last executing test programs: 8.474224662s ago: executing program 1 (id=782): syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f00000011c0)='hfs\x00', 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x33}, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0xffffffff, @loopback, 0x5b}}, 0x105, 0x6, 0xf06, 0x1, 0xac, 0x9, 0x1}, 0x9c) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x38}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="48010000100001400000000000000000fe240015a58c234541aba25930992fd6880000000000120001fe8000"/58, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) 7.0341454s ago: executing program 0 (id=787): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x34) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x2, r2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x50) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r5 = gettid() rt_sigqueueinfo(r5, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c, r4}, 0x38) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_io_uring_setup(0x1249, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 6.018908342s ago: executing program 3 (id=792): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x14, 0x5a, 0x1}, 0x14}}, 0x0) (async) io_uring_enter(r0, 0x4255, 0x7721, 0x16, 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r5 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x488, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xfffb}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x45c, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'xfrm0\x00'}, @TCA_FW_POLICE={0x444, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x4, 0x1ff, 0x9, 0x80, {0x6, 0x1, 0x2, 0x7, 0x7, 0x7}, {0x1, 0x2, 0x40, 0xd, 0x9}, 0xb, 0xd, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x6, 0x5, 0x3, 0x9, 0x5, 0x0, 0x4, 0x4, 0x3, 0xbbe, 0x6, 0x9, 0xd, 0x6c7d, 0x7e651923, 0xfff, 0x9, 0x2, 0x2, 0x70b6, 0x3, 0x8000, 0xe, 0x4, 0xb0, 0x7, 0x88, 0x4, 0x1, 0xa21e, 0x8, 0x6, 0x800, 0xb78, 0x2, 0x5, 0x9, 0xffff, 0xfffffb9d, 0x0, 0x5, 0x1000, 0xc38b, 0x3, 0xf, 0x100000, 0x7, 0x8, 0xe, 0xff, 0x4, 0x81, 0xc, 0x1, 0xfeb1, 0xf, 0x7, 0x100, 0x1, 0x5, 0x1, 0x0, 0x4, 0x80, 0x2, 0xa, 0x7f, 0x5, 0x7, 0x7, 0x8001, 0x0, 0x7e, 0x5, 0x5e, 0x101, 0x6, 0xa0000000, 0x10001, 0xffffffff, 0xb, 0x8, 0x3124fc27, 0xfffffffc, 0x3, 0x2, 0x4, 0x4, 0x200, 0x81, 0x7, 0xa, 0xffffffff, 0x81, 0x2, 0x9, 0xdf, 0x2, 0xb, 0x8001, 0x87, 0xe, 0x4, 0x8, 0x3d00, 0x53, 0x80, 0x3ff, 0x4, 0x0, 0xa, 0x3, 0x800, 0x3df92db3, 0x80000001, 0x1, 0x8000, 0x4, 0xf90a, 0x2, 0x1, 0xfff, 0x2, 0x6b, 0x1, 0xd3b, 0x80000001, 0x10, 0x9, 0x42f, 0x7, 0x3, 0x3, 0x400, 0x10004, 0x5db73442, 0x3, 0x7, 0x10001, 0x6ed, 0x34, 0x1, 0x100, 0x6, 0x2, 0x10001, 0x9f, 0x1ff, 0x3ff, 0x101, 0x9, 0xffffffff, 0x3, 0x1, 0x3, 0x2, 0xa3d1, 0x77, 0x8001, 0x3, 0xffffffff, 0x4, 0x3, 0x8001, 0x400, 0x3, 0x8000, 0x7ff, 0x1a8, 0x7fffffff, 0x68, 0x100, 0x7, 0x10001, 0x100, 0x5, 0x7, 0x2, 0x3, 0x0, 0x7, 0xfffff2f6, 0x9, 0x3, 0x7, 0x9, 0x0, 0x6e2, 0x2, 0x9, 0x40, 0x40, 0x1, 0x2, 0x90, 0xfffffff8, 0xcc, 0x3, 0x81, 0x400, 0x6, 0x8000, 0x4, 0x3, 0xffffff65, 0x7, 0x5, 0xbf, 0x2cc, 0x4, 0xf, 0x9, 0x2, 0x9, 0xc6, 0x8, 0x33, 0x2f, 0x10, 0x9, 0x5, 0x1, 0x9, 0x4310, 0x4385bdf5, 0xc, 0xe1, 0xfffffff8, 0x4993, 0x2bf, 0x2, 0x3, 0xfffffffd, 0x8000, 0x9, 0x1, 0x5, 0x3, 0x3, 0x7, 0x7ff, 0x8001, 0x3ff, 0x8, 0x9, 0xffffffff, 0xfff, 0x6, 0x1, 0x6d7, 0x53, 0x7, 0xffff8001, 0x4]}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) (async) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2800008, 0x80010, r5, 0x180000000) 5.977570067s ago: executing program 0 (id=793): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000021c0)=[{{&(0x7f0000000640)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000900), 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xa8, 0x80}}, {{&(0x7f0000000d00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001240)=[{&(0x7f0000000e80)="18c1e092d3f28d5f756b9508354356bb6e33c1e17d85ca49bd91a167f1b87373fc0fa0883ae0993f9dc404d1f9a365b5f557690ceaa61666e2c76d394aab8d2103d36b390e0385cc1e3fe3629d879cc44f57215de2ce8d19c114729bc5cfff62b127d7ba38ef5016afe324c79c8d52ab8eb5f509b6ee7a50dcf418cb8e19277aa5e1e9dee79da6306b0a95a625cdab5b7306770f533199e60e7d0dfba81ad44a072e0671d3652dab85e7223594c24bbff3e271e34ab2e29ae0883098e769a93ada7f5adc0bd5d0de7f57cced5cdcaf387de706b92dac4d9e62c5146957524ec710a7eb88d20785fbdc7d86", 0xeb}, {&(0x7f0000000900)="77a03d22b68d977cf8c2b2ef31ee076b64d03cf924ef0c531458b3d382dfae1806f558251f4c456cb899164c09cb7f8deec6aa42ad359a71b3789ab94d4725194a7fd0ec16a459fe7506a941a7b37e511a280c8913cfba860e946a895fa5011392adc4f5b5e624dd51ae46cf4e85fa0b1f0c2ff4d4acf7bea47750bdc9d3e92eff0ce91ddbd55f6898de07b21d44a913c83f4c736f502fc22ec433988067f2bd4663375a266428c7293bb055c445478e9e50fcb0a5ead3196f5387ba873fdc697aabacac7ccb95648170f350ec87c545206516b3", 0xd4}, {&(0x7f0000000d80)="d33360828a8fe0cc2b7b865118d0ef9dfdf66200069a322b7c16ee021b1c02ec09aa18e5d625", 0x26}, {&(0x7f0000001080)="2b7cc31d95954e95685e1ad4ea6c587b40b7", 0x12}, {&(0x7f0000000a40)="5d56cea212aa9c202ab70167096f4d9485f80296d6bd277db4e231b5994b35c1f318a61a7385a01f78ffc5f9437b2b4947fc60748cd647f37a2d69c4e5810aa2fef8b450c031ec484ae45c9229f643e8984acce65e10b3f745b113feab6ea48789d9b13dc61adbd783c951c68e40f0d65131c1076108f124ba8c5da1fb1b8aa516b5f8a736a30c83b58ee93d8bf9af71cfea215d34fc4833df53aa67bc02d9f8a3613a568e84ffeff3d5afdab35b0582f6895c1178ce8f6755789d5157bfe9", 0xbf}, {&(0x7f0000001180)="c9bd97b57f5af64628108ba0d1ca13", 0xf}, {&(0x7f00000011c0)="37a2943467ae94487a93b761cce452eda71d0e88b860323067fa554d0fdccc2cd28467b4bae57b30531718881417f1ae1b0bbd0d93a0230f549a561dfaf4a520673af6b78d432e616d", 0x49}], 0x7, &(0x7f0000001440)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYBLOB="6dc2", @ANYBLOB="1c00000000000000016a105975000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000010000000000000000100000001000000"], 0xa8, 0x8082}}, {{&(0x7f0000001500)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001580)="83e3715cc19cdd573d228a5beccfc26457a7d40249db4057dc7a8e9f1f7fb77fdfb631daf54d9e27d43a9a64fe89a3d977721d33ae38f2e90adf279424cd7ced353e33c3cfc44e0951e7f096b0a64399eb0d2abb02330fe78d5a59bac69d502ae11bc8bc4057a7806c4f9e55dbf74a7d2a545ef6738af6ca502880fc02b2b8e07625f5c863168f5d89a89095ee081d04219fd08c93511d529d1cb89f2af78235e2c1af4776d71351548d918109731005d0f4329ca61b0afb939c1a3522d0387210e90ed0", 0xc4}, {&(0x7f0000001680)="bb5e7b8a2f27b364ec303dc095a45efb2c2d192f43cf06c763ec47912ff8e5dc509c47c676626a508076b5ee4ce202337a3172b8cdfac74ebde07513ea5a9c1d0a033feec40fbfc589688f668845d0669aeef3a2e55233f8d2f0f7799f15c9ba898f7e0ec306cd13fff9726d92a7d9a08ccff249221d5fbcd44071c86a428a041ebc8f46db4e0a48ad404d56bcd8e7b5fd255ca4fd2950ca", 0x98}, {&(0x7f0000001740)="6348b6f6d8304ec85111470accb29777c987bc172f3175e77a0e8961e702131e262d6db1e7297419b6e9f77ef4a627b32f74f70752c3f67a3264a527719f9ffcd4d820f48d5fdb684558faf3d997636cd689d8084147d3a77c80216eb88e3e6afda968f3a815e6fa503784a42d897c6df4a91f0cbe9ac39714c5ab192a679c9319104cee8cca", 0x86}], 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="0000002100000000000000000000000000005081f6429300a7c534d35f0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32, @ANYRES32], 0xd0, 0x48010}}, {{&(0x7f0000000dc0)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000a00)="151e19f91933089884cfc673e38fe9964eca8bb3a90c88044cb354b05e84f6eed9665a5a6571b28b9ed9281e039adf505df92375f757c5", 0x37}, {&(0x7f0000000f80)="731e31339aa5409922cb145e66e0b463e33c3cda99f7c2df694a56fb60cba4991b931cc7b80d986e38ee4e19931c50682370502359f9c0e560627bdae3c4858ab37551a59aed11fe", 0x48}], 0x2, &(0x7f0000000e40)=[@rights={{0x24, 0x1, 0x1, [r0, r0, r0, r3, r0]}}], 0x28, 0x40}}, {{&(0x7f0000001000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001bc0)=[{&(0x7f00000012c0)="cd8d8d320cb05094d1a26e33b3961ba9e7674a6cd41f834dcf3b7a004c5ebb2c5640131cd84c87f9fa2fc4e11e99116130e57181a8f5d2fbb33d98c6a3d9c9cd12da5f6c411ded673d941d7f42b893f4ddd6b534b62a0dca5f60939f5e161fd8ab8ad3daa636d21e35a5eb1c1f4bf2bcc7b3b7342770c0ef7533843f06bdf0cc9a04158f7521666b68cb35b4947a1fe5b606e830824b175967601f33babdc3dc884187ddf84a4c57acb8124ac782338aca11f1ab3ee97f69fe58c77ce5c30d574d573f8637c6ef7e34e57d45988ff60e5531c7eedc7f57023845334445454d6a382be08ed8790aadd8", 0xe9}, {&(0x7f00000010c0)="f5de3f459e6bfcc2bff601f80bdab6e06cac6ce0c91d04ee6bfeb57de802a3d208fc80365122062a8364703a7813ae8c9ed5dbde325277a4e10d3956d2c34d4178a5561fb31123300f96603a1e599db163429dfac89b528589fd9ee00fc75b508e430749b6bc552ebcc3142ffa3d3ce2b4151843faa0a730c09a112fe4e931921ea5846d3288", 0x86}, {&(0x7f00000013c0)="774dd58bf8b6a17ec277101891488908f25a7caeef7de69ae8361e28979c3f08b90b57729d6210599697f1a5594fe5b73f2e86e10c922dfae20f90cd", 0x3c}, {&(0x7f0000001840)="f217634671e0c1abce9648a76e59fa88fa087533120be0cbc99918bdb5d24e2e609e204ae3a59708e372b71511ef11174bd5a3cdfa900a9b978db86c9b6cc685cf729cd5c136e59e3b58c27b827804f4849f604b4e063a828405c8fffc91d61186da37a4cb0296bf22701ff087747cffeb68c4d2b552f7721229895130d8ed64b6df73e928375bf7847610e2c8cc695c2f2ea8978fc46fbb99441cc828072c9ddf0063aaf985bee001342dd5d743ee62de0d57e6d26971f079cfbfffaa45", 0xbe}, {&(0x7f0000001900)="43e8e16a5ee97df0dad2daae46a4132cc370480450dad43b8f23a8f68a13f07fdbed0eba46b621bf64b649f98803dd5df52049ec901da4c8ec8a75c75a8d050fc5098de774acf04419bbba1aa0f4a5f5", 0x50}, {&(0x7f0000001980)="ec5cfce0f6c1520f5a258e22f9baf8ea67974ae789b965b3c2ca61c44fc609881519592c8303576e1bfa209362632e0a2d1ac4c4585b6a41ae2249bed01cc9488ed380ad206fe38c8c742443de04095fa315832045915d16573b170dd776596b8a49472f4f187e75224e63587e426bfc17e9973cb86093c17c1167c5ddc18d4b69e5bd51d5c3bbae4dc58e29523026b37145a4db670524e5e5", 0x99}, {&(0x7f0000001a40)="9b957e4cad9d58c6dc826b7ff8dd6e72c64e47cff980f510c554aef25121e9ee888a99baa5b7a0622347f986ebd177b3a98cfd8ea1a1023e17d889ec43490f9cee1dbbfdd516964464c7ae6c054fb6c0a171251b862873d1bae03085166f8b4ea021f4ed761806ca96c987ed425680301c429ac292a2fe7aa26dd16ba1a2ae96145337a6dae47de5cfbfd88d4a5e0a697d5b1e7c267829", 0x97}], 0x7, &(0x7f0000001cc0)=[@rights={{0x38, 0x1, 0x1, [r4, r1, r4, r3, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r3, r4, r0, 0xffffffffffffffff, r3]}}], 0x78, 0x4890}}, {{&(0x7f0000001d40)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000001dc0)="21fd22f1f208394fa5dfca3f869fcefc74c2f100ae24d8342ac252552da6e152238c53105c9b8233a1b2f46fe6ee9d51c8b58393f69879929d85b0f4b195cdf957f785f818eca07ae0daca22eadc9288035e4c6096f7a568a33534e66aacf38c8a9e136d773909c615c8f5b4932e710261f1ed90053d4a8508d2154d3c675f9ea40a0d441cf29f4c91bc", 0x8a}, {&(0x7f0000001e80)="ef9ddc1dd184c4af8dd8622206d94f51d6010ccd4e97253074109679717674a9f5d9433e9fb3b46b6a061e1111dd4a69b93eb681d6566a4ed52ef8754a8a85c7c8115c2d3d8051e6dd8b34b27a517701675201c2252202fca5688d23ccb24c959817d1121f8b3dcc0dbb3e465c5c8eca15", 0x71}, {&(0x7f0000001f00)="c3929573ac93b572954156cd5b9c458639e6ba2daa68cc1122f0310464605b47dda8af5184e894e27888e07e80d6080695d1f8ecc4a1a71986dfea078184", 0x3e}, {&(0x7f0000001f40)="52db5ad21ae41196621e6678e415c951777b08de414f6c32fcb41173662c43a816ecc2b93e9eef8f06ab991438f01b2c4015ab8e1293b358110551814b2c00370784d46a04f8f20d21cc0dded884b92b328115d7d2d0d2a72be3a4111091ca94e98b8f45565f50655d597f6d199ccf5ff196a0d3e2", 0x75}], 0x4, &(0x7f0000002100)=[@rights={{0x30, 0x1, 0x1, [r4, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r1, r4, r0]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r4, r4]}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, r1, 0xffffffffffffffff, r1]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, r3]}}], 0xc0, 0x200008d0}}], 0x6, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xc, 0x4, 0x268, 0xffffffff, 0x130, 0x0, 0x98, 0x98, 0xffffffff, 0x1d0, 0x98, 0x1d0, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x9, 0x6, 0x0, 0x0, 0x9, 0x8, 0x2, 0x3}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) setsockopt$inet_udp_int(r6, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r6, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r6, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) unshare(0x62040200) socket$nl_route(0x10, 0x3, 0x0) 5.843886198s ago: executing program 3 (id=794): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x331, 0x0, r2}, &(0x7f0000000040)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x49, 0x0, @fd_index=0x4, 0x0, 0x0, 0xb, 0x8, 0x1, {0x0, 0x0, r1}}) io_uring_enter(r3, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000000)={'wg1\x00'}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000140)=0x2000) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000500)=ANY=[@ANYRESDEC, @ANYRESDEC=r3, @ANYRES32], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r9 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000200)={0x80, 0x0, 0x77}) sendmsg$ETHTOOL_MSG_WOL_SET(r10, 0x0, 0x8010) write$binfmt_misc(r10, &(0x7f0000000040), 0xe09) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f0000000180)={0x0, "92450d0655abf29a6c3a18bf540331a818ee12c0d83322e68806bb9e3cf209abab5e295e309a882f47d653fd0367d1a376a1c7a3d2c7beb0cdf12b7a11d380ff", 0x30}, 0x48, 0xfffffffffffffff8) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f00000002c0)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) 5.519054325s ago: executing program 2 (id=796): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001580), 0x240580) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = add_key$fscrypt_v1(&(0x7f0000002e40), &(0x7f0000002e80)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x74) 4.898992568s ago: executing program 1 (id=798): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002240), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000002280)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44020}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_open_dev$usbmon(&(0x7f0000000440), 0x100000001, 0x400) ioctl$MON_IOCG_STATS(r5, 0x80089203, &(0x7f0000000480)) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x38, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0xefffffff, 0x0, 0xd]}]}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x288, r4, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7, 0x1}}}}, [@NL80211_ATTR_IE={0x257, 0x2a, [@ht={0x2d, 0x1a, {0x1, 0x3, 0x3, 0x0, {0x3, 0x2, 0x0, 0x3fb, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x1, 0x70, 0x8}}, @random={0x2, 0x89, "e1f2b33e1279d87482bb4642733151b1c86a6b8eef84c16a3e1fb7f06c39ea58615db8fff0651780632401204c33167cca68dd69e1afa61084ed20712d8428d541022810ee16dc15776748e17f73bffa56797f612b3608eb2c13b067dbaa398a34a102b35589aa71e786fdac278cfba42f334246085326ac986715aa1b897efd1a988934323b0d5bf0"}, @perr={0x84, 0x4f, {0x7, 0x5, [{{}, @broadcast, 0x8, @void, 0x28}, {{0x0, 0x1}, @device_a, 0x0, @value, 0x15}, {{}, @device_a, 0xb, @void, 0x28}, {{0x0, 0x1}, @device_b, 0xac6, @value=@broadcast, 0x3e}, {{}, @device_b, 0x7f, @void, 0x29}]}}, @random={0x77, 0x9d, "34aac91ca0e3130c086f613b751c9b9e46966c84ef8f8202b46dc9c5fd9de4acfd8e7da90540954dac141c175220fe0a668aeee5eed1276598c6be96287ba19a1d3116f993a75f90576c5f0a2e166b2323d37c7ed4889f7224bf4b6cbb2115f5d0148783814d601c0bfad9486198c4f3c950c7d6296ac88341879c3223af864cb0001656a458cf8161f082360d7370da86d0fc4bd92247bf3f44bcd2f1"}, @sec_chan_ofs={0x3e, 0x1}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x20}}, @chsw_timing={0x68, 0x4, {0x4, 0xff}}, @measure_req={0x26, 0x8a, {0xff, 0xf, 0x7, "45ee6dfd37071f8d6da7c42464d5a704e8d35a64eb00a03e2f8e813b374308d450926cda8b89d8c700e5cff8891905fb050ee014a7c9ba4daedb545af3edeec3eeaf8e2a0afbfdcfe828220c8df93769f453cbd2aece7a51ad6acf85d21c613c8bf97ea4daa2e38caa48b436d6905b0560c73bdd859d98bfee766758680265394cecb8ef0b90bb"}}, @tim={0x5, 0x16, {0x5, 0xa2, 0xce, "200d363962109792bbfb94e1080bf8d28ddc4b"}}, @chsw_timing={0x68, 0x4, {0x9, 0x81}}]}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x4}]}, 0x288}, 0x1, 0x0, 0x0, 0x4040084}, 0x40080c0) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) unshare(0x28000600) r8 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580, 0xfffffffd, 0x400}, &(0x7f0000000100), &(0x7f00000003c0)) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000140)={0x20000000}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r7, 0x0) 4.690024184s ago: executing program 2 (id=799): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(0x0, 0xad, 0x101000) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000000)={0x2, 0x100, 0x0, 0x2, 0x69, 0x42}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="29f8933fa13d2badf8e64d9b27199d6dcd3292acbeef916a564c90c20059ed516c56edf056e77ef40ab31903002e3d", 0x2f) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000001ec0)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)="690ea45e73b0f0cf753118819f4495f47e6f016788d1baf8ca32cd50b4e0c5e6dba50b792c169e503a43e7dc48728495f22683f1014d66f000e5896e52249ab47aeb9c96af631ec206b3f8a848b0705b5468ef666c803350b0a857d63cb91f3389019085fe41a717db4d01ba4755a171635a0e86ccff009b66bcd9a7b4c333a53e8c04455397aef78e379cd5e13aec6c2332faaef6ca310547d38e3f94414ebf33411ace8acabb11db28b8d4a121aa", 0xaf}, {&(0x7f0000000700)="2f34cd6d8761518fc37786de0792c4ccf8adc46f7498733cf2e70c1d23e3f03a0b70e587a6207c4293ecf03d5637e5059ca92df6b0f4627881ab21645a8237b01ac953a0810f5cd720a08bb356f7030db2", 0x51}], 0x2, 0x0, 0x0, 0x4}, {0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="89d797fa6dd851e418865272fdd9de5b9f5c7860e1eaae0ab0f96a5acb2fe89404a6352cb98db6b30f8be3ed8cae8cbcea695a6760ada46451b79ca0863206593eb746bfddbbfcb8143b291968cc01f89ad17714ef29097625bbe4035cbef8c9874f0cf2ccd4d967a7fe", 0x6a}, {&(0x7f0000000180)="febccebc9e03cdfb1ed690994fa7a15e77c719", 0x13}, {&(0x7f0000000340)="d68973b1dcb9523191f7be9e30015a3408322ee91f1949543dfe41d8049aae6b8d9917ceb1718078e01e42acbb3b83525b641e0354cb9771e1f364ee4d8d31b710f08815b7ea9a42ee6888", 0x4b}], 0x3, &(0x7f0000000780)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x9}, @op={0x18, 0x117, 0x3, 0x1}], 0x90, 0x20000005}, {0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000840)="c4d1383954c97cf1f8dda7732d61cbbf579c8edd5839fcca734c4a3497fd05dbb6b1cc0ec758afef531d777a564d243d66c8c52f144a4b6229590697379eda9286b21241516541eaf465a0b274a28dedfa720279dc4683a7924dec362dd80856d530a1b791129a7d659dedd3d392db69a4d1a6e020b6877d9321300a696ecd108c2b29f6e49d057269cb3e091f28238d18db621f5a9083e154fc56496bb4214a416645efcb9707b5879dc29213b3f2117b44c567fefe07e1cc95895d411ddf38ec0ac832adb54f68f0b00c343be150585c9ba707998ffdc8ca8e17124a021af14731f3c4c5a496f46adf19d37fa67f459c3f88a7d5c480c5", 0xf8}, {&(0x7f0000000440)="31b22340bed7e07e9edc03ff81ff5f7a3886f6a8dc891b083d142b550e20978dd4556c02f9fe8c52150751cc3c6cb077a3931e0cb7db76d30fe24df02609c20e79b29a6a5fe238a4", 0x48}, {&(0x7f0000000540)="67893d72bd206f83761898811d9c19", 0xf}, {&(0x7f0000002080)="c2464ab938c7158ac6d9cda1d655a7659141579d309732d386bec4a55ec63f530a1c51fc5fb6806717318d90497a1ee72a388682c1050e5342938567ae2b5ce32d6684534549418c5a19d4fcf1d2a5730b5d737b054fb87d083a30cc3fd789d38a600469906cf406103812820602cc0300a22523ade9be3dafb424408ef88cd9dca28dc5866c724817facca961ce982ff6b3ad305c9f3f19331f368e7331312f0c38918a54f7869e8849fac32b2720e4e4495c13c924043422c62e0ccf9414ef09151665d3c9e410658cb72fe3ef058d3eb5ed853b2dac349be8e6c63447d387571f8e10917681a65e5f752a84fbeb37c3af3ddff646252c77eae1021ce2339820b11b1703b17b3bead0bb716595da588b6aba771a04866d2754b726dbd3201ab1dc75ee9a3572e98452cd8cfe0eb692708297a84a83f3e62fdd60a2db95dc474030cfbd209c97950655d4d6cdef155148ce18f8f6d2363cfe5c93b143757a37c0f794a0530da68eadaaf2c1dfd955ef717734d8fc6bd699d7b61833388d7f602431ac8f917af94a69d8ab09dd936bf5a41aabaceeaafa8b24791a2639e5b0ec2b4cfd18e57dea8180780f01257ae6b8cdcecba43d460902e24eb0f9c13209ec796ea79e31a85cf13eebf8dbc11ffc05a0154a5147232241ab0c9450bee1b8d01b56c73787561ff4668fadac6acb3c3e6770f20eb611bb1ee5e6064aef04c0313f0ce1ef023704fd0df688be061c6333f79ae9a20dac8d0557f20dd09dbba4fbef193e10e31cfd85fa796abe77a80f8ccb287f090ca6ed4d605762b0d9ef34bf547ffb4942b4e3d61ed3ae0bb2421e1ab9fe513e4097b4301623f1edbe2c9ed897928750bf0b5dfd15cbfe6a06eada0b791794c43786e02c4d724f51871e2c5f0cc374938f7cd3eecb654762ad5674a998aab46e94a0ce3cddee4059343a76985b286ef0f52f3654a5f8750cf9df58bb4a9ec802689dfbf3bcb0454ed9af4e7119d2375b11324d193af5d0b6fb8e360a8f9f915487f0e60ba5632b87d44df8d8a72ddbd0bdb96c393b78b5f61f5610ae83c98624d7c66f52149c1d20de9cfa4876f8fb46053caf4467e0aa31720fe8a57a9b20ab13066b26c33b0358521a0c6d490d00bc6bf2bdf3920e22f1c0a349e3b0dd9f793d9050996de1409f064b2f67ab5a39117f8e4d4badd582e7abc526f86f915ef28f68e15bc000d6cbeee6db3ecbd51555efbcd29f01d295578398852a42520aa15546798452ccf1d93d26058be8ef052ffaaa70657e1afe4e5f3eb09de2a36bbf17836203cb2b0822f78a9eb5da6868d50a2c35d591b2c40d49498cbf67742164c32c6c34b038a9b981731718b3df3f1c0f0e2ca89dae7224272e9fc0e84daa33c7e7cc25cf522808437aee5a3b3c2e22cf813b4fe4516c091b3f439cf353dac97bb74590b2569eefdbcf433cfb80e26ba1c148f0cb239e439ac454c816419c398d0e3e929217d96b647bfb6213213a515470f8aa11bc16c4774e20ad83935f47e08d3369ff265fe0d378736439781426d05d84b6281b8daa6a428996d79e68ef223aac3232b32071eb6cf66504518160299365ee5248bedce75219d2d9b57723027dc12a910fa23313279475448162edbe52cb73febc8b69814cb3d1b467f812d6e7f8d0bde1cbd83d93fe051cddedae73fb5981d77a37ba6515a458b42ca6a86cbf5d4cf983a0833ae7222451eec5e17020298200afa2afa35c7e903047a377a2f03a791bedfffa43548eab835de03aaf9ad6978a17b5d65fb8248605efaac3c39ebd193d24aaa14391d89fc56144cff9b10cea89286297ce348b8ddbc3834a099cb404a0107177f3e9366d9a4e9dae6bda28788763ced5f99a858b02a476c2413a7b9e0d3c43ea126f27c8da5e641c014dc76fe1b51d7e37e326f62dc09ceced3fb09853463b6c46658bff8fd2e56e2bd17f1313dce59280d411710125fd946795ba292955a111f7f4bf63e0d972e215bf705438b40062d65c0a4452e3faa07e0feb39543e5b92b4b1b35f2bee7977a02333a5a53fc8779e648b6d977ad07d1655561981ad4526a04053702dc98296653f5e5e1e8fda231cbf1264765b901a27e9a47c4ff289e0d6a9e8678036779e211255b9941a3b5e38f3f1704eee1cf8bd129da2c29339ac61fd6effee6dc4b4f0f8744fcb0232f3ebcf503f13e6c607fc66e6bd2332e1e40ae64c3e6c1adf9358354551b2123599a692a91fbb448264963800f8cbb06b1250e8f5c1c730c746437c8a60ef7a455e2a560b1b1bb428dfd446dd7ac580a5f84e7a1f2177102c3ead352f7bbcf18ad6309b2da2412c0c727c6a63112bed484a0e7c3724933b765105603fcbe5401a185f18a142f63f2053704828707b9894d3da4ac143bc6709cafd03c61454e2e8c5d53e488bfd94dd9bb24d556659c6b0b4e395ca90bf18dbfa117b43a962408a2d78ba132c26a4ed84142769f06dc1c2ed4ab03456e5d8494e6cf25ca238da5c0a2d897b9dce78484d851ae2139a5ff379f236f90d4e3c9c90f31794741cfa4d9fc20555222c951631734d446dd26b856cdb0df3a22ed8c7362725e8e66cc6e2854089767d861091828493ae613eb20d78ed343d2c7c9b7f32ff6ccf8b0f8086cbca746efbb171f48ae40195c885991b89f002f6d17c60842290e03166a32817732cd908fbe5fb5a35da613ad08c2e697dc06708c7f0dfda784da5e3eb74fac242e5940839c909feb88c80fe4d08292b2d8787e07ca15a5b22a038b809269816ccb70141ef035853f70aae9c195b904e2f2b603ed75ee202096d316169423f593188f507cbb5bcad438fcba56dff03518221381df30698860244857ba2a46e23994a55f4873ae078c85d572bb1e0936c10bce1e8a78b48f0e970b9c0885263d692dd7ea490881eb9b3e54a3016226220eee0157682ecae2c7b70d2ab63fcac8fa12cee7269febef2ee1fcca137d9f5a6b92f29f0f7b3fdaeb395da4c437c7a11456bdea48c1b98943c449c0e921e492de7c838745d687626e483595061cab78d065841410ab742688188779d5599850d225979177415c48eb36b20b3ede3c1c70f106986c30c734470b04d9daf9be00c122adb56cf6a9050413517e1eec74d88558493a2fc31ca3930697eb27e89cb916546d723b8ff3096002d3a29580be5677fca58037f036a557f74d0438c568b8a68aebf1a9a072c0eb2a3cf968aad191cb19ac37b133227ecf74b6cf6f63a3942fee30b99b1ee43ab76cb236c8094c959414e046ce63b68e3a236c61f1a4f0317ba27a70e64a96318ca2f29f39356ac8f99a9f3429c27d93341a3d9c21824bf9ada5160445742480c5fe17c6eda123500d442aac6bf6ffb4a34ce77ede7a26ff4047c65ecf3c8b8298753d8112a8c6ce8efed1e5ba0f37ea79a31c8c622cd4f2368134ce46fe27f7890a6715e0a1b7c0a4dacd0f69e85a74712471a82f29ff039b5444e96025f8ba543dc7fd8ac3021abd78799d607405e1b3443cbdf6687e3d679577a641f5cb5ecca119ae555a6a13fbe3e4fd208b45a657162670bb686746327e7d31ff45fdee3a32457bcb78718cd6ffdb6f9e3a405e49a33a11c9eb4d847a4397a3f1d6e8e498c2f03761c8f5105f9ff24fa9d09413bb624673dc710e3f884a28ddccbc83e7250d4972f6159a835a0af2e73c42056a6a896d496f297a72fb1d2c6e64835aedb77c71e7b67864758e52f45e87e38ba1069b70d2e4f6e7f46bcb52a51510760e5bbed8e003f4b7901d28221f67411826b0fd184ef338cad5bc90563a1474f1ffa186cdd2bc3cf5cf0505785b6e22dd56e985c48a837ffc2353a779dc7aa9b345adcec935dfe6db136a593e8dab19bf4c8e9e0eb11f7f55d097410fbf73f7e67439e8d932ca91e15e92fba99841c61c4367542aeef7fdab3c4993756c4e8cd420dd1921654ee774e8474906d972b67a34e93f1c2065798932bf84a53866374f4471ab1148fe4ec3c2dcb37db7670e7a8beb20ae28100e820b64cd122dcf9cda04168f04ec048ad7763c3dda50ce0361ebee621172485ede310e360c9c97af02f094a772c5f440cb359c9744eda196f21a527e4bd15b6a0c9463bf0c8f6d6c2e430dc8d238dc318c8c195c122118dbaeb021c820ca84f426233297991859fd8294c9a38c51845e01c4704bc4700c82083619df22ff64f826a3641b19bddf82b3a345014cb23bb6c009678e53d5d37a5e6682854da7bff6d61b5b20a80dca369c47b1cc2f1169e63de4df6926b9ceabd2601756654b6f9f8427efd7b9f08679cda55dde6a0b90bfbe50171692ef4498f145554eb1408f3dfb003c8c2276ff7b70ce72b13ca6e3679446ab292205bc7c290298ae5907b17c7c3b685459cfad326d473d04df03828a227def49ca32b91533212a4cffb0447bd119f4a96fc9a6cbe19c1e33dddcfab9ebb530e9a59ac6d80d5c93ceb93cb131d53579244b46b48a7b8aed52b5bdaa407a6c2465feb660017fe9a5544cbea9ea7114d63229eedd9cc2c3cd7b3b26e02f87703e258ed55a6f57fd1e26ecfb7afed0fce1acaa3903676fbfa28bc6e967d97db4f6587991a16b33ca4ec5d431a913bb2bd4ca3368e65978ba256b75419c6786f3337d400f5ed25d5d44da1b125a34cbea7525a34b2ec0ab83e6e5292188555e992d5833182363c0b73b1268fd7b9ce3120780e31d8907eeaf042e8481276a4155697b19dd90beb7ff6c71725c1649482b87bae895fd92e052eb61e113a9a2cb0f2711ec9b95c985d49b57f3c6f12dc67c0164b608cf8d36103a5ba23ea7b95418530b72d28010f0dadb3a54434683fcab39e6120bd2161c8ef7b517b77b8504a1e8f6eba2552f1666bb9b7ac5bc2c5bdf393683ce433a159668ba3041398160ad42a092f7e23f88a125eeed8385be6095b63ab216845d5fec9490fcd13c36346d94368a4bdff571c23dfe5d1243746dd16402e7e6fddfae318310feb06335afc477e6eb4c448509aa7246260a45c29ac99adc85a9fcd17726f0c12b9f706bf94c3639a5afcd26f6b56309d48e19af08c2b4371612aad70715b887d4a4b43b964a905b66c697e76e613441c644880d75ac860178d4043d0679bb8b92dc32542e1784be64b731dff2f7a950bd40b33dcabae6e1026305637ed3b305538486af8ded82a453fa91c0c29b6efb9c317c92c990947572725e00df739c07d137baeacaa7d45bebde77fb18a53d40ccd923f7b06d0642c698e4b276436b8a9f0d5fee9a4b18f3793cd3866b4fe3587a74cd1a9b5556a27a39b3d3dba6d503bbe84d6163a17f6bd588ee91a9f3bb5dcdbe13117bad91df7d3ed64b805f14e3ac0762bde0923762b947f87db95395cfcfa89ad44a760691d5c8d90758d715bd6d1639dd42c8ef19a1d00954de855dedcca69e4158dae8d072a9073ce6a93129f33c579753ff2b2dc8c77dde9145db8cb97db86f676b14c3c44d10009193dcb99362bc1f00a919d610c7a6618a4b43d6adfd010e4e933d37f98377dd63e9dcd28235a611c6f8031a0925d6d61aa9e62bf2df1169b1857e75b1ed02806fd6b9f38cc39bcdf8230bae43032105f03be51e53f780f3064252ccf1e961585e04171e64767bff06e77ee2de5c626a97119b5f51802b265aabafdf0c48ca19a6a59b9587122e2122ee50d984fa4ab4bea6d12957026c3a0cad878167a7af0b10a1b8c305493327c354a47d81c26decb24bfa9fb96823ce8d19d8cb210c820e04120dc611092a0b819d169989b7f861a88eb60330e2d4aa62f903a130263d6", 0x1000}, {&(0x7f0000000580)="64acf08dcc2beed11632c42ae88ff14978e4c36b0c578c7f20314c6a72c102466da3d2cb36823df41f00008d219bb13da0", 0x31}, {&(0x7f0000001fc0)="546d89b75af701da91d888b1c6f661e590a4a74dcd2d7c6aa6e82c6f3b1609be4aed47b2f193ca3fcedfbc321bac0a71aa7b441e0d53c49c460f1a418803814c1116a7e2484725730377fbbc787ea964baf1a8b00b77423c964500764d46f17a446a9edc87155e3bfd13e4a16fee3d83fb903ed4003c9ae098ca5059137d703b4e7b1c763d34bd30b2a284aaea26111ed26e", 0x92}, {&(0x7f0000001a00)="36fef92b7b04de2859c3940e384c9976b166684d4302dc6899d0946ce09a61d52080482ed5de77a783ade13c550d83f80d34d8bd4088d9271eb8e54384be264d93a2eb7e76cfcd0e408d21a486050cc8ea2029e3ee813f83395aee49157b02abb5b0d34507fa5e42672d7f10dde2a7117b8e9102af0d0c14718fdb6681fc7b5277f897287a2d668d905f46fb1e523555f8beef39107b3e", 0x97}, {&(0x7f0000001ac0)="83348adffa8f7e0aa829e23d74feb3889167202c915a5224c5a6604ce5dbbe2e423d1ba7444455c18b8ba72b3827574fb949a4257b30a4afc013d5e3cd9e70a15296b3ebd07c1a72cc9ca8b246619cdf541f14e725301e0cc2e69536ef91dfb62c1ad0acd65a6e67ce90b661d590299e204f37934adfb6cc147f0bbd76c46fc183847db03ac75c778c11be5db7d1819c83f9169a975199ac21e3992e98d019a68ff46a3b1a1c48b2df23a7ad9a6e97447c860e5d363cc70d929d88925cfd63d3bf9ddad14de4e510fef507ad2b3a19bb97d71bb207b4bb7ed1b387", 0xdb}], 0x8, 0x0, 0x0, 0x48800}, {0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001c40)="40229ed9829612368e54dbce2b40ac92137d1e2b72e9ef68671922a77f2a5af422d2dae8dac00a002bdbe87c6a2b28aa18d07fbe13a5154c915bdf4661579dec11195083b0c6d3013c463053631358f22f893cdf5df0f1f2a9ad0f56a93f441ee3a82feb40de65dd63475a40ac", 0x6d}, {&(0x7f0000001cc0)="f26c0e89cf6432f579f4ba53d101d7bef3122bc742c2b3f51e80e16a458b72d954398e5912f7e79fc122f263597f810abdb6e905ee2259384f269774a0f660cca60f04981337eb9ad4eb7945ec33f241154054f40b10e0794fda796481a85297c17fb617eaa41ef46d3bc1390ea267bab5c1f7e2f8e97447fe4a4e5e42f7e315c50bae2877727d87283503aca692ffcf5a6d35362345ada8597486b8543463c18cf808e25e40bc5fca30405a45fb0dbad2a19ec3b277f6b853874305950169de2d7dc024fd55c2b5b6dcae2e8364", 0xce}, {&(0x7f00000006c0)="46508f9bf54d27c81fece2f56e64b25ea0f4", 0x12}, {&(0x7f0000001dc0)="41257934dd58cd917ae5838ecf37fdaf2547eb689d4867257e538ebf2b637620d8f55b6eef8323e9ceda827afd75aafcf58c479eba61b41de6b27d215568e3ea07f84ae00b6d1271c49930a3f2d7fd3773184471e205383d4c207a5e0980b8d9f3d552c2f3341d533cc169856323acfb5d1bb9e1ad60db23238420cb6d6ec5b7e73be7b7a8091ae37ee2c160a0054e7eeefeaa394f4045cb182c2a76447b5fa9243ca375d75f1d9fafb59661", 0xac}], 0x4, 0x0, 0x0, 0x24008090}], 0x4, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000dc0)={&(0x7f0000000940)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000980)="ab3b4abf0d1488b84a418dd5c333986d90dca4d4fc79774e17e3d07a550208997a238d63a2ba4221ed188d610d101c72c11aa12568a70523802104d043eb59af4c93e7aa0139101bc04886e726e41bb95109f7cccea5062fb6ec433e7a336e816a63f4226d824fc7ef2a1dc553c78c457d5c2fc8aa4a495e1eb7571dac029f8df9212f2d770f3387def0d71074357f61b2e217974c93af3079ac05bbc822ed958cbcd21b4fb9b2fd361db0209d9da9c0c6d5d6e213", 0xb5}, {&(0x7f0000000a40)="b9e173623bea77557d6c55c59bf9a1df2aaddeba9a1a431a38173f103cf4083982d8b0a36a6fd653b299905210e85e320fafe434e811d1804a920dcc1689592612cbc325ecc2c92ff058f1afa6118c0bbc3885ad73e154f4b57b95b8f44438ce65f39b025b7c88ccd151689ddddfd8b70b76ae00bbaf4804a635f62e02666dba17a56b15a413a51ddc9f481fe68ca55be635d8e17e716fbe39b7a62dfb90", 0x9e}, {&(0x7f0000000b40)="e810a6d409da891d036898c186aab271db65771bd30100fc50e783f2a480ffed361586629c2eb1c3d0eaeff30dc06a361312c50d3025885cd3a4aa2aedb92f7d6a3875cad5e99c48655f39edb5779a3771f7e5c736345e5926ec750d27b7e9714e622103a3d6e70c", 0x68}, {&(0x7f0000000bc0)="eb94340c928f3335567007ca923ed5da28bfa59d3d4566c068faf5663ebd380b7dabbac021bebf684c7389b9d1945bf1f21637dc21", 0x35}, {&(0x7f0000000c00)="8429569c9976bc841092e9024a4e6f38fc4bdf68dfa6ef533d4e509e15", 0x1d}, {&(0x7f0000000c40)="035a272a1f846395b61de6982f2fe4a65606dc8a9ca3ab3a116bd0932e049d86c399921f5bb1539d8f3e04f07ff243cf9cdd1fe84a809731347ecc55b85ea50c8fe1271afa8477b34283491f48f5bdd4d96c766a66c2d8641238", 0x5a}], 0x6, &(0x7f0000000d40)=ANY=[@ANYBLOB="1c000000000000000000000007000000440c6631fffffffffffffffc0000000014000000000000000000000001000000ff0f004f11000000110000000000000000000000010000000900000000000000140000000000000000000000010000000001000000000000"], 0x68}, 0x800) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000040)=@in6={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x33}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x203}}], 0x18}, 0x80) 4.437156615s ago: executing program 1 (id=800): r0 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$nl_rdma(0x10, 0x3, 0x14) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x2400c0c7, 0x1}) io_uring_enter(r0, 0x3516, 0x0, 0xa1, 0x0, 0x0) 4.428595902s ago: executing program 3 (id=801): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0xfd4a) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004480)=[{{&(0x7f0000000340)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/212, 0xd4}, {&(0x7f00000004c0)=""/103, 0x67}, {&(0x7f0000000540)=""/216, 0xd8}, {&(0x7f0000000180)=""/46, 0x2e}, {&(0x7f0000000240)=""/43, 0x2b}], 0x5, &(0x7f00000046c0)=""/144, 0x90}, 0xabe2}, {{&(0x7f0000000780)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000800)=""/89, 0x59}, {&(0x7f0000000880)=""/210, 0xd2}, {&(0x7f0000000980)=""/40, 0x28}, {&(0x7f00000009c0)=""/202, 0xca}, {&(0x7f0000003900)=""/221, 0xdd}, {&(0x7f0000000bc0)=""/196, 0xc4}], 0x6, &(0x7f0000000d40)=""/137, 0x89}, 0x566}, {{&(0x7f0000000e00)=@hci, 0x80, &(0x7f0000002280)=[{&(0x7f0000000e80)=""/169, 0xa9}, {&(0x7f0000000ac0)=""/226, 0xe2}, {&(0x7f0000001040)=""/81, 0x51}, {&(0x7f00000010c0)=""/217, 0xd9}, {&(0x7f0000004780)=""/4099, 0x1003}, {&(0x7f00000021c0)=""/138, 0x8a}], 0x6}, 0x5}, {{&(0x7f0000002300)=@ax25={{}, [@bcast, @bcast, @remote, @rose, @rose, @null, @null]}, 0x80, &(0x7f0000003740)=[{&(0x7f0000002380)=""/189, 0xbd}, {&(0x7f0000002440)=""/208, 0xd0}, {&(0x7f0000002540)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003580)=""/132, 0x84}, {&(0x7f0000003640)=""/135, 0x87}, {&(0x7f0000003700)=""/27, 0x1b}], 0x7, &(0x7f00000037c0)=""/9, 0x9}, 0x3d7}, {{&(0x7f0000003800)=@nfc_llcp, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000003880)=""/106, 0x6a}, {&(0x7f0000003ac0)=""/198, 0xc6}], 0x2}, 0x3}, {{&(0x7f0000003c00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000003c80)=""/9, 0x9}, {&(0x7f0000003cc0)=""/227, 0xe3}, {&(0x7f0000003dc0)=""/83, 0x53}], 0x3, &(0x7f0000003e80)=""/32, 0x20}, 0x100}, {{&(0x7f0000003ec0)=@isdn, 0x80, &(0x7f0000004280)=[{&(0x7f0000003f40)=""/252, 0xfc}, {&(0x7f0000004040)=""/3, 0x3}, {&(0x7f0000004080)=""/98, 0x62}, {&(0x7f0000004100)=""/137, 0x89}, {&(0x7f00000041c0)=""/152, 0x98}], 0x5, &(0x7f0000004300)=""/32, 0x20}, 0xffff}, {{&(0x7f0000004340)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000004400)=[{&(0x7f00000043c0)=""/33, 0x21}], 0x1, &(0x7f0000004680)=""/10, 0xa}, 0x6}], 0x8, 0x22, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x1, 0x8001, 0x0, 0xb49, 0x200000000002, 0x9, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) r2 = syz_io_uring_setup(0xed1, &(0x7f0000000400)={0x0, 0x586d, 0x10300, 0xfffffffe, 0x103}, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0xff39) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00"]}) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0xffffffff, 0x1000006, 'U\x00', "1575a859", "0725eade", '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) socket$inet6_sctp(0xa, 0x1, 0x84) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, 0x0, 0x8, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0x2, 0x8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x87}, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x209, 0xffffffffffffffff, 0x69d0}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0xee01, 0xb8}, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1000ff, 0x2, 0x0, 0x0, 0x4}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18200000, 0x0, 0x9, 0xd0b, 0x8, 0x80000001, 0x3}, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') epoll_create1(0x0) 4.114505027s ago: executing program 4 (id=803): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000020000000000000000dd020000000000000000000000000000000000000000000084010500"], 0x23c}}, 0x0) 4.043971508s ago: executing program 4 (id=804): socket$inet(0x2, 0xa, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x6f01, 0x800}, @val={0x2, 0x0, 0x27, 0x0, 0x27}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @multicast1, @remote, @multicast1}}, 0x2a) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000140)={0x3, "03000000d660c6a1e0ddffffffffffffff000000000000000000dd9b002000", 0xffffffffffffffff}) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000200)={0x40000002, "fa02791d2a69a2610f02000000000000001100010000000800", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r3}) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f00000004c0)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100"}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000000c0)={"0e337b42cc00d331ff0007000000000000001a00", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000040)={"13c5060000000000000000000000feff05000000003343f94dd75a0000000012", r7}) r8 = memfd_create(&(0x7f00000005c0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x3) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="240000001900010000000000000000001c"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000040)=@req3={0x44, 0x3a, 0x1000}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket(0x10, 0x3, 0x0) r11 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r11, 0x0, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0) fcntl$addseals(r8, 0x409, 0xb) 4.015864179s ago: executing program 1 (id=805): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r2, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}], 0x1, 0x400c404) exit(0xfe) sendmmsg$inet6(r2, &(0x7f00000005c0)=[{{&(0x7f00000004c0)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10003}, 0x1c, &(0x7f00000007c0)}}, {{&(0x7f0000000800)={0xa, 0x4e21, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000000c40)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000048c0)=ANY=[], 0x80}}], 0x3, 0x48c0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r3, &(0x7f0000000000)=""/43, 0x2b) memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x9d3d, 0x6a}, 0x2c) socket$inet(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) accept4$unix(r3, &(0x7f0000000100), &(0x7f00000001c0)=0x6e, 0x80800) 3.452754969s ago: executing program 3 (id=806): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x7c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, &(0x7f00000000c0)={0xffff0002, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9}, 0x94) (async) syz_usb_connect$uac1(0x5, 0x9c, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109028a000301ffa0060904000000010100000a240100000202010207240504062e7d0904010000000000000000010101010200000c2402ec79030420be11d1d109050109758b0620010725010006efff0904020000010200000904020101010200001124020306040803000c0000000000000007240116050210090506090002"], 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) (async, rerun: 64) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x0, 0x310, 0x0, 0x0, 0x1d8, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) (async, rerun: 32) ioctl$KVM_CREATE_DEVICE(r2, 0xc018aec0, &(0x7f00000000c0)={0x1}) (async, rerun: 32) syz_emit_ethernet(0x7a, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0xff, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0x4305000f}}}}}}}, 0x0) (async) fcntl$setflags(r0, 0x2, 0x1) syz_usb_connect$hid(0xecd354649168cc25, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x44f, 0xb304, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xb6, 0x80, 0x6, [{{0x9, 0x4, 0x0, 0xf7, 0x2, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x1, 0xfd, 0x1, {0x22, 0xfe5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x2, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x6, 0x1, 0x1}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x9, 0x0, 0x7, 0x10, 0x9}, 0xb0, &(0x7f0000000240)={0x5, 0xf, 0xb0, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0x7, 0x7, 0x2, 0x2}, @generic={0x76, 0x10, 0x2, "15a0a9e28c273d00c6324988ada9c3e347c7c3086fb729fa0a259d3968fc441534875a52a201595e1a98058e36684d5ba6ef31f3565dd81a2e7485d62b7f45e872b9c13e9f84dba421cdc7cf13fc5f27407ab3756407f675c6b54a33cd9f16cd35242dd0cbf0dedbcc1ea3ddbf85d39cd87f5f"}, @wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0x1, 0xa, 0x6, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x92, 0x5, 0x0, 0x80}, @ssp_cap={0x14, 0x10, 0xa, 0x1a, 0x2, 0x9, 0x0, 0xff78, [0xc0, 0xf0]}]}, 0x2, [{0x2, &(0x7f00000001c0)=@string={0x2}}, {0xd8, &(0x7f0000000540)=@string={0xd8, 0x3, "dc57ad6c9c772009de9b2cb547d918265810efe7ef8219479291fb66b277b0bf4be336319d5372cd1f2a70464ef0267d03eace90f2640a317884b2ea35b3890e971c23c1cb0df0ceb90cdf797bbc2aa696b8a0fca1e96eecd766873cf9b84664cf753c5d165a15d0fe75f74bc034f8585e68ce8417732fa54059b376e78044fedf512d297c1daca7d7cfd50bf4cfd8bed5f2c62ba8d93659dded5a55860ca4146a5eaf9c76d67755f2340a20a2aa7683a32ecacd3b9ccd914168f7c04e6d1e6d5f79bda6db9e06fdca880868ea2caaf739ca1ef2f055"}}]}) openat$sndtimer(0xffffff9c, &(0x7f0000000080), 0x8040) (async, rerun: 64) r4 = socket(0x40000000015, 0x5, 0x0) (async, rerun: 64) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x0, @local, 0x3}], 0x1c) (async, rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000bc0)=@filter={'filter\x00', 0xe, 0x4, 0x530, 0xffffffff, 0x248, 0x248, 0x368, 0xffffffff, 0xffffffff, 0x460, 0x460, 0x460, 0xffffffff, 0x4, &(0x7f0000000300), {[{{@uncond, 0x0, 0x208, 0x248, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}, @common=@rt={{0x138}, {0x1b, [0x21e3b551, 0xfffffffb], 0x10001, 0x30, 0x2, [@empty, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @loopback, @mcast2, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @loopback, @private2, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote], 0x9}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "aa5c840e784ba6676c91cc22de48b9eeb10375d1812aaa3932bb9263f6b5"}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, [0x0, 0xffffffff, 0x0, 0xff], [0xffffffff, 0xffffff00, 0xff, 0xff], 'team_slave_0\x00', 'ip6gretap0\x00', {0xff}, {}, 0x11, 0x9, 0x4, 0x48}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x2, 0x4}}}, @common=@ipv6header={{0x28}, {0x18, 0x20}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x40, 0x8}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) (async) sendto$inet6(r4, 0x0, 0x0, 0x4000000, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, 0x4}, 0x10) 2.864161002s ago: executing program 3 (id=807): ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x80010, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4044010) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000200), 0xc0000, 0x0) ppoll(&(0x7f0000010140)=[{r2, 0x2046}], 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mlock(&(0x7f00008bf000/0x1000)=nil, 0x1000) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1) syz_open_dev$swradio(0x0, 0x0, 0x2) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) r5 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x1c}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1f4, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0xfe67) bpf$MAP_CREATE(0x0, &(0x7f0000002440)=ANY=[@ANYBLOB="0200000004000000020000000c00000000140000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000001000000000000000000000000000000aa7a22964fe1fda93ea4729ef39b83497c6103a76d9892eacf774f04238d8134d2fc068bb4508f642abe4a166095bd2eefd0e28ae99db6f07b3c647829d2052131c2ad80b5383c2d4b935e94d899597d67354113d2186027e4f9283c22db2dc89c93521f3c11e31c34438318bc1f123cb88b73367e39441cd753bdcdf2a4c50ef6a013eaf1288cbd52a333b85055cfc11d850aaa7c50d5625c6a298c0ed401b4e2395a7f4dba79de83a38f771c39c29af0141351707bfb37acca0b831a3e7b93a9c266c0bb926e34fa696a08f02ebbdb04390000"], 0x48) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r8, &(0x7f0000000400)={0x2020}, 0x2020) r9 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f0000000340)={0xf000, 0x103000}) 2.853750821s ago: executing program 0 (id=808): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xd60b, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x2, 0xab9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x0, 0x0}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r6, r2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x6, @vifc_lcl_addr=@private=0x8a010100, @rand_addr=0x64010102}, 0x10) setsockopt$inet_int(r0, 0x0, 0x5, 0x0, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000001340)=0xc) statx(0xffffffffffffff9c, &(0x7f0000001380)='./file0\x00', 0x6000, 0x200, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000280)={{'fd', 0x3d, r11}, 0x2c, {'rootmode', 0x3d, 0x1000}}) syz_fuse_handle_req(r11, &(0x7f000000bb40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x0, {0x7, 0x29, 0x1, 0x24ff871999e0dde7, 0xdcf, 0x6, 0xb, 0x802, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r11, &(0x7f0000001040)="0d9ec529eb18ec94a35378619cb10ff8c913f67139447b7ee0cca809e36c363ba1d3975a7446b70c6bdd99e2cff540eda7589ea89efeb498df568916036f0848ede5f089bf502b483c6700002c34b98b1bc085a99e2981103397e0b0eed2ec64c1075798b56a42ea532091f5326c97622a47c53fbf42e71c3ed4b954c559424b49a13598c6c63ef65b62384b038b3e6e98ebecd178289831eaecd986a01c751e8cca7a57c009f2b5310fe9dd8a63b91c4b5b13d1c44d2b874b32ae3e961b9e96a511ffaa3ed20248dfb470460d305e44ffcd287b355380319fd31f7538c6d00de06ddb8f72b3a59c4699c94d7379e1e190c6dd7786e12096f9e963a038b6b4375535047135ecc07b16035ceeb27ed09d77f52b6eae27a03071e060b05bf347b9ba44a984e5db346d230ae9c5324ecfd4e7725bc5019a9f4d20237c820359d73b82f9c668ae71f6b85d5350140a16f988bb2b8010effb52636e0b728be1b1ed37c1b8868ec67edd52951dbf65b479aa25e92667a98c755d88995e6303a48a64317bd4b201fc6dea59381abfb5e0fb1035bbd32a97a6324b08f404fe3991879a0c6362032864031737941d9cc534697da61a43c8723ecd1062906b65c504d86383cdf9631f228372b13aee64f8ea8db00dffc37fa092ab5daeb7431dab37091c44f91c9202df60876a6e06ceee3e6a095406fe5cc1f83de1a4adf36fbef5a94a622132cc85e56fb53a9cff67bc69a24d8c259ccfe19b1925061f0cad95d6b4158c1394b8acfa9a8f52a566c6cb4e0b14dd30c85b309289a5f395e01d981735f6fce6ab30994643d70b2f322b7a233a339e621ea2eb00a0082a175c231b330a58062680546c28db8ff5b7e66c0e3df0a9b74ab72abfd241fcbe1e3d27a2d1eab44cf88180dcef4482c866324133f9e4780b891a7c5000b005cab0c131c225e944fd1aab5de9e8d17b8770b4472b6e4a13b6cce90ba152e5144acf74cd8a9821ce3eae72dc7ddc81b76482226098329c3a8ecb923822610aa0b086f44329522dd8f9ae355b4666d1a10911ef8e21377578b42fe6ee0b2a77917157488d6e0bb388951f80551dcaebf212b396d1f922aec595bd340390d310f6006c4b3efdd80838f39d25470db39d6205ba8f52bac634f8145a3c10ed007acc2f25c5dbfe911f18f44a0c57cee33725eb8c5f2d9112f91787c2c323b67b67d9d1f593d26430d77189d4678fd8d7c11c1f2d744ad59a03a8cffc52ee0293c90b00d61897c80184aa63fcf43c109b06af20c808035af0a0bf9cbe544681768f92a2ebe3b4458dd020fb0550822bc2f769631e00d63bd91e7100299bbc4ce53a35e993e24028dc5c81d46f5377d21f2f38a9688ed981044346b865161b68f3390a50c2e625052396cdb6637e9434904c63d8ca45aa2325626293cdd9cd0179b1d995be10281fa8d281db16320f520e42af268ff30dc2d8885aa3d9e7f294eadb4d827d195cd5d18632928f2153261345c231efd143288b881638b61dc5dab8114c1948d83b8ac4e278f131ec3eef4e87e43a36f4b41a699a741ef3a7cd4f0bc5dbd2dffb1d223a5c5b38b98e49092631a176d15c4f3c077d639726a3482bf2fdc73c2bdb09208aaf90bc64b5fee89d231bb1679de3e5d31662db2c5824ce9941f94500e5a11b8fe79da548efed8cc44e9bc1d5175dd77fc16f8219a83b83ccca2181bf411b0945312598817e08e5277530eccffff17d198613cc8c991349141ced56e79031ab6cb98f3f39e5f20bac76017083041a1ee99ca257d0e0cf95e59617139afb08cf0c6a607d3f2ac2b5d3f4394a4a063c9769bb884ec522d46138228c7e9b5c7ea5e3a6c70815b565ce15a13fd0a5deb28e710c15fe25c744b430b4f6482532fb96566381c56e12632cab5acb5e08d6f973003c96a7d81ff76966e0f93c83c462bfcef230939e48c4983bfed78f68b0f540d1fff2196cbd1f1c1a1c310ec10f5a2745407000bc6db1fcc8540282cc7e96cf5582c4eaf874a2fe6369534176429b7505eb0aade883260806be2d86a42e76b315a76e5f686ca669f49e1f9054a77b8eaff14a43e9a9801244e8e94ff50a17b60dee0122ea70819bae3375070466c7f202c4ea0fc0c9aaae50c43cb65febea224c2b554e937f67689b3e18ed543749a7ef0997a7a7530b918c4ef935137137e1ee7e6a8919fb76a8f008ddcc2d8b2e18f3eb90f7a13cf4f49170ccf50c75de82e92a5e2d1f311e59071ff202b6cae4d6243fc3787cb9fbd401938cc18dcf5620f8b8f74e9e3b13dcde85ef896f31f5a2458118addae77206ab1506882f91873b4828950a7b91ddae74888155a9c486c7c60492813ac0e33362dc4e21e00538e5b05b78271d82486a0d156d4a5a07085bb1cd74f5d63763f18648a489352b5d05107909fe54b5d332cde2900c82c150b11071e028eeb275cc9a9614f1eda4e4830b128870e732d473100c24152aff2aa1659daa65d7e9591ebfcae5dca4e84c9a0965a01668e59843ef4a093d9b01067a0ae9d09e3d810c2cb63600ee05b10fc8685e8cb150e2d6d75baecfb8762f7a7d131417eb0721e19e1d21f5adcc1e09489f06b81d91b48608107fc7b3853e214a3c786a9812113ccbcf09907506d0e9cd72c79793584b4fe06a18a627bd969f628a5936367961f1e7d117d03a8fabc85f5ecdd0ddcfae49aa293893a2e5ae376be11031abc0e05ff250b35926345b52f8d3dc02b7497f7513e759247353db9b8e493120e73981aef4c4d9747621537a089848754c14cda1cad18084274e98ea2bf7400ca846184e0e31a571f9bd770222b1038a4ce60dcf8fe9cca4d60048cc29c37c1345de992e9dc7128ef093c1ce80232a88a3da7ae8bc87120c5b1f405d5186141288998fed9e021cd0ad6b12b51c217849390be3ea00cbd6c755958140bfb9b2a2765ad1f51ac045fdc5c28ee5886b1436015b88bd90d19328f91394110b0d891678e63b63d6cc4d35279f6f616d7692c6fe177a79d80ae8f7e4ad5078d8d7096f3ee664dcdb2f634eba98f4788de1f5e34f32ef09e2f0aee4fdc5bec4bc4aeec5721ac3a2da1bf52da017c3312095403d50dcde39671242b610f11832773796557f71455376a7741ab242a9fc94464180bf224d5e8c79b462e3a816f6c08ab0f5503386d34ddfd808b4b8d5d333548d4b873923c6c297b2fa1abe433ec9264385c50dca40316c37ed85db382e7c853ba331c727043cb3345de9f89b1c804e98205eda3d6b6e042c9c41877d456dcb8f12663e6dc1ba809229536fbcc4c58d01a137eb80af8596dfc7b5fa7a044cd141238aa82e440526e55a28c4ed2f4b26157a0eebb4a77c5ab66fcce2602e1a70aea07e5e7e7e5321d58ad128a5ea6b574730037f24a7300e0ad6fc96bd18e03763bbbf21bd3c388aff1cc5ea13728ba2f8e1eb70148d2603e55bb01cce0763c2020b5627a0ccb35ae3a9b3df380e6d9800d9506219a90971a3b8bde1dae6a43fce2aaecbc026be8f4e9bd749e10c87ed7d78f92014342fa449eef28e7175548e5a8ec4fe7d31fc86737aee63ef40b54485380b6898161676f0d82f76113b12a529fbce4482dd278a90aa416077c677aea623ddb3761bc81527ab7e3d73a3b4c8c3e4352c7c083cee8953ebd972a83caed837587e8d7cf360f28ce6ca71de75c9174e8744ba1098513bd6cc0b18b5d6edea926d5376aeb85488d3712e8f67128f0d3fb2b42f82363a0d4c1c806ff283f6e4ddc10ce4a0803be66a247207d6606c7dd67cd293dada159016d7fd7e88c4df53d09bdd9fd9fa3c732da45fb92bdf6f442eda15edd97bf1928a7699008f0b482240a684ff5efef0cadbf1b4f16888650d59b2bdaeae0d1112a79c5522dd0933ccc16fed7cd0ccabe929f625de8947b3b1532dc04253cca988a1584df2b31492b19410d6f681d614eaa20029592c00c948a98973a9fba87f1397f8859ba543edeb5c0b0db92f65462a1103947d780b539433332d65bd1418bc00c9e815f73e0cc0aca5fcc9f95f707c455013a55a0c4a29093b05b94edc5b5284ec7ccf3ec091002b4229036c174e2927127f40769ece890612bbeb960d9392f442765a2ca8990c52ad7d4441e975a7cf079d139945f2b2a8a34f0e85d76cbc96efbb52cf8b5ae681234e14b6648244d41cfee2d9b189cd831cc2f31ae7e5f11aaaff1629f8c2cf73494ac38e58da7010dd986f8b6134ee0dabfdcb30617d15720cffbec7651f22253aea21696d2ece4fe026543ea2f3473e4c12e65dbb3cbf764ffa0b3a396382b9b7f0c24eaaf3495554b2319b66f3cabf01a8d6cfd1382d94ab71cd11eae2a42e4dc841d4a9732c395688d3377c8ccff7e3f88a3129855a5f41a7de6b6a9ac40a87c288f4821295edfc4f5b8fe5a1fc0162e9820205c809935cc6047e8a835c651be02fb41c21de30ac770d7a7f2108c6a3f1cf2649cac444f028a6ebf4db422cbbdb7fd0cb39109a3130ffae17810bb58f5c557c99670224c2678fa07f1064911e6c665c0d1c26cd2f40f7089789208a48eb339bb8885910e035b4b8c69b1c3ad79270ac6e70b963493a6628b90501822878cdfac866268d914d8af2814612b0198f9e4c6b48e739e414d61f34e2f69ff7cdc4fc7ffe45a64c5faf191ef6c4e31cecebe09a2f6a63d60926ebaa7e925ccea5c93e403c7ec0ee55423ce4893471440006d4c09c141e489dda5577f73b57ecfc764ee5bc1bc88f7866dc6a494e3ee560c956dc12ae51842030251f1cedf2caca15549d0bb4ee3bef03702197350cd7586b5916ef6a0abcb5f30548d22ce5d8c4dbd82030b8d7b5481c51676b7d14d35c20346c74dcc7d96ea0b13f890f755a219993e88739da8246283ebbd82eb1b15956b5ec16ad523768c19ceba9199f97d7bb43b85fa11349ff7fb89a97b463b34c584ae9e2af6c8f20ab528750a22ff6c2297e400065fbd9a4660ec2c658afff6db9b67070352d2aa5e6cfe534eeb5ff271575b828dfd7f537e3627a1a6419ed0c84297fc3d362a52f3860a2eb7ae0a50f06d3c68c4a1463ec331ead7af2dba792332218b04d5b585de1a471d296df6e10316852d50f211e07643f749a1d75410e66e47db40bfcefe4b708d0b2879a50ccbd85939b89fe4b905a6a89a2d5a4e28d18c048e66108a06d8b6a64ec5737b5ae283d914484167c8ac7dde7ec007aad1999854c4d6a0e5f887f99de3662610d5e8d49bac7d41d6fb7d90b4b04939638e2151ba67e75362aded50edfb7d9919b345b5b7df6a909193ce64b20470e3480c68bd764968f4d8a5779ffd9a35e58558272a214ae26a094360b9f2ec97c5e0a7693f4b7509b962cd8537e90ce7be70b54e9531e7295f894b94566df49c50c2265842392dff50e17ed3f7beb9ba4ad0520a73db1d8d3b39759e7fffcbf26517316bc74437fef944fc915ec24affc1a53748cfc883e3ddea9e25063ea8383b06f0d5c9db13a0ff335f52699226b391543060ae5e2c25b585b9efdd5ff9495a4873cac58b5feff5f08717b04e81bfea349accc58fcc6a6505de3aa6ff4985d9c38bb83e8daa663ccb356df3ed52343ed7723687e416816f987c565eae22c7548c1d6b56a5b6819583da0ddf92739f65e604e37b3275a6cb1252d4ef7a515c4b1e9068d714be80066bf0d422f1e4d2ce6f95c9eac081d6e4596a6a8e16a57b732b575b7de16f176ff0e34e84b293d3fd77fa30a7b7cf12a1edd54170e56bf7f2d40620ad56acbc5cc615556300ff9e95ce3dda93c8333f23f0d97a5da12a0fe58f95d6b911f614563d343ac6e4f9fee1d149c94fc75a97ac839b6d8d7b27c5efb870d2bfc6dbe6b688490b23597d83982d7858215c59011042b1957a0b386842621c72f89a9b524008794ffa0c179753ab48d0f73e5ff13624b3b90287eda920fe0f7cfe4094a21ffad3e881b428b77ccac6924d5bde9c781d4189654d8f29885fbde07e6334c6406dd3ece359c6ac7c6147f5c4906e56764e9980a669bfdddd9eb780e7f9988630d1eb098b3e4fd4c795f11441fb6d0ff7cf086eb291b1ec8d90092e1eaf9722ccdcd15408617cdb8c49043bf71a6ea0ee6b7e840344fbcd377b995bfb1faf22754fcb363f6c630501b619bbd87cc13d5df0948a176771d2d69236eb50dd313817d9687967e7d71f854db6bff803f4501d999dfe3da37ccfdf894a7914c4c113fa7a18c3468a52d646a5070614a6f02b7ff21c9f6927f5de55be85ba815f4bb9e29f26a94423c58338947c804e0627d69bc5a6e93fc5fe8cae851700253f2d494622c6127b4d77bf54a1ac27957234628cbe2fea1729ec53be7d90806d510ccddfd76fab1b9bf1207db8b05c3eaa88fa4c0a5db13cec9310f4e02c1d8114705446fd6649df3829aa12786b8d10b4540d8c1f1c8208c4b41998435e3fa1ec5199cb2d3d0c5c04c5e0b3ffd69112252106bb39333ff23b38d167a9b45ad1bdabf434c8695e2676d461b34c5f048e70b67a44d824baa090c8be13a22ef0d0970cc7a94ed4b77bfc3a40427c6c11abd2b415817243f6801d535a3adc9924a1671b645100e822a0c1876a37d9c9e230e3d762f1cfbb89a8b28255ba4cc5b46cb1635cf185578fa068b68bac93991982b48e7faacc09745a7e33bb12de6b25a2342a7e03cff06dde29b4d05de84e56c78fc6d9dcd180438da3136767d5846bfe7168faeac5b9434394bd747126c5c1ecc6621d10817ce9b6540433828a3bb8f6da0cd8f2b54a47cd5473f6bc3dc1234bd115a6890aa678d1bce7840d7a4559cda556740860079e46217c20e45ee59b8b7078d9b70cb6a249eb2e5e4071d044f456fb61649f261689b8d7a532afaf88eb30041242ce491fb7e654a1f06add370e2706f75c2fe1afe8e065804414c660ec4d96f496b1ad87592de8b7d04baa7ab142f580f262c64c57fce8ef933f18904f001809cfdf94eb679c9eced5d125b4f1d0064ca2ccf5eaf61bb7841bd408ae213deeb15d860f7ee7224b9d2dd38ee9f6c3fca6590335715c218db8f8c98e6339a6944817a1ce2e115ae984699861631b9893c143f594d6dde0895a0c7edb9912fe9cd8fd0765227b3963033306d15711387044bc373ac10d7be73cd80f1a79cf1ea0989ea9ae8a0dbbd1227bc33df652792a6bd95f1d21c6497c4c35b9a1eadc0217e322285a2eb832753aae74ef42fc983e58a126b7c23e4b0bac16f0de132cc9cc956ebd209d6b945b1fa9182857e180672a6be7edeb5234830668b1ea749d0a0dd3a244684d4dd76221c3bdf98c2f1eacb7a6dcccafd249b0ba2592c88790de40895799ea4dfb045cc2392dbb623bfe420b24e5a425b84a4b24d787a68bbec9db363ac4e9453df597f0224d8b7b21629e1989e53accbae97e189cf9b59ebf8bb89591fe3fda450af548ffc46eff98b5216e238a9246e2fb95810f8f4d89504633a6d223484a765b9e6e5497159b31c51fa6cc10641bafa81b10c5ab853f3136fa1b4334bcbde99cb4689f077ca3c29c2f1aca2a05762943073d5992aac4d9b0d411ba25905c34fd02b8eb7b9db375a6f6516446cc195eb55eda1e007e26328e9e2642a9c4e90c56440cc60a1db77713860a56820901b3022d55c621e9d54f759dd17fc5b59331c63cf30e07081bf0cdee6cc94ddfe8c6179e7ed86607d4ba7d5f1e97fbc1139b43ae5fd04c1c715f4600f028d0852a421d472b1b48e591b6edfebcd86be3db2caf967b06776096e14f0deffc9bb126ec329c49ada996b963e942d9c404967dc23bdbd0eee951b2879f2ef7ae224d4ff25edac4ddeb2c0b8e579af283e87c625d3fae5286fa855930e45207af7054763937a9247dc38e37e6dee2e325b617280846012e463707b6ccfa2fc399a66e534221a45626cd18c79d46f5c77c2d359e19ea870cd230709b5e33cd52fd43388ef91dea0a1e0df6c72688d9fd32bb67f489a3618604ef1dfa0d7f569d40cc68e39994e4edab4007c988998f59485ce4723c1eeb7c72f7e833418bab47735a91c7ab24e8555d2ccf3a812b6c634c0c3a68271ec8b536aaa442e056945feca6fb4e54d2cf60a0334f494b2bdb6fbd597de0ce9d2cf03333a0c7121e086aa4c657360fbfb60f3ce0fc0d90ff12b03464e8ff0e5e546ff79735c5c800a0f9b680a478c772f60173a760e280d8287681986038444f2103e2894d5809d062cfe8380e34bca86475da3d7634131c2a8cdc98c5927bc137db61f94eaf9a74f87cc85072c201766eae17fbd5b732859fb1b1c980b36e377aa41a95bca18ccea529420e742899af7b968c1fb9c0d181da9f86358dbeea877c3e9123a9289c362fa61d96c707ac94b427318a1e5f21078aa9d1fd7a52704e0d73e527f3ca65b7b459734dd30db5335c450f1dbcc1e4259d657d13b6d6b4adddc3d0eae034d1878cd0aa1825991d75f8e6b5b4c0d6d17e8ce709b19ff794a8ef856abdfac65cd13631f5b66b20f2ebf2f3122d18e03cbfff88206a5998fc3cb2b40634fcecdb8f5bdbfe044dbf169ccd2cd60f7bf033272f38f587943fcc75d2d65d9028c02891c8415706c2b2459b7a3c5cc82b0446088d3b3bcc033ad453136afd4ac4678320fc17288dbfa1c5180ad57508a2a298ed4ebc716ede34fded574d9779be5d56517d4dd40f197312390c488f46914b0927b13901ce70c1684801f2811168fab533998a1fdabbb6e683abfa021f6b80077f19455c34cecf5dbdb2fa6e3930eb5940cb14504050cc74249424310dff81116b8f2076b8ebece84c302e758fa90af5a1888aa8a5a2bff4aeb7ebd1c7a216bdbb84bf9c021caf3c8efbfdc5d3aede46381bcda372a5398c89868ad57287736fec2a7e8ed638974fde5875eafa506a6bd7f772d2b221f4bde4920fe0c56f8e0847e2a7e8387c64ddef4203d77a526c46d7871befe0c5f9128bd67319acd963fc040185aac4e7815f728bbd7ffd8f3d125e63320182f202fa9a52505be9585556a5d1308c118ccdf01978027cbace7ab339d6f53d15e795b7f3fedae4786c3f257ed80ee634375dc2333ceed1ccaeab1b6be7a9611ff33d79dccdec2007558c06dfc06612d56d37882e5f1de340cf05f4fffbe1a5def6d045bc5bdaf633f07360f9028cedd103bf03fec8beb9fdbf8c5fc684d12efae1859c53e2cc3e2f508a9cd0410ec036648d3760dd591f7ae04e4cdd61a2566319c943f0b63d87e422dfe5c0d1edcb2dc515778a0d7bb2c93ced3b1435adbc51d3fdca9c13679397bc4490093d64869998d6a28bb862ead0fa411585289cc00dc199eac6c607b8a84123dad3be80dd8fd86aa202113131046336352235f34c05f5ea6d5265adda98edbbfd11d6839c5b1bfe4fad4e688558d633d4a281df44d9c0a35abd464e01f8ab01a1e272cc8cd155a40b8aca4c6b1dc894c0fdc02f15a8f67ce94c7f99b6fcc0e4a3a8a71365645ad7809d47bb26f46ed8bd02f6e8f3d277224f82f3d41695f367e343ac6d507413f4bdacf9e344a49156c4de36d68c075415f8004748055b38b8a4110f869fafcc59cdae5663eda72a05be365a50e98bfd4b00e35aef687afae7bd6622cdd725326776f6fb1476c8cf8c20a0e5223e2bea494a1bbe4e79b25a5e48ba34bc66a84ecc4a0aba98e74ca2b1f61893e61a29498d855a778a2a9ce7b7fcaa44b4aedcbd0e28d6c49bdb6776975bf69161f372b964e4288ce6a3b877c3126f90c4c9749d45b8c5c840983b035993e484a945be5fc9d2d1bd3f3de4e6de7bc74a7a07b13e9e82acc11db85454f1d928fe52ad42ca783fd20dd3e94471b498c2736af40d2a45ff74f9ef874639e33306daa8a667674571e2ed93a48f49b57e9e3382fa8090774bc795609ee510b6a1ca48d9833819cbe8ac77eeebb0e3b6c59ced2d1ab355264934ff1914a3f654249bba60a692dd36368b8a866b333320e57e9c7d3646c375696ff14e303780ffd7b957d89ccdf57823d2d1e158773c2075233dd2f331eafe3802da683c293eaa24cd8b63a7582ddb202cd6f8c837c74f823727641c7eb680fe51ce7f250adb34956e4cab17b8a5f10edf144c700e376c682dd46c8fc89830fee1a44fafe0a5a2e7581d5d16ad6267d1dc2d5be8547f9352d1591b42de94f2559b44a80038360c6394541a77d95b196558a479b609882fc597b9cbe285ad7c7a41133ed85c8ab6e6dec5bf70f9e787985512d48865022705098a6703b255a6f2b05b62fc7ab32e67f06d785ccb33fb348205a76939e6c2991486c5aae8ec1556b2f8e30ca445a4a495cbf2c6013042b8cea615e58899fccbbf1fc4f17a6dc37e46b17ada0be033dc67904fbd7903086d3417e423af64338426a84ca0c2a3252db62695f9cdf10ebc09b9da5747d30e7f4adfb374e1d2bb24542b0373b1fb897690b49fe24d8575ec9800f019c9c76459421c11f002989ac82c13c04a202cf7f9f38b053f9a680d4d5012887a11d25cad201df20a4eee6d2c0474055579ac729c7514a88b1675bbf6b773448c6c1a5ccd157f44f7e032a6b848f2e734d773f029e48fd13c90d41666f9bd4e9bea91950737b6e7502f9d2677938f240e3f905d6095bb0f8bbe961b99b2d025538c3888bfff8957e3592ee5b26a75399b59c697f59fcdfbbe3bcffb8777340875611bf75486d2378e68de771800bfffe0572fb36ca855ec5fc8cb90c76455773c36ec40b101fb30c48f8a8e775f5220e024b4da9dddc2fcf4da413e7c5db9e0567cbb5fad0c91d779a0939debd9247d3f7d8107fd986f73a9c9067e6594fabde0b9e887040cfbe7d31332f41259de57b38f33275597725392efea51f290b8e1b5c243ffd9eb4c0231600f9b4b204344736849d527156c4720a463bbe88fbbdc333099d949853d5c6fda98bcd35ad3f1fb1d5a7d00541a8a202c8590e35360bb9d25d6431476649e1898f901fad37975d6dce9833956e7a78d0306f533d4aa3c9676017c7abc7e1f8f2f117774a4f5beba55d1c3cd580fb18defccc349cce24e94a4cf1f4c6f45d783ee0167a55369c9b5e1eb6d0a836f3eb2354fad3cd771a9d777ff84c63120baee86ddc52b3e6817dce339ac9c240e75f3e2f77afbffbc1d54eb5936d045370ce3b77365c5320892dc7bc36e488019461d2e552969de9f25bd8de049d693be450c43c5d22d7569fc384e8d56ddb577c5f3c3471f5ba2998bc0c697a06b6d8ba5f2f7236e78aaed69b468e761a5f07145c0326ebb94f50aaa8c5666c92006d8d139036f981003933f8e2eba106a0e251fa9f5407544e44aedbbb271a3bf1c660a9cb8c74dbd0713aaebba2dd046af8b9428709646521d6bf387a92996b35748e1e67b602309b7da0fb642e89de19f550925f4db082ef7e9821ac4b2aee93c9cf791c086751c4cb4172608a4f903dc40727858046851529205b45786e294c17abf5e5f6bc730cbfb8fd977c5501a8140ac7984a267880b53cb94157be9ac157be1cf12d8a9e5612947772b734ed6ae30e548a3b2faecf94a7e03f86317f52ac797aefb957d2a29de8f8ced414ce22c800e0dc7e49d3672fca633248f3e68c00", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1, {0x1, 0xffffffff, 0x0, {0x20000000, 0x4, 0x7, 0x1, 0x200000008, 0xffffffffffffff0c, 0x9ed, 0xfffffffb, 0x80009, 0x1000, 0x9e7, r12, r13, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f00000014c0)={0x0, 0x0}) sendmmsg$unix(r7, &(0x7f00000015c0)=[{{&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000000240)="12d118ba831d7dedac73add9f48bcd7875db82d1df62ea38d1e58869a1ab19499994696eb0b1b7397305847442d1b454a12dd257988a46a4b9769def03f2ac344b4f4d3459a145cd2af3642747097199a51767e0d717be6018be1a45ac24d3169f25e56e858633bf8b57513fc6df8df4a9ed", 0x72}], 0x2, &(0x7f0000001500)=[@rights={{0x34, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r8]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, 0xee01, 0xffffffffffffffff}}}], 0xb8, 0x24000085}}], 0x1, 0x10) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet(0x2, 0x4000000000000001, 0x0) 2.717950026s ago: executing program 4 (id=809): r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000014c0)=0x60, 0x4) getresuid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000240)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fchown(r0, r1, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, 0x2e, 0x9, 0x70bd29, 0x0, {0x4}, [@nested={0x9, 0x11, 0x0, 0x1, [@generic="31f9e05e2f"]}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f00003d9000/0x1000)=nil, 0x1000, 0x2) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0xffffffff}, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r9 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f00000002c0)={0x4, 0x1}) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4004, @fd=r9, 0xd3f, &(0x7f0000000400)=""/46, 0x2e, 0x4, 0x0, {0x0, r8}}) io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000180)={[0x8000, 0x7, 0xf, 0x502, 0x3, 0x6, 0x200, 0x2, 0xcff, 0x6, 0x61, 0xde, 0x4, 0x1, 0x7, 0x5], 0xdddd2000, 0xa00}) socket$kcm(0x29, 0x5, 0x0) (async) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000014c0)=0x60, 0x4) (async) getresuid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000240)) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f0000000380), 0x0) (async) fchown(r0, r1, r2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, 0x2e, 0x9, 0x70bd29, 0x0, {0x4}, [@nested={0x9, 0x11, 0x0, 0x1, [@generic="31f9e05e2f"]}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) (async) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) (async) mprotect(&(0x7f00003d9000/0x1000)=nil, 0x1000, 0x2) (async) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0xffffffff}, &(0x7f0000000180), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f00000002c0)={0x4, 0x1}) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4004, @fd=r9, 0xd3f, &(0x7f0000000400)=""/46, 0x2e, 0x4, 0x0, {0x0, r8}}) (async) io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000180)={[0x8000, 0x7, 0xf, 0x502, 0x3, 0x6, 0x200, 0x2, 0xcff, 0x6, 0x61, 0xde, 0x4, 0x1, 0x7, 0x5], 0xdddd2000, 0xa00}) (async) 2.531132695s ago: executing program 2 (id=810): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001580), 0x240580) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = add_key$fscrypt_v1(&(0x7f0000002e40), &(0x7f0000002e80)={'fscrypt:', @desc3}, &(0x7f0000002ec0)={0x0, "ea3d44c1153597ed27b8123fae53940b4ead6634607d5d6a4e20bacc9458a97062e2819310bd0b759212f0d12845896e21c15479910adfa38266dabe453348ed", 0x1d}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x74) 2.360411475s ago: executing program 1 (id=811): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_emit_ethernet(0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffff9bf31e6209e2dc68ccffaaaaaaaaaa00080045030004000000001c72cc909cf82f907800000000e00000012480000000000086ddffa9080088be00000000100000000100060004000000080022eb000000002000000202000000000000001004000000000000000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x8, 0x1, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'}) syz_usb_connect(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196144f01020301090224000100000020090400000206d3450009050102100000000009058b02"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f00000001c0)={0x40, 0x15, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.319137542s ago: executing program 2 (id=812): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB="00022dbd7000fcdbdf25420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f70730000000005008300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f70730000000005008300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500830001000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000"], 0xf0}, 0x1, 0x0, 0x0, 0x40}, 0x40) r1 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20004000, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, 0x0) r7 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x4525, 0x0, 0x1, 0x12d}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x8, "ddd6d29b1f15e144"}, &(0x7f00000002c0)=0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r7, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r7, 0x22d0, 0x20, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0xfec00000, 0x8, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0xdddd1000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xdddd0000, 0xdddd1000, 0xb, 0x4f, 0x2, 0x7, 0x19, 0x1, 0x81, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0x5, 0x3, 0x46, 0x2, 0xd, 0x6, 0x8, 0x8, 0x1}, {0x70000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0xeeef0000, 0x4000, 0x4, 0x6, 0x3, 0x7d, 0x1, 0x1, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x1, 0x0, 0x8, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x9, 0x3, 0x0, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0xdddd1000, 0x300, 0x1, 0x2000, 0xe6e70c00, [0x3, 0x3ff, 0x7, 0xc5]}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)=@x86={0x3, 0x7, 0x8c, 0x0, 0x6, 0x7, 0x81, 0xb6, 0xa, 0xfc, 0x8, 0x44, 0x0, 0xee5, 0x0, 0x9a, 0x2, 0x80, 0x1, '\x00', 0x2, 0x3}) connect$can_bcm(r1, &(0x7f0000000140), 0x10) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f0000000480)={0x8, &(0x7f0000000880)=[{0x55d, 0xad, &(0x7f00000003c0)="eec6deb89ba3d15051aa2615b2613fdbb2374df4e621626c87d6712677e57d588bfba46bdc4b4617f45795f3c7d0fd74a8eeba38a861948f89751e89d92beb6b8cf1d128182349a45335202ca842a5fe4b8ba26e247519fb0666c53a2ba76154073ff1f575bdd1e432fc5d44ac168a6eb7759d64d3d0602a6c1426cb2110a1ef6f9ffde8222422027e741da1f751f7859cbb4537dadb9598ddcc7a3afcd2ccbdec6189994b63ddc0803c6f1568", 0x1}, {0x3ff, 0x97, &(0x7f0000000540)="fe5150f54bdb8ac349145bf64588c1bddee14e1196873d1017aad15b755b69509de13e66807327990b7966db302664ec2ea3c951a4c1e3bde99dd43f8cf0512231c61728a23e1b02fe71360b751a17e25e877e975fb1e26537352bd6059331146b77215625a0db2fe0c1c66fc2d8579727949f16967333d9415a7be9f24e1e4b02f54676a5c630366a05640656778c65109091372829f7"}, {0x9, 0x1000, &(0x7f0000002480)="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"}, {0x0, 0x72, &(0x7f0000000600)="03c48bfb1bda1df31aeef78083b0d0c39d473e1a779763b1e0865e2e3a232d2e1f7c9b2931b1090413053c5c36d68bb173160b8cda1e626f9800e1f6c8101cd631312aad855117b16103b5a85a441408833e0ea31d2b054e22e0fd2f8dea599e7d87b847b9a62d8e5851e5e21d2c97959346", 0x0, 0x1}, {0xc6fd, 0xc7, &(0x7f0000000680)="864c53ff94b557b676e7c952cf0fb09d40878f9a1c6aca28f8ee10c40c8aa9c90058a587d7fa2d3fe34189ef4499cf8cee31ad5f6175c7e289bb1dfedbd4b186bdc4c2fe003b83e6a5dd38eba4d8aede256d13183250d4eb8ed7f739167e26f90cf95a26970805f0acf2480359d9b6faa01ffe879ea75c90d46b0f1f5b1581c81cd2d70fc2e927b9238c7798f254735d14937a6a574196e42783d6699670e8b3457c3f793310192c2858315c33100c32809fd44c73f279d49b4d669496d15642d95c2a59ec88c0", 0x1, 0x1}, {0x3, 0x1000, &(0x7f0000003480)="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"}, {0xfffffff8, 0xa, &(0x7f0000000300)="2cf36afc206da3513b76", 0x0, 0x1}, {0xfffffffc, 0xf7, &(0x7f0000000780)="5456c1d2b367e34d75ab08687a0fede679f21f66d64ffcbca84e01cd6e69bb4d30150fa67132595bdd1b071f13c6195a04f99ecaa2bb0a7113e9237a6d53c91182aab8cd46aca51115857814d77b4a4c30b7cd883ec8d23fb8eeda6b816fc44ff2f95a38b0e1ac126fceffad31cf5b604dacfbf97cf0959139fb5ad74ef32116970c71139de2a92a00ed5ac34c455f10f231e40313acf29b8dd090bc27e4a0490c56d9118beb578a8ea94d41171ea8f2f7c36e0999811cdbb3714f510c44710d847481d9549a9a5eb029db58472b4773775ec65bf4d66347b8dbe181ab4ad77107a838c09335dc3d6002f2018e360fa5268bbd3b1dd47c", 0x0, 0x1}]}) 2.166277298s ago: executing program 0 (id=813): write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0314f9f4070009040002000000010000000000000008", 0x1d) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x711240, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, 0x0, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x1ff}}, './file0\x00'}) r2 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r0, &(0x7f0000000000)=""/43, 0x2b) getdents64(r2, 0x0, 0x0) 2.161530224s ago: executing program 4 (id=814): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000030000000000000000dd020000000000000000000000000000000000000000000084010500"], 0x23c}}, 0x0) 2.093934591s ago: executing program 0 (id=815): r0 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$nl_rdma(0x10, 0x3, 0x14) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x2400c0c7, 0x1}) io_uring_enter(r0, 0x3516, 0x0, 0x2000, 0x0, 0x0) 2.007406844s ago: executing program 2 (id=816): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0xfd4a) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004480)=[{{&(0x7f0000000340)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/212, 0xd4}, {&(0x7f00000004c0)=""/103, 0x67}, {&(0x7f0000000540)=""/216, 0xd8}, {&(0x7f0000000180)=""/46, 0x2e}, {&(0x7f0000000240)=""/43, 0x2b}], 0x5, &(0x7f00000046c0)=""/144, 0x90}, 0xabe2}, {{&(0x7f0000000780)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000800)=""/89, 0x59}, {&(0x7f0000000880)=""/210, 0xd2}, {&(0x7f0000000980)=""/40, 0x28}, {&(0x7f00000009c0)=""/202, 0xca}, {&(0x7f0000003900)=""/221, 0xdd}, {&(0x7f0000000bc0)=""/196, 0xc4}], 0x6, &(0x7f0000000d40)=""/137, 0x89}, 0x566}, {{&(0x7f0000000e00)=@hci, 0x80, &(0x7f0000002280)=[{&(0x7f0000000e80)=""/169, 0xa9}, {&(0x7f0000000ac0)=""/226, 0xe2}, {&(0x7f0000001040)=""/81, 0x51}, {&(0x7f00000010c0)=""/217, 0xd9}, {&(0x7f0000004780)=""/4099, 0x1003}, {&(0x7f00000021c0)=""/138, 0x8a}], 0x6}, 0x5}, {{&(0x7f0000002300)=@ax25={{}, [@bcast, @bcast, @remote, @rose, @rose, @null, @null]}, 0x80, &(0x7f0000003740)=[{&(0x7f0000002380)=""/189, 0xbd}, {&(0x7f0000002440)=""/208, 0xd0}, {&(0x7f0000002540)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003580)=""/132, 0x84}, {&(0x7f0000003640)=""/135, 0x87}, {&(0x7f0000003700)=""/27, 0x1b}], 0x7, &(0x7f00000037c0)=""/9, 0x9}, 0x3d7}, {{&(0x7f0000003800)=@nfc_llcp, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000003880)=""/106, 0x6a}, {&(0x7f0000003ac0)=""/198, 0xc6}], 0x2}, 0x3}, {{&(0x7f0000003c00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000003c80)=""/9, 0x9}, {&(0x7f0000003cc0)=""/227, 0xe3}, {&(0x7f0000003dc0)=""/83, 0x53}], 0x3, &(0x7f0000003e80)=""/32, 0x20}, 0x100}, {{&(0x7f0000003ec0)=@isdn, 0x80, &(0x7f0000004280)=[{&(0x7f0000003f40)=""/252, 0xfc}, {&(0x7f0000004040)=""/3, 0x3}, {&(0x7f0000004080)=""/98, 0x62}, {&(0x7f0000004100)=""/137, 0x89}, {&(0x7f00000041c0)=""/152, 0x98}], 0x5, &(0x7f0000004300)=""/32, 0x20}, 0xffff}, {{&(0x7f0000004340)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000004400)=[{&(0x7f00000043c0)=""/33, 0x21}], 0x1, &(0x7f0000004680)=""/10, 0xa}, 0x6}], 0x8, 0x22, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x1, 0x8001, 0x0, 0xb49, 0x200000000002, 0x9, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) r2 = syz_io_uring_setup(0xed1, &(0x7f0000000400)={0x0, 0x586d, 0x10300, 0xfffffffe, 0x103}, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0xff39) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00"]}) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0xffffffff, 0x1000006, 'U\x00', "1575a859", "0725eade", '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) socket$inet6_sctp(0xa, 0x1, 0x84) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, 0x0, 0x8, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0x2, 0x8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x87}, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x209, 0xffffffffffffffff, 0x69d0}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0xee01, 0xb8}, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1000ff, 0x2, 0x0, 0x0, 0x4}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18200000, 0x0, 0x9, 0xd0b, 0x8, 0x80000001, 0x3}, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') epoll_create1(0x0) 1.930691431s ago: executing program 4 (id=817): rt_sigprocmask(0x0, &(0x7f0000000200)={[0xf7fffbfd]}, 0x0, 0x8) (async) r0 = gettid() (async) r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x5, &(0x7f0000000140)={0x2, 0xffffffff}) rt_sigprocmask(0x2, &(0x7f00000001c0)={[0x800000000000007]}, 0x0, 0x8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000000)) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 32) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, 0x0) 1.709689284s ago: executing program 0 (id=818): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f0000000200)={0x74, 0x0, 0x10}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r4, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x7, 0x81, 0x8, 0x18, 0x10, 0xfffff801}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x10}]}, 0x3c}}, 0x0) shmget(0x0, 0x2000, 0x54000000, &(0x7f0000ffc000/0x2000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000080)={r8}) 811.920181ms ago: executing program 2 (id=819): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x8898, @mcast2, 0x7}, 0x1c) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1004) (async) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc, 0x10012, r0, 0x0) (async) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x404089d}, 0x20048000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 650.859226ms ago: executing program 4 (id=820): socket(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x34}}, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e24, 0x8c, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffcb91}}, 0x0, 0x0, 0xc, 0x0, "3f114438efdaca16d374b49a08003535d5bd9db3c8572560f4d1be5cd41f771666fd81baadb27900"}, 0xd8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80180) write$P9_RLCREATE(r4, &(0x7f00000003c0)={0x18, 0xf, 0x2, {{0x0, 0x4, 0x8}, 0x3}}, 0x18) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023893) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 634.335355ms ago: executing program 3 (id=821): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r2, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}], 0x1, 0x400c404) exit(0xfe) sendmmsg$inet6(r2, &(0x7f00000005c0)=[{{&(0x7f00000004c0)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10003}, 0x1c, &(0x7f00000007c0)}}, {{&(0x7f0000000800)={0xa, 0x4e21, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000000c40)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000048c0)=ANY=[], 0x80}}], 0x3, 0x48c0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r3, &(0x7f0000000000)=""/43, 0x2b) memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x9d3d, 0x6a}, 0x2c) socket$inet(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) accept4$unix(r3, &(0x7f0000000100), &(0x7f00000001c0)=0x6e, 0x80800) 0s ago: executing program 1 (id=822): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffd, 0x381, 0x0, 0x0, 0x9e25}, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000200)=0x1b) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xb3d) ioctl$TCXONC(r2, 0x540a, 0x2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x2, @initdev={0xac, 0x1e, 0xb, 0x0}}, 0x2, 0x1, 0x1, 0x2}}, 0x26) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb10000000010200090502", @ANYRES32], 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) syz_clone3(&(0x7f0000007040)={0x28000, 0x0, 0x0, 0x0, {}, &(0x7f0000006ec0), 0x0, 0x0, 0x0}, 0x58) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000140)={0x0, 0x6, 0x4, {0xb, @pix={0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x8001, @empty, 0x80000001}, 0x1c) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="330d0000000000000502fff9c91000000000000000000000001600000000010200000710000000020207ea000000000000000000c91000000000000000000000000000000000072800000001080002000400000000000000df000000000000000180000000000000ffff000000000000f7606dc2e84dfd9de66814f8b1ebdc0d9d550a5fa62cd4ee4e36b4200bd9b29c888709a9e9f266762d52c6430ca3bdc8860e920d3abe1bd43d771c08ce9a97885bc2d39b2ce277318cf7c6fa01cac4cd19979555aca9fca96e99c5c05ca9bd0f7165ba1f1e74051f825423a94ec2b1b68c326927238d8f47a8c7c81c55040d237a0ec8fd09"], 0x70) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) kernel console output (not intermixed with test programs): device number 20 using dummy_hcd [ 159.632419][ T7386] syzkaller0: entered promiscuous mode [ 159.643880][ T7386] syzkaller0: entered allmulticast mode [ 159.653854][ T5917] usb 5-1: Using ep0 maxpacket: 16 [ 159.661714][ T5917] usb 5-1: config 0 has no interfaces? [ 159.669453][ T5917] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 159.679063][ T5917] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 159.689923][ T5917] usb 5-1: Manufacturer: syz [ 159.734530][ T5917] usb 5-1: config 0 descriptor?? [ 160.202280][ T7377] netlink: 'syz.4.364': attribute type 1 has an invalid length. [ 160.303824][ T5917] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 160.561410][ T5916] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 160.629258][ T5917] usb 1-1: Using ep0 maxpacket: 32 [ 160.665156][ T5917] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 160.704619][ T5917] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 160.714448][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.754550][ T5917] usb 1-1: config 0 descriptor?? [ 160.792477][ T7377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.803833][ T5916] usb 4-1: Using ep0 maxpacket: 8 [ 160.818900][ T7380] bond0: (slave gretap1): making interface the new active one [ 160.830435][ T7380] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 160.847170][ T5916] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 160.910119][ T5916] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 160.929662][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.954167][ T5916] usb 4-1: Product: syz [ 160.972737][ T5916] usb 4-1: Manufacturer: syz [ 160.983028][ T5916] usb 4-1: SerialNumber: syz [ 161.009197][ T5916] usb 4-1: config 0 descriptor?? [ 161.026858][ T5916] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 161.651940][ T5916] gspca_zc3xx: reg_w_i err -71 [ 162.014983][ T7421] xt_l2tp: v2 sid > 0xffff: 4294967293 [ 162.036214][ T24] usb 5-1: USB disconnect, device number 20 [ 162.255598][ T5916] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 162.262238][ T5916] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 162.273627][ T1167] bond0 (unregistering): (slave gretap1): Releasing active interface [ 162.286695][ T5916] usb 4-1: USB disconnect, device number 23 [ 162.321463][ T7439] netlink: 48 bytes leftover after parsing attributes in process `syz.4.383'. [ 162.443582][ T1167] bond0 (unregistering): Released all slaves [ 162.464503][ T7434] dvmrp1: tun_chr_ioctl cmd 2147767517 [ 162.596559][ T7439] fuse: Unknown parameter 'v' [ 163.014020][ T24] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 163.103810][ T5955] usb 1-1: USB disconnect, device number 22 [ 163.153798][ T5916] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 163.309870][ T24] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 163.318427][ T24] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 163.343092][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.358177][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 163.369758][ T5916] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 163.382135][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 163.397071][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 163.397077][ T5916] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 163.397101][ T24] usb 3-1: config 1 has no interface number 0 [ 163.415222][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.465295][ T24] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 163.479702][ T5916] usb 4-1: config 0 descriptor?? [ 163.488772][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.502956][ T5916] em28xx 4-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 163.523903][ T5955] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 163.547025][ T24] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 163.781629][ T5955] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 163.831732][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.222571][ T5955] usb 1-1: Product: syz [ 164.223779][ T7464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.228160][ T5955] usb 1-1: Manufacturer: syz [ 164.247157][ T5955] usb 1-1: SerialNumber: syz [ 164.300368][ T7464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.330321][ T24] snd_usb_pod 3-1:1.1: set_interface failed [ 164.342550][ T24] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 164.356725][ T24] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 164.446147][ T24] usb 3-1: USB disconnect, device number 16 [ 165.068489][ T5955] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 165.080828][ T5955] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 165.097001][ T5955] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 165.127686][ T5955] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 165.193619][ T5955] usb 1-1: USB disconnect, device number 23 [ 165.367932][ T7494] netlink: 'syz.4.398': attribute type 1 has an invalid length. [ 165.513787][ T48] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 165.666908][ T48] usb 3-1: not running at top speed; connect to a high speed hub [ 165.677591][ T48] usb 3-1: config 6 has an invalid interface number: 90 but max is 0 [ 165.686652][ T48] usb 3-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 165.696084][ T48] usb 3-1: config 6 has an invalid interface number: 63 but max is 0 [ 165.704420][ T48] usb 3-1: config 6 has 2 interfaces, different from the descriptor's value: 1 [ 165.713587][ T48] usb 3-1: config 6 has no interface number 0 [ 165.719965][ T48] usb 3-1: config 6 has no interface number 1 [ 165.726252][ T48] usb 3-1: config 6 interface 90 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 165.737438][ T48] usb 3-1: config 6 interface 90 altsetting 3 endpoint 0x7 has invalid maxpacket 544, setting to 64 [ 165.748469][ T48] usb 3-1: config 6 interface 90 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 165.760184][ T48] usb 3-1: config 6 interface 90 altsetting 3 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 165.790836][ T48] usb 3-1: config 6 interface 90 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 165.810572][ T48] usb 3-1: config 6 interface 90 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 165.821497][ T48] usb 3-1: config 6 interface 90 altsetting 3 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 165.833293][ T48] usb 3-1: config 6 interface 90 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 165.866246][ T48] usb 3-1: config 6 interface 90 altsetting 3 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 165.907902][ T24] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 165.917902][ T48] usb 3-1: config 6 interface 90 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 165.966377][ T48] usb 3-1: config 6 interface 90 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 165.991759][ T48] usb 3-1: config 6 interface 90 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 166.016354][ T48] usb 3-1: config 6 interface 90 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 166.046339][ T48] usb 3-1: config 6 interface 90 altsetting 3 has 15 endpoint descriptors, different from the interface descriptor's value: 16 [ 166.074692][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 166.089653][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.110618][ T48] usb 3-1: too many endpoints for config 6 interface 63 altsetting 225: 116, using maximum allowed: 30 [ 166.124985][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.140118][ T24] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 166.149708][ T48] usb 3-1: config 6 interface 63 altsetting 225 has an invalid descriptor for endpoint zero, skipping [ 166.162455][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.170713][ T48] usb 3-1: config 6 interface 63 altsetting 225 has 1 endpoint descriptor, different from the interface descriptor's value: 116 [ 166.191421][ T24] usb 1-1: config 0 descriptor?? [ 166.209980][ T48] usb 3-1: config 6 interface 90 has no altsetting 0 [ 166.220180][ T48] usb 3-1: config 6 interface 63 has no altsetting 0 [ 166.234413][ T48] usb 3-1: New USB device found, idVendor=0c45, idProduct=62b3, bcdDevice= d.c2 [ 166.244999][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.253049][ T48] usb 3-1: Product: syz [ 166.257823][ T48] usb 3-1: Manufacturer: syz [ 166.262452][ T48] usb 3-1: SerialNumber: syz [ 166.482941][ T5906] usb 4-1: USB disconnect, device number 24 [ 166.586768][ T48] usb 3-1: USB disconnect, device number 17 [ 166.672670][ T24] corsair 0003:1B1C:1B02.0006: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 167.213823][ T7496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.222538][ T7496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.656166][ T7521] FAULT_INJECTION: forcing a failure. [ 167.656166][ T7521] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 167.669387][ T7521] CPU: 1 UID: 0 PID: 7521 Comm: syz.3.406 Tainted: G L syzkaller #0 PREEMPT(full) [ 167.669404][ T7521] Tainted: [L]=SOFTLOCKUP [ 167.669408][ T7521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 167.669414][ T7521] Call Trace: [ 167.669420][ T7521] [ 167.669425][ T7521] dump_stack_lvl+0xe8/0x150 [ 167.669444][ T7521] should_fail_ex+0x412/0x560 [ 167.669459][ T7521] _copy_from_user+0x2d/0xb0 [ 167.669475][ T7521] ucma_write+0x15d/0x2f0 [ 167.669489][ T7521] ? __pfx_ucma_write+0x10/0x10 [ 167.669499][ T7521] ? security_file_permission+0x75/0x260 [ 167.669509][ T7521] ? rw_verify_area+0x255/0x4d0 [ 167.669526][ T7521] vfs_writev+0x4bd/0x990 [ 167.669538][ T7521] ? __pfx_ucma_write+0x10/0x10 [ 167.669550][ T7521] ? __pfx_vfs_writev+0x10/0x10 [ 167.669566][ T7521] ? __fget_files+0x2a/0x420 [ 167.669579][ T7521] ? __fget_files+0x3a0/0x420 [ 167.669588][ T7521] ? __fget_files+0x2a/0x420 [ 167.669602][ T7521] do_writev+0x154/0x2e0 [ 167.669613][ T7521] ? __pfx_do_writev+0x10/0x10 [ 167.669628][ T7521] do_syscall_64+0xe2/0xf80 [ 167.669639][ T7521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.669648][ T7521] ? trace_irq_disable+0x37/0x100 [ 167.669658][ T7521] ? clear_bhb_loop+0x60/0xb0 [ 167.669669][ T7521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.669678][ T7521] RIP: 0033:0x7f699bd9aeb9 [ 167.669689][ T7521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.669696][ T7521] RSP: 002b:00007f699cd0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 167.669707][ T7521] RAX: ffffffffffffffda RBX: 00007f699c015fa0 RCX: 00007f699bd9aeb9 [ 167.669714][ T7521] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000004 [ 167.669720][ T7521] RBP: 00007f699cd0c090 R08: 0000000000000000 R09: 0000000000000000 [ 167.669726][ T7521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.669731][ T7521] R13: 00007f699c016038 R14: 00007f699c015fa0 R15: 00007f699c13fa48 [ 167.669746][ T7521] [ 167.959516][ T7524] ipvlan2: entered promiscuous mode [ 168.000533][ T5916] usb 1-1: USB disconnect, device number 24 [ 168.512127][ T7536] netlink: 72 bytes leftover after parsing attributes in process `syz.3.409'. [ 168.954995][ T7536] geneve1: entered promiscuous mode [ 170.099425][ T7563] netlink: 16 bytes leftover after parsing attributes in process `syz.0.418'. [ 170.315973][ T7568] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 170.322693][ T7568] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 170.335463][ T7566] netlink: 36 bytes leftover after parsing attributes in process `syz.0.419'. [ 170.346321][ T7566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.419'. [ 170.356332][ T24] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 170.364164][ T7566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.419'. [ 170.394755][ T7568] vhci_hcd vhci_hcd.0: Device attached [ 170.420558][ T7566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.425528][ T7566] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 170.553814][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 170.601844][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 170.671901][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 170.686140][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 170.697285][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.703858][ T5916] usb 38-1: SetAddress Request (2) to port 0 [ 170.705438][ T24] usb 5-1: Product: syz [ 170.711829][ T5916] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 170.801328][ T24] usb 5-1: Manufacturer: syz [ 170.814551][ T7569] vhci_hcd: connection reset by peer [ 170.839333][ T24] usb 5-1: SerialNumber: syz [ 170.861700][ T13] vhci_hcd vhci_hcd.2: stop threads [ 170.868147][ T13] vhci_hcd vhci_hcd.2: release socket [ 170.896749][ T24] usb 5-1: config 0 descriptor?? [ 170.903779][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 170.933537][ T24] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 170.985786][ T24] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 171.359235][ T24] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 171.378190][ T24] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 171.394475][ T24] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 171.402407][ T24] em28xx 5-1:0.0: No AC97 audio processor [ 171.444528][ T5884] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 171.614316][ T5884] usb 2-1: Using ep0 maxpacket: 32 [ 171.637024][ T5884] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 171.650788][ T5884] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 171.660150][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.681666][ T5884] usb 2-1: config 0 descriptor?? [ 171.751787][ T7596] netlink: 'syz.3.427': attribute type 4 has an invalid length. [ 171.785824][ T7596] netlink: 'syz.3.427': attribute type 4 has an invalid length. [ 171.814122][ T48] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 171.864414][ T5955] usb 5-1: USB disconnect, device number 21 [ 171.871523][ T5955] em28xx 5-1:0.0: Disconnecting em28xx [ 171.896226][ T5955] em28xx 5-1:0.0: Freeing device [ 171.974054][ T48] usb 1-1: device descriptor read/64, error -71 [ 172.061823][ T7606] FAULT_INJECTION: forcing a failure. [ 172.061823][ T7606] name failslab, interval 1, probability 0, space 0, times 0 [ 172.077016][ T7606] CPU: 1 UID: 0 PID: 7606 Comm: syz.4.431 Tainted: G L syzkaller #0 PREEMPT(full) [ 172.077044][ T7606] Tainted: [L]=SOFTLOCKUP [ 172.077050][ T7606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 172.077060][ T7606] Call Trace: [ 172.077067][ T7606] [ 172.077075][ T7606] dump_stack_lvl+0xe8/0x150 [ 172.077101][ T7606] should_fail_ex+0x412/0x560 [ 172.077126][ T7606] should_failslab+0xa8/0x100 [ 172.077146][ T7606] __kmalloc_cache_noprof+0x83/0x6e0 [ 172.077164][ T7606] ? cma_alloc_port+0xb9/0x680 [ 172.077186][ T7606] cma_alloc_port+0xb9/0x680 [ 172.077206][ T7606] rdma_bind_addr_dst+0x2949/0x3610 [ 172.077258][ T7606] rdma_resolve_addr+0x6f8/0x21d0 [ 172.077286][ T7606] ? trace_contention_end+0x39/0x100 [ 172.077304][ T7606] ? __pfx_rdma_resolve_addr+0x10/0x10 [ 172.077323][ T7606] ? __mutex_lock+0x319/0x1300 [ 172.077353][ T7606] ? ucma_resolve_ip+0x302/0x490 [ 172.077371][ T7606] ? xa_load+0x60/0x210 [ 172.077407][ T7606] ? do_raw_spin_unlock+0xf5/0x210 [ 172.077429][ T7606] ucma_resolve_ip+0x338/0x490 [ 172.077450][ T7606] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 172.077487][ T7606] ucma_write+0x24e/0x2f0 [ 172.077508][ T7606] ? __pfx_ucma_write+0x10/0x10 [ 172.077525][ T7606] ? security_file_permission+0x75/0x260 [ 172.077544][ T7606] ? rw_verify_area+0x255/0x4d0 [ 172.077569][ T7606] vfs_writev+0x4bd/0x990 [ 172.077596][ T7606] ? __pfx_ucma_write+0x10/0x10 [ 172.077617][ T7606] ? __pfx_vfs_writev+0x10/0x10 [ 172.077649][ T7606] ? __fget_files+0x2a/0x420 [ 172.077672][ T7606] ? __fget_files+0x3a0/0x420 [ 172.077688][ T7606] ? __fget_files+0x2a/0x420 [ 172.077713][ T7606] do_writev+0x154/0x2e0 [ 172.077733][ T7606] ? __pfx_do_writev+0x10/0x10 [ 172.077763][ T7606] do_syscall_64+0xe2/0xf80 [ 172.077780][ T7606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.077796][ T7606] ? trace_irq_disable+0x37/0x100 [ 172.077811][ T7606] ? clear_bhb_loop+0x60/0xb0 [ 172.077831][ T7606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.077847][ T7606] RIP: 0033:0x7f62b0b9aeb9 [ 172.077863][ T7606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.077880][ T7606] RSP: 002b:00007f62b1ad1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 172.077898][ T7606] RAX: ffffffffffffffda RBX: 00007f62b0e15fa0 RCX: 00007f62b0b9aeb9 [ 172.077910][ T7606] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000004 [ 172.077920][ T7606] RBP: 00007f62b1ad1090 R08: 0000000000000000 R09: 0000000000000000 [ 172.077930][ T7606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.077939][ T7606] R13: 00007f62b0e16038 R14: 00007f62b0e15fa0 R15: 00007f62b0f3fa48 [ 172.077968][ T7606] [ 172.358934][ T7602] netlink: 36 bytes leftover after parsing attributes in process `syz.2.430'. [ 172.370585][ T7602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.430'. [ 172.379567][ T7602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.430'. [ 172.398683][ T7602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.411688][ T7602] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 172.435524][ T7607] syzkaller0: entered promiscuous mode [ 172.489900][ T7607] syzkaller0: entered allmulticast mode [ 172.563905][ T48] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 172.611578][ T7615] hub 9-0:1.0: USB hub found [ 172.627401][ T7615] hub 9-0:1.0: 1 port detected [ 172.693772][ T48] usb 1-1: device descriptor read/64, error -71 [ 172.754021][ T5955] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 172.804249][ T48] usb usb1-port1: attempt power cycle [ 172.903943][ T5884] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 172.904097][ T5917] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 172.919312][ T5955] usb 3-1: Using ep0 maxpacket: 32 [ 172.927875][ T5955] usb 3-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 172.945119][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.963272][ T5955] usb 3-1: Product: syz [ 172.973903][ T5955] usb 3-1: Manufacturer: syz [ 172.978537][ T5955] usb 3-1: SerialNumber: syz [ 173.054010][ T5884] usb 4-1: Using ep0 maxpacket: 32 [ 173.062113][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.073852][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.084859][ T5884] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 173.094312][ T5917] usb 5-1: Using ep0 maxpacket: 16 [ 173.101336][ T5917] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.103275][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.112045][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 173.131393][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 173.142925][ T5917] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 173.144066][ T5884] usb 4-1: config 0 descriptor?? [ 173.153494][ T5917] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.157733][ T48] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 173.200871][ T5955] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 173.213241][ T5917] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 173.224589][ T48] usb 1-1: device descriptor read/8, error -71 [ 173.227207][ T5955] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 173.240271][ T5917] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 173.254216][ T5955] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 173.262914][ T5917] usb 5-1: Manufacturer: syz [ 173.274812][ T5917] usb 5-1: config 0 descriptor?? [ 173.410781][ T7611] ucma_write: process 315 (syz.2.432) changed security contexts after opening file descriptor, this is not allowed. [ 173.426245][ T5955] usb 3-1: USB disconnect, device number 18 [ 173.438266][ T5955] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 173.453371][ T5955] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 173.466291][ T48] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 173.466478][ T5955] visor 3-1:1.0: device disconnected [ 173.494387][ T48] usb 1-1: device descriptor read/8, error -71 [ 173.543812][ T5917] rc_core: IR keymap rc-hauppauge not found [ 173.549755][ T5917] Registered IR keymap rc-empty [ 173.555323][ T5917] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 173.573913][ T5917] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 173.595099][ T5917] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 173.608938][ T5917] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input13 [ 173.627928][ T5884] hid_parser_main: 7 callbacks suppressed [ 173.627950][ T5884] ft260 0003:0403:6030.0007: unknown main item tag 0x0 [ 173.641008][ T48] usb usb1-port1: unable to enumerate USB device [ 173.643506][ T5917] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 173.650364][ T5884] ft260 0003:0403:6030.0007: unknown main item tag 0x0 [ 173.673910][ T5917] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 173.694164][ T5917] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 173.713895][ T5917] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 173.734062][ T5917] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 173.753906][ T5917] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 173.775669][ T5917] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 173.793874][ T5917] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 173.814905][ T5917] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 173.834153][ T5917] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 173.850967][ T5884] ft260 0003:0403:6030.0007: chip code: 0000 0000 [ 173.858710][ T5917] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 173.866918][ T5917] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 174.051530][ T5884] ft260 0003:0403:6030.0007: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 174.252335][ T5884] ft260 0003:0403:6030.0007: failed to retrieve status: -32, no wakeup [ 174.308320][ T5955] usb 2-1: USB disconnect, device number 24 [ 174.476672][ T7617] ft260 0003:0403:6030.0007: ft260_i2c_read: failed with -38 [ 174.486156][ T5917] usb 4-1: USB disconnect, device number 25 [ 175.335699][ T5918] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 175.606044][ T5918] usb 2-1: config 0 has no interfaces? [ 175.620532][ T5918] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 175.630876][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.639042][ T5955] usb 5-1: USB disconnect, device number 22 [ 175.648360][ T5918] usb 2-1: Product: syz [ 175.654415][ T5884] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 175.655228][ T5918] usb 2-1: Manufacturer: syz [ 175.667920][ T5918] usb 2-1: SerialNumber: syz [ 175.697777][ T5918] usb 2-1: config 0 descriptor?? [ 175.773955][ T5916] usb 38-1: device descriptor read/8, error -110 [ 175.839362][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.923896][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.058890][ T5884] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 176.086048][ T5884] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 176.101587][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.111358][ T5884] usb 4-1: config 0 descriptor?? [ 176.125971][ T7636] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.210179][ T7648] netlink: 36 bytes leftover after parsing attributes in process `syz.4.442'. [ 176.229498][ T7648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.442'. [ 176.238842][ T7648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.442'. [ 176.240024][ T5916] usb usb38-port1: attempt power cycle [ 176.283783][ T5955] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 176.293199][ T7648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.309529][ T7648] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 176.338844][ T7659] loop3: detected capacity change from 0 to 7 [ 176.355087][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 176.365019][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 176.404562][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 176.414245][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 176.422667][ T7657] xt_CT: No such helper "pptp" [ 176.436252][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 176.445948][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 176.466210][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 176.475858][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 176.485068][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 176.494684][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 176.503569][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 176.513210][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 176.533256][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 176.542926][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 176.551570][ T7659] ldm_validate_partition_table(): Disk read failed. [ 176.561615][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 176.571305][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 176.580532][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 176.589525][ T5884] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 176.590197][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 176.612315][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 176.621921][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 176.631565][ T5955] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 176.640848][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.649210][ T5955] usb 1-1: Product: syz [ 176.654073][ T5955] usb 1-1: Manufacturer: syz [ 176.658833][ T7659] Dev loop3: unable to read RDB block 0 [ 176.659880][ T5955] usb 1-1: SerialNumber: syz [ 176.676033][ T5955] usb 1-1: config 0 descriptor?? [ 176.690491][ T7659] loop3: unable to read partition table [ 176.696956][ T7659] loop3: partition table beyond EOD, truncated [ 176.766789][ T7659] loop_reread_partitions: partition scan of loop3 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 176.935217][ T5916] usb usb38-port1: unable to enumerate USB device [ 177.053813][ T5918] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 177.073468][ T7667] loop5: detected capacity change from 0 to 7 [ 177.137254][ T5837] Dev loop5: unable to read RDB block 7 [ 177.145752][ T7668] Invalid argument reading file caps for ./file0 [ 177.168664][ T5837] loop5: unable to read partition table [ 177.188775][ T5918] usb 3-1: device descriptor read/64, error -71 [ 177.209784][ T5837] loop5: partition table beyond EOD, truncated [ 177.315069][ T7667] Dev loop5: unable to read RDB block 7 [ 177.346084][ T7667] loop5: unable to read partition table [ 177.379960][ T7667] loop5: partition table beyond EOD, truncated [ 177.416134][ T7667] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 177.454533][ T5918] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 177.615608][ T5918] usb 3-1: device descriptor read/64, error -71 [ 177.726443][ T5918] usb usb3-port1: attempt power cycle [ 177.745480][ T5955] usb 1-1: non-Atmel transceiver xxxx19f5 [ 177.940738][ T7670] team_slave_0: entered promiscuous mode [ 177.946728][ T7670] team_slave_1: entered promiscuous mode [ 177.952867][ T7670] vlan2: entered promiscuous mode [ 177.958184][ T7670] team0: entered promiscuous mode [ 178.002392][ T7650] xt_TCPMSS: Only works on TCP SYN packets [ 178.022427][ T7675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.037871][ T7675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.084100][ T5918] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 178.113317][ T5918] usb 3-1: device descriptor read/8, error -71 [ 178.161266][ T5955] usb 1-1: Firmware version (0.0) predates our first public release. [ 178.172136][ T5955] usb 1-1: Please update to version 0.2 or newer [ 178.190913][ T5955] usb 1-1: atusb_probe: initialization failed, error = -19 [ 178.229833][ T5955] usb 1-1: USB disconnect, device number 29 [ 178.358261][ T5918] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 178.400030][ T5918] usb 3-1: device descriptor read/8, error -71 [ 178.444950][ T5916] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 178.453540][ T5885] usb 2-1: USB disconnect, device number 25 [ 178.524737][ T5918] usb usb3-port1: unable to enumerate USB device [ 178.635350][ T5916] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 178.922686][ T5917] usb 4-1: USB disconnect, device number 26 [ 178.960557][ T7695] ip6t_srh: unknown srh invflags 4000 [ 179.046546][ T5195] ldm_validate_partition_table(): Disk read failed. [ 179.069861][ T5916] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 179.154051][ T5195] Dev loop3: unable to read RDB block 0 [ 179.198932][ T5195] loop3: unable to read partition table [ 179.218817][ T5195] loop3: partition table beyond EOD, truncated [ 179.225098][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.252930][ T5916] usb 5-1: config 0 descriptor?? [ 179.420309][ T7688] netlink: 28 bytes leftover after parsing attributes in process `syz.1.449'. [ 179.455652][ T7688] netlink: 36 bytes leftover after parsing attributes in process `syz.1.449'. [ 181.292167][ T5884] usb 5-1: USB disconnect, device number 23 [ 181.573842][ T5885] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 181.727620][ T5885] usb 4-1: device descriptor read/64, error -71 [ 182.004328][ T5885] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 182.174806][ T5885] usb 4-1: device descriptor read/64, error -71 [ 182.304306][ T5885] usb usb4-port1: attempt power cycle [ 182.665335][ T5885] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 182.686710][ T5885] usb 4-1: device descriptor read/8, error -71 [ 182.923970][ T5885] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 182.954665][ T5885] usb 4-1: device descriptor read/8, error -71 [ 183.083158][ T5885] usb usb4-port1: unable to enumerate USB device [ 184.053822][ T5916] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 184.217616][ T5916] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 184.232491][ T5916] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.252283][ T5916] usb 5-1: config 0 has no interface number 0 [ 184.282951][ T5916] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 184.313206][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.360911][ T5916] usb 5-1: Product: syz [ 184.386123][ T5916] usb 5-1: Manufacturer: syz [ 184.399699][ T5916] usb 5-1: SerialNumber: syz [ 184.425922][ T5916] usb 5-1: config 0 descriptor?? [ 184.482158][ T5916] uvcvideo 5-1:0.64: probe with driver uvcvideo failed with error -22 [ 184.608444][ T7808] KVM: debugfs: duplicate directory 7808-9 [ 184.655593][ T5955] usb 5-1: USB disconnect, device number 24 [ 184.686675][ T5916] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 184.733883][ T5917] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 184.825321][ T5916] usb 3-1: device descriptor read/64, error -71 [ 184.903933][ T5917] usb 4-1: Using ep0 maxpacket: 16 [ 184.911257][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.922706][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.949862][ T5917] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 184.964552][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.975018][ T5917] usb 4-1: config 0 descriptor?? [ 185.093921][ T5916] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 185.094051][ T5885] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 185.260067][ T5916] usb 3-1: device descriptor read/64, error -71 [ 185.285834][ T5885] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.296578][ T5885] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 185.326395][ T5885] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 185.374296][ T5916] usb usb3-port1: attempt power cycle [ 185.390396][ T7825] nvme_fabrics: unknown parameter or missing value ' ' in ctrl creation request [ 185.431073][ T5917] usbhid 4-1:0.0: can't add hid device: -71 [ 185.446887][ T5885] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 185.447497][ T5917] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 185.532352][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.540696][ T5917] usb 4-1: USB disconnect, device number 31 [ 185.559242][ T5885] usb 2-1: Product: syz [ 185.568670][ T5885] usb 2-1: Manufacturer: syz [ 185.576952][ T5885] usb 2-1: SerialNumber: syz [ 185.602325][ T5885] cdc_ncm 2-1:1.0: skipping garbage [ 185.620969][ T5885] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 185.641643][ T5885] cdc_ncm 2-1:1.0: bind() failure [ 185.726542][ T5916] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 185.754830][ T5916] usb 3-1: device descriptor read/8, error -71 [ 185.814588][ T5885] usb 2-1: USB disconnect, device number 26 [ 185.994908][ T5916] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 186.024958][ T5916] usb 3-1: device descriptor read/8, error -71 [ 186.145248][ T5916] usb usb3-port1: unable to enumerate USB device [ 186.265760][ T7835] nvme_fabrics: unknown parameter or missing value ' ' in ctrl creation request [ 186.474206][ T7842] syzkaller0: entered promiscuous mode [ 186.479700][ T7842] syzkaller0: entered allmulticast mode [ 187.235631][ T7868] CUSE: info not properly terminated [ 187.693877][ T5885] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 187.844065][ T5885] usb 2-1: Using ep0 maxpacket: 32 [ 187.889786][ T5885] usb 2-1: config 0 has an invalid interface number: 248 but max is 0 [ 187.897254][ T7886] binder: BINDER_SET_CONTEXT_MGR already set [ 187.904229][ T7886] binder: 7885:7886 ioctl 4018620d 2000000002c0 returned -16 [ 187.945583][ T5885] usb 2-1: config 0 has no interface number 0 [ 188.127820][ T7890] netlink: 32 bytes leftover after parsing attributes in process `syz.3.499'. [ 188.204564][ T5885] usb 2-1: New USB device found, idVendor=0bf8, idProduct=1009, bcdDevice=8c.90 [ 188.233352][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.339302][ T5885] usb 2-1: Product: syz [ 188.343523][ T5885] usb 2-1: Manufacturer: syz [ 188.386932][ T5885] usb 2-1: SerialNumber: syz [ 188.420380][ T5885] usb 2-1: config 0 descriptor?? [ 188.642860][ T7878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.652541][ T7878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.712713][ T5885] usb 2-1: USB disconnect, device number 27 [ 189.863832][ T5884] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 190.013986][ T5884] usb 1-1: device descriptor read/64, error -71 [ 190.289969][ T5884] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 190.423879][ T5884] usb 1-1: device descriptor read/64, error -71 [ 190.533998][ T5884] usb usb1-port1: attempt power cycle [ 190.539354][ T5917] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 190.693994][ T5917] usb 3-1: Using ep0 maxpacket: 32 [ 190.702533][ T5917] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 190.711655][ T5917] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 190.723856][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.743066][ T5917] usb 3-1: config 0 descriptor?? [ 190.883779][ T5884] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 190.925814][ T5884] usb 1-1: device descriptor read/8, error -71 [ 191.173864][ T5884] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 191.204466][ T5884] usb 1-1: device descriptor read/8, error -71 [ 191.314311][ T5884] usb usb1-port1: unable to enumerate USB device [ 191.338419][ T7927] futex_wake_op: syz.1.509 tries to shift op by 32; fix this program [ 192.293941][ T5917] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 192.498814][ T5917] usb 4-1: config 0 has an invalid interface number: 99 but max is 0 [ 192.515018][ T5917] usb 4-1: config 0 has no interface number 0 [ 192.521851][ T5917] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 192.555460][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.586741][ T7956] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 192.663344][ T5917] usb 4-1: config 0 descriptor?? [ 192.690162][ T5917] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 192.732713][ T7961] FAULT_INJECTION: forcing a failure. [ 192.732713][ T7961] name failslab, interval 1, probability 0, space 0, times 0 [ 192.755024][ T7961] CPU: 1 UID: 0 PID: 7961 Comm: syz.4.520 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.755054][ T7961] Tainted: [L]=SOFTLOCKUP [ 192.755060][ T7961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 192.755070][ T7961] Call Trace: [ 192.755078][ T7961] [ 192.755085][ T7961] dump_stack_lvl+0xe8/0x150 [ 192.755105][ T7961] should_fail_ex+0x412/0x560 [ 192.755121][ T7961] should_failslab+0xa8/0x100 [ 192.755137][ T7961] __kmalloc_noprof+0xde/0x7e0 [ 192.755153][ T7961] ? ___neigh_create+0x6d5/0x2230 [ 192.755177][ T7961] ___neigh_create+0x6d5/0x2230 [ 192.755203][ T7961] ? ip6_neigh_lookup+0x14d/0x490 [ 192.755228][ T7961] ? ip6_neigh_lookup+0x14d/0x490 [ 192.755243][ T7961] ? ip6_neigh_lookup+0x14d/0x490 [ 192.755256][ T7961] ip6_neigh_lookup+0x3d4/0x490 [ 192.755271][ T7961] ? __pfx_ip6_neigh_lookup+0x10/0x10 [ 192.755293][ T7961] ? ip6_dst_neigh_lookup+0x74/0xf0 [ 192.755318][ T7961] addr_resolve+0x149d/0x1fb0 [ 192.755341][ T7961] ? addr_resolve+0xfe/0x1fb0 [ 192.755370][ T7961] ? __pfx_addr_resolve+0x10/0x10 [ 192.755394][ T7961] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 192.755413][ T7961] ? timer_init_key+0x161/0x2b0 [ 192.755427][ T7961] rdma_resolve_ip+0x444/0x840 [ 192.755454][ T7961] rdma_resolve_addr+0x84a/0x21d0 [ 192.755487][ T7961] ? __pfx_rdma_resolve_addr+0x10/0x10 [ 192.755506][ T7961] ? __mutex_lock+0x319/0x1300 [ 192.755527][ T7961] ? ucma_resolve_ip+0x302/0x490 [ 192.755539][ T7961] ? xa_load+0x60/0x210 [ 192.755557][ T7961] ? do_raw_spin_unlock+0xf5/0x210 [ 192.755571][ T7961] ucma_resolve_ip+0x338/0x490 [ 192.755585][ T7961] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 192.755622][ T7961] ucma_write+0x24e/0x2f0 [ 192.755641][ T7961] ? __pfx_ucma_write+0x10/0x10 [ 192.755658][ T7961] ? security_file_permission+0x75/0x260 [ 192.755674][ T7961] ? rw_verify_area+0x255/0x4d0 [ 192.755693][ T7961] vfs_writev+0x4bd/0x990 [ 192.755705][ T7961] ? __pfx_ucma_write+0x10/0x10 [ 192.755717][ T7961] ? __pfx_vfs_writev+0x10/0x10 [ 192.755739][ T7961] ? __fget_files+0x2a/0x420 [ 192.755760][ T7961] ? __fget_files+0x3a0/0x420 [ 192.755775][ T7961] ? __fget_files+0x2a/0x420 [ 192.755797][ T7961] do_writev+0x154/0x2e0 [ 192.755816][ T7961] ? __pfx_do_writev+0x10/0x10 [ 192.755844][ T7961] do_syscall_64+0xe2/0xf80 [ 192.755861][ T7961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.755876][ T7961] ? trace_irq_disable+0x37/0x100 [ 192.755885][ T7961] ? clear_bhb_loop+0x60/0xb0 [ 192.755901][ T7961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.755918][ T7961] RIP: 0033:0x7f62b0b9aeb9 [ 192.755933][ T7961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.755944][ T7961] RSP: 002b:00007f62b1ad1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 192.755962][ T7961] RAX: ffffffffffffffda RBX: 00007f62b0e15fa0 RCX: 00007f62b0b9aeb9 [ 192.755982][ T7961] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000004 [ 192.755993][ T7961] RBP: 00007f62b1ad1090 R08: 0000000000000000 R09: 0000000000000000 [ 192.756003][ T7961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 192.756011][ T7961] R13: 00007f62b0e16038 R14: 00007f62b0e15fa0 R15: 00007f62b0f3fa48 [ 192.756026][ T7961] [ 193.464794][ T5916] usb 3-1: USB disconnect, device number 27 [ 193.472193][ T5917] gspca_stv06xx: I2C: Read error writing address: -71 [ 193.522525][ T5917] usb 4-1: USB disconnect, device number 32 [ 193.918760][ T7977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.524'. [ 193.928058][ T5916] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 194.054766][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 194.133879][ T5916] usb 5-1: Using ep0 maxpacket: 16 [ 194.157654][ T5916] usb 5-1: config 0 has an invalid interface number: 9 but max is 0 [ 194.170605][ T5916] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.181336][ T5916] usb 5-1: config 0 has no interface number 0 [ 194.189409][ T5916] usb 5-1: config 0 interface 9 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 194.208549][ T5916] usb 5-1: config 0 interface 9 has no altsetting 0 [ 194.222954][ T5916] usb 5-1: New USB device found, idVendor=86d1, idProduct=607c, bcdDevice=15.ed [ 194.232385][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.240554][ T5916] usb 5-1: Product: syz [ 194.246481][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.274204][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.280644][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.289361][ T5916] usb 5-1: Manufacturer: syz [ 194.295394][ T5916] usb 5-1: SerialNumber: syz [ 194.300218][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.317337][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.332456][ T5916] usb 5-1: config 0 descriptor?? [ 194.357635][ T10] usb 3-1: New USB device found, idVendor=056e, idProduct=019b, bcdDevice= 0.00 [ 194.367715][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.396640][ T10] usb 3-1: config 0 descriptor?? [ 194.578516][ T7970] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 194.602569][ T5916] usb-storage 5-1:0.9: USB Mass Storage device detected [ 194.749463][ T5916] usb 5-1: USB disconnect, device number 25 [ 194.819380][ T10] elecom 0003:056E:019B.0009: unknown main item tag 0x0 [ 194.826881][ T10] elecom 0003:056E:019B.0009: unknown main item tag 0x0 [ 194.838070][ T10] elecom 0003:056E:019B.0009: unknown main item tag 0x0 [ 194.850920][ T10] elecom 0003:056E:019B.0009: unknown main item tag 0x0 [ 194.858128][ T10] elecom 0003:056E:019B.0009: unknown main item tag 0x0 [ 194.871221][ T10] elecom 0003:056E:019B.0009: hidraw0: USB HID v0.00 Device [HID 056e:019b] on usb-dummy_hcd.2-1/input0 [ 195.014282][ T5918] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 195.033163][ T5916] usb 3-1: USB disconnect, device number 28 [ 195.176211][ T5918] usb 2-1: device descriptor read/64, error -71 [ 195.431553][ T5918] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 195.497088][ T8003] FAULT_INJECTION: forcing a failure. [ 195.497088][ T8003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.511384][ T8003] CPU: 0 UID: 0 PID: 8003 Comm: syz.3.532 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.511415][ T8003] Tainted: [L]=SOFTLOCKUP [ 195.511421][ T8003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 195.511431][ T8003] Call Trace: [ 195.511439][ T8003] [ 195.511447][ T8003] dump_stack_lvl+0xe8/0x150 [ 195.511474][ T8003] should_fail_ex+0x412/0x560 [ 195.511499][ T8003] _copy_from_user+0x2d/0xb0 [ 195.511524][ T8003] kstrtouint_from_user+0xd6/0x180 [ 195.511546][ T8003] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 195.511583][ T8003] proc_fail_nth_write+0x8e/0x210 [ 195.511606][ T8003] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 195.511634][ T8003] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 195.511657][ T8003] vfs_write+0x29a/0xb90 [ 195.511698][ T8003] ? __pfx_vfs_write+0x10/0x10 [ 195.511722][ T8003] ? __fget_files+0x2a/0x420 [ 195.511745][ T8003] ? __fget_files+0x3a0/0x420 [ 195.511762][ T8003] ? __fget_files+0x2a/0x420 [ 195.511788][ T8003] ksys_write+0x150/0x270 [ 195.511812][ T8003] ? __pfx_ksys_write+0x10/0x10 [ 195.511846][ T8003] do_syscall_64+0xe2/0xf80 [ 195.511863][ T8003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.511880][ T8003] ? trace_irq_disable+0x37/0x100 [ 195.511895][ T8003] ? clear_bhb_loop+0x60/0xb0 [ 195.511916][ T8003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.511931][ T8003] RIP: 0033:0x7f699bd5b78e [ 195.511947][ T8003] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 195.511961][ T8003] RSP: 002b:00007f699cd0bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 195.511979][ T8003] RAX: ffffffffffffffda RBX: 00007f699cd0c6c0 RCX: 00007f699bd5b78e [ 195.511991][ T8003] RDX: 0000000000000001 RSI: 00007f699cd0c0a0 RDI: 0000000000000005 [ 195.512002][ T8003] RBP: 00007f699cd0c090 R08: 0000000000000000 R09: 0000000000000000 [ 195.512012][ T8003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 195.512022][ T8003] R13: 00007f699c016038 R14: 00007f699c015fa0 R15: 00007f699c13fa48 [ 195.512050][ T8003] [ 195.795509][ T5918] usb 2-1: device descriptor read/64, error -71 [ 195.914412][ T5918] usb usb2-port1: attempt power cycle [ 196.253790][ T5918] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 196.294478][ T5918] usb 2-1: device descriptor read/8, error -71 [ 196.344909][ T5146] Bluetooth: hci2: command 0x0406 tx timeout [ 196.351928][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 196.352325][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 196.358294][ T5146] Bluetooth: hci4: command 0x0406 tx timeout [ 196.370386][ T5828] Bluetooth: hci3: command 0x0406 tx timeout [ 196.622216][ T5918] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 196.704083][ T5918] usb 2-1: device descriptor read/8, error -71 [ 196.824218][ T5918] usb usb2-port1: unable to enumerate USB device [ 196.863790][ T8026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.537'. [ 196.916049][ T8028] program syz.4.538 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.066317][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.540'. [ 197.112733][ T8032] netlink: 'syz.4.540': attribute type 30 has an invalid length. [ 197.148792][ T8034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.540'. [ 197.174973][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.194197][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.230607][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.239467][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.412394][ T8042] Cannot find add_set index 0 as target [ 197.470282][ T8046] syzkaller0: entered promiscuous mode [ 197.495331][ T8046] syzkaller0: entered allmulticast mode [ 198.190039][ T8066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.549'. [ 199.084147][ T5918] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 199.138105][ T24] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 199.278346][ T5918] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 199.303808][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.388190][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 199.451943][ T24] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 199.473265][ T24] usb 4-1: config 0 has no interface number 0 [ 199.497551][ T5918] usb 3-1: config 0 descriptor?? [ 199.503284][ T24] usb 4-1: config 0 interface 214 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 199.529259][ T5918] cp210x 3-1:0.0: cp210x converter detected [ 199.551604][ T24] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x81 has an invalid bInterval 193, changing to 11 [ 199.606921][ T24] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice=fd.f5 [ 199.633745][ T24] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 199.641782][ T24] usb 4-1: Product: syz [ 199.663787][ T24] usb 4-1: SerialNumber: syz [ 199.674586][ T24] usb 4-1: config 0 descriptor?? [ 199.924045][ T24] usbtouchscreen 4-1:0.214: Failed to read FW rev: -71 [ 199.943666][ T24] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 200.008919][ T24] usb 4-1: USB disconnect, device number 33 [ 200.137721][ T8075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.147121][ T8075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.175426][ T5918] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 200.182914][ T5918] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 200.235255][ T5918] usb 3-1: cp210x converter now attached to ttyUSB0 [ 200.245083][ T5918] usb 3-1: USB disconnect, device number 29 [ 200.257819][ T5918] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 200.293373][ T5918] cp210x 3-1:0.0: device disconnected [ 200.303842][ T5885] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 200.464140][ T5885] usb 1-1: Using ep0 maxpacket: 8 [ 200.489890][ T5885] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 200.513861][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.548021][ T5885] usb 1-1: Product: syz [ 200.559759][ T5885] usb 1-1: Manufacturer: syz [ 200.573476][ T5885] usb 1-1: SerialNumber: syz [ 200.600104][ T5885] usb 1-1: config 0 descriptor?? [ 200.609053][ T8104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.560'. [ 200.622665][ T5885] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244) [ 200.914045][ T5918] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 201.070304][ T5918] usb 3-1: Using ep0 maxpacket: 8 [ 201.080688][ T5918] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 201.091594][ T5918] usb 3-1: config 0 has no interface number 0 [ 201.111437][ T5918] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 201.129440][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.148497][ T5918] usb 3-1: Product: syz [ 201.157401][ T5918] usb 3-1: Manufacturer: syz [ 201.169718][ T5918] usb 3-1: SerialNumber: syz [ 201.193117][ T5918] usb 3-1: config 0 descriptor?? [ 201.434105][ T5916] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 201.596932][ T5916] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 201.603875][ T5906] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 201.605452][ T5916] usb 4-1: config 0 has an invalid interface number: 5 but max is 2 [ 201.622497][ T5916] usb 4-1: config 0 has no interface number 0 [ 201.637327][ T5916] usb 4-1: config 0 has no interface number 1 [ 201.646390][ T5916] usb 4-1: too many endpoints for config 0 interface 5 altsetting 255: 255, using maximum allowed: 30 [ 201.657631][ T5916] usb 4-1: config 0 interface 5 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 201.677717][ T5916] usb 4-1: config 0 interface 5 has no altsetting 0 [ 201.685746][ T5916] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 201.695670][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.712149][ T5916] usb 4-1: config 0 descriptor?? [ 201.718095][ T5885] radio-usb-si4713 1-1:0.0: probe with driver radio-usb-si4713 failed with error -32 [ 201.737060][ T5885] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 201.765931][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.784819][ T5906] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 201.794230][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.810744][ T5906] usb 2-1: config 0 descriptor?? [ 201.952679][ T8129] netlink: 128 bytes leftover after parsing attributes in process `syz.3.569'. [ 202.007671][ T5916] usb 4-1: Could not set interface, error -71 [ 202.036995][ T5916] usb 4-1: selecting invalid altsetting 0 [ 202.049910][ T5916] usb 4-1: Could not set interface, error -22 [ 202.115792][ T5916] usb 4-1: USB disconnect, device number 34 [ 202.202104][ T5906] usbhid 2-1:0.0: can't add hid device: -71 [ 202.222138][ T5906] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 202.237419][ T5918] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 202.675700][ T5906] usb 2-1: USB disconnect, device number 32 [ 202.688158][ T5918] uvcvideo 3-1:0.31: No valid video chain found. [ 202.712640][ T5918] usb 3-1: USB disconnect, device number 30 [ 202.751900][ T24] usb 1-1: USB disconnect, device number 34 [ 203.343995][ T5906] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 203.495946][ T8169] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 203.503603][ T8169] IPv6: NLM_F_CREATE should be set when creating new route [ 203.511001][ T8169] IPv6: NLM_F_CREATE should be set when creating new route [ 203.518273][ T8169] IPv6: NLM_F_CREATE should be set when creating new route [ 203.528407][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 203.542026][ T5906] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 203.561449][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.753309][ T5906] pvrusb2: Hardware description: Terratec Grabster AV400 [ 203.789757][ T5906] pvrusb2: ********** [ 203.798445][ T5906] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 203.838990][ T5906] pvrusb2: Important functionality might not be entirely working. [ 203.854058][ T5906] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 203.865879][ T5906] pvrusb2: ********** [ 203.951828][ T2346] pvrusb2: Invalid write control endpoint [ 203.983610][ T8180] x_tables: ip_tables: osf match: only valid for protocol 6 [ 204.157743][ T8149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.170037][ T8149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.237216][ T8185] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 204.271287][ T2346] pvrusb2: Invalid write control endpoint [ 204.319062][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 204.329663][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 204.372810][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 204.399079][ T2346] pvrusb2: Device being rendered inoperable [ 204.408047][ T2346] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 204.416138][ T2346] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 204.442107][ T5918] usb 2-1: USB disconnect, device number 33 [ 204.553659][ T2346] pvrusb2: Attached sub-driver cx25840 [ 204.571620][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 204.768326][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 205.478448][ T24] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 205.655537][ T24] usb 4-1: device descriptor read/64, error -71 [ 205.921976][ T24] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 206.063828][ T24] usb 4-1: device descriptor read/64, error -71 [ 206.224157][ T24] usb usb4-port1: attempt power cycle [ 206.587958][ T24] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 206.634723][ T24] usb 4-1: device descriptor read/8, error -71 [ 206.883862][ T24] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 206.924782][ T24] usb 4-1: device descriptor read/8, error -71 [ 207.054507][ T24] usb usb4-port1: unable to enumerate USB device [ 207.134058][ T5917] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 207.384701][ T5917] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 207.393892][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.447114][ T5917] usb 2-1: Product: syz [ 207.460930][ T5917] usb 2-1: Manufacturer: syz [ 207.480665][ T5917] usb 2-1: SerialNumber: syz [ 207.525617][ T5917] usb 2-1: config 0 descriptor?? [ 207.549050][ T5917] ch341 2-1:0.0: ch341-uart converter detected [ 207.872077][ T8246] [U] .Ž§hòÛ0FƒwZ,ßúiŒqg«ƒÛÒV2ÆôsO¾½ [ 207.904037][ T8246] [U] …¥` w*ÌÀBØBOLhUÇ [ 207.908566][ T8246] [U] w$·nÓ|ÝÅ#‘±%o.z\ï̧mРûàw [ 207.939410][ T8246] [U] ÁóàR{ê«¢þ S„ðì [ 207.984714][ T8246] [U] [ 208.371551][ T8260] FAULT_INJECTION: forcing a failure. [ 208.371551][ T8260] name failslab, interval 1, probability 0, space 0, times 0 [ 208.416496][ T8260] CPU: 0 UID: 0 PID: 8260 Comm: syz.2.602 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.416526][ T8260] Tainted: [L]=SOFTLOCKUP [ 208.416533][ T8260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 208.416543][ T8260] Call Trace: [ 208.416550][ T8260] [ 208.416558][ T8260] dump_stack_lvl+0xe8/0x150 [ 208.416585][ T8260] should_fail_ex+0x412/0x560 [ 208.416614][ T8260] should_failslab+0xa8/0x100 [ 208.416634][ T8260] kmem_cache_alloc_noprof+0x87/0x6e0 [ 208.416656][ T8260] ? ip_vs_ct_in_get+0x99/0xc20 [ 208.416678][ T8260] ? ip_vs_conn_new+0x9a/0x12a0 [ 208.416701][ T8260] ip_vs_conn_new+0x9a/0x12a0 [ 208.416720][ T8260] ? ip_vs_schedule+0xb9a/0x1d10 [ 208.416742][ T8260] ? ip_vs_schedule+0xb9a/0x1d10 [ 208.416768][ T8260] ? kfree+0x4d/0x650 [ 208.416793][ T8260] ip_vs_schedule+0x1334/0x1d10 [ 208.416829][ T8260] ? __pfx_ip_vs_schedule+0x10/0x10 [ 208.416856][ T8260] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 208.416886][ T8260] ? ip_vs_conn_in_get_proto+0x3d3/0x560 [ 208.416906][ T8260] ? ip_vs_service_find+0xd4f/0xf10 [ 208.416925][ T8260] ? __pfx_ip_vs_conn_in_get_proto+0x10/0x10 [ 208.416944][ T8260] ? __alloc_skb+0x193/0x390 [ 208.416966][ T8260] udp_conn_schedule+0x359/0x750 [ 208.416991][ T8260] ? __pfx_udp_conn_schedule+0x10/0x10 [ 208.417010][ T8260] ? __lock_acquire+0x6b5/0x2cf0 [ 208.417041][ T8260] ip_vs_in_hook+0x1005/0x22d0 [ 208.417073][ T8260] ? ip_vs_out_hook+0xcbf/0x13d0 [ 208.417094][ T8260] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 208.417124][ T8260] ? __pfx_ip_vs_out_hook+0x10/0x10 [ 208.417147][ T8260] ? ipt_do_table+0x2b2/0x1630 [ 208.417179][ T8260] ? iptable_mangle_hook+0x2c7/0x4c0 [ 208.417199][ T8260] ? nf_nat_ipv4_local_fn+0x1de/0x540 [ 208.417223][ T8260] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 208.417246][ T8260] nf_hook_slow+0xc5/0x220 [ 208.417268][ T8260] ? __pfx_dst_output+0x10/0x10 [ 208.417286][ T8260] nf_hook+0x22a/0x3a0 [ 208.417307][ T8260] ? nf_hook+0xa1/0x3a0 [ 208.417323][ T8260] ? __pfx_nf_hook+0x10/0x10 [ 208.417343][ T8260] ? __pfx_dst_output+0x10/0x10 [ 208.417368][ T8260] ? ip_fast_csum+0x1ee/0x2b0 [ 208.417391][ T8260] __ip_local_out+0x4db/0x600 [ 208.417408][ T8260] ? __pfx_dst_output+0x10/0x10 [ 208.417428][ T8260] ip_send_skb+0x4a/0x100 [ 208.417450][ T8260] udp_send_skb+0xaf1/0x14c0 [ 208.417489][ T8260] udp_sendmsg+0x1a21/0x2240 [ 208.417523][ T8260] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 208.417545][ T8260] ? __pfx_udp_sendmsg+0x10/0x10 [ 208.417563][ T8260] ? tomoyo_write_log2+0x250/0x910 [ 208.417590][ T8260] ? tomoyo_supervisor+0x4cb/0x1570 [ 208.417614][ T8260] ? register_lock_class+0x31/0x2e0 [ 208.417656][ T8260] ? get_random_u32+0x4ce/0x8b0 [ 208.417686][ T8260] udpv6_sendmsg+0xe5f/0x25a0 [ 208.417716][ T8260] ? __lock_acquire+0x6b5/0x2cf0 [ 208.417742][ T8260] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 208.417773][ T8260] ? ip6_datagram_release_cb+0x7c/0x550 [ 208.417818][ T8260] ? lockdep_hardirqs_on+0x7a/0x110 [ 208.417836][ T8260] ? inet_send_prepare+0x1b9/0x270 [ 208.417855][ T8260] ? __local_bh_enable_ip+0xd0/0x130 [ 208.417871][ T8260] ? inet_send_prepare+0x1b9/0x270 [ 208.417895][ T8260] ? inet6_sendmsg+0xe4/0x120 [ 208.417914][ T8260] ____sys_sendmsg+0x62c/0xad0 [ 208.417944][ T8260] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.417973][ T8260] ? import_iovec+0x73/0xa0 [ 208.417999][ T8260] ___sys_sendmsg+0x2a5/0x360 [ 208.418019][ T8260] ? __lock_acquire+0x6b5/0x2cf0 [ 208.418043][ T8260] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.418097][ T8260] ? __fget_files+0x2a/0x420 [ 208.418114][ T8260] ? __fget_files+0x3a0/0x420 [ 208.418142][ T8260] __x64_sys_sendmsg+0x1bd/0x2a0 [ 208.418165][ T8260] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 208.418195][ T8260] ? __pfx_ksys_write+0x10/0x10 [ 208.418228][ T8260] do_syscall_64+0xe2/0xf80 [ 208.418246][ T8260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.418262][ T8260] ? trace_irq_disable+0x37/0x100 [ 208.418278][ T8260] ? clear_bhb_loop+0x60/0xb0 [ 208.418297][ T8260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.418314][ T8260] RIP: 0033:0x7f439df9aeb9 [ 208.418330][ T8260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.418344][ T8260] RSP: 002b:00007f439ee7b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.418364][ T8260] RAX: ffffffffffffffda RBX: 00007f439e215fa0 RCX: 00007f439df9aeb9 [ 208.418376][ T8260] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 208.418388][ T8260] RBP: 00007f439ee7b090 R08: 0000000000000000 R09: 0000000000000000 [ 208.418398][ T8260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.418408][ T8260] R13: 00007f439e216038 R14: 00007f439e215fa0 R15: 00007f439e33fa48 [ 208.418437][ T8260] [ 208.419751][ T8260] IPVS: ip_vs_conn_new(): no memory [ 208.713790][ T5906] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 208.774510][ T5917] usb 2-1: ch341-uart converter now attached to ttyUSB0 [ 209.037645][ T8267] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 209.073889][ T5906] usb 4-1: Using ep0 maxpacket: 16 [ 209.090768][ T5906] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 209.103833][ T5906] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.125355][ T5906] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 209.133809][ T5918] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 209.157736][ T5906] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 209.172606][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.202217][ T5906] usb 4-1: Product: syz [ 209.212628][ T5906] usb 4-1: Manufacturer: syz [ 209.222798][ T5906] usb 4-1: SerialNumber: syz [ 209.325455][ T5918] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.343882][ T5918] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 209.375191][ T5918] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 209.384707][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 209.403250][ T5918] usb 1-1: SerialNumber: syz [ 209.414661][ T48] usb 2-1: USB disconnect, device number 34 [ 209.423818][ T48] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 209.432944][ T48] ch341 2-1:0.0: device disconnected [ 209.682055][ T5906] usb 4-1: 0:2 : does not exist [ 209.731867][ T5906] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 209.772392][ T8277] xt_hashlimit: size too large, truncated to 1048576 [ 209.826655][ T5918] usb 1-1: 0:2 : does not exist [ 209.826943][ T5906] usb 4-1: USB disconnect, device number 39 [ 209.838716][ T8264] netlink: 20 bytes leftover after parsing attributes in process `syz.0.603'. [ 209.997507][ T8281] netlink: 116 bytes leftover after parsing attributes in process `syz.3.608'. [ 210.168323][ T5918] usb 1-1: USB disconnect, device number 35 [ 211.144812][ T48] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 211.523835][ T48] usb 5-1: unable to get BOS descriptor or descriptor too short [ 211.536172][ T48] usb 5-1: not running at top speed; connect to a high speed hub [ 211.565246][ T48] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.839307][ T48] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 211.878334][ T48] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 211.912158][ T48] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 211.924595][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.932815][ T48] usb 5-1: Product: syz [ 212.008497][ T48] usb 5-1: Manufacturer: syz [ 212.023046][ T48] usb 5-1: SerialNumber: syz [ 212.350220][ T8307] netlink: 'syz.4.613': attribute type 1 has an invalid length. [ 212.980794][ T48] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 213.012889][ T48] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 213.038768][ T48] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 213.128948][ T48] usb 5-1: USB disconnect, device number 26 [ 213.345574][ T5917] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 213.452591][ T8339] netlink: 200 bytes leftover after parsing attributes in process `syz.1.620'. [ 213.503882][ T5917] usb 1-1: Using ep0 maxpacket: 32 [ 213.510939][ T5917] usb 1-1: config 0 has an invalid interface number: 239 but max is 0 [ 213.519531][ T5917] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.545912][ T5917] usb 1-1: config 0 has no interface number 0 [ 213.552200][ T5917] usb 1-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 213.566400][ T5917] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 213.586327][ T5917] usb 1-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 213.614157][ T5917] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 213.639575][ T5917] usb 1-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 213.659281][ T5917] usb 1-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 213.671726][ T5917] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 213.683121][ T5917] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0 [ 213.684483][ T48] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 213.693975][ T5917] usb 1-1: config 0 interface 239 has no altsetting 0 [ 213.719571][ T5917] usb 1-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 213.728961][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.737160][ T5917] usb 1-1: Product: syz [ 213.741524][ T5917] usb 1-1: Manufacturer: syz [ 213.746337][ T5917] usb 1-1: SerialNumber: syz [ 213.762381][ T5917] usb 1-1: config 0 descriptor?? [ 213.763489][ T8351] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 213.770707][ T8326] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 213.781501][ T8326] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 213.810043][ T5835] Bluetooth: hci5: urb ffff88805594c100 submission failed (90) [ 213.874025][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.885165][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.896911][ T48] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 213.908255][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.923957][ T48] usb 5-1: config 0 descriptor?? [ 214.027538][ T5917] usb 1-1: USB disconnect, device number 36 [ 214.345341][ T48] cm6533_jd 0003:0D8C:0022.000A: invalid report_count 1192232228 [ 214.363889][ T48] cm6533_jd 0003:0D8C:0022.000A: item 0 4 1 9 parsing failed [ 214.381632][ T48] cm6533_jd 0003:0D8C:0022.000A: parse failed [ 214.398100][ T48] cm6533_jd 0003:0D8C:0022.000A: probe with driver cm6533_jd failed with error -22 [ 214.540277][ T5916] usb 5-1: USB disconnect, device number 27 [ 214.869618][ T5917] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 214.973131][ T8368] netlink: 180 bytes leftover after parsing attributes in process `syz.2.625'. [ 215.018530][ T8368] netlink: 203340 bytes leftover after parsing attributes in process `syz.2.625'. [ 215.561923][ T5917] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 215.573933][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.581945][ T5917] usb 1-1: Product: syz [ 215.623929][ T5917] usb 1-1: Manufacturer: syz [ 215.645809][ T5917] usb 1-1: SerialNumber: syz [ 215.702687][ T5917] usb 1-1: config 0 descriptor?? [ 215.725384][ T5917] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 216.271012][ T5917] gspca_stk1135: reg_w 0x2 err -110 [ 216.284762][ T8384] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 216.293017][ T8384] usb usb8: usbfs: process 8384 (syz.2.632) did not claim interface 0 before use [ 216.355580][ T5917] gspca_stk1135: serial bus timeout: status=0x00 [ 216.457355][ T8386] netlink: 548 bytes leftover after parsing attributes in process `syz.1.631'. [ 216.476566][ T5917] gspca_stk1135: Sensor write failed [ 216.481886][ T5917] gspca_stk1135: serial bus timeout: status=0x00 [ 216.493756][ T5917] gspca_stk1135: Sensor write failed [ 216.503935][ T5917] gspca_stk1135: serial bus timeout: status=0x00 [ 216.510438][ T5917] gspca_stk1135: Sensor read failed [ 216.520891][ T5917] gspca_stk1135: serial bus timeout: status=0x00 [ 216.534229][ T5917] gspca_stk1135: Sensor read failed [ 216.539573][ T5917] gspca_stk1135: Detected sensor type unknown (0x0) [ 216.553931][ T5917] gspca_stk1135: serial bus timeout: status=0x00 [ 216.561565][ T5917] gspca_stk1135: Sensor read failed [ 216.583208][ T5917] gspca_stk1135: serial bus timeout: status=0x00 [ 216.592767][ T5917] gspca_stk1135: Sensor read failed [ 216.612859][ T5917] gspca_stk1135: serial bus timeout: status=0x00 [ 216.619658][ T5917] gspca_stk1135: Sensor write failed [ 216.632060][ T5917] gspca_stk1135: serial bus timeout: status=0x00 [ 216.647566][ T5917] gspca_stk1135: Sensor write failed [ 216.673943][ T5917] stk1135 1-1:0.0: probe with driver stk1135 failed with error -110 [ 216.889292][ T8394] syzkaller1: entered promiscuous mode [ 216.895101][ T8394] syzkaller1: entered allmulticast mode [ 216.900922][ T48] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 217.044102][ T48] usb 3-1: device descriptor read/64, error -71 [ 217.153815][ T5906] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 217.183813][ T24] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 217.223282][ T5917] usb 1-1: USB disconnect, device number 37 [ 217.307544][ T48] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 217.315271][ T5906] usb 5-1: device descriptor read/64, error -71 [ 217.368022][ T24] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 217.395916][ T24] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 217.434622][ T24] usb 4-1: config 8 has no interface number 0 [ 217.451750][ T24] usb 4-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 217.465075][ T48] usb 3-1: device descriptor read/64, error -71 [ 217.485398][ T24] usb 4-1: config 8 interface 177 has no altsetting 0 [ 217.506811][ T24] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 217.533868][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.563862][ T5906] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 217.574157][ T48] usb usb3-port1: attempt power cycle [ 217.588685][ T24] ir_toy 4-1:8.177: required endpoints not found [ 217.723790][ T5906] usb 5-1: device descriptor read/64, error -71 [ 217.865484][ T5906] usb usb5-port1: attempt power cycle [ 217.953429][ T48] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 218.060563][ T8403] netlink: 36 bytes leftover after parsing attributes in process `syz.0.638'. [ 218.070224][ T48] usb 3-1: device descriptor read/8, error -71 [ 218.296712][ T5906] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 218.323814][ T48] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 218.339945][ T5906] usb 5-1: device descriptor read/8, error -71 [ 218.368140][ T48] usb 3-1: device descriptor read/8, error -71 [ 218.374403][ T5884] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 218.494033][ T48] usb usb3-port1: unable to enumerate USB device [ 218.535419][ T5884] usb 2-1: Using ep0 maxpacket: 32 [ 218.545282][ T5884] usb 2-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 218.554508][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.565644][ T5884] usb 2-1: config 0 descriptor?? [ 218.593864][ T5906] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 218.614650][ T5906] usb 5-1: device descriptor read/8, error -71 [ 218.724317][ T5906] usb usb5-port1: unable to enumerate USB device [ 218.980661][ T5884] lenovo 0003:17EF:60A4.000B: unknown main item tag 0x0 [ 218.991420][ T5884] lenovo 0003:17EF:60A4.000B: hidraw0: USB HID vb4.34 Device [HID 17ef:60a4] on usb-dummy_hcd.1-1/input0 [ 219.701661][ T8409] batadv_slave_0: entered promiscuous mode [ 219.710101][ T8408] batadv_slave_0: left promiscuous mode [ 219.740890][ T5884] usb 4-1: USB disconnect, device number 40 [ 220.034785][ T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 220.203770][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 220.216023][ T10] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 220.239814][ T10] usb 3-1: config 179 has no interface number 0 [ 220.247485][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 220.277511][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 220.293805][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 220.305461][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 220.318172][ T5884] usb 2-1: USB disconnect, device number 35 [ 220.318730][ T10] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 220.337787][ T10] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 220.468828][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.538564][ T8411] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 220.646894][ T8423] netlink: 40 bytes leftover after parsing attributes in process `syz.1.643'. [ 220.666120][ T8423] x_tables: unsorted underflow at hook 4 [ 220.680018][ T8423] veth0: entered promiscuous mode [ 220.688876][ T8423] vlan2: entered promiscuous mode [ 220.770192][ T8427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.777837][ T8427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.790262][ T8427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.792366][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input16 [ 220.838501][ T8427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.977006][ T5884] usb 3-1: USB disconnect, device number 35 [ 220.977098][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 220.991552][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 221.338695][ T30] kauditd_printk_skb: 97 callbacks suppressed [ 221.338710][ T30] audit: type=1326 audit(1769540504.316:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8435 comm="syz.1.647" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f934c19aeb9 code=0x0 [ 222.008224][ T8456] fuse: Bad value for 'fd' [ 223.001649][ T8469] netlink: 36 bytes leftover after parsing attributes in process `syz.2.654'. [ 223.143776][ T10] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 223.315961][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 223.345239][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 223.437810][ T10] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 223.441676][ T8471] netlink: 36 bytes leftover after parsing attributes in process `syz.4.657'. [ 223.454905][ T10] usb 4-1: config 0 has no interface number 0 [ 223.454956][ T10] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 223.454980][ T10] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 223.454999][ T10] usb 4-1: config 0 interface 88 has no altsetting 0 [ 223.473805][ T8471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.657'. [ 223.492916][ T8475] fuse: Unknown parameter 'ÿè¯W‰M' [ 223.498533][ T8471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.657'. [ 223.606552][ T8462] netlink: 36 bytes leftover after parsing attributes in process `syz.1.653'. [ 223.620257][ T8475] fuse: Bad value for 'group_id' [ 223.625646][ T8475] fuse: Bad value for 'group_id' [ 223.630780][ T8472] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 223.647572][ T8475] IPVS: length: 153 != 83260610232 [ 223.664059][ T10] usb 4-1: language id specifier not provided by device, defaulting to English [ 223.697748][ T10] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 223.716574][ T10] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 223.822278][ T10] usb 4-1: Product: syz [ 223.827047][ T10] usb 4-1: SerialNumber: syz [ 223.937391][ T10] usb 4-1: config 0 descriptor?? [ 224.179069][ T10] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input17 [ 224.236424][ T10] usb 4-1: USB disconnect, device number 41 [ 224.368300][ T30] audit: type=1326 audit(1769540507.346:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8488 comm="syz.4.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62b0b9aeb9 code=0x7ffc0000 [ 224.391291][ T30] audit: type=1326 audit(1769540507.346:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8488 comm="syz.4.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f62b0b9aeb9 code=0x7ffc0000 [ 224.419949][ T30] audit: type=1326 audit(1769540507.346:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8488 comm="syz.4.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62b0b9aeb9 code=0x7ffc0000 [ 224.445838][ T30] audit: type=1326 audit(1769540507.346:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8488 comm="syz.4.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f62b0b9aeb9 code=0x7ffc0000 [ 224.469711][ T30] audit: type=1326 audit(1769540507.346:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8488 comm="syz.4.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62b0b9aeb9 code=0x7ffc0000 [ 224.640947][ T30] audit: type=1326 audit(1769540507.376:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8488 comm="syz.4.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62b0b9aeb9 code=0x7ffc0000 [ 224.696069][ T30] audit: type=1326 audit(1769540507.376:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8488 comm="syz.4.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f62b0b9aeb9 code=0x7ffc0000 [ 224.759809][ T30] audit: type=1326 audit(1769540507.376:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8488 comm="syz.4.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62b0b9aeb9 code=0x7ffc0000 [ 224.822274][ T30] audit: type=1326 audit(1769540507.376:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8488 comm="syz.4.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62b0b9aeb9 code=0x7ffc0000 [ 224.920211][ T5884] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 225.093917][ T5884] usb 5-1: Using ep0 maxpacket: 32 [ 225.101687][ T5884] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.123338][ T5884] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 225.162575][ T5884] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 225.186861][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.216781][ T5884] usb 5-1: Product: syz [ 225.227612][ T5884] usb 5-1: Manufacturer: syz [ 225.232294][ T5884] usb 5-1: SerialNumber: syz [ 225.333805][ T5906] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 225.343653][ T5884] usb 5-1: config 0 descriptor?? [ 225.372300][ T8506] netlink: 40 bytes leftover after parsing attributes in process `syz.1.668'. [ 225.443190][ T8507] netlink: 40 bytes leftover after parsing attributes in process `syz.1.668'. [ 225.538374][ T5906] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 225.549907][ T5906] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 225.575831][ T5884] usb 5-1: no audio or video endpoints found [ 225.601359][ T5906] usb 1-1: config 0 interface 0 has no altsetting 0 [ 225.611155][ T5884] usb 5-1: USB disconnect, device number 32 [ 225.623889][ T48] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 225.643335][ T5906] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 225.662027][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 225.692679][ T5906] usb 1-1: Product: syz [ 225.703443][ T5906] usb 1-1: Manufacturer: syz [ 225.710755][ T5906] usb 1-1: SerialNumber: syz [ 225.742473][ T5906] usb 1-1: config 0 descriptor?? [ 225.768958][ T5906] usb 1-1: selecting invalid altsetting 0 [ 225.824705][ T48] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 225.833061][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 225.860216][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 225.943489][ T48] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 225.969610][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.991395][ T48] usb 4-1: Product: syz [ 226.005398][ T48] usb 4-1: Manufacturer: syz [ 226.098067][ T8517] netlink: 36 bytes leftover after parsing attributes in process `syz.1.670'. [ 226.110042][ T8517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.670'. [ 226.119856][ T8517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.670'. [ 226.132439][ T48] usb 4-1: SerialNumber: syz [ 226.203199][ T48] usb 4-1: config 0 descriptor?? [ 226.242254][ T8517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.276741][ T8517] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 226.355244][ T8533] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 226.359263][ T8534] netlink: 'syz.4.672': attribute type 1 has an invalid length. [ 226.444888][ T10] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 226.453126][ T8534] netlink: 'syz.4.672': attribute type 2 has an invalid length. [ 226.508675][ T8534] netlink: 'syz.4.672': attribute type 1 has an invalid length. [ 226.518116][ T8534] netlink: 16 bytes leftover after parsing attributes in process `syz.4.672'. [ 226.603979][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 226.610906][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.643815][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.663256][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 226.747202][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.819288][ T10] usb 3-1: config 0 descriptor?? [ 227.384572][ T10] logitech 0003:046D:C20E.000C: rdesc size test failed for formula gp [ 227.393416][ T10] logitech 0003:046D:C20E.000C: item fetching failed at offset 10/11 [ 227.428119][ T10] logitech 0003:046D:C20E.000C: parse failed [ 227.453385][ T10] logitech 0003:046D:C20E.000C: probe with driver logitech failed with error -22 [ 228.833161][ T48] usb 4-1: 0:0 : invalid sync pipe. is_playback 1, ep 0b, bSynchAddress ff [ 228.987015][ T48] usb 4-1: USB disconnect, device number 42 [ 229.170328][ T10] usb 1-1: USB disconnect, device number 38 [ 229.236961][ T5906] usb 3-1: USB disconnect, device number 36 [ 229.544046][ T48] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 229.858826][ T8579] netlink: 36 bytes leftover after parsing attributes in process `syz.4.679'. [ 229.903566][ T8580] netlink: 36 bytes leftover after parsing attributes in process `syz.0.683'. [ 229.935738][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.683'. [ 229.946068][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.683'. [ 229.974443][ T48] usb 4-1: Using ep0 maxpacket: 8 [ 229.981638][ T48] usb 4-1: too many configurations: 244, using maximum allowed: 8 [ 230.014603][ T48] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 230.029991][ T48] usb 4-1: can't read configurations, error -61 [ 230.074682][ T8580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.155797][ T8580] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 230.193920][ T48] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 230.370667][ T48] usb 4-1: Using ep0 maxpacket: 8 [ 230.384453][ T48] usb 4-1: too many configurations: 244, using maximum allowed: 8 [ 230.411231][ T48] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 230.423758][ T48] usb 4-1: can't read configurations, error -61 [ 230.440857][ T48] usb usb4-port1: attempt power cycle [ 230.793957][ T48] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 230.827414][ T48] usb 4-1: Using ep0 maxpacket: 8 [ 230.837935][ T48] usb 4-1: too many configurations: 244, using maximum allowed: 8 [ 230.860224][ T48] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 230.889634][ T48] usb 4-1: can't read configurations, error -61 [ 231.043868][ T48] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 231.064437][ T48] usb 4-1: Using ep0 maxpacket: 8 [ 231.076239][ T48] usb 4-1: too many configurations: 244, using maximum allowed: 8 [ 231.226287][ T48] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 231.237457][ T48] usb 4-1: can't read configurations, error -61 [ 231.249823][ T48] usb usb4-port1: unable to enumerate USB device [ 231.477951][ T8608] syzkaller0: entered promiscuous mode [ 231.483621][ T8608] syzkaller0: entered allmulticast mode [ 231.612574][ T8611] netlink: 'syz.0.692': attribute type 9 has an invalid length. [ 232.328445][ T8628] netlink: 156 bytes leftover after parsing attributes in process `syz.3.697'. [ 232.338082][ T8628] netlink: 15354 bytes leftover after parsing attributes in process `syz.3.697'. [ 232.424024][ T5884] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 232.441603][ T8628] netlink: 156 bytes leftover after parsing attributes in process `syz.3.697'. [ 232.582670][ T8635] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.596212][ T5884] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.615641][ T5884] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 232.626125][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 232.663817][ T5884] usb 2-1: Product: syz [ 232.669977][ T5884] usb 2-1: Manufacturer: syz [ 232.693935][ T10] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 232.695429][ T5884] usb 2-1: SerialNumber: syz [ 232.883852][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 232.934280][ T10] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 232.945918][ T8637] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 232.952474][ T8637] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 232.953311][ T10] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 232.963754][ T5884] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 36 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 233.043962][ T8637] vhci_hcd vhci_hcd.0: Device attached [ 233.068688][ T8638] vhci_hcd: connection closed [ 233.068938][ T79] vhci_hcd vhci_hcd.4: stop threads [ 233.089359][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 233.111737][ T79] vhci_hcd vhci_hcd.4: release socket [ 233.119288][ T79] vhci_hcd vhci_hcd.4: disconnect device [ 233.129083][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 233.152528][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 233.195789][ T10] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 233.209717][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.253385][ T10] usb 4-1: Product: syz [ 233.267801][ T10] usb 4-1: Manufacturer: syz [ 233.278581][ T10] usb 4-1: SerialNumber: syz [ 233.352522][ T10] usb 4-1: config 0 descriptor?? [ 233.372440][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 233.383804][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 233.394054][ T10] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input18 [ 233.600203][ T5884] usb 2-1: USB disconnect, device number 36 [ 233.657892][ T5884] usblp0: removed [ 233.680731][ T48] usb 4-1: USB disconnect, device number 47 [ 233.708585][ T8645] delete_channel: no stack [ 233.746463][ T8645] netlink: 64 bytes leftover after parsing attributes in process `syz.4.701'. [ 233.865581][ T8645] vlan2: entered promiscuous mode [ 233.883892][ T8645] erspan0: entered promiscuous mode [ 233.952618][ T8652] netlink: 'syz.3.704': attribute type 2 has an invalid length. [ 234.300267][ T8669] netlink: 'syz.4.710': attribute type 6 has an invalid length. [ 234.354131][ T8669] netlink: 'syz.4.710': attribute type 7 has an invalid length. [ 234.362201][ T8669] netlink: 'syz.4.710': attribute type 8 has an invalid length. [ 234.918455][ T8673] netlink: 36 bytes leftover after parsing attributes in process `syz.1.709'. [ 234.927557][ T5918] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 235.164677][ T5918] usb 5-1: too many configurations: 45, using maximum allowed: 8 [ 235.180202][ T5918] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 235.195439][ T5918] usb 5-1: can't read configurations, error -61 [ 235.345679][ T5918] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 235.446387][ T8689] FAULT_INJECTION: forcing a failure. [ 235.446387][ T8689] name failslab, interval 1, probability 0, space 0, times 0 [ 235.459974][ T8689] CPU: 1 UID: 0 PID: 8689 Comm: syz.0.715 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.459992][ T8689] Tainted: [L]=SOFTLOCKUP [ 235.459996][ T8689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 235.460003][ T8689] Call Trace: [ 235.460007][ T8689] [ 235.460011][ T8689] dump_stack_lvl+0xe8/0x150 [ 235.460030][ T8689] should_fail_ex+0x412/0x560 [ 235.460046][ T8689] should_failslab+0xa8/0x100 [ 235.460058][ T8689] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 235.460074][ T8689] ? __alloc_skb+0x193/0x390 [ 235.460086][ T8689] ? __alloc_skb+0x1d7/0x390 [ 235.460095][ T8689] ? __local_bh_enable_ip+0xd0/0x130 [ 235.460105][ T8689] ? __alloc_skb+0x193/0x390 [ 235.460116][ T8689] __alloc_skb+0x1d7/0x390 [ 235.460129][ T8689] netlink_sendmsg+0x5d4/0xb40 [ 235.460144][ T8689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.460156][ T8689] ? aa_sock_msg_perm+0xf1/0x1b0 [ 235.460170][ T8689] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 235.460181][ T8689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.460190][ T8689] ____sys_sendmsg+0xa68/0xad0 [ 235.460204][ T8689] ? __might_fault+0xaf/0x130 [ 235.460221][ T8689] ? __pfx_____sys_sendmsg+0x10/0x10 [ 235.460237][ T8689] ? import_iovec+0x73/0xa0 [ 235.460253][ T8689] ___sys_sendmsg+0x2a5/0x360 [ 235.460265][ T8689] ? __lock_acquire+0x6b5/0x2cf0 [ 235.460281][ T8689] ? __pfx____sys_sendmsg+0x10/0x10 [ 235.460309][ T8689] ? __fget_files+0x2a/0x420 [ 235.460319][ T8689] ? __fget_files+0x3a0/0x420 [ 235.460334][ T8689] __x64_sys_sendmsg+0x1bd/0x2a0 [ 235.460347][ T8689] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 235.460365][ T8689] ? __pfx_ksys_write+0x10/0x10 [ 235.460384][ T8689] do_syscall_64+0xe2/0xf80 [ 235.460396][ T8689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.460405][ T8689] ? trace_irq_disable+0x37/0x100 [ 235.460414][ T8689] ? clear_bhb_loop+0x60/0xb0 [ 235.460426][ T8689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.460435][ T8689] RIP: 0033:0x7f904d39aeb9 [ 235.460446][ T8689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.460454][ T8689] RSP: 002b:00007f904e1d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.460467][ T8689] RAX: ffffffffffffffda RBX: 00007f904d615fa0 RCX: 00007f904d39aeb9 [ 235.460474][ T8689] RDX: 0000000000000004 RSI: 0000200000000600 RDI: 0000000000000003 [ 235.460480][ T8689] RBP: 00007f904e1d0090 R08: 0000000000000000 R09: 0000000000000000 [ 235.460485][ T8689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.460491][ T8689] R13: 00007f904d616038 R14: 00007f904d615fa0 R15: 00007f904d73fa48 [ 235.460506][ T8689] [ 235.867487][ T5918] usb 5-1: too many configurations: 45, using maximum allowed: 8 [ 235.895493][ T5918] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 235.905300][ T5918] usb 5-1: can't read configurations, error -61 [ 235.924241][ T5918] usb usb5-port1: attempt power cycle [ 236.275136][ T5918] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 236.317949][ T5918] usb 5-1: too many configurations: 45, using maximum allowed: 8 [ 236.345637][ T5918] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 236.353335][ T5918] usb 5-1: can't read configurations, error -61 [ 236.374529][ T5916] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 236.508925][ T5916] usb 1-1: device descriptor read/64, error -71 [ 236.515879][ T5918] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 236.564432][ T5918] usb 5-1: too many configurations: 45, using maximum allowed: 8 [ 236.583506][ T5918] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 236.599666][ T5918] usb 5-1: can't read configurations, error -61 [ 236.624936][ T5918] usb usb5-port1: unable to enumerate USB device [ 236.756427][ T5916] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 236.920376][ T5916] usb 1-1: device descriptor read/64, error -71 [ 236.930298][ T8701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.719'. [ 236.939860][ T8701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.719'. [ 237.010241][ T8704] netlink: 'syz.3.721': attribute type 6 has an invalid length. [ 237.019274][ T8704] netlink: 'syz.3.721': attribute type 7 has an invalid length. [ 237.029087][ T8704] netlink: 'syz.3.721': attribute type 8 has an invalid length. [ 237.044158][ T5916] usb usb1-port1: attempt power cycle [ 237.163868][ T5906] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 237.348635][ T5906] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.363761][ T5906] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 237.438769][ T5906] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 237.471895][ T8711] fuse: Bad value for 'group_id' [ 237.480937][ T8711] fuse: Bad value for 'group_id' [ 237.486200][ T5916] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 237.497501][ T5906] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 237.508120][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.537822][ T8709] fuse: Bad value for 'group_id' [ 237.542954][ T8709] fuse: Bad value for 'group_id' [ 237.561285][ T5906] usb 3-1: Product: syz [ 237.570727][ T5906] usb 3-1: Manufacturer: syz [ 237.574581][ T5916] usb 1-1: device descriptor read/8, error -71 [ 237.587674][ T5906] usb 3-1: SerialNumber: syz [ 237.606357][ T5906] usb 3-1: config 0 descriptor?? [ 237.625874][ T5906] uvcvideo 3-1:0.0: probe with driver uvcvideo failed with error -22 [ 237.995056][ T5916] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 238.173221][ T5916] usb 1-1: device descriptor read/8, error -71 [ 238.284110][ T5916] usb usb1-port1: unable to enumerate USB device [ 239.209330][ T8733] netlink: 40 bytes leftover after parsing attributes in process `syz.0.727'. [ 239.854536][ T8733] veth0: entered promiscuous mode [ 239.860455][ T8733] vlan3: entered promiscuous mode [ 240.112839][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 240.112858][ T30] audit: type=1326 audit(1769540523.086:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8738 comm="syz.4.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62b0b9aeb9 code=0x7ffc0000 [ 240.155617][ T8744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.732'. [ 240.164877][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.732'. [ 240.182506][ T30] audit: type=1326 audit(1769540523.086:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8738 comm="syz.4.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f62b0b9aeb9 code=0x7ffc0000 [ 240.280412][ T30] audit: type=1326 audit(1769540523.086:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8738 comm="syz.4.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62b0b9aeb9 code=0x7ffc0000 [ 240.368875][ T30] audit: type=1326 audit(1769540523.086:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8738 comm="syz.4.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f62b0b9aeb9 code=0x7ffc0000 [ 240.422175][ T30] audit: type=1326 audit(1769540523.086:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8738 comm="syz.4.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62b0b9aeb9 code=0x7ffc0000 [ 240.432356][ T5917] usb 3-1: USB disconnect, device number 37 [ 240.445431][ T30] audit: type=1326 audit(1769540523.086:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8738 comm="syz.4.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f62b0b9aeb9 code=0x7ffc0000 [ 240.475299][ T10] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 240.803740][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 240.846145][ T8751] netlink: 36 bytes leftover after parsing attributes in process `syz.3.733'. [ 240.956475][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.014239][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.034497][ T10] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 241.043581][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.092048][ T30] audit: type=1326 audit(1769540523.086:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8738 comm="syz.4.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62b0b9aeb9 code=0x7ffc0000 [ 241.274470][ T10] usb 5-1: config 0 descriptor?? [ 241.301462][ T30] audit: type=1326 audit(1769540523.086:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8738 comm="syz.4.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f62b0b9aeb9 code=0x7ffc0000 [ 241.415231][ T30] audit: type=1326 audit(1769540523.086:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8738 comm="syz.4.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62b0b9aeb9 code=0x7ffc0000 [ 241.548815][ T30] audit: type=1326 audit(1769540523.086:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8738 comm="syz.4.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f62b0b9aeb9 code=0x7ffc0000 [ 241.742653][ T10] corsair 0003:1B1C:1B02.000D: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 242.148785][ T8739] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 242.165314][ T10] usb 5-1: USB disconnect, device number 37 [ 242.593795][ T5885] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 242.743818][ T5885] usb 3-1: Using ep0 maxpacket: 16 [ 242.749032][ T48] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 242.759828][ T5885] usb 3-1: config 8 has an invalid interface number: 159 but max is 0 [ 242.773055][ T5885] usb 3-1: config 8 has no interface number 0 [ 242.784485][ T5885] usb 3-1: config 8 interface 159 has no altsetting 0 [ 242.799586][ T5885] usb 3-1: New USB device found, idVendor=0c45, idProduct=612a, bcdDevice=29.9c [ 242.831148][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.853297][ T5885] usb 3-1: Product: syz [ 242.866139][ T5885] usb 3-1: Manufacturer: syz [ 242.880244][ T5885] usb 3-1: SerialNumber: syz [ 242.926942][ T48] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 242.937678][ T48] usb 1-1: config 1 has no interface number 0 [ 242.949544][ T48] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1023 [ 242.969357][ T48] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 242.989084][ T48] usb 1-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 243.031827][ T48] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 243.049233][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.058300][ T48] usb 1-1: Product: syz [ 243.062889][ T48] usb 1-1: Manufacturer: syz [ 243.068419][ T48] usb 1-1: SerialNumber: syz [ 243.083301][ T8778] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 243.104011][ T8778] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 243.118753][ T8786] netlink: 40 bytes leftover after parsing attributes in process `syz.4.742'. [ 243.118879][ T48] usb 1-1: Expected 3 endpoints, found: 2 [ 243.164345][ T8786] veth0: entered promiscuous mode [ 243.174893][ T8786] vlan3: entered promiscuous mode [ 243.200550][ T5885] gspca_main: sonixj-2.14.0 probing 0c45:612a [ 243.212008][ T5885] gspca_sonixj: reg_w1 err -71 [ 243.226950][ T5885] sonixj 3-1:8.159: probe with driver sonixj failed with error -71 [ 243.247262][ T5885] usb 3-1: USB disconnect, device number 38 [ 243.341157][ T8778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.361446][ T8778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.394801][ T8778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.411051][ T8778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.431587][ T8778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.459365][ T8778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.546327][ T8778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.553555][ T8791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.744'. [ 243.575431][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.744'. [ 243.579799][ T8778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.633849][ T8778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.663804][ T8778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.736554][ T48] usb 1-1: USB disconnect, device number 43 [ 243.755150][ T5917] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 243.809798][ T8800] netlink: 'syz.1.747': attribute type 6 has an invalid length. [ 243.925407][ T5917] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 243.935546][ T5885] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 243.938879][ T5917] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 243.956492][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.967938][ T5917] usb 5-1: config 0 descriptor?? [ 244.086219][ T10] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 244.166111][ T5885] usb 4-1: device descriptor read/64, error -71 [ 244.208282][ T5917] usb 5-1: string descriptor 0 read error: -71 [ 244.228951][ T48] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 244.248853][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.267582][ T10] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 244.277183][ T5917] usbhid 5-1:0.0: can't add hid device: -71 [ 244.291565][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.299778][ T5917] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 244.330207][ T5917] usb 5-1: USB disconnect, device number 38 [ 244.350560][ T10] usb 3-1: config 0 descriptor?? [ 244.366955][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 244.421356][ T48] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 244.433042][ T5885] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 244.445887][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 244.459402][ T48] usb 1-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 244.468757][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.477068][ T48] usb 1-1: Product: syz [ 244.481409][ T48] usb 1-1: Manufacturer: syz [ 244.487547][ T48] usb 1-1: SerialNumber: syz [ 244.501946][ T48] usb 1-1: config 0 descriptor?? [ 244.584024][ T5885] usb 4-1: device descriptor read/64, error -71 [ 244.633809][ T5917] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 244.694127][ T5885] usb usb4-port1: attempt power cycle [ 244.725207][ T48] input: Griffin PowerMate as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input19 [ 244.742020][ C1] powermate: config urb returned -71 [ 244.747812][ C1] powermate: config urb returned -71 [ 244.753416][ C1] powermate: config urb returned -71 [ 244.758984][ C1] powermate: config urb returned -71 [ 244.771842][ T48] usb 1-1: USB disconnect, device number 44 [ 244.777908][ C1] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 244.794905][ T5917] usb 5-1: Using ep0 maxpacket: 32 [ 244.803937][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 244.817794][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.841862][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 244.860093][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.877310][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 244.888458][ T5917] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 244.908053][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.925276][ T5917] usb 5-1: config 0 descriptor?? [ 244.936963][ T5917] hub 5-1:0.0: USB hub found [ 245.034091][ T5885] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 245.054799][ T5885] usb 4-1: device descriptor read/8, error -71 [ 245.101447][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 245.113558][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 245.124511][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 245.132140][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 245.140562][ T5917] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 245.276345][ T8819] fuse: Unknown parameter 'ÿè¯W‰M' [ 245.289081][ T8819] fuse: Bad value for 'group_id' [ 245.294462][ T8819] fuse: Bad value for 'group_id' [ 245.301224][ T8819] IPVS: length: 153 != 83260610232 [ 245.313919][ T5885] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 245.334802][ T5885] usb 4-1: device descriptor read/8, error -71 [ 245.351039][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 245.370882][ T5917] usbhid 5-1:0.0: can't add hid device: -71 [ 245.377493][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 245.387740][ T5917] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 245.395933][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 245.404978][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 245.412007][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 245.419441][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 245.426621][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 245.436696][ T5917] usb 5-1: USB disconnect, device number 39 [ 245.448703][ T10] pwc: Registered as video103. [ 245.456160][ T5885] usb usb4-port1: unable to enumerate USB device [ 245.464348][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input20 [ 245.491229][ T10] usb 3-1: USB disconnect, device number 39 [ 245.935001][ T8826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.755'. [ 245.944343][ T8826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.755'. [ 246.047338][ T8823] netlink: 36 bytes leftover after parsing attributes in process `syz.0.754'. [ 246.223099][ T8830] netlink: 36 bytes leftover after parsing attributes in process `syz.4.757'. [ 246.246153][ T8830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.757'. [ 246.255078][ T8830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.757'. [ 246.312565][ T8830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.340251][ T8830] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 246.514438][ T8842] netlink: 'syz.4.760': attribute type 6 has an invalid length. [ 246.522401][ T8842] netlink: 'syz.4.760': attribute type 7 has an invalid length. [ 246.542483][ T8842] netlink: 'syz.4.760': attribute type 8 has an invalid length. [ 247.197155][ T8859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.767'. [ 247.232648][ T8859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.767'. [ 247.631312][ T8867] ptrace attach of "./syz-executor exec"[5840] was attempted by "./syz-executor exec"[8867] [ 247.651488][ T8867] random: crng reseeded on system resumption [ 247.683872][ T48] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 247.833826][ T48] usb 2-1: Using ep0 maxpacket: 8 [ 247.841892][ T48] usb 2-1: unable to get BOS descriptor or descriptor too short [ 247.850831][ T48] usb 2-1: config 5 has an invalid interface number: 215 but max is 0 [ 247.859848][ T48] usb 2-1: config 5 has no interface number 0 [ 247.866734][ T48] usb 2-1: config 5 interface 215 has no altsetting 0 [ 247.875645][ T48] usb 2-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba [ 247.884911][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.892965][ T48] usb 2-1: Product: syz [ 247.897290][ T48] usb 2-1: Manufacturer: syz [ 247.902045][ T48] usb 2-1: SerialNumber: syz [ 248.112337][ T8864] netlink: 32 bytes leftover after parsing attributes in process `syz.1.769'. [ 248.127638][ T48] cypress_m8 2-1:5.215: DeLorme Earthmate USB converter detected [ 248.137724][ T48] earthmate ttyUSB0: required endpoint is missing [ 248.147631][ T48] usb 2-1: USB disconnect, device number 37 [ 248.158926][ T48] cypress_m8 2-1:5.215: device disconnected [ 248.451743][ T8873] netlink: 'syz.0.772': attribute type 10 has an invalid length. [ 248.468759][ T8873] macvlan0: entered promiscuous mode [ 248.482445][ T8873] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 248.743785][ T5917] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 248.853508][ T8881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.775'. [ 248.873771][ T5917] usb 3-1: device descriptor read/64, error -71 [ 249.114459][ T5917] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 249.243868][ T5917] usb 3-1: device descriptor read/64, error -71 [ 249.354287][ T5917] usb usb3-port1: attempt power cycle [ 249.715431][ T5917] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 249.752996][ T5917] usb 3-1: device descriptor read/8, error -71 [ 250.069514][ T5917] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 250.104719][ T5917] usb 3-1: device descriptor read/8, error -71 [ 250.214965][ T5917] usb usb3-port1: unable to enumerate USB device [ 250.902723][ T8912] netlink: 'syz.4.784': attribute type 10 has an invalid length. [ 250.992269][ T8912] macvlan0: entered promiscuous mode [ 251.019757][ T8912] bond0: (slave macvlan0): Error -22 calling dev_set_mtu [ 253.606238][ T8967] tipc: Started in network mode [ 253.709280][ T8967] tipc: Node identity 7, cluster identity 2048 [ 253.777221][ T8967] tipc: Node number set to 7 [ 254.294139][ T5885] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 254.382815][ T8952] netlink: 'syz.0.793': attribute type 4 has an invalid length. [ 254.477560][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.502270][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.583506][ T5885] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 254.614001][ T5885] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 254.654110][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.688717][ T5885] usb 3-1: config 0 descriptor?? [ 255.138499][ T5885] plantronics 0003:047F:FFFF.000E: reserved main item tag 0xd [ 255.230792][ T5885] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 255.382543][ T5917] usb 3-1: USB disconnect, device number 44 [ 255.462431][ T8997] fido_id[8997]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 255.708803][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.718523][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.721947][ T9003] pimreg: entered allmulticast mode [ 256.102349][ T9007] pimreg: left allmulticast mode [ 256.495273][ T48] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 256.516914][ T9026] xt_hashlimit: max too large, truncated to 1048576 [ 256.538133][ T9026] xt_hashlimit: max too large, truncated to 1048576 [ 256.555165][ T9026] xt_hashlimit: max too large, truncated to 1048576 [ 256.638920][ T9026] xt_hashlimit: max too large, truncated to 1048576 [ 256.646102][ T9026] xt_hashlimit: max too large, truncated to 1048576 [ 256.743761][ T48] usb 2-1: Using ep0 maxpacket: 32 [ 256.751287][ T48] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 256.760219][ T48] usb 2-1: config 0 has no interface number 0 [ 256.766789][ T48] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 256.847848][ T9026] xt_hashlimit: max too large, truncated to 1048576 [ 256.860805][ T48] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 256.870228][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.884293][ T9026] xt_hashlimit: max too large, truncated to 1048576 [ 256.886181][ T48] usb 2-1: Product: syz [ 256.916680][ T48] usb 2-1: Manufacturer: syz [ 256.917413][ T9026] xt_hashlimit: max too large, truncated to 1048576 [ 256.963285][ T48] usb 2-1: SerialNumber: syz [ 256.990623][ T9026] xt_hashlimit: max too large, truncated to 1048576 [ 257.005177][ T48] usb 2-1: config 0 descriptor?? [ 257.063469][ T9026] xt_hashlimit: max too large, truncated to 1048576 [ 257.072599][ T48] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 257.173466][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 257.173484][ T30] audit: type=1326 audit(1769540540.056:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.0.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904d39aeb9 code=0x7ffc0000 [ 257.201992][ T48] em28xx 2-1:0.132: Video interface 132 found: [ 257.212465][ T30] audit: type=1326 audit(1769540540.056:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.0.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f904d39aeb9 code=0x7ffc0000 [ 257.253398][ T30] audit: type=1326 audit(1769540540.056:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.0.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904d39aeb9 code=0x7ffc0000 [ 257.276695][ T30] audit: type=1326 audit(1769540540.056:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.0.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f904d39aeb9 code=0x7ffc0000 [ 257.315924][ T30] audit: type=1326 audit(1769540540.056:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.0.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904d39aeb9 code=0x7ffc0000 [ 257.401596][ T30] audit: type=1326 audit(1769540540.056:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.0.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f904d39aeb9 code=0x7ffc0000 [ 257.519261][ T30] audit: type=1326 audit(1769540540.256:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.0.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904d39aeb9 code=0x7ffc0000 [ 257.527502][ T9018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.576521][ T30] audit: type=1326 audit(1769540540.256:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.0.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904d39aeb9 code=0x7ffc0000 [ 257.616247][ T9018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.656693][ T48] em28xx 2-1:0.132: chip ID is em2710/2820 [ 257.927159][ T48] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 258.040414][ T5906] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 258.072116][ T48] em28xx 2-1:0.132: board has no eeprom [ 258.133797][ T48] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 258.141685][ T48] em28xx 2-1:0.132: analog set to bulk mode. [ 258.185382][ T5885] em28xx 2-1:0.132: Registering V4L2 extension [ 258.230236][ T5906] usb 3-1: Using ep0 maxpacket: 16 [ 258.251423][ T48] usb 2-1: USB disconnect, device number 38 [ 258.279960][ T5885] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-19) [ 258.303191][ T5906] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 258.312929][ T48] em28xx 2-1:0.132: Disconnecting em28xx [ 258.326869][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.373777][ T5906] usb 3-1: Product: syz [ 258.418613][ T5906] usb 3-1: Manufacturer: syz [ 258.464320][ T5885] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 258.494085][ T5906] usb 3-1: SerialNumber: syz [ 258.503949][ T5885] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 258.549616][ T5885] em28xx 2-1:0.132: No AC97 audio processor [ 258.575403][ T5885] usb 2-1: Decoder not found [ 258.609637][ T5885] em28xx 2-1:0.132: failed to create media graph [ 258.642395][ T5885] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 258.723565][ T5885] em28xx 2-1:0.132: Remote control support is not available for this card. [ 258.723887][ T9057] ================================================================== [ 258.740253][ T9057] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 258.747614][ T9057] Read of size 8 at addr ffff888034170740 by task v4l_id/9057 [ 258.755058][ T9057] [ 258.757376][ T9057] CPU: 0 UID: 0 PID: 9057 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 258.757400][ T9057] Tainted: [L]=SOFTLOCKUP [ 258.757407][ T9057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 258.757424][ T9057] Call Trace: [ 258.757430][ T9057] [ 258.757434][ T9057] dump_stack_lvl+0xe8/0x150 [ 258.757451][ T9057] print_report+0xba/0x230 [ 258.757461][ T9057] ? v4l2_fh_open+0xac/0x420 [ 258.757473][ T9057] kasan_report+0x117/0x150 [ 258.757492][ T9057] ? v4l2_fh_open+0xac/0x420 [ 258.757512][ T9057] v4l2_fh_open+0xac/0x420 [ 258.757531][ T9057] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 258.757551][ T9057] em28xx_v4l2_open+0x157/0x9a0 [ 258.757570][ T9057] ? do_raw_spin_lock+0x12b/0x2f0 [ 258.757583][ T9057] v4l2_open+0x1bf/0x3a0 [ 258.757596][ T9057] chrdev_open+0x4cd/0x5e0 [ 258.757606][ T9057] ? __pfx_chrdev_open+0x10/0x10 [ 258.757615][ T9057] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 258.757632][ T9057] ? __pfx_chrdev_open+0x10/0x10 [ 258.757647][ T9057] do_dentry_open+0x7ce/0x1420 [ 258.757672][ T9057] vfs_open+0x3b/0x340 [ 258.757688][ T9057] ? path_openat+0x346e/0x3e20 [ 258.757709][ T9057] path_openat+0x3486/0x3e20 [ 258.757728][ T9057] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 258.757743][ T9057] ? getname_flags+0xb7/0x540 [ 258.757753][ T9057] ? __pfx_path_openat+0x10/0x10 [ 258.757766][ T9057] ? __lock_acquire+0x6b5/0x2cf0 [ 258.757790][ T9057] do_filp_open+0x22d/0x490 [ 258.757811][ T9057] ? __pfx_do_filp_open+0x10/0x10 [ 258.757840][ T9057] ? _raw_spin_unlock+0x28/0x50 [ 258.757859][ T9057] ? alloc_fd+0x64b/0x6c0 [ 258.757871][ T9057] do_sys_openat2+0x12f/0x220 [ 258.757882][ T9057] ? __pfx_do_sys_openat2+0x10/0x10 [ 258.757898][ T9057] ? exc_page_fault+0x6a/0xc0 [ 258.757908][ T9057] ? do_user_addr_fault+0xc7c/0x1360 [ 258.757927][ T9057] __x64_sys_openat+0x138/0x170 [ 258.757948][ T9057] do_syscall_64+0xe2/0xf80 [ 258.757965][ T9057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.757981][ T9057] ? trace_irq_disable+0x37/0x100 [ 258.757997][ T9057] ? clear_bhb_loop+0x60/0xb0 [ 258.758011][ T9057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.758021][ T9057] RIP: 0033:0x7f92569d6407 [ 258.758031][ T9057] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 258.758039][ T9057] RSP: 002b:00007fffb4c22f30 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 258.758051][ T9057] RAX: ffffffffffffffda RBX: 00007f925694a880 RCX: 00007f92569d6407 [ 258.758058][ T9057] RDX: 0000000000000000 RSI: 00007fffb4c23f1b RDI: ffffffffffffff9c [ 258.758065][ T9057] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 258.758073][ T9057] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 258.758083][ T9057] R13: 00007fffb4c23180 R14: 00007f9256c2f000 R15: 00005582d3e9a4d8 [ 258.758103][ T9057] [ 258.758109][ T9057] [ 259.041356][ T9057] Allocated by task 5885: [ 259.045669][ T9057] kasan_save_track+0x3e/0x80 [ 259.050333][ T9057] __kasan_kmalloc+0x93/0xb0 [ 259.054902][ T9057] __kmalloc_cache_noprof+0x3d1/0x6e0 [ 259.060261][ T9057] em28xx_v4l2_init+0x10b/0x2e70 [ 259.065189][ T9057] em28xx_init_extension+0x120/0x1c0 [ 259.070458][ T9057] process_scheduled_works+0xaec/0x17a0 [ 259.075990][ T9057] worker_thread+0xda6/0x1360 [ 259.080654][ T9057] kthread+0x726/0x8b0 [ 259.084718][ T9057] ret_from_fork+0x51b/0xa40 [ 259.089309][ T9057] ret_from_fork_asm+0x1a/0x30 [ 259.094096][ T9057] [ 259.096411][ T9057] Freed by task 5885: [ 259.100376][ T9057] kasan_save_track+0x3e/0x80 [ 259.105038][ T9057] kasan_save_free_info+0x46/0x50 [ 259.110060][ T9057] __kasan_slab_free+0x5c/0x80 [ 259.114834][ T9057] kfree+0x1be/0x650 [ 259.118724][ T9057] em28xx_v4l2_init+0x1683/0x2e70 [ 259.123739][ T9057] em28xx_init_extension+0x120/0x1c0 [ 259.129017][ T9057] process_scheduled_works+0xaec/0x17a0 [ 259.134556][ T9057] worker_thread+0xda6/0x1360 [ 259.139220][ T9057] kthread+0x726/0x8b0 [ 259.143273][ T9057] ret_from_fork+0x51b/0xa40 [ 259.147852][ T9057] ret_from_fork_asm+0x1a/0x30 [ 259.152598][ T9057] [ 259.154906][ T9057] The buggy address belongs to the object at ffff888034170000 [ 259.154906][ T9057] which belongs to the cache kmalloc-8k of size 8192 [ 259.168937][ T9057] The buggy address is located 1856 bytes inside of [ 259.168937][ T9057] freed 8192-byte region [ffff888034170000, ffff888034172000) [ 259.182890][ T9057] [ 259.185208][ T9057] The buggy address belongs to the physical page: [ 259.191612][ T9057] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34170 [ 259.200351][ T9057] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 259.208835][ T9057] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 259.216792][ T9057] page_type: f5(slab) [ 259.220761][ T9057] raw: 00fff00000000040 ffff88813fe27280 ffffea0001b81c00 dead000000000005 [ 259.229328][ T9057] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 259.237900][ T9057] head: 00fff00000000040 ffff88813fe27280 ffffea0001b81c00 dead000000000005 [ 259.246555][ T9057] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 259.255219][ T9057] head: 00fff00000000003 ffffea0000d05c01 00000000ffffffff 00000000ffffffff [ 259.263892][ T9057] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 259.272549][ T9057] page dumped because: kasan: bad access detected [ 259.278944][ T9057] page_owner tracks the page as allocated [ 259.284639][ T9057] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5499, tgid 5499 (dhcpcd-run-hook), ts 42904897818, free_ts 42867876210 [ 259.305471][ T9057] post_alloc_hook+0x228/0x280 [ 259.310220][ T9057] get_page_from_freelist+0x24dc/0x2580 [ 259.315749][ T9057] __alloc_frozen_pages_noprof+0x18d/0x380 [ 259.321538][ T9057] alloc_pages_mpol+0x232/0x4a0 [ 259.326373][ T9057] allocate_slab+0x86/0x3a0 [ 259.330859][ T9057] ___slab_alloc+0xd82/0x1760 [ 259.335516][ T9057] __slab_alloc+0x65/0x100 [ 259.339917][ T9057] __kmalloc_cache_noprof+0x40d/0x6e0 [ 259.345271][ T9057] tomoyo_init_log+0x112e/0x1fb0 [ 259.350193][ T9057] tomoyo_supervisor+0x353/0x1570 [ 259.355205][ T9057] tomoyo_env_perm+0x151/0x1f0 [ 259.359952][ T9057] tomoyo_find_next_domain+0x15cb/0x1aa0 [ 259.365564][ T9057] tomoyo_bprm_check_security+0x11b/0x180 [ 259.371267][ T9057] security_bprm_check+0x85/0x240 [ 259.376281][ T9057] bprm_execve+0x896/0x1410 [ 259.380787][ T9057] do_execveat_common+0x50f/0x690 [ 259.385809][ T9057] page last free pid 5498 tgid 5498 stack trace: [ 259.392119][ T9057] __free_frozen_pages+0xbf8/0xd70 [ 259.397220][ T9057] __put_partials+0x146/0x170 [ 259.401886][ T9057] __slab_free+0x294/0x320 [ 259.406289][ T9057] qlist_free_all+0x97/0x100 [ 259.410864][ T9057] kasan_quarantine_reduce+0x148/0x160 [ 259.416308][ T9057] __kasan_slab_alloc+0x22/0x80 [ 259.421140][ T9057] __kmalloc_cache_noprof+0x36f/0x6e0 [ 259.426501][ T9057] tomoyo_init_log+0x195/0x1fb0 [ 259.431338][ T9057] tomoyo_supervisor+0x353/0x1570 [ 259.436348][ T9057] tomoyo_env_perm+0x151/0x1f0 [ 259.441093][ T9057] tomoyo_find_next_domain+0x15cb/0x1aa0 [ 259.446706][ T9057] tomoyo_bprm_check_security+0x11b/0x180 [ 259.452411][ T9057] security_bprm_check+0x85/0x240 [ 259.457416][ T9057] bprm_execve+0x896/0x1410 [ 259.461911][ T9057] do_execveat_common+0x50f/0x690 [ 259.466923][ T9057] __x64_sys_execve+0x94/0xb0 [ 259.471585][ T9057] [ 259.473891][ T9057] Memory state around the buggy address: [ 259.479511][ T9057] ffff888034170600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 259.487555][ T9057] ffff888034170680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 259.495601][ T9057] >ffff888034170700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 259.503640][ T9057] ^ [ 259.509769][ T9057] ffff888034170780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 259.517838][ T9057] ffff888034170800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 259.525879][ T9057] ================================================================== [ 259.544334][ T48] em28xx 2-1:0.132: Closing input extension [ 259.816658][ T9057] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 259.823903][ T9057] CPU: 0 UID: 0 PID: 9057 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 259.834416][ T9057] Tainted: [L]=SOFTLOCKUP [ 259.838737][ T9057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 259.848788][ T9057] Call Trace: [ 259.852072][ T9057] [ 259.855020][ T9057] vpanic+0x1e0/0x670 [ 259.859026][ T9057] panic+0xc5/0xd0 [ 259.862752][ T9057] ? __pfx_panic+0x10/0x10 [ 259.867172][ T9057] ? preempt_schedule_common+0x82/0xd0 [ 259.872638][ T9057] ? v4l2_fh_open+0xac/0x420 [ 259.877231][ T9057] check_panic_on_warn+0x89/0xb0 [ 259.882178][ T9057] ? v4l2_fh_open+0xac/0x420 [ 259.886782][ T9057] end_report+0x6f/0x140 [ 259.891026][ T9057] kasan_report+0x128/0x150 [ 259.895532][ T9057] ? v4l2_fh_open+0xac/0x420 [ 259.900133][ T9057] v4l2_fh_open+0xac/0x420 [ 259.904553][ T9057] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 259.910544][ T9057] em28xx_v4l2_open+0x157/0x9a0 [ 259.915421][ T9057] ? do_raw_spin_lock+0x12b/0x2f0 [ 259.920455][ T9057] v4l2_open+0x1bf/0x3a0 [ 259.924708][ T9057] chrdev_open+0x4cd/0x5e0 [ 259.929130][ T9057] ? __pfx_chrdev_open+0x10/0x10 [ 259.934065][ T9057] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 259.940401][ T9057] ? __pfx_chrdev_open+0x10/0x10 [ 259.945336][ T9057] do_dentry_open+0x7ce/0x1420 [ 259.950108][ T9057] vfs_open+0x3b/0x340 [ 259.954175][ T9057] ? path_openat+0x346e/0x3e20 [ 259.958944][ T9057] path_openat+0x3486/0x3e20 [ 259.963551][ T9057] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 259.969187][ T9057] ? getname_flags+0xb7/0x540 [ 259.973866][ T9057] ? __pfx_path_openat+0x10/0x10 [ 259.978812][ T9057] ? __lock_acquire+0x6b5/0x2cf0 [ 259.983761][ T9057] do_filp_open+0x22d/0x490 [ 259.988271][ T9057] ? __pfx_do_filp_open+0x10/0x10 [ 259.993312][ T9057] ? _raw_spin_unlock+0x28/0x50 [ 259.998167][ T9057] ? alloc_fd+0x64b/0x6c0 [ 260.002502][ T9057] do_sys_openat2+0x12f/0x220 [ 260.007184][ T9057] ? __pfx_do_sys_openat2+0x10/0x10 [ 260.012381][ T9057] ? exc_page_fault+0x6a/0xc0 [ 260.017059][ T9057] ? do_user_addr_fault+0xc7c/0x1360 [ 260.022360][ T9057] __x64_sys_openat+0x138/0x170 [ 260.027218][ T9057] do_syscall_64+0xe2/0xf80 [ 260.031721][ T9057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.037786][ T9057] ? trace_irq_disable+0x37/0x100 [ 260.042812][ T9057] ? clear_bhb_loop+0x60/0xb0 [ 260.047490][ T9057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.053367][ T9057] RIP: 0033:0x7f92569d6407 [ 260.057764][ T9057] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 260.077350][ T9057] RSP: 002b:00007fffb4c22f30 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 260.085751][ T9057] RAX: ffffffffffffffda RBX: 00007f925694a880 RCX: 00007f92569d6407 [ 260.093709][ T9057] RDX: 0000000000000000 RSI: 00007fffb4c23f1b RDI: ffffffffffffff9c [ 260.101674][ T9057] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 260.109629][ T9057] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 260.117587][ T9057] R13: 00007fffb4c23180 R14: 00007f9256c2f000 R15: 00005582d3e9a4d8 [ 260.125541][ T9057] [ 260.128909][ T9057] Kernel Offset: disabled [ 260.133220][ T9057] Rebooting in 86400 seconds..