last executing test programs: 26m33.111703802s ago: executing program 0 (id=470): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x2000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000200)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, r3, 0x0, 0x9, 0x3be, 0x800, {0x0, 0xfffc, 0xffff, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5f, 0x0, 0x0, "b4bc323ef77d1f000071849800000008dfff00"}}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x2000) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000200)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, r3, 0x0, 0x9, 0x3be, 0x800, {0x0, 0xfffc, 0xffff, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5f, 0x0, 0x0, "b4bc323ef77d1f000071849800000008dfff00"}}) (async) 26m32.990783969s ago: executing program 0 (id=471): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) (async) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x82080, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)=0x20000000) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) (async) read$FUSE(r4, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) (async) write$FUSE_INIT(r4, &(0x7f0000002300)={0x50, 0x0, r6, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) (async) read$FUSE(r4, &(0x7f0000004580)={0x2020}, 0x2020) write$FUSE_INTERRUPT(r4, 0x0, 0x0) (async) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xc400, 0x0) dup3(r7, r4, 0x0) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r8, 0x0) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 26m32.471605215s ago: executing program 0 (id=473): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8004, {0x0, 0x0, 0x0, r3, {}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffffffffffc17, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x3}]}}, @TCA_RATE={0x0, 0x5, {0x8}}, @TCA_CHAIN={0x0, 0xb, 0x9}, @TCA_RATE={0x0, 0x5, {0x9, 0xf}}]}, 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x20, 0x2}, {0x6, 0x6c, 0x5, 0x44ac}]}) 26m32.338566939s ago: executing program 0 (id=475): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x10) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 26m31.430409301s ago: executing program 0 (id=481): close(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x9, 0x913, 0xfffffef8, 0x6}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0xfffffece, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES64=r1], 0x1c}}, 0x804) r3 = syz_usb_connect$rtl8150(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f0000001680)={0x8f, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x5, 0xffffffffffffffb5, "96fd05be29af"}}) 26m31.24488105s ago: executing program 0 (id=482): syz_usb_connect$cdc_ncm(0x2, 0x99, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102020000102505a1a44000010203010902870002010120da0904000001020600000624060001d505240000000d0dd227a1470eb69998240f01328ce90b020003000406241afeff000f24120000a317a88b045e4f01a607c0ffcb7e392a1524120b00a317a88b045e4f01a607c0ffcb7e392a09058103ff0193a609090401"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3, [{0xf5, &(0x7f0000000180)=ANY=[@ANYBLOB="f50377eaa0264affbeca0884f23dff26f0fa1d59980286514ec0ec6d860b71b37a66e1c454addade88a963ad98c4d5d8a9ab9839110c1113b3c29b844d77c06dd500da043859ec07a1dbad0649efd8005449dc7dcc0ecc74d81a406c5be974edd6facb02f95f54705fbcb830dd1d5c4389b02680f856fa0af88b286d28d17ca0b131954c7fbe7cd5e6ec036de5193a70b729a244eb28a298ae523a38b2ad0258231396286277dc2172775d34ab36f316127071e06cd3ed3178aefb2892ca475eb7af4fa6d493ac0e6cecacdb7a3d65fdf15b27810da8aa1027c7f478a01aa51a1dd19ca8b68b3fc84bb280107d0675d39fec8450a4"]}, {0xd2, &(0x7f0000000280)=ANY=[@ANYBLOB="d20301aa6f035b9c65660b6799809a7e95adcf390c15e627de8854b042265a3d22ae0316407d30a5552b0dd8c78d244e819cba3c44c2c2a874b1047a04c00306d65ed1893b655bbe9f4aa15e9fc26b02b41f04fa9de4ee635eec4c4b2cab1935385f4294e6031f3ac03efb75bee44c01504fd830f81abe1f10deb916c0c49b77d98c4c66af01c943cfb5171bf00536044f8ee7a9b4cb2d412c86a3d98b8d56c44f1503930e44fa0dcefa437ea32f7c5a7a3f040c3b827331bab18b626167ca93de55d52dc0e42fa690ce6fc7635cfa02139f"]}, {0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0e0303009366b630c5e9cd4e6153"]}]}) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xff, 0xf1, 0xe4, 0x40, 0x46d, 0x960, 0x97b4, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x65, 0x7, 0x0, 0xaf, 0xce, 0x4d, 0x8}}]}}]}}, 0x0) unshare(0x2040400) r0 = add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x0, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x0, 0x34, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x1d) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0xb3) syz_usb_connect$uac1(0x3, 0xa3, &(0x7f0000000900)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91, 0x3, 0x1, 0x79, 0x50, 0xad, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x401, 0x7}, [@mixer_unit={0x6, 0x24, 0x4, 0x4, 0xff, '@'}, @selector_unit={0xb, 0x24, 0x5, 0x4, 0xa9, "9b7fec851190"}, @processing_unit={0x7, 0x24, 0x7, 0x2, 0x3, 0xe8}, @mixer_unit={0x5, 0x24, 0x4, 0x6, 0x8}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x100, 0x2, 0x1, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x4, 0x1, 0x3, {0x7, 0x25, 0x1, 0x2, 0x4, 0xf802}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x1, 0x1, 0x2, 0x5, "498d67c6"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xf6, 0x40, 0x81, {0x7, 0x25, 0x1, 0x81, 0x1}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x4, 0x5, 0x8, 0xff, 0x1}, 0x15, &(0x7f0000000440)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x1, 0xf1e, 0xd07, [0x3f00]}]}, 0x8, [{0xac, &(0x7f0000000480)=@string={0xac, 0x3, "f76f6dd23f6d5563b68176e5c1fb4108b1acd8de6b73cc71eaf2bde4dd7d2a0fb8604c8bceb4202f46ee654c0f4a07aee5354dd62c688ff399604b1f78043db1741ba60977b2da9428abcdd5ea6b9c033cfd9172fc50242b66d636b3138baa3550c63021f893514e9348b2d06cdb4e5ea4951588410ee28cfc49b5819325b9847748bef72127f4f18dcda0a2db0d8b594767445edb0be2836bbf78d5e4a01d256e91a60b1c9699a2aa47"}}, {0x9c, &(0x7f0000000540)=@string={0x9c, 0x3, "a82995f90004ff9c2abd2211f5c2d597e7796f89d9cf87871de5f2b2a649b426aeef3c26e9b789a4c64c88b5e5e97787dbe86ec57ac42e3324ad0e3b1362e77bb256e325e6977c2a74343161ac260f49ee5471ccf2600fec834eeef08128b98f874f5f5e96fa40863f2aa294ab063735444ab836b510e309c411e60d0a66c3c2796563d85b183f5875a4009bc642bfb951d96be9d198e240b943"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x810}}, {0xf7, &(0x7f0000000680)=@string={0xf7, 0x3, "b8fde9b0f0c23841de77e7a8eb01e5b7a66fe214740f3d5df1b5c4cc5f00b0d31c7a63e906d3201760164ea2c9ed02ee01d48e9e0906bbb95c15d8b33d00b71e6c27c9dcd9f5840233cf9a3a235766080a8bd13b86fdbc1557055b5c24463f9438f6c23197772064536e4a9266626a679d6773807cacbc63eccd3ba87fddc82b15525e278f683da66628c24403f3a6647c6d14d366d3304bf5df8e91e202aab0655fc46472fbed999a8507330fe1acb1ac62ce25228cd8dedd74c028b166063fb565ccaffd0844df25ec818e455348f58745c51610ce33d80aee3d5c90d71cf2770f5b09e4c807b883104ff1b14c19f1eb4041f78e"}}, {0x37, &(0x7f00000008c0)=@string={0x37, 0x3, "202cc46a97ec096ded8c7fdd96624e4d0e79d9cc507e2261c2d4c8b34866ab84f4569365df16f316752f1fbe65892e9cbc1e167b70"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0xe8b3}}]}) 26m30.878072537s ago: executing program 32 (id=482): syz_usb_connect$cdc_ncm(0x2, 0x99, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102020000102505a1a44000010203010902870002010120da0904000001020600000624060001d505240000000d0dd227a1470eb69998240f01328ce90b020003000406241afeff000f24120000a317a88b045e4f01a607c0ffcb7e392a1524120b00a317a88b045e4f01a607c0ffcb7e392a09058103ff0193a609090401"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3, [{0xf5, &(0x7f0000000180)=ANY=[@ANYBLOB="f50377eaa0264affbeca0884f23dff26f0fa1d59980286514ec0ec6d860b71b37a66e1c454addade88a963ad98c4d5d8a9ab9839110c1113b3c29b844d77c06dd500da043859ec07a1dbad0649efd8005449dc7dcc0ecc74d81a406c5be974edd6facb02f95f54705fbcb830dd1d5c4389b02680f856fa0af88b286d28d17ca0b131954c7fbe7cd5e6ec036de5193a70b729a244eb28a298ae523a38b2ad0258231396286277dc2172775d34ab36f316127071e06cd3ed3178aefb2892ca475eb7af4fa6d493ac0e6cecacdb7a3d65fdf15b27810da8aa1027c7f478a01aa51a1dd19ca8b68b3fc84bb280107d0675d39fec8450a4"]}, {0xd2, &(0x7f0000000280)=ANY=[@ANYBLOB="d20301aa6f035b9c65660b6799809a7e95adcf390c15e627de8854b042265a3d22ae0316407d30a5552b0dd8c78d244e819cba3c44c2c2a874b1047a04c00306d65ed1893b655bbe9f4aa15e9fc26b02b41f04fa9de4ee635eec4c4b2cab1935385f4294e6031f3ac03efb75bee44c01504fd830f81abe1f10deb916c0c49b77d98c4c66af01c943cfb5171bf00536044f8ee7a9b4cb2d412c86a3d98b8d56c44f1503930e44fa0dcefa437ea32f7c5a7a3f040c3b827331bab18b626167ca93de55d52dc0e42fa690ce6fc7635cfa02139f"]}, {0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0e0303009366b630c5e9cd4e6153"]}]}) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xff, 0xf1, 0xe4, 0x40, 0x46d, 0x960, 0x97b4, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x65, 0x7, 0x0, 0xaf, 0xce, 0x4d, 0x8}}]}}]}}, 0x0) unshare(0x2040400) r0 = add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x0, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x0, 0x34, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x1d) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0xb3) syz_usb_connect$uac1(0x3, 0xa3, &(0x7f0000000900)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91, 0x3, 0x1, 0x79, 0x50, 0xad, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x401, 0x7}, [@mixer_unit={0x6, 0x24, 0x4, 0x4, 0xff, '@'}, @selector_unit={0xb, 0x24, 0x5, 0x4, 0xa9, "9b7fec851190"}, @processing_unit={0x7, 0x24, 0x7, 0x2, 0x3, 0xe8}, @mixer_unit={0x5, 0x24, 0x4, 0x6, 0x8}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x100, 0x2, 0x1, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x4, 0x1, 0x3, {0x7, 0x25, 0x1, 0x2, 0x4, 0xf802}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x1, 0x1, 0x2, 0x5, "498d67c6"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xf6, 0x40, 0x81, {0x7, 0x25, 0x1, 0x81, 0x1}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x4, 0x5, 0x8, 0xff, 0x1}, 0x15, &(0x7f0000000440)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x1, 0xf1e, 0xd07, [0x3f00]}]}, 0x8, [{0xac, &(0x7f0000000480)=@string={0xac, 0x3, "f76f6dd23f6d5563b68176e5c1fb4108b1acd8de6b73cc71eaf2bde4dd7d2a0fb8604c8bceb4202f46ee654c0f4a07aee5354dd62c688ff399604b1f78043db1741ba60977b2da9428abcdd5ea6b9c033cfd9172fc50242b66d636b3138baa3550c63021f893514e9348b2d06cdb4e5ea4951588410ee28cfc49b5819325b9847748bef72127f4f18dcda0a2db0d8b594767445edb0be2836bbf78d5e4a01d256e91a60b1c9699a2aa47"}}, {0x9c, &(0x7f0000000540)=@string={0x9c, 0x3, "a82995f90004ff9c2abd2211f5c2d597e7796f89d9cf87871de5f2b2a649b426aeef3c26e9b789a4c64c88b5e5e97787dbe86ec57ac42e3324ad0e3b1362e77bb256e325e6977c2a74343161ac260f49ee5471ccf2600fec834eeef08128b98f874f5f5e96fa40863f2aa294ab063735444ab836b510e309c411e60d0a66c3c2796563d85b183f5875a4009bc642bfb951d96be9d198e240b943"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x810}}, {0xf7, &(0x7f0000000680)=@string={0xf7, 0x3, "b8fde9b0f0c23841de77e7a8eb01e5b7a66fe214740f3d5df1b5c4cc5f00b0d31c7a63e906d3201760164ea2c9ed02ee01d48e9e0906bbb95c15d8b33d00b71e6c27c9dcd9f5840233cf9a3a235766080a8bd13b86fdbc1557055b5c24463f9438f6c23197772064536e4a9266626a679d6773807cacbc63eccd3ba87fddc82b15525e278f683da66628c24403f3a6647c6d14d366d3304bf5df8e91e202aab0655fc46472fbed999a8507330fe1acb1ac62ce25228cd8dedd74c028b166063fb565ccaffd0844df25ec818e455348f58745c51610ce33d80aee3d5c90d71cf2770f5b09e4c807b883104ff1b14c19f1eb4041f78e"}}, {0x37, &(0x7f00000008c0)=@string={0x37, 0x3, "202cc46a97ec096ded8c7fdd96624e4d0e79d9cc507e2261c2d4c8b34866ab84f4569365df16f316752f1fbe65892e9cbc1e167b70"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0xe8b3}}]}) 18m28.176651567s ago: executing program 3 (id=2571): r0 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000340)={0x10, 0x0, &(0x7f00000003c0)=[@request_death={0x400c6313}], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r5, 0x0, 0xf3e, 0x0) 18m25.096518376s ago: executing program 3 (id=2585): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "1e0e1b5e"}]}}, 0x0}, 0x0) 18m21.911245031s ago: executing program 3 (id=2597): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x20000000000000, 0x1000b}) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20a0, 0x4287, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x20, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x3, 0x6, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2}}}}}]}}]}}, 0x0) r3 = socket(0x2, 0x3, 0xff) shutdown(r3, 0x1) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000080)=0x7ff) sendmmsg$inet(r3, &(0x7f00000006c0)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000b80)="f1e62f98c7ab3281eebd3c8dfdf09829d3", 0x11}, {&(0x7f0000000040)='UE\b', 0x3}], 0x2}}], 0x1, 0x4044880) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0022ffff00000000000000b19cc85309"], 0x0}, 0x0) 18m19.815111363s ago: executing program 3 (id=2604): syz_usb_connect(0x3, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="a44ff6"], 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000b80)={0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x48880) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cgroups\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) syz_io_uring_setup(0x1714, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) modify_ldt$write(0x1, &(0x7f0000004180)={0x8, 0x20000000}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) futex(&(0x7f0000002200)=0x2, 0x5, 0x0, 0x0, &(0x7f0000002240)=0x3, 0xab02000d) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a320000000014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000e0000001000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000f63c31e5fdf8c0000000000004000000000000000000000000000000000000000000000002000000000000000800000000800000000000000000000000000000000000000400000000"], 0xb8}}, 0x40) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000"], 0xb8}}, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xc000, 0x103) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x94f031, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r3], 0xb8}}, 0x0) close(r4) 18m16.124908509s ago: executing program 3 (id=2617): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20041804) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000050, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)={0xfc, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8000}, 0x4008800) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000000)={[{0x4, 0x200, 0x8, 0x4f, 0x82, 0x7, 0xc0, 0x1, 0xff, 0x6, 0xc, 0x4, 0x9}, {0x37f, 0xaef3, 0x0, 0x8, 0x4, 0x1, 0x8, 0x3, 0x8, 0x13, 0x1, 0x6, 0x10005}, {0x0, 0x7, 0x10, 0x10, 0x25, 0x2, 0x0, 0xfb, 0x4, 0x15, 0x3, 0x3, 0x40000000000002}], 0x9}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 18m14.887446227s ago: executing program 3 (id=2625): r0 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) write$char_usb(r1, 0x0, 0x0) (async) 17m59.09324557s ago: executing program 33 (id=2625): r0 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) write$char_usb(r1, 0x0, 0x0) (async) 11m58.369307079s ago: executing program 2 (id=4258): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) userfaultfd(0x801) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) writev(r1, &(0x7f00000002c0)=[{0x0}], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000200)) fsync(r1) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) shutdown(0xffffffffffffffff, 0x1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="120100008e77e3405c1b0501f101010203010902240001000000000904000002a4d36f00090504090000000000090507"], 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sync() ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000300)="8f7746e7eb38099d68897707e3ed3a3216c2c28d767cf0df4038ea6e8c5398b32579af9536a9dc15692b956d70c5e7ce9bacf083118391434a1665d5a9e8e6c00346565daa07ab101628e77f0fb4e55f1e49a1f06cd75a04c711ef3b2a4a521833577ef9f128009064799053285d978fd3925a636a266c433ca92f472048ad94db001e6590aee77e71728b01ccbaf7a5cc", 0x91, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f00000001c0)={r6, 0xa7, &(0x7f00000003c0)=""/167}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x5, 0x0, 0x0, r5}) syz_emit_ethernet(0x42, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008100000086dd606410a600080000fe880000000000000000000000000001ff0200000000000000000000000000012b00010000"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r7) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 11m55.047276065s ago: executing program 2 (id=4271): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003100)=@newchain={0x43c, 0x64, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xfff1}, {0xc, 0xe}}, [@f_rsvp={{0x9}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xfffffffb, 0x4, 0xdde, 0x8, 0x7, 0x809a, 0x4, 0x1ff, 0x5, 0x2, 0x200, 0x7, 0x2, 0x2, 0x1000, 0x6, 0x4, 0x2, 0x3, 0x1c4, 0x6, 0x94, 0x4, 0x8, 0x0, 0xb236, 0x5, 0x1, 0x8000, 0x7, 0x4, 0xc, 0x10000000, 0x9f8, 0x7fff, 0x8001, 0x8, 0x1, 0xa1, 0x7fffffff, 0x7, 0x8001, 0x200, 0x500000, 0x8, 0x1, 0xa000000, 0x1, 0x401, 0x7, 0xb, 0x9, 0x3, 0xe, 0x9, 0x9, 0x9, 0x8, 0x2, 0xf, 0x4, 0x9, 0x6, 0x1ff, 0xff, 0xffffffff, 0xfff, 0x10, 0x3, 0x80000001, 0x8, 0x38000, 0x9, 0x3, 0x8, 0xffffffb9, 0xb, 0x4, 0x80000000, 0x4, 0x6a1, 0x9, 0x8, 0x7, 0xffff, 0xffff60d6, 0xccff, 0x5, 0x7, 0x6, 0xf730, 0x1ff, 0xfff, 0x94, 0x6, 0x1, 0x1, 0x6, 0x7, 0x5, 0x40, 0x49, 0xf, 0x3, 0x10, 0xb, 0x6, 0xffff0000, 0x7, 0x2, 0x3, 0x4, 0x2a8b, 0x4, 0x8, 0x5, 0x201, 0x2, 0xf, 0xe98d, 0x0, 0x8, 0x7, 0x80000000, 0x2, 0x9caa, 0x5, 0x4, 0x10, 0x9, 0x8, 0x8, 0xfcf, 0x9, 0x81, 0x7, 0x1, 0x0, 0xffff, 0xb19, 0x10000, 0x2, 0x354, 0x101, 0x1, 0x7, 0x1, 0x3, 0x2, 0x4e, 0xc0, 0x6ae, 0xc889, 0x8, 0x7, 0xae33, 0x8, 0x9, 0xfffffff9, 0x9, 0x6, 0x8, 0xe, 0xfff, 0x10001, 0x800, 0x2, 0x80000001, 0x7, 0x7f6, 0x5, 0x7, 0x473, 0x401, 0x3ab, 0x124, 0x6, 0x5, 0xfffffff9, 0x6, 0x4ce, 0xf72a, 0x8, 0x7ff, 0x7, 0x1, 0x5, 0x7ff, 0x8, 0x1, 0x3, 0x0, 0x0, 0x8, 0x4, 0x1, 0xf9ae, 0x80000000, 0xd, 0x1, 0x40, 0x6, 0x7a8, 0x7, 0x6, 0x2, 0x9, 0x0, 0x6, 0x8, 0xc5f8, 0xca83, 0x3, 0xa0000000, 0x9, 0x2, 0x6, 0x8, 0x8, 0x3, 0x6, 0x7, 0x81, 0xffffffee, 0x3, 0x8, 0xa, 0x98, 0x3, 0xc3, 0xfffffffa, 0xf4, 0x86, 0xaca, 0x8001, 0x7, 0x200000, 0x80000001, 0x0, 0x10001, 0x2, 0xfffffffe, 0xfe6, 0x2, 0x1ff, 0xd99, 0x5, 0xbdfd, 0x8, 0x7, 0x1, 0x1, 0x8, 0x5a, 0x0, 0x1]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x40881) recvmmsg(r1, &(0x7f0000006fc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000d80)=""/247, 0xf7}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x2}, 0x3}], 0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x120083, 0x0) r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) r4 = syz_io_uring_setup(0x1885, &(0x7f0000000880)={0x0, 0x17ec, 0x400, 0x2, 0x3c2}, &(0x7f0000000580), &(0x7f0000000480)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000fdffffff000000000200000018050000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008010200b7030000500d0000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x2d, &(0x7f00000000c0)=""/45, 0x41000, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) io_uring_register$IORING_UNREGISTER_NAPI(r4, 0x1c, &(0x7f0000001980), 0x1) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="22ec88da4749bd4a91"], 0x0, 0x0}) ioctl$TIOCGSOFTCAR(r2, 0x5416, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000080)=0xffff, 0x4) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) sendto$unix(r7, 0x0, 0x0, 0x40000, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r8, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x50, 0x3, 0x0, 0xc}, {0x6, 0x60}]}) write$ppp(r8, &(0x7f00000003c0)="4469ce118b3289f792b9", 0xa) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0xffffff73, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00'/20, @ANYRES32=0x0, @ANYBLOB="9980030000000000200012800b00010065727370616e00001000028004001200060010004e200000140003006e696376663000"/60], 0x54}, 0x1, 0x0, 0x0, 0x8c1}, 0x8001) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11m54.260166958s ago: executing program 2 (id=4273): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000040)={'\x00', 0x6ef, 0x2, 0x5, 0x0, 0xf0bb, 0x6000, 0xf000, '\x00', 0x1}) (async) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000040)={'\x00', 0x6ef, 0x2, 0x5, 0x0, 0xf0bb, 0x6000, 0xf000, '\x00', 0x1}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000200)=0xffffffff) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000240)={0x2, 0x7}) (async) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000240)={0x2, 0x7}) r1 = getpgid(0xffffffffffffffff) fstat(r0, &(0x7f0000000540)) (async) fstat(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000005c0)=0x0) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f00000006c0)={0x2020}, 0x2020) (async) read$FUSE(r0, &(0x7f00000006c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002700)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000002800)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002840)={0x0, 0x0, 0x0}, &(0x7f0000002880)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000028c0)={0xfffffff7, 0x3, {0xffffffffffffffff}, {0xee00}, 0x3, 0xd}) newfstatat(0xffffffffffffff9c, &(0x7f0000002900)='./file0\x00', &(0x7f0000002940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r11 = openat$cgroup_devices(r0, &(0x7f0000002c40)='devices.deny\x00', 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002e80)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002e80)={0x0, 0x0}) statx(r0, &(0x7f0000002f00)='./file0\x00', 0x4000, 0x400, &(0x7f0000002f40)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x7, &(0x7f0000003040)=[0xffffffffffffffff, 0x0, 0x0, 0xee00, 0xffffffffffffffff, 0xee00, 0xee00]) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000003080)) (async) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000003080)=0x0) fstat(0xffffffffffffffff, &(0x7f00000030c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000003140)='./file0\x00', &(0x7f0000003180)) (async) lstat(&(0x7f0000003140)='./file0\x00', &(0x7f0000003180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$I2C(&(0x7f0000003400), 0x3, 0x420100) (async) r18 = syz_open_dev$I2C(&(0x7f0000003400), 0x3, 0x420100) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000003440)={0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000034c0)={0x0, 0x0}, &(0x7f0000003500)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000003540)='./file0\x00', &(0x7f0000003580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000003600)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) getresgid(&(0x7f0000003640), &(0x7f0000003680), &(0x7f00000036c0)=0x0) r24 = syz_open_dev$vivid(&(0x7f0000003700), 0x0, 0x2) r25 = socket(0x0, 0x5, 0xffffffff) sendmmsg$unix(r0, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="62838bd16f0102d0068b88b12a2e3e3a390af22fc678f2f247d4850dfd24a49204594e433e155a1efd1942ff59776aba88dc3a6c58d24fe27fd7d2c06b671b0c015f99fa7223f17c4c407f5981beb6d3ecc6f65742d121bcfdcc41378b17a9dfe43acb7e1c213d45cdc0cbfe02b15da3a403310acc1bb81bcd4a653ea4aa39bd717cd54d", 0x84}, {&(0x7f0000000340)="209b298a2a56c598680b97d65ba51baffd188deb0c3a6a1770a5f62de5006b6bb16c9d991c69b0c10982cab8b9a4448821db0c67af58114114c0e659c36e4b39621a5be29c3d30c7554bd9d4824cfde2124174374206ddad7920d3b5a07747bb508bda87fc93d7809131a28bddbf45d244ec93476cb4ccc211405518f7e7e76f1aee7217e81249e51e5649db6efca831f09f06310c4f8a6975818a43a4648bc13023832197cbeb11d34a13970b05b9b5c1dd858487ff4e86d058b6954f1cdee07be3", 0xc2}, {&(0x7f0000000440)="f18d51ec142aa43558e8fd800f892f6842f50b372954a5344a4997c99313869e925125ce7b53f6346aadac0cc99fb5e6e2039fe1f23ed8012609b19ee302572bd26ff70d467199e4dd17746af9d4901c4957d365", 0x54}, {&(0x7f00000004c0)="44501628878df40cd1f630a3f96c62e27c1067e350a79b20e719075923d374f57a14cd8bb1e10b1b", 0x28}], 0x4, &(0x7f00000029c0)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee00, r2}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee00, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r7, r8}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r9, 0xee01, r10}}}], 0xc8, 0x800}}, {{&(0x7f0000002ac0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002c00)=[{&(0x7f0000002b40)="250b9f0f5e4dbe28be2dab30d376ec3075b6c3c293ed7cf96cdf6c0c08ce94c1ab782d11da002bbf2c08976a1572d32554cf2b98e99f0f883438e0ff9e4eadb110729a229977aafe27057fc295cce858fb474abfd8a32b784c72c3b70a56cd2355f8a0e55377854670f4ea34206c277d831b9e5b77f7753705e09d77b8dbd84802b6112d502b2b2b68e84482ce37049a4d604c15e60a787f0bccccd13e5f41084ecec5b297eaaeb642", 0xa9}], 0x1, &(0x7f0000002c80)=[@rights={{0x14, 0x1, 0x1, [r11]}}], 0x18, 0x4}}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000002cc0)="148c770a37fe65bc42b80b486e37e03ccf440288f1768d2e6f2655f11adbfc19004668fd4b0ff8bc674b580a3da48ae4fff6b2cf86c0e7f76e6d5f62c0b0ec6fd40a2d3dbfd69cedff86a92fa9939f5de51d16de537cc80fb4f1cf91fc0ab550e4da90241114c5f4064ea34adbe07007e6385414d13ce1b4ad3b6639db6ebee90e6d8bdc2a6d4bac4a5a7651c6597c2639589d3dff06a6cc466acc5b53721c2fd0b072eae657a0cf7fc1c6f8e615e93c26dd978698383a4b48f4b5718fec958b1bf1e299e75daede9c2b7fe3229d2b34aa4fff9f5d62", 0xd6}, {&(0x7f0000002dc0)="e8e5a6698eb583edda15f5c57a607ec68baf7edc5da3cfd2c3cb44d14010279b921d88163b73c61c3197587a36ccb2d6337bbdeaf6b2227eb2bd01e8c1ad487b84b2a805430044fbf5b70beae49b6c1b62137e6681ff558469ae", 0x5a}], 0x2, &(0x7f0000003200)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}], 0x58, 0x10}}, {{&(0x7f0000003280)=@file={0xa9fa53304e7d87ff, './file0\x00'}, 0x6e, &(0x7f00000033c0)=[{&(0x7f0000003300)="0aabc91d5257", 0x6}, {&(0x7f0000003340)="63406c3f26f7f0ea68e6099f1d034eac1e6e48859d28d5349ba3251a7ae6fbfd8b4e3cf17d4537a2dea876051f20f82437b2e42cf1296658af662788b87c84b74beae1a81ec2b01b541834bf2e06617d4f1816382772b26a3c533677f6f1efa78a1e3532ce1747de4ea91aa6456a", 0x6e}], 0x2, &(0x7f0000003740)=[@rights={{0x18, 0x1, 0x1, [r0, r18]}}, @cred={{0x1c, 0x1, 0x2, {r19, r20, r21}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r22, r23}}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r24]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r25]}}], 0xd8, 0x4}}], 0x4, 0x8800) (async) sendmmsg$unix(r0, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="62838bd16f0102d0068b88b12a2e3e3a390af22fc678f2f247d4850dfd24a49204594e433e155a1efd1942ff59776aba88dc3a6c58d24fe27fd7d2c06b671b0c015f99fa7223f17c4c407f5981beb6d3ecc6f65742d121bcfdcc41378b17a9dfe43acb7e1c213d45cdc0cbfe02b15da3a403310acc1bb81bcd4a653ea4aa39bd717cd54d", 0x84}, {&(0x7f0000000340)="209b298a2a56c598680b97d65ba51baffd188deb0c3a6a1770a5f62de5006b6bb16c9d991c69b0c10982cab8b9a4448821db0c67af58114114c0e659c36e4b39621a5be29c3d30c7554bd9d4824cfde2124174374206ddad7920d3b5a07747bb508bda87fc93d7809131a28bddbf45d244ec93476cb4ccc211405518f7e7e76f1aee7217e81249e51e5649db6efca831f09f06310c4f8a6975818a43a4648bc13023832197cbeb11d34a13970b05b9b5c1dd858487ff4e86d058b6954f1cdee07be3", 0xc2}, {&(0x7f0000000440)="f18d51ec142aa43558e8fd800f892f6842f50b372954a5344a4997c99313869e925125ce7b53f6346aadac0cc99fb5e6e2039fe1f23ed8012609b19ee302572bd26ff70d467199e4dd17746af9d4901c4957d365", 0x54}, {&(0x7f00000004c0)="44501628878df40cd1f630a3f96c62e27c1067e350a79b20e719075923d374f57a14cd8bb1e10b1b", 0x28}], 0x4, &(0x7f00000029c0)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee00, r2}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee00, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r7, r8}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r9, 0xee01, r10}}}], 0xc8, 0x800}}, {{&(0x7f0000002ac0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002c00)=[{&(0x7f0000002b40)="250b9f0f5e4dbe28be2dab30d376ec3075b6c3c293ed7cf96cdf6c0c08ce94c1ab782d11da002bbf2c08976a1572d32554cf2b98e99f0f883438e0ff9e4eadb110729a229977aafe27057fc295cce858fb474abfd8a32b784c72c3b70a56cd2355f8a0e55377854670f4ea34206c277d831b9e5b77f7753705e09d77b8dbd84802b6112d502b2b2b68e84482ce37049a4d604c15e60a787f0bccccd13e5f41084ecec5b297eaaeb642", 0xa9}], 0x1, &(0x7f0000002c80)=[@rights={{0x14, 0x1, 0x1, [r11]}}], 0x18, 0x4}}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000002cc0)="148c770a37fe65bc42b80b486e37e03ccf440288f1768d2e6f2655f11adbfc19004668fd4b0ff8bc674b580a3da48ae4fff6b2cf86c0e7f76e6d5f62c0b0ec6fd40a2d3dbfd69cedff86a92fa9939f5de51d16de537cc80fb4f1cf91fc0ab550e4da90241114c5f4064ea34adbe07007e6385414d13ce1b4ad3b6639db6ebee90e6d8bdc2a6d4bac4a5a7651c6597c2639589d3dff06a6cc466acc5b53721c2fd0b072eae657a0cf7fc1c6f8e615e93c26dd978698383a4b48f4b5718fec958b1bf1e299e75daede9c2b7fe3229d2b34aa4fff9f5d62", 0xd6}, {&(0x7f0000002dc0)="e8e5a6698eb583edda15f5c57a607ec68baf7edc5da3cfd2c3cb44d14010279b921d88163b73c61c3197587a36ccb2d6337bbdeaf6b2227eb2bd01e8c1ad487b84b2a805430044fbf5b70beae49b6c1b62137e6681ff558469ae", 0x5a}], 0x2, &(0x7f0000003200)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}], 0x58, 0x10}}, {{&(0x7f0000003280)=@file={0xa9fa53304e7d87ff, './file0\x00'}, 0x6e, &(0x7f00000033c0)=[{&(0x7f0000003300)="0aabc91d5257", 0x6}, {&(0x7f0000003340)="63406c3f26f7f0ea68e6099f1d034eac1e6e48859d28d5349ba3251a7ae6fbfd8b4e3cf17d4537a2dea876051f20f82437b2e42cf1296658af662788b87c84b74beae1a81ec2b01b541834bf2e06617d4f1816382772b26a3c533677f6f1efa78a1e3532ce1747de4ea91aa6456a", 0x6e}], 0x2, &(0x7f0000003740)=[@rights={{0x18, 0x1, 0x1, [r0, r18]}}, @cred={{0x1c, 0x1, 0x2, {r19, r20, r21}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r22, r23}}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r24]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r25]}}], 0xd8, 0x4}}], 0x4, 0x8800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000039c0)={'syztnl2\x00', &(0x7f0000003940)={'ip6tnl0\x00', r6, 0x4, 0x1, 0x0, 0x400, 0x21, @remote, @empty, 0x7, 0x8000, 0x7ff, 0x2}}) 11m53.836357525s ago: executing program 2 (id=4277): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0xfffffffd}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) r1 = add_key$user(&(0x7f0000000180), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000004c0)="32f65ac7259bdedb31b409b00c60d03489dd079c495f0fde7abb74b8f24df409267f2cf6d7754fc4f13256bb8f14ff61d1edb5cd32302b3b6f20ffc7541d988d4776eaf11927a3913570a726569fba1523ab477428cf52526ac8c416771d58ded1299c4770dc5ae849a7a725cde5816591749738ea0e709060848f45f54f9034b38c27b1f01e4a39fdbbc75524a2300a164dd9fc80af25977fb82e9df29cf49486ed083c2305057d67766c2ca920a325259040212eddce6dcbef1bf00ff5a3127ab084354334c098bb2a74220d5f182f92aadebc23e01b0fbd416fdaabd4876fee925252a086b8", 0xe7, 0xfffffffffffffffc) add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000240)="009e8b7ee4033501d5b6abea2f01b80aeef4cf5f855d53bec3e6889d908d1a408ebe67c283a6d6650d15055ddc8f09236c7adeb538d97ec883af98dd28c3294f2c246b35a35680baf32818fdd421600e7f1e03e58fabdf86a20d02eaeef3de7396f17643c743eda0b42f950cb329eca14c446957aeceb8c2aee999b5360e546819acfd3a4e9d04991e9e3363bcf23d255c821e5cfae0bbc7ddbd03942fff18626847120f4ec800c8dd4ced528c8be27a23b62dac288a9ac86bce", 0xba, r1) mkdir(&(0x7f0000000000)='./file0\x00', 0x80) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001c80)={@fallback=r0, 0xffffffffffffffff, 0x11, 0x200c}, 0x20) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20000, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x8402, &(0x7f00000021c0)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000800000000000000900020073797a310000000005000100070000001c0007800c00018008000140640101020c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) socket$nl_route(0x10, 0x3, 0x0) 11m52.850588004s ago: executing program 2 (id=4283): syz_usb_connect$uac1(0x0, 0xdc, &(0x7f0000001400)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005"], 0x0) syz_emit_ethernet(0x76, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000300", 0x40, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa198", 0x0, 0x3c, 0x0, @remote, @empty, [@srh={0x2f, 0x0, 0x4, 0x0, 0x4}, @fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}]}}}}}}}, 0x0) syz_usb_connect$uac1(0x0, 0xdc, &(0x7f0000001400)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005"], 0x0) (async) syz_emit_ethernet(0x76, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000300", 0x40, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa198", 0x0, 0x3c, 0x0, @remote, @empty, [@srh={0x2f, 0x0, 0x4, 0x0, 0x4}, @fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}]}}}}}}}, 0x0) (async) 11m52.732742747s ago: executing program 2 (id=4284): syz_io_uring_setup(0x6d89, &(0x7f0000000000)={0x0, 0x1623, 0x2, 0x3, 0xcf}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x331000, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000140)=""/121, &(0x7f00000001c0)=""/82, &(0x7f0000000240)=""/46, 0x8000000}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @mcast1, 0x7}, 0x1c) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) ioctl$PPPIOCGDEBUG(r2, 0x80047441, &(0x7f0000000340)) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x280800, 0x180, 0x1}, 0x18) ioctl$INCFS_IOC_FILL_BLOCKS(r4, 0x80106720, &(0x7f0000001900)={0x7, &(0x7f0000001800)=[{0x2, 0x31, &(0x7f0000000400)="409ffff7daccaaf0cf5b3662cf814c5db7ca117672e866206f370e69fe72feee051abd085b01c3bf5f4fadacfb6d7ef7aa", 0x0, 0x1}, {0x9, 0x1000, &(0x7f0000000440)="15ca4cb4d200a3d6fc46bd2f39685fbb17f752cca10f520f97c520c23e5d9007c817e94608380fbc4f8efd05b6a5d030dd4efaadca62fa5a516fc4b5c89fde356e9ef162774b27c49f1ba114dc552a5d5403dc130b08ad61954a672496045bce8d506b8cd72140b772284c9be6be9bc158ec440e1eb6999aa633730a1c846108b10bb116822de27f29208c192b75e0c2a20b2d8a0c7c0657edd080c3d394988829059e99922e0059767bdfb315431748c7e40485e76f753de54be9596074e22397227bb159ae821f2953662c6ed836d3a7f6bfca625857e31a73ee10c3b37d6e4ee576ef1c79bc99adc991acb6230d0fceb9c6da687e2d276d4c3a27c524b2b689f8a5c1fff9ba5f40338935b504add4a277d95ae2cf220666ed339e3a2862ae719756f60a6d7733243cdff06af9e9fa4c3b66a6ecfc65fe953e1af38587b2e1f87ebca54271b749ac47379d615621527e227d8b58a1ef8d3a85d289a147469177ffa0f4a9789da7f1a1a1bb4576151cbe304b8e640ac325035fb8da0461bea7d97dc931caee32cc080f3b516da652b2206c988a31473032761732abb99fb515e3eb8325937086b367fdf440ca848d7402977df1bda75d4cf660c546c7b2133ff549e329d3ce52cfb4dd38d1e4d1b5b5ca4dab5b9a3e6e54776d63ec9b44db4818a64e9d66815b214cf26d0962b7e79f704c5744222a5f3ae95d049495e300f5f54b56286d56b4ed5c046902ed5c1022c9ff4352b7a57b5afcb0f84266f5a4adcc7c43834bb12a5968356e80fbf2f27324e480bd177aa5859d22aedede7013a603a83c2a654b4c12aa91ac98ea30a158861d2c805bca5e70aa685d831e4942371ccad7508bfc78ebd4f7b50bf201025e89cacb4203fb88346c1264df18d57edd34a77653c674c713b400646e7fd4929bf5d42b9493c449833bcdc404f14cdbc05012ce0fd5580cd04e182b0e00e3fc0a18bffe8e2e41d11bfdcf218b4425531ac56d245512fd5ecf7543fbac0463746c2b395701e06d69f80327e7555645da66c17b632e897cbd987504868f627b077d5346305a1a6cd848f2cdb5409efa4010a40ee5ea722283d6b5c9111ad8ac2cc8d9f9d03e97e2939a39465dc977cf80a74544b09d0039c5a5ad62dd671a9dc84ca38b46a6dca29445cc57463134786040599ad49d37d414524f2ecf6501ec7fe260c982a4a89373b95fe5b871bd9ce72a512cde2c7915299fa4339e1388cc1de4aef625b91fae03ded90796ef3354af73f6e0c0d5b07b2fac704b02cfd902d0ca199b4e63502c725c52cef3eaf632b68b19b27a6d064a0ef5cb736a255b129e59e3cd9e27b1c5e6465620a2cd5546757409b9b4a707cbe8c3bd9f8a66015942114b11fb895fd622612e2e1e000ec30a4deaf56b22ef123a71083e7855fba8f7fad359069575baaf34afa7af3f2e1890ea69d66bc4cba0204046e60d7fc42b6f42a82200a291d06f7a367b0fd9ccebeb2111bc23a40ceab247777117419b2c854af4f1a04bdb6f8e3c12104e79acf6e5e1f2f229ad2738c3e1373961a8e91b18d18cb0dff6c8960efdb053c3644801e1752db7f1effb5d81d0bec8e7a5cecdbfb02a947f95d2f57025509d7604082c79e961f279706a4a076c14488891e226c8d458769dd7505501cccf1f29e13feca9d37355c5b4af9c3f1ceefe67de1a988b3da84632d53864bbb95e29f6896f9d49bb24bb1e2a2329b1ba3e0b2c94ce57a5ff3ed5fcb8a28fff54d5217fa33c7f3776b9c165c2fd26e9d662939d9dd4a05e00221589fee63896763ecc4369a1d669480da168dbee818bfe4cdbb5b0232b23a8aa686599059cbb1e0f677152a5174635b0cd7713a0f09fe4be3227143c4058175b69be041275e2b56f5fc66d86759346c6581f29c89807034199a0b1f4b3743927234d431aff81b5aeed79ffa32a2cbde0729a52184b6dc3c6c16d9b1175c9ba6ffdf589d28ff7ba161b925e754e7504f5da327fcf979b1d872e0490a2d1791d75a7985613ff90d4c35b7abc0a4267216f2c13d4ab64a750fa9e842bcdbece099cf5fa6e4722569e01a670247a02c3dc698772aceb610460edfc3c7e558c82f8b14a743ed826088ac2d4fb60e87ecb9bdffeaaac33d23b6fa0d7f058a50d4a51120725b5ef6f833ba4567e93d08b2b77b29c839049f52e62e9a9f29e7c40304d16abc91aa0d4c8e11feea80af7999f2d625f0f6c64ed5f78bd9ace72ace7289146ac56d7e9c251ce12dc3235d7478e420cc68bae164de7eaf4e8b5c2167e70669fccee95e377ccb7aaf1d9cec9859ddd1092e818e33a40c79cbc6d3e2a136cd4dfe0152c2287c6a43fd69a3a87fd96db7792a2027384d76f2c2d5d2e8afa986af695250def5ed4ae2ed6a7b08688b26b109e55bf8ed7e0c70e240463d72213f4d14e22dc6bba6158a4be03cd2daf34fcc08de5f5cbc9f31567e94c3ef23ab3ed71e81d44a25b8754fd630145abcf76e3ea2bbbdf88e0931dd34a66dd86b15223117cd6fb01349e0b8ecab930454ee0bda6d7bbd4522e8c713a0b34982c5bc8d4bde572bbf505ae8d8be032613cc6fc550834d5ec43528f07ed4b8277619c98dd025e17b2fb6342359a3d3d0bf2e45de153ac6f53fed398b462af7a07d63547b15896c572e6acc426b7375157997fc77d0708a7dd176e75189360a1fcf9ed2d4845752cedb59f584f2e0d0f125570481ca256f4b51cc26c85d666ead77be014f2443596b477563946cff39be4a41d415fc316bfeda5f7611547ce889b63fac2d98f5de16fbf0f8d8fb58724a78d04e0f3666ca13a28d87d281a125a1442f66aa3fab617b784c3830930fa47c18c673fa8c8a368eddc3d790e8202f3a31624eceb8b8282cede19b456784d067120edd2c14f2551825fa98599a913f587ef14587cb3a04602f7a9cd8e18aa30af9bef37325c30915e1df9659b8ac85f87eebfbeada07d72ae134cdc51dce8ab6bf52d3777dcad0a4a8437d3e20c8b95e2183c3570e878615ec3810e3d0ae0434a9302adf94edb260f67150eaecfa9d6ce97c9cddd28d02248b2e05094073b6a9896991a90a755e290db151716e9fd80bbf97d028fc9f82ddd776e917f61099cc21e0a2220b8d0e3ad015f402d2e84b5b1631484e12bb2aba36572af0c06209d512001d8d26c7776c5a9ffd7294b22c54ebafad8bfd47b99c3c2ee7cbdfeb44de111d9d1e2359cb88a3b5b33af368e28d2bc25d2353eedb0584bb0eba7e52ab27a2cc890fd89e14211a5bfe0c27b7cb1de9434e1a4107101bc3cc1012a57ace122362310180a989611cbeabe347764e822ea4edda81a797534baa44e63fe8b0e0a5764a2a8d95b5cfb8ea66ab09b43c6321c475049f4b3a80c7f224362adc6bbdb31f8fadc48a34cb48d4ff348493f796fa55bd66bdfc1961b1416a29a8e020b1294931fd511febd669a41e73de08ab2cc352e771ceebe07def41e4ab253270872a0575f553b384c2bb01022f42fdb1172f865bc7ab77d42ca59c685f86580db4e312a918cead38fc311db8a426da81d973f4e4a1e4898652b64024f06365b341bbf03177b16c830b5862e735324e98cc9c126cb1618cc5030e075a202a2d173ccf0fe84964bfddb564fadc532766dc51675eea2205a6b500220334e964a9f243fe274284810b1ac2994bae91b3cb1c12419a1c60bce214f1ad54ff3ef2ebf26758a29f6a54c8367517133b3d065f22f242f43502e2b5b2a3b1443fde2fda2b4e720ef099f6f453507b505bced76a34daaef8975ad7c8ea6435e5add0bf379ee145fdc8e339c711fb4157ab12d63ed8afad15241bf5284acd1b37793c4268bf5a7fa6ca654c9f9098c15c800563ee90a21afd6c748cd9d960fadbf4d2dd47226a474a55f0a55dd8caae0687455a13b4e7318fe07ba5d0c1c41a3626f927dd841b33059dff1732a2941407c193903b7172e99c193e07344a6a82418add55cc0acaad3e44684e6fc79528f21a3d0875883d6e074e0b048f7a041c8febacc5313bfe6174ec00f97d031fa02f85c9ab810eedf3abb34fdc4aa756e181177e8d08a93d2feeb83fca787ac8b7608ff2a7e5791e39b5d5f3593fcdbb2015ddb98fa186d5cedc041da0f6e6cd0fbf506785fae80481b01931910700271c9b62f149957c583ce00a27f4513a0722d1c8f5470db9cd9633c85a9ad11a5d95863deb0b871f8e15e74fb1a1baf803b771d272e07edbe12ef4ab59b07720589af592bae1dfac53b19a9b20feb1952235ea108976c4ee2cb004b113ecbecf9a1c083020257ad4ee30737d419b81a73b6828b9f4f1c30a476e1a875cdb07b081e5f8a2e6c610c2ab785f816ce18bf7057b9470cdcb16e33a4108f5ffd0129c6d3181519085163a7b4007200ca83d7bab21c5241277570aafe35616c09a8fdfc95fc51fe93f5ed2caee251364ac5f560fc9d8c649bd25c5355f9c9019bc9f8b78d01190aa2fcf12382e120f3ab326e522b60c78f5106c02ee34a90e09b4560708d034a8b511884ee62bc444aa4cbbd9a962bb3d26cc65b7cdf25940b71a1952d75c2210cbe14975126025ae1d22c1463160c0c3443a2e8962825aea3277645eb957e740025d0bbd4de01f9e924e03d7aba8e6b46a1516aa5b4c58f572f9e925db07e3cacfb105b6342a88e7eadafeba10f1c71b066f0e2a7203648f7269e65eb262e154fc6db11d89fe388fc3fc7ba081ee760e16d566b2dd98d4d40e46cafcf1e160674e14fd712a84a6f9ab5db8ed3a73b8c6abb44a0d6bfb2082c5dd69f185d158ce4bfffb623db581453e034d13f3c11168b014a0c1bc5707632a98f6c9d84144a61c15c7f07273a3f4ee897424b47aea4ea92fa7fc704f7c1d03ba2d3b01b291a94e365c6a746310b9f786c775a72855fe444620663281df0410e4e412bb2a7a39ba2f6592e7acaa891b3f84e21a47ec14b8a15a67aed84628f74ce07c76573e8a52e5c104484e86689b395e315e68a85ed60d35003efe09413fa95e2ae4371bd7fe0f817ee73b5670f9c423e058acc0e911dd7ad34c67e2e372bbe55c4fa72fa2268d7e8c30695316312d61ea06343554456b39a23c8e9992304b2cc43b777120efe671ba74783405d2cfdbed32ebf1e9ee12f32a213f45bae65a2d530932a3e8fc2699383ddf78622e5784a569be9b5dc00efa42d0584cee2045b3cf09ec74082ec0e74c4a1be86444b69ffc356cb2027122f8f2417b7993d4f115e16635cc8ad3bf5a133c876f88b54125d86cc6e6a41095310c4dda89e144776690c57c483f2da328eb4467a533b0703ae3dc83f0c3e6eff4aaf2744cc435aabafdb23be8963477b39285c0d770dc2e32132272d0339abef8af38f14c902ce130670193016d605e4c2b2c0332a38deb73079daf64329453b75f61308c1d8b03270b4c7abd9cca5b429d4372060006340226bd106a63ec4516d11e8b53859d958c1b31ed8447b1512887825c1d2be04412c87d123bdb35f680cd06cd6da6ffbbf5b6e526a6b1aaf3c92744ba172095e5043e44c05daa47fa410b3b926eeadc04a647084b1387bb812c843108e800da9bf635bd8fea8add9573b4e52eefe6bb1fa381dd95d400177e942386e87514e19dee40551f0c783f2dbcb61e6d1a35562f32bbb9b58532940c077ec1df1fc7e4819b5a51e6d4f853de74e5324bcacfdca73a1335113a0cd9aed0671e96792b4db9cf6f689c8a81b5dc6433d201edeb2b096933c5c42c1e79f7297d1259ab4426f466d79f678155b380c48ead0b175398720e3e3217d92e6209f69efc1bb9974d0"}, {0x6, 0xd5, &(0x7f0000001440)="cf6b0788dfb9abd59ad496f1fa4f3eebeebd6ea83ea4c6a44f65157758b9d5cd54e7f06ff98fa39dac76578085d3e577b23ac4e53b60fc88f15c7159f379d89ec8b3153d574727437c68671648eb8a0183dfeac7b4daf58e2f5236902caab285c076021bd3ea0da715f4fe83d1934c2b686fce66dcf8fb2131a98c552cca35b7f0ee0e772f908089ec855ea9586cf388ceac4ac6a451355419e4ee7d70ebd401da850a536d5ff03c93b2abef11ab01f766ca36f7ff723ab2fd2a111d2982a4e2c639b25a535275e310fff90cb418aa32c50d1d60aa", 0x0, 0x1}, {0x1, 0xc4, &(0x7f0000001540)="3d7a6bef8dc6c18e6423ec7c3c365dab222dbc01e66a4f90338dfff32080da77d3bceb3edf1b748a23cfa772b8f09e2fb5e3f357c525c82506c3510dfef52d87d8557acb881118d6ab83f2b3858461ca663db9e9d9216d6a8847ac96aa22ee8b91142da13d1a30a87a53793cdeea1fe743fd85eb94e97950cc8144635a459209a0f8550aa0b7ca5b52ff68b6c6ecfdd43e909e6c1022c56b59ab0347eac3de20d14813aa5dc31dd7f69fd3930833d35b7d0935002dfd3918d0471ab4d3321dce77dccced", 0x1, 0x1}, {0x8001, 0x93, &(0x7f0000001640)="cf00fede1016b2f29fe710553f73b19c3f6280a47bd1bec0aa3e044b1ad568bfdc60dfdd576d0c26f0c8b9b9fdf1c48cb29c54667643f8156e7e71328d00a9d6db1ae64b1020b7efdd69afbec2fb56eeecdc38f8c542da901777643f7bd74904225994a8028257084c2dfb7177ca93c95cf6eec0ba05c0536b6e2400eeb0b3d8d0fbe98721bc7ad368678248f923d98842102e", 0x0, 0x1}, {0xf, 0x42, &(0x7f0000001700)="2a2848a8e672ffa0efd320c02adb73a00a6c3320c8edd1ad669ca470b62f231527ccbc9eb65cf663e12e4ae367a24b3f3f23b581aea91980cdd10507cf1d1150cf3d", 0x1}, {0x0, 0x5a, &(0x7f0000001780)="499d93bdfad1a96c6bfc3f9d7254a9be76b9f3c359b4cc5fbd22be9252d1912a3b7f22c006c4095160a55a28958f4bda32c1adcf226e95cba3c2ed1e85b94cd1e03cb970b66c0aee520ba97b300c3f3a771d7e20c2ebd022ca93", 0x0, 0x1}]}) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000001940)={0x6, 0x7fffffff, {0xffffffffffffffff}, {0x0}, 0x4, 0x1}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000001980)={{0x1, 0x1, 0x18, r2, {r5, 0x0}}, './file0\x00'}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000019c0)={0x2}) ioctl$VHOST_VDPA_GET_AS_NUM(r2, 0x8004af7a, &(0x7f0000001a00)) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000001a40)={'TPROXY\x00'}, &(0x7f0000001a80)=0x1e) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000001ac0)=@req3={0x0, 0x8, 0x101, 0xfffffffd, 0x1, 0x1, 0x9}, 0x1c) io_uring_enter(r2, 0xc35, 0x1b7c, 0x10, &(0x7f0000001b00)={[0x455352e]}, 0x8) r9 = syz_open_dev$vim2m(&(0x7f0000001b40), 0x0, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f0000001b80)=0x3, 0x0, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$fuse(&(0x7f0000001bc0), &(0x7f0000001c00)='./file0\x00', 0x8021, &(0x7f0000001c40)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x8000000000000001}}, {@max_read={'max_read', 0x3d, 0x1}}, {@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x1}}, {@blksize={'blksize', 0x3d, 0x1c00}}], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/vcs\x00'}}]}}, 0x0, 0x0, &(0x7f0000001d80)="f5b17214fc6282afbaa881") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001e40)={{r6, 0xffffffffffffffff}, &(0x7f0000001dc0), &(0x7f0000001e00)=r3}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000021c0)={r2, 0x58, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000002200)={{0x1, 0x1, 0x18, r9, {0x487}}, './file0/file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002300)={0x18, 0x2b, &(0x7f0000001e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@call={0x85, 0x0, 0x0, 0x1f}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_fd={0x18, 0xa, 0x1, 0x0, r6}, @call={0x85, 0x0, 0x0, 0x83}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @jmp={0x5, 0x1, 0x3, 0x7, 0x6, 0x18, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002000)='GPL\x00', 0x7700, 0xe9, &(0x7f0000002040)=""/233, 0x41000, 0x10, '\x00', r11, 0x0, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002240)={0x3, 0x9, 0x7fff, 0xfbc}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000002280)=[r2, r6, r4], &(0x7f00000022c0)=[{0x1, 0x3, 0xd, 0x3}, {0x3, 0x2, 0x6, 0x6}, {0x5, 0x1, 0x9, 0x8}], 0x10, 0xd}, 0x94) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f00000023c0)={0x0, r3}) syz_io_uring_submit(r0, r1, &(0x7f0000002400)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x2, r12, 0x0, 0x0, 0x0, 0x60, 0x0, {0x2}}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002480), r6) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000024c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f0000002580)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x2c, r13, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x48001) readv(r12, &(0x7f0000002b00)=[{&(0x7f00000025c0)=""/63, 0x3f}, {&(0x7f0000002600)=""/172, 0xac}, {&(0x7f00000026c0)=""/252, 0xfc}, {&(0x7f00000027c0)=""/217, 0xd9}, {&(0x7f00000028c0)=""/194, 0xc2}, {&(0x7f00000029c0)=""/131, 0x83}, {&(0x7f0000002a80)=""/88, 0x58}], 0x7) 11m52.298653063s ago: executing program 34 (id=4284): syz_io_uring_setup(0x6d89, &(0x7f0000000000)={0x0, 0x1623, 0x2, 0x3, 0xcf}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x331000, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000140)=""/121, &(0x7f00000001c0)=""/82, &(0x7f0000000240)=""/46, 0x8000000}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @mcast1, 0x7}, 0x1c) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) ioctl$PPPIOCGDEBUG(r2, 0x80047441, &(0x7f0000000340)) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x280800, 0x180, 0x1}, 0x18) ioctl$INCFS_IOC_FILL_BLOCKS(r4, 0x80106720, &(0x7f0000001900)={0x7, &(0x7f0000001800)=[{0x2, 0x31, &(0x7f0000000400)="409ffff7daccaaf0cf5b3662cf814c5db7ca117672e866206f370e69fe72feee051abd085b01c3bf5f4fadacfb6d7ef7aa", 0x0, 0x1}, {0x9, 0x1000, &(0x7f0000000440)="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"}, {0x6, 0xd5, &(0x7f0000001440)="cf6b0788dfb9abd59ad496f1fa4f3eebeebd6ea83ea4c6a44f65157758b9d5cd54e7f06ff98fa39dac76578085d3e577b23ac4e53b60fc88f15c7159f379d89ec8b3153d574727437c68671648eb8a0183dfeac7b4daf58e2f5236902caab285c076021bd3ea0da715f4fe83d1934c2b686fce66dcf8fb2131a98c552cca35b7f0ee0e772f908089ec855ea9586cf388ceac4ac6a451355419e4ee7d70ebd401da850a536d5ff03c93b2abef11ab01f766ca36f7ff723ab2fd2a111d2982a4e2c639b25a535275e310fff90cb418aa32c50d1d60aa", 0x0, 0x1}, {0x1, 0xc4, &(0x7f0000001540)="3d7a6bef8dc6c18e6423ec7c3c365dab222dbc01e66a4f90338dfff32080da77d3bceb3edf1b748a23cfa772b8f09e2fb5e3f357c525c82506c3510dfef52d87d8557acb881118d6ab83f2b3858461ca663db9e9d9216d6a8847ac96aa22ee8b91142da13d1a30a87a53793cdeea1fe743fd85eb94e97950cc8144635a459209a0f8550aa0b7ca5b52ff68b6c6ecfdd43e909e6c1022c56b59ab0347eac3de20d14813aa5dc31dd7f69fd3930833d35b7d0935002dfd3918d0471ab4d3321dce77dccced", 0x1, 0x1}, {0x8001, 0x93, &(0x7f0000001640)="cf00fede1016b2f29fe710553f73b19c3f6280a47bd1bec0aa3e044b1ad568bfdc60dfdd576d0c26f0c8b9b9fdf1c48cb29c54667643f8156e7e71328d00a9d6db1ae64b1020b7efdd69afbec2fb56eeecdc38f8c542da901777643f7bd74904225994a8028257084c2dfb7177ca93c95cf6eec0ba05c0536b6e2400eeb0b3d8d0fbe98721bc7ad368678248f923d98842102e", 0x0, 0x1}, {0xf, 0x42, &(0x7f0000001700)="2a2848a8e672ffa0efd320c02adb73a00a6c3320c8edd1ad669ca470b62f231527ccbc9eb65cf663e12e4ae367a24b3f3f23b581aea91980cdd10507cf1d1150cf3d", 0x1}, {0x0, 0x5a, &(0x7f0000001780)="499d93bdfad1a96c6bfc3f9d7254a9be76b9f3c359b4cc5fbd22be9252d1912a3b7f22c006c4095160a55a28958f4bda32c1adcf226e95cba3c2ed1e85b94cd1e03cb970b66c0aee520ba97b300c3f3a771d7e20c2ebd022ca93", 0x0, 0x1}]}) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000001940)={0x6, 0x7fffffff, {0xffffffffffffffff}, {0x0}, 0x4, 0x1}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000001980)={{0x1, 0x1, 0x18, r2, {r5, 0x0}}, './file0\x00'}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000019c0)={0x2}) ioctl$VHOST_VDPA_GET_AS_NUM(r2, 0x8004af7a, &(0x7f0000001a00)) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000001a40)={'TPROXY\x00'}, &(0x7f0000001a80)=0x1e) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000001ac0)=@req3={0x0, 0x8, 0x101, 0xfffffffd, 0x1, 0x1, 0x9}, 0x1c) io_uring_enter(r2, 0xc35, 0x1b7c, 0x10, &(0x7f0000001b00)={[0x455352e]}, 0x8) r9 = syz_open_dev$vim2m(&(0x7f0000001b40), 0x0, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f0000001b80)=0x3, 0x0, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$fuse(&(0x7f0000001bc0), &(0x7f0000001c00)='./file0\x00', 0x8021, &(0x7f0000001c40)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x8000000000000001}}, {@max_read={'max_read', 0x3d, 0x1}}, {@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x1}}, {@blksize={'blksize', 0x3d, 0x1c00}}], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/vcs\x00'}}]}}, 0x0, 0x0, &(0x7f0000001d80)="f5b17214fc6282afbaa881") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001e40)={{r6, 0xffffffffffffffff}, &(0x7f0000001dc0), &(0x7f0000001e00)=r3}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000021c0)={r2, 0x58, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000002200)={{0x1, 0x1, 0x18, r9, {0x487}}, './file0/file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002300)={0x18, 0x2b, &(0x7f0000001e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@call={0x85, 0x0, 0x0, 0x1f}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_fd={0x18, 0xa, 0x1, 0x0, r6}, @call={0x85, 0x0, 0x0, 0x83}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @jmp={0x5, 0x1, 0x3, 0x7, 0x6, 0x18, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002000)='GPL\x00', 0x7700, 0xe9, &(0x7f0000002040)=""/233, 0x41000, 0x10, '\x00', r11, 0x0, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002240)={0x3, 0x9, 0x7fff, 0xfbc}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000002280)=[r2, r6, r4], &(0x7f00000022c0)=[{0x1, 0x3, 0xd, 0x3}, {0x3, 0x2, 0x6, 0x6}, {0x5, 0x1, 0x9, 0x8}], 0x10, 0xd}, 0x94) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f00000023c0)={0x0, r3}) syz_io_uring_submit(r0, r1, &(0x7f0000002400)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x2, r12, 0x0, 0x0, 0x0, 0x60, 0x0, {0x2}}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002480), r6) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000024c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f0000002580)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x2c, r13, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x48001) readv(r12, &(0x7f0000002b00)=[{&(0x7f00000025c0)=""/63, 0x3f}, {&(0x7f0000002600)=""/172, 0xac}, {&(0x7f00000026c0)=""/252, 0xfc}, {&(0x7f00000027c0)=""/217, 0xd9}, {&(0x7f00000028c0)=""/194, 0xc2}, {&(0x7f00000029c0)=""/131, 0x83}, {&(0x7f0000002a80)=""/88, 0x58}], 0x7) 10.636023926s ago: executing program 1 (id=7553): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000be7", @ANYRES32=r0, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 10.482987889s ago: executing program 1 (id=7556): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_open_dev$vim2m(&(0x7f0000000500), 0x80000000003, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000040)={0x1, @pix_mp={0xedd, 0x2, 0x34324142, 0x0, 0xc, [{0x1cd6, 0x37f6}, {0x10003, 0x2}, {0x8, 0x5580}, {0xa024, 0x1}, {0x5, 0x5}, {0xe2, 0x3}, {0x4, 0x6}, {0xd, 0x20000005}], 0x0, 0xf, 0x2, 0x1, 0x1}}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x1e, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}], 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) unshare(0x66000080) r4 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r6 = gettid() syz_clone3(&(0x7f00000002c0)={0xa000180, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100), {0x2}, &(0x7f0000000140)=""/121, 0x79, 0x0, &(0x7f0000000200)=[r6], 0x1}, 0x58) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r5, @ANYBLOB='\x00'/12, @ANYRES32=r6, @ANYBLOB="4394c28b6f97b9e5858848f6"], 0x28}}, 0xc800) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/187, 0xbb}], 0x1, 0xa3, 0x80a) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r10 = gettid() sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r9, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r10], 0x28}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000380)={'veth1_vlan\x00', @remote}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000880)=ANY=[@ANYBLOB="38010000", @ANYRES16=r7, @ANYBLOB="120a27bd7000ffdbdf25060000003c00018008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="14000200776732000000000000000000000000001400020076657468315f746f5f626f6e6400000060000180080003000000080001000000", @ANYRESOCT=r11, @ANYBLOB="42fe020076657468315f746f5f6873720000000014000200626f6e64300000000000000000000000140002007465616d5f736c6176655f300000000008000100", @ANYRES32=r5, @ANYBLOB="08000300000000002000018008000100b741f679dfb7483d9cc740afc5fb30a60aa5ab3b7eff5babb3fe266012052d89356c3ea1cb7a6635d6765d741d9d83534cc81f6506c7919732dcbbcaf38422109edb48902bd7329fdca3fcce3815a14f4801486c0189702f9085506bff705b6bfe84e63035125f548bf79b71dcb17add7e09d403a163", @ANYRES32=r9, @ANYBLOB="140002006c6f000000000000000000000000000064000180140002006e6574706369300000000000000000001400020077673200000000000000000000000000140002007369743000000000000000000000000008000300010000000800030001000000140002006970365f76746930000000000000000004000180"], 0x138}, 0x1, 0x0, 0x0, 0x8000}, 0x104) 8.201025976s ago: executing program 7 (id=7575): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async, rerun: 64) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/185, 0xb9}, {&(0x7f0000000700)=""/228, 0xe4}], 0x2}, 0x0) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = dup(r2) (async) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f0000000c00)=[{{&(0x7f00000003c0)=@un=@abs, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)=""/46}, {&(0x7f0000000480)=""/48}, {&(0x7f00000005c0)=""/26}], 0x0, &(0x7f0000000540)=""/102}, 0x100}, {{&(0x7f0000000640)=@l2={0x1f, 0x0, @none}, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000006c0)=""/153}, {&(0x7f0000000780)=""/255}, {&(0x7f0000000880)=""/81}, {&(0x7f0000000900)=""/116}, {&(0x7f00000009c0)=""/226}], 0x0, &(0x7f0000000b40)=""/168}, 0x1ff}], 0x400000000000024, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) r5 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780d206050086dd6018232500182c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa6202"], 0x0) (async) syz_emit_ethernet(0x50, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd60182325001a2c00fe8000002000000000000000000000bbfe800000000000aa2b00020100000000b9365394fc379af00659ab39e65121dd3e8c00000000000000006ad17fd02dc826ca52c9408300f9274543f066b1ba5468024a1d7096649a3f4fe904449d5b0122775120608746e9c622084a38f5eae075548863b184831f61a3b48493ee5320affe1582e600f74cfcce8cf49a742fbfdd4b26d350b8dcc6df56"], 0x0) (async) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r6) (async) ioprio_set$pid(0x2, 0x0, 0x4000) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) (async, rerun: 64) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) (async) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r7, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYRES64=r5, @ANYRES32=0x0], 0x2c2) (async, rerun: 32) write$UHID_INPUT(r3, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) (async, rerun: 32) r8 = socket(0x11, 0xa, 0x0) write$vga_arbiter(r3, &(0x7f0000000000)=@unlock_all, 0xb) sendmsg$can_bcm(r8, &(0x7f00000000c0)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0x0, 0x20040010}, 0x0) (async, rerun: 64) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) (rerun: 64) 7.823638744s ago: executing program 7 (id=7577): mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'team_slave_0\x00'}}) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 7.807502758s ago: executing program 7 (id=7578): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x801, 0xe4340000}, 0x14}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x73}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xe}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 7.737992418s ago: executing program 7 (id=7579): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x4e20, 0xfffffffc, @remote, 0x2}, 0x1c, 0x0}, 0x20008814) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = syz_io_uring_setup(0x239, &(0x7f0000001080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x13f, 0x1}}, 0x20) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000140)="e8881b", 0x3}], 0x1) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f0000000080)) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x6071, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x5, 0x5}]}}}}}}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100000b529708410e42486ed0010e03010902c86bc205587d466c12000100000000090400020021f7680019720aa6b0292a81daa0d12c63f31d77144b3af41c714bd320abb8f8d8de7bd6194410d8419f0d43ed8076570352688f82db52e7b2306f2eeb02482b614933ad5037f60c1576bf62aff49d71adea6da0069eac7feba9d0a168c3d8a4ae8325e22595e62a7aab0ae64dc80b0f330256eed339f994b779481403e0c1e4c7f512f15628a6cce534aee910a33f0d9947d036c876711143191de9b1add162100d132bf206b82c20aa19426af546c832d46c92e08999df74bfdc"], 0x0) 7.299255949s ago: executing program 1 (id=7580): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x5, 0x0, @remote}, 0x1c) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2018, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x8, {0x0, 0x0, 0x0, {0x0, 0x1, 0x0, 0x0, 0x0, 0x3fffffffffe, 0x5898ff4f, 0xa00, 0x200000, 0x6000, 0x0, r5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r3, &(0x7f0000006380)="c66dd220cbdeb68f27c1f98bf43fd861bcf841572658a3308737983b31a434673f1003eeeb6d9b934bcd19cf754f4882114d61e15354449f763f772e86c9e2252731f7a098faad2accca3e470845b32918bcf530f9474d3cd610d9028cb7b247d3a73d887719f70554d8976c10784c8073e521a80b5ebe7501d6c3b6b5cf9a498a1e97b8201ac756e5f35d71bdd4d196e73cae0cc34c7140cde8380de823e8c76662f0844f549818b5ef6c732b8f412b79273508b69f2e6a653709b4d9bded080b6c15ca5c5b8ff23309e05d460dfb40403f60a3e5a0e1d4e1aa59d53823a047427673267e79d40fdd6f12ef696fe22887d24087373f64987e48ba20e7f47d1f08871e0c22a02593156648fc106c4529d8cf17c71d473f4ad43992b1cdbf5cfaaf1ce401d5ad8b9c6bdc3c60a88a91c52f5aae74a5d25e0cd738fd80169a98b84d4d24a7e86c9d8e4c3e3ff1a9fc44a87558aeb7acbfec13a26a4b121b2cb9ae628c682aa4c44311c45a673bab25880665d6cdf589e5c5415794c4fd6b940e7a44df93a34a684183581c850fbe97ef8c1de852ea836e0db1a104b498d6dd8fdf65c606e772de2e9dfe46a418fac3c0bdd72916c951e3df04f2ae85839305be2a86aebcf4898b6e49c27df6033ad2b8651279ceb20c779716240d3d0fef3bb6c417a8c6f75398a91942d8ab11f21f5795767650a96e246c7244f8e4935e9c01349616a098ae810487d657fd095beee05a36812f39f4266f25f4508e80f19a4aec7116f1d8bc48bc2c1f0f96ff34b66a965d428852766b78f1e7eb0260bbb355cc0859af6988ff7efa0b3fede3d5f2f2147ffae4a5eb58a7585b596270334c360a1547787a95634e13d59bf53f51f48e75a6a3e48f8348f4cb495d9699dfdf8cc71668c5b9622578100f7163394cb3171fc8a6c1e7f88f08b8c3cf4b0cd9a1bc16bd1488ebe43199d97cdf4bbcde8a06a79c5af6ff2ebf1a04add74830cfac0b946514b18de249e934dd8a1a96fce085320fa857c853480170208533acd3d41c4384a932eeccd4ce7d09827efae4c0d19d00c5b48943c4d877017be59434dae6bef767fb9ffd073c2261b06c0f23a0c77a5bcb1f5738dceb6abee00bd7c649f6ebc64b4b8b948319a22ed4add48eedda8a2cd1bad6799e1d9ed778e5ce22d5fead0cd06806cb4b7b5661f9db6bcf9ddcdc9e49e0e6a8ec98fc42c660d5d75311fb9c9d06074611ebbdbea45672dd78760ed92d0e95c1d5ae234d674dc3ffaeef3d928aa4b93c0fe55fa886bd3f2371a5bb22c4dd6b8bc13250490cf279d4e56b646dec4eaa53951d55f602c1f4081d49316f6bcb35aad0453b44c7f266e99838683404859bc372d1df5f1512f35558b3706b32093b72a78a40c8a188852a0b5aca11a34ba23195cb598ca595f243c260392cd793b65dda856f81be1b54d873a0366407ac26687262d6bda693e058f598bde80e304c83dd0c2fd0e634ff15e1ca4e2918bfa8e3a626aee7b5e445aa7fae096595fe58032c993eb06ce49c1045b1f132f2c90d6e23b76076838ad7ed7a6a74245d7ad72b38bdc04e458d3908d1d272f23fe18f68ad746e5440cfbcc3b7ad477dccd6fb2db536df0e4d24480d2765e724ca06cbde7e01cd32e36681796a454c801adc1b25b501cc4aaae778f3783dad15d12e656b09bb3d8f37efc86cc7faea5e51913902faed79ae5973f4413e275f78e7e66099f9e41bd73a07445a780dde0b189308e3b83d1a3cf5aef2d3e11fcad930eb6c60ebb899b22cdbd539412b2371d28a4331394d8f29d8b16f94ffd91d4eb5c278e7f6b4024fcc7af9dfde1b3c915b06dae683760fad05d6638c6389fdd19a9b12956c11e9b9ea7d30e09b13d9f681e012f1e41746341a61b71ac6c333b29883ca2cd1aaa3c02e66c85de1e3b2b7e77b0dd1469ab9db5c17beb2d33862db20fd77de685a1e70ba55b0d9cf4b2d3d1196196b5317324e5f189605baa37493c9586b7e475865b4bb21b335e8b291b9dea17f6afc1cd84618b189567817511de821a866a00b62c62516b716cf55dcf7f5b7d7520306fe03f00cc61b7dc297886459d74bedb8ac1d05cc506db74d018c877da735481c318224fd06f349b59f69b0d2d017c817e5a1f934d263789d418eb69c772d923b01a6a4a6afbba4a6980fbf7cddd84f8e4392eaccb98cdd30488919ea6d492d32f9ca4233649117474f4116f6ca4cb762d524c0f92bbb40d3f430dbd50dba20adda8b4170a73c3b66257c412311a7bd3ea3ecca0da47a7a00ef0a464ee0a4b2402b61db833f3cfe1847b9630de47f331d575f6e3c6fb44a9021700c6d8055ea982a05a5ba6a91a41e7445fdba7ac09202fee733a5c216b3c3090991225b98178508d1985832f8e7dae58482ec0fa2215c935bd0ef9f03c0ed3caf97bf4de023605aa8535f1e88e841471bd8842084c6715a3fd3acd07ec9c43f635e5f868d82cdc6f9424ed978d39e72cc92535c2637164f15e9a67770389535ba46cbf786189562908872274ba126b313bd1c0780e9d0ca38956d1277b58f04eaa1f97ed8c6c83d9c05df0df8b43da930707a84662e480a33d1868edc9ff65368d51fda828ad29ecbd3b2cc0ddb0aad251b4736f872ba5f066617a9e9675ed7f80685544af44c677b9d39a1a353984ea4ccbf36d759b490f8dcd5621e573baaa2c03ef367f543ca5d36d1c9d33d4762bb0b1e02ec67d3511582d69b06a57d15f5260fab5ed8d9361948eabf88d9e776a18c5c4f2d42bb46373861b613db9a91ccff8fbd563ddb37f0738fa1723c23c85cac0f9eb53a41d115fe0339eed3167f59b2f2f0739cf9c0ba5769b18a213d5809bccadecee6e781811bf584c22a6557516d12bd58420f5c67c673fdf0888ab31edcee3198927b5b87a63f89f7a07d1da8cb946f0a87e7d3bb455c888f394d17694378446c9073e54368564dc546b6c930ae17afcc8360cb2e31d87ad8923f60033aa637a399707398ffa51645ab1d9963c29375c834746004ac16d24d8f006e9674e45da3d938de524857c57fd39b22678f39096309527ed22c41677a65a67dc0998a8babc9cb688a56628d09a732773d9019d92399415e93852a12d66ccbfa571837b7689c7cc50026ed643a89c8f1bdef6d01016e6e1c21bb779db52c2254f5dae40ff173943ba62ce343ec035d93d5c92c64884d654777cf6995dd0c485c7c132db383769ae1f35f1980654d2b47e92b1862f653eeb81ada4eed6c9d0fe9da3d7db5dfb4d66b2d576676beddc4394ade2acf55f9ec24aee7c4c77138e799f62deb19367ce226a66715da515479b176c9ca06c739566d279142ce2163b8835c840a3de6e2d275b5d5a948b26ec8faa6cf322c5038fc00fb0a27f0b76b5e305780c9145e99feadf571bf8d87dc93ea0f8ff3bc246b16d4e43256507abc7ccc92e113a037ab13855058ba1e0770b90f52e0740c157d68963b3d236f681454589385c6124bddf948c5aa2e147a3543c301dc6d82acb504f76239c890b7d3d76dbd7c26445ab6fe66f9f71d95f4f0d6c51533ce4b05353ef27178f6b6813366189ff4cc19cc5c9f7aca4d6b6f3b5b213e828cbf8b8b5cacb42ade1fa2594cc4ccd3457a45a5b19926f17b9061c9072fdce96afbd3f2bbecc6dfbdf9d9b3e1a621e65a7cdf0a97cb0223b220b39a88b7414ce91e5fb52f3c9c7e10199ffc8fad826d40a798ecaebbd8881c1605f986bb0af06f416280f63f3a3c28d399d13c21e6d79501cbbfcc9483a73a931e91358807fbebefd39b466cb9f251fa4fc7d5f4fd2d87d4604c9750593d3a801b963085ad7aaa91e023977742b728d292b046d0bd49f81717a686f10096e154681b85aeb81a26fa8f46bf3dfdf5dc7c7ca37aa3da37e53a105be5935640baff476453f53ffcf786894eac35d1933a5e97fb9b6d975f9fbe7914d09dc948d305005eb4aba3a9b8cdefb30dbb3300f46041db06567956ba4327280721addb17425a2b223e81bc41467cb413cebbe16818468eeb5b24b6cd79ec4787f693f3c301e5dd10747bea13bf042d6fde42d18c48fec0e3e43454799da1d5501130fc98917fed27d696ae85a39debdb67d5b3d70a82a2097095476e24211757626c91a29e917796766bc4016456c4acf0436b6c02055778ce7f34e605264f7d6d1321072c4ba341866ac6f78e9b99a30478eb7f09a17f4fb3e23184e878c2f60d2c18617185007841778c7c256750a287ec0bbdd20bd37ab50538e43a5929456d336fb46a04593765b2692ba15e7b71b97788970a7903e12088211098bd356132862a4d586508b4aac077d3acd4f77c67d9066b436d14b20d3e2870cb19cdad5581de2e08da761fc95755c43cf0dc2cff84e6a3a8fa2d0390fcfee285a133b37ac7b2fefd0d3665b1705784187e228579680be97982194329136fb72d8b61cdeaa88f3dfc835ae22167c0130529fe81043b0e1c3aebccb1f4aadc28cb484f850158504439d389d1e559ff424217dc031d422a8b7b51731db75dc541e16fed8fae14f58c1f9c8d0fb91a685245ba558c1aeb243aa728db51c3f3aa6d8f7a4a547b8d95018402283a59a45173e7696f02304954ebfb43c2215f180c8e47e433e5262e279fdb63405c81b0f128b7d6a095ff5f85690331d94d34923a3e8beef5cccbf7b208b2a0aa898f9a32b2f1bb55aca4eaaefcdf09acd871f4b88feb535be87dfdbb5ad45ff3c26a2765230011d90baa4b5d5baaac5519f9013c8fd497d57083403ee6eb0c4e23428cf3846bd34d69840d021196f9a9a4fc101016fe2d4fbf4ec23c11e9d737c5e6d2cc3da7e0981c00ea9df07ed88ab05b7821033b2d311f2fe0525176660d0a33b0eb23a57f5b1d41e2c1698ac7bfe5f59c27792f899fd39610052b705862e798a27084450edfccd180a13d8adf8072430e9305f41b0a67bd1784b6ba9450b1e872794e0b7b55b22a2f649f83270b98d0a0137694fec0d16ec2ebf37c72d9398d231a71e40c912428929a29a433dc0fdcb697f64e07540da92067b1b5a7735fb7fb8ac8da2591fa44b676bbaa32ef5e6cc11f1b2ab3b262d9bc4b2082e081ee50fe71def63cf6e2d588bb8d66a8daa8c8a30ca07d2956463e1affc76003e4bacc632cdeee50098fe80cd7485fefed6eab639d8c42a1357fefae5a5a779fad536474e3bdebf6aab699552e807ffd8a44030f439756748dee9ddf19a6cbf5f75307b03c5ef4185a31a41583fb4ca3699e06319371c5d932d6e5f4e1bf77c02c70564d2140f7510e183ba2fa7ead8a9b8cfb085a9d0fa7dbca7561bd9dc1e5c1a1da0322982ff29c0fa2cc33bea18646445cc59b44965a01570b7b739d730df8f1f2cfe3558e7102de13994d6745ef8f91965265fbe0d29c3f381e1eb9c63242962a4409ddb0a4946ef9ce5b0eda90f8365362681943247a0d87d9b7fbbdd26d4902be34068499b6e2ab2ea746634402e1065c8cb9c32a211d10fc2796f1a7045c59b9cbc4771dbf56a5c38303f93951194d06a1b8cce31dd4869a148ae90a797d09de168e47974ed9699eab3a6424781f481d03cf1046df28b454af02df72c0f56c693343a82f7f383afb3ac452200ff155444010f6c988de71e3fb6f079bc6ac2bfab6ff451242b7e3e70578b8206529816764206d47115cda77b3e356e54f825ec745017ea8c3dcb412523b754b951d19fc075ec66012cceff51da925af9079f547e840c3f2774239cce5fd6533f3ee8d194812de2d4499ef18c4bebfa8d7273307d7aa0ac09e6ebfd95ba99946a585a4bd4afef8bb0b52857e8415a32b42e0a9ccb0749599d7a43cec793b22c96b3de91534c905456b25a5972124b83c7d8f0520cd71c5544e49afab26cccacdb7e112f0af1acbcb2b68760c7538aa6c990814d7cf7bde5ddd618bfd55bfbdd968e53e28f94042fafa2796b5bf2d1be612c81dbafbf90b0728b4b06fe216aab91b8898780ab06cff75be5239c39ac836dbdb5482222e61ff5971ea492c5b5ef509720fc886f8a07a9232653d427d176574c99d65244f1618fdaab109f732e1e1295391a25f9b750c9761bbceb81d316d9f9dcd555afb762191b7e173f06a4d8f4d97ab88b9ae19f6c85c361b8b5cbe91a3493cae594063ed457f3be99772485b34d3308da4e751e58a14cf7c771d8e5be77f88c7567af095caae1eb83d259cea709ea5441047ce96f0e21faf89ed491bba5d0dcc6bc33a07237fbef2fe671447ce14e16a1cae4361938767ce65ecfe0c63e1261cce5fbf603a2537d21b50c9a3a3ed6a7cf112a0586a653b43f813912a226aa4722f7edaf8dda5553efb22721dc71924aa73bf232c2439b1d806d3beaf157442643c81ce2b551b82d63cbcd4195029e2f63aef127ed4df0bffd41665d86213512557ce90ee54fcd01078a6a19085bde6a0343595f540b1ff610bd7a5a2d695bdc5e508cbf544d15cf5920b3e405ef4e10e6651c5ffff039adde2f805143b78916188fec05cadac443c93447d23bb25b0a0cfc787754a20f7efcdee5798de939b758f238f15c23f2622b8ed682378017c8f251dda0261baa33c6262d42d6365e68e85d43a46d92aaf04acee203c09487755df49f07ea1129782b1be0feb6f011bb914266fe2cf5361c377fe33a491089f701ac61bcab2bfa3bbe8bf7b0b834dba1bf187ab78fca751b57f1bddfc670c80d83c34c3461d823d7762b45ff0accc3af21b38137276d4e4d7a5d0a075902865f17f084cfa94cc28f70ee7296e216401b172184df0e060dd61be91efcdbeb03b4a6699c88a16ebb18f3e938cb458a377e29a3f3cbdaaf121e278b691c02b6f0dc790510840b3970b1f905b421a1cb376043cc7511e70e94cc63941ed0f864b4118592878538e12e986b9abaaf2ed588ad5f0e5e0851ffc29ef21aed080eb6f35fa10052f27767d0ddf3fea5a08c14657d68a9c3e6cba422d93a6aff222c40eee9f3c9fcb03a310453b616a80c48646f7d196433736fedcfc2ff4fa1a43bf9f8fc0a0660cf9f79fd0d8e106591a2319cff5eb0a5be578d178e0e184a9eca92991ca63bf1e9c5b1c56dba3c836975a74d9eb9b763ce7c5dc753cde77fb2d048e3656a15f9aa7f9dea249c4a3dc0456b64533513e69861fcb9f4348d78acd5b8ce1f3c41271b8551ba4d5754fbb123862236bc94192a5306c29adb2b0b053cd7d4deaa1be6c61f75bca27b53765a7356dd34a48437d5e5b356d48db64749243fea9b1f44e4625fe7ce820dc9f1a6022d77198e6e917cd4f5e23622d5b3b2fafd4f9be0b85db21371f5d35c7c651a616a8351a02dbfa74f9d273a0eb7d2ab9fca254bd28509b3d6f5420108cabc42d9a5670779dfdfb78afe74cd87fdf8e3be937e6c6981eb88156f5cbc91e4b92f8d65a151ee3307cce381dc189c54a29d21c9fa9f512c50dbc9f1c0ddb43b6b10d5190b8169f9e06f7c60a2103c9c3fa3fe0d1cab8358cf4ddf95d5e26fbed636b2f1f474b7d10426afb5aa21948f7486e0df5275ffa6c091c46c3868703c4e30e1a15a8d27a708b6d5fa7d123f1524c221fb93b5f9f8d87b0286de38c6112a05d1f07706923b531e335db326ff756acf6cf9a5e5352953d112a842d7b2f05d296f644b01bca413f2686dbdea6b2cc6dd8115e22d832af742eb801ee61f6b90f93d227b694fe474385125801d6eb58867c15246faa6c0a1cae0b05f104fb2e97476c73a79185796e0c26bb1b59527aba4b79db6ec99f1650898b996e068329d17b94730cd6ab79a3d77d80e5ed78eecc7d680b5425231357f24c46fd01732052eb18737634915131c7ffcdb0b48a35d8761c402ff5b56aa1a9080b46836e4a888c86d7a260fb6cc2f3b9f68d52201531220bbfe0e7b2890a390acb33831fa1126b88dceb126a555181edbfa4680cadb08d38abe00c91980ce68ab58274ec28eaa697f8a4d7d6db744d8c9daac2035d40a5eb565e12c8be5c2bc1d725f713d45a03ac14ceaf91bb1c5dddcac87553b9d22e23d738742e3bf994412ab153f66ddea53a35c9ec19c555a49ae1aea112a70ddc10201258536ba93ae0dc7fb60d51ffbbe9e96eb8eeea6878e3784dcd686fc0db4516249cdfcb9f6d880fdcf8f86cdadd23ea7455b3b7e3a0e8affc9b61be59814f8e32175c869adaf7dbb5acb4c994e2269d2657011e8751c5c0e6e97e9eda4e8e6c309e842c8ea01c20de3c5f4f6372cc8cb7cdf2b0e3519155e4c662fc8572c36d9d3b7eb3ee19e985bfab9eb20e077c20dec4172e584357cc54f9cd49742e0b31d1fed87812f19efa9ae81ebebb021df0c280aa9790d2f1acb94b38f268ca7861b1da63cbb86daaeac3a5b067c86fc532a1db230a29578563f16dee5b4267f9d474c81c9ad762216452cb3a37c8ed44cbaab2e4b9a9583b134da3a64390fe5f76946879a1757d127e6e10b3b3042de48189350d844ede16134c770dba47cf56483cc14e2cfc93fc11f47cd33b06b720f531efdd1ff1254966b68fc46645ec3b45c2a60427e69ba1d710f25571522ba90622315f9f0cad33f8b1a1053a45aa07964892621ecc9256b7c4e21716e546c235fdb618f339b55c377a30b61a9add4e3b5657e3433a6feaff5b67ef34771ae6d04449b5228b6b99ce7237996b307613d14602d76f21a58a55cdc71a1f348ca18265634f094012bf4eae241df634d7424de578eb4c4199de382f2795c17eefa11ac2ad4625be7263373de4bbe189d42fa51953652d433323b9e6110f00c7cb44e4e7df1e6e1cc421c5cc5e78eac4009824d73b4bf0a0340ebd883acb90e928f6034d6a44edee021abc40726df358ef83429351f46aaf10b63b0a5f4c68bdf4e425f8ce7c6a8ad95dc4874836a56a298f586a602ad7b33350fabaacfda30b80210432dc6b59cb807d50782399624d624bbb5e759c09daec8ab3afbff204f62f94754e377cca96b00ba4842d52d8f12a5ce7d1dd81b760c1c5392f739d91f8bdc8c290090fc6e3221ee69abd2648b6c7a818e8a0d04ffd83464f7b26002e4d5614392848205fc0e766713e4c65f46ec2f9d221e98fdeaa5c329d8a0e7481690164fa1ad829ce9dd2eec2fe92231b33415c3f564161353ea7f823e3dc97c9e905f40d693082be719aff77b3b35a832ed3fc16e3bf57305fbabfbbadea1d33ece1f05ba482d3dcc391e0c709c02c335a6289a8deb035fd5b99edde61f0d936631e21251eb65c1dc23574a7a8f9ba8fd0b6c958ee146954cdab3daf90c17ffe92aef5390b4e19d32fef469e9e60ef8ea16af6b66dab7de1d6ddfeeb602cd69d8f32e4d5f06bfaebe7f000d62abc793ad34d77d1369c63785e93c2ff205769589011208ed6affc73dda9287bc8f4d9e27d33038b699431f56285f92fd9f02e78745fcdca4a4840dcfc307bf8f1806146d954ed5ccc8a66edf2179e2a5356624b3b30f8f78839ddc9940794acce40290e5eb73dbb52fe1c633e88d1492aedc69b351912a0890b63eda0d8756a5b7c47c740fcd73a0f419fa363fbf0cd3fcdd38f0fd055627932c998421f086ee0cbe0520b2f2fd6d38fce1575a2c90fef9f81aa23fc7c4c5625d6f46fbfd02ac31cd1620a92c43b7884e4a050e5ef5bb9b8f9825a159bb0370c828519ef71090e09ab43ff2bd2cc75563fb9073eadcfd869f0d9b6986e4320b1986ce3f19a3f5dce202f8c13757726e5d6a9fc9e2b0b357625362fb873709fb307ee51bc58494857fdd3811f6a8aee0086b0a62da4e327c698e5639e373567d5eefc76e0d6725272527cdbc01a2b40e7511ac986e32bb7e48558756dca3b944855fd9dfdbb2358a52e53769817cad50af13d8a5941c41f6bd121cb267acdc461c500855c6f6c0750367c62dd32fa41595a6070e728f1915bab951e5536ff8230a0608ac96c2e19a5c1415209a3774c091174f575bc937d544d495370294aaffc5e6be76364c7a212bbb4ec7f3bd38db75a159b68e2b3075ae6bb68ffa02e6bfb42553b505da20f133b2855572b7e6f8f3de240d9ab1ff32b3d9825f087774f4932024be806b78f059d4b3b40414df456aef405d1cffb2f3604834dae38932d830298df7045d404f005f5edf81061850808d4998f6ce80bc7569081765875d908d4b6a0edcb434317543a4f5954a5e0e5b7c4da75cb369e2810e2aebf950b973ad3380bca5d0de8311e59a6ed3f01d8f7c1b39060fddc7ac1febe659626ed7ad27dcee7b3d409b9f84e4f55ceb2e462f55627857f8c485c35c9abdc2fa87c4281365790ecdf1971f3a285ea0bb2038ae91d927729f4bf847bf0fc724b002cb029d2a57b89218bd4a763ab01902b7b48cb609cf3b9ad8fb568aef0ceff20c5def1a4faee11d33d304e2227b83f3ab06f0b9fa5502b1d9c6fe2a34bf9abb9a5b13928800149488cead47e48c754c75a061d5ea8a515f7f55611b0c048b88c9772ca4b1eb3d6fc931801990f1611e9b1171223527dceccfe8cfd72600a88a8486e088e21c30b997af1b60b55bc5443cecb18c2dcf54dbca3ac34f10ad2be9d755679519bb674b42904be579df62436bcf06de4cfd636d592840d674d11195edeb4dfe61370e9a9453378957fdecf2115ee008224fb8c97fcd051ddb1ed8d0419b950f2cd085bf1debaafb2a46cf65be863939cffde741797fdf64c17f3b447464be0e6bb90324c4c65b3cf66958a15d537a1675dffbc4e41f7a6c92ed27c5ef0dd0dcce6f96225b4e0ece510ce00f9611e395215e116026499dce3417cee3fbde0106b2a6fbd5937423124f6549c2206afc2ad1df5bedcc5e1371ed2b9f09f76576589450b09dd990811c59c3f848c1a4fccdfe686968903edffbc010eb73f55ac5a675fa3db70db12c826c8b7360617d8abeacefa6e2a8da62e4f304543cc9217fe1b0ec4fb044ca849802c4a140b91cc056d566c8670e4600941a54b2eb8643ff206c3401c0bd9838a025545227ae3e6bcb47fa3dcd1b40d8a0917f63744fb1ec2b72211c6cfda13248b2d0b4232e4fe7015cc42d4928f07ca9161640102f22236cca7ca3b81ffc81c4ff20532b5203e0d94771b8d0ec70e637135fdbb788fa8b4704e11d3c6083a45f51efd8560c0e63435516586aa82eaa998c140767d3ce35491e301c12f74583c61cd4d2ef1caa6fea3e353637cdeb3332d964155c9d32f826829a7174ab06c44e32063e46ce742b7027cffb8999302b602949c60496a0bf3c7cdf859d4ba51102674414867af614cffb88ac177dfbdb6131f7370dcb851002cec1742fb1561257716850c9ed3b075a6c023bcf05b5d580ac8e5d7ab7e5b1723212c681989e5f91958b635e0d076634584920c1b98d7f6ea0ddded6be9eb74de778b3c57c36b18e0c56c3a051014e09fac70ce6a7b0f042f5eeca8b8885e500bcb41f6fd974e5f6888859abdf3600706a3de9fce060c3069600c63106aff24210461c5d3423fa4e350041fd166902ad86bdba8cf965917f7e3ab019e1911d8013dad576465319c4e04b89b5ee1d07f54705718592d6aa453558294743daa8dba33159fb0e291829ac220562b007597e067e5f65841563673b69cc1d549f50e9efbdf256d797fe8c7d09596c167a45d", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r3) syz_open_dev$ttys(0xc, 0x2, 0x0) listen(r0, 0xfffffff8) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x6f, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004508006100684000000690f8ac14149cac1414aa206aff77", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="54100000907802d9976f1b9034c34d61c9ab95490249d4c2cdd156cecc2bdab3ce8d7c8331e2b3bfcc7ca16d6709c83dd8373c5d085156aaf4a314bc02f5804fb1"], 0x0) 7.156267592s ago: executing program 4 (id=7581): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r0, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 6.455314492s ago: executing program 4 (id=7583): socket$inet_smc(0x2b, 0x1, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x1, [{0x0, 0x4d88, 0x6, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x41ff7484, 0x0}, {0x3, 0x0, 0x100d5b6, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x104, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f00000000c0)={0xdf, 0x0, 0x8000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x10004, 0x5, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_USERDATA={0xe, 0xd, 0x1, 0x0, "fa0e874de32731db4cf6"}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x39}]}], {0x14}}, 0xb8}}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2c, 0x10, 0x21, 0x70bd29, 0x0, {0x3}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x13, 0x138, 0x0, 0x0, @binary="433e67fe9856ca44984d7c5449428e"}]}]}, 0x2c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0xffffffffffffffe4, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffeffff}}}}]}, 0x44}}, 0x20040084) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000300), 0x10) set_mempolicy(0x2, &(0x7f0000000380)=0x3, 0x5) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffdfdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r9 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r9, 0xc018480d, &(0x7f00000011c0)={0x3, 0x100, 0x0, 0x5, 0x590f, 0x2}) connect(r3, &(0x7f0000000040)=@ethernet={0x1, @broadcast}, 0x80) 6.102652335s ago: executing program 1 (id=7586): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x3d5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x92, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x2, 0x1, 0xf7, 0x90, 0xff, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, 'b'}, {0x5, 0x24, 0x0, 0x5a}, {0xd, 0x24, 0xf, 0x1, 0xff, 0xfff8, 0xfff7, 0x7}, {0x6, 0x24, 0x1a, 0x6, 0xc}, [@dmm={0x7, 0x24, 0x14, 0x5, 0x7}, @dmm={0x7, 0x24, 0x14, 0xcf81, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x8000}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0x3, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x10, 0x3, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x81, 0x0, 0x58}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x3, 0x8, 0x2, 0x8, 0x3}, 0x48, &(0x7f0000000380)={0x5, 0xf, 0x48, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x5, 0x0, 0x6, [0xff003f, 0xc0cf, 0x3f00, 0x3f00]}, @ssp_cap={0x20, 0x10, 0xa, 0x40, 0x5, 0x7, 0xf000, 0x1, [0xc0, 0x0, 0x30, 0xf, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x5, 0x2, 0x101}]}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc04}}, {0x42, &(0x7f00000004c0)=@string={0x42, 0x3, "facb3121d2ef4128fc5d80693d69f1b96c26fb9c67c0dc5e9229be0c3080e2e79831c9f8cc212563bbaa26f3118140be9ceee6a47aa23b01a229780212f78f10"}}, {0x1e, &(0x7f0000000200)=@string={0x1e, 0x3, "7664b375c6b9bacc7bb7b0d50d72d9d933dfa023a02efe260f94964b"}}]}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) socket(0x10, 0x3, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 4.708409974s ago: executing program 6 (id=7593): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r0, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 4.59155176s ago: executing program 7 (id=7594): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaede, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x4, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) recvmmsg$unix(r8, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 4.51703621s ago: executing program 6 (id=7595): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) (async) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r3, 0x8000000) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000bdc000/0x3000)=nil) 4.391451813s ago: executing program 1 (id=7597): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) 4.275399575s ago: executing program 6 (id=7598): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @empty}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x44}, 0x1, 0xd}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x20202, 0xa4) sendfile(r2, r2, 0x0, 0x68) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='1', &(0x7f0000000200)='PCI:', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='1', &(0x7f0000000200)='PCI:', 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) (async) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="746172676574205043493a303a383a31662e3100811faee540d35c1db7d4d634951b838b8122b49435fbd1401a17db03aabcc23ea4cc149681153151ff9b9e2678dcf5fd3a443da152"], 0x14) (async) write$vga_arbiter(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="746172676574205043493a303a383a31662e3100811faee540d35c1db7d4d634951b838b8122b49435fbd1401a17db03aabcc23ea4cc149681153151ff9b9e2678dcf5fd3a443da152"], 0x14) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffff803) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000029c0)={0x20, 0x3e, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0xc, 0x11a, 0x0, 0x1, [@nested={0x8, 0xa, 0x0, 0x1, [@generic="ef0771c3"]}]}]}, 0x20}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x92, 0xea, 0x8, 0x545, 0x800c, 0x30a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x79, 0xe6, 0x1}}]}}]}}, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x92, 0xea, 0x8, 0x545, 0x800c, 0x30a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x79, 0xe6, 0x1}}]}}]}}, 0x0) readv(r3, &(0x7f00000013c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000001440)=""/202, 0xca}, {&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000001540)=""/83, 0x53}], 0x4) faccessat2(0xffffffffffffffff, &(0x7f0000001400)='\x00', 0x0, 0x1100) (async) faccessat2(0xffffffffffffffff, &(0x7f0000001400)='\x00', 0x0, 0x1100) clock_gettime(0x0, &(0x7f0000000300)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)) 4.149785112s ago: executing program 1 (id=7599): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) r3 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x100000000, 0x8, 0x0, 0x3}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x3000d041) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r8, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xfe, 0x0, 0x7ffffffe}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xd, &(0x7f00000002c0)={0xfffffffffffffcb7, 0x0}) r10 = fsmount(r9, 0x0, 0x0) fchdir(r10) 3.432883008s ago: executing program 5 (id=7603): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$kcm(0x11, 0x3, 0x0) r2 = fsmount(0xffffffffffffffff, 0x1, 0x9364e10d1ef1b40d) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)=@multiplanar_mmap={0x60aa, 0x0, 0x4, 0x1010, 0xd94, {0x77359400}, {0x4, 0x1, 0x1, 0x0, 0x7, 0x5, "d74ad5b2"}, 0x10, 0x1, {&(0x7f0000000000)=[{0x6, 0xb, {0x8}, 0xa}, {0x3, 0x6, {0xffffffffffff0000}, 0x7}]}, 0xc1, 0x0, r1}) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x3, 0xffffffffffffffff, 0x3}) io_uring_setup(0x117b, &(0x7f0000000140)={0x0, 0xb7d1, 0x200, 0x3, 0xb5, 0x0, r2}) 3.263501061s ago: executing program 5 (id=7604): mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14544d0022005bb40000000000006d98297a0000"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x44000) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x0, 0xa, 0x8002, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/186, 0xba) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x2000, @empty}, 0x2}}, 0x26) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd70000400000005000000080c00a80b0000060001000b00000008000b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x55) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x48e01) r6 = syz_io_uring_setup(0x69e2, &(0x7f0000000080)={0x0, 0x0, 0x2000, 0x3, 0x178}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)="8df726f6466ae5eb3098fea3376f7b8644126747cb39ecdb9209fb5823ddad01338a2a28a8d11229c8d306d167a92f2dee459030928193239fc62783890c42449d9e2cf6109ae707c4f0071d06786872a608865757675a2814", 0x59}], 0x1}) io_uring_enter(r6, 0x4d10, 0x2, 0x2, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100)) r9 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r9, 0x80045017, 0x0) r10 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DRAIN(r10, 0x4144, 0x0) 3.119841342s ago: executing program 6 (id=7605): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r0, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 2.852550407s ago: executing program 6 (id=7606): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x40800) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x400040, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000180)="62c19912ac44fafadc287f2426a7cde4dfd941ceffda4dcb20eceb988b33e5b5de104e025854895d8c0748698652ddb2c7736e732b9f0aa5d3911d9df0c779b1fa6685f26e19a7f134d6e94fc6fe99805ab49d0994b1775be2ad0968a32dabd591ef2c476ac3c2cf50263c5c28b4133c03e3977e42a12352cd66e2cb2a08949282d421680dadf907c37080b92a710c3b19d8a271e430d5abd1ae518721cd52", 0x9f) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc1004114, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b700000000c300ffc3000000000000009500000000000000a9171809f8dcf159569d5475991f7de1a0d0c119cfcf6b98741c23fb7f8d3002ec85db75af955427e91496087a51a0a78f269a9e216a0d0177c4fe3552396a180330807a5b6e8c79aa92038c78d1f16c1323f0e0c8d45c641a21757847cb22230e4321cc3581e40c62c4defee8cffe359cfeef7f58fffdb48647d28ae810f6d22d20271e9e88e94aa6982bf48356652b08e2fbd404e41e0058aae0478fbe542b648421d1b4486a542a7d478fbe6b5e000000293853f9c68e235184b7ad5b6c4fe70ec8320500db0db7fda3da6171a05509ffecef2cb9802d4f36c9a1ce46d3b355fec188ccfc2f0fc89e164561fb06ee9a0153981a47b5de9edd3536d5534f9a699f73b2c9341d2d05043748ce1f4577ed76cdf5b3c697089daa4abda69a8c0c992404610a6be9e103c972459065dec0488e85a6a0418fc87dd8019ef7bb4ef4fa6ee08d81797570578f2e8198e687012f25a69a90e7515e35f8abbddfa96c3f0485f01f0e9e144a2bd31c1b594c50de7c9efd826f1e19b7bd89ca4052b1985287bd13957a48467e0eeddf564d175bf4340885b63976df609806c3b2a3667539dfd66a740000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='cpuset\x00') fchdir(r4) open(&(0x7f0000000000)='./bus\x00', 0x4427e, 0x9a) close(r0) socket$netlink(0x10, 0x3, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) 2.610380454s ago: executing program 7 (id=7607): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000ac0)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140e90003600e41b0000900ac00060011000000a4000500000000000000035c3b61c1d6ddb2c124c2110e00367f6f94007174cf6efb8000a007a290eb49e2f11d457fbace2ee5a7cef4094200001b14d6d930dfe1d9d322fe7c4a50b5b9bd6ee6f61e59eb4edbb57a00e97a6f6e7b7e2720637a1e7892811eb64252f19e00360db798262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5ad42ce81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b", 0xd8}], 0x1}, 0x0) syz_usb_connect(0x3, 0x3f, &(0x7f0000000200)=ANY=[], 0x0) 2.395487968s ago: executing program 4 (id=7608): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x4, 0xa13ca8e5839881a8, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = syz_open_dev$media(&(0x7f0000000440), 0x5, 0x88000) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000480)=0xffffffffffffffff) close(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x3) getdents(r4, &(0x7f0000000080)=""/43, 0x2b) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x1b, 0x5, 0x640, 0x0, 0x428, 0xffffffff, 0x2e0, 0x1c8, 0x570, 0x570, 0xffffffff, 0x570, 0x570, 0x5, &(0x7f0000000100), {[{{@uncond, 0x0, 0x180, 0x1c8, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x4, 0x0, [0x4, 0xb, 0x7ff, 0xa, 0xfffd, 0xffff, 0x38, 0xe4ae, 0x0, 0x1, 0x1, 0xf, 0x0, 0xe, 0x1, 0x5], 0x1}}, @common=@srh1={{0x90}, {0x33, 0x8, 0x1, 0x44, 0xf, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xff, 0xff000000, 0xff000000], [0xffffffff, 0x0, 0xff, 0xff], [0xff000000, 0xff, 0xffffff00], 0x40, 0x201}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x3, @ipv4=@rand_addr=0x64010100, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @port=0x4e20, @gre_key=0xd}}}, {{@ipv6={@rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xff, 0xffffffff, 0xff], [0xffffff00, 0xffffffff, 0xff, 0xff000000], 'rose0\x00', 'veth1_vlan\x00', {0xff}, {0xff}, 0x3c, 0x9, 0x4, 0x62}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}, {0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x14, @ipv6=@mcast1, @ipv4=@multicast1, @port=0x4e22, @port=0x4e20}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, [0xff, 0xffffffff, 0xffffffff, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'vcan0\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x6, 0xff, 0x4, 0x8}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@mh={{0x28}, {"1caf", 0x1}}, @common=@inet=@udp={{0x30}, {[0x4e23, 0x4e21], [0x4e20, 0x4e21], 0x2}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x10, @ipv4=@private=0xa010101, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x4, @gre_key=0x4}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0xfffffffb], 0x0, 0x13}}, @common=@icmp6={{0x28}, {0xc, "ac9d"}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}, @ipv6=@mcast1, @gre_key, @port=0x4e23}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) getdents(r4, 0x0, 0xbb) 1.649760515s ago: executing program 4 (id=7609): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000020000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800b0001007470726f7879000034000280080003400000000d080001400000000a0800014000000024080003400000000e0800024000000004080003400000000c0900010073797a30"], 0x118}}, 0x0) 1.548930762s ago: executing program 5 (id=7610): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, r1, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000280)={0x18, r1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r1, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000340)={0x18, r1, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000003c0)={0x18, r1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r2, r1, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000500)={0x18, r2, 0x3, 0x1c}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000540)={0x8, r2}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000580)={0x18, r1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r1}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000640)={0x20, r1, 0x0, 0x0, &(0x7f0000000680)}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r1, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r4, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x36, 0x4, 0x0, 0x0, 0x69, &(0x7f0000000d40)="4c4aa2e37d4dfb104a31f91d485d305e97dffd81afa8f82d8ef3a2774c0109cda05a6302ce7e05314b3c8f4d6cc0173a9a3fef509c3729f28b1282e172a684f2d869dd28b2e8f58e45ca9f22c88c1b2c1160914d5bb41f910134f093140c8ffe0eeb3203cb36bd85da", 0x1}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000900)={0x18, r1, 0x1000, 0x1004000}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000940)={0x8, r3}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, 0x0, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x8, r5, 0x0, 0x0, 0x10, &(0x7f0000000b40)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL'}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r5, 0x0, r6}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c00)={0x18, r1}) close(r5) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c40)={0x18, r1}) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f0000000c80)={0x48, 0x9, 0x0, 0x0, 0x10}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000d00)={0x8, r1}) close(r0) 1.327500259s ago: executing program 4 (id=7611): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x0, 0x0, 0x0, @SEQ_NOTEON=@special}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = syz_io_uring_setup(0x16eb, &(0x7f0000002100)={0x0, 0x213f, 0x80, 0x0, 0x351}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000b00)={0x409, "8facd291119ca94c633775c1ae03a5fa07558139ede600"}) ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f0000000080)=0xfffffffc) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002382, 0x0) pwritev2(r5, &(0x7f0000001980)=[{&(0x7f0000000140)="b4e846942b6861f09388691daa7b703019683d230d203d54b8659b613a681196429f74b32d358168004810703d9160a2dd71ea96a6060db27dbfa4dce6459f3dbb8ce5d701b53fac1479ccc2f48cd9c80d3be9d0b2e3dee9b2f168a07f5e48fae9af3036aa50afbf0ea0dcc683515a55342917b3071b1bc2cffe971916dbc265730e0700d6f97b338cbd9f05f1ae6faf5e7ce9f92865e25938e7795ac78841f4e2589e23576547d00801b96b1ba3e0e56f7d309e8903cf", 0x34}], 0x100000000000034b, 0xc0b6, 0x102, 0xd) close(r4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0xffffffff}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000300)={'vxcan0\x00'}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r7, 0x0, 0x31, 0x0, &(0x7f00000001c0)) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000046000000d38a2997d02365313b227ed2e13b2ea082c59f62cd74a30630f87e59f6aced111773992fedfbfc7e293f84095eb4eb8faeb349947cad71df6349c96865dded977ce2146ae88f"], &(0x7f0000000200)=0x6a) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x3f, 0x0, 0x0) 1.322937537s ago: executing program 5 (id=7612): openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0x8, 0x5, 0x1, 0x1, 0xa, 0x4, 0x7f, 0x0, 0x2, 0x3, 0x3, 0xfb, 0xb1, 0xf9, 0xf}}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r3 = inotify_init() chdir(&(0x7f0000000340)='./file2\x00') mkdir(&(0x7f00000002c0)='./file2\x00', 0x0) inotify_add_watch(r3, &(0x7f00000000c0)='.\x00', 0x5000009) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140), 0x106, 0x9}}, 0x20) r5 = memfd_create(&(0x7f0000000840)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06\xfd\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842.\x17c`\x1e\x88\xecif\xee]\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLY\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10d\x89J\xb3zz\x83\x81\x0f\xbd\xdf\xff9**\xb7\xfa\xa9h;<\xe8\x85\v\x9e\x02\x03\xad\xa4\x11R\x14\xbc\xc8\xb5\x89\xffx\x98%O\xf8n~1G\x89\x96\x1d\xecz\xe8\x04\x86G%\xa0\xd5[\xda\xc9', 0x4) fallocate(r5, 0x0, 0x0, 0x100000000) r6 = syz_open_dev$dri(&(0x7f0000000580), 0x10000000007fc, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000180)={0x9, 0x10, 0xffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r9, 0x0, 0x0, 0x5, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000080)={r10}) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r11, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x154, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000081004e0086dd60e66bf7011a21fffe880000000000000000000000000101fc0200000000000000000000000000012f0c010700000000fc00000000000000000000000000000100000000000000000000fffffffffffffe80000000000000000000000000000efc020000000000000000000000000000ff010000000000000000000000000001fc0000000000000000000000000000000800007f000000003200a630660000004e204e220431907830b6405d0e4f207020c54c48a46e6bc62e449ba053bfa9163772f1deafc6950d0c852c729af704512f28aedcfdf2dd0f046bbe00da9144afd095b6cbe9297872cc50febf82514823e330f6914d1ec436925d8e1db8baeb03c48625e9dbcc88f259424ea584185801ec5e7551406830a0b00a6cad0d2af2d2cba0ea4a9292de173a929c6924196c4ea972067f7d"], 0x0) 1.140499385s ago: executing program 6 (id=7613): syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r2 = syz_io_uring_setup(0x10e, &(0x7f0000000500)={0x0, 0x519, 0x80, 0x0, 0x1bc}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) write$UHID_INPUT(r1, &(0x7f0000003ec0)={0x8, {"ed322014782e53ce7bc5879e574c9f0796ca445c4367ea2999252c2033aa82f71826b095a54e0502a60474936896ac1600f058043b194f231bc0236665ae658a5d181ada12a26a3e5a700b897f488b6f555d4ec2f61c3044aadf80258904987e578a939e485562c68fee78a9d69aad1943cdd7a5d8ebfeddd99370901acdada6f39608e74dca6780b7bdc88716469f96d18536d6cb98337e74de5d8a01bc0fc603c556adc681714e6ad1b618ed3a6834945329bb1df369de7303372061da2699391f158834acb0eb1f5d8cddf7577d19534b125fdd88a711d5d69bcf3b0e442a957df987363f29cbbe3f1c9d9742c728fe5c6bbc8cabd303a43e16cc234eba6c3707005e897aff35731fb75bcda79d512e36e2cb6ce1c9dc71bd301030476156ca42b05fc1efd4f3487598f085f766d5aa86d29550c744876a3bbd6b5e99ec102180f7e69eb681d7053a3b89ec5ffa279d4e556c5e37803a5d18fd2d0428538ffd82fe0aa8813ec7a08c86edde566e82d32f5bd3ae438304dfb898fdfd4ad9401e30cb5c2dd28fe05f9bc5030bcd8ac5cab709d0266cd0fc2d55e11750365a46d0a7c91b1faff486aea1a3b38e3015e6bffa08dd6285fc388e7ec42885138566df70289ffeb31e03b374218c6eb99f566febcfd055246edb50220e7025db8ee5723552bf09b99e0ab6fd986c2e94c752725dca83a9c55e9f9cc541ec4c2b8ec78d942b599b2cbaf3b0c1a1c9337fab8cec37d9b7c858b2f3570a41179819d0853fe9625a18759ba2452ab87c8ab82310dca028618a5a8611af0bb652e23fa1fe39e4b2add76d300ed8848bf2f6f32a33a486b1224d3d9b12ec0d7d4ed99c18e859bd63cd9ab106fc00e5b75479a42fea5a41df427193aad7edcdadba97604d86a983c50022b3452908544b0093aa61d931773507767df6aaa083022ab17057e8dee4911c7290aa2b6c39df605fdca6b0a41e6ac0374ff49f652ec72cb727ae6c7052985132c54b8b2606289bc2322dc833b715018bfc90f89624053b5a1b6093ed77d21d9abca4259819a925b7c4725f6ba90c1d583c3712e8138799293d5bca17c90b91051b13c97053dd2f27b45f221bb74f484c050a2df7e8e102a35a19e4ab01bf0d637844d251e3e7386f163323d152493fe2bf877078e0faf38bcfe2b98dd6275ea0b4254551cca94d94a968a05ba5a03f58aa71d44dee50ae41b160623ba5e53a9c4c720f31a3694af676ed461e3c89cfaf638d78b930f5e79cdafbf92c0ba1a0314586f34c85bd33b1fd35f80c7c1815c8663bb065c5c0aa9980ba825a285dd4bdf854fbe4dc0cee89ac97f5363350ef53f2cb08436966e489b36ca333a32912427517952cec1ba68225aa819bcc264694b6c92b43bf0425e59b724cf9ff1343d41addf0935c271009e5e12a4af647f8896ab9d27a7930fa5b120b420735c42bcd4dc2e6b48cc616ca3e231ac51fa66e160153a247347b6243ac1a3f9343564efb6a09bea219754fbc43b088d07bd11432d15494f55f540d14fdfca559231252f981ca3d6e114d2888522255175859d124ff53c20a93b9f5792271f53586fe3c6b139e2295eeb7842eec3d4c99145cae934f40c91972bb0263c6fc2d308096a1454a06d3a272ad80a0c0ebd799546c2cfab85736ff03d8a07253fc6fdcbf29f083f8751334f0b7b69ec4b45f090b4bab11590a4109622ae68ba294f1b39901eba15aeecbedfbbde088b89dc6e512e59ba6ed4c0462d9a6b206d0ac540560cd48fadae0d2808fc098d04675a4c32e068ac0cac57d739586d98161cdbf0fdc12b9893495250c5ada8fd602c2b06171f5fc7bc1ec28147bb87e3e79aa946d5d71d933628c7aa96fcf3e9571744ef6a945e24b8c62a0e2a854cf6a1cd79dffa2986cd1d7f7ecad9e840cd2865d674f65416b8e3193b350f5aa7665e31d391e23e95fec37c8c315e8c3e1a9d8458cac84cf4b417641960a77f15bde47d1e94e5822c027d82291ad01ab2a1997e9cd7f79c07961ccbb7fb49c66384f827978aec1b30de020fda903a8516c4adaf357147cfe829bf4cdc301859ff868fe26ef05ef46e8f783683ce473ac205c78e8b32e3c69b14f2fd2a8fce2e35abb83b2cad187b217e02de0998a200c58b03cc9b8d01e7696af358a459740395a198bc9cfcc2103c38215c5aa5a7f841086195604f360cc66ac543cd98f733e634342a6f5538a843871935719152f213ba3e8fb466193a40590fc8dd039ae95b5d908bd6e4d0aec19fc287cf6fc0ab95eb54b472293479b21d68aaa7266de99e01eddc9649d13910eb85117473f170c75b589fde259c591ff6040da10f8914b068dc418d8d003d3cab64a35e3af7fc6ad9e8ecfa164206c54927b6d17f1020ebf28153c42f192cbbafb2b0a299002c5ee8b71d791d10892d70c34e3083cbc9eca8fbcd028dd13b86995391663b2b809cde5a54bbf03629dda37384d81aea07610e659a61834c5deaffc5502751ba963831aa65b4c1f3db3adcf3863e09d62c07fabadaca578fa0ef98e2448bf364ff7d71ecdebd2db17cc141d8d56cf0c85660fb21b0a099ef54b6dc09b1f29d44d53c71be1098c0838252a25be98b9f3bbe2280c4f3d01a72fdc9fdf70ce0d5ff94666fb4fac809c5494ade4c2a6ef8b82e43abf830b57ffa60124556cb0b6cc406e70e3e18d2bd593100cd0a57a2bc3f8954aee601d6b40ca9ec461edba8380c8cfe07702130f8216e51e5719ea178c034f30ca762ccf44fd8c3e2b8a681bb6760ee045857d8ca833fd5aeb8ede5a1f3b782ad1a8abf6b4ba677f0fd5f8f9f0ff9d48a3d4497dadad5efae0d6cf20daa313e815b68f99182622c5b259cafa8259cb8fa7d0272692f43f3f7cb7d4b71281e2b205941e090dd34b94cecde26689eecf0b599e04c122767ca9ee5ce84944d6485fd645bcf0c221ffc49885c93b42b9a5c3889bce394608a69a9d93441b0cb7a70e4bceabda13bb500657065822da00149365d5080d1f1dc58bd46ab5664e99535ff1c51f78a29f1817c2aa6c006f10926a531687feb7cb0cad7891463f290ba3b1b389d7e1b55acb829f27be8f5be5333833eaa67fffe4cf2fc1efbef331157da9e8347061196f2fe246d30fe7224561047c1198c017df1e63c8d5fccef94f572dbd0fe91a9f3941b6ac02d61d712bb02db3cf8b04bb46bac8bfe9e6f08a3b062b0dbbad19808077154515ba7fa0a051b277e457f4ba857ab5401f71bbfd9019f3a4e41318b85dae3a6b86e164b9d7706d24dd25f011a0ab57c9b1d51e2327b95ec72ac7e2d4dbe012e305bf9a024ea42d052105c05260fc37fde50678dcb8ca8c1c2eb302fe25b7a3f09f085fc56f3bc1b4a61acb18c7691f3fbbe6f5859b7fbf40117b80082e1754b01d2aecb54671722ddc98fb906eb435a419797985d52045855e1f25f30239cd4998bb1a8c7dd3bf92bc15df19db84f04038e1b14b3e0e408870eb4eaedc83af9f90fd1eed787c79f994b50db5ae1c14a4ecc39b69067f218787689866180374cf788bc90e67c03a0f4b3abfadb046125c262e9a1607769f8dd13bcbcf5a0a1cb5796c66b95a1c7d2e20ca2f30669ecf2e2f2d4682efd11b28a3b49bf146c3a63fa93b27320c705f782270bb4bb6b89ac84ae101a031014116d0d3d9ab791fba2dc1aac51ec1705c3210a7748f33d5c0e9b3269a3e1537b9e395bb1de67525ae91c7e089d2a748725d435445f73d64335ac4561ae1a8224055d3b0289e635b37ed21226fe455a6d95d45d29df785d805b099676fc2fda547b7eacd5a1d90334cba6e55bc322b98a8e05397662d9a9dd6608db4c7d2338b1e8e3e97299b69e2dcf6995abbb15fd17316917e0a6c7368581a55f74cb740d76d3e180d57adcdc5dfbe11ed32abfc70d3370f85206373c67c0615b8b5d5b21973c4e62df0197932e63a1bb58a7f4940a98934503ab09f89cc0c746d9e7c360405b29f81e49f6049e5a33d174f8be4f34d2dc164cb7a10a98c7b3b773477893a2e6e623c10f48d6d649d9f68522c515fb511a2d48e1f6641dea413b2350125ed7d17e02a27f407481ad5a332c63b8fc7ae9d3a8975a2612a66ce0283dd19eb9aec57705b0da3a577d0b93c290ff15116461e7bc4c2c84abb25e8c24045979db36e032527a778d797bb0a703369be662bab68bcaa1fba19c83031c0e63174fdb7b4d79456958be53d8d7669ed7a370df540c5a809aff004892197dd8fe056311e12849112863983c818764441ad9229b2054ad6139ec661026af9378a7208cc42f531573479239d410f14c2304432a871ab30dac646cc9e69731e1bcc00c88d8ac9197583ff16344e285d09925a16f8b0fd9a67ad3792bc74eed266d981550b067bd49659cae37e8579050705859c37c4497aa922eac03aa0c98bcb397e5aa2f0ed874c6da3e82a82f75711796b8f1ea31b9de2105a8e93d6764a02eab5b50cabf05252d67bbc66076a0f0929b5e98a4a130ec82ca7c35c3f401a9a3dc941f3932d16f1546f3be705e9e693885f0707f9e67eaa99b7da4e97806f300a717ff5200e4024da9194dfc759f7114ab8d8bd6f15f82bda4dd3f0189852cd83cf22594e4a1476d1a8134c3b7643b94d7335fd0a7c57572e0a0b118978b1ddb404ab38706aef1731302ff9aebcd84ff3bd9ea1742249c8bd6213c074a29dc88a0377bec700e9c70361b0ae7a600c79d77e5f9a00a05a9780ef737e8d697d55564a9bee65ef16a8bf5a04589c32ffbf99857dc6de3d8a59b6bd3eaafa8b8fbdbdda38b5ab8930a7993c63f221dae44156b8c89a4c7a22d8861e4372f78f6bc5aff6a2942355bb1fc7afbad7797ab46152769aa959d8b2b61d518c65f283a6863ea13f23b9b9754bd8203530c1dcdf82ed6a1aa1a9a4cfeb7f74d57cc5a9fc99c98a84f48511c6a9d28ebf23686d24a1f6450147a4bd49ca9a7cf3bf45965b7bef63a473a9c78553387ef24ac0d2d47bdd752139a06cc5d83899f2cf71243983ffe410e96b0da17ffea7e1a3cd94e8e547726ad6e3d9269a36eb49f72adf7dbe8068ba56564bb79f5e4847504eea0b8b43c1116cff8ca8f377f3653ad0113d9b592eb07ead85316d1eb9733b9703aebf02e8734df3afc62a4685bc07c2956a8a32a151c0bc0f94bfd3d95a80ba0f4dbf02ef82aa61dc63f6ee65dacd653ff6b1411f46526366f0a5d79d52919a5598fe20c5ee5391bdbd68565a6c2ec54be08de2a882a0242d6f0b8101cf11def78aab0cdbd8046d33629836995bd6fa4ca81800470d0b8f31f13d8f689f58731dba760458a8271023f4d7036021969ab2700f56ac51ac38f7101f4556e3fa29559f8530d8eeee86b88fb2fbfcdb328bdb6c12451f68b466b75e1a477481f7b858b8c1e306ec0acfeab83a37d9f578233cc4f356c7678ae423fd012ccbca115022f1c77759252a6b4e7792ec31385fe8a0b88e5a651a5fb713037a9c8b40a1b114cb8a0e8f2bbafa05dd607729cbfcb349e062c3ad20e4b8e2c6f75b757f6ac49ae55d47d042c5e305d85121e69acf2258d8d7c379ae49aa4ba366579f14542d72b8cd30a1b946f2befe70954b1cdffb18aaee48bbb35442a8667cc35bb20861c50b7912606e60ddaf8726c9c0abca9d6eb547854590848d9ddbfcd4998c7cb0de8efed1c8e25986b109785bd2da97e7dfe36a6ca6edcc7dcc42bb87be379b104e14c286f055ab85eaae2d71d2bcd57dcfdbde266ffca7a8fc0468d3312d9c0f6a5e5a7c60c0125935a3de8f1df047a1b4f1814b67fa721c96938ac8f6", 0x1000}}, 0x1006) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r0, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) shutdown(r5, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f0000000140)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x7, 0xff7e, 0x40, 0xaac, 0x5, 0x5, 0x0, 0x400000000000}, &(0x7f0000000180)={0x9, 0xfad3, 0xe8d, 0x1, 0x5, 0x3, 0xfffe00000000000, 0x7fff}, &(0x7f0000000240)={0x7d, 0xb110200000000000, 0x80, 0x0, 0x9, 0x1, 0xfffffffffffffe01}, &(0x7f0000000380)={0x77359400}, &(0x7f0000000440)={&(0x7f0000000400)={[0x5]}, 0x8}) ioctl$TCSETAW(r8, 0x5407, 0x0) ioctl$TIOCMSET(r8, 0x5418, 0x0) openat$ttyS3(0xffffff9c, 0x0, 0x20040, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r7, {0xdaf}}, './file0\x00'}) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) fsetxattr$trusted_overlay_upper(r7, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00fb1601e1383bd1314b19da0a000000000000000000"], 0x16, 0x2) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) 1.039538317s ago: executing program 5 (id=7614): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x1d11, 0x5e) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'caif0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @multicast}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) epoll_create(0x3f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r0, &(0x7f00000003c0)="d33dd4edc9ee576541234edcd9c29e0ee1279915798e9582c47ff13db3480d1d12e0c612b6a118659521a5d8a3bc97124d4de8142d460882eda76c06e5de9ec5f0738421c9773b0cf4b830ded053f72445ece3f0c47bceb02001895536fc17ad32779de45595a594929230484b009c2c827c7d338dda999b5f", 0x79, 0x80, 0x0, 0x0) socket$inet(0x2, 0x2, 0x2) socket$xdp(0x2c, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write(r6, &(0x7f00000000c0), 0x0) ioctl$TCSETS2(r6, 0x402c542b, &(0x7f00000004c0)={0x100002, 0x7dd, 0xffffffff, 0x4000063, 0x9, "1d4ab836dc000000000000006e581800", 0x200, 0x1}) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 653.166589ms ago: executing program 4 (id=7615): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x2000c000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x7c, 0xb, 0xc000, 0xec8f, 0x6, 0x84, 0xffffffbf, 0x1, 0x0}, &(0x7f0000000080)=0x20) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f00000000c0)={r4, 0x81}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x2}, {{@in6=@remote, 0x4d5, 0x32}, 0x0, @in6=@loopback, 0x1, 0x3, 0x0, 0xb7, 0x1fb, 0xffffffff, 0xfffffff9}}, 0xe8) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r8, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) sendmmsg(r7, &(0x7f0000000180), 0x400000000000077, 0x7600) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x7, &(0x7f0000000180)=0xe6) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r9, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e22, 0x8, @mcast2, 0xf}}, 0x0, 0x0, 0x3, 0x0, "bbd6140100190000000080735e5b95aab8940000000000000040079f3c7ec0682e000034c688d5f3fcb74e706d0cfb1bca8814edc42596e918a802afa9b2c1b314badac22000"}, 0xd8) 0s ago: executing program 5 (id=7616): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b03", @ANYRES32=r0, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) kernel console output (not intermixed with test programs): usb_control_msg error 0, request = 0x88, error = -71 [ 1711.514179][ T6109] stv0680 7-1:4.0: STV(e): camera ping failed!! [ 1711.520934][ T6109] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1711.529158][ T6109] stv0680 7-1:4.0: last error: 0, command = 0x0 [ 1711.538809][ T6109] usb 7-1: USB disconnect, device number 57 [ 1711.605078][ T6097] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1711.627598][T30598] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1711.638628][T30598] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1711.648475][T30598] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1711.657735][T30598] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1711.673617][T30598] usb 6-1: config 0 descriptor?? [ 1711.755117][ T6097] usb 2-1: Using ep0 maxpacket: 8 [ 1711.762662][ T6097] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 1711.770985][ T6097] usb 2-1: config 2 has no interface number 0 [ 1711.778047][ T6097] usb 2-1: config 2 interface 31 has no altsetting 0 [ 1711.788534][ T6097] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1711.798015][ T6097] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.806205][ T6097] usb 2-1: Product: syz [ 1711.810584][ T6097] usb 2-1: Manufacturer: syz [ 1711.815473][ T6097] usb 2-1: SerialNumber: syz [ 1711.845259][ T6109] usb 7-1: new full-speed USB device number 58 using dummy_hcd [ 1712.001380][ T6109] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1712.018699][ T6109] usb 7-1: not running at top speed; connect to a high speed hub [ 1712.032831][ T6109] usb 7-1: config 1 has an invalid interface number: 138 but max is 0 [ 1712.043381][ T6109] usb 7-1: config 1 has no interface number 0 [ 1712.050708][ T6109] usb 7-1: config 1 interface 138 has no altsetting 0 [ 1712.067717][ T6109] usb 7-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 1712.077184][ T6109] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.089368][ T6109] usb 7-1: Product: syz [ 1712.096760][T30598] cm6533_jd 0003:0D8C:0022.008B: unknown main item tag 0x0 [ 1712.104593][ T6109] usb 7-1: Manufacturer: syz [ 1712.110543][ T6109] usb 7-1: SerialNumber: syz [ 1712.115854][T30598] cm6533_jd 0003:0D8C:0022.008B: unknown main item tag 0x0 [ 1712.127705][T30598] cm6533_jd 0003:0D8C:0022.008B: unknown main item tag 0x0 [ 1712.137452][T30598] cm6533_jd 0003:0D8C:0022.008B: unknown main item tag 0x0 [ 1712.145781][T30598] cm6533_jd 0003:0D8C:0022.008B: unknown main item tag 0x0 [ 1712.168048][T30598] cm6533_jd 0003:0D8C:0022.008B: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 1712.209448][ T2329] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1712.350849][ T2333] sctp: [Deprecated]: syz.5.7187 (pid 2333) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1712.350849][ T2333] Use struct sctp_sack_info instead [ 1712.452079][ T6097] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22 [ 1712.474361][ T6097] usb 2-1: USB disconnect, device number 62 [ 1712.594528][ T6109] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1712.669420][ T6109] usb 7-1: USB disconnect, device number 58 [ 1712.722184][ T8346] udevd[8346]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.138/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1713.285482][T19868] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1713.365118][ T6097] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1713.459309][T19868] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 1713.478143][T19868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1713.503852][T19868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1713.544594][ T6097] usb 5-1: Using ep0 maxpacket: 8 [ 1713.597035][T19868] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1713.638161][ T6097] usb 5-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 1713.658604][T19868] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1713.685194][ T6097] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1713.696841][T19868] usb 2-1: Manufacturer: syz [ 1713.727072][ T6097] usb 5-1: Product: syz [ 1713.731271][ T6097] usb 5-1: Manufacturer: syz [ 1713.737316][T19868] usb 2-1: config 0 descriptor?? [ 1713.759801][T19868] igorplugusb 2-1:0.0: endpoint incorrect [ 1713.766870][ T6097] usb 5-1: SerialNumber: syz [ 1713.790882][ T6097] usb 5-1: config 0 descriptor?? [ 1713.811510][ T6097] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 1713.963454][ T2359] syzkaller0: entered promiscuous mode [ 1713.971073][ T2359] syzkaller0: entered allmulticast mode [ 1714.034131][ T6097] pwc: Failed to set LED on/off time (-71) [ 1714.050148][ T6097] pwc: send_video_command error -71 [ 1714.066881][ T6097] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1714.096241][ T6097] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 1714.143296][ T6097] usb 5-1: USB disconnect, device number 107 [ 1714.180509][ T5898] usb 6-1: USB disconnect, device number 108 [ 1714.725099][ T5898] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1714.896792][ T5898] usb 6-1: Using ep0 maxpacket: 16 [ 1714.995289][ T2370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1715.032837][ T2370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1715.056927][ T2370] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7198'. [ 1715.309896][ T2376] delete_channel: no stack [ 1717.101775][ T6109] usb 2-1: USB disconnect, device number 63 [ 1717.343941][ T5898] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1717.414590][ T5898] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1717.437357][ T5898] usb 6-1: can't read configurations, error -71 [ 1718.562746][ T6109] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 1718.726955][ T6109] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1718.736321][ T6109] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1718.752935][ T6109] usb 5-1: config 0 descriptor?? [ 1719.302923][ T2402] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7203'. [ 1719.527216][ T2417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1719.548061][ T2415] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7206'. [ 1719.552665][ T2417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1719.577487][ T2415] team0: left allmulticast mode [ 1719.595060][ T2415] team_slave_0: left allmulticast mode [ 1719.604132][ T2415] team_slave_1: left allmulticast mode [ 1719.610844][ T2415] team0: left promiscuous mode [ 1719.622257][ T2406] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7204'. [ 1719.633517][ T2415] team_slave_0: left promiscuous mode [ 1719.639842][ T2415] team_slave_1: left promiscuous mode [ 1719.645898][ T2415] bridge0: port 3(team0) entered disabled state [ 1719.655918][ T2415] bridge_slave_1: left allmulticast mode [ 1719.676660][ T2415] bridge_slave_1: left promiscuous mode [ 1719.682471][ T2415] bridge0: port 2(bridge_slave_1) entered disabled state [ 1719.697750][ T2415] bridge_slave_0: left allmulticast mode [ 1719.703506][ T2415] bridge_slave_0: left promiscuous mode [ 1719.711474][ T2415] bridge0: port 1(bridge_slave_0) entered disabled state [ 1719.765168][T30598] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 1719.838443][ T5898] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1719.903378][ T6109] pegasus 5-1:0.0: probe with driver pegasus failed with error -71 [ 1719.923194][ T6109] usb 5-1: USB disconnect, device number 108 [ 1719.950135][T30598] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1719.969434][T30598] usb 2-1: not running at top speed; connect to a high speed hub [ 1719.981162][T30598] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1719.994640][T30598] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1720.007686][ T5898] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1720.009732][T30598] usb 2-1: string descriptor 0 read error: -22 [ 1720.025062][ T5898] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1720.027523][T30598] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1720.034731][ T5898] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1720.034756][ T5898] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1720.034803][ T5898] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1720.045003][T30598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1720.109707][T30598] usb 2-1: 0:2 : does not exist [ 1720.118046][ T5898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1720.141031][ T5898] usb 7-1: config 0 descriptor?? [ 1720.307467][T30598] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1720.331756][T30598] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1720.348504][T30598] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1720.361650][ T5898] hdpvr 7-1:0.0: firmware version 0x8 dated )#jn [ 1720.376059][T30598] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 1720.425342][T30598] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1720.451776][T30598] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1720.491422][T30598] usb 2-1: USB disconnect, device number 64 [ 1721.421905][ T5898] hdpvr 7-1:0.0: Could not setup controls [ 1721.430168][ T5898] hdpvr 7-1:0.0: registering videodev failed [ 1721.447154][ T5898] hdpvr 7-1:0.0: probe with driver hdpvr failed with error -71 [ 1721.507722][ T5898] usb 7-1: USB disconnect, device number 59 [ 1722.203507][ T2466] syzkaller0: entered promiscuous mode [ 1722.211804][ T2466] syzkaller0: entered allmulticast mode [ 1722.377405][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 1722.377423][ T30] audit: type=1326 audit(1760809890.965:3172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2479 comm="syz.5.7221" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb5f4f8efc9 code=0x0 [ 1723.696684][ T2491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7223'. [ 1725.490522][ T2501] netlink: 'syz.5.7226': attribute type 12 has an invalid length. [ 1725.826667][ T2511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7228'. [ 1725.935173][ T5898] usb 6-1: new low-speed USB device number 111 using dummy_hcd [ 1726.029134][ T2519] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1726.100281][ T5898] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1726.125410][ T5898] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1726.136445][ T5898] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1726.206136][ T5898] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1726.225620][ T5898] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1726.238201][ T5898] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1726.246553][ T5898] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1726.264227][ T5898] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1726.277962][ T5898] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1726.290461][ T5898] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1726.307981][ T5898] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1726.321684][ T5898] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1726.333250][ T5898] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1726.349891][ T5898] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1726.367105][ T5898] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1726.395117][ T5898] usb 6-1: string descriptor 0 read error: -22 [ 1726.401636][ T5898] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1726.413249][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1726.439859][ T5898] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1726.502996][ T2530] FAULT_INJECTION: forcing a failure. [ 1726.502996][ T2530] name failslab, interval 1, probability 0, space 0, times 0 [ 1726.521033][ T2530] CPU: 1 UID: 0 PID: 2530 Comm: syz.4.7232 Not tainted syzkaller #0 PREEMPT(full) [ 1726.521060][ T2530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1726.521072][ T2530] Call Trace: [ 1726.521080][ T2530] [ 1726.521090][ T2530] dump_stack_lvl+0x189/0x250 [ 1726.521109][ T2530] ? __pfx____ratelimit+0x10/0x10 [ 1726.521124][ T2530] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1726.521135][ T2530] ? __pfx__printk+0x10/0x10 [ 1726.521149][ T2530] ? __pfx___might_resched+0x10/0x10 [ 1726.521162][ T2530] ? fs_reclaim_acquire+0x7d/0x100 [ 1726.521176][ T2530] should_fail_ex+0x414/0x560 [ 1726.521194][ T2530] should_failslab+0xa8/0x100 [ 1726.521208][ T2530] __kvmalloc_node_noprof+0x158/0x910 [ 1726.521221][ T2530] ? nf_tables_newchain+0x1b68/0x2750 [ 1726.521231][ T2530] ? __asan_memcpy+0x40/0x70 [ 1726.521244][ T2530] nf_tables_newchain+0x1b68/0x2750 [ 1726.521263][ T2530] ? __pfx_nf_tables_newchain+0x10/0x10 [ 1726.521291][ T2530] ? nfnl_pernet+0x23/0x240 [ 1726.521308][ T2530] ? __nla_parse+0x40/0x60 [ 1726.521327][ T2530] nfnetlink_rcv+0x11d9/0x2590 [ 1726.521357][ T2530] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1726.521394][ T2530] ? netlink_deliver_tap+0x2e/0x1b0 [ 1726.521417][ T2530] netlink_unicast+0x82f/0x9e0 [ 1726.521435][ T2530] ? __pfx_netlink_unicast+0x10/0x10 [ 1726.521448][ T2530] ? netlink_sendmsg+0x642/0xb30 [ 1726.521460][ T2530] ? skb_put+0x11b/0x210 [ 1726.521475][ T2530] netlink_sendmsg+0x805/0xb30 [ 1726.521494][ T2530] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1726.521509][ T2530] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1726.521522][ T2530] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1726.521536][ T2530] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1726.521549][ T2530] __sock_sendmsg+0x21c/0x270 [ 1726.521563][ T2530] ____sys_sendmsg+0x505/0x830 [ 1726.521579][ T2530] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1726.521598][ T2530] ? import_iovec+0x74/0xa0 [ 1726.521613][ T2530] ___sys_sendmsg+0x21f/0x2a0 [ 1726.521624][ T2530] ? __pfx____sys_sendmsg+0x10/0x10 [ 1726.521652][ T2530] ? __fget_files+0x2a/0x420 [ 1726.521664][ T2530] ? __fget_files+0x3a0/0x420 [ 1726.521681][ T2530] __x64_sys_sendmsg+0x19b/0x260 [ 1726.521692][ T2530] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1726.521707][ T2530] ? __pfx_ksys_write+0x10/0x10 [ 1726.521720][ T2530] ? do_syscall_64+0xbe/0xfa0 [ 1726.521732][ T2530] do_syscall_64+0xfa/0xfa0 [ 1726.521741][ T2530] ? lockdep_hardirqs_on+0x9c/0x150 [ 1726.521751][ T2530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1726.521762][ T2530] ? clear_bhb_loop+0x60/0xb0 [ 1726.521774][ T2530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1726.521784][ T2530] RIP: 0033:0x7f4e1338efc9 [ 1726.521795][ T2530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1726.521804][ T2530] RSP: 002b:00007f4e142ed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1726.521816][ T2530] RAX: ffffffffffffffda RBX: 00007f4e135e5fa0 RCX: 00007f4e1338efc9 [ 1726.521823][ T2530] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1726.521830][ T2530] RBP: 00007f4e142ed090 R08: 0000000000000000 R09: 0000000000000000 [ 1726.521836][ T2530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1726.521842][ T2530] R13: 00007f4e135e6038 R14: 00007f4e135e5fa0 R15: 00007f4e1370fa28 [ 1726.521859][ T2530] [ 1727.202820][T30598] usb 6-1: USB disconnect, device number 111 [ 1727.213405][ T2532] usb 6-1: Couldn't submit interrupt_out_urb -19 [ 1727.471395][ T6109] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1727.605098][T30598] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1727.639729][ T6109] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1727.659376][ T6109] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1727.673083][ T6109] usb 2-1: Product: syz [ 1727.685657][ T6109] usb 2-1: Manufacturer: syz [ 1727.695027][ T6109] usb 2-1: SerialNumber: syz [ 1727.716276][ T6109] usb 2-1: config 0 descriptor?? [ 1727.736669][ T6109] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1727.756409][ T2560] syzkaller0: entered promiscuous mode [ 1727.761929][ T2560] syzkaller0: entered allmulticast mode [ 1727.771434][T30598] usb 6-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=e6.56 [ 1727.785099][T30598] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1727.801230][T30598] usb 6-1: config 0 descriptor?? [ 1727.812760][T30598] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 1728.340228][T30598] gspca_zc3xx: reg_w_i err -110 [ 1728.345409][T30598] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1728.485248][ T6109] gspca_sunplus: reg_r err -110 [ 1728.490388][ T6109] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 1728.533633][ T5898] usb 7-1: new full-speed USB device number 60 using dummy_hcd [ 1728.582243][ T6109] usb 6-1: USB disconnect, device number 112 [ 1728.704663][ T5898] usb 7-1: config 0 has an invalid interface number: 112 but max is 0 [ 1728.715244][ T5898] usb 7-1: config 0 has no interface number 0 [ 1728.721395][ T5898] usb 7-1: config 0 interface 112 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1728.751505][ T5898] usb 7-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 1728.762754][ T5898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1728.774132][ T5898] usb 7-1: Product: syz [ 1728.779423][ T5898] usb 7-1: Manufacturer: syz [ 1728.796479][ T5898] usb 7-1: SerialNumber: syz [ 1728.839303][ T2544] delete_channel: no stack [ 1728.846546][ T5898] usb 7-1: config 0 descriptor?? [ 1728.907773][ T5898] mvusb_mdio 7-1:0.112: probe with driver mvusb_mdio failed with error -5 [ 1728.921488][ T2582] FAULT_INJECTION: forcing a failure. [ 1728.921488][ T2582] name failslab, interval 1, probability 0, space 0, times 0 [ 1728.956441][ T2582] CPU: 1 UID: 0 PID: 2582 Comm: syz.4.7244 Not tainted syzkaller #0 PREEMPT(full) [ 1728.956463][ T2582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1728.956469][ T2582] Call Trace: [ 1728.956474][ T2582] [ 1728.956480][ T2582] dump_stack_lvl+0x189/0x250 [ 1728.956495][ T2582] ? __pfx____ratelimit+0x10/0x10 [ 1728.956511][ T2582] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1728.956521][ T2582] ? __pfx__printk+0x10/0x10 [ 1728.956533][ T2582] ? __pfx___might_resched+0x10/0x10 [ 1728.956550][ T2582] ? fs_reclaim_acquire+0x7d/0x100 [ 1728.956565][ T2582] should_fail_ex+0x414/0x560 [ 1728.956584][ T2582] should_failslab+0xa8/0x100 [ 1728.956598][ T2582] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1728.956609][ T2582] ? nf_tables_newchain+0x1b68/0x2750 [ 1728.956619][ T2582] ? nf_tables_newchain+0x1ce8/0x2750 [ 1728.956632][ T2582] nf_tables_newchain+0x1ce8/0x2750 [ 1728.956651][ T2582] ? __pfx_nf_tables_newchain+0x10/0x10 [ 1728.956679][ T2582] ? nfnl_pernet+0x23/0x240 [ 1728.956696][ T2582] ? __nla_parse+0x40/0x60 [ 1728.956709][ T2582] nfnetlink_rcv+0x11d9/0x2590 [ 1728.956739][ T2582] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1728.956776][ T2582] ? netlink_deliver_tap+0x2e/0x1b0 [ 1728.956800][ T2582] netlink_unicast+0x82f/0x9e0 [ 1728.956816][ T2582] ? __pfx_netlink_unicast+0x10/0x10 [ 1728.956830][ T2582] ? netlink_sendmsg+0x642/0xb30 [ 1728.956842][ T2582] ? skb_put+0x11b/0x210 [ 1728.956857][ T2582] netlink_sendmsg+0x805/0xb30 [ 1728.956875][ T2582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1728.956890][ T2582] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1728.956903][ T2582] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1728.956916][ T2582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1728.956930][ T2582] __sock_sendmsg+0x21c/0x270 [ 1728.956943][ T2582] ____sys_sendmsg+0x505/0x830 [ 1728.956957][ T2582] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1728.956977][ T2582] ? import_iovec+0x74/0xa0 [ 1728.956991][ T2582] ___sys_sendmsg+0x21f/0x2a0 [ 1728.957003][ T2582] ? __pfx____sys_sendmsg+0x10/0x10 [ 1728.957031][ T2582] ? __fget_files+0x2a/0x420 [ 1728.957043][ T2582] ? __fget_files+0x3a0/0x420 [ 1728.957060][ T2582] __x64_sys_sendmsg+0x19b/0x260 [ 1728.957071][ T2582] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1728.957091][ T2582] ? __pfx_ksys_write+0x10/0x10 [ 1728.957105][ T2582] ? do_syscall_64+0xbe/0xfa0 [ 1728.957117][ T2582] do_syscall_64+0xfa/0xfa0 [ 1728.957126][ T2582] ? lockdep_hardirqs_on+0x9c/0x150 [ 1728.957136][ T2582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1728.957146][ T2582] ? clear_bhb_loop+0x60/0xb0 [ 1728.957158][ T2582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1728.957168][ T2582] RIP: 0033:0x7f4e1338efc9 [ 1728.957179][ T2582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1728.957188][ T2582] RSP: 002b:00007f4e142ed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1728.957200][ T2582] RAX: ffffffffffffffda RBX: 00007f4e135e5fa0 RCX: 00007f4e1338efc9 [ 1728.957207][ T2582] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1728.957214][ T2582] RBP: 00007f4e142ed090 R08: 0000000000000000 R09: 0000000000000000 [ 1728.957220][ T2582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1728.957226][ T2582] R13: 00007f4e135e6038 R14: 00007f4e135e5fa0 R15: 00007f4e1370fa28 [ 1728.957243][ T2582] [ 1729.910989][ T2592] fuse: Unknown parameter 'nd' [ 1730.192526][ T6109] usb 2-1: USB disconnect, device number 65 [ 1730.317540][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.341403][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.690673][ T2598] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7247'. [ 1730.725980][ T6113] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1730.897008][ T6113] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1730.907804][ T6113] usb 2-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1730.934861][ T6113] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1730.955257][ T6113] usb 2-1: config 0 descriptor?? [ 1730.978366][ T2599] loop6: detected capacity change from 0 to 7 [ 1730.987026][ T2599] Dev loop6: unable to read RDB block 7 [ 1730.992660][ T2599] loop6: AHDI p2 [ 1730.998504][ T2599] loop6: partition table partially beyond EOD, truncated [ 1731.309683][ T5898] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1731.480755][ T5898] usb 6-1: Using ep0 maxpacket: 8 [ 1731.488846][ T5898] usb 6-1: config 5 has an invalid interface number: 52 but max is 1 [ 1731.497118][ T5898] usb 6-1: config 5 has an invalid interface number: 4 but max is 1 [ 1731.505243][ T5898] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1731.515460][ T5898] usb 6-1: config 5 has no interface number 0 [ 1731.521570][ T5898] usb 6-1: config 5 has no interface number 1 [ 1731.534697][ T5898] usb 6-1: config 5 interface 52 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1731.549328][ T5898] usb 6-1: config 5 interface 4 altsetting 9 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1731.559115][ T5898] usb 6-1: config 5 interface 4 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1731.571989][ T5898] usb 6-1: config 5 interface 52 has no altsetting 0 [ 1731.578805][ T5898] usb 6-1: config 5 interface 4 has no altsetting 0 [ 1731.592780][ T5898] usb 6-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 1731.605249][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1731.607004][ T6113] razer 0003:1532:010E.008C: failed to enable macro keys: -71 [ 1731.613261][ T5898] usb 6-1: Product: syz [ 1731.613279][ T5898] usb 6-1: Manufacturer: syz [ 1731.613293][ T5898] usb 6-1: SerialNumber: syz [ 1731.642092][ T6113] razer 0003:1532:010E.008C: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.1-1/input0 [ 1731.678547][ T6113] usb 2-1: USB disconnect, device number 66 [ 1731.713528][ T2601] fido_id[2601]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1732.458801][ T6097] usb 7-1: USB disconnect, device number 60 [ 1732.528309][ T5898] cytherm 6-1:5.52: Cypress thermometer device now attached [ 1732.544468][ T5898] cytherm 6-1:5.4: Cypress thermometer device now attached [ 1732.565327][ T5898] usb 6-1: USB disconnect, device number 113 [ 1732.575995][ T5898] cytherm 6-1:5.52: Cypress thermometer now disconnected [ 1732.592417][ T5898] cytherm 6-1:5.4: Cypress thermometer now disconnected [ 1732.899020][ T6113] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1732.923350][ T2629] FAULT_INJECTION: forcing a failure. [ 1732.923350][ T2629] name failslab, interval 1, probability 0, space 0, times 0 [ 1732.936203][ T2629] CPU: 1 UID: 0 PID: 2629 Comm: syz.6.7255 Not tainted syzkaller #0 PREEMPT(full) [ 1732.936228][ T2629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1732.936240][ T2629] Call Trace: [ 1732.936248][ T2629] [ 1732.936257][ T2629] dump_stack_lvl+0x189/0x250 [ 1732.936283][ T2629] ? __pfx____ratelimit+0x10/0x10 [ 1732.936310][ T2629] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1732.936330][ T2629] ? __pfx__printk+0x10/0x10 [ 1732.936351][ T2629] ? __pfx___might_resched+0x10/0x10 [ 1732.936376][ T2629] ? fs_reclaim_acquire+0x7d/0x100 [ 1732.936403][ T2629] should_fail_ex+0x414/0x560 [ 1732.936435][ T2629] should_failslab+0xa8/0x100 [ 1732.936459][ T2629] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1732.936478][ T2629] ? nf_tables_newchain+0x1b68/0x2750 [ 1732.936496][ T2629] ? nf_tables_newchain+0x1ce8/0x2750 [ 1732.936521][ T2629] nf_tables_newchain+0x1ce8/0x2750 [ 1732.936556][ T2629] ? __pfx_nf_tables_newchain+0x10/0x10 [ 1732.936610][ T2629] ? nfnl_pernet+0x23/0x240 [ 1732.936642][ T2629] ? __nla_parse+0x40/0x60 [ 1732.936667][ T2629] nfnetlink_rcv+0x11d9/0x2590 [ 1732.936721][ T2629] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1732.936760][ T2629] ? ref_tracker_free+0x63a/0x7d0 [ 1732.936809][ T2629] ? __netlink_deliver_tap+0x807/0x850 [ 1732.936833][ T2629] ? netlink_deliver_tap+0x2e/0x1b0 [ 1732.936876][ T2629] netlink_unicast+0x82f/0x9e0 [ 1732.936907][ T2629] ? __pfx_netlink_unicast+0x10/0x10 [ 1732.936938][ T2629] ? netlink_sendmsg+0x642/0xb30 [ 1732.936961][ T2629] ? skb_put+0x11b/0x210 [ 1732.936989][ T2629] netlink_sendmsg+0x805/0xb30 [ 1732.937022][ T2629] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1732.937051][ T2629] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1732.937073][ T2629] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1732.937095][ T2629] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1732.937122][ T2629] __sock_sendmsg+0x21c/0x270 [ 1732.937147][ T2629] ____sys_sendmsg+0x505/0x830 [ 1732.937178][ T2629] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1732.937213][ T2629] ? import_iovec+0x74/0xa0 [ 1732.937238][ T2629] ___sys_sendmsg+0x21f/0x2a0 [ 1732.937257][ T2629] ? __pfx____sys_sendmsg+0x10/0x10 [ 1732.937308][ T2629] ? __fget_files+0x2a/0x420 [ 1732.937329][ T2629] ? __fget_files+0x3a0/0x420 [ 1732.937361][ T2629] __x64_sys_sendmsg+0x19b/0x260 [ 1732.937382][ T2629] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1732.937411][ T2629] ? __pfx_ksys_write+0x10/0x10 [ 1732.937436][ T2629] ? do_syscall_64+0xbe/0xfa0 [ 1732.937458][ T2629] do_syscall_64+0xfa/0xfa0 [ 1732.937475][ T2629] ? lockdep_hardirqs_on+0x9c/0x150 [ 1732.937493][ T2629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1732.937511][ T2629] ? clear_bhb_loop+0x60/0xb0 [ 1732.937533][ T2629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1732.937549][ T2629] RIP: 0033:0x7f7ca978efc9 [ 1732.937567][ T2629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1732.937581][ T2629] RSP: 002b:00007f7caa6bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1732.937598][ T2629] RAX: ffffffffffffffda RBX: 00007f7ca99e5fa0 RCX: 00007f7ca978efc9 [ 1732.937610][ T2629] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1732.937621][ T2629] RBP: 00007f7caa6bd090 R08: 0000000000000000 R09: 0000000000000000 [ 1732.937632][ T2629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1732.937643][ T2629] R13: 00007f7ca99e6038 R14: 00007f7ca99e5fa0 R15: 00007f7ca9b0fa28 [ 1732.937675][ T2629] [ 1733.366860][ T6113] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1733.377255][ T6113] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1733.404423][ T6113] usb 2-1: config 1 has no interface number 0 [ 1733.425507][ T6113] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1733.472529][ T6113] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1733.503433][ T6113] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1733.522522][ T6113] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.581064][ T6113] usb 2-1: Product: syz [ 1733.612922][ T6113] usb 2-1: Manufacturer: syz [ 1733.684286][ T6113] usb 2-1: SerialNumber: syz [ 1733.928077][ T2616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1733.938880][ T2616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1733.957864][ T6113] cdc_ncm 2-1:1.1: bind() failure [ 1733.974807][ T6113] usb 2-1: USB disconnect, device number 67 [ 1733.984003][ T6109] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1734.025782][ T6097] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1734.165182][ T6109] usb 7-1: Using ep0 maxpacket: 16 [ 1734.172594][ T6109] usb 7-1: config 0 has an invalid interface number: 40 but max is 0 [ 1734.181848][ T6109] usb 7-1: config 0 has no interface number 0 [ 1734.188350][ T6097] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1734.199923][ T6097] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1734.200570][ T6109] usb 7-1: New USB device found, idVendor=22b8, idProduct=689d, bcdDevice=20.6b [ 1734.211309][ T6097] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1734.219730][ T6109] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1734.234995][ T6109] usb 7-1: Product: syz [ 1734.236263][ T6097] usb 6-1: config 0 descriptor?? [ 1734.239395][ T6109] usb 7-1: Manufacturer: syz [ 1734.261577][ T6109] usb 7-1: SerialNumber: syz [ 1734.275659][ T6109] usb 7-1: config 0 descriptor?? [ 1734.493673][ T6109] qmi_wwan 7-1:0.40: More than one union descriptor, skipping ... [ 1734.519259][ T6109] qmi_wwan 7-1:0.40: probe with driver qmi_wwan failed with error -22 [ 1734.557616][ T6109] usb 7-1: USB disconnect, device number 61 [ 1734.682096][ T2651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1734.695996][ T2651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1734.720584][ T6097] keytouch 0003:0926:3333.008D: fixing up Keytouch IEC report descriptor [ 1734.735977][ T6097] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.008D/input/input198 [ 1734.854318][ T6097] keytouch 0003:0926:3333.008D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1735.010499][ T2651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1735.105638][ T2651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1735.158807][ T2651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1735.174244][ T2651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1735.561795][ T6109] usb 6-1: USB disconnect, device number 114 [ 1735.841834][ T2688] program syz.6.7270 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1736.371795][ T2722] FAULT_INJECTION: forcing a failure. [ 1736.371795][ T2722] name failslab, interval 1, probability 0, space 0, times 0 [ 1736.403743][ T2722] CPU: 1 UID: 0 PID: 2722 Comm: syz.1.7278 Not tainted syzkaller #0 PREEMPT(full) [ 1736.403769][ T2722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1736.403780][ T2722] Call Trace: [ 1736.403789][ T2722] [ 1736.403797][ T2722] dump_stack_lvl+0x189/0x250 [ 1736.403823][ T2722] ? __pfx____ratelimit+0x10/0x10 [ 1736.403850][ T2722] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1736.403870][ T2722] ? __pfx__printk+0x10/0x10 [ 1736.403894][ T2722] ? __pfx___might_resched+0x10/0x10 [ 1736.403923][ T2722] should_fail_ex+0x414/0x560 [ 1736.403956][ T2722] should_failslab+0xa8/0x100 [ 1736.403980][ T2722] __kmalloc_noprof+0xcb/0x7f0 [ 1736.403999][ T2722] ? nft_pernet+0x23/0x240 [ 1736.404017][ T2722] ? nf_tables_newrule+0x150b/0x28a0 [ 1736.404043][ T2722] nf_tables_newrule+0x150b/0x28a0 [ 1736.404078][ T2722] ? __pfx_nf_tables_newrule+0x10/0x10 [ 1736.404100][ T2722] ? nfnl_pernet+0x23/0x240 [ 1736.404137][ T2722] ? __nla_parse+0x40/0x60 [ 1736.404162][ T2722] nfnetlink_rcv+0x11d9/0x2590 [ 1736.404225][ T2722] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1736.404294][ T2722] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 1736.404322][ T2722] ? netlink_deliver_tap+0x2e/0x1b0 [ 1736.404364][ T2722] netlink_unicast+0x82f/0x9e0 [ 1736.404406][ T2722] ? __pfx_netlink_unicast+0x10/0x10 [ 1736.404431][ T2722] ? netlink_sendmsg+0x642/0xb30 [ 1736.404453][ T2722] ? skb_put+0x11b/0x210 [ 1736.404481][ T2722] netlink_sendmsg+0x805/0xb30 [ 1736.404515][ T2722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1736.404538][ T2722] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1736.404567][ T2722] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1736.404588][ T2722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1736.404612][ T2722] __sock_sendmsg+0x21c/0x270 [ 1736.404634][ T2722] ____sys_sendmsg+0x505/0x830 [ 1736.404655][ T2722] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1736.404685][ T2722] ? import_iovec+0x74/0xa0 [ 1736.404710][ T2722] ___sys_sendmsg+0x21f/0x2a0 [ 1736.404727][ T2722] ? __pfx____sys_sendmsg+0x10/0x10 [ 1736.404775][ T2722] ? __fget_files+0x2a/0x420 [ 1736.404796][ T2722] ? __fget_files+0x3a0/0x420 [ 1736.404823][ T2722] __x64_sys_sendmsg+0x19b/0x260 [ 1736.404840][ T2722] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1736.404863][ T2722] ? __pfx_ksys_write+0x10/0x10 [ 1736.404883][ T2722] ? do_syscall_64+0xbe/0xfa0 [ 1736.404902][ T2722] do_syscall_64+0xfa/0xfa0 [ 1736.404921][ T2722] ? lockdep_hardirqs_on+0x9c/0x150 [ 1736.404936][ T2722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1736.404952][ T2722] ? clear_bhb_loop+0x60/0xb0 [ 1736.404972][ T2722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1736.404988][ T2722] RIP: 0033:0x7f96b718efc9 [ 1736.405006][ T2722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1736.405020][ T2722] RSP: 002b:00007f96b80ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1736.405039][ T2722] RAX: ffffffffffffffda RBX: 00007f96b73e5fa0 RCX: 00007f96b718efc9 [ 1736.405051][ T2722] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1736.405062][ T2722] RBP: 00007f96b80ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1736.405072][ T2722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1736.405082][ T2722] R13: 00007f96b73e6038 R14: 00007f96b73e5fa0 R15: 00007f96b750fa28 [ 1736.405107][ T2722] [ 1736.723256][ C1] vkms_vblank_simulate: vblank timer overrun [ 1737.243354][ T2738] ptm ptm9: ldisc open failed (-12), clearing slot 9 [ 1737.469047][ T2745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7284'. [ 1737.478347][ T2745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7284'. [ 1737.675420][T19876] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1737.835734][T19876] usb 2-1: Using ep0 maxpacket: 16 [ 1737.845162][ T6109] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1737.854576][T19876] usb 2-1: config 254 has an invalid interface number: 235 but max is 0 [ 1737.875029][T19876] usb 2-1: config 254 has no interface number 0 [ 1737.888486][T19876] usb 2-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 1737.905087][ T6113] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1737.916962][T19876] usb 2-1: config 254 interface 235 has no altsetting 0 [ 1737.934328][T19876] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1737.944457][T19876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1737.952822][T19876] usb 2-1: Product: syz [ 1737.965021][T19876] usb 2-1: Manufacturer: syz [ 1737.975181][T19876] usb 2-1: SerialNumber: syz [ 1737.994179][ T2758] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1738.027656][ T6109] usb 6-1: Using ep0 maxpacket: 16 [ 1738.038409][ T6109] usb 6-1: New USB device found, idVendor=110a, idProduct=1653, bcdDevice=5e.a7 [ 1738.048048][ T6109] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1738.057790][ T6109] usb 6-1: Product: syz [ 1738.062139][ T6109] usb 6-1: Manufacturer: syz [ 1738.067560][ T6109] usb 6-1: SerialNumber: syz [ 1738.074221][ T6109] usb 6-1: config 0 descriptor?? [ 1738.093694][ T6113] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1738.125845][ T6113] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1738.142537][ T6113] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1738.152630][ T6113] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1738.167058][ T6113] usb 5-1: config 0 descriptor?? [ 1738.242107][ T2758] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1738.253882][T19876] usbtest 2-1:254.235: Linux gadget zero [ 1738.266049][T19876] usbtest 2-1:254.235: high-speed {control in/out bulk-in bulk-out} tests (+alt) [ 1738.478868][T30598] usb 2-1: USB disconnect, device number 68 [ 1738.536538][T19876] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1738.545779][ T6109] mxuport 6-1:0.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 1738.556332][ T6109] mxuport 6-1:0.0: probe with driver mxuport failed with error -5 [ 1738.568094][ T6109] usb 6-1: USB disconnect, device number 115 [ 1738.581457][ T2769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1738.591716][ T2769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1738.695026][T19876] usb 7-1: Using ep0 maxpacket: 8 [ 1738.704223][T19876] usb 7-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1738.714677][T19876] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1738.722879][T19876] usb 7-1: Product: syz [ 1738.727203][T19876] usb 7-1: Manufacturer: syz [ 1738.731818][T19876] usb 7-1: SerialNumber: syz [ 1738.738621][T19876] usb 7-1: config 0 descriptor?? [ 1738.748432][T19876] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1738.803428][ T6113] usb 5-1: string descriptor 0 read error: -22 [ 1739.021999][ T6113] input: HID 256c:006d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.008E/input/input200 [ 1739.058082][ T6113] input: HID 256c:006d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.008E/input/input201 [ 1739.103508][ T2778] FAULT_INJECTION: forcing a failure. [ 1739.103508][ T2778] name failslab, interval 1, probability 0, space 0, times 0 [ 1739.120571][ T2778] CPU: 0 UID: 0 PID: 2778 Comm: syz.1.7293 Not tainted syzkaller #0 PREEMPT(full) [ 1739.120597][ T2778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1739.120608][ T2778] Call Trace: [ 1739.120619][ T2778] [ 1739.120627][ T2778] dump_stack_lvl+0x189/0x250 [ 1739.120652][ T2778] ? __pfx____ratelimit+0x10/0x10 [ 1739.120678][ T2778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1739.120697][ T2778] ? __pfx__printk+0x10/0x10 [ 1739.120719][ T2778] ? __pfx___might_resched+0x10/0x10 [ 1739.120742][ T2778] ? fs_reclaim_acquire+0x7d/0x100 [ 1739.120769][ T2778] should_fail_ex+0x414/0x560 [ 1739.120801][ T2778] should_failslab+0xa8/0x100 [ 1739.120825][ T2778] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1739.120845][ T2778] ? nfnetlink_rcv+0xf97/0x2590 [ 1739.120866][ T2778] ? __nla_parse+0x40/0x60 [ 1739.120890][ T2778] nfnetlink_rcv+0xf97/0x2590 [ 1739.120945][ T2778] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1739.120978][ T2778] ? ref_tracker_free+0x63a/0x7d0 [ 1739.121016][ T2778] ? __netlink_deliver_tap+0x807/0x850 [ 1739.121039][ T2778] ? netlink_deliver_tap+0x2e/0x1b0 [ 1739.121077][ T2778] netlink_unicast+0x82f/0x9e0 [ 1739.121108][ T2778] ? __pfx_netlink_unicast+0x10/0x10 [ 1739.121132][ T2778] ? netlink_sendmsg+0x642/0xb30 [ 1739.121153][ T2778] ? skb_put+0x11b/0x210 [ 1739.121178][ T2778] netlink_sendmsg+0x805/0xb30 [ 1739.121211][ T2778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1739.121247][ T2778] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1739.121269][ T2778] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1739.121292][ T2778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1739.121317][ T2778] __sock_sendmsg+0x21c/0x270 [ 1739.121342][ T2778] ____sys_sendmsg+0x505/0x830 [ 1739.121365][ T2778] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1739.121401][ T2778] ? import_iovec+0x74/0xa0 [ 1739.121427][ T2778] ___sys_sendmsg+0x21f/0x2a0 [ 1739.121446][ T2778] ? __pfx____sys_sendmsg+0x10/0x10 [ 1739.121496][ T2778] ? __fget_files+0x2a/0x420 [ 1739.121526][ T2778] ? __fget_files+0x3a0/0x420 [ 1739.121556][ T2778] __x64_sys_sendmsg+0x19b/0x260 [ 1739.121577][ T2778] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1739.121603][ T2778] ? __pfx_ksys_write+0x10/0x10 [ 1739.121626][ T2778] ? do_syscall_64+0xbe/0xfa0 [ 1739.121648][ T2778] do_syscall_64+0xfa/0xfa0 [ 1739.121666][ T2778] ? lockdep_hardirqs_on+0x9c/0x150 [ 1739.121684][ T2778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1739.121702][ T2778] ? clear_bhb_loop+0x60/0xb0 [ 1739.121724][ T2778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1739.121741][ T2778] RIP: 0033:0x7f96b718efc9 [ 1739.121759][ T2778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1739.121774][ T2778] RSP: 002b:00007f96b80ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1739.121794][ T2778] RAX: ffffffffffffffda RBX: 00007f96b73e5fa0 RCX: 00007f96b718efc9 [ 1739.121808][ T2778] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1739.121820][ T2778] RBP: 00007f96b80ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1739.121831][ T2778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1739.121842][ T2778] R13: 00007f96b73e6038 R14: 00007f96b73e5fa0 R15: 00007f96b750fa28 [ 1739.121873][ T2778] [ 1739.557817][ T6113] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.008E/input/input202 [ 1739.597379][ T6113] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.008E/input/input203 [ 1739.747539][ T6113] uclogic 0003:256C:006D.008E: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 1739.825821][ T6097] usb 6-1: new full-speed USB device number 116 using dummy_hcd [ 1739.850368][ T2800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1739.861086][ T2800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1739.987031][ T6097] usb 6-1: config 0 has an invalid interface number: 235 but max is 0 [ 1739.995614][ T6097] usb 6-1: config 0 has no interface number 0 [ 1740.001733][ T6097] usb 6-1: config 0 interface 235 has no altsetting 0 [ 1740.011008][ T6097] usb 6-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=6c.d3 [ 1740.020722][ T6097] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1740.029632][ T6097] usb 6-1: Product: syz [ 1740.033841][ T6097] usb 6-1: Manufacturer: syz [ 1740.053464][ T6097] usb 6-1: SerialNumber: syz [ 1740.058272][ T5898] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1740.087167][ T6097] usb 6-1: config 0 descriptor?? [ 1740.100652][ T6097] usb-storage 6-1:0.235: USB Mass Storage device detected [ 1740.130404][T19876] gspca_sonixj: reg_w1 err -71 [ 1740.175421][T19876] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 1740.195205][T19876] usb 7-1: USB disconnect, device number 62 [ 1740.226848][ T5898] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1740.237992][ T5898] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1740.244674][ T5898] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1740.255002][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1740.265582][ T5898] usb 2-1: config 0 descriptor?? [ 1740.303646][ T6097] usb 6-1: USB disconnect, device number 116 [ 1740.848233][ T5898] usbhid 2-1:0.0: can't add hid device: -71 [ 1740.854273][ T5898] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1740.914316][ T5898] usb 2-1: USB disconnect, device number 69 [ 1740.958642][ T6109] usb 5-1: USB disconnect, device number 109 [ 1741.150213][ T30] audit: type=1326 audit(1760809909.725:3173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2832 comm="syz.1.7305" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f96b718efc9 code=0x0 [ 1741.251300][ T2835] FAULT_INJECTION: forcing a failure. [ 1741.251300][ T2835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1741.273699][ T2835] CPU: 0 UID: 0 PID: 2835 Comm: syz.5.7306 Not tainted syzkaller #0 PREEMPT(full) [ 1741.273723][ T2835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1741.273735][ T2835] Call Trace: [ 1741.273743][ T2835] [ 1741.273752][ T2835] dump_stack_lvl+0x189/0x250 [ 1741.273776][ T2835] ? __pfx____ratelimit+0x10/0x10 [ 1741.273801][ T2835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1741.273820][ T2835] ? __pfx__printk+0x10/0x10 [ 1741.273847][ T2835] should_fail_ex+0x414/0x560 [ 1741.273879][ T2835] _copy_to_user+0x31/0xb0 [ 1741.273903][ T2835] simple_read_from_buffer+0xe1/0x170 [ 1741.273937][ T2835] proc_fail_nth_read+0x1b3/0x220 [ 1741.273966][ T2835] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1741.273996][ T2835] ? rw_verify_area+0x2a6/0x4d0 [ 1741.274014][ T2835] ? __lock_acquire+0xab9/0xd20 [ 1741.274034][ T2835] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1741.274061][ T2835] vfs_read+0x200/0xa30 [ 1741.274079][ T2835] ? fdget_pos+0x247/0x320 [ 1741.274105][ T2835] ? __pfx___mutex_lock+0x10/0x10 [ 1741.274125][ T2835] ? __pfx_vfs_read+0x10/0x10 [ 1741.274146][ T2835] ? __fget_files+0x2a/0x420 [ 1741.274171][ T2835] ? __fget_files+0x3a0/0x420 [ 1741.274191][ T2835] ? __fget_files+0x2a/0x420 [ 1741.274220][ T2835] ksys_read+0x145/0x250 [ 1741.274241][ T2835] ? __pfx_ksys_read+0x10/0x10 [ 1741.274263][ T2835] ? do_syscall_64+0xbe/0xfa0 [ 1741.274285][ T2835] do_syscall_64+0xfa/0xfa0 [ 1741.274302][ T2835] ? lockdep_hardirqs_on+0x9c/0x150 [ 1741.274319][ T2835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1741.274337][ T2835] ? clear_bhb_loop+0x60/0xb0 [ 1741.274356][ T2835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1741.274372][ T2835] RIP: 0033:0x7fb5f4f8d9dc [ 1741.274388][ T2835] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1741.274403][ T2835] RSP: 002b:00007fb5f5d83030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1741.274422][ T2835] RAX: ffffffffffffffda RBX: 00007fb5f51e5fa0 RCX: 00007fb5f4f8d9dc [ 1741.274434][ T2835] RDX: 000000000000000f RSI: 00007fb5f5d830a0 RDI: 0000000000000004 [ 1741.274445][ T2835] RBP: 00007fb5f5d83090 R08: 0000000000000000 R09: 0000000000000000 [ 1741.274455][ T2835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1741.274464][ T2835] R13: 00007fb5f51e6038 R14: 00007fb5f51e5fa0 R15: 00007fb5f530fa28 [ 1741.274492][ T2835] [ 1741.570618][ T2848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7305'. [ 1742.226310][ T5898] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1742.406862][ T5898] usb 5-1: config 0 has an invalid interface number: 102 but max is 0 [ 1742.416072][ T5898] usb 5-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config [ 1742.429730][ T5898] usb 5-1: config 0 has no interface number 0 [ 1742.444059][ T5898] usb 5-1: New USB device found, idVendor=2001, idProduct=1a00, bcdDevice=38.f5 [ 1742.463023][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1742.506150][ T5898] usb 5-1: config 0 descriptor?? [ 1742.637152][ T6097] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1742.825230][ T6097] usb 7-1: Using ep0 maxpacket: 16 [ 1742.833324][ T6097] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1742.898583][ T6097] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1742.910711][ T6097] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1742.921249][ T6097] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.929739][ T6097] usb 7-1: Product: syz [ 1742.934284][ T6097] usb 7-1: Manufacturer: syz [ 1742.939233][ T6097] usb 7-1: SerialNumber: syz [ 1742.952186][ T6097] usb 7-1: config 0 descriptor?? [ 1743.151836][ T5898] asix 5-1:0.102 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1743.175383][ C1] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1743.205876][ T5898] asix 5-1:0.102: probe with driver asix failed with error -71 [ 1743.222845][ T6097] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input204 [ 1743.383333][ T5898] usb 5-1: USB disconnect, device number 110 [ 1743.411395][ T6097] imon:send_packet: packet tx failed (-71) [ 1743.447083][ T6097] imon 7-1:0.0: panel buttons/knobs setup failed [ 1743.665279][ T6097] rc_core: IR keymap rc-imon-pad not found [ 1743.675202][ T6097] Registered IR keymap rc-empty [ 1743.680114][ T6097] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1743.707633][ T6097] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1743.732925][ T6097] imon:send_packet: packet tx failed (-71) [ 1743.776029][ T6097] imon 7-1:0.0: remote input dev register failed [ 1743.828922][ T6097] imon 7-1:0.0: imon_init_intf0: rc device setup failed [ 1743.971382][ T2887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1743.992995][ T2887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1744.050307][ T6097] imon 7-1:0.0: unable to initialize intf0, err 0 [ 1744.085689][ T6097] imon:imon_probe: failed to initialize context! [ 1744.092660][ T6097] imon 7-1:0.0: unable to register, err -19 [ 1744.102382][ T6097] usb 7-1: USB disconnect, device number 63 [ 1744.395272][ T6109] usb 6-1: new full-speed USB device number 117 using dummy_hcd [ 1744.435092][ T6097] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1744.548859][ T6109] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1744.561235][ T6109] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1744.570428][ T6109] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1744.579228][ T6109] usb 6-1: Product: syz [ 1744.583470][ T6109] usb 6-1: Manufacturer: syz [ 1744.588735][ T6109] usb 6-1: SerialNumber: syz [ 1744.595084][ T6097] usb 7-1: Using ep0 maxpacket: 16 [ 1744.602859][ T6109] usb 6-1: config 0 descriptor?? [ 1744.606358][ T6097] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1744.614708][ T6109] usb 6-1: ucan: probing device on interface #0 [ 1744.619450][ T6097] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1744.625621][ T6109] usb 6-1: ucan: invalid EP count (0) [ 1744.637669][ T6109] usb 6-1: ucan: probe failed; try to update the device firmware [ 1744.640755][ T6097] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1744.659890][ T6097] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1744.668270][ T6097] usb 7-1: Product: syz [ 1744.672443][ T6097] usb 7-1: Manufacturer: syz [ 1744.677325][ T6097] usb 7-1: SerialNumber: syz [ 1744.683845][ T6097] usb 7-1: config 0 descriptor?? [ 1744.768700][ T30] audit: type=1326 audit(1760809913.355:3174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2897 comm="syz.4.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1338efc9 code=0x7ffc0000 [ 1744.792373][ T30] audit: type=1326 audit(1760809913.355:3175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2897 comm="syz.4.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1338efc9 code=0x7ffc0000 [ 1744.815490][ T30] audit: type=1326 audit(1760809913.355:3176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2897 comm="syz.4.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f4e1338efc9 code=0x7ffc0000 [ 1744.815534][ T30] audit: type=1326 audit(1760809913.355:3177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2897 comm="syz.4.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1338efc9 code=0x7ffc0000 [ 1744.815597][ T30] audit: type=1326 audit(1760809913.355:3178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2897 comm="syz.4.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e1338efc9 code=0x7ffc0000 [ 1744.815639][ T30] audit: type=1326 audit(1760809913.355:3179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2897 comm="syz.4.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1338efc9 code=0x7ffc0000 [ 1744.815678][ T30] audit: type=1326 audit(1760809913.355:3180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2897 comm="syz.4.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e1338efc9 code=0x7ffc0000 [ 1744.815739][ T30] audit: type=1326 audit(1760809913.355:3181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2897 comm="syz.4.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1338efc9 code=0x7ffc0000 [ 1744.818543][ T30] audit: type=1326 audit(1760809913.355:3182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2897 comm="syz.4.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e1338efc9 code=0x7ffc0000 [ 1744.857798][ T5898] usb 6-1: USB disconnect, device number 117 [ 1744.866464][ T2899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7320'. [ 1744.930655][ T6097] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input206 [ 1745.172261][ T2903] syzkaller0: entered promiscuous mode [ 1745.179393][ T2903] syzkaller0: entered allmulticast mode [ 1745.205712][ T2903] tipc: Resetting bearer [ 1745.685246][ T5898] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1745.758010][ T6109] usb 5-1: new low-speed USB device number 111 using dummy_hcd [ 1745.815018][ T5898] usb 6-1: device descriptor read/64, error -71 [ 1745.885195][T19876] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1745.915104][ T6109] usb 5-1: Invalid ep0 maxpacket: 64 [ 1746.035024][T19876] usb 2-1: Using ep0 maxpacket: 8 [ 1746.042397][T19876] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 1746.050763][ T6109] usb 5-1: new low-speed USB device number 112 using dummy_hcd [ 1746.061938][T19876] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1746.071164][T19876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1746.075193][ T5898] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1746.079257][T19876] usb 2-1: Product: syz [ 1746.092037][T19876] usb 2-1: Manufacturer: syz [ 1746.098737][T19876] usb 2-1: SerialNumber: syz [ 1746.106915][T19876] usb 2-1: config 0 descriptor?? [ 1746.116166][T19876] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1746.124200][T19876] usb 2-1: setting power ON [ 1746.128793][T19876] dvb-usb: bulk message failed: -22 (2/0) [ 1746.139068][T19876] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1746.149251][T19876] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1746.157905][T19876] usb 2-1: media controller created [ 1746.180271][T19876] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1746.204059][T19876] usb 2-1: selecting invalid altsetting 6 [ 1746.210073][T19876] usb 2-1: digital interface selection failed (-22) [ 1746.216977][ T6109] usb 5-1: Invalid ep0 maxpacket: 64 [ 1746.224518][T19876] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1746.233459][ T6109] usb usb5-port1: attempt power cycle [ 1746.235096][ T5898] usb 6-1: device descriptor read/64, error -71 [ 1746.240678][T19876] usb 2-1: setting power OFF [ 1746.251327][T19876] dvb-usb: bulk message failed: -22 (2/0) [ 1746.257452][T19876] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1746.267288][T19876] (NULL device *): no alternate interface [ 1746.296735][T19876] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1746.375451][ T5898] usb usb6-port1: attempt power cycle [ 1746.404146][ T2920] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7327'. [ 1746.413339][ T2920] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7327'. [ 1746.422759][ T2920] netlink: 492 bytes leftover after parsing attributes in process `syz.1.7327'. [ 1746.434103][ T2920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1746.443028][ T2920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1746.543497][ C1] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1746.558336][ T6097] imon:send_packet: packet tx failed (-71) [ 1746.587043][ T6097] imon 7-1:0.0: panel buttons/knobs setup failed [ 1746.625346][ T6109] usb 5-1: new low-speed USB device number 113 using dummy_hcd [ 1746.647580][ T6097] rc_core: IR keymap rc-imon-pad not found [ 1746.657679][ T6109] usb 5-1: Invalid ep0 maxpacket: 64 [ 1746.676918][ T6097] Registered IR keymap rc-empty [ 1746.705665][ T6097] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1746.735043][ T6097] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1746.744430][ T5898] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1746.753926][ T6097] imon:send_packet: packet tx failed (-71) [ 1746.777052][ T6097] imon 7-1:0.0: remote input dev register failed [ 1746.783714][ T6097] imon 7-1:0.0: imon_init_intf0: rc device setup failed [ 1746.794743][ T5898] usb 6-1: device descriptor read/8, error -71 [ 1746.806808][ T6109] usb 5-1: new low-speed USB device number 114 using dummy_hcd [ 1746.828930][ T6097] imon 7-1:0.0: unable to initialize intf0, err 0 [ 1746.835569][ T6097] imon:imon_probe: failed to initialize context! [ 1746.842625][ T6097] imon 7-1:0.0: unable to register, err -19 [ 1746.846014][ T6109] usb 5-1: Invalid ep0 maxpacket: 64 [ 1746.854152][ T6109] usb usb5-port1: unable to enumerate USB device [ 1746.866305][ T6097] usb 7-1: USB disconnect, device number 64 [ 1747.045562][ T5898] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1747.069548][ T5898] usb 6-1: device descriptor read/8, error -71 [ 1747.185472][ T5898] usb usb6-port1: unable to enumerate USB device [ 1747.453835][ T2939] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1747.835130][ T6109] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1747.995746][ T6109] usb 7-1: Using ep0 maxpacket: 32 [ 1748.010103][ T6109] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1748.022296][ T6109] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1748.033639][ T6109] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1748.043592][ T6109] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1748.058976][ T6109] usb 7-1: config 0 descriptor?? [ 1748.700056][T19868] usb 2-1: USB disconnect, device number 70 [ 1749.023509][ T2967] netlink: 324 bytes leftover after parsing attributes in process `syz.1.7340'. [ 1751.155861][ T2981] netlink: 'syz.7.7345': attribute type 1 has an invalid length. [ 1751.163800][ T2981] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1751.615599][ T6097] usb 7-1: USB disconnect, device number 65 [ 1752.255018][T30598] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1752.415071][T30598] usb 6-1: Using ep0 maxpacket: 32 [ 1752.444279][T30598] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1752.474352][T30598] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1752.508307][T30598] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1752.523089][T30598] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1752.540762][T30598] usb 6-1: Product: syz [ 1752.549744][T30598] usb 6-1: Manufacturer: syz [ 1752.559566][T30598] usb 6-1: SerialNumber: syz [ 1752.602699][T30598] usb 6-1: config 0 descriptor?? [ 1753.365043][T19868] usb 7-1: new low-speed USB device number 66 using dummy_hcd [ 1753.517167][T19868] usb 7-1: config 0 has an invalid interface number: 168 but max is 0 [ 1753.525490][T19868] usb 7-1: config 0 has no interface number 0 [ 1753.531627][T19868] usb 7-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=dd.b8 [ 1753.542531][T19868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1753.566333][T19868] usb 7-1: config 0 descriptor?? [ 1753.573921][T19868] lan78xx 7-1:0.168 (unnamed net_device) (uninitialized): USB bus speed not supported [ 1753.584061][T19868] lan78xx 7-1:0.168: probe with driver lan78xx failed with error -5 [ 1753.792881][ T3029] bridge0: entered promiscuous mode [ 1753.800361][ T3029] batman_adv: batadv0: Adding interface: macsec1 [ 1753.807038][ T3029] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1753.837659][ T3029] batman_adv: batadv0: Interface activated: macsec1 [ 1754.938787][ T3051] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7365'. [ 1754.977505][ T3054] binder: 3053:3054 ioctl 8933 200000000580 returned -22 [ 1755.418850][ T3070] cgroup: fork rejected by pids controller in /syz7 [ 1755.505179][ T6097] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1755.676557][ T6097] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1755.686228][ T6097] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1755.697945][ T6097] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1755.710618][ T6097] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1755.723672][ T6097] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1755.738138][ T6097] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1755.791768][ T6097] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1755.826054][ T5898] usb 6-1: USB disconnect, device number 122 [ 1755.833717][ T6097] usb 5-1: Product: syz [ 1755.839935][ T6097] usb 5-1: Manufacturer: syz [ 1755.844630][ T6097] usb 5-1: SerialNumber: syz [ 1755.886927][ T6097] cdc_ncm 5-1:1.0: skipping garbage [ 1755.894359][ T6097] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 1755.908067][ T6097] cdc_ncm 5-1:1.0: bind() failure [ 1756.106620][T19868] usb 7-1: USB disconnect, device number 66 [ 1756.156101][ T3064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7368'. [ 1756.203372][ T6097] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1756.242360][ T6097] usb 5-1: USB disconnect, device number 115 [ 1756.837166][ T3247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1756.845999][ T3247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1756.859293][ T3247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1756.881538][ T3247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1757.025127][ T6109] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1757.065027][T19868] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1757.245751][T30598] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1757.253684][ T6109] usb 6-1: device descriptor read/64, error -71 [ 1757.410423][ T3261] bridge_slave_0: default FDB implementation only supports local addresses [ 1757.438211][T30598] usb 2-1: Using ep0 maxpacket: 32 [ 1757.450767][T30598] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1757.461373][T30598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1757.474232][T30598] usb 2-1: config 0 descriptor?? [ 1757.489713][T30598] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1757.515153][ T6109] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1757.655203][ T6109] usb 6-1: device descriptor read/64, error -71 [ 1757.713182][T30598] gspca_nw80x: reg_r err -71 [ 1757.733335][T30598] nw80x 2-1:0.0: probe with driver nw80x failed with error -71 [ 1757.763075][T30598] usb 2-1: USB disconnect, device number 71 [ 1757.775112][T19868] usb 5-1: device descriptor read/64, error -71 [ 1757.777188][ T6109] usb usb6-port1: attempt power cycle [ 1758.015062][T19868] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1758.125022][ T5898] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1758.155008][ T6109] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1758.168738][T19868] usb 5-1: config 0 has an invalid interface number: 102 but max is 0 [ 1758.178155][T19868] usb 5-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config [ 1758.185657][ T6109] usb 6-1: device descriptor read/8, error -71 [ 1758.189111][T19868] usb 5-1: config 0 has no interface number 0 [ 1758.201919][T19868] usb 5-1: New USB device found, idVendor=2001, idProduct=1a00, bcdDevice=38.f5 [ 1758.214264][T19868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1758.234706][T19868] usb 5-1: config 0 descriptor?? [ 1758.276599][ T5898] usb 7-1: config 0 has no interfaces? [ 1758.284164][ T5898] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1758.293340][ T5898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1758.301394][ T5898] usb 7-1: Product: syz [ 1758.305625][ T5898] usb 7-1: Manufacturer: syz [ 1758.310257][ T5898] usb 7-1: SerialNumber: syz [ 1758.319385][ T5898] usb 7-1: config 0 descriptor?? [ 1758.393823][ T3293] kvm: user requested TSC rate below hardware speed [ 1758.427416][ T6109] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1758.465850][ T6109] usb 6-1: device descriptor read/8, error -71 [ 1758.585818][ T6109] usb usb6-port1: unable to enumerate USB device [ 1758.619406][ T5898] usb 7-1: USB disconnect, device number 67 [ 1758.847261][T19868] asix 5-1:0.102 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1758.859808][T19868] asix 5-1:0.102: probe with driver asix failed with error -71 [ 1758.879027][T19868] usb 5-1: USB disconnect, device number 117 [ 1759.325821][ T3298] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7392'. [ 1759.340424][ T3300] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1759.592337][ T3306] syz_tun: entered promiscuous mode [ 1759.601566][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1759.611665][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 1759.625696][ T3306] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1759.698516][ T3307] gretap0: refused to change device tx_queue_len [ 1759.745901][ T3307] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1759.881946][ T3315] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7397'. [ 1761.137353][T19868] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1761.254249][ T3354] trusted_key: encrypted_key: key user:syz not found [ 1761.295027][T19868] usb 7-1: Using ep0 maxpacket: 32 [ 1761.312803][T19868] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1761.326994][T19868] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1761.337220][T19868] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1761.348808][ T3353] trusted_key: encrypted_key: key user:syz not found [ 1761.349086][T19868] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 26 [ 1761.372946][T19868] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1761.382794][T19868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1761.390983][T19868] usb 7-1: SerialNumber: syz [ 1761.495079][ T6097] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1761.505069][ T5898] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1761.601525][ T3335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1761.610683][ T3335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1761.636298][ T6097] usb 6-1: device descriptor read/64, error -71 [ 1761.643649][T19868] usb 7-1: USB disconnect, device number 68 [ 1761.670537][ T5898] usb 5-1: config 0 has an invalid interface number: 102 but max is 0 [ 1761.678929][ T5898] usb 5-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config [ 1761.690001][ T5898] usb 5-1: config 0 has no interface number 0 [ 1761.698031][ T5898] usb 5-1: New USB device found, idVendor=2001, idProduct=1a00, bcdDevice=38.f5 [ 1761.708208][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1761.718351][ T5898] usb 5-1: config 0 descriptor?? [ 1761.915672][ T6097] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1762.068678][ T6097] usb 6-1: device descriptor read/64, error -71 [ 1762.185569][ T6097] usb usb6-port1: attempt power cycle [ 1762.236001][ T6109] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1762.334604][ T5898] asix 5-1:0.102 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1762.345728][ T5898] asix 5-1:0.102: probe with driver asix failed with error -71 [ 1762.357423][ T5898] usb 5-1: USB disconnect, device number 118 [ 1762.376129][ T6109] usb 2-1: device descriptor read/64, error -71 [ 1762.455403][T19868] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1762.525012][ T6097] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1762.545630][ T6097] usb 6-1: device descriptor read/8, error -71 [ 1762.605038][T19868] usb 7-1: Using ep0 maxpacket: 16 [ 1762.611869][T19868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1762.622857][T19868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1762.625016][ T6109] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1762.632718][T19868] usb 7-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1762.649439][T19868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1762.660004][T19868] usb 7-1: config 0 descriptor?? [ 1762.765068][ T6109] usb 2-1: device descriptor read/64, error -71 [ 1762.785107][ T6097] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1762.805632][ T6097] usb 6-1: device descriptor read/8, error -71 [ 1762.878172][ T6109] usb usb2-port1: attempt power cycle [ 1762.904622][T19868] apple 0003:05AC:024B.008F: unknown main item tag 0x7 [ 1762.921650][ T6097] usb usb6-port1: unable to enumerate USB device [ 1762.929267][T19868] apple 0003:05AC:024B.008F: unbalanced collection at end of report description [ 1762.942069][T19868] apple 0003:05AC:024B.008F: parse failed [ 1762.949587][T19868] apple 0003:05AC:024B.008F: probe with driver apple failed with error -22 [ 1763.104593][T19868] usb 7-1: USB disconnect, device number 69 [ 1763.235308][ T6109] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1763.255835][ T6109] usb 2-1: device descriptor read/8, error -71 [ 1763.415030][ T5898] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1763.515204][ T6109] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1763.545710][ T6109] usb 2-1: device descriptor read/8, error -71 [ 1763.565057][ T5898] usb 5-1: Using ep0 maxpacket: 32 [ 1763.571635][ T5898] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1763.580109][ T5898] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1763.591709][ T5898] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1763.603718][ T5898] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1763.616988][ T5898] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1763.626018][ T5898] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1763.645127][ T5898] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1763.653584][ T5898] usb 5-1: Product: syz [ 1763.659048][ T5898] usb 5-1: Manufacturer: syz [ 1763.663660][ T5898] usb 5-1: SerialNumber: syz [ 1763.665652][ T6109] usb usb2-port1: unable to enumerate USB device [ 1763.686388][ T5898] usb 5-1: config 0 descriptor?? [ 1763.707233][ T5898] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1763.719941][ T5898] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1764.605071][ T5898] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1764.779217][ T5898] usb 6-1: config 2 has no interfaces? [ 1764.810365][ T5898] usb 6-1: New USB device found, idVendor=05d1, idProduct=1021, bcdDevice=b1.7d [ 1764.822274][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.830731][ T5898] usb 6-1: Product: syz [ 1764.836338][ T5898] usb 6-1: Manufacturer: syz [ 1764.842268][ T5898] usb 6-1: SerialNumber: syz [ 1764.957901][ T3400] netlink: 'syz.6.7423': attribute type 12 has an invalid length. [ 1764.968686][ T3400] netlink: 9472 bytes leftover after parsing attributes in process `syz.6.7423'. [ 1765.455673][T30598] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1765.515931][ T6109] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1765.617087][T30598] usb 7-1: config 0 has an invalid interface number: 102 but max is 0 [ 1765.625573][T30598] usb 7-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config [ 1765.636380][T30598] usb 7-1: config 0 has no interface number 0 [ 1765.643709][T30598] usb 7-1: New USB device found, idVendor=2001, idProduct=1a00, bcdDevice=38.f5 [ 1765.652971][ T6109] usb 2-1: device descriptor read/64, error -71 [ 1765.659592][T30598] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1765.670160][T30598] usb 7-1: config 0 descriptor?? [ 1765.905924][ T6109] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1766.045199][ T6109] usb 2-1: device descriptor read/64, error -71 [ 1766.155355][ T6109] usb usb2-port1: attempt power cycle [ 1766.290358][T30598] asix 7-1:0.102 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1766.313386][T30598] asix 7-1:0.102: probe with driver asix failed with error -71 [ 1766.336413][T30598] usb 7-1: USB disconnect, device number 70 [ 1766.495054][ T6109] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1766.527274][ T6109] usb 2-1: device descriptor read/8, error -71 [ 1766.584774][ T6097] hid-generic 0004:0003:0008.0090: unknown main item tag 0x0 [ 1766.594985][ T6097] hid-generic 0004:0003:0008.0090: unknown main item tag 0x0 [ 1766.602464][ T6097] hid-generic 0004:0003:0008.0090: unknown main item tag 0x0 [ 1766.610017][ T6097] hid-generic 0004:0003:0008.0090: unknown main item tag 0x0 [ 1766.617589][ T6097] hid-generic 0004:0003:0008.0090: unknown main item tag 0x0 [ 1766.625550][ T6097] hid-generic 0004:0003:0008.0090: unknown main item tag 0x0 [ 1766.633007][ T6097] hid-generic 0004:0003:0008.0090: unknown main item tag 0x0 [ 1766.640621][ T6097] hid-generic 0004:0003:0008.0090: unknown main item tag 0x0 [ 1766.648098][ T6097] hid-generic 0004:0003:0008.0090: unknown main item tag 0x0 [ 1766.695969][ T6097] hid-generic 0004:0003:0008.0090: hidraw0: HID v0.81 Device [syz1] on syz0 [ 1766.770508][ T3421] fido_id[3421]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1766.786954][ T6109] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1766.816940][ T6109] usb 2-1: device descriptor read/8, error -71 [ 1766.925647][ T6109] usb usb2-port1: unable to enumerate USB device [ 1767.372986][ T5898] usb 6-1: USB disconnect, device number 5 [ 1767.995107][ T5898] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1768.228448][ T5898] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1768.241557][ T5898] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1768.251562][ T5898] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1768.261479][ T5898] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1768.274199][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1768.313098][ T5898] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1768.415402][T30598] usb 7-1: new full-speed USB device number 71 using dummy_hcd [ 1768.532865][ T5898] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1768.586982][T30598] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1768.602162][T30598] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1768.616127][T30598] usb 7-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1768.628191][T30598] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1768.638076][T30598] usb 7-1: Manufacturer: syz [ 1768.645965][T30598] usb 7-1: config 0 descriptor?? [ 1769.061850][ T3441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1769.093458][ T3441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1769.265291][ T3389] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 1769.326746][T30598] usbhid 7-1:0.0: can't add hid device: -71 [ 1769.353518][T30598] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1769.396886][T30598] usb 7-1: USB disconnect, device number 71 [ 1769.504791][ T5898] usb 5-1: USB disconnect, device number 119 [ 1769.536160][ T5898] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1769.929939][ T5898] usb 5-1: new full-speed USB device number 120 using dummy_hcd [ 1770.257154][ T5898] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1770.265258][ T5898] usb 5-1: config 0 has no interface number 0 [ 1770.271403][ T5898] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1770.280724][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1770.291079][ T5898] usb 5-1: config 0 descriptor?? [ 1770.300428][ T5898] usb 5-1: selecting invalid altsetting 1 [ 1770.306639][ T5898] dvb_ttusb_budget: ttusb_init_controller: error [ 1770.313010][ T5898] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1770.350459][ T5898] DVB: Unable to find symbol cx22700_attach() [ 1770.777281][ T5898] DVB: Unable to find symbol tda10046_attach() [ 1770.784146][ T5898] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1771.236437][ T5898] usb 6-1: USB disconnect, device number 6 [ 1771.270103][T30598] usb 5-1: USB disconnect, device number 120 [ 1771.587646][ T3477] netlink: 'syz.6.7449': attribute type 12 has an invalid length. [ 1771.599690][ T3477] netlink: 9472 bytes leftover after parsing attributes in process `syz.6.7449'. [ 1772.506401][ T5898] usb 7-1: new full-speed USB device number 72 using dummy_hcd [ 1772.655013][ T6097] usb 5-1: new full-speed USB device number 121 using dummy_hcd [ 1772.666794][ T5898] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1772.677339][ T5898] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1772.688649][ T5898] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 1772.703157][ T5898] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1772.720404][ T5898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1772.730015][ T5898] usb 7-1: SerialNumber: syz [ 1772.746157][ T5898] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 1772.754122][ T5898] cdc_acm 7-1:1.0: This needs exactly 3 endpoints [ 1772.760904][ T5898] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -22 [ 1772.807481][ T6097] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1772.820318][ T6097] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1772.834372][ T6097] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1772.847256][ T6097] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1772.860682][ T6097] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1772.870421][ T6097] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1772.879758][ T6097] usb 5-1: Product: syz [ 1772.884035][ T6097] usb 5-1: Manufacturer: syz [ 1772.889240][ T6097] usb 5-1: SerialNumber: syz [ 1772.901728][ T3500] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1772.914861][ T6097] cdc_mbim 5-1:1.0: skipping garbage [ 1773.044751][ T5898] usb 7-1: USB disconnect, device number 72 [ 1773.406989][ T3508] trusted_key: encrypted_key: insufficient parameters specified [ 1773.454010][ T3509] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1773.471770][ T3509] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1773.485750][ T3509] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1773.791151][ T3515] FAULT_INJECTION: forcing a failure. [ 1773.791151][ T3515] name failslab, interval 1, probability 0, space 0, times 0 [ 1773.804233][ T3515] CPU: 1 UID: 0 PID: 3515 Comm: syz.5.7460 Not tainted syzkaller #0 PREEMPT(full) [ 1773.804249][ T3515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1773.804256][ T3515] Call Trace: [ 1773.804261][ T3515] [ 1773.804269][ T3515] dump_stack_lvl+0x189/0x250 [ 1773.804285][ T3515] ? __pfx____ratelimit+0x10/0x10 [ 1773.804301][ T3515] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1773.804311][ T3515] ? __pfx__printk+0x10/0x10 [ 1773.804325][ T3515] ? __pfx___might_resched+0x10/0x10 [ 1773.804337][ T3515] ? fs_reclaim_acquire+0x7d/0x100 [ 1773.804352][ T3515] should_fail_ex+0x414/0x560 [ 1773.804371][ T3515] should_failslab+0xa8/0x100 [ 1773.804384][ T3515] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1773.804395][ T3515] ? __alloc_skb+0x112/0x2d0 [ 1773.804407][ T3515] ? stack_trace_save+0x9c/0xe0 [ 1773.804420][ T3515] __alloc_skb+0x112/0x2d0 [ 1773.804435][ T3515] alloc_skb_with_frags+0xca/0x890 [ 1773.804449][ T3515] ? kasan_save_stack+0x4d/0x60 [ 1773.804459][ T3515] ? kasan_save_stack+0x3e/0x60 [ 1773.804468][ T3515] ? kasan_record_aux_stack+0xbd/0xd0 [ 1773.804481][ T3515] ? call_rcu+0x157/0x9c0 [ 1773.804493][ T3515] ? rt_cache_route+0x243/0x2a0 [ 1773.804505][ T3515] ? rt_set_nexthop+0x4c8/0xa80 [ 1773.804516][ T3515] ? ip_route_output_key_hash_rcu+0x196a/0x23e0 [ 1773.804527][ T3515] ? ip_route_output_key_hash+0x174/0x280 [ 1773.804537][ T3515] ? ip_route_output_flow+0x2a/0x150 [ 1773.804546][ T3515] ? udp_sendmsg+0x142e/0x2170 [ 1773.804558][ T3515] ? udpv6_sendmsg+0xc1c/0x2510 [ 1773.804567][ T3515] ? __sock_sendmsg+0xe5/0x270 [ 1773.804580][ T3515] sock_alloc_send_pskb+0x84d/0x980 [ 1773.804599][ T3515] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1773.804617][ T3515] __ip_append_data+0x2ce8/0x40c0 [ 1773.804639][ T3515] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1773.804661][ T3515] ? __pfx___ip_append_data+0x10/0x10 [ 1773.804671][ T3515] ? ipv4_mtu+0x53b/0x650 [ 1773.804682][ T3515] ? ip_setup_cork+0x577/0x9a0 [ 1773.804695][ T3515] ip_make_skb+0x1de/0x3f0 [ 1773.804709][ T3515] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1773.804721][ T3515] ? __pfx_ip_make_skb+0x10/0x10 [ 1773.804741][ T3515] udp_sendmsg+0x1925/0x2170 [ 1773.804762][ T3515] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1773.804774][ T3515] ? __pfx_udp_sendmsg+0x10/0x10 [ 1773.804794][ T3515] ? get_random_u32+0x155/0x940 [ 1773.804810][ T3515] ? register_lock_class+0x51/0x320 [ 1773.804822][ T3515] ? get_random_u32+0x155/0x940 [ 1773.804834][ T3515] ? __lock_acquire+0xab9/0xd20 [ 1773.804850][ T3515] udpv6_sendmsg+0xc1c/0x2510 [ 1773.804866][ T3515] ? udp_lib_get_port+0x164b/0x1b10 [ 1773.804879][ T3515] ? udp_lib_get_port+0x164b/0x1b10 [ 1773.804891][ T3515] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1773.804912][ T3515] ? __lock_acquire+0xab9/0xd20 [ 1773.804946][ T3515] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1773.804967][ T3515] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1773.804994][ T3515] ? inet_send_prepare+0x1b9/0x270 [ 1773.805018][ T3515] ? inet_send_prepare+0x1b9/0x270 [ 1773.805043][ T3515] ? inet6_sendmsg+0xe4/0x120 [ 1773.805068][ T3515] __sock_sendmsg+0xe5/0x270 [ 1773.805093][ T3515] ____sys_sendmsg+0x52d/0x830 [ 1773.805116][ T3515] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1773.805151][ T3515] ? import_iovec+0x74/0xa0 [ 1773.805177][ T3515] ___sys_sendmsg+0x21f/0x2a0 [ 1773.805196][ T3515] ? __pfx____sys_sendmsg+0x10/0x10 [ 1773.805253][ T3515] ? __fget_files+0x2a/0x420 [ 1773.805274][ T3515] ? __fget_files+0x3a0/0x420 [ 1773.805300][ T3515] __sys_sendmmsg+0x227/0x430 [ 1773.805317][ T3515] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1773.805337][ T3515] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1773.805365][ T3515] ? ksys_write+0x22a/0x250 [ 1773.805382][ T3515] ? __pfx_ksys_write+0x10/0x10 [ 1773.805400][ T3515] __x64_sys_sendmmsg+0xa0/0xc0 [ 1773.805415][ T3515] do_syscall_64+0xfa/0xfa0 [ 1773.805430][ T3515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1773.805443][ T3515] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1773.805458][ T3515] ? clear_bhb_loop+0x60/0xb0 [ 1773.805474][ T3515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1773.805488][ T3515] RIP: 0033:0x7fb5f4f8efc9 [ 1773.805502][ T3515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1773.805514][ T3515] RSP: 002b:00007fb5f5d83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1773.805530][ T3515] RAX: ffffffffffffffda RBX: 00007fb5f51e5fa0 RCX: 00007fb5f4f8efc9 [ 1773.805541][ T3515] RDX: 0000000000000002 RSI: 0000200000002f80 RDI: 0000000000000003 [ 1773.805551][ T3515] RBP: 00007fb5f5d83090 R08: 0000000000000000 R09: 0000000000000000 [ 1773.805560][ T3515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1773.805568][ T3515] R13: 00007fb5f51e6038 R14: 00007fb5f51e5fa0 R15: 00007fb5f530fa28 [ 1773.805591][ T3515] [ 1774.855993][ T3520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1774.955353][ T3520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1775.302226][ T3544] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1775.311641][T19867] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1775.466086][T19867] usb 6-1: Using ep0 maxpacket: 16 [ 1775.500446][T19867] usb 6-1: config 0 has an invalid interface number: 49 but max is 0 [ 1775.513279][T19867] usb 6-1: config 0 has no interface number 0 [ 1775.522093][T19867] usb 6-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 1775.533431][T19867] usb 6-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1775.546395][T19867] usb 6-1: config 0 interface 49 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1775.556715][T19867] usb 6-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 1775.596532][T19867] usb 6-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 1775.615399][T19867] usb 6-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 1775.624554][T19867] usb 6-1: Product: syz [ 1775.629165][T19867] usb 6-1: Manufacturer: syz [ 1775.635213][T19867] usb 6-1: SerialNumber: syz [ 1775.662218][T19867] usb 6-1: config 0 descriptor?? [ 1775.673919][ T3534] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1775.735167][T19868] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1775.922069][T19868] usb 2-1: config 0 has an invalid interface number: 102 but max is 0 [ 1775.955553][T19868] usb 2-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config [ 1776.001923][T19868] usb 2-1: config 0 has no interface number 0 [ 1776.030723][T19868] usb 2-1: New USB device found, idVendor=2001, idProduct=1a00, bcdDevice=38.f5 [ 1776.079213][T19867] usb 6-1: USB disconnect, device number 7 [ 1776.103003][T19868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1776.156139][T19868] usb 2-1: config 0 descriptor?? [ 1776.190380][ T6097] cdc_mbim 5-1:1.0: failed GET_NTB_PARAMETERS [ 1776.197044][ T6097] cdc_mbim 5-1:1.0: bind() failure [ 1776.218396][ T6097] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1776.228341][ T6097] cdc_ncm 5-1:1.1: bind() failure [ 1776.247032][ T6097] usb 5-1: USB disconnect, device number 121 [ 1776.313280][ T3558] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 1776.344273][ T3560] netlink: 830 bytes leftover after parsing attributes in process `syz.5.7471'. [ 1776.384436][ T3560] bond_slave_0: entered promiscuous mode [ 1776.391380][ T3560] bond_slave_1: entered promiscuous mode [ 1776.625501][T30598] usb 7-1: new full-speed USB device number 73 using dummy_hcd [ 1776.788326][T19868] asix 2-1:0.102 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1776.789202][T30598] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1776.810940][T19868] asix 2-1:0.102: probe with driver asix failed with error -71 [ 1776.844261][T30598] usb 7-1: config 0 has no interface number 0 [ 1776.852362][T19868] usb 2-1: USB disconnect, device number 80 [ 1776.882263][T30598] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1776.892526][T30598] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1776.912890][T30598] usb 7-1: config 0 descriptor?? [ 1776.927625][T30598] usb 7-1: selecting invalid altsetting 1 [ 1776.961478][T30598] dvb_ttusb_budget: ttusb_init_controller: error [ 1776.987351][T30598] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1777.039947][ T3572] netlink: 'syz.4.7475': attribute type 8 has an invalid length. [ 1777.060856][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1777.060873][ T30] audit: type=1326 audit(1760809945.645:3192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3565 comm="syz.4.7475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1338efc9 code=0x7ffc0000 [ 1777.131237][ T3572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7475'. [ 1777.237937][ T3592] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1777.246698][ T3589] sctp: [Deprecated]: syz.7.7477 (pid 3589) Use of int in maxseg socket option. [ 1777.246698][ T3589] Use struct sctp_assoc_value instead [ 1777.274310][T30598] DVB: Unable to find symbol cx22700_attach() [ 1777.276977][ T30] audit: type=1326 audit(1760809945.705:3193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3565 comm="syz.4.7475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1338efc9 code=0x7ffc0000 [ 1777.464681][ T30] audit: type=1326 audit(1760809945.705:3194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3565 comm="syz.4.7475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e1338efc9 code=0x7ffc0000 [ 1777.525792][ T30] audit: type=1326 audit(1760809945.705:3195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3565 comm="syz.4.7475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1338efc9 code=0x7ffc0000 [ 1777.555097][T30598] DVB: Unable to find symbol tda10046_attach() [ 1777.562710][T30598] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1777.607356][T30598] usb 7-1: USB disconnect, device number 73 [ 1777.617116][ T30] audit: type=1326 audit(1760809945.715:3196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3565 comm="syz.4.7475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4e1338efc9 code=0x7ffc0000 [ 1777.688316][ T30] audit: type=1326 audit(1760809945.715:3197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3565 comm="syz.4.7475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1338efc9 code=0x7ffc0000 [ 1777.799013][ T30] audit: type=1326 audit(1760809945.715:3198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3565 comm="syz.4.7475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e1338efc9 code=0x7ffc0000 [ 1777.895826][ T30] audit: type=1326 audit(1760809945.715:3199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3565 comm="syz.4.7475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1338efc9 code=0x7ffc0000 [ 1777.962794][ T30] audit: type=1326 audit(1760809945.715:3200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3565 comm="syz.4.7475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4e1338efc9 code=0x7ffc0000 [ 1778.013131][ T3606] syzkaller0: entered promiscuous mode [ 1778.026878][ T3606] syzkaller0: entered allmulticast mode [ 1779.905548][T30598] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1779.959664][ T3635] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7489'. [ 1780.161360][T30598] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1780.171130][T30598] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1780.179138][T30598] usb 6-1: can't read configurations, error -71 [ 1781.236297][T19867] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1781.399667][T19867] usb 5-1: config 0 has an invalid interface number: 102 but max is 0 [ 1781.422610][T19867] usb 5-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config [ 1781.471229][T19867] usb 5-1: config 0 has no interface number 0 [ 1781.489585][T19867] usb 5-1: New USB device found, idVendor=2001, idProduct=1a00, bcdDevice=38.f5 [ 1781.498943][T19867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1781.514144][T19867] usb 5-1: config 0 descriptor?? [ 1781.517379][T30598] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1781.698118][T30598] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1781.716403][T30598] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1781.727353][T30598] usb 2-1: Product: syz [ 1781.731562][T30598] usb 2-1: SerialNumber: syz [ 1781.742346][T30598] usb 2-1: config 0 descriptor?? [ 1781.927088][ T6097] usb 7-1: new full-speed USB device number 74 using dummy_hcd [ 1781.976741][ T3650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1782.015436][ T3650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1782.085047][ T6097] usb 7-1: device descriptor read/64, error -71 [ 1782.107294][ T3661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1782.141274][ T3661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1782.188550][T19867] asix 5-1:0.102 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1782.246562][T19867] asix 5-1:0.102: probe with driver asix failed with error -71 [ 1782.307033][T19867] usb 5-1: USB disconnect, device number 122 [ 1782.335329][ T6097] usb 7-1: new full-speed USB device number 75 using dummy_hcd [ 1782.495005][ T6097] usb 7-1: device descriptor read/64, error -71 [ 1782.626033][ T6097] usb usb7-port1: attempt power cycle [ 1782.975024][ T6097] usb 7-1: new full-speed USB device number 76 using dummy_hcd [ 1783.005720][ T6097] usb 7-1: device descriptor read/8, error -71 [ 1783.265077][ T6097] usb 7-1: new full-speed USB device number 77 using dummy_hcd [ 1783.285972][ T6097] usb 7-1: device descriptor read/8, error -71 [ 1783.408676][ T6097] usb usb7-port1: unable to enumerate USB device [ 1783.409871][ T6109] usb 5-1: new full-speed USB device number 123 using dummy_hcd [ 1783.607017][ T6109] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 27750, setting to 64 [ 1783.637387][ T6097] hid_parser_main: 4087 callbacks suppressed [ 1783.637409][ T6097] hid-generic 0000:0000:0000.0091: unknown main item tag 0x0 [ 1783.652432][ T6109] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1783.662434][ T6097] hid-generic 0000:0000:0000.0091: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1783.679250][ T6109] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1783.699925][ T6109] usb 5-1: Product: syz [ 1783.709860][ T6109] usb 5-1: Manufacturer: syz [ 1783.720282][ T6109] usb 5-1: SerialNumber: syz [ 1783.737743][ T6109] usb 5-1: config 0 descriptor?? [ 1783.765086][ T6113] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1783.927962][ T6113] usb 6-1: config 7 has an invalid interface number: 238 but max is 3 [ 1783.936293][ T6113] usb 6-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1783.945060][ T6113] usb 6-1: config 7 has an invalid interface number: 160 but max is 3 [ 1783.953341][ T6113] usb 6-1: config 7 has an invalid interface number: 232 but max is 3 [ 1783.971934][ T6113] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1783.986984][ T6113] usb 6-1: config 7 has no interface number 0 [ 1783.993176][ T6113] usb 6-1: config 7 has no interface number 2 [ 1784.005069][ T6113] usb 6-1: config 7 has no interface number 3 [ 1784.022425][ T6113] usb 6-1: config 7 interface 238 altsetting 6 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 1784.033671][ T6113] usb 6-1: config 7 interface 238 altsetting 6 endpoint 0xC has invalid maxpacket 10151, setting to 64 [ 1784.053896][ T6113] usb 6-1: config 7 interface 238 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1784.068447][ T6113] usb 6-1: config 7 interface 238 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1784.081749][ T6113] usb 6-1: config 7 interface 238 altsetting 6 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1784.092849][ T6113] usb 6-1: config 7 interface 238 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 1784.104395][ T6113] usb 6-1: config 7 interface 238 altsetting 6 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1784.117245][ T6113] usb 6-1: config 7 interface 238 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 1784.128555][ T6113] usb 6-1: config 7 interface 238 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1784.139974][ T6113] usb 6-1: config 7 interface 238 altsetting 6 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1784.163916][ T6113] usb 6-1: config 7 interface 160 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1784.192027][ T6113] usb 6-1: config 7 interface 160 altsetting 9 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1784.219760][ T6113] usb 6-1: config 7 interface 160 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 1784.246721][ T6113] usb 6-1: config 7 interface 160 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 1784.269805][ T6113] usb 6-1: config 7 interface 160 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 1784.282208][ T6113] usb 6-1: config 7 interface 160 altsetting 9 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1784.295688][ T6113] usb 6-1: config 7 interface 160 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 1784.302075][ T6097] usb 5-1: USB disconnect, device number 123 [ 1784.306760][ T6113] usb 6-1: config 7 interface 160 altsetting 9 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1784.340444][ T6113] usb 6-1: config 7 interface 160 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 1784.351427][ T6113] usb 6-1: config 7 interface 160 altsetting 9 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1784.369148][T30598] usb 2-1: USB disconnect, device number 81 [ 1784.401908][ T6113] usb 6-1: config 7 interface 160 altsetting 9 has a duplicate endpoint with address 0xC, skipping [ 1784.439787][ T6113] usb 6-1: config 7 interface 160 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 1784.454003][ T6113] usb 6-1: config 7 interface 160 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 1784.465306][ T6113] usb 6-1: config 7 interface 160 altsetting 9 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1784.478087][ T6113] usb 6-1: config 7 interface 160 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 1784.490864][ T6113] usb 6-1: config 7 interface 160 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1784.526030][ T6113] usb 6-1: config 7 interface 1 altsetting 1 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1784.538035][ T6113] usb 6-1: config 7 interface 1 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 1784.549133][ T6113] usb 6-1: config 7 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1784.561809][ T6113] usb 6-1: config 7 interface 1 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 1784.572543][ T6113] usb 6-1: config 7 interface 1 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 1784.583256][ T6113] usb 6-1: config 7 interface 1 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 1784.601107][ T6113] usb 6-1: config 7 interface 1 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 1784.612586][ T6113] usb 6-1: config 7 interface 1 altsetting 1 has a duplicate endpoint with address 0x84, skipping [ 1784.760058][ T3692] macvtap0: entered promiscuous mode [ 1784.766592][ T3692] macvtap0: left promiscuous mode [ 1784.775434][ T6113] usb 6-1: config 7 interface 1 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 1784.786073][ T6113] usb 6-1: config 7 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1784.800496][ T6113] usb 6-1: config 7 interface 1 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 1784.811146][ T6113] usb 6-1: config 7 interface 1 altsetting 1 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 1784.824320][ T6113] usb 6-1: config 7 interface 232 altsetting 129 has a duplicate endpoint with address 0x6, skipping [ 1784.835314][ T6113] usb 6-1: config 7 interface 232 altsetting 129 has a duplicate endpoint with address 0x9, skipping [ 1784.848161][ T6113] usb 6-1: config 7 interface 232 altsetting 129 has a duplicate endpoint with address 0x2, skipping [ 1784.859480][ T6113] usb 6-1: config 7 interface 232 altsetting 129 has a duplicate endpoint with address 0xA, skipping [ 1784.874383][ T6113] usb 6-1: config 7 interface 232 altsetting 129 has a duplicate endpoint with address 0x8, skipping [ 1784.927919][ T6113] usb 6-1: config 7 interface 232 altsetting 129 has a duplicate endpoint with address 0xA, skipping [ 1785.046814][ T6113] usb 6-1: config 7 interface 232 altsetting 129 has a duplicate endpoint with address 0x8, skipping [ 1785.075459][ T6113] usb 6-1: config 7 interface 232 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 1785.102059][ T6113] usb 6-1: config 7 interface 232 altsetting 129 has a duplicate endpoint with address 0x6, skipping [ 1785.113475][ T6113] usb 6-1: config 7 interface 232 altsetting 129 has a duplicate endpoint with address 0x9, skipping [ 1785.125071][ T6113] usb 6-1: config 7 interface 232 altsetting 129 has a duplicate endpoint with address 0x6, skipping [ 1785.136320][ T6113] usb 6-1: config 7 interface 232 altsetting 129 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1785.148068][ T6113] usb 6-1: config 7 interface 232 altsetting 129 has 12 endpoint descriptors, different from the interface descriptor's value: 13 [ 1785.207927][ T6113] usb 6-1: config 7 interface 238 has no altsetting 0 [ 1785.214846][ T6113] usb 6-1: config 7 interface 160 has no altsetting 0 [ 1785.222097][ T6113] usb 6-1: config 7 interface 1 has no altsetting 0 [ 1785.229105][ T6113] usb 6-1: config 7 interface 232 has no altsetting 0 [ 1785.235480][ T6097] usb 5-1: new full-speed USB device number 124 using dummy_hcd [ 1785.246761][ T6113] usb 6-1: Dual-Role OTG device on HNP port [ 1785.253294][ T6113] usb 6-1: New USB device found, idVendor=084b, idProduct=a001, bcdDevice=1b.31 [ 1785.262780][ T6113] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1785.271652][ T6113] usb 6-1: Product: а [ 1785.276087][ T6113] usb 6-1: Manufacturer: 囖瘀玲ᷕ졣ꈗ㉨ⳍ〠ᶭ൥⟼섢ⴗ钿匧ᚂ〈뚦ᙠᓓৄ뵷꼹큷ﲋ嚉위元꬀ܜ헲訄邔릤╮ۻ䪨쨀⨄ㄓ⠲켓뢠痚ෆ漼૧玫Ϸ㊆㱮髾酪ᆭ䙭陿岲倊嘿⺸⣝癔Ẵ执꠲鞙ꞣ騗ↁ蔈㉛ጷ咡蒓竇귵炽጖傫➵ꑦ쿆ᦟ德쳒潘簯弛ﵗ즯ᲮᨖჄ䆐䛴몂獝홿讀꒼駕䤺氊뙁 [ 1785.317549][ T6113] usb 6-1: SerialNumber: syz [ 1785.416781][ T6097] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1785.426602][T19867] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1785.435617][ T6097] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 4 [ 1785.446805][ T6097] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1785.456183][ T6097] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1785.489553][ T6097] usb 5-1: config 0 descriptor?? [ 1785.534776][ T3710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7515'. [ 1785.607005][T19867] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1785.618418][T19867] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1785.632989][T19867] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1785.652023][T19867] usb 7-1: config 0 descriptor?? [ 1785.667802][T19867] pwc: Askey VC010 type 2 USB webcam detected. [ 1785.688892][ T6113] usb-storage 6-1:7.238: USB Mass Storage device detected [ 1785.704056][ T6097] ath6kl: Failed to submit usb control message: -71 [ 1785.714786][ T6113] usb-storage 6-1:7.238: Quirks match for vid 084b pid a001: 4 [ 1785.728516][ T6097] ath6kl: unable to send the bmi data to the device: -71 [ 1785.733682][ T3718] xfrm0: entered allmulticast mode [ 1785.737072][ T6097] ath6kl: Unable to send get target info: -71 [ 1785.749409][ T6097] ath6kl: Failed to init ath6kl core: -71 [ 1785.758678][ T6097] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1785.773822][ T6097] usb 5-1: USB disconnect, device number 124 [ 1785.805793][ T6113] usb-storage 6-1:7.160: USB Mass Storage device detected [ 1785.817764][ T6113] usb-storage 6-1:7.160: Quirks match for vid 084b pid a001: 4 [ 1785.865515][ T6113] usb-storage 6-1:7.1: USB Mass Storage device detected [ 1785.877756][ T6113] usb-storage 6-1:7.1: Quirks match for vid 084b pid a001: 4 [ 1785.925159][ T6113] usb-storage 6-1:7.232: USB Mass Storage device detected [ 1785.937106][ T6113] usb-storage 6-1:7.232: Quirks match for vid 084b pid a001: 4 [ 1785.994874][ T6113] usb 6-1: USB disconnect, device number 10 [ 1786.077864][ T3707] trusted_key: encrypted_key: insufficient parameters specified [ 1786.087017][T19867] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1786.094055][T19867] pwc: recv_control_msg error -32 req 02 val 2700 [ 1786.101485][T19867] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1786.314072][T19867] pwc: recv_control_msg error -71 req 04 val 1300 [ 1786.322907][T19867] pwc: recv_control_msg error -71 req 04 val 1400 [ 1786.333043][T19867] pwc: recv_control_msg error -71 req 02 val 2000 [ 1786.340328][T19867] pwc: recv_control_msg error -71 req 02 val 2100 [ 1786.348763][T19867] pwc: recv_control_msg error -71 req 04 val 1500 [ 1786.358562][T19867] pwc: recv_control_msg error -71 req 02 val 2500 [ 1786.375408][T19867] pwc: recv_control_msg error -71 req 02 val 2400 [ 1786.405096][T19867] pwc: recv_control_msg error -71 req 02 val 2600 [ 1786.420775][T19867] pwc: recv_control_msg error -71 req 02 val 2900 [ 1786.432901][T19867] pwc: recv_control_msg error -71 req 02 val 2800 [ 1786.445103][T19867] pwc: recv_control_msg error -71 req 04 val 1100 [ 1786.462230][T19867] pwc: recv_control_msg error -71 req 04 val 1200 [ 1786.483777][T19867] pwc: Registered as video103. [ 1786.499825][T19867] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input208 [ 1786.545292][T19867] usb 7-1: USB disconnect, device number 78 [ 1786.745211][T30598] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1786.916644][T30598] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1786.939709][T30598] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1786.960310][T30598] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1786.976541][T30598] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1787.007369][T30598] usb 2-1: Manufacturer: syz [ 1787.025037][T30598] usb 2-1: config 0 descriptor?? [ 1787.141879][ T3750] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1787.141879][ T3750] The task syz.5.7522 (3750) triggered the difference, watch for misbehavior. [ 1787.484314][T30598] pyra 0003:1E7D:2CF6.0092: unknown main item tag 0x0 [ 1787.493951][T30598] pyra 0003:1E7D:2CF6.0092: unknown main item tag 0x0 [ 1787.504648][T30598] pyra 0003:1E7D:2CF6.0092: unknown main item tag 0x0 [ 1787.523647][T30598] pyra 0003:1E7D:2CF6.0092: unknown main item tag 0x0 [ 1787.531437][T30598] pyra 0003:1E7D:2CF6.0092: unknown main item tag 0x0 [ 1787.538562][T30598] pyra 0003:1E7D:2CF6.0092: unknown main item tag 0x0 [ 1787.545760][T30598] pyra 0003:1E7D:2CF6.0092: unknown main item tag 0x0 [ 1787.558025][T30598] pyra 0003:1E7D:2CF6.0092: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1787.992264][ T3774] netlink: 'syz.7.7530': attribute type 12 has an invalid length. [ 1788.002909][ T3774] netlink: 9472 bytes leftover after parsing attributes in process `syz.7.7530'. [ 1788.098921][T30598] pyra 0003:1E7D:2CF6.0092: couldn't init struct pyra_device [ 1788.107052][T30598] pyra 0003:1E7D:2CF6.0092: couldn't install mouse [ 1788.116843][T30598] pyra 0003:1E7D:2CF6.0092: probe with driver pyra failed with error -5 [ 1788.665997][T19867] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 1788.825727][ T3806] random: crng reseeded on system resumption [ 1788.839897][T19867] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1788.855463][T19867] usb 6-1: config 0 has no interface number 0 [ 1788.862001][T19867] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1788.872573][T19867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1788.883244][T19867] usb 6-1: config 0 descriptor?? [ 1788.896630][T19867] usb 6-1: selecting invalid altsetting 1 [ 1788.902551][T19867] dvb_ttusb_budget: ttusb_init_controller: error [ 1788.908979][ T6097] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 1788.917065][T19867] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1788.958866][T19867] DVB: Unable to find symbol cx22700_attach() [ 1789.012798][T19867] DVB: Unable to find symbol tda10046_attach() [ 1789.019701][T19867] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1789.075154][ T6097] usb 7-1: Using ep0 maxpacket: 32 [ 1789.082338][ T6097] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 1789.102379][ T6097] usb 7-1: config 0 has no interface number 0 [ 1789.122046][ T6097] usb 7-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1789.189069][ T6097] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1789.203765][ T6097] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1789.212663][ T6097] usb 7-1: Product: syz [ 1789.217170][ T6097] usb 7-1: Manufacturer: syz [ 1789.221971][ T6097] usb 7-1: SerialNumber: syz [ 1789.233134][ T6097] usb 7-1: config 0 descriptor?? [ 1789.240014][T19867] usb 6-1: USB disconnect, device number 11 [ 1789.265908][ T6097] smsc95xx v2.0.0 [ 1789.275314][ T6097] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1789.289621][ T6097] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -22 [ 1789.522329][ T6113] usb 2-1: USB disconnect, device number 82 [ 1789.570451][ T3817] netlink: 'syz.1.7542': attribute type 12 has an invalid length. [ 1789.588615][ T3817] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.7542'. [ 1789.881269][T19867] usb 7-1: USB disconnect, device number 79 [ 1790.416977][ T3846] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7552'. [ 1790.489606][ T3850] netlink: 'syz.1.7553': attribute type 12 has an invalid length. [ 1790.497601][ T3850] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.7553'. [ 1790.633470][ T3851] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1790.977290][T19867] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1791.135041][ T6097] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1791.155067][T19867] usb 5-1: Using ep0 maxpacket: 32 [ 1791.161879][T19867] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1791.215060][T19867] usb 5-1: config 0 has no interface number 0 [ 1791.224369][ T3866] netlink: 64 bytes leftover after parsing attributes in process `syz.6.7558'. [ 1791.233337][T19867] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1791.233364][T19867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1791.233383][T19867] usb 5-1: Product: syz [ 1791.233397][T19867] usb 5-1: Manufacturer: syz [ 1791.233411][T19867] usb 5-1: SerialNumber: syz [ 1791.266071][T19867] usb 5-1: config 0 descriptor?? [ 1791.280006][T19867] smsc95xx v2.0.0 [ 1791.325299][ T3866] tmpfs: Unknown parameter '' [ 1791.346128][ T6097] usb 2-1: config 0 has no interfaces? [ 1791.362958][ T6097] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1791.372543][ T6097] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1791.381230][ T3867] netlink: 'syz.6.7558': attribute type 11 has an invalid length. [ 1791.390513][ T6097] usb 2-1: Product: syz [ 1791.394859][ T6097] usb 2-1: Manufacturer: syz [ 1791.403493][ T6097] usb 2-1: SerialNumber: syz [ 1791.472679][ T6097] usb 2-1: config 0 descriptor?? [ 1791.755319][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.761646][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.824185][ T3859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7556'. [ 1791.873158][ T3881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1791.903182][ T3881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1792.089393][ T6097] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 1792.225100][ T6097] usb 6-1: device descriptor read/64, error -71 [ 1792.312098][ T3891] netlink: 'syz.6.7566': attribute type 12 has an invalid length. [ 1792.332486][T19867] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1792.335031][ T3891] netlink: 9472 bytes leftover after parsing attributes in process `syz.6.7566'. [ 1792.358219][T19867] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1792.591300][ T3855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1792.646537][ T3855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1792.659136][ T3900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1792.672480][ T3900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1792.782313][T19867] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1792.811364][T19867] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 1792.843981][T19867] usb 5-1: USB disconnect, device number 125 [ 1792.885015][ T6113] usb 7-1: new full-speed USB device number 80 using dummy_hcd [ 1793.054808][ T6113] usb 7-1: config 0 has an invalid interface number: 205 but max is 0 [ 1793.067967][ T6113] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1793.088431][ T6113] usb 7-1: config 0 has no interface number 0 [ 1793.096501][ T6113] usb 7-1: config 0 interface 205 has no altsetting 0 [ 1793.106232][ T6113] usb 7-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1793.147329][ T6113] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.184520][ T6113] usb 7-1: Product: syz [ 1793.202587][ T6113] usb 7-1: Manufacturer: syz [ 1793.213670][ T6113] usb 7-1: SerialNumber: syz [ 1793.228585][ T6113] usb 7-1: config 0 descriptor?? [ 1793.250260][ T6113] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1793.278169][ T6113] dvb-usb: bulk message failed: -22 (3/0) [ 1793.311801][ T6113] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1793.332295][ T6113] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1793.357038][ T6113] usb 7-1: media controller created [ 1793.374764][ T6113] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1793.399539][ T6113] dvb-usb: bulk message failed: -22 (6/0) [ 1793.408367][ T6113] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1793.423516][ T6113] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input210 [ 1793.437569][ T6113] dvb-usb: schedule remote query interval to 150 msecs. [ 1793.445928][ T6113] dvb-usb: bulk message failed: -22 (3/0) [ 1793.475012][ T6113] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1793.495241][ T6113] usb 7-1: USB disconnect, device number 80 [ 1793.583366][ T6113] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1793.714410][ T6097] usb 2-1: USB disconnect, device number 83 [ 1794.001757][ T3941] netlink: 'syz.4.7581': attribute type 12 has an invalid length. [ 1794.076854][ T3941] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.7581'. [ 1794.746276][ T3948] netlink: 'syz.4.7583': attribute type 1 has an invalid length. [ 1794.798810][ T3948] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7583'. [ 1795.045028][T30598] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1795.197790][T30598] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1795.209824][T30598] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1795.215088][T19867] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1795.228607][T30598] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1795.242923][T30598] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1795.258500][T30598] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1795.268055][T30598] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1795.279509][T30598] usb 5-1: config 0 descriptor?? [ 1795.315104][ T6113] usb 7-1: new full-speed USB device number 81 using dummy_hcd [ 1795.408139][T19867] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1795.419208][T19867] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1795.429031][T19867] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1795.436216][T19867] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 1795.446618][T19867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1795.462445][T19867] usb 2-1: config 0 descriptor?? [ 1795.470184][ T6113] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1795.493367][ T6113] usb 7-1: config 0 has no interface number 0 [ 1795.500134][ T6113] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1795.509798][ T6113] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1795.521767][ T6113] usb 7-1: config 0 descriptor?? [ 1795.530517][ T6113] usb 7-1: selecting invalid altsetting 1 [ 1795.536583][ T6113] dvb_ttusb_budget: ttusb_init_controller: error [ 1795.544489][ T6113] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1795.613064][ T6113] DVB: Unable to find symbol cx22700_attach() [ 1795.659797][ T6113] DVB: Unable to find symbol tda10046_attach() [ 1795.668904][ T6113] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1795.703574][T30598] plantronics 0003:047F:FFFF.0093: ignoring exceeding usage max [ 1795.724812][T30598] plantronics 0003:047F:FFFF.0093: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1795.818021][ T3551] usb 7-1: USB disconnect, device number 81 [ 1795.909617][T19867] input: HID 054c:03d5 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:03D5.0094/input/input211 [ 1795.978876][T19867] sony 0003:054C:03D5.0094: input,hidraw1: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.1-1/input0 [ 1796.092561][T30598] usb 2-1: USB disconnect, device number 84 [ 1796.394569][ T3981] netlink: 'syz.6.7593': attribute type 12 has an invalid length. [ 1796.402719][ T3981] netlink: 9472 bytes leftover after parsing attributes in process `syz.6.7593'. [ 1796.644187][ T3988] bridge1: entered allmulticast mode [ 1797.956618][ T4022] netlink: 'syz.6.7605': attribute type 12 has an invalid length. [ 1797.995440][ T4022] netlink: 9472 bytes leftover after parsing attributes in process `syz.6.7605'. [ 1798.123709][ T6113] usb 5-1: USB disconnect, device number 126 [ 1798.148548][T30598] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1798.310561][T30598] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1798.319744][T30598] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1798.390256][T30598] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1798.414093][T30598] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1798.443110][T30598] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1798.472619][T30598] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1798.498527][T30598] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1798.510018][T30598] usb 2-1: Product: syz [ 1798.515600][T30598] usb 2-1: Manufacturer: syz [ 1798.529746][T30598] cdc_wdm 2-1:1.0: skipping garbage [ 1798.541191][T30598] cdc_wdm 2-1:1.0: skipping garbage [ 1798.555932][ T4028] netlink: 'syz.7.7607': attribute type 5 has an invalid length. [ 1798.602961][T30598] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1798.653372][T30598] cdc_wdm 2-1:1.0: Unknown control protocol [ 1799.649742][ T4036] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1800.225142][T30598] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 1800.405285][T30598] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1800.441698][T30598] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1800.481602][T30598] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1800.518869][T30598] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1800.529326][T30598] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1800.570236][T30598] usb 7-1: Product: syz [ 1800.579977][T30598] usb 7-1: Manufacturer: syz [ 1800.595469][T30598] usb 7-1: SerialNumber: syz [ 1800.634385][T30598] usb 7-1: config 0 descriptor?? [ 1800.649240][ T4043] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1800.661349][ T4043] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1800.672706][T30598] usb 7-1: ucan: probing device on interface #0 [ 1801.175689][T17960] ------------[ cut here ]------------ [ 1801.182363][T17960] WARNING: CPU: 1 PID: 17960 at io_uring/io_uring.c:3036 io_ring_exit_work+0x4ed/0x930 [ 1801.192177][T17960] Modules linked in: [ 1801.197349][T17960] CPU: 1 UID: 0 PID: 17960 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(full) [ 1801.207187][T17960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1801.217439][T17960] Workqueue: iou_exit io_ring_exit_work [ 1801.223038][T17960] RIP: 0010:io_ring_exit_work+0x4ed/0x930 [ 1801.228814][T17960] Code: c6 05 62 41 5d 0e 01 48 c7 c7 40 0a be 8b be 24 00 00 00 48 c7 c2 e0 09 be 8b e8 6e ed 72 00 e9 7b fe ff ff e8 64 74 95 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 e9 5f ff ff ff 89 d9 80 e1 [ 1801.248568][T17960] RSP: 0018:ffffc9000bde78c0 EFLAGS: 00010293 [ 1801.254678][T17960] RAX: ffffffff812acf8c RBX: 00000001000249af RCX: ffff88807da18000 [ 1801.262729][T17960] RDX: 0000000000000000 RSI: fffffffffffffffe RDI: 0000000000000000 [ 1801.270824][T17960] RBP: ffffc9000bde7a50 R08: ffffc9000bde7847 R09: 1ffff920017bcf08 [ 1801.279584][T17960] R10: dffffc0000000000 R11: fffff520017bcf09 R12: 00000001000249ad [ 1801.288076][T17960] R13: ffff88802d86c310 R14: ffff88802d86c480 R15: dffffc0000000000 [ 1801.296222][T17960] FS: 0000000000000000(0000) GS:ffff888125e0b000(0000) knlGS:0000000000000000 [ 1801.305248][T17960] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1801.311881][T17960] CR2: 00002000000c1000 CR3: 0000000078284000 CR4: 00000000003526f0 [ 1801.320025][T17960] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000081 [ 1801.328188][T17960] DR3: ffffffffefffff14 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1801.336231][T17960] Call Trace: [ 1801.339541][T17960] [ 1801.342514][T17960] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1801.348604][T17960] ? _raw_spin_unlock_irq+0x23/0x50 [ 1801.353848][T17960] ? process_scheduled_works+0x9ef/0x17b0 [ 1801.359746][T17960] ? process_scheduled_works+0x9ef/0x17b0 [ 1801.365581][T17960] process_scheduled_works+0xae1/0x17b0 [ 1801.371204][T17960] ? __pfx_process_scheduled_works+0x10/0x10 [ 1801.377292][T17960] worker_thread+0x8a0/0xda0 [ 1801.382443][T17960] kthread+0x711/0x8a0 [ 1801.387010][T17960] ? __pfx_worker_thread+0x10/0x10 [ 1801.392159][T17960] ? __pfx_kthread+0x10/0x10 [ 1801.396860][T17960] ? _raw_spin_unlock_irq+0x23/0x50 [ 1801.402095][T17960] ? lockdep_hardirqs_on+0x9c/0x150 [ 1801.407395][T17960] ? __pfx_kthread+0x10/0x10 [ 1801.412132][T17960] ret_from_fork+0x4bc/0x870 [ 1801.416787][T17960] ? __pfx_ret_from_fork+0x10/0x10 [ 1801.421945][T17960] ? __switch_to_asm+0x39/0x70 [ 1801.426834][T17960] ? __switch_to_asm+0x33/0x70 [ 1801.431622][T17960] ? __pfx_kthread+0x10/0x10 [ 1801.436284][T17960] ret_from_fork_asm+0x1a/0x30 [ 1801.441071][T17960] [ 1801.444131][T17960] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1801.451404][T17960] CPU: 1 UID: 0 PID: 17960 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(full) [ 1801.461576][T17960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1801.471684][T17960] Workqueue: iou_exit io_ring_exit_work [ 1801.477237][T17960] Call Trace: [ 1801.480529][T17960] [ 1801.483464][T17960] dump_stack_lvl+0x99/0x250 [ 1801.488066][T17960] ? __asan_memcpy+0x40/0x70 [ 1801.492646][T17960] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1801.497837][T17960] ? __pfx__printk+0x10/0x10 [ 1801.502528][T17960] vpanic+0x237/0x6d0 [ 1801.506514][T17960] ? __pfx_vpanic+0x10/0x10 [ 1801.511030][T17960] panic+0xb9/0xc0 [ 1801.514776][T17960] ? __pfx_panic+0x10/0x10 [ 1801.519228][T17960] __warn+0x31b/0x4b0 [ 1801.523211][T17960] ? io_ring_exit_work+0x4ed/0x930 [ 1801.528343][T17960] ? io_ring_exit_work+0x4ed/0x930 [ 1801.533449][T17960] report_bug+0x2be/0x4f0 [ 1801.537791][T17960] ? io_ring_exit_work+0x4ed/0x930 [ 1801.542908][T17960] ? io_ring_exit_work+0x4ed/0x930 [ 1801.548035][T17960] ? io_ring_exit_work+0x4ef/0x930 [ 1801.553151][T17960] handle_bug+0x84/0x160 [ 1801.557410][T17960] exc_invalid_op+0x1a/0x50 [ 1801.561915][T17960] asm_exc_invalid_op+0x1a/0x20 [ 1801.566776][T17960] RIP: 0010:io_ring_exit_work+0x4ed/0x930 [ 1801.572502][T17960] Code: c6 05 62 41 5d 0e 01 48 c7 c7 40 0a be 8b be 24 00 00 00 48 c7 c2 e0 09 be 8b e8 6e ed 72 00 e9 7b fe ff ff e8 64 74 95 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 e9 5f ff ff ff 89 d9 80 e1 [ 1801.592124][T17960] RSP: 0018:ffffc9000bde78c0 EFLAGS: 00010293 [ 1801.598205][T17960] RAX: ffffffff812acf8c RBX: 00000001000249af RCX: ffff88807da18000 [ 1801.606188][T17960] RDX: 0000000000000000 RSI: fffffffffffffffe RDI: 0000000000000000 [ 1801.614165][T17960] RBP: ffffc9000bde7a50 R08: ffffc9000bde7847 R09: 1ffff920017bcf08 [ 1801.622142][T17960] R10: dffffc0000000000 R11: fffff520017bcf09 R12: 00000001000249ad [ 1801.630131][T17960] R13: ffff88802d86c310 R14: ffff88802d86c480 R15: dffffc0000000000 [ 1801.638113][T17960] ? io_ring_exit_work+0x4ec/0x930 [ 1801.643251][T17960] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1801.648740][T17960] ? _raw_spin_unlock_irq+0x23/0x50 [ 1801.653938][T17960] ? process_scheduled_works+0x9ef/0x17b0 [ 1801.659677][T17960] ? process_scheduled_works+0x9ef/0x17b0 [ 1801.665402][T17960] process_scheduled_works+0xae1/0x17b0 [ 1801.670995][T17960] ? __pfx_process_scheduled_works+0x10/0x10 [ 1801.677124][T17960] worker_thread+0x8a0/0xda0 [ 1801.681819][T17960] kthread+0x711/0x8a0 [ 1801.685915][T17960] ? __pfx_worker_thread+0x10/0x10 [ 1801.691035][T17960] ? __pfx_kthread+0x10/0x10 [ 1801.695645][T17960] ? _raw_spin_unlock_irq+0x23/0x50 [ 1801.700856][T17960] ? lockdep_hardirqs_on+0x9c/0x150 [ 1801.706067][T17960] ? __pfx_kthread+0x10/0x10 [ 1801.710657][T17960] ret_from_fork+0x4bc/0x870 [ 1801.715257][T17960] ? __pfx_ret_from_fork+0x10/0x10 [ 1801.720386][T17960] ? __switch_to_asm+0x39/0x70 [ 1801.725147][T17960] ? __switch_to_asm+0x33/0x70 [ 1801.729911][T17960] ? __pfx_kthread+0x10/0x10 [ 1801.734493][T17960] ret_from_fork_asm+0x1a/0x30 [ 1801.739357][T17960] [ 1801.742652][T17960] Kernel Offset: disabled [ 1801.746970][T17960] Rebooting in 86400 seconds..