit(1747213875.536:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15944 comm="syz.0.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f3d87d8e969 code=0x7ffc0000 [ 720.783146][ T5913] usb 5-1: SerialNumber: syz [ 720.794468][ T5913] usb 5-1: config 0 descriptor?? [ 721.013007][ T5913] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 721.217374][ T5923] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 721.589503][ T5923] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.660734][ T5923] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 721.696726][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.791973][ T5923] usb 3-1: config 0 descriptor?? [ 721.921181][ T5923] pwc: Askey VC010 type 2 USB webcam detected. [ 722.206071][T15969] netlink: 408 bytes leftover after parsing attributes in process `syz.0.2717'. [ 722.322900][ T5923] pwc: recv_control_msg error -32 req 02 val 2b00 [ 722.330647][ T5923] pwc: recv_control_msg error -32 req 02 val 2700 [ 722.341131][ T5923] pwc: recv_control_msg error -32 req 02 val 2c00 [ 722.348961][ T5923] pwc: recv_control_msg error -32 req 04 val 1000 [ 722.356339][ T5923] pwc: recv_control_msg error -32 req 04 val 1300 [ 722.363807][ T5923] pwc: recv_control_msg error -32 req 04 val 1400 [ 722.371561][ T5923] pwc: recv_control_msg error -32 req 02 val 2000 [ 722.379347][ T5923] pwc: recv_control_msg error -32 req 02 val 2100 [ 722.386588][ T5923] pwc: recv_control_msg error -32 req 04 val 1500 [ 722.394170][ T5923] pwc: recv_control_msg error -32 req 02 val 2500 [ 722.401777][ T5923] pwc: recv_control_msg error -32 req 02 val 2400 [ 722.409338][ T5923] pwc: recv_control_msg error -32 req 02 val 2600 [ 722.417399][T15949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.428294][T15949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.436674][ T5923] pwc: recv_control_msg error -32 req 02 val 2900 [ 722.471684][T15967] netlink: 'syz.1.2716': attribute type 3 has an invalid length. [ 722.480608][T15967] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2716'. [ 722.851499][ T5923] pwc: recv_control_msg error -32 req 04 val 1200 [ 722.860211][ T5923] pwc: Registered as video103. [ 722.877245][ T5923] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input60 [ 722.969552][T15988] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 723.017040][ T5882] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 723.017333][T15989] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 723.216035][ T5882] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 723.255105][ T5882] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 723.277462][ T5882] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 723.306775][ T5882] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 723.345598][ T5882] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 723.408020][ T5882] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 723.427335][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 723.435382][ T5882] usb 2-1: Product: syz [ 723.466978][ T5882] usb 2-1: Manufacturer: syz [ 723.499064][ T5882] cdc_wdm 2-1:1.0: skipping garbage [ 723.504342][ T5882] cdc_wdm 2-1:1.0: skipping garbage [ 723.523767][ T5882] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 723.537626][ T5882] cdc_wdm 2-1:1.0: Unknown control protocol [ 723.648356][ T5913] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 723.687186][ T5909] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 723.847075][ T5909] usb 1-1: Using ep0 maxpacket: 32 [ 723.859092][ T5909] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 723.872224][ T5909] usb 1-1: config 0 has no interface number 0 [ 723.891724][ T5909] usb 1-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 723.915435][ T5909] usb 1-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 723.941548][ T5909] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 723.960901][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.978288][ T5909] usb 1-1: Product: syz [ 723.982493][ T5909] usb 1-1: Manufacturer: syz [ 723.995524][ T5913] usb 3-1: USB disconnect, device number 31 [ 723.997024][ T5909] usb 1-1: SerialNumber: syz [ 724.035345][ T5909] usb 1-1: config 0 descriptor?? [ 724.050604][T15998] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 724.067186][T15998] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 724.145456][ T5909] plusb 1-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 3e:e2:94:b6:14:be [ 724.177555][ T5882] usb 5-1: USB disconnect, device number 54 [ 724.293730][T15998] binder: BINDER_SET_CONTEXT_MGR already set [ 724.307207][T15998] binder: 15997:15998 ioctl 4018620d 200000000040 returned -16 [ 724.396995][T16008] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2725'. [ 724.467203][ T5913] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 724.651049][ T5913] usb 3-1: config 0 has an invalid interface number: 241 but max is 0 [ 724.664397][ T5913] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 724.687453][ T5913] usb 3-1: config 0 has no interface number 0 [ 724.699024][ T5909] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 724.711403][ T5913] usb 3-1: config 0 interface 241 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 724.774202][ T5913] usb 3-1: New USB device found, idVendor=ea6a, idProduct=daa1, bcdDevice=f1.60 [ 724.831624][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.867342][ T5909] usb 6-1: Using ep0 maxpacket: 16 [ 724.878620][ T5909] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 724.903984][ T5913] usb 3-1: Product: syz [ 724.904753][ T5909] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 724.929907][ T5909] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 724.942102][ T5909] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 724.952613][ T5909] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 724.964477][ T5909] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 724.983901][ T5909] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 724.993391][ T5913] usb 3-1: Manufacturer: syz [ 725.004587][ T5909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 725.013000][ T5913] usb 3-1: SerialNumber: syz [ 725.029989][ T5909] usb 6-1: SerialNumber: syz [ 725.056441][ T5913] usb 3-1: config 0 descriptor?? [ 725.063912][ T5909] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -12 [ 725.163976][ T5913] usb 3-1: bad CDC descriptors [ 725.262611][T16011] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2727'. [ 725.304692][ T5913] usb 3-1: USB disconnect, device number 32 [ 725.333140][ T5909] usb 6-1: USB disconnect, device number 17 [ 725.776722][ T5913] usb 2-1: USB disconnect, device number 48 [ 726.237497][ T5913] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 726.289161][ T5881] usb 1-1: USB disconnect, device number 11 [ 726.299844][ T5881] plusb 1-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 726.397364][ T5913] usb 3-1: Using ep0 maxpacket: 8 [ 726.416792][ T5913] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 726.440357][ T5913] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 726.457140][ T5909] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 726.476289][ T5913] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 726.494849][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.523580][ T5913] usb 3-1: Product: syz [ 726.543373][ T5913] usb 3-1: Manufacturer: syz [ 726.559735][ T5913] usb 3-1: SerialNumber: syz [ 726.579942][ T5913] cdc_ether 3-1:1.0: skipping garbage [ 726.592248][ T5913] usb 3-1: bad CDC descriptors [ 726.628593][ T5909] usb 2-1: Using ep0 maxpacket: 32 [ 726.641020][ T5909] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 726.696190][ T5909] usb 2-1: config 0 has no interface number 0 [ 726.702551][ T5909] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 726.716404][ T5909] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 726.730964][ T5909] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 726.775692][ T5882] usb 3-1: USB disconnect, device number 33 [ 726.835433][ T5909] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 726.846464][ T5909] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 726.858597][ T5909] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 726.867308][ T5913] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 726.868753][ T5909] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 726.886249][ T5909] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 726.971985][ T5909] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 726.995546][ T5909] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 727.016851][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.081728][T16056] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2733'. [ 727.102305][ T5909] usb 2-1: Product: syz [ 727.106504][ T5909] usb 2-1: Manufacturer: syz [ 727.119273][ T5909] usb 2-1: SerialNumber: syz [ 727.143521][ T5909] usb 2-1: config 0 descriptor?? [ 727.153433][T16032] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 727.169590][ T5909] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 727.181579][ T5909] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 727.233565][T16059] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2734'. [ 727.418154][ T5909] usb 2-1: USB disconnect, device number 49 [ 727.453100][T16070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2736'. [ 728.248650][T16099] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2741'. [ 728.260820][ T5913] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 728.419285][ T5913] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 728.436946][ T5913] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 728.464685][ T5913] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 728.517021][ T5913] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 728.533339][ T5913] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 728.550147][ T5913] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 728.619521][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 728.643720][ T5913] usb 5-1: Product: syz [ 728.648742][ T5913] usb 5-1: Manufacturer: syz [ 728.667337][ T5909] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 728.674226][ T5913] cdc_wdm 5-1:1.0: skipping garbage [ 728.682958][ T5913] cdc_wdm 5-1:1.0: skipping garbage [ 728.692253][ T5913] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 728.704912][ T5913] cdc_wdm 5-1:1.0: Unknown control protocol [ 728.837163][ T5909] usb 6-1: Using ep0 maxpacket: 8 [ 728.855877][ T5909] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 728.888514][ T5909] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 728.898845][ T5909] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 728.913275][ T5909] usb 6-1: string descriptor 0 read error: -71 [ 728.920879][ T5909] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 728.931965][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.944404][ T5909] usb 6-1: can't set config #1, error -71 [ 728.953015][ T5909] usb 6-1: USB disconnect, device number 18 [ 729.097897][ T5881] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 729.128177][ T5820] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 729.251699][ T5881] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 729.263550][ T5881] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 729.285737][ T5881] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 729.309708][ T5881] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 729.319053][ T5820] usb 1-1: Using ep0 maxpacket: 16 [ 729.328821][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.340565][ T5881] usb 3-1: Product: syz [ 729.345453][ T5820] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.361708][ T5881] usb 3-1: Manufacturer: syz [ 729.366500][ T5881] usb 3-1: SerialNumber: syz [ 729.371635][ T5820] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.383051][ T7549] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 729.397989][ T5881] hub 3-1:1.0: bad descriptor, ignoring hub [ 729.405347][ T5820] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 729.419515][ T5909] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 729.427713][ T5881] hub 3-1:1.0: probe with driver hub failed with error -5 [ 729.435059][ T5820] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 729.435241][ T7549] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 729.435249][ T119] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 729.471982][ T5820] usb 1-1: config 7 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 729.494400][ T5820] usb 1-1: config 7 interface 0 has no altsetting 0 [ 729.501672][ T5820] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 729.511149][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.604442][ T5881] usblp 3-1:1.0: usblp1: USB Unidirectional printer dev 34 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 729.617009][ T5909] usb 2-1: Using ep0 maxpacket: 32 [ 729.627919][ T5909] usb 2-1: config 0 has an invalid descriptor of length 31, skipping remainder of the config [ 729.639672][ T5909] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 729.663155][ T5909] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 729.683106][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.693738][ T5909] usb 2-1: Product: syz [ 729.698872][ T5909] usb 2-1: Manufacturer: syz [ 729.703686][ T5909] usb 2-1: SerialNumber: syz [ 729.717834][ T5913] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 729.718083][ T5909] usb 2-1: config 0 descriptor?? [ 729.918280][ T5909] usb 3-1: USB disconnect, device number 34 [ 729.925921][ T119] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 729.935192][ T5909] usblp1: removed [ 730.097012][ T119] usb 6-1: Using ep0 maxpacket: 32 [ 730.108747][ T119] usb 6-1: config 0 has no interfaces? [ 730.121663][ T119] usb 6-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 730.134547][ T119] usb 6-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 730.142905][ T119] usb 6-1: Product: syz [ 730.149513][ T119] usb 6-1: Manufacturer: syz [ 730.164815][ T119] usb 6-1: config 0 descriptor?? [ 730.259804][ T5909] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 730.395388][ T5913] usb 6-1: USB disconnect, device number 19 [ 730.441359][ T5909] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 730.455666][ T5909] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 730.472334][ T119] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 730.488422][ T5909] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 730.506758][ T5909] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 730.538601][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.560460][ T5909] usb 3-1: Product: syz [ 730.573970][ T5909] usb 3-1: Manufacturer: syz [ 730.579624][ T5909] usb 3-1: SerialNumber: syz [ 730.598466][ T5909] hub 3-1:1.0: bad descriptor, ignoring hub [ 730.613217][ T5909] hub 3-1:1.0: probe with driver hub failed with error -5 [ 730.794196][T16116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.804560][T16116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.981666][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 730.988327][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 730.995180][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 731.001790][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 731.008966][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 731.015578][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 731.022043][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 731.028661][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 731.035253][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 731.041943][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 731.048082][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 731.060787][ T5913] usb 5-1: USB disconnect, device number 56 [ 731.076507][ T5909] usblp 3-1:1.0: usblp1: USB Unidirectional printer dev 35 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 731.169521][ T5909] usb 3-1: USB disconnect, device number 35 [ 731.216564][ T5909] usblp1: removed [ 731.273359][T16167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.283530][T16167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.889260][ T5820] usbhid 1-1:7.0: can't add hid device: -71 [ 731.895276][ T5820] usbhid 1-1:7.0: probe with driver usbhid failed with error -71 [ 731.922248][ T5820] usb 1-1: USB disconnect, device number 12 [ 731.938782][T16194] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2758'. [ 732.210577][T16207] netlink: 'syz.5.2761': attribute type 1 has an invalid length. [ 732.352756][T16207] 8021q: adding VLAN 0 to HW filter on device bond2 [ 732.371626][ T5881] usb 2-1: USB disconnect, device number 50 [ 732.461161][T16211] 8021q: adding VLAN 0 to HW filter on device bond2 [ 732.470942][T16211] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 732.488370][ T5820] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 732.506644][T16211] bond2: (slave vxcan5): Error -95 calling set_mac_address [ 732.607160][ T5909] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 732.659342][ T5820] usb 3-1: Using ep0 maxpacket: 16 [ 732.686398][ T5820] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 732.710669][ T5820] usb 3-1: config 0 has an invalid descriptor of length 37, skipping remainder of the config [ 732.731515][ T5820] usb 3-1: config 0 has no interface number 0 [ 732.744693][ T5820] usb 3-1: config 0 interface 41 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 732.760506][ T5820] usb 3-1: config 0 interface 41 has no altsetting 0 [ 732.770446][ T5820] usb 3-1: New USB device found, idVendor=20e6, idProduct=9840, bcdDevice=d1.9a [ 732.808179][ T5909] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 732.819953][ T5909] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 732.829370][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.837450][ T5913] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 732.837667][ T5820] usb 3-1: Product: syz [ 732.850462][ T5820] usb 3-1: Manufacturer: syz [ 732.855976][ T5820] usb 3-1: SerialNumber: syz [ 732.862073][ T5909] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 732.871351][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.879528][ T5909] usb 6-1: Product: syz [ 732.886712][ T5820] usb 3-1: config 0 descriptor?? [ 732.892274][ T5909] usb 6-1: Manufacturer: syz [ 732.897105][ T5909] usb 6-1: SerialNumber: syz [ 732.977630][ T5913] usb 2-1: device descriptor read/64, error -71 [ 733.125338][T16206] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 733.131902][T16206] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 733.178911][T16206] vhci_hcd vhci_hcd.0: Device attached [ 733.227031][ T5913] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 733.392422][T16231] loop8: detected capacity change from 0 to 7 [ 733.403778][T16231] Dev loop8: unable to read RDB block 7 [ 733.410134][ T5913] usb 2-1: device descriptor read/64, error -71 [ 733.417417][ T5820] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 733.423422][T16231] loop8: unable to read partition table [ 733.434702][T16231] loop8: partition table beyond EOD, truncated [ 733.446753][T16231] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 733.487235][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 733.519909][ T5913] usb usb2-port1: attempt power cycle [ 733.877267][ T5913] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 733.907546][ T5913] usb 2-1: device descriptor read/8, error -71 [ 734.147002][ T5882] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 734.166978][ T5913] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 734.191590][ T5913] usb 2-1: device descriptor read/8, error -71 [ 734.297594][ T5882] usb 1-1: Using ep0 maxpacket: 8 [ 734.310624][ T5913] usb usb2-port1: unable to enumerate USB device [ 734.310743][ T5882] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 734.329261][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.363295][ T5882] usb 1-1: config 0 descriptor?? [ 734.377676][T16225] vhci_hcd: connection reset by peer [ 734.390219][ T5881] usb 3-1: USB disconnect, device number 36 [ 734.411789][ T5907] vhci_hcd: stop threads [ 734.423827][ T5907] vhci_hcd: release socket [ 734.438689][ T5907] vhci_hcd: disconnect device [ 734.627090][ T5882] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 735.187316][ T5913] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 735.235727][ T5909] usb 6-1: 0:2 : does not exist [ 735.251906][ T5909] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 735.299997][ T5909] usb 6-1: USB disconnect, device number 20 [ 735.321892][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 735.370597][ T5913] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 735.385858][ T5913] usb 5-1: config 0 has no interface number 0 [ 735.396177][ T5913] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 735.405540][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.407826][T16259] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2776'. [ 735.440060][ T5913] usb 5-1: Product: syz [ 735.444282][ T5913] usb 5-1: Manufacturer: syz [ 735.453185][ T5913] usb 5-1: SerialNumber: syz [ 735.463247][ T5913] usb 5-1: config 0 descriptor?? [ 735.639984][T16244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.651206][T16244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.737860][T16265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2778'. [ 735.863314][ T5882] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 735.884523][ T5882] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 735.910608][ T5913] usb 5-1: Firmware: major: 217, minor: 65, hardware type: UNKNOWN (194) [ 735.924129][ T5882] asix 1-1:0.0: probe with driver asix failed with error -71 [ 735.986324][ T5882] usb 1-1: USB disconnect, device number 13 [ 736.111833][ T5913] usb 5-1: Firmware: build Ûü [ 736.187101][ T5909] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 736.340135][ T5913] usb 5-1: failed to fetch extended address, random address set [ 736.347518][ T5909] usb 3-1: Using ep0 maxpacket: 16 [ 736.357001][ T5913] usb 5-1: atusb_probe: initialization failed, error = -524 [ 736.363295][ T5909] usb 3-1: config 0 has an invalid interface number: 104 but max is 1 [ 736.364509][ T5913] atusb 5-1:0.128: probe with driver atusb failed with error -524 [ 736.392940][ T5909] usb 3-1: config 0 has an invalid interface number: 104 but max is 1 [ 736.414178][ T5913] usb 5-1: USB disconnect, device number 57 [ 736.416958][ T5909] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 736.453645][ T5909] usb 3-1: config 0 has no interface number 0 [ 736.479982][ T5909] usb 3-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 736.491225][ T5909] usb 3-1: config 0 interface 104 has no altsetting 1 [ 736.508368][ T5909] usb 3-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 736.518171][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.526238][ T5909] usb 3-1: Product: syz [ 736.531198][ T5909] usb 3-1: Manufacturer: syz [ 736.535865][ T5909] usb 3-1: SerialNumber: syz [ 736.551921][ T5909] usb 3-1: config 0 descriptor?? [ 736.778608][T16267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.789185][T16267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.801387][ T5909] asix 3-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 736.815716][ T5909] asix 3-1:0.104: probe with driver asix failed with error -71 [ 736.830394][ T5909] usb 3-1: USB disconnect, device number 37 [ 736.987346][ T5882] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 737.007937][ T5913] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 737.137070][T10978] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 737.144668][ T5882] usb 2-1: Using ep0 maxpacket: 16 [ 737.153561][ T5882] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 737.162047][ T5882] usb 2-1: config 0 has an invalid descriptor of length 37, skipping remainder of the config [ 737.175809][ T5913] usb 1-1: Using ep0 maxpacket: 16 [ 737.181056][ T5882] usb 2-1: config 0 has no interface number 0 [ 737.187756][ T5882] usb 2-1: config 0 interface 41 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 737.201752][ T5882] usb 2-1: config 0 interface 41 has no altsetting 0 [ 737.209966][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 737.221838][ T5913] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 737.231692][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.239977][ T5882] usb 2-1: New USB device found, idVendor=20e6, idProduct=9840, bcdDevice=d1.9a [ 737.250990][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.259649][ T5882] usb 2-1: Product: syz [ 737.264507][ T5913] usb 1-1: config 0 descriptor?? [ 737.270617][ T5882] usb 2-1: Manufacturer: syz [ 737.275429][ T5882] usb 2-1: SerialNumber: syz [ 737.291070][ T5882] usb 2-1: config 0 descriptor?? [ 737.299948][T10978] usb 5-1: Using ep0 maxpacket: 16 [ 737.313349][T10978] usb 5-1: config 5 has an invalid interface number: 206 but max is 0 [ 737.332929][T10978] usb 5-1: config 5 has no interface number 0 [ 737.349572][T10978] usb 5-1: config 5 interface 206 has no altsetting 0 [ 737.375487][T10978] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=60.44 [ 737.392131][T10978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.423511][T10978] usb 5-1: Product: syz [ 737.429175][T10978] usb 5-1: Manufacturer: syz [ 737.433851][T10978] usb 5-1: SerialNumber: syz [ 737.522521][T16283] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 737.529085][T16283] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 737.541080][T16283] vhci_hcd vhci_hcd.0: Device attached [ 737.664365][T10978] usb_ehset_test 5-1:5.206: probe with driver usb_ehset_test failed with error -32 [ 737.680197][T10978] usb 5-1: USB disconnect, device number 58 [ 737.695004][ T5913] mcp2221 0003:04D8:00DD.0037: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 737.705819][ T5882] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 737.786988][ T5909] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 737.847779][T16295] vhci_hcd: connection reset by peer [ 737.848510][ T5881] usb 2-1: USB disconnect, device number 55 [ 737.855963][ T7549] vhci_hcd: stop threads [ 737.866219][ T7549] vhci_hcd: release socket [ 737.869502][ T5882] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.874450][ T7549] vhci_hcd: disconnect device [ 737.888366][ T5882] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 737.899005][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 737.907846][ T5882] usb 3-1: Product: syz [ 737.912186][ T5882] usb 3-1: Manufacturer: syz [ 737.916806][ T5882] usb 3-1: SerialNumber: syz [ 737.924579][ T5882] usb 3-1: config 0 descriptor?? [ 737.953085][ T5882] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 737.981618][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 738.091714][ T5882] usb 1-1: USB disconnect, device number 14 [ 738.160309][ T5881] usb 3-1: USB disconnect, device number 38 [ 738.210893][T16300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2790'. [ 738.378225][T16306] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2791'. [ 738.541236][ T5820] vhci_hcd: vhci_device speed not set [ 738.712105][T16309] program syz.0.2793 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 738.760237][T16309] netlink: 'syz.0.2793': attribute type 4 has an invalid length. [ 738.823014][T16309] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2793'. [ 738.936786][T16304] binder: 16303:16304 ioctl c0306201 2000000003c0 returned -14 [ 738.955801][T16315] x_tables: duplicate underflow at hook 1 [ 739.037107][T16316] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 739.053746][T16316] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 739.542454][T16331] x_tables: duplicate underflow at hook 1 [ 739.624836][T16335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2802'. [ 739.837168][ T5820] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 739.971717][T16340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2803'. [ 740.007540][ T5820] usb 6-1: Using ep0 maxpacket: 32 [ 740.014436][ T5820] usb 6-1: unable to get BOS descriptor or descriptor too short [ 740.028921][ T5820] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 740.042733][ T5820] usb 6-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 740.081586][ T5820] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 740.113353][ T5820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.137028][ T5820] usb 6-1: Product: syz [ 740.141224][ T5820] usb 6-1: Manufacturer: syz [ 740.157000][ T5881] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 740.177544][ T5820] usb 6-1: SerialNumber: syz [ 740.326968][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 740.345413][ T5881] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 740.354115][ T5881] usb 1-1: config 0 has no interface number 0 [ 740.373377][ T5881] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 740.406993][ T5881] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 740.429341][ T5881] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 740.442335][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.451177][ T5881] usb 1-1: Product: syz [ 740.457495][ T5881] usb 1-1: Manufacturer: syz [ 740.463402][ T5881] usb 1-1: SerialNumber: syz [ 740.472266][ T5881] usb 1-1: config 0 descriptor?? [ 740.481986][ T5881] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 740.538740][ T5881] em28xx 1-1:0.132: Video interface 132 found: [ 740.647852][T16350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2805'. [ 741.077776][T16135] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 741.087066][ T119] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 741.260230][T16135] usb 2-1: unable to get BOS descriptor or descriptor too short [ 741.271091][ T119] usb 5-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 741.283351][ T119] usb 5-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81 [ 741.283640][T16135] usb 2-1: not running at top speed; connect to a high speed hub [ 741.317044][ T119] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 741.357777][ T119] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 741.373949][ T119] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 741.526973][T16135] usb 2-1: config 5 has an invalid interface number: 246 but max is 0 [ 741.542142][T16135] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 741.555087][ T119] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.565774][T16135] usb 2-1: config 5 has no interface number 0 [ 741.579253][T16135] usb 2-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 741.604625][T16135] usb 2-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 741.634601][T16135] usb 2-1: config 5 interface 246 has no altsetting 0 [ 741.657575][T16135] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 741.668443][T16135] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.676479][T16135] usb 2-1: Product: syz [ 741.683382][T16135] usb 2-1: Manufacturer: syz [ 741.723071][ T5881] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 741.731333][T16135] usb 2-1: SerialNumber: syz [ 741.802958][ T119] ath6kl: Failed to submit usb control message: -71 [ 741.822514][ T5881] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 741.846654][ T119] ath6kl: unable to send the bmi data to the device: -71 [ 741.853946][ T5881] em28xx 1-1:0.132: board has no eeprom [ 741.860675][ T119] ath6kl: Unable to send get target info: -71 [ 741.867559][ T10] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 741.887659][ T119] ath6kl: Failed to init ath6kl core: -71 [ 741.895242][ T119] ath6kl_usb 5-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 741.917953][ T119] usb 5-1: USB disconnect, device number 59 [ 741.947497][ T5881] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 741.956807][ T5881] em28xx 1-1:0.132: analog set to bulk mode. [ 741.965582][T16366] em28xx 1-1:0.132: Registering V4L2 extension [ 742.044678][ T10] usb 3-1: config 0 has no interfaces? [ 742.056254][T16366] em28xx 1-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 742.072131][ T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 742.081797][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.091906][ T10] usb 3-1: Product: syz [ 742.096765][T16366] em28xx 1-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 742.109892][ T10] usb 3-1: Manufacturer: syz [ 742.115181][ T10] usb 3-1: SerialNumber: syz [ 742.121496][T16366] em28xx 1-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 742.127185][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 742.136056][T16366] em28xx 1-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 742.149036][ T10] usb 3-1: config 0 descriptor?? [ 742.215135][T16366] em28xx 1-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 742.225486][T16366] em28xx 1-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 742.262555][T16366] em28xx 1-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 742.274072][T16366] em28xx 1-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 742.327550][T16135] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 742.339696][ T7549] usb 2-1: Failed to submit usb control message: -71 [ 742.346660][ T7549] usb 2-1: unable to send the bmi data to the device: -71 [ 742.359477][T16135] usb 2-1: USB disconnect, device number 56 [ 742.416526][T16366] em28xx 1-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5) [ 742.431199][ T7549] usb 2-1: unable to get target info from device [ 742.443972][ T7549] usb 2-1: could not get target info (-71) [ 742.460508][T16365] PKCS7: Unknown OID: [4] 5.25.264.37.2351.52 [ 742.470188][T16365] PKCS7: Only support pkcs7_signedData type [ 742.478559][ T7549] usb 2-1: could not probe fw (-71) [ 742.484876][T16365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2808'. [ 742.500947][T16366] em28xx 1-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5) [ 742.548565][T16366] em28xx 1-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5) [ 742.602327][T16366] em28xx 1-1:0.132: failed to trigger read from i2c address 0xc6 (error=-5) [ 742.612732][ T5820] usb 6-1: 2:0 : UAC_AS_GENERAL descriptor not found [ 742.620204][T16366] em28xx 1-1:0.132: failed to trigger read from i2c address 0xc8 (error=-5) [ 742.639564][T16366] em28xx 1-1:0.132: Config register raw data: 0xfffffffb [ 742.663785][T16366] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 742.871183][ T5882] usb 1-1: USB disconnect, device number 15 [ 742.873159][ T5820] usb 6-1: USB disconnect, device number 21 [ 742.879434][ T5882] em28xx 1-1:0.132: Disconnecting em28xx [ 742.956864][ T5909] vhci_hcd: vhci_device speed not set [ 743.001821][T16384] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2811'. [ 743.061435][T16366] em28xx 1-1:0.132: No AC97 audio processor [ 743.165108][T16366] usb 1-1: Decoder not found [ 743.186854][T16366] em28xx 1-1:0.132: failed to create media graph [ 743.212684][T16135] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 743.233623][T16366] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 743.406583][T16366] em28xx 1-1:0.132: Remote control support is not available for this card. [ 743.415677][T16390] ================================================================== [ 743.423826][T16390] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 743.431221][T16390] Read of size 8 at addr ffff888066b1c738 by task v4l_id/16390 [ 743.438780][T16390] [ 743.441115][T16390] CPU: 1 UID: 0 PID: 16390 Comm: v4l_id Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 743.441139][T16390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 743.441152][T16390] Call Trace: [ 743.441160][T16390] [ 743.441169][T16390] dump_stack_lvl+0x189/0x250 [ 743.441199][T16390] ? __virt_addr_valid+0x18c/0x540 [ 743.441224][T16390] ? rcu_is_watching+0x15/0xb0 [ 743.441242][T16390] ? __pfx_dump_stack_lvl+0x10/0x10 [ 743.441267][T16390] ? rcu_is_watching+0x15/0xb0 [ 743.441284][T16390] ? lock_release+0x4b/0x3e0 [ 743.441313][T16390] ? __virt_addr_valid+0x18c/0x540 [ 743.441337][T16390] ? __virt_addr_valid+0x469/0x540 [ 743.441363][T16390] print_report+0xb4/0x290 [ 743.441385][T16390] ? v4l2_fh_open+0xc7/0x430 [ 743.441408][T16390] kasan_report+0x118/0x150 [ 743.441435][T16390] ? v4l2_fh_open+0xc7/0x430 [ 743.441462][T16390] v4l2_fh_open+0xc7/0x430 [ 743.441485][T16390] ? __pfx___mutex_lock+0x10/0x10 [ 743.441512][T16390] em28xx_v4l2_open+0x157/0x9a0 [ 743.441541][T16390] v4l2_open+0x20f/0x360 [ 743.441569][T16390] chrdev_open+0x4c9/0x5e0 [ 743.441596][T16390] ? __pfx_chrdev_open+0x10/0x10 [ 743.441623][T16390] ? __pfx_chrdev_open+0x10/0x10 [ 743.441647][T16390] do_dentry_open+0xdf3/0x1970 [ 743.441682][T16390] vfs_open+0x3b/0x340 [ 743.441709][T16390] ? path_openat+0x2ecd/0x3830 [ 743.441728][T16390] path_openat+0x2ee5/0x3830 [ 743.441747][T16390] ? arch_stack_walk+0xfc/0x150 [ 743.441779][T16390] ? __lock_acquire+0xaac/0xd20 [ 743.441810][T16390] ? __pfx_path_openat+0x10/0x10 [ 743.441828][T16390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.441856][T16390] do_filp_open+0x1fa/0x410 [ 743.441876][T16390] ? __pfx_do_filp_open+0x10/0x10 [ 743.441905][T16390] ? _raw_spin_unlock+0x28/0x50 [ 743.441930][T16390] ? alloc_fd+0x64c/0x6c0 [ 743.441958][T16390] do_sys_openat2+0x121/0x1c0 [ 743.441976][T16390] ? __pfx_do_sys_openat2+0x10/0x10 [ 743.441994][T16390] ? exc_page_fault+0x68/0x110 [ 743.442018][T16390] ? do_user_addr_fault+0xc8a/0x1390 [ 743.442038][T16390] __x64_sys_openat+0x138/0x170 [ 743.442058][T16390] do_syscall_64+0xf6/0x210 [ 743.442083][T16390] ? clear_bhb_loop+0x60/0xb0 [ 743.442104][T16390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.442123][T16390] RIP: 0033:0x7f5b4dea7407 [ 743.442139][T16390] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 743.442156][T16390] RSP: 002b:00007ffdca375340 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 743.442177][T16390] RAX: ffffffffffffffda RBX: 00007f5b4e69e880 RCX: 00007f5b4dea7407 [ 743.442191][T16390] RDX: 0000000000000000 RSI: 00007ffdca376f1b RDI: ffffffffffffff9c [ 743.442204][T16390] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 743.442215][T16390] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 743.442226][T16390] R13: 00007ffdca375590 R14: 00007f5b4e805000 R15: 00005572551494d8 [ 743.442247][T16390] [ 743.442254][T16390] [ 743.734668][T16390] Allocated by task 16366: [ 743.739069][T16390] kasan_save_track+0x3e/0x80 [ 743.743744][T16390] __kasan_kmalloc+0x93/0xb0 [ 743.748321][T16390] __kmalloc_cache_noprof+0x230/0x3d0 [ 743.753682][T16390] em28xx_v4l2_init+0x10b/0x2e70 [ 743.758606][T16390] em28xx_init_extension+0x11d/0x1c0 [ 743.763886][T16390] process_scheduled_works+0xade/0x17a0 [ 743.769420][T16390] worker_thread+0x8a0/0xda0 [ 743.773997][T16390] kthread+0x711/0x8a0 [ 743.778138][T16390] ret_from_fork+0x4b/0x80 [ 743.782539][T16390] ret_from_fork_asm+0x1a/0x30 [ 743.787284][T16390] [ 743.789593][T16390] Freed by task 16366: [ 743.793641][T16390] kasan_save_track+0x3e/0x80 [ 743.798322][T16390] kasan_save_free_info+0x46/0x50 [ 743.803329][T16390] __kasan_slab_free+0x62/0x70 [ 743.808079][T16390] kfree+0x193/0x440 [ 743.811961][T16390] em28xx_v4l2_init+0x1683/0x2e70 [ 743.816980][T16390] em28xx_init_extension+0x11d/0x1c0 [ 743.822246][T16390] process_scheduled_works+0xade/0x17a0 [ 743.827772][T16390] worker_thread+0x8a0/0xda0 [ 743.832355][T16390] kthread+0x711/0x8a0 [ 743.836419][T16390] ret_from_fork+0x4b/0x80 [ 743.840826][T16390] ret_from_fork_asm+0x1a/0x30 [ 743.845573][T16390] [ 743.847880][T16390] The buggy address belongs to the object at ffff888066b1c000 [ 743.847880][T16390] which belongs to the cache kmalloc-8k of size 8192 [ 743.861916][T16390] The buggy address is located 1848 bytes inside of [ 743.861916][T16390] freed 8192-byte region [ffff888066b1c000, ffff888066b1e000) [ 743.875871][T16390] [ 743.878180][T16390] The buggy address belongs to the physical page: [ 743.884570][T16390] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x66b18 [ 743.893318][T16390] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 743.901803][T16390] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 743.909689][T16390] page_type: f5(slab) [ 743.913674][T16390] raw: 00fff00000000040 ffff88801a042280 ffffea00015f6000 0000000000000003 [ 743.922251][T16390] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 743.930828][T16390] head: 00fff00000000040 ffff88801a042280 ffffea00015f6000 0000000000000003 [ 743.939489][T16390] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 743.948149][T16390] head: 00fff00000000003 ffffea00019ac601 00000000ffffffff 00000000ffffffff [ 743.956801][T16390] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 743.965458][T16390] page dumped because: kasan: bad access detected [ 743.971861][T16390] page_owner tracks the page as allocated [ 743.977555][T16390] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 15410, tgid 15409 (syz.4.2574), ts 687203842106, free_ts 687158598144 [ 743.999071][T16390] post_alloc_hook+0x1d8/0x230 [ 744.003834][T16390] get_page_from_freelist+0x21ce/0x22b0 [ 744.009367][T16390] __alloc_frozen_pages_noprof+0x181/0x370 [ 744.015160][T16390] alloc_pages_mpol+0x232/0x4a0 [ 744.020004][T16390] allocate_slab+0x8a/0x3b0 [ 744.024495][T16390] ___slab_alloc+0xbfc/0x1480 [ 744.029170][T16390] __kmalloc_cache_noprof+0x296/0x3d0 [ 744.034635][T16390] audit_log_d_path+0xb5/0x190 [ 744.039389][T16390] audit_log_d_path_exe+0x42/0x70 [ 744.044405][T16390] audit_log_task+0x2b3/0x3c0 [ 744.049078][T16390] audit_seccomp+0x86/0x190 [ 744.053575][T16390] __seccomp_filter+0x9aa/0x1a40 [ 744.058503][T16390] syscall_trace_enter+0xaa/0x160 [ 744.063515][T16390] do_syscall_64+0xcf/0x210 [ 744.068006][T16390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.073893][T16390] page last free pid 15410 tgid 15409 stack trace: [ 744.080378][T16390] __free_frozen_pages+0xb0e/0xcd0 [ 744.085482][T16390] __put_partials+0x161/0x1c0 [ 744.090151][T16390] put_cpu_partial+0x17c/0x250 [ 744.094923][T16390] __slab_free+0x2f7/0x400 [ 744.099335][T16390] qlist_free_all+0x9a/0x140 [ 744.103919][T16390] kasan_quarantine_reduce+0x148/0x160 [ 744.109373][T16390] __kasan_slab_alloc+0x22/0x80 [ 744.114222][T16390] __kmalloc_node_noprof+0x21b/0x4e0 [ 744.119502][T16390] __vmalloc_node_range_noprof+0x51a/0x12c0 [ 744.125397][T16390] vmalloc_noprof+0x79/0x90 [ 744.129898][T16390] snd_dma_alloc_dir_pages+0x11d/0x220 [ 744.135353][T16390] do_alloc_pages+0x11a/0x260 [ 744.140022][T16390] snd_pcm_lib_malloc_pages+0x303/0x690 [ 744.145561][T16390] snd_pcm_hw_params+0x793/0x1c90 [ 744.150576][T16390] snd_pcm_oss_change_params_locked+0x21cb/0x3f60 [ 744.156981][T16390] snd_pcm_oss_get_active_substream+0x1e2/0x280 [ 744.163217][T16390] [ 744.165522][T16390] Memory state around the buggy address: [ 744.171133][T16390] ffff888066b1c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 744.179182][T16390] ffff888066b1c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 744.187229][T16390] >ffff888066b1c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 744.195266][T16390] ^ [ 744.201136][T16390] ffff888066b1c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 744.209186][T16390] ffff888066b1c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 744.217232][T16390] ================================================================== [ 744.231196][T16135] usb 2-1: config 0 has no interfaces? [ 744.238710][T16135] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 744.256409][T16135] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.264566][T16135] usb 2-1: Product: syz [ 744.268907][T16135] usb 2-1: Manufacturer: syz [ 744.273490][T16135] usb 2-1: SerialNumber: syz [ 744.316336][T16135] usb 2-1: config 0 descriptor?? [ 744.321818][ T5882] em28xx 1-1:0.132: Closing input extension [ 744.580884][T16390] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 744.588113][T16390] CPU: 0 UID: 0 PID: 16390 Comm: v4l_id Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 744.599818][T16390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 744.609870][T16390] Call Trace: [ 744.613141][T16390] [ 744.616069][T16390] dump_stack_lvl+0x99/0x250 [ 744.620671][T16390] ? __asan_memcpy+0x40/0x70 [ 744.625248][T16390] ? __pfx_dump_stack_lvl+0x10/0x10 [ 744.630437][T16390] ? __pfx__printk+0x10/0x10 [ 744.635029][T16390] panic+0x2db/0x790 [ 744.638935][T16390] ? __pfx_panic+0x10/0x10 [ 744.643399][T16390] ? check_panic_on_warn+0x75/0xb0 [ 744.648534][T16390] ? v4l2_fh_open+0xc7/0x430 [ 744.653142][T16390] check_panic_on_warn+0x89/0xb0 [ 744.658099][T16390] ? v4l2_fh_open+0xc7/0x430 [ 744.662703][T16390] end_report+0x78/0x160 [ 744.666964][T16390] kasan_report+0x129/0x150 [ 744.671464][T16390] ? v4l2_fh_open+0xc7/0x430 [ 744.676044][T16390] v4l2_fh_open+0xc7/0x430 [ 744.680447][T16390] ? __pfx___mutex_lock+0x10/0x10 [ 744.685472][T16390] em28xx_v4l2_open+0x157/0x9a0 [ 744.690338][T16390] v4l2_open+0x20f/0x360 [ 744.694611][T16390] chrdev_open+0x4c9/0x5e0 [ 744.699057][T16390] ? __pfx_chrdev_open+0x10/0x10 [ 744.703993][T16390] ? __pfx_chrdev_open+0x10/0x10 [ 744.708929][T16390] do_dentry_open+0xdf3/0x1970 [ 744.713741][T16390] vfs_open+0x3b/0x340 [ 744.717833][T16390] ? path_openat+0x2ecd/0x3830 [ 744.722615][T16390] path_openat+0x2ee5/0x3830 [ 744.727204][T16390] ? arch_stack_walk+0xfc/0x150 [ 744.732069][T16390] ? __lock_acquire+0xaac/0xd20 [ 744.736938][T16390] ? __pfx_path_openat+0x10/0x10 [ 744.741868][T16390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.747936][T16390] do_filp_open+0x1fa/0x410 [ 744.752433][T16390] ? __pfx_do_filp_open+0x10/0x10 [ 744.757465][T16390] ? _raw_spin_unlock+0x28/0x50 [ 744.762309][T16390] ? alloc_fd+0x64c/0x6c0 [ 744.766636][T16390] do_sys_openat2+0x121/0x1c0 [ 744.771311][T16390] ? __pfx_do_sys_openat2+0x10/0x10 [ 744.776504][T16390] ? exc_page_fault+0x68/0x110 [ 744.781264][T16390] ? do_user_addr_fault+0xc8a/0x1390 [ 744.786544][T16390] __x64_sys_openat+0x138/0x170 [ 744.791391][T16390] do_syscall_64+0xf6/0x210 [ 744.795895][T16390] ? clear_bhb_loop+0x60/0xb0 [ 744.800573][T16390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.806461][T16390] RIP: 0033:0x7f5b4dea7407 [ 744.810868][T16390] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 744.830473][T16390] RSP: 002b:00007ffdca375340 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 744.838883][T16390] RAX: ffffffffffffffda RBX: 00007f5b4e69e880 RCX: 00007f5b4dea7407 [ 744.846859][T16390] RDX: 0000000000000000 RSI: 00007ffdca376f1b RDI: ffffffffffffff9c [ 744.854829][T16390] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 744.862796][T16390] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 744.870759][T16390] R13: 00007ffdca375590 R14: 00007f5b4e805000 R15: 00005572551494d8 [ 744.878734][T16390] [ 744.882050][T16390] Kernel Offset: disabled [ 744.886369][T16390] Rebooting in 86400 seconds..