last executing test programs: 1m39.589087953s ago: executing program 0 (id=366): syz_usb_connect(0x0, 0x62, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601010405050724040501009cbd89"], 0x0) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x450, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x2, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x60, 0xf}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x7f, 0x4, 0xb}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x9, 0x63, 0x10, 0xff, 0x7}, 0x37, &(0x7f0000000080)={0x5, 0xf, 0x37, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xf, "90cf7441ab1913fbca3e5591bf875ab6"}, @ptm_cap={0x3}, @generic={0x1b, 0x10, 0x1d, "372e586f5a897114bef3bddb4dd336f9a7e4f0ee2a855e8c"}]}, 0x4, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x42d}}, {0x9b, &(0x7f0000000200)=@string={0x9b, 0x3, "9ed555c60e0711fa5ec2c3c57e6458c7139584fb70c35b8c242cf2337f8a05b6ccddef369435db3fee205ef9bb015d0b35987498266f641c974cd462c29c804d0c2b54eb3c4a47ee31144d2a600c7f79ed816f15d94595d5b3e8e7ac970f3f6558a501225a6cf5a910095321fe91ff74afc79253cad9b608f1a7f4f96050dc94f7000a82c6e68254c193c0689c41dadc45ae94ad5c2e7068e0"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x140d}}, {0x8d, &(0x7f00000002c0)=@string={0x8d, 0x3, "23f52ed50aead2ba627f5f5e76b071cf21af068639bef5fed5b111ba99abae4cd40d20e3f94790c6b89ed093294da5a723800a2a721033f8ab465f4a4f3fcddcac218f2966aa61726e7b2a55075c43f70f115ec9320753f955054d4c667405255ae92c73411eacb54db21f4cea43957c645ba649ac898c3d1844e9c24432adac104ff6122c9fe5637b4100"}}]}) syz_usb_connect(0x0, 0x62, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601010405050724040501009cbd89"], 0x0) (async) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x450, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x2, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x60, 0xf}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x7f, 0x4, 0xb}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x9, 0x63, 0x10, 0xff, 0x7}, 0x37, &(0x7f0000000080)={0x5, 0xf, 0x37, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xf, "90cf7441ab1913fbca3e5591bf875ab6"}, @ptm_cap={0x3}, @generic={0x1b, 0x10, 0x1d, "372e586f5a897114bef3bddb4dd336f9a7e4f0ee2a855e8c"}]}, 0x4, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x42d}}, {0x9b, &(0x7f0000000200)=@string={0x9b, 0x3, "9ed555c60e0711fa5ec2c3c57e6458c7139584fb70c35b8c242cf2337f8a05b6ccddef369435db3fee205ef9bb015d0b35987498266f641c974cd462c29c804d0c2b54eb3c4a47ee31144d2a600c7f79ed816f15d94595d5b3e8e7ac970f3f6558a501225a6cf5a910095321fe91ff74afc79253cad9b608f1a7f4f96050dc94f7000a82c6e68254c193c0689c41dadc45ae94ad5c2e7068e0"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x140d}}, {0x8d, &(0x7f00000002c0)=@string={0x8d, 0x3, "23f52ed50aead2ba627f5f5e76b071cf21af068639bef5fed5b111ba99abae4cd40d20e3f94790c6b89ed093294da5a723800a2a721033f8ab465f4a4f3fcddcac218f2966aa61726e7b2a55075c43f70f115ec9320753f955054d4c667405255ae92c73411eacb54db21f4cea43957c645ba649ac898c3d1844e9c24432adac104ff6122c9fe5637b4100"}}]}) (async) 1m36.825436196s ago: executing program 0 (id=384): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000d1", @ANYRES16], 0x14}, 0x1, 0x0, 0x0, 0x4040840}, 0x44004) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000200)=0x1, 0x4) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x1}, 0x94) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x148002, 0x0) fcntl$notify(r6, 0x402, 0x8) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000180)={'\x00', 0x0, 0x6, 0x4, 0x4, 0x5, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_emit_ethernet(0x9b, &(0x7f0000000440)={@random="84b3bda829bc", @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0xd, 0x8d, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @local}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x806}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x2, 0xc1a, 0xf], "c04b4ef4681087b6e92f2620c6374e32ec5589683f9de21fc2d2717d53fa1782eefaa8e3a82d5f7bac7210b5cfb820"}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x1}}}}}}}}, 0x0) 1m35.817467775s ago: executing program 0 (id=396): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf0bd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x3b1, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x6d, 0x92, 0x6, 0xff, 0x413c, 0x81b1, 0x4838, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x39f, 0x2, 0x5, 0x53, 0x10, 0x8, [{{0x9, 0x4, 0x8, 0x9, 0x4, 0x3f, 0x8f, 0xef, 0x2, [], [{{0x9, 0x5, 0x80, 0x2, 0x40, 0x7, 0x5b, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x10, 0x1ff}, @generic={0xca, 0x22, "c841fdc70d4cec800c8d341bd92e87b40ccd3c76d243588471e05a97242a9350318e14bd6a8374326ef347c84853ae2cc5de9ce3f4850427d262e915386daba3580b0bd94a111ddd306b145dbfc2407b25d2dbc79069f9dc4dcc5fa5098aa5fc439dab7bbe21553f3592f5ed8431497ae210a8e7bceda463d3f009846c147d4954a8bfd8c7e06fd9192e67ef88f4a7995bd25ba098eb2d789cf70a41f97c70485a6a451bc431f545a2eacad165dd363983477f8bddc650910bca0000e10015bf56fa5c4b0e8bb593"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x40, 0x6, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc5, 0x6, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x5, 0x6}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x59, 0xab, 0x80, [@generic={0x22, 0x7, "ac3e817dd3b3b8e457ae24b273cfdae12a2078aced62e9a57ebe9d7209ac7984"}, @generic={0xbd, 0xc, "60bfe248033c15878d0fbacb2bc3306b40bff6e5403d39e402d1cb5a2c927ec0eb23462667f3d80cfc0925119a2b7edaa4e30b1c5b165158481df38fc850d4f571c56628c8a259f6004afbfed50a0cf27aa7678e710953de641ed75162bee629f3801479aceee80f4ef6fe06aa826204a74c3442c7fc17b9458bfb87e67f24838204d7e8533313799b5fa199437ecb164e1900b7e5800e55c001029a133c461dbf889cc1e0cc8dd8e051376d4ab977b7cbb8d39b75017521b9277b"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x6, 0x8, 0xeb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8d, 0xe9}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x9}]}}]}}, {{0x9, 0x4, 0x2e, 0x4, 0x2, 0xff, 0x5d, 0x1, 0x0, [@generic={0x62, 0x7, "aae7245306ab9056eb414d6bab9dbfb1c8573da3a90c1eade9dc3c0ddda4a43eaf5cf15737a4e52a345431cee4eda203255b287043b126e5bb4d9be5c96f4de9a6132b04ba53acfaecd3d911f2e2bac2af6fc66ab1ebfa85879c320dddaf1842"}, @hid_hid={0x9, 0x21, 0x401, 0x9, 0x1, {0x22, 0xbb7}}], [{{0x9, 0x5, 0xf, 0x3, 0x20, 0x2, 0x3, 0x5, [@generic={0xc3, 0xf, "181a0199e696cdabbb5d4da99ff1d9070103dd606ba63e4a18a7fd32459d8f6d6e6154575930d8c434316b1816832d66ee1a5ff2c5f39097d657453d87e07ccd4b88eab5fc5d9a8320751160ca29c8363f8e54c7e460fb21e27fe1243be92c6b9a0900975a40823bc2ace8ff24c8899685562beefbfdc5cfa33182e382fa42a92d64255ffc3d6ed6f0fbdcdc1d545ef25997073c3acb951abe8ab0575d23060a1609ab73c00b5f74aa7bd24f8ba8a319c6e34c5e9f6a5229c8d1c1a5029e06d30d"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x4, 0x6, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xcccf}, @generic={0x4d, 0xc, "9cb57d073f99681f0de62f8c94974ba7276a97f8e0b43782fd490489a68b0bedc4fbeb820cc00b8fc8e4591b7ab0cc497af435491e5180954a45dba2b129506f127664c0bc17ea3d9a0531"}]}}]}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x7, 0x7, 0x96, 0xff, 0x9}, 0xe3, &(0x7f0000000240)={0x5, 0xf, 0xe3, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x52dcfa42f1eb2c48, 0x0, 0x0, 0x9, 0xfffe}, @generic={0x86, 0x10, 0xb, "51c3f94fd65e1613c99671db9234d6c35a5ef4eb85531cc2b754663f08418ed0a08551e2a604041e3486720edb5846271e8034ec2e069c48ab5277fa2408cac90f8a9c23291ff5395442d07baea27ce0c9924b444e5f0d20fa71b975ecf0ab67f76dd0ef35d4330140536a3bad1bd916cb70589ce835c27f9d78132773c7cb66532e90"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x3, 0x94, 0x8}, @ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0xec, 0xf00f, 0x200, [0x0, 0x0, 0xff0000, 0xc0c0]}, @generic={0x21, 0x10, 0xb, "4e4cbbf5940b7fadb50e4f91554395d7ba83dc747e9c5c22f536b9cccf84"}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x8, 0x9}]}}) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000000)={0x40, 0x30, 0x5, {0x5, 0xe, "dced88"}}, 0x0, 0x0, 0x0}, 0x0) 1m33.452849264s ago: executing program 0 (id=407): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000400)='}', 0x1}], 0x1}}], 0x1, 0x4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0xffffffffffffff7d, 0x3e, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@nested={0x49, 0x34ea, 0x0, 0x1, [@generic="a9fc9525c925cae1d16be6afcba0f299992914ea966239d7c831914ce75fe00fc87f5f5344f54e8405a09836cf42edb559b1eb574064706400"/69]}]}, 0x60}}, 0x0) (async) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000300)={0x0, 0x7}, 0x8) syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002400d57f0000e8000000000008000000040000001400310000000000000000000000ffffac1e0001"], 0x2c}], 0x1}, 0x4000) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x4}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000440)={r4, @in={{0x2, 0x4e22, @broadcast}}, 0xfffffffc, 0x7fff, 0x7, 0x775, 0xc4, 0x5, 0x1}, 0x9c) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000001c0)={0x8, 0xd, 0x2, {0x2, @win={{0xfffffffc, 0xffffff80, 0x54eb, 0x4}, 0x1, 0x7ff, 0x0, 0x1, 0x0, 0x2}}, 0x8001}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1) (async) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x3}) (async, rerun: 32) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) (rerun: 32) 1m33.412613217s ago: executing program 0 (id=408): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@security={'security\x00', 0x4, 0x4, 0x448, 0xffffffff, 0x2a8, 0x1d0, 0x1d0, 0xffffffff, 0xffffffff, 0x378, 0x2a8, 0x378, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [0x0, 0xff000000, 0xffffffff, 0xffffffff], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'dvmrp0\x00', 'vlan0\x00', {0xff}, {}, 0x2f, 0xb, 0x3, 0x18}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x2, 0x2, 'system_u:object_r:lib_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @local, [], [0x0, 0xffffff00], 'geneve1\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)=ANY=[@ANYBLOB="1201fa004107f540f30c75939e1a000000010902120001000000000904000000bee4f900"], 0x0) 1m32.079079029s ago: executing program 0 (id=416): r0 = syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x2c01) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000380)={'\x00', 0x4, 0x24924924, 0x7, 0x6}) 1m16.933025958s ago: executing program 32 (id=416): r0 = syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x2c01) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000380)={'\x00', 0x4, 0x24924924, 0x7, 0x6}) 1m10.885122786s ago: executing program 1 (id=498): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$tipc(0x1e, 0x5, 0x0) listen(r0, 0x0) 1m10.702928237s ago: executing program 1 (id=499): write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1m10.468357686s ago: executing program 1 (id=500): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x1c, r3, 0x303, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x1c}}, 0x0) 1m7.694537482s ago: executing program 1 (id=509): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710, @host}, 0x10) 1m7.407374976s ago: executing program 1 (id=512): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x4001084) 1m7.028126508s ago: executing program 1 (id=515): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071182c000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) r2 = syz_open_dev$loop(&(0x7f0000000000), 0xffffff7e, 0x200) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={'\x00', 0x9, 0x5, 0xb1, 0x0, 0x10000000000000}) 51.8465908s ago: executing program 33 (id=515): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071182c000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) r2 = syz_open_dev$loop(&(0x7f0000000000), 0xffffff7e, 0x200) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={'\x00', 0x9, 0x5, 0xb1, 0x0, 0x10000000000000}) 9.952949167s ago: executing program 3 (id=729): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x72}, @NFTA_REDIR_REG_PROTO_MIN={0x8}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x2c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}]}], {0x14}}, 0xec}}, 0x800) 9.655795283s ago: executing program 4 (id=730): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0xfffffffe, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f00000000c0)=0x7, 0x4) syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc75, 0x0, 0x3}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) socket$kcm(0x11, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x3c, r7, 0x1, 0x70bd24, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x3807}, @NL80211_ATTR_IE={0x6, 0x2a, [@random={0x5}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24014804}, 0x9590f6cc3aa711f2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) flistxattr(r8, &(0x7f00000006c0)=""/234, 0xea) syz_io_uring_setup(0x5b03, &(0x7f00000003c0)={0x0, 0xef71, 0x800, 0x2, 0x2f1}, &(0x7f00000001c0), &(0x7f0000000440)) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r9, 0x54a3) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x707, 0x14}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r2, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000540)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xa1, &(0x7f0000000600), 0x0, 0x10, &(0x7f0000000340), &(0x7f0000000680), 0x8, 0xbb, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) 9.580654535s ago: executing program 3 (id=731): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000300)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000013000/0x4000)=nil, 0x4000, 0x2}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) ioctl$UFFDIO_POISON(r1, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000013000/0x1000)=nil, 0x1000}}) 8.455478754s ago: executing program 4 (id=734): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0xdc}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffb, @empty, 0x3}, 0x1c) 8.344375226s ago: executing program 4 (id=735): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106161154d0000000000010902240001000000000904000001039b000009210000000122f804090481030000000000"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001000030400000000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="2010000000000000180012804755000000000000764a0000080000000080"], 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x40080) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) syz_clone(0x4808280, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x31, 0xffffffffffffffff, 0x4e75a000) ptrace$poke(0x5, r1, &(0x7f0000000080), 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x387, 0xff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) r4 = msgget(0x0, 0x40) msgsnd(r4, 0x0, 0x16, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x4a301, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r7, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0) shutdown(r3, 0x1) syz_usb_control_io(r0, 0x0, 0x0) 7.590583929s ago: executing program 3 (id=738): open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @empty, @dev={0xac, 0x14, 0x14, 0x4}}}}], 0x20}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x3c0}}, {{&(0x7f00000002c0)={0xa, 0x4e24, 0x8001, @loopback, 0xfffffffb}, 0x1c, &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="380000000000000029000000360000001103000000000000c910fc010000000000000000000000000000c20400000001c20400000003"], 0x38}}], 0x2, 0x810) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.966802662s ago: executing program 2 (id=741): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000080}, 0x40804) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) write$FUSE_INIT(r2, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400, 0x200, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x1b0, 0x0, 0x0, [{{0x200000000000, 0x0, 0x0, 0x2, 0x0, 0x8, {0x1000, 0xfffffffffffffffd, 0x0, 0x100000000, 0x2, 0x2, 0x0, 0xb, 0x2, 0xc000, 0xfffffffd, 0x0, r4, 0x2000}}, {0x0, 0x0, 0x1, 0x0, '\x00'}}, {{0xfffffffffffffffd, 0x0, 0x80, 0x2328, 0x6, 0x3, {0x200000005, 0x6, 0x9, 0x3, 0x9, 0x7, 0x6, 0xdf, 0x7, 0x6000, 0x2, 0x0, 0x0, 0xffffffff, 0xf026}}, {0x3, 0x8000000000000001, 0x61, 0x3, '?/\xe6\xbf6\xc6\xe9g\x88\x16q\xde\xdc\xc7F\xaa;K9g9^\xf8c\x947\xc7\x10\xad\xf3\x04]\xe2&\x9d\x1aW\x1d(\x1e\xf4\xcd6\xca\x18W\xdc\x8b\x1a?S\xfc\xbb\x06fE\x16@9dG@\x88pgx\xdb\nl^\xb3NW\xa6R\xdb\x8d*o\xea\x04m&\x00\xe1\xdcaD\xa3\x82SE\xe2\v\x9a\x04\xf3'}}]}, 0x0, 0x0, 0x0}) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) write(r5, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) read$FUSE(r2, &(0x7f00000007c0)={0x2020, 0x0, 0x0}, 0x2020) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000080)={0x50, 0x0, r8, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff05000000000000000200000000000000030000000000000002000000040000000500000008000000060000000000000009000000000000000000000000000000ff0000000000000003000000000000000000000000000000ffffff7f590000000300000000800000ff030000", @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="010000000400000000000000000000000000200037050000000000002b"], 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r2, &(0x7f0000000400)={0x90, 0x0, r6, {0x6, 0x1, 0x5, 0x6, 0x7, 0x80000000, {0x2, 0x1, 0x9, 0x7, 0xd8, 0x972, 0x0, 0xffffffbf, 0x40, 0x8000, 0x7f, r3, r10, 0x7, 0x9}}}, 0x90) 6.620892003s ago: executing program 2 (id=744): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x2, 0x400, 0x80000000, 0x5, 0x8, 0xfffffffd, 0x5, 0xf5, 0x9, 0x39, 0x747d5a13, 0x7fffffff, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x40000000, 0x4, 0xf24e, 0x4, 0x800, 0x8000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x4, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x200009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x7, 0x4, 0x6, 0xfffffff9, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1f, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x6, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0xffffffff, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x100800, 0x9, 0x8006, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x6, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x10001, 0x3], [0x401, 0xc584, 0xffff, 0x5, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0xeef, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xffffff79, 0xe55, 0x10, 0x80000001, 0x3, 0x4, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x5, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0xb, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x7, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x10, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x8000, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x78, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x1800000, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) (async) ioctl$UI_DEV_CREATE(r5, 0x5501) readv(r5, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) write$input_event(r5, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) (async) write$input_event(r5, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (async) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) (async) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsopen(&(0x7f0000000180)='proc\x00', 0x1) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x21041, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000440)) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r8 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f0000000040)={0x6, 0xfff, 0x4, {0x0, @pix_mp={0x5, 0xffffff55, 0x3231564e, 0x3, 0x3, [{0x8, 0x9af5}, {0xeb4, 0x8}, {0x4, 0x6}, {0x9, 0xfffffffc}, {0x7}, {0x0, 0x80000000}, {0x7, 0x2001ff}, {0xfffffe00, 0x1ff}], 0x6, 0xf, 0x7, 0x2}}, 0xfffffffd}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000010000000f00000008000300", @ANYRES32=r1, @ANYBLOB="05002e010100fe00"], 0x24}, 0x1, 0x0, 0x0, 0x24000810}, 0x80) (async) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000010000000f00000008000300", @ANYRES32=r1, @ANYBLOB="05002e010100fe00"], 0x24}, 0x1, 0x0, 0x0, 0x24000810}, 0x80) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xe) epoll_create1(0x0) 6.500357464s ago: executing program 3 (id=745): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) io_setup(0x8, &(0x7f0000004200)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x80, 0x4, 0x800d, 0x4, 0x7fffffff, 0x200, 0x9, 0x9, 0x0}, &(0x7f0000000240)=0x20) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r3, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}}, 0x1, 0x4, 0x3, 0x7cbb, 0xa0, 0xc, 0x7f}, &(0x7f0000000340)=0x9c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = userfaultfd(0x801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000006c0)={0xaa, 0x204}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_WAKE(r9, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4000804}, 0x80) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000008480)={&(0x7f0000000000)={0xc8, r5, 0x1, 0x78bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8001}, {0x6, 0x11, 0x40}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfba2}, {0x6, 0x11, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0xffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8000}, {0x6, 0x11, 0x2}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x24000084}, 0x40010) 6.336814082s ago: executing program 6 (id=746): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) r1 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000000)={{0x2, 0x4e20, @local}, {0x6, @random="b16f7311fce6"}, 0x3a, {0x2, 0x4e20, @empty}, 'pimreg\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="d3daded168ca4d991a8b71b19c1d461ec59904ad7276ff973062b5fc99896b2015c1ba74eea5420f376199e8cd788e89b26d078ac0b622a0b46d1563712d711c3364bdb0c37777f6b8d2796372456e5ad54905697d3406a048e14416ddef82283ac6db2aeb0731b97719de725698af6467bfcd3b564c13ce425749ae064046e9513adb38fa3093777ecacd049fe71452eae09c92531399d58b29a7fce840e4b4f58b798cbaa666eaff20"], 0xb8}, 0x1, 0x0, 0x0, 0x8004}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000200)=ANY=[]) 5.043474996s ago: executing program 4 (id=748): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r5 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r8, 0x80, &(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x200052, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8}}) io_uring_enter(r5, 0x3514, 0x9141, 0x69, 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x51a23}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @loopback}, @IFLA_GRE_REMOTE={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x41}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000014) unshare(0x6a040000) mmap(&(0x7f0000626000/0x2000)=nil, 0x2000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20001a00}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 4.734197237s ago: executing program 5 (id=749): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_getroute={0x1c, 0x1a, 0x10, 0x70bd26, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x3, 0x0, 0x4, 0x1fe, 0x6, 0x1000}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8801}, 0x800) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_getroute={0x1c, 0x1a, 0x10, 0x70bd26, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x3, 0x0, 0x4, 0x1fe, 0x6, 0x1000}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8801}, 0x800) (async) 4.173087531s ago: executing program 5 (id=750): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040bd2835090000330000010902240001000020080904140002030002000921fdff000122450009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_delneigh={0x28, 0x1c, 0x105, 0x0, 0x1, {0x7, 0x0, 0x0, r2, 0x2, 0xa6}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB='@#E'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 3.759332251s ago: executing program 6 (id=751): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x11}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 3.40721744s ago: executing program 6 (id=752): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={&(0x7f0000000400)="8f6b6a130c9c38ef0fe81828732e11b35498137d6a898d56527c6e70a2e6e0d44af4c3c228b2f801610d76062f0704ea73a0", 0x0}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffff80000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000440005007f000001000000000000000000000000000000003c00000000000000fc02000000000000000000000000000000000000000000000000000000000000000000000c000800"], 0x178}}, 0x0) 3.267920351s ago: executing program 4 (id=753): syz_io_uring_setup(0x3e9, &(0x7f0000000000)={0x0, 0x92c2, 0x40, 0x3, 0x11e}, &(0x7f0000000080), &(0x7f00000000c0)) (async) r0 = syz_io_uring_setup(0x3e9, &(0x7f0000000000)={0x0, 0x92c2, 0x40, 0x3, 0x11e}, &(0x7f0000000080), &(0x7f00000000c0)) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x8, r0}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@o_path={&(0x7f0000000100)='./file0\x00', r1, 0x4000, r0}, 0x18) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000001c40)=[{0xf00, 0x0, 0x0, &(0x7f0000000100), 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0}], 0x2) 3.084314907s ago: executing program 3 (id=754): r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001200210300"], 0x1c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f00000077c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002040)=""/4096, 0x1000}], 0x0, 0x0, 0xfffffe2a}}, {{0x0, 0x0, 0x0}}], 0x400000000000059, 0x2040, 0x0) sendmmsg$inet(r0, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="f37481d90eeaead391345b4da9d27e24c9c670da3afc5c00000000007fffffff00"/50, 0x32}, {&(0x7f0000000140)="ead5e96719a44591801f33", 0xb}, {&(0x7f0000000180)="f3f97053495b072215aee864193557c0dabdd253711d5ed9b131c5abd8796e5759ab1f639211e68e24bf4471b6ab1429b165c7248cded82bfb4a3f48e8d0", 0x3e}], 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="2c0000000000000000000000070010000000000000ffffff0000000000000000000000000000000000000000000000001c000000000000000000400008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aae000000200000000"], 0x50}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="c1ad061c5d914eadd95de7fb63eb7b0306d91c25f3fba6c97eda8ade2420dfe1fe0f5c7a01d724be33a44f1cd52028110d8f7dd4b3421a3fe4b2066d179f938ba15c3956e1aaad35035bcde7b90ed59ee2de06c8a4af3de95bda", 0x5a}], 0x1}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000480)="f41fa963edcd5e2a5d", 0x9}, {&(0x7f00000009c0)="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", 0x4cc}], 0x2}}, {{0x0, 0x0, &(0x7f0000004240)}}], 0x4, 0xc080) 3.08366806s ago: executing program 6 (id=755): capget(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0xffff, 0x2, 0x1, 0x4, 0x2, 0x7fb}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x20240, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000180)={0xc, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x2, r1, r2, 0x0, 0x0, 0x0, 0xd, &(0x7f00000001c0)="1f60999062cde3cb838ca43cbe"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80242, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000280)) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000300)={0x87ce, 0xb, 0x4, 0x70000, 0x91b8077a, {r5, r6/1000+10000}, {0x3, 0x1, 0x7, 0x8, 0x4d, 0x8, "6a1ecac2"}, 0x200, 0x4, {0xffffffffffffffff}, 0xbb, 0x0, 0xffffffffffffffff}) ioctl$FS_IOC_READ_VERITY_METADATA(r7, 0xc0286687, &(0x7f00000003c0)={0x3, 0x5, 0x3f, &(0x7f0000000380)=""/63}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r8, 0xc400941d, &(0x7f0000000400)={0x0, 0x2, 0x185ea930, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r7, 0xc400941d, &(0x7f0000000800)={r9, 0x4, 0x2}) timer_create(0x7, &(0x7f0000000c00)={0x0, 0x19, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000c40)=0x0) timer_gettime(r10, &(0x7f0000000c80)) clock_gettime(0x0, &(0x7f0000000cc0)={0x0, 0x0}) timer_settime(r10, 0x1, &(0x7f0000000d00)={{r11, r12+60000000}, {0x0, 0x989680}}, &(0x7f0000000d40)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000d80)={{0x1, 0x1, 0x18, r8, {0xdd22}}, './file0\x00'}) fcntl$setflags(r13, 0x2, 0x0) ioctl$sock_FIOGETOWN(r13, 0x8903, &(0x7f0000000dc0)) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r13, 0x3ba0, &(0x7f0000000e00)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x4, 0x282601, 0x2bc28c}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r13) sendmsg$NL80211_CMD_REGISTER_FRAME(r13, &(0x7f0000001140)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001100)={&(0x7f0000000f00)={0x1e4, r14, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_MATCH={0xa6, 0x5b, "9c65ade37fe9e128f61c0485cafe80ac24e0fa2411a1bebcdeadd04c7d4efacf58f0ba68ab1a6b1451d78b08ee0f3347b14d2eb76194b5d81382cc6c623cf6133359c1cfdc7ee8123d6629a9972b242744c68ab6dbd453ab26ff7615df929a9f6e120185ce21f6df161a2360a7b4f7dbdabfdc717d3231dc8e9b067ed4badbeb976d049eee0fe511575a24fd8c7c95c8bc1006b8e2467133d1074b30404ebd577342"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_MATCH={0x4a, 0x5b, "8c8b7ff02fb3f35aa2b2c8132b33f43ab84905ba2fb971652dc32798841b4f9e0536c8325b09c8f693cc09be5f2128526759a10eb6e85c5e52e1bb95434b54cf83aa3f03f31e"}, @NL80211_ATTR_FRAME_MATCH={0xc4, 0x5b, "9ffef49d863df356da0f53dce6ec34cbf840e454e1e7b67ea26daf74ace8bfe6ad8727c510aa0c74d04fddbc2a382d1a4f19bf7b5ef90b74616eea83d0a8f4f161f519e4e074ad346319fbe68649a9fca22589cfb44f8c09a7e717581e86959b84d41919f8178582c82c32251094cedd6d50eb6fc77480b45606f5525fbdd8ad631981a65c4331d80e5c725d24c8805b2adaced413d7e8b6a335c9bf97c3335325630d27c6b04417c2aceb45d1cb45988d18d0902f79751e0f48c3696c6360a8"}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x50}, 0x10) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f00000011c0)={0x20, r3, &(0x7f0000001180)=[{0x0, 0x3}, {0x0, 0x1}, {0x0, 0x3}], 0xdeadbeef, 0x8, 0x3}) ioctl$UFFDIO_ZEROPAGE(r13, 0xc020aa04, &(0x7f0000001200)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}}) timer_create(0x6, &(0x7f0000001300)={0x0, 0x19, 0x2, @thr={&(0x7f0000001240)="d270f0046ff6b6c72cfbbf09529fdbc7263562320bf288100e75220b609904803df9f23c972487e911d3e0e04b2c671f445f82dd2bcfc21b462aebc5c6bc976133f48bfb926dc43486dff134e29820ed022ed5a7c4348b470625c06dcb7f498b51ed506720ec1557114547e1", &(0x7f00000012c0)="b73ea230fe443f0527d98390c3075c33ff10803add296944efbe1c9cd769ab3155ec5e6a6647a9"}}, &(0x7f0000001340)) r15 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) fsync(r15) r16 = openat$dir(0xffffffffffffff9c, &(0x7f0000001380)='./file0\x00', 0x1, 0x12e) getdents64(r16, &(0x7f00000013c0)=""/130, 0x82) 3.06430035s ago: executing program 2 (id=756): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x800) 2.968586708s ago: executing program 4 (id=757): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) pread64(r0, &(0x7f0000000400)=""/156, 0x9c, 0x4) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f00000002c0), &(0x7f00000003c0)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async, rerun: 32) sched_setattr(0x0, 0x0, 0x0) (async, rerun: 32) syz_open_dev$video4linux(&(0x7f0000002d80), 0x200000, 0x212143) (async) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) (async) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) (async, rerun: 32) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) (rerun: 32) close(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000300)={0x0, 0x0, 0x0}) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001d906e20501dc6609b620103000109021b0001000010000904f7000176246700090582020002"], 0x0) (async) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r6, &(0x7f0000000500)=[{&(0x7f0000000780)=""/219, 0xdb}, {0x0}], 0x2, 0x4, 0x8001) (async) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$NFT_BATCH(r5, 0x0, 0x0) (async) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="174dcbc632b196f88b204cc979a5585374b431c025a8076cd19cbf2efe2419a16e5e8f9b67771c3344bc60d0f34be9ba8c87a3dd630d634789edfae69f7b45e9fd86ef7201c46ecf1d820b6bb08b21d032e3f28d6b946c0082fa9ef404d58fd23755194a6e20d748d3bdd5f247d2188e4cd929b9d389e57d5b213c28d18f723fb77556a11d1df39b790ae2fcd891d6a4f099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) 2.680477514s ago: executing program 6 (id=758): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x64, &(0x7f0000000300)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x56, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x11, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xffff, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x5, 0x1, 0x3, 0xfffffff2, 0x4}]}}, {"538d171bfaa92536db0064cf68d3a51b1b407f3a8d3c0bdeecada758689a0197ecdb"}}}}}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r7 = socket(0x10, 0x803, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x7c, 0x2c, 0xca7, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, {0x4, 0xffff}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x1, 0x3}}, @TCA_U32_SEL={0x44, 0x5, {0x8, 0xf, 0x3, 0x2, 0x7ae, 0x9, 0xb11, 0x65, [{0x7fff, 0x2000401, 0x5, 0x6}, {0x0, 0xe1, 0x8ad9, 0xfffffffd}, {0x3ff, 0xa, 0x10, 0xd}]}}]}}]}, 0x7c}}, 0x20040054) r9 = socket(0x10, 0x803, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) preadv(r10, &(0x7f0000000200)=[{&(0x7f0000000100)=""/24, 0x18}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000104fcfffffffcdbdf2500000000", @ANYRES32=r12, @ANYBLOB="03170000f7640100140012800b0001006d616373826300000400028008000500b55d6a9d15fa05c3", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 2.458804241s ago: executing program 2 (id=759): setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='dctcp', 0x5) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='reno', 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0xff}, 0x0, 0x1}}]}}]}, 0x58}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000d80)='T', 0x1}], 0x1}}], 0x1, 0xc0) 1.879036307s ago: executing program 2 (id=760): r0 = socket$netlink(0x10, 0x3, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000000000/0x4000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2, 0x3716}, {r0, 0x42}], 0x2, 0x0, 0x0, 0x0) socket(0x1f, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000000)=0x3) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000040)=0x613) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000c6302, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r7, 0x0) sendfile(r7, r7, 0x0, 0xffffffff) 1.7768947s ago: executing program 6 (id=761): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r4 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r5 = shmat(r4, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async) r7 = socket$inet(0xa, 0x801, 0x84) listen(r7, 0x8) (async) ppoll(&(0x7f00000000c0)=[{r7, 0x9186}], 0x1, &(0x7f0000000100), 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) (async) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setpgid(0x0, 0x0) (async) shmdt(r5) (async) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) (async) capget(0x0, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000030528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c00028005000300f90000000500070001000000060005000400000034018364ed20ba44cdad51e457c3d100068ae5be18d5883fc1114fa6324f0299c2fc9723960d7ecd2193a6d9588554edec9cfd06375e2b9a9a4eb833ffb9dc6e24"], 0x48}}, 0x0) poll(0x0, 0x0, 0x7) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.774406044s ago: executing program 5 (id=762): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000044010500fc020000000000000000000000000000000000003200000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000000000000000000000000000000000000000000001030000000000000000000000000000ff010000000000000000000000000001000000003c00000002000000fe800000000000000000000000000010000000000000000000000000030000000000000000000000000000000000000000000000000000002b00000002"], 0x1fc}}, 0x0) 958.517695ms ago: executing program 5 (id=763): sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20008804) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x8850}, 0x80) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000002c0)=0x963779251d74f589, 0x4) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff}, 0x80) r3 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0xffffffff) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) r4 = semget$private(0x0, 0x207, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd2b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x60, 0xfff0}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @remote}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008080}, 0x24040084) socket$vsock_stream(0x28, 0x1, 0x0) semctl$GETALL(r4, 0x0, 0xd, 0xfffffffffffffffe) 310.91126ms ago: executing program 5 (id=764): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x104, r2, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0xe8, 0x8, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @mcast1, 0x2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x6c, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x13, 0x3, 0x1}}, @ipv6={{0x6}, {0x11, 0x2, @loopback}, {0x5, 0x3, 0x20}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 152.996351ms ago: executing program 2 (id=765): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) r1 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{0x0}], 0x1}, 0x1}], 0x1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008095}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r2) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000140)={0xa0, 0x6, 0x0, 0x1, 0x0, 0x2000, 0x0}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x40, 0xff, 0x0, 0x7}, {0x6, 0x60}]}) write$ppp(r4, &(0x7f0000000100)="03ec9c0001d75a41ce", 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000000203030000000000000800000000000008000100010000000dc470e6a039fdbb20ad28a40d7dec60d1b5e9821658655163be8cfed15f6a57d7c88bc2f3366124c6bfc84906b5bfd724eb8a1abcc0dbf29cb4cbdbb3a2b37b573b7acbb672ebbc692c"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) 109.091262ms ago: executing program 3 (id=766): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/19, @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$PTP_SYS_OFFSET(r5, 0x43403d05, &(0x7f00000007c0)={0x9}) syz_open_dev$admmidi(0x0, 0x7f, 0x20000) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x94, r6, 0x1, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8000005}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffeffffc}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x20}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5a}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) r7 = socket$tipc(0x1e, 0x5, 0x0) ioctl$SIOCGETNODEID(r7, 0x89e1, &(0x7f00000000c0)={0x4}) readv(r0, &(0x7f0000000040)=[{&(0x7f00000038c0)=""/4118, 0x1016}], 0x1) syz_usb_connect(0x3, 0x0, 0x0, 0x0) 0s ago: executing program 5 (id=767): mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000002000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000004000/0x2000)=nil, 0x2000}}) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000000080)) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[@nested_vmresume={0x130, 0x18}, @out_dx={0x6a, 0x28, {0xb8c3, 0x7, 0x10001}}, @nested_vmlaunch={0x12f, 0x18}, @set_irq_handler={0xc8, 0x20, {0xe7, 0x2}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @control16, 0xdf, 0x3ff, 0x1cd}}], 0xb0}) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f00000001c0)={0x2000000000000000, 0x40000, 0x1ff, 0xe, 0x12}) r2 = openat$incfs(r0, &(0x7f0000000200)='.log\x00', 0x0, 0x7c) write$P9_RREADDIR(r0, &(0x7f0000000240)={0xa6, 0x29, 0x1, {0x7, [{{0x84, 0x2, 0x1}, 0x8, 0xa, 0x7, './file0'}, {{0x86, 0x0, 0x2}, 0x7f, 0x7, 0x7, './file0'}, {{0x1, 0x3, 0x8}, 0x7159, 0x88, 0x7, './file0'}, {{0x8, 0x2}, 0x9, 0x7f, 0x7, './file0'}, {{0x8, 0x0, 0x1}, 0x970c009, 0x10, 0x7, './file0'}]}}, 0xa6) r3 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x8000, 0x82000) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000340)={0x1, 0x8, 0xd, 0x8, 0x4000}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000380)={'macvtap0\x00', {0x2, 0x4e21, @multicast1}}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r0, 0xc06c4124, &(0x7f00000003c0)) r4 = syz_open_dev$usbfs(&(0x7f0000000440), 0xb, 0xcffd8718cdfe3a5f) mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x5) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x8}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x4000) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000580)={'ipvlan0\x00', {0x2, 0x0, @multicast1}}) io_uring_enter(r0, 0x1582, 0xee74, 0x40, &(0x7f00000005c0), 0x8) ioctl$SNDRV_PCM_IOCTL_DELAY(r0, 0x80084121, &(0x7f0000000600)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000640)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x99e}], 0x7c) syz_open_dev$char_usb(0xc, 0xb4, 0x2) keyctl$session_to_parent(0x12) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f00000006c0)={{&(0x7f0000005000/0x2000)=nil, 0x2000}}) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000940)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f0000000740)={0x1c0, 0x15, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_OBJ_USERDATA={0x8c, 0x8, "31780a03bea86d5bd82ef4aa84f0e560e21d5f2c327febe7c024cbb4647cc176f0c79fbe471107c3af2b0c819ad357426d6265b9644c32059d91f2f7de85589c6ea8f6f3794f8abd3d68f7e6bdf8b0d91567603f6d0e80ccbc3c773197fae9462801ac3c824f27c28a706d08ee8ac71cd0f9976ccec8c0d65050e04f43b3ac2ee39e3094533f2397"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0xc3, 0x8, "38421a1461975d1a9a0e62ae032b294c40a262c9eb090ede894c7d599ca479d89aa5cc6bc6410ed1ba32b72ad8b9533a7703e1c38e36413e7ffc4ff877df2dae734f69e0533673e5260bcbd970d44e83e84431bee2a30c10df514e0253325be3ae27d31c45ffde2d66fd7f0db0d8901e9533fd89f8240cd9d4e7d39f8dfd96d80d32e0ebbee7a845458dfa48fb5b7b2874dae19378c6408c3bad2056b198e08b3252067dd1218c10839cbedabf6507e51ae597d0f1587ac8644736bcbfd29a"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000bc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b80)={&(0x7f00000009c0)=@deltfilter={0x194, 0x2d, 0x10, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0x6}, {0x8, 0xd}, {0xc, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x168, 0x2, [@TCA_U32_SEL={0x164, 0x5, {0x2, 0x0, 0x6, 0x4, 0x33, 0x1c00, 0x507, 0x0, [{0xf, 0x4, 0x4, 0xffff}, {0x5, 0xe, 0x7ff, 0x2}, {0x4, 0x3, 0xc00000, 0x6}, {0x401, 0xedf6, 0xfffffffa, 0x6}, {0xbe5f, 0x8001, 0x8, 0x7fffffff}, {0x8, 0x9, 0x0, 0x3}, {0x4, 0x1, 0xffffff7f, 0x4}, {0x8, 0xa7e, 0x7, 0x7}, {0xffff, 0x4, 0x10000, 0xfffff800}, {0x4, 0x400, 0x6, 0x3}, {0xff, 0xffffffff, 0x5, 0x9}, {0x7, 0x6, 0x400, 0x2485}, {0x4, 0x4, 0x6, 0x82da}, {0x7cbb, 0x3, 0x9, 0xc59}, {0x29b6, 0x8, 0x0, 0x80000001}, {0x8, 0x1, 0x5, 0x5}, {0x72, 0x5, 0x9, 0x5}, {0x7, 0x8, 0x2, 0x8}, {0x0, 0x200, 0x80000001, 0x1d5}, {0x3, 0x90, 0x10, 0x5}, {0x1ffc00, 0x1ff, 0x9, 0x7}]}}]}}]}, 0x194}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000c80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000002c40)={&(0x7f0000000c00), 0xc, &(0x7f0000002c00)={&(0x7f0000000cc0)={0x1f24, r5, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1ee4, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x1edc, 0x4, 0x0, 0x1, [{0x400, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x4c, 0x2, "aadc5afa65e3f4c8c4ad842c6d714adb8db3c3226c175719ec764d4b41ac8f02176181f16d5c9f78e289195083560c134bd6564f7f2f5dc403a6b349752ba7db499bca4f22ec2fe0"}, @NL80211_PKTPAT_PATTERN={0xc8, 0x2, "e91818e4ed0ac7cc619c753aad0322f4b98a05e5fbf0356d5c263682ccd1f91bfb9045e95a1914a7afb4f9903b42c8030c378bd96cef4168390d0d4fe9f4763f39f6f8008eb1ddad9abf5d8d85b29a6bce5f8465dce7e431beaa4012fccbe4cc7567a6df3b47372b8bfb64b9a16c5fc8e0c4b634c2b52552d156f07c7bd8aec5e676ba036abcc98591aaa261215aeab60be7d8cce085505f728ad5033c20f4868329ae7aedd2c560b689f85dc54bcc5b954243724bc8a3541d82d57c76f11dabc688bb93"}, @NL80211_PKTPAT_MASK={0xce, 0x1, "0b8abbb5f710029a0b75e4cecd47c7a148b942b625a53c8c9ccc67fea80f0141ecdb27ed5c3a444384bc9c87ef1a942967e731e8b53014b3e9a204d3ba29d412645fced9383a49bd1f92c98771969a3353035cc975b8be110d4d618b7f57eb7b6b044758b374caf389945c21410fd5fc12c20a6685da39cbf4b7eeccb7c5fb86bfca89ef4a1319e76af1ab26214ec704566becd39fb2add389c137312dabb460830183c2494428343154b987443b6d43359943d710f665517a28ef1742a42c4339fe046a362d13e3b125"}, @NL80211_PKTPAT_PATTERN={0xc4, 0x2, "db094a8c671f58c01b2ce1881ccabb977b0fc5a0239c9129040268990539156584c0cdf967996cbeadaf46b7990f9c32a2efab6746b0586c1aa114e7aff232fbf5aafda8cfc95e6c8c27e45e3aacb3539289e4088c1f46e468f7752dbb9fbf46f45bdc5d066398b587faca6dbe697b4b22fcf823cc7578bf8f439c6ab6aff298c0e98b3c4b8315d771e2b5369ec8af86a9a04e9e7605bad6728e3ecee81ecfcd048455cbaebf8716c9dfe3db509ed4d9a2c50b80912cb58267bf0610b8e7a53a"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7f}, @NL80211_PKTPAT_PATTERN={0x41, 0x2, "3f036f0ec7593cb2b984b26c9e89d2eae250d37ddd45d56d1e8b6dce2ff3f066d470db0cda1c2ef12ae61830807bb23a9222f37aaa70230ce440d6da46"}, @NL80211_PKTPAT_MASK={0xc0, 0x1, "e4f8357fdd25f814c5b9da75fca978dba96d980337083f49a0c590347a1e252c2dc2475d22f370646b0a6b668cae1dc75a2d2d271270845ede6d409cd45d1604e85edbb136386dad35bdad368957cfaad88e0f48f45f55c93a8e7129b7a4baa7a9b89ba5dc28d2c26ec1dbeb51c899ee15cf93fd345247b5103b4979fd237b9e834c4e1d214c56b1837e666af840ec567344b39257a3d98de7dee960bca82c72b205f3030cd26667d2f6e5c73bc1d4aec0b0a6e09f246c92c13a8cfa"}, @NL80211_PKTPAT_PATTERN={0x45, 0x2, "fdf14bc595df6e098eb53d409ccde4c6866a4a001a1031c38a043def2aa887f2a8395e027aadafdd04ef0228dfd661e614e822a819b3d0f57c0271041c113d8ec4"}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x10, 0x1, "8a39345c96a509099f5c2941"}, @NL80211_PKTPAT_MASK={0x31, 0x1, "3a25ee95cd348bc2c68edb32d4691361fc3c232798d84be288a71037af9f8bb288fe874111d9376d1dd2d42e01"}, @NL80211_PKTPAT_MASK={0xc, 0x1, "b69bcc631af5c900"}]}, {0xd4, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x3c, 0x2, "4cf7c8efcf74a3d6ad7772b40e42245a538b6e8a5c7d5d0d8d40730134c627ff17d5672e65036d456fa721236e4dabbaaa4931b4ec2f32ba"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}, @NL80211_PKTPAT_MASK={0x8a, 0x1, "9d305517858978159ea98a069dd3253c7131ea37b9f77a36296570e3c0d649702d25baf325b039b757d4632e7acb7e36b8145fdd8f3a44e9815cdcd83ee9f950935709c244f5574679bf033ee556fe4db1de92c8345f688e9c964fe1af2a6bb79ab6a885ff24c571baf623e5fa025a79134b5210f948fcb5d358c28e51c8c8cb44581d48d2aa"}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}, @NL80211_PKTPAT_MASK={0x4}]}, {0x1160, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x1004, 0x1, "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"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xb}, @NL80211_PKTPAT_MASK={0xbd, 0x1, "3ff2712c0419cb6ff55ffbedffa740bc4de5aba42d38346fa8d661d1c587e7a493dbaeb0b068a42046a706aaad58fef0e50e242a09039cec50b81db65db0b5eea88979c60c9e5e043a08b8a89cb2081ea9d9d981235b74f0a7eaa2dce13c048ac19b6f3f2c9cfeb5a504fe650adc20ee0a9c4109ba7fe211efdf6dc44dd4a35c714b8d0909369f78d9d7ce78e25b352120aed5582c24bdd9495614667e890e17ddf9eb2a83507c3c28c98de011ea888ca21e931c77f16d7048"}, @NL80211_PKTPAT_PATTERN={0x2c, 0x2, "297ec6c71576b96b52aad99342539b606d2ecd6a894d36d9fb26876226825027f15fae366f5e5daa"}, @NL80211_PKTPAT_MASK={0x62, 0x1, "eaf068cf5c558a4bd2d8f5ce3c3bed0a5b87b74b94323a01777f003325b9b6a9cb79d2c5f248680821b41bbb76a0d9f5507f104dd458db082b15e8b569df55161bb588b361e2288ba8dbb6fbc99849119717bc88b26cd355d1ddd2e9a503"}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}, @NL80211_PKTPAT_PATTERN={0x57, 0x2, "0b256e4d09a2ad250b0c4aa22301fa77b42ffad46e1ff56adc51aa90d7b19a4da8299bcce4ac765a70d204c54d58f61fd17b6921e72f1699b5b13ef2928c0b49b8219692d54b0b363c67b8e5aa583566045150"}]}, {0x270, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}, @NL80211_PKTPAT_MASK={0xda, 0x1, "4c9268c1d4f68dcd8d96ef4e0f29f1443ef7c36b46361ea18aedb730284e8680c2b13aa0300fddd3d5972f1b24ba53ed38dc72b262b04b99bf6dae3ea3f5eaa2517d454078e35a9dd06b2ce026aa3eb96bbf82d940ead72b24f703d36a099243fc0f8ff77063886643f7cf9403e3d2753ac54f4273be7cff03732caeafabcc48578d8cdb9d9e4589aac957d55be73439cba13fbca2c3dc2d31390143390eb5d13ee908e8472f9b142b9d5894c77253f9adcfe6597bb42004f4c7825e59c2d5821fcf5d0efc985296815ff34b980eaaf00fb679f75d22"}, @NL80211_PKTPAT_PATTERN={0xd9, 0x2, "c024f29bad3bb5f7b9ec47ab3b29bd51d6cb706b576e67aa2d0fa388873a716a8e13ecf041639c06bdeb922c7e3f78f4b25e49e3df06114bd3c3d5fa91da6a93aa80757f4d482d63e4200dec196d49ed5148fc5bd9efd6f8797965f13a54213d3301b33e17bb2ceeee8b7ad979d05737cb46147ebec96eb2b1c0c87b17b90c5409a57005cfe278ed2bebc36a6e7793644098d6fccd494669f397eaea8cc548f786639209e59923fad6aaebb8bb625e1d177f0721d3a26064d06cda8177b425df8da67b6774cc18bfbdd6e896e4da047a16ff01fe3a"}, @NL80211_PKTPAT_MASK={0xaa, 0x1, "3bee21edd8a41446acd4b6fafc42301d00590ae338e70c24b7abaa7839c5f861ebe093f70a0721c117c4648757c947c8c0d5bd3575982036d78aca13ef33d32ae45c8e34e2c023d512197c7a73f4cf32a483feeea16463820be6ab3fedb04dc344c7cce7a1907e42f5593a77e34f99102ef0b1ace6fdcb67a495e7fddfa1d6b29af863256a83e31e48670f2c3db15f24be27a059738eb503ea3e1fc3717d1ca4af754d95abe4"}]}, {0x238, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x92, 0x1, "561107071b7efbe9affc934dbf244a8c4e5826a7bbb2c61899ae08e97678d06bc082bbe16cb1d950cae5574b85ab2243aa266aa102130121589e18e3d8482b09aaeda3944c8acb60e727f6a659a995010c8de8ad6f83a843fd0dc93e7b208b69ea32beb5f1bb778a817223f96dbabf2f217386b992e3b4547c45378516d80a820bb4376852f13c5b8db803212a1a"}, @NL80211_PKTPAT_MASK={0x5, 0x1, 'o'}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}, @NL80211_PKTPAT_MASK={0xb8, 0x1, "23fc55131c83e200d6f52715d4276b055d486439e6a1db43ba3c8503e445a3ba177fb03b6f51acd331d5060c7c14e397876c0aef6615e04adeb7cce981edc4b5b5fb36f44f75b6ceb9594c54e7abf8990be8877aa5444eda25815d104923efed41470a2e50fc6722735e077f3820307c9ab19cf37a36f72af631df3137a6bba113f903ae21f189840062f0dec2a615a4f8156e6518688512463a1025fbbd7b7da26d482780e0220dcb949910a62064f9f89ef1fa"}, @NL80211_PKTPAT_PATTERN={0xd6, 0x2, "456dff6f84204ced075aa51046543232120a76f5af7ab53b544e806f1a951dcf18a678eb83d2a3d011ead5281fa69c5682b28bfac0d917f6f86da3cf59d1c2de00033d59d4fe51176f864b2cbcca50b65ec50ad777708dc8119bc0f139ddfc182545152e324e3e445488f1914b547d7f35e7eec4d89ac41fa0715233b6342afb1ccecd52d2190d1f8d41c6f0e0f439128af7cddd7cf998751f0b0669f23141ae297ef96aa9e73a6f4b09868bf08ec8d6cf205410efd68fd1c64c23aa37de06c3f818ad29d2dc63977c04980f1df50a980892"}]}, {0x94, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x8d, 0x2, "01b5c1b2c1149de9466e1787ca715057874984c356b5d5700a102887db65879107ad5174d32767b8276b157799daa9ccc3175f091dd2bb58952bdcfeb41ff4531830caab027dcaf8b191e76615a41965c7651ac8f25c509e5625d5b6d233437440027ee4828c5d799e5525a1c15955cbc6002b6c730110ca41816dd5c0b28359f6fb457042c7af3c95"}]}, {0x2a0, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x4}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x4}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xe}, @NL80211_PKTPAT_MASK={0xf1, 0x1, "b65bfcfe0b37d85e45a291c8c729d389916c80b78683934f58e0734d5092a0f5ed893c8ee969c82769c3fda56470062f9ea931aa62cfaaca4edab365f8cb07563f0d359ed07d68b30ccf752c91c059496d87e31a7959fcacd681898090e5bedc428a2c97ad57ba0f0e07a9bf958352569e0170b69e31adcae1d4a0d8c45e4b5833b52c62eeb37a0c58f40b479735c21db16a1410a1f7b9493e3b557877f9a825e0add5117dd71993ba89c523df9caaa655cb2e0d9e780d9f2beeed19cc1bf9921edd521366820c9717f529adc17296f3169c91891f6aaad271d9737194eb8d6f752f66c3caae292d587bb9bd5f"}, @NL80211_PKTPAT_MASK={0xc3, 0x1, "0b37c73202645e5041ea5b58bbf20ccfd223dd6528ed0816b2b37d1337e624ffcb58ddfab65f48dfea9cc67bebf917b8ad7351d44aae1eea4ac4c01f680789492dc8c666e14daed92cd7b3ae4b84279bc3f5b64d2a0035c8773d939026f7b160695504a764d0db9cc7feaacd78d7ae4ed3fa6d930e37ce4f67fd897e33fb4d91968adf9968388c0014687dbec1a2a888fca62cf9849a0129b1c89bee1d1e7fd9d699cdb93d0570a1341974985a99b603232e96015151d007858157053f0202"}, @NL80211_PKTPAT_MASK={0xcf, 0x1, "55cf26af6a4eb43171c61b8595e8fcd1f6e1c45e24dd44806e8365e31a13d3806a3f5ce2d52d870d8cf1455e4c37c9b4f04394cb06c0c78b239524b9dbfa78d430d646b16ef19eb17e5ab025d29de2fbf4c0aeee970f310e8d254f4312265b4aaa79668f5008a3b4f83f79cb915909662a6159aa2b1e3351abab9b12a36f97458d75cd27dff12268a7a3a67b42fb111eb9a21562e0c394cf442e2cd28cc721a3b5b8286c737e804682f3b06ba02d62ec0661a364f1d2345fe55765d5578ebdebeeaa1b9ff99d7f6bbc38dc"}]}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}]}, 0x1f24}, 0x1, 0x0, 0x0, 0x4004000}, 0x20040000) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000002c80)) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000002d40)=[@text32={0x20, &(0x7f0000002cc0)="c4e27917680f66baf80cb8d0a8968bef66bafc0c66ed66baa000b800800000ef66b807000f00d03e0f32660f38824c5efa3f440f20c03504000000440f22c0c4e155f1d0643e0fc72e", 0x49}], 0x1, 0x48, &(0x7f0000002d80)=[@cstype3={0x5, 0x1}, @dstype0={0x6, 0x1}], 0x2) syz_open_dev$video4linux(&(0x7f0000002dc0), 0x5, 0x200) kernel console output (not intermixed with test programs): faces: 81, using maximum allowed: 32 [ 133.775595][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 133.791923][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 133.802503][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 133.812681][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 133.832532][ T24] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 133.841827][ T5938] usb 3-1: device descriptor read/64, error -32 [ 133.850601][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.866225][ T24] usb 2-1: config 0 descriptor?? [ 133.872905][ T5942] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 133.917633][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.939173][ T5942] usb 5-1: Product: syz [ 133.954532][ T5942] usb 5-1: Manufacturer: syz [ 133.984350][ T5942] usb 5-1: SerialNumber: syz [ 133.993747][ T5942] usb 5-1: config 0 descriptor?? [ 134.105411][ T24] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 134.122473][ T5942] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 134.149778][ T5938] usb 3-1: reset high-speed USB device number 10 using dummy_hcd [ 134.177066][ T5938] usb 3-1: device descriptor read/8, error -32 [ 134.421892][ C1] usblp0: nonzero read bulk status received: -71 [ 134.432693][ T24] usb 2-1: USB disconnect, device number 13 [ 134.466872][ T5938] usb 3-1: reset high-speed USB device number 10 using dummy_hcd [ 134.497243][ T5938] usb 3-1: device descriptor read/8, error -32 [ 134.578595][ T6443] netlink: 'syz.3.151': attribute type 39 has an invalid length. [ 134.630774][ T5938] raw-gadget.0 gadget.2: failed to queue suspend event [ 134.645230][ T5914] usb 3-1: USB disconnect, device number 10 [ 135.106441][ T5936] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 135.287219][ T5936] usb 2-1: too many configurations: 54, using maximum allowed: 8 [ 135.323270][ T5936] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 135.343402][ T5936] usb 2-1: can't read configurations, error -61 [ 135.486474][ T5936] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 135.606434][ T5938] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 135.657579][ T5936] usb 2-1: too many configurations: 54, using maximum allowed: 8 [ 135.671038][ T5936] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 135.678871][ T5936] usb 2-1: can't read configurations, error -61 [ 135.685502][ T5936] usb usb2-port1: attempt power cycle [ 135.746389][ T5938] usb 4-1: device descriptor read/64, error -71 [ 135.898937][ T6457] usblp0: removed [ 135.989984][ T5938] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 136.136415][ T5938] usb 4-1: device descriptor read/64, error -71 [ 136.143100][ T6481] netlink: 48 bytes leftover after parsing attributes in process `syz.2.161'. [ 136.168934][ T984] usb 5-1: USB disconnect, device number 15 [ 136.266831][ T5938] usb usb4-port1: attempt power cycle [ 136.600342][ T6493] netlink: 'syz.0.165': attribute type 27 has an invalid length. [ 136.608343][ T5938] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 136.647246][ T5938] usb 4-1: device descriptor read/8, error -71 [ 136.753622][ T6493] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.761445][ T6493] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.992018][ T6493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.016998][ T6493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.075907][ T1212] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 137.086133][ T5938] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 137.132346][ T5938] usb 4-1: device descriptor read/8, error -71 [ 137.252592][ T5938] usb usb4-port1: unable to enumerate USB device [ 137.331060][ T6494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.345325][ T6494] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.374023][ T1212] usb 1-1: Using ep0 maxpacket: 16 [ 137.379701][ T6494] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.398399][ T6499] netlink: 36 bytes leftover after parsing attributes in process `syz.4.167'. [ 137.431846][ T1212] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.468532][ T1212] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 137.483762][ T1335] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.493401][ T1335] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.510483][ T1212] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 137.520655][ T1212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.529225][ T1212] usb 1-1: Product: syz [ 137.534844][ T1212] usb 1-1: Manufacturer: syz [ 137.539752][ T1335] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.539801][ T1335] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.568563][ T1212] usb 1-1: SerialNumber: syz [ 137.618383][ T1212] usb 1-1: config 0 descriptor?? [ 137.783175][ T6509] netlink: 'syz.2.170': attribute type 11 has an invalid length. [ 137.800655][ T6509] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.170'. [ 137.835222][ T6506] netlink: 'syz.4.169': attribute type 1 has an invalid length. [ 137.867385][ T6493] bridge0: port 3(syz_tun) entered blocking state [ 137.873897][ T6493] bridge0: port 3(syz_tun) entered disabled state [ 138.033946][ T6493] syz_tun: entered allmulticast mode [ 138.042158][ T6493] syz_tun: entered promiscuous mode [ 138.048118][ T6493] bridge0: port 3(syz_tun) entered blocking state [ 138.054799][ T6493] bridge0: port 3(syz_tun) entered forwarding state [ 138.107054][ T6506] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 138.683222][ T6521] IPv6: sit1: Disabled Multicast RS [ 138.935333][ T6526] xt_ecn: cannot match TCP bits for non-tcp packets [ 139.261977][ T6520] input: syz1 as /devices/virtual/input/input5 [ 139.300790][ T6520] program syz.1.168 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.695156][ T6536] netlink: 12 bytes leftover after parsing attributes in process `syz.4.177'. [ 139.748203][ T6536] bond1: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 139.784133][ T6536] bond1 (unregistering): Released all slaves [ 140.178836][ T5942] usb 1-1: USB disconnect, device number 10 [ 140.566593][ T1212] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 140.782671][ T1212] usb 2-1: device descriptor read/64, error -71 [ 141.027712][ T1212] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 141.167220][ T1212] usb 2-1: device descriptor read/64, error -71 [ 141.298122][ T1212] usb usb2-port1: attempt power cycle [ 141.476390][ T5938] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 141.526526][ T5942] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 141.636459][ T1212] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 141.657317][ T1212] usb 2-1: device descriptor read/8, error -71 [ 141.658889][ T5938] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 141.672276][ T5938] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.677231][ T5942] usb 1-1: too many configurations: 151, using maximum allowed: 8 [ 141.684769][ T5938] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 141.700727][ T5938] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 141.707014][ T5942] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 141.718446][ T5938] usb 4-1: Manufacturer: syz [ 141.719547][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 141.731894][ T5942] usb 1-1: Product: syz [ 141.736109][ T5942] usb 1-1: Manufacturer: syz [ 141.741108][ T5942] usb 1-1: SerialNumber: syz [ 141.747297][ T5938] usb 4-1: config 0 descriptor?? [ 141.754983][ T5942] usb 1-1: config 0 descriptor?? [ 141.770640][ T5942] ims_pcu 1-1:0.0: Zero length descriptor [ 141.777396][ T5942] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22 [ 141.779070][ T5938] igorplugusb 4-1:0.0: incorrect number of endpoints [ 141.874741][ T6566] FAULT_INJECTION: forcing a failure. [ 141.874741][ T6566] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 141.893354][ T6566] CPU: 0 UID: 0 PID: 6566 Comm: syz.4.185 Not tainted syzkaller #0 PREEMPT(full) [ 141.893384][ T6566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 141.893407][ T6566] Call Trace: [ 141.893415][ T6566] [ 141.893424][ T6566] dump_stack_lvl+0x189/0x250 [ 141.893460][ T6566] ? __pfx____ratelimit+0x10/0x10 [ 141.893491][ T6566] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.893520][ T6566] ? __pfx__printk+0x10/0x10 [ 141.893555][ T6566] should_fail_ex+0x414/0x560 [ 141.893594][ T6566] _copy_to_user+0x31/0xb0 [ 141.893624][ T6566] simple_read_from_buffer+0xe1/0x170 [ 141.893662][ T6566] proc_fail_nth_read+0x1b3/0x220 [ 141.893693][ T6566] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.893723][ T6566] ? rw_verify_area+0x2a6/0x4d0 [ 141.893752][ T6566] ? __lock_acquire+0xab9/0xd20 [ 141.893770][ T6566] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.893799][ T6566] vfs_read+0x200/0xa30 [ 141.893827][ T6566] ? fdget_pos+0x247/0x320 [ 141.893852][ T6566] ? __pfx___mutex_lock+0x10/0x10 [ 141.893885][ T6566] ? __pfx_vfs_read+0x10/0x10 [ 141.893916][ T6566] ? __fget_files+0x2a/0x420 [ 141.893941][ T6566] ? __fget_files+0x3a0/0x420 [ 141.893960][ T6566] ? __fget_files+0x2a/0x420 [ 141.893990][ T6566] ksys_read+0x145/0x250 [ 141.894018][ T6566] ? tomoyo_file_fcntl+0x78/0x210 [ 141.894041][ T6566] ? __pfx_ksys_read+0x10/0x10 [ 141.894074][ T6566] ? do_syscall_64+0xbe/0xfa0 [ 141.894110][ T6566] do_syscall_64+0xfa/0xfa0 [ 141.894138][ T6566] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.894169][ T6566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.894190][ T6566] ? clear_bhb_loop+0x60/0xb0 [ 141.894215][ T6566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.894235][ T6566] RIP: 0033:0x7f0e2798e15c [ 141.894265][ T6566] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 141.894283][ T6566] RSP: 002b:00007f0e28787030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 141.894306][ T6566] RAX: ffffffffffffffda RBX: 00007f0e27be5fa0 RCX: 00007f0e2798e15c [ 141.894321][ T6566] RDX: 000000000000000f RSI: 00007f0e287870a0 RDI: 0000000000000005 [ 141.894334][ T6566] RBP: 00007f0e28787090 R08: 0000000000000000 R09: 0000000000000000 [ 141.894347][ T6566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.894359][ T6566] R13: 00007f0e27be6038 R14: 00007f0e27be5fa0 R15: 00007f0e27d0fa28 [ 141.894394][ T6566] [ 142.142014][ T5938] usb 1-1: USB disconnect, device number 11 [ 142.178972][ T1212] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 142.186868][ T5942] usb 4-1: USB disconnect, device number 8 [ 142.211322][ T1212] usb 2-1: device descriptor read/8, error -71 [ 142.332258][ T1212] usb usb2-port1: unable to enumerate USB device [ 142.611871][ T6587] netlink: 'syz.4.190': attribute type 27 has an invalid length. [ 142.936226][ T6587] bridge0: port 3(syz_tun) entered disabled state [ 143.036709][ T5938] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 143.041588][ T6593] program syz.3.189 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.065733][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.189'. [ 143.116236][ T30] audit: type=1326 audit(1764305057.185:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.3.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8df8f749 code=0x7ffc0000 [ 143.600426][ T30] audit: type=1326 audit(1764305057.185:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.3.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8df8f749 code=0x7ffc0000 [ 143.710478][ T30] audit: type=1326 audit(1764305057.195:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.3.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8e8df8f749 code=0x7ffc0000 [ 143.754466][ T30] audit: type=1326 audit(1764305057.195:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.3.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8df8f749 code=0x7ffc0000 [ 143.778817][ T30] audit: type=1326 audit(1764305057.195:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.3.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8df8f749 code=0x7ffc0000 [ 143.806496][ T5938] usb 5-1: Using ep0 maxpacket: 16 [ 143.811741][ T6589] bridge0: port 3(syz_tun) entered blocking state [ 143.818394][ T6589] bridge0: port 3(syz_tun) entered forwarding state [ 143.845583][ T6589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.856097][ T6589] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.886691][ T6589] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 143.987143][ T5938] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.022002][ T5938] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 144.189323][ T30] audit: type=1326 audit(1764305057.195:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.3.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8e8df8df90 code=0x7ffc0000 [ 144.273648][ T5938] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 144.293552][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.318054][ T5938] usb 5-1: Product: syz [ 144.335190][ T5938] usb 5-1: Manufacturer: syz [ 144.373958][ T30] audit: type=1326 audit(1764305057.195:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.3.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8df8f749 code=0x7ffc0000 [ 144.414604][ T30] audit: type=1326 audit(1764305057.195:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.3.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8df8f749 code=0x7ffc0000 [ 144.448783][ T5938] usb 5-1: SerialNumber: syz [ 144.460988][ T30] audit: type=1326 audit(1764305057.195:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.3.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8e8df8f749 code=0x7ffc0000 [ 144.522200][ T30] audit: type=1326 audit(1764305057.215:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.3.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8df8f749 code=0x7ffc0000 [ 144.718188][ T5938] usb 5-1: config 0 descriptor?? [ 145.460300][ T5938] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 145.628175][ T5938] usb 1-1: Using ep0 maxpacket: 8 [ 145.645152][ T5938] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 145.658437][ T5938] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 145.685147][ T5938] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 145.705281][ T5938] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.719935][ T5938] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.742384][ T5938] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 145.770920][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.878891][ T6619] netlink: 24 bytes leftover after parsing attributes in process `syz.2.199'. [ 146.002481][ T5938] usb 1-1: GET_CAPABILITIES returned 0 [ 146.008954][ T5938] usbtmc 1-1:16.0: can't read capabilities [ 146.213690][ T5915] usb 1-1: USB disconnect, device number 12 [ 146.286472][ T1212] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 146.451999][ T1212] usb 4-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=43.6f [ 146.461298][ T1212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.471263][ T1212] usb 4-1: Product: syz [ 146.477890][ T1212] usb 4-1: Manufacturer: syz [ 146.488223][ T1212] usb 4-1: SerialNumber: syz [ 146.578533][ T5915] usb 5-1: USB disconnect, device number 16 [ 146.594680][ T1212] usb 4-1: config 0 descriptor?? [ 146.631733][ T1212] gspca_main: touptek-2.14.0 probing 0547:6801 [ 147.351961][ T6640] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 147.371636][ T5915] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 147.568931][ T6641] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 147.638228][ T5915] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 147.690450][ T5915] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.770969][ T5915] usb 5-1: config 0 has no interface number 0 [ 147.788333][ T6648] netlink: 28 bytes leftover after parsing attributes in process `syz.2.205'. [ 147.807951][ T6648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.205'. [ 147.860780][ T5915] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 147.891844][ T6650] loop2: detected capacity change from 0 to 7 [ 147.901187][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.923083][ T6650] Dev loop2: unable to read RDB block 7 [ 147.929179][ T5915] usb 5-1: Product: syz [ 147.941329][ T5915] usb 5-1: Manufacturer: syz [ 147.946140][ T6650] loop2: unable to read partition table [ 147.957021][ T5915] usb 5-1: SerialNumber: syz [ 147.966636][ T6650] loop2: partition table beyond EOD, truncated [ 147.981127][ T5915] usb 5-1: config 0 descriptor?? [ 148.016533][ T6650] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 148.079124][ T5200] Dev loop2: unable to read RDB block 7 [ 148.084767][ T5200] loop2: unable to read partition table [ 148.119929][ T5915] pn533_usb 5-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 148.204804][ T6652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.213555][ T5200] loop2: partition table beyond EOD, truncated [ 148.253736][ T1212] usb 4-1: USB disconnect, device number 9 [ 148.313332][ T6630] CUSE: unknown device info "ÿ" [ 148.318419][ T6630] CUSE: unknown device info "" [ 148.323396][ T6630] CUSE: DEVNAME unspecified [ 148.340560][ T6652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.203564][ T6669] netlink: 'syz.2.211': attribute type 27 has an invalid length. [ 149.533569][ T6669] bridge0: port 3(syz_tun) entered disabled state [ 149.582825][ T6675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.595824][ T6675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.852039][ T6670] vlan2: entered promiscuous mode [ 149.866698][ T6670] geneve1: entered promiscuous mode [ 149.872459][ T6670] vlan2: entered allmulticast mode [ 149.882307][ T6670] geneve1: entered allmulticast mode [ 149.962012][ T6672] bridge0: port 3(syz_tun) entered blocking state [ 149.968706][ T6672] bridge0: port 3(syz_tun) entered forwarding state [ 149.984131][ T6672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.005940][ T6672] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.078374][ T5948] usb 5-1: USB disconnect, device number 17 [ 150.166097][ T6672] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 150.406941][ T5936] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 150.577456][ T5936] usb 2-1: Using ep0 maxpacket: 16 [ 150.585884][ T5936] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.612253][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 150.693624][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 150.757852][ T5936] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 150.883497][ T5936] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.909399][ T5936] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 150.932958][ T5936] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 150.951012][ T5936] usb 2-1: Manufacturer: syz [ 150.981508][ T5936] usb 2-1: config 0 descriptor?? [ 151.079222][ T6695] fuse: Bad value for 'fd' [ 151.157368][ T6695] QAT: failed to copy from user. [ 151.871691][ T6707] netlink: 20 bytes leftover after parsing attributes in process `syz.0.222'. [ 152.236397][ T5948] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 152.308354][ T5915] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 152.339393][ T6711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.350942][ T6711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.426382][ T5948] usb 1-1: Using ep0 maxpacket: 8 [ 152.445316][ T5948] usb 1-1: unable to get BOS descriptor or descriptor too short [ 152.455265][ T5948] usb 1-1: config 8 has an invalid interface number: 24 but max is 0 [ 152.464076][ T5948] usb 1-1: config 8 has no interface number 0 [ 152.491470][ T5915] usb 5-1: Using ep0 maxpacket: 32 [ 152.519579][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.548083][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1152, setting to 1024 [ 152.574515][ T5948] usb 1-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 152.598702][ T6713] netlink: 36 bytes leftover after parsing attributes in process `syz.3.225'. [ 152.620850][ T5915] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 152.637097][ T5948] usb 1-1: config 8 interface 24 has no altsetting 0 [ 152.659410][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.715972][ T5948] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 152.735555][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.756243][ T5915] usb 5-1: config 0 descriptor?? [ 152.762507][ T6708] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 152.787895][ T5948] usb 1-1: Product: syz [ 152.792158][ T5948] usb 1-1: Manufacturer: syz [ 152.801309][ T5915] hub 5-1:0.0: USB hub found [ 152.817291][ T5948] usb 1-1: SerialNumber: syz [ 153.011772][ T5915] hub 5-1:0.0: 1 port detected [ 153.140179][ T5948] vmk80xx 1-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 153.253304][ T6726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.229'. [ 153.272557][ T5948] usb 1-1: USB disconnect, device number 13 [ 153.417482][ T5936] rc_core: IR keymap rc-hauppauge not found [ 153.423563][ T5936] Registered IR keymap rc-empty [ 153.435553][ T5936] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 153.486578][ T5936] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 153.593904][ T5936] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 153.682458][ T5936] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 153.738884][ T5936] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 153.806514][ T5936] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 153.832354][ T5915] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 153.866458][ T5936] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 153.896425][ T5936] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 153.939881][ T5936] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 154.065044][ T5936] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 154.099441][ T5936] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 154.126656][ T5936] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 154.146523][ T5936] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 154.176455][ T5936] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 154.225470][ T5936] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 154.265798][ T5936] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 154.301850][ T5936] usb 2-1: USB disconnect, device number 21 [ 154.665857][ T5948] usb 5-1: USB disconnect, device number 18 [ 154.759061][ T6745] dvmrp8: entered allmulticast mode [ 155.119597][ T6752] netlink: 'syz.3.234': attribute type 27 has an invalid length. [ 155.536741][ T5936] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 155.594610][ T6752] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.602455][ T6752] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.686506][ T5936] usb 4-1: Using ep0 maxpacket: 16 [ 155.749796][ T5936] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 155.763793][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.812852][ T5936] usb 4-1: Product: syz [ 155.853404][ T5936] usb 4-1: Manufacturer: syz [ 155.863489][ T5936] usb 4-1: SerialNumber: syz [ 155.889593][ T5936] usb 4-1: config 0 descriptor?? [ 156.073553][ T6752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.087459][ T6773] netlink: 16 bytes leftover after parsing attributes in process `syz.0.242'. [ 156.124913][ T6752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.155131][ T6777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.241'. [ 156.611957][ T6753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.642100][ T6753] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.670735][ T6753] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 156.711690][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.738511][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.761685][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.800559][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.051530][ T6797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.247'. [ 157.130328][ T5915] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 157.278372][ T5915] usb 5-1: device descriptor read/64, error -71 [ 157.516424][ T5915] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 157.584623][ T6808] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 157.656457][ T5915] usb 5-1: device descriptor read/64, error -71 [ 157.767656][ T5915] usb usb5-port1: attempt power cycle [ 157.990388][ T5948] usb 4-1: USB disconnect, device number 10 [ 158.119010][ T5915] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 158.148931][ T5915] usb 5-1: device descriptor read/8, error -71 [ 158.338404][ T6832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.258'. [ 158.388695][ T5915] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 158.419426][ T5915] usb 5-1: device descriptor read/8, error -71 [ 158.527090][ T5915] usb usb5-port1: unable to enumerate USB device [ 158.649224][ T939] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 159.031886][ T939] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 159.046526][ T939] usb 4-1: config 0 interface 0 has no altsetting 0 [ 159.053487][ T939] usb 4-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 159.064301][ T939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.076099][ T939] usb 4-1: config 0 descriptor?? [ 159.084074][ T6830] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 159.276660][ T5938] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 159.487983][ T5938] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 159.500638][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.517805][ T5938] usb 1-1: config 0 descriptor?? [ 159.540262][ T5938] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 159.569990][ T939] uclogic 0003:28BD:0078.0006: interface is invalid, ignoring [ 159.728514][ T6830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.737512][ T6830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.750047][ T6830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.759322][ T6830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.785483][ T5942] usb 4-1: USB disconnect, device number 11 [ 159.953002][ T5938] gspca_sunplus: reg_w_riv err -71 [ 159.968736][ T5938] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 159.994166][ T5938] usb 1-1: USB disconnect, device number 14 [ 160.045463][ T6858] netlink: 'syz.2.265': attribute type 27 has an invalid length. [ 160.195127][ T6858] bridge0: port 3(syz_tun) entered disabled state [ 160.240921][ T6865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.250439][ T6865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.276810][ T5942] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 160.396028][ T6862] bridge0: port 3(syz_tun) entered blocking state [ 160.402759][ T6862] bridge0: port 3(syz_tun) entered forwarding state [ 160.457858][ T6862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.468612][ T6862] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.499187][ T6862] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.519112][ T5942] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 160.528265][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.537936][ T5942] usb 4-1: Product: syz [ 160.557399][ T5942] usb 4-1: Manufacturer: syz [ 160.584598][ T5942] usb 4-1: SerialNumber: syz [ 160.605935][ T5942] usb 4-1: config 0 descriptor?? [ 160.835382][ T6876] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 160.903343][ T5942] hso 4-1:0.0: Can't find BULK IN endpoint [ 160.915530][ T5942] usb-storage 4-1:0.0: USB Mass Storage device detected [ 160.946506][ T5938] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 160.975888][ T6881] netlink: 'syz.1.271': attribute type 1 has an invalid length. [ 161.080948][ T6883] veth3: entered promiscuous mode [ 161.099283][ T5938] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 161.107781][ T5938] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 161.119644][ T5938] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 161.132127][ T5938] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 161.144147][ T5938] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 161.148121][ T6883] bond1: (slave veth3): Enslaving as an active interface with a down link [ 161.158072][ T5938] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 161.171890][ T5938] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 161.183589][ T5938] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 161.195930][ T5938] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 161.208184][ T5938] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 161.222610][ T5938] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 161.231720][ T5938] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 161.243361][ T5938] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 161.256070][ T5938] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 161.269572][ T5938] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 161.285589][ T5938] usb 1-1: string descriptor 0 read error: -22 [ 161.292070][ T5938] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 161.302732][ T5938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.331872][ T5938] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 161.380226][ T6884] bond1: (slave veth5): Enslaving as an active interface with a down link [ 161.410692][ T6884] bond1: entered promiscuous mode [ 161.432678][ T6884] bond1: entered allmulticast mode [ 161.444595][ T6884] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.527328][ T6871] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 162.861500][ T6851] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 162.870219][ T6851] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 162.884698][ T6851] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 162.895622][ T6851] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 162.902156][ T6851] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 162.910273][ T6851] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 162.922536][ T6851] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 162.949786][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 162.978379][ T6851] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 163.020520][ T6851] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 163.051473][ T6851] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 163.058486][ T6851] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 163.068482][ T6851] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 163.078281][ T6851] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 163.084599][ T6851] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 163.093283][ T6851] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 163.104304][ T6887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.117783][ T6887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.125758][ T6889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.142205][ T5915] usb 1-1: USB disconnect, device number 15 [ 163.175288][ T6889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.184578][ T939] usb 4-1: USB disconnect, device number 12 [ 163.251358][ T6871] xt_hashlimit: size too large, truncated to 1048576 [ 163.344629][ T5938] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 163.536639][ T984] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 163.546352][ T5938] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 163.554777][ T5938] usb 5-1: config 0 has no interface number 0 [ 163.562333][ T5938] usb 5-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 163.574083][ T5938] usb 5-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 163.584201][ T5938] usb 5-1: config 0 interface 113 has no altsetting 0 [ 163.593912][ T5938] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 163.603100][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.611177][ T5938] usb 5-1: Product: syz [ 163.615365][ T5938] usb 5-1: Manufacturer: syz [ 163.620095][ T939] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 163.626423][ T5915] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 163.628629][ T5938] usb 5-1: SerialNumber: syz [ 163.646512][ T5938] usb 5-1: config 0 descriptor?? [ 163.655257][ C1] usb 5-1: NFC: Urb failure (status -71) [ 163.662099][ T5938] usb 5-1: NFC: Unable to get FW version [ 163.673990][ T5938] pn533_usb 5-1:0.113: probe with driver pn533_usb failed with error -90 [ 163.707814][ T984] usb 2-1: Using ep0 maxpacket: 32 [ 163.714867][ T984] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 163.725245][ T984] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 163.735213][ T984] usb 2-1: config 0 interface 0 has no altsetting 0 [ 163.745658][ T984] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 163.767941][ T984] usb 2-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 163.783550][ T5942] usb 5-1: USB disconnect, device number 23 [ 163.786669][ T984] usb 2-1: Product: syz [ 163.791994][ T5915] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.818299][ T939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 163.835715][ T5915] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.838235][ T984] usb 2-1: Manufacturer: syz [ 163.860311][ T939] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 163.878268][ T5915] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 163.880169][ T984] usb 2-1: SerialNumber: syz [ 163.898987][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 163.902345][ T939] usb 4-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 163.915414][ T5915] usb 1-1: SerialNumber: syz [ 163.920309][ T984] usb 2-1: config 0 descriptor?? [ 163.935433][ T939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.961110][ T939] usb 4-1: config 0 descriptor?? [ 163.998335][ T6894] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 164.195973][ T5915] usb 1-1: 0:2 : does not exist [ 164.203996][ T5915] usb 1-1: unit 5 not found! [ 164.225689][ T5915] usb 1-1: USB disconnect, device number 16 [ 164.259014][ T5954] udevd[5954]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.297424][ T5942] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 164.350269][ T984] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 164.423434][ T939] hid (null): report_id 57294 is invalid [ 164.434860][ T939] asus 0003:0B05:18C6.0007: collection stack underflow [ 164.441954][ T939] asus 0003:0B05:18C6.0007: item 0 1 0 12 parsing failed [ 164.446453][ T5942] usb 5-1: Using ep0 maxpacket: 32 [ 164.450258][ T939] asus 0003:0B05:18C6.0007: Asus hid parse failed: -22 [ 164.457970][ T5942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.461558][ T939] asus 0003:0B05:18C6.0007: probe with driver asus failed with error -22 [ 164.484710][ T5942] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 164.494333][ T5942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.506939][ T5942] usb 5-1: config 0 descriptor?? [ 164.634737][ T939] usb 4-1: USB disconnect, device number 13 [ 164.763506][ T984] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 164.849003][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 164.849022][ T30] audit: type=1326 audit(1764305079.005:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6907 comm="syz.2.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d63d8f749 code=0x7ffc0000 [ 164.913951][ T30] audit: type=1326 audit(1764305079.045:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6907 comm="syz.2.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d63d8f749 code=0x7ffc0000 [ 164.936830][ T30] audit: type=1326 audit(1764305079.045:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6907 comm="syz.2.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f0d63d8f749 code=0x7ffc0000 [ 164.951003][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 164.965478][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 164.977160][ T30] audit: type=1326 audit(1764305079.065:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6907 comm="syz.2.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d63d8f749 code=0x7ffc0000 [ 164.999479][ T30] audit: type=1326 audit(1764305079.065:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6907 comm="syz.2.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d63d8f749 code=0x7ffc0000 [ 165.002337][ T5942] magicmouse 0003:05AC:0265.0008: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.4-1/input0 [ 165.034278][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 165.036953][ T6892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.049446][ T6910] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 165.049449][ T30] audit: type=1326 audit(1764305079.065:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6907 comm="syz.2.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0d63d8f749 code=0x7ffc0000 [ 165.049497][ T30] audit: type=1326 audit(1764305079.065:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6907 comm="syz.2.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d63d8f749 code=0x7ffc0000 [ 165.113918][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 165.116688][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 165.120225][ T30] audit: type=1326 audit(1764305079.065:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6907 comm="syz.2.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d63d8f749 code=0x7ffc0000 [ 165.127157][ T984] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 165.170438][ T6892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.201588][ T30] audit: type=1326 audit(1764305079.065:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6907 comm="syz.2.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0d63d8f749 code=0x7ffc0000 [ 165.211054][ T5942] usb 5-1: USB disconnect, device number 24 [ 165.226571][ T5938] usb 2-1: USB disconnect, device number 22 [ 165.240323][ T30] audit: type=1326 audit(1764305079.135:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6907 comm="syz.2.279" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d63d8f749 code=0x0 [ 165.340048][ T6917] fido_id[6917]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 165.357981][ T984] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 165.389602][ T984] usb 1-1: config 0 has no interface number 0 [ 165.395797][ T984] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.428007][ T984] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.432748][ T6921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.281'. [ 165.446417][ T984] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 165.490219][ T984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.524413][ T984] usb 1-1: config 0 descriptor?? [ 165.583702][ T6926] netlink: 'syz.3.282': attribute type 27 has an invalid length. [ 165.908444][ T6937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.919079][ T6937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.092380][ T5938] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 166.248445][ T984] uclogic 0003:256C:006D.0009: unknown main item tag 0x0 [ 166.288953][ T984] uclogic 0003:256C:006D.0009: unknown main item tag 0x0 [ 166.310576][ T6930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.320912][ T6930] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.364352][ T984] uclogic 0003:256C:006D.0009: unknown main item tag 0x0 [ 166.371871][ T5938] usb 4-1: Using ep0 maxpacket: 16 [ 166.396632][ T6930] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 166.441024][ T984] uclogic 0003:256C:006D.0009: unknown main item tag 0x0 [ 166.451715][ T984] uclogic 0003:256C:006D.0009: unknown main item tag 0x0 [ 166.477583][ T5915] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 166.493289][ T5938] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 166.502987][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.518916][ T5938] usb 4-1: Product: syz [ 166.539975][ T984] uclogic 0003:256C:006D.0009: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input1 [ 166.553680][ T5938] usb 4-1: Manufacturer: syz [ 166.566404][ T5938] usb 4-1: SerialNumber: syz [ 166.599377][ T5938] usb 4-1: config 0 descriptor?? [ 166.684782][ T5915] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 166.749265][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.798045][ T5915] usb 2-1: Product: syz [ 167.105883][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 167.106103][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 167.121252][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 167.136610][ T5915] usb 2-1: Manufacturer: syz [ 167.153507][ T5915] usb 2-1: SerialNumber: syz [ 167.186498][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 167.187640][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 167.322520][ T5915] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 167.535449][ T5948] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 167.791606][ T5942] usb 2-1: USB disconnect, device number 23 [ 168.075040][ T6957] xt_hashlimit: size too large, truncated to 1048576 [ 168.630849][ T5948] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 168.661083][ T5948] ath9k_htc: Failed to initialize the device [ 168.698821][ T5942] usb 2-1: ath9k_htc: USB layer deinitialized [ 168.998946][ T5938] usb 1-1: USB disconnect, device number 17 [ 169.072374][ T5948] usb 4-1: USB disconnect, device number 14 [ 169.192782][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 169.192801][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 169.266568][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 169.266578][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 169.450968][ T6982] syzkaller0: entered promiscuous mode [ 169.457080][ T6982] syzkaller0: entered allmulticast mode [ 169.468346][ T5938] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 169.588434][ T5948] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 169.639911][ T5938] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 169.658502][ T5938] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 169.691779][ T5938] usb 1-1: config 0 interface 0 has no altsetting 0 [ 169.716491][ T5938] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 169.735852][ T5938] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 169.765190][ T5938] usb 1-1: Product: syz [ 169.777350][ T5938] usb 1-1: Manufacturer: syz [ 169.777383][ T5948] usb 4-1: Using ep0 maxpacket: 32 [ 169.786853][ T5938] usb 1-1: SerialNumber: syz [ 169.799194][ T5948] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 169.803190][ T5938] usb 1-1: config 0 descriptor?? [ 169.823757][ T5948] usb 4-1: config 0 has no interface number 0 [ 169.832139][ T5938] usb 1-1: selecting invalid altsetting 0 [ 169.838900][ T5948] usb 4-1: config 0 interface 184 has no altsetting 0 [ 169.866665][ T5948] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 169.893105][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.911884][ T5948] usb 4-1: Product: syz [ 169.916116][ T5948] usb 4-1: Manufacturer: syz [ 169.931774][ T5948] usb 4-1: SerialNumber: syz [ 169.956738][ T5948] usb 4-1: config 0 descriptor?? [ 169.974022][ T5948] smsc75xx v1.0.0 [ 170.105469][ T6978] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 170.146808][ T5938] usb 1-1: USB disconnect, device number 18 [ 170.384236][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 170.384254][ T30] audit: type=1326 audit(1764305084.535:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.4.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2798f749 code=0x7ffc0000 [ 170.421025][ T30] audit: type=1326 audit(1764305084.535:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.4.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2798f749 code=0x7ffc0000 [ 170.443708][ T30] audit: type=1326 audit(1764305084.575:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.4.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f0e2798f749 code=0x7ffc0000 [ 170.480011][ T30] audit: type=1326 audit(1764305084.575:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.4.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2798f749 code=0x7ffc0000 [ 170.502660][ T30] audit: type=1326 audit(1764305084.575:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.4.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2798f749 code=0x7ffc0000 [ 170.526240][ T30] audit: type=1326 audit(1764305084.575:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.4.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f0e2798f749 code=0x7ffc0000 [ 170.589357][ T30] audit: type=1326 audit(1764305084.575:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.4.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2798f749 code=0x7ffc0000 [ 170.612210][ T30] audit: type=1326 audit(1764305084.575:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.4.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2798f749 code=0x7ffc0000 [ 170.637622][ T30] audit: type=1326 audit(1764305084.575:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.4.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f0e2798f749 code=0x7ffc0000 [ 171.465763][ T5948] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 171.489826][ T5948] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 171.501064][ T5948] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 171.524464][ T5948] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 171.547350][ T5948] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 171.558196][ T5948] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 171.594904][ T5948] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 171.623958][ T5948] usb 4-1: USB disconnect, device number 15 [ 171.884017][ T5938] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 172.067344][ T5938] usb 2-1: Using ep0 maxpacket: 16 [ 172.074585][ T5938] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 172.092762][ T5938] usb 2-1: config 0 has no interface number 0 [ 172.109783][ T5938] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 172.126638][ T5938] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 172.143729][ T5938] usb 2-1: config 0 interface 41 has no altsetting 0 [ 172.187759][ T5938] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 172.197416][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.205587][ T5938] usb 2-1: Product: syz [ 172.210190][ T5938] usb 2-1: Manufacturer: syz [ 172.219406][ T5938] usb 2-1: SerialNumber: syz [ 172.246207][ T5938] usb 2-1: config 0 descriptor?? [ 172.260035][ T7007] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 172.267995][ T7007] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 172.488645][ T7007] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 172.497543][ T7007] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 172.562071][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.299'. [ 172.589272][ T7019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.299'. [ 172.606727][ T7019] netlink: 'syz.0.299': attribute type 11 has an invalid length. [ 172.616942][ T7019] netlink: 'syz.0.299': attribute type 12 has an invalid length. [ 173.124965][ T5938] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 173.218242][ T7034] netlink: 'syz.2.303': attribute type 1 has an invalid length. [ 173.395388][ T7034] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 173.990936][ T7043] netlink: 'syz.0.305': attribute type 3 has an invalid length. [ 174.454229][ T7056] netlink: 24 bytes leftover after parsing attributes in process `syz.2.307'. [ 174.593712][ T7056] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 174.778979][ T5938] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 174.790591][ T5938] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 174.859037][ T5938] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 174.920621][ T5938] usb 2-1: USB disconnect, device number 24 [ 175.486419][ T984] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 175.656373][ T984] usb 4-1: Using ep0 maxpacket: 16 [ 175.667994][ T984] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.684771][ T984] usb 4-1: config 0 has no interfaces? [ 175.698477][ T984] usb 4-1: New USB device found, idVendor=34ef, idProduct=202b, bcdDevice=36.09 [ 175.707803][ T984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.715834][ T984] usb 4-1: Product: syz [ 175.727150][ T984] usb 4-1: Manufacturer: syz [ 175.736445][ T984] usb 4-1: SerialNumber: syz [ 175.749173][ T984] usb 4-1: config 0 descriptor?? [ 175.971495][ T7059] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=34144515 (68289030 ns) > initial count (67109412 ns). Using initial count to start timer. [ 175.999086][ T1107] wlan0: Trigger new scan to find an IBSS to join [ 177.966054][ T5948] usb 4-1: USB disconnect, device number 16 [ 178.088895][ T7105] syz.2.323 (7105): drop_caches: 0 [ 178.328789][ T7113] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 178.547960][ T7121] netlink: 'syz.3.328': attribute type 5 has an invalid length. [ 178.896625][ T1212] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 179.095563][ T1212] usb 4-1: Using ep0 maxpacket: 32 [ 179.126403][ T1212] usb 4-1: unable to get BOS descriptor or descriptor too short [ 179.176065][ T1212] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 179.206817][ T1212] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 179.224223][ T1212] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 179.712750][ T1212] usb 4-1: config 128 has no interface number 0 [ 179.737827][ T1212] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 170, changing to 11 [ 179.835666][ T1212] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 42744, setting to 1024 [ 179.903273][ T1212] usb 4-1: config 128 interface 127 has no altsetting 0 [ 180.085559][ T12] wlan0: Trigger new scan to find an IBSS to join [ 180.113698][ T1212] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 180.187874][ T7145] netlink: 36 bytes leftover after parsing attributes in process `syz.0.331'. [ 180.198604][ T1212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.207777][ T1212] usb 4-1: Product: syz [ 180.325635][ T1212] usb 4-1: Manufacturer: syz [ 180.376451][ T1212] usb 4-1: SerialNumber: syz [ 180.389535][ T7121] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 180.756087][ T1212] usb 4-1: USB disconnect, device number 17 [ 180.767940][ T7152] netlink: 16 bytes leftover after parsing attributes in process `syz.2.335'. [ 180.813185][ T7152] netlink: 3 bytes leftover after parsing attributes in process `syz.2.335'. [ 180.941378][ T984] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 180.967260][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 181.146879][ T984] usb 1-1: config 0 has no interfaces? [ 181.271526][ T984] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 181.352836][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.406828][ T984] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.414886][ T984] usb 1-1: Product: syz [ 181.531272][ T984] usb 1-1: Manufacturer: syz [ 181.535978][ T984] usb 1-1: SerialNumber: syz [ 181.587516][ T984] usb 1-1: config 0 descriptor?? [ 181.869147][ T30] audit: type=1326 audit(1764305095.905:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7160 comm="syz.3.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8df8f749 code=0x7ffc0000 [ 181.918495][ T5938] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 182.044221][ T30] audit: type=1326 audit(1764305095.905:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7160 comm="syz.3.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f8e8df8f749 code=0x7ffc0000 [ 182.068391][ T5938] usb 5-1: device descriptor read/64, error -71 [ 182.257034][ T30] audit: type=1326 audit(1764305095.905:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7160 comm="syz.3.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8df8f749 code=0x7ffc0000 [ 182.299832][ T30] audit: type=1326 audit(1764305095.905:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7160 comm="syz.3.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f8e8df8f749 code=0x7ffc0000 [ 182.348642][ T5938] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 182.443921][ T30] audit: type=1326 audit(1764305095.905:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7160 comm="syz.3.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8df8f749 code=0x7ffc0000 [ 182.502906][ T5938] usb 5-1: device descriptor read/64, error -71 [ 182.576412][ T30] audit: type=1326 audit(1764305095.905:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7160 comm="syz.3.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8e8df8f749 code=0x7ffc0000 [ 182.598682][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.606507][ T30] audit: type=1326 audit(1764305095.905:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7160 comm="syz.3.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8df8f749 code=0x7ffc0000 [ 182.629774][ T5938] usb usb5-port1: attempt power cycle [ 182.637671][ T30] audit: type=1326 audit(1764305095.905:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7160 comm="syz.3.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8e8df8f749 code=0x7ffc0000 [ 182.662325][ T30] audit: type=1326 audit(1764305095.905:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7160 comm="syz.3.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8df8f749 code=0x7ffc0000 [ 182.684446][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.691943][ T30] audit: type=1326 audit(1764305095.905:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7160 comm="syz.3.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8df8f749 code=0x7ffc0000 [ 182.976381][ T5938] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 183.009620][ T5938] usb 5-1: device descriptor read/8, error -71 [ 183.346716][ T5938] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 183.522814][ T7180] fuse: Unknown parameter '00000000000000000003' [ 183.549151][ T7183] netlink: 'syz.1.343': attribute type 1 has an invalid length. [ 183.572133][ T5938] usb 5-1: device descriptor read/8, error -71 [ 183.706948][ T5938] usb usb5-port1: unable to enumerate USB device [ 183.839267][ T5938] usb 1-1: USB disconnect, device number 19 [ 184.097482][ T7192] use of bytesused == 0 is deprecated and will be removed in the future, [ 184.114538][ T7192] use the actual size instead. [ 185.081940][ T7221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.351'. [ 186.276462][ T5948] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 186.437165][ T5948] usb 5-1: too many configurations: 54, using maximum allowed: 8 [ 186.446946][ T5948] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 186.454724][ T5948] usb 5-1: can't read configurations, error -61 [ 186.606711][ T5948] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 186.842121][ T5948] usb 5-1: too many configurations: 54, using maximum allowed: 8 [ 186.858620][ T5948] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 186.867062][ T5948] usb 5-1: can't read configurations, error -61 [ 186.917706][ T5948] usb usb5-port1: attempt power cycle [ 187.267719][ T5948] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 187.334518][ T5948] usb 5-1: too many configurations: 54, using maximum allowed: 8 [ 187.344961][ T5948] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 187.668813][ T5948] usb 5-1: can't read configurations, error -61 [ 187.816401][ T5948] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 187.837689][ T5948] usb 5-1: too many configurations: 54, using maximum allowed: 8 [ 187.839446][ T5948] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 187.888357][ T5948] usb 5-1: can't read configurations, error -61 [ 187.888881][ T5948] usb usb5-port1: unable to enumerate USB device [ 187.938566][ T7244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.355'. [ 189.166350][ T7269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.363'. [ 189.356426][ T1212] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 189.530665][ T1212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.612827][ T1212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.646815][ T1212] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 189.673526][ T1212] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 189.744887][ T1212] usb 2-1: Manufacturer: syz [ 189.773742][ T1212] usb 2-1: config 0 descriptor?? [ 190.349969][ T1212] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 190.367530][ T1212] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 190.374570][ T1212] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 190.396584][ T1212] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 190.426538][ T1212] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 190.433367][ T1212] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 190.455578][ T1212] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 190.527004][ T1212] pyra 0003:1E7D:2CF6.000A: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 190.700956][ T1212] pyra 0003:1E7D:2CF6.000A: couldn't init struct pyra_device [ 190.731053][ T1212] pyra 0003:1E7D:2CF6.000A: couldn't install mouse [ 190.772885][ T1212] pyra 0003:1E7D:2CF6.000A: probe with driver pyra failed with error -32 [ 190.859946][ T1212] usb 2-1: USB disconnect, device number 25 [ 190.931065][ T7290] capability: warning: `syz.1.369' uses 32-bit capabilities (legacy support in use) [ 191.015876][ T7290] capability: warning: `syz.1.369' uses deprecated v2 capabilities in a way that may be insecure [ 191.200682][ T7292] fido_id[7292]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 191.746506][ T5938] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 191.917135][ T1212] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 191.956622][ T5938] usb 5-1: Using ep0 maxpacket: 32 [ 191.977671][ T5938] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 192.006126][ T5938] usb 5-1: config 0 has no interface number 0 [ 192.038901][ T5938] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 192.048205][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.086431][ T1212] usb 1-1: Using ep0 maxpacket: 8 [ 192.086450][ T5938] usb 5-1: Product: syz [ 192.086469][ T5938] usb 5-1: Manufacturer: syz [ 192.098866][ T1212] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 192.125783][ T5938] usb 5-1: SerialNumber: syz [ 192.133007][ T1212] usb 1-1: config 0 has no interface number 0 [ 192.157368][ T5938] usb 5-1: config 0 descriptor?? [ 192.169932][ T1212] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 192.186844][ T1212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.209568][ T1212] usb 1-1: Product: syz [ 192.214219][ T1212] usb 1-1: Manufacturer: syz [ 192.234316][ T1212] usb 1-1: SerialNumber: syz [ 192.271562][ T1212] usb 1-1: config 0 descriptor?? [ 192.411554][ T7299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.372'. [ 192.452618][ T7299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.372'. [ 192.499951][ T7307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.507890][ T7299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.372'. [ 192.510395][ T7307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.540390][ T7307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.556905][ T7319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.617753][ T7307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.658259][ T7319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.717543][ T5938] radio-si470x 5-1:0.35: this is not a si470x device. [ 192.725207][ T1212] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 192.746418][ T1212] uvcvideo 1-1:0.31: No streaming interface found for terminal 6. [ 192.764854][ T1212] uvcvideo 1-1:0.31: Failed to create links for entity 5 [ 192.776950][ T1212] uvcvideo 1-1:0.31: Failed to register entities (-22). [ 192.782622][ T5938] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 192.797487][ T1212] usb 1-1: USB disconnect, device number 20 [ 192.926673][ T7328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.942713][ T7328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.980363][ T5948] usb 5-1: USB disconnect, device number 33 [ 193.145973][ T7335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.381'. [ 193.212187][ T7338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.241449][ T7338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.546873][ T7349] netlink: 20 bytes leftover after parsing attributes in process `syz.4.386'. [ 193.671043][ T7326] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 193.764021][ T7353] openvswitch: netlink: IP tunnel dst address not specified [ 194.125772][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.393'. [ 194.180649][ T7368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.243330][ T7368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.400244][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.407238][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.766388][ T5948] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 194.918989][ T5948] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 194.952692][ T5948] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 195.062915][ T5948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.092486][ T5948] usb 1-1: config 0 descriptor?? [ 195.288467][ T7379] FAULT_INJECTION: forcing a failure. [ 195.288467][ T7379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.321331][ T7379] CPU: 0 UID: 0 PID: 7379 Comm: syz.2.397 Not tainted syzkaller #0 PREEMPT(full) [ 195.321362][ T7379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 195.321376][ T7379] Call Trace: [ 195.321385][ T7379] [ 195.321395][ T7379] dump_stack_lvl+0x189/0x250 [ 195.321444][ T7379] ? __pfx____ratelimit+0x10/0x10 [ 195.321477][ T7379] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.321508][ T7379] ? __pfx__printk+0x10/0x10 [ 195.321545][ T7379] should_fail_ex+0x414/0x560 [ 195.321586][ T7379] _copy_to_user+0x31/0xb0 [ 195.321618][ T7379] simple_read_from_buffer+0xe1/0x170 [ 195.321659][ T7379] proc_fail_nth_read+0x1b3/0x220 [ 195.321691][ T7379] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 195.321724][ T7379] ? rw_verify_area+0x2a6/0x4d0 [ 195.321755][ T7379] ? __lock_acquire+0xab9/0xd20 [ 195.321775][ T7379] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 195.321806][ T7379] vfs_read+0x200/0xa30 [ 195.321836][ T7379] ? fdget_pos+0x247/0x320 [ 195.321862][ T7379] ? __pfx___mutex_lock+0x10/0x10 [ 195.321898][ T7379] ? __pfx_vfs_read+0x10/0x10 [ 195.321930][ T7379] ? __fget_files+0x2a/0x420 [ 195.321957][ T7379] ? __fget_files+0x3a0/0x420 [ 195.321977][ T7379] ? __fget_files+0x2a/0x420 [ 195.322008][ T7379] ksys_read+0x145/0x250 [ 195.322042][ T7379] ? __pfx_ksys_read+0x10/0x10 [ 195.322077][ T7379] ? do_syscall_64+0xbe/0xfa0 [ 195.322115][ T7379] do_syscall_64+0xfa/0xfa0 [ 195.322146][ T7379] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.322187][ T7379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.322209][ T7379] ? clear_bhb_loop+0x60/0xb0 [ 195.322236][ T7379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.322258][ T7379] RIP: 0033:0x7f0d63d8e15c [ 195.322288][ T7379] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 195.322307][ T7379] RSP: 002b:00007f0d64c3c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 195.322339][ T7379] RAX: ffffffffffffffda RBX: 00007f0d63fe5fa0 RCX: 00007f0d63d8e15c [ 195.322356][ T7379] RDX: 000000000000000f RSI: 00007f0d64c3c0a0 RDI: 0000000000000005 [ 195.322370][ T7379] RBP: 00007f0d64c3c090 R08: 0000000000000000 R09: 0000000000000000 [ 195.322385][ T7379] R10: 9999999999999999 R11: 0000000000000246 R12: 0000000000000001 [ 195.322398][ T7379] R13: 00007f0d63fe6038 R14: 00007f0d63fe5fa0 R15: 00007f0d6410fa28 [ 195.322436][ T7379] [ 195.589551][ T7373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.603841][ T7373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.636399][ T5938] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 195.869748][ T5948] aquacomputer_d5next 0003:0C70:F0BD.000B: hidraw0: USB HID v0.00 Device [HID 0c70:f0bd] on usb-dummy_hcd.0-1/input0 [ 195.997225][ T5938] usb 5-1: Using ep0 maxpacket: 8 [ 196.001996][ T7388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.017872][ T5938] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 196.039811][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.050423][ T5938] usb 5-1: Product: syz [ 196.054664][ T5938] usb 5-1: Manufacturer: syz [ 196.057619][ T5948] usb 1-1: USB disconnect, device number 21 [ 196.072326][ T7388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.082248][ T5938] usb 5-1: SerialNumber: syz [ 196.107668][ T7382] fido_id[7382]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 196.111487][ T5938] usb 5-1: config 0 descriptor?? [ 196.194381][ T5938] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 196.415968][ T7381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.427300][ T7381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.438569][ T7381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.448088][ T7381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.556384][ T1212] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 196.634638][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.407'. [ 196.717371][ T1212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.728620][ T5938] gspca_sonixj: reg_w1 err -110 [ 196.728717][ T5938] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 196.748384][ T984] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 196.779874][ T1212] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 196.789869][ T1212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.813376][ T1212] usb 2-1: config 0 descriptor?? [ 196.909460][ T984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.926405][ T984] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 196.944501][ T984] usb 4-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 196.954564][ T984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.976981][ T984] usb 4-1: config 0 descriptor?? [ 197.011499][ T5942] usb 5-1: USB disconnect, device number 34 [ 197.023724][ T1212] usbhid 2-1:0.0: can't add hid device: -71 [ 197.032105][ T1212] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 197.054690][ T1212] usb 2-1: USB disconnect, device number 26 [ 197.061454][ T5948] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 197.129242][ T7418] ip6erspan0: entered promiscuous mode [ 197.218523][ T5948] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 197.228548][ T5948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.239329][ T7396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.249786][ T7396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.252023][ T5948] usb 1-1: config 0 descriptor?? [ 197.389197][ T7400] fuse: Unknown parameter '{roup_id' [ 197.395693][ T7400] ======================================================= [ 197.395693][ T7400] WARNING: The mand mount option has been deprecated and [ 197.395693][ T7400] and is ignored by this kernel. Remove the mand [ 197.395693][ T7400] option from the mount to silence this warning. [ 197.395693][ T7400] ======================================================= [ 197.440409][ T984] cypress 0003:04B4:DE64.000C: unknown main item tag 0x0 [ 197.447891][ T984] cypress 0003:04B4:DE64.000C: unknown main item tag 0x0 [ 197.455014][ T984] cypress 0003:04B4:DE64.000C: unknown main item tag 0x0 [ 197.463161][ T984] cypress 0003:04B4:DE64.000C: unknown main item tag 0x0 [ 197.471319][ T5948] ath6kl: Failed to submit usb control message: -71 [ 197.472450][ T984] cypress 0003:04B4:DE64.000C: unknown main item tag 0x0 [ 197.489932][ T5948] ath6kl: unable to send the bmi data to the device: -71 [ 197.498171][ T5948] ath6kl: Unable to send get target info: -71 [ 197.499347][ T984] cypress 0003:04B4:DE64.000C: hidraw0: USB HID v0.00 Device [HID 04b4:de64] on usb-dummy_hcd.3-1/input0 [ 197.515179][ T5948] ath6kl: Failed to init ath6kl core: -71 [ 197.522456][ T5948] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 197.561740][ T5948] usb 1-1: USB disconnect, device number 22 [ 197.686410][ T5938] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 197.772062][ T7429] syz.4.413 (7429): drop_caches: 0 [ 197.848568][ T5938] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 197.857023][ T5938] usb 2-1: config 0 has no interface number 0 [ 197.863187][ T5938] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 197.877346][ T5938] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 197.887202][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.895453][ T5938] usb 2-1: Product: syz [ 197.900915][ T5938] usb 2-1: Manufacturer: syz [ 197.905555][ T5938] usb 2-1: SerialNumber: syz [ 197.918713][ T5938] usb 2-1: config 0 descriptor?? [ 197.929070][ T7422] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 197.939365][ T5938] usb-storage 2-1:0.20: USB Mass Storage device detected [ 197.949971][ T5938] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 198.243770][ T1212] usb 4-1: USB disconnect, device number 18 [ 198.263583][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 198.263603][ T30] audit: type=1326 audit(1764305112.415:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz.4.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2798f749 code=0x7ffc0000 [ 198.293261][ T7444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.417'. [ 198.346555][ T7444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.417'. [ 198.358075][ T30] audit: type=1326 audit(1764305112.415:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz.4.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2798f749 code=0x7ffc0000 [ 198.401803][ T30] audit: type=1326 audit(1764305112.425:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz.4.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e2798f749 code=0x7ffc0000 [ 198.453893][ T5938] scsi host1: usb-storage 2-1:0.20 [ 198.459498][ T30] audit: type=1326 audit(1764305112.425:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz.4.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2798f749 code=0x7ffc0000 [ 198.459557][ T30] audit: type=1326 audit(1764305112.425:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz.4.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2798f749 code=0x7ffc0000 [ 198.554911][ T5938] usb 2-1: USB disconnect, device number 27 [ 198.622497][ T7451] fuse: Unknown parameter 'no°ÂÁÀµŒ@º¦G»€Ÿß”ò*NIuŠ)kòX½GÎØÎÚÄ„K ·£ç¥jÎ{ÆA0·%ž¯QßçåJ€¸sÁ^;}šÅÐè—)]öLvˆHŒE¶Ö†\Ú¬’çýª¦©ñƒ/+Ï•¼í' [ 198.974790][ T7460] netlink: 'syz.4.422': attribute type 5 has an invalid length. [ 199.066391][ T984] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 199.228677][ T984] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 199.237880][ T984] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 199.261762][ T984] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 199.296440][ T984] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 199.328491][ T984] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 199.368525][ T984] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 199.379307][ T984] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 199.387384][ T984] usb 4-1: Product: syz [ 199.391761][ T984] usb 4-1: Manufacturer: syz [ 199.409275][ T984] cdc_wdm 4-1:1.0: skipping garbage [ 199.420601][ T984] cdc_wdm 4-1:1.0: skipping garbage [ 199.461361][ T984] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 199.467682][ T984] cdc_wdm 4-1:1.0: Unknown control protocol [ 199.673530][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 199.673699][ T5948] usb 4-1: USB disconnect, device number 19 [ 199.680416][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 199.692337][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 199.712105][ T7457] cdc_wdm 4-1:1.0: Tx URB error: -19 [ 200.188237][ T7477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.209009][ T7477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.232304][ T7477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.276927][ T7477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.414369][ T7482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.429'. [ 200.950164][ T7505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.119115][ T7505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.638345][ T7509] loop6: detected capacity change from 0 to 524288000 [ 202.231145][ T7517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.317178][ T7517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.386518][ T5948] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 202.576839][ T5948] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 202.596383][ T5948] usb 5-1: config 1 has no interface number 0 [ 202.602562][ T5948] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 202.656661][ T5948] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 202.691142][ T5948] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 202.714472][ T7521] IPv6: sit1: Disabled Multicast RS [ 202.721331][ T7521] sit1: entered allmulticast mode [ 202.731204][ T5948] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 202.750914][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.773210][ T5948] usb 5-1: Product: syz [ 202.777916][ T5948] usb 5-1: Manufacturer: syz [ 202.782578][ T5948] usb 5-1: SerialNumber: syz [ 202.819257][ T7515] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 203.075183][ T7527] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 203.166415][ T5948] usb 5-1: Error in usbnet_get_endpoints (-71) [ 203.186490][ T5942] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 203.209403][ T5948] usb 5-1: USB disconnect, device number 36 [ 203.366541][ T5942] usb 2-1: Using ep0 maxpacket: 16 [ 203.394126][ T5942] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 203.403955][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.418347][ T5942] usb 2-1: Product: syz [ 203.430489][ T5942] usb 2-1: Manufacturer: syz [ 203.485183][ T5942] usb 2-1: SerialNumber: syz [ 203.520237][ T5942] usb 2-1: config 0 descriptor?? [ 203.534936][ T5942] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 203.546660][ T5942] usb 2-1: Detected FT-X [ 203.554363][ T7534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.572350][ T7534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.742016][ T5942] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 203.749515][ T5942] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 203.757401][ T5942] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 203.765799][ T5942] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 203.847059][ T5942] usb 2-1: USB disconnect, device number 28 [ 203.867828][ T5942] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 203.897856][ T5942] ftdi_sio 2-1:0.0: device disconnected [ 204.287026][ T5948] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 204.460905][ T5948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.701688][ T5948] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 204.712650][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.747028][ T5948] usb 5-1: config 0 descriptor?? [ 205.270668][ T5948] holtek 0003:1241:5015.000D: unknown main item tag 0x0 [ 205.282318][ T5948] holtek 0003:1241:5015.000D: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.4-1/input0 [ 205.295235][ T5948] holtek 0003:1241:5015.000D: no inputs found [ 205.322576][ T7556] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 205.479016][ T5948] usb 5-1: USB disconnect, device number 37 [ 205.495582][ T7558] fido_id[7558]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:1241:5015.000D/report_descriptor': No such file or directory [ 206.147774][ T7569] netlink: 59 bytes leftover after parsing attributes in process `syz.2.455'. [ 214.092022][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 214.101168][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 214.116551][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 214.132663][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 214.146829][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 214.226982][ T1107] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 215.236179][ T7657] chnl_net:caif_netlink_parms(): no params data found [ 215.961079][ T7657] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.970461][ T7657] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.978392][ T7657] bridge_slave_0: entered allmulticast mode [ 215.991932][ T7657] bridge_slave_0: entered promiscuous mode [ 216.004604][ T7657] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.017141][ T7657] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.041922][ T7657] bridge_slave_1: entered allmulticast mode [ 216.063456][ T7657] bridge_slave_1: entered promiscuous mode [ 216.226418][ T5840] Bluetooth: hci5: command tx timeout [ 216.232146][ T7657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.248995][ T7657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.543837][ T7657] team0: Port device team_slave_0 added [ 216.559898][ T7657] team0: Port device team_slave_1 added [ 216.739040][ T7657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.746079][ T7657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.772039][ C1] vkms_vblank_simulate: vblank timer overrun [ 216.812962][ T7657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.839854][ T7657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.850091][ T7657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.885545][ T7657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.238859][ T7657] hsr_slave_0: entered promiscuous mode [ 217.259428][ T7657] hsr_slave_1: entered promiscuous mode [ 217.277457][ T7657] debugfs: 'hsr0' already exists in 'hsr' [ 217.286329][ T7657] Cannot create hsr debugfs directory [ 218.114954][ T7657] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 218.179501][ T7657] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 218.309242][ T5840] Bluetooth: hci5: command tx timeout [ 218.348220][ T7657] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 218.378412][ T7657] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 218.655187][ T7657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.722657][ T7657] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.779393][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.786694][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.834845][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.842154][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.118639][ T7657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.289659][ T30] audit: type=1326 audit(1764305133.445:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.1.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dd238f749 code=0x7ffc0000 [ 219.357694][ T7657] veth0_vlan: entered promiscuous mode [ 219.396486][ T30] audit: type=1326 audit(1764305133.445:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.1.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3dd238f749 code=0x7ffc0000 [ 219.400504][ T7657] veth1_vlan: entered promiscuous mode [ 219.418733][ C1] vkms_vblank_simulate: vblank timer overrun [ 219.528940][ T30] audit: type=1326 audit(1764305133.445:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.1.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dd238f749 code=0x7ffc0000 [ 219.551168][ C1] vkms_vblank_simulate: vblank timer overrun [ 219.635092][ T30] audit: type=1326 audit(1764305133.445:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.1.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dd238f749 code=0x7ffc0000 [ 219.893035][ T7657] veth0_macvtap: entered promiscuous mode [ 219.937104][ T30] audit: type=1326 audit(1764305133.445:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.1.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f3dd238f749 code=0x7ffc0000 [ 219.939999][ T7657] veth1_macvtap: entered promiscuous mode [ 220.012896][ T30] audit: type=1326 audit(1764305133.445:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.1.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dd238f749 code=0x7ffc0000 [ 220.035281][ C1] vkms_vblank_simulate: vblank timer overrun [ 220.110454][ T30] audit: type=1326 audit(1764305133.445:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.1.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dd238f749 code=0x7ffc0000 [ 220.132694][ C1] vkms_vblank_simulate: vblank timer overrun [ 220.387487][ T5840] Bluetooth: hci5: command tx timeout [ 220.441577][ T7657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.484566][ T7657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.547778][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.568287][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.609627][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.625246][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.917865][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.925765][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.083897][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.091978][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.433026][ T7738] netlink: 44 bytes leftover after parsing attributes in process `syz.2.503'. [ 221.877655][ T7744] netlink: 'syz.3.505': attribute type 25 has an invalid length. [ 221.941058][ T7744] netlink: 184 bytes leftover after parsing attributes in process `syz.3.505'. [ 222.467673][ T5840] Bluetooth: hci5: command tx timeout [ 222.831269][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.512'. [ 232.666377][ T5942] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 232.866340][ T5942] usb 6-1: Using ep0 maxpacket: 32 [ 232.878530][ T5942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.889739][ T5942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.916343][ T5942] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 232.926002][ T5942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.961137][ T5942] usb 6-1: config 0 descriptor?? [ 232.976451][ T5938] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 233.139465][ T5938] usb 4-1: Using ep0 maxpacket: 8 [ 233.160566][ T5938] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 233.186489][ T5938] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 233.216395][ T5938] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 233.246634][ T5938] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 233.287300][ T5938] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 233.316370][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.393800][ T5942] ft260 0003:0403:6030.000E: unknown main item tag 0x7 [ 233.549722][ T5938] usb 4-1: GET_CAPABILITIES returned 0 [ 233.555300][ T5938] usbtmc 4-1:16.0: can't read capabilities [ 233.589179][ T5942] ft260 0003:0403:6030.000E: chip code: 6424 8183 [ 233.759095][ T5938] usb 4-1: USB disconnect, device number 20 [ 233.789881][ T5942] ft260 0003:0403:6030.000E: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 233.990693][ T5942] ft260 0003:0403:6030.000E: failed to retrieve status: -32, no wakeup [ 234.018240][ T5942] ft260 0003:0403:6030.000E: failed to retrieve status: -32 [ 234.036503][ T5942] ft260 0003:0403:6030.000E: failed to reset I2C controller: -71 [ 234.081142][ T5942] usb 6-1: USB disconnect, device number 2 [ 236.311834][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.549'. [ 236.576905][ T7919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.607579][ T7919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.305652][ T7927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.328133][ T7927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.046365][ T5948] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 238.376415][ T5948] usb 4-1: Using ep0 maxpacket: 32 [ 238.398855][ T5948] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 238.416369][ T5948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.457372][ T5948] usb 4-1: config 0 descriptor?? [ 238.667110][ T5948] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 238.724225][ T5948] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 238.766343][ T5948] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 238.774673][ T5948] usb 4-1: media controller created [ 238.874068][ T5948] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 238.980575][ T5948] az6027: usb out operation failed. (-71) [ 239.006485][ T5948] az6027: usb out operation failed. (-71) [ 239.016330][ T5948] stb0899_attach: Driver disabled by Kconfig [ 239.022385][ T5948] az6027: no front-end attached [ 239.022385][ T5948] [ 239.056522][ T5948] az6027: usb out operation failed. (-71) [ 239.064549][ T5948] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 239.092851][ T5948] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 239.163311][ T5948] dvb-usb: schedule remote query interval to 400 msecs. [ 239.202090][ T5948] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 239.271297][ T5948] usb 4-1: USB disconnect, device number 21 [ 239.425777][ T7947] netlink: 148 bytes leftover after parsing attributes in process `syz.4.563'. [ 239.577309][ T5948] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 239.622737][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 239.634785][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 239.644213][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 239.663370][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 239.673299][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 241.375142][ T7953] chnl_net:caif_netlink_parms(): no params data found [ 241.754916][ T52] Bluetooth: hci6: command tx timeout [ 241.915663][ T7977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.570'. [ 241.964441][ T7953] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.982598][ T7953] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.996501][ T7953] bridge_slave_0: entered allmulticast mode [ 242.023142][ T7953] bridge_slave_0: entered promiscuous mode [ 242.298006][ T7953] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.686578][ T7953] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.746567][ T7953] bridge_slave_1: entered allmulticast mode [ 242.758622][ T7953] bridge_slave_1: entered promiscuous mode [ 243.221115][ T7953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.259797][ T7953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.336375][ T5948] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 243.514018][ T7953] team0: Port device team_slave_0 added [ 243.525380][ T5948] usb 5-1: unable to get BOS descriptor or descriptor too short [ 243.548620][ T7953] team0: Port device team_slave_1 added [ 243.566768][ T5948] usb 5-1: not running at top speed; connect to a high speed hub [ 243.603075][ T5948] usb 5-1: config 5 has an invalid interface number: 215 but max is 0 [ 243.626350][ T5948] usb 5-1: config 5 has no interface number 0 [ 243.632532][ T5948] usb 5-1: config 5 interface 215 has no altsetting 0 [ 243.692465][ T5948] usb 5-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba [ 243.704975][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.726869][ T5948] usb 5-1: Product: syz [ 243.731124][ T5948] usb 5-1: Manufacturer: syz [ 243.735746][ T5948] usb 5-1: SerialNumber: syz [ 243.826871][ T52] Bluetooth: hci6: command tx timeout [ 243.832684][ T7953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.846756][ T7953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.903364][ T7953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.927615][ T7953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.934620][ T7953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.011829][ T5948] cypress_m8 5-1:5.215: DeLorme Earthmate USB converter detected [ 244.024563][ T7953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.057370][ T5948] earthmate ttyUSB0: required endpoint is missing [ 244.087874][ T5948] usb 5-1: USB disconnect, device number 38 [ 244.110067][ T5948] cypress_m8 5-1:5.215: device disconnected [ 244.422577][ T7953] hsr_slave_0: entered promiscuous mode [ 244.457267][ T7953] hsr_slave_1: entered promiscuous mode [ 244.463916][ T7953] debugfs: 'hsr0' already exists in 'hsr' [ 244.526756][ T7953] Cannot create hsr debugfs directory [ 245.688870][ T7953] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 245.731707][ T7953] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 245.827928][ T7953] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 245.892369][ T7953] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 245.906998][ T52] Bluetooth: hci6: command tx timeout [ 246.227965][ T7823] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 246.373280][ T7953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.498881][ T7953] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.558425][ T1335] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.565691][ T1335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.627053][ T7825] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.634270][ T7825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.917235][ T7953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.100224][ T7953] veth0_vlan: entered promiscuous mode [ 247.171444][ T7953] veth1_vlan: entered promiscuous mode [ 247.282025][ T7953] veth0_macvtap: entered promiscuous mode [ 247.325989][ T7953] veth1_macvtap: entered promiscuous mode [ 247.415139][ T7953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.468540][ T7953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.537112][ T7827] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.564506][ T8040] netlink: 44 bytes leftover after parsing attributes in process `syz.2.591'. [ 247.578734][ T7827] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.616342][ T7827] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.637710][ T7827] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.966499][ T1335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.975175][ T1335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.986199][ T8046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.986889][ T52] Bluetooth: hci6: command tx timeout [ 248.182022][ T8046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.197597][ T7827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.260472][ T7827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.294775][ T8046] netlink: 28 bytes leftover after parsing attributes in process `syz.2.591'. [ 248.371373][ T8046] netlink: 180 bytes leftover after parsing attributes in process `syz.2.591'. [ 255.831677][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.838323][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.512793][ T8170] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.520753][ T8170] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.849819][ T8170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.863382][ T8170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.968731][ T7823] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.080537][ T7823] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.103737][ T7823] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.130088][ T7823] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.340430][ T8185] netlink: 'syz.5.628': attribute type 2 has an invalid length. [ 258.766886][ T8222] netlink: 'syz.5.641': attribute type 1 has an invalid length. [ 258.899818][ T8222] 8021q: adding VLAN 0 to HW filter on device bond1 [ 258.969849][ T8234] ipt_ECN: cannot use operation on non-tcp rule [ 259.083942][ T8230] bond1: (slave dummy0): making interface the new active one [ 259.105683][ T8230] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 260.418684][ T8254] syzkaller1: entered promiscuous mode [ 260.466448][ T8254] syzkaller1: entered allmulticast mode [ 260.517377][ T8257] netlink: 'syz.6.650': attribute type 3 has an invalid length. [ 261.507032][ T8281] binder: 8278:8281 unknown command 0 [ 261.528576][ T8281] binder: 8278:8281 ioctl c0306201 200000000080 returned -22 [ 261.598070][ T8281] binder_alloc: 8278: binder_alloc_buf, no vma [ 261.843629][ T8293] netlink: 8 bytes leftover after parsing attributes in process `syz.6.660'. [ 261.888191][ T8295] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 261.906648][ T8293] netlink: 20 bytes leftover after parsing attributes in process `syz.6.660'. [ 261.938918][ T8297] netlink: 8 bytes leftover after parsing attributes in process `syz.6.660'. [ 262.002881][ T3468] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.030392][ T3468] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.073550][ T3468] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.124789][ T3468] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.316420][ T8297] netlink: 20 bytes leftover after parsing attributes in process `syz.6.660'. [ 263.810283][ T8338] netlink: 8 bytes leftover after parsing attributes in process `syz.5.673'. [ 264.829727][ T8347] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 264.836492][ T8347] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 264.847383][ T8347] vhci_hcd vhci_hcd.0: Device attached [ 265.186814][ T5915] usb 38-1: SetAddress Request (2) to port 0 [ 265.209038][ T5915] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 265.390165][ T30] audit: type=1326 audit(1764305179.415:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8329 comm="syz.3.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8df8f749 code=0x7ffc0000 [ 265.646418][ T30] audit: type=1326 audit(1764305179.415:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8329 comm="syz.3.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8e8df8f749 code=0x7ffc0000 [ 265.763823][ T30] audit: type=1326 audit(1764305179.415:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8329 comm="syz.3.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8df8f749 code=0x7ffc0000 [ 265.816417][ T5942] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 265.921584][ T30] audit: type=1326 audit(1764305179.415:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8329 comm="syz.3.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8e8df8f749 code=0x7ffc0000 [ 266.026428][ T5942] usb 6-1: Using ep0 maxpacket: 8 [ 266.052539][ T5942] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 266.063096][ T30] audit: type=1326 audit(1764305179.425:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8329 comm="syz.3.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8df8f749 code=0x7ffc0000 [ 266.113014][ T5942] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 266.136345][ T5942] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 266.154180][ T30] audit: type=1326 audit(1764305179.425:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8329 comm="syz.3.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8df8f749 code=0x7ffc0000 [ 266.186361][ T5942] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 266.200535][ T5942] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 266.217683][ T8352] vhci_hcd: connection reset by peer [ 266.267932][ T1335] vhci_hcd: stop threads [ 266.273106][ T1335] vhci_hcd: release socket [ 266.298874][ T5942] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 266.326040][ T1335] vhci_hcd: disconnect device [ 266.340384][ T5942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.403512][ T8375] netlink: 584 bytes leftover after parsing attributes in process `syz.4.680'. [ 266.593165][ T5942] usb 6-1: usb_control_msg returned -32 [ 266.603297][ T5942] usbtmc 6-1:16.0: can't read capabilities [ 266.949756][ T8381] usbtmc 6-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 267.152317][ T5936] usb 6-1: USB disconnect, device number 3 [ 268.403114][ T52] Bluetooth: hci4: unexpected event for opcode 0x202f [ 268.454632][ T8411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.694'. [ 268.658595][ T8415] syz.4.687 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 269.684501][ T8435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.702'. [ 269.694931][ T8435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.702'. [ 269.706542][ T8435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.702'. [ 270.306821][ T5915] usb 38-1: device descriptor read/8, error -110 [ 270.698771][ T5915] usb usb38-port1: attempt power cycle [ 271.287807][ T5915] usb usb38-port1: unable to enumerate USB device [ 272.019407][ T8454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.709'. [ 272.124766][ T8456] syzkaller0: entered promiscuous mode [ 272.156445][ T8456] syzkaller0: entered allmulticast mode [ 272.166932][ T8454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.709'. [ 272.377594][ T8459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.709'. [ 272.468615][ T52] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 272.478059][ T52] Bluetooth: hci4: Injecting HCI hardware error event [ 272.488027][ T5840] Bluetooth: hci4: hardware error 0x00 [ 272.722798][ T8462] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.861413][ T8465] netlink: 40 bytes leftover after parsing attributes in process `syz.4.708'. [ 274.556375][ T5840] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 276.793059][ T8494] macvlan0: entered promiscuous mode [ 276.801070][ T8494] netlink: 'syz.4.716': attribute type 1 has an invalid length. [ 276.809287][ T8494] netlink: 'syz.4.716': attribute type 2 has an invalid length. [ 277.061223][ T1212] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 277.287031][ T1212] usb 5-1: Using ep0 maxpacket: 16 [ 277.378256][ T1212] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.403138][ T1212] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 277.427299][ T1212] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 277.458947][ T1212] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 277.468466][ T1212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 277.483018][ T1212] usb 5-1: SerialNumber: syz [ 277.755570][ T8500] FAULT_INJECTION: forcing a failure. [ 277.755570][ T8500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.781655][ T8494] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 277.870034][ T8494] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 277.879294][ T8500] CPU: 1 UID: 0 PID: 8500 Comm: syz.3.719 Not tainted syzkaller #0 PREEMPT(full) [ 277.879331][ T8500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 277.879357][ T8500] Call Trace: [ 277.879365][ T8500] [ 277.879374][ T8500] dump_stack_lvl+0x189/0x250 [ 277.879411][ T8500] ? __pfx____ratelimit+0x10/0x10 [ 277.879442][ T8500] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.879471][ T8500] ? __pfx__printk+0x10/0x10 [ 277.879493][ T8500] ? __might_fault+0xb0/0x130 [ 277.879536][ T8500] should_fail_ex+0x414/0x560 [ 277.879577][ T8500] _copy_from_user+0x2d/0xb0 [ 277.879606][ T8500] blk_trace_setup+0xb9/0x1f0 [ 277.879637][ T8500] ? __pfx_blk_trace_setup+0x10/0x10 [ 277.879657][ T8500] ? lockdep_hardirqs_on+0x9c/0x150 [ 277.879700][ T8500] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 277.879737][ T8500] blk_trace_ioctl+0x181/0x430 [ 277.879760][ T8500] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 277.879788][ T8500] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 277.879816][ T8500] ? vfs_write+0x956/0xb30 [ 277.879876][ T8500] blkdev_ioctl+0x41d/0x6d0 [ 277.879902][ T8500] ? __pfx_blkdev_ioctl+0x10/0x10 [ 277.879921][ T8500] ? ksys_write+0x1e1/0x250 [ 277.879956][ T8500] ? bpf_lsm_file_ioctl+0x9/0x20 [ 277.879981][ T8500] ? __pfx_blkdev_ioctl+0x10/0x10 [ 277.880002][ T8500] __se_sys_ioctl+0xfc/0x170 [ 277.880033][ T8500] do_syscall_64+0xfa/0xfa0 [ 277.880063][ T8500] ? lockdep_hardirqs_on+0x9c/0x150 [ 277.880092][ T8500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.880114][ T8500] ? clear_bhb_loop+0x60/0xb0 [ 277.880141][ T8500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.880162][ T8500] RIP: 0033:0x7f8e8df8f749 [ 277.880180][ T8500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.880199][ T8500] RSP: 002b:00007f8e8eed8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 277.880221][ T8500] RAX: ffffffffffffffda RBX: 00007f8e8e1e5fa0 RCX: 00007f8e8df8f749 [ 277.880236][ T8500] RDX: 0000200000000380 RSI: 00000000c0481273 RDI: 0000000000000003 [ 277.880250][ T8500] RBP: 00007f8e8eed8090 R08: 0000000000000000 R09: 0000000000000000 [ 277.880264][ T8500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.880277][ T8500] R13: 00007f8e8e1e6038 R14: 00007f8e8e1e5fa0 R15: 00007f8e8e30fa28 [ 277.880324][ T8500] [ 278.221276][ T8502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.240793][ T8502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.831412][ T8522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.727'. [ 279.867562][ T8522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.727'. [ 279.903656][ T8522] netlink: 'syz.3.727': attribute type 11 has an invalid length. [ 280.026392][ T5936] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 280.227762][ T5936] usb 6-1: device descriptor read/64, error -71 [ 280.399682][ T1212] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 280.408307][ T1212] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 280.426926][ T1212] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 280.496340][ T5936] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 280.496558][ T1212] usb 5-1: USB disconnect, device number 39 [ 280.656403][ T5936] usb 6-1: device descriptor read/64, error -71 [ 280.787443][ T5936] usb usb6-port1: attempt power cycle [ 280.868947][ T984] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 280.927354][ T8541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.971937][ T8541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.038988][ T984] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 281.057442][ T984] usb 4-1: config 0 has no interface number 0 [ 281.071308][ T984] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.093302][ T984] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.125471][ T984] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 281.134861][ T5936] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 281.170176][ T984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.195771][ T5936] usb 6-1: device descriptor read/8, error -71 [ 281.261866][ T984] usb 4-1: config 0 descriptor?? [ 281.476400][ T5936] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 281.522899][ T5936] usb 6-1: device descriptor read/8, error -71 [ 281.678680][ T5936] usb usb6-port1: unable to enumerate USB device [ 281.761715][ T984] uclogic 0003:256C:006D.000F: unknown main item tag 0x0 [ 281.789648][ T984] uclogic 0003:256C:006D.000F: unknown main item tag 0x0 [ 281.808360][ T984] uclogic 0003:256C:006D.000F: unknown main item tag 0x0 [ 281.815499][ T984] uclogic 0003:256C:006D.000F: unknown main item tag 0x0 [ 281.856354][ T984] uclogic 0003:256C:006D.000F: unknown main item tag 0x0 [ 281.872442][ T984] uclogic 0003:256C:006D.000F: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input1 [ 281.964021][ T5915] usb 4-1: USB disconnect, device number 22 [ 282.037838][ T1212] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 282.106133][ T8554] xt_hashlimit: max too large, truncated to 1048576 [ 282.149309][ T8551] fido_id[8551]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 282.206399][ T1212] usb 5-1: Using ep0 maxpacket: 16 [ 282.220482][ T1212] usb 5-1: config 0 has an invalid interface number: 129 but max is 0 [ 282.237699][ T1212] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 282.259121][ T1212] usb 5-1: config 0 has no interface number 1 [ 282.271348][ T1212] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 282.298183][ T1212] usb 5-1: config 0 interface 129 has no altsetting 0 [ 282.312751][ T1212] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 282.330667][ T1212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.351580][ T1212] usb 5-1: config 0 descriptor?? [ 282.369267][ T1212] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 283.156400][ T5915] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 283.258957][ T8570] syz.2.741 (8570): drop_caches: 0 [ 283.368029][ T5915] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 283.405208][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.440881][ T8574] netlink: 4 bytes leftover after parsing attributes in process `syz.6.743'. [ 283.485376][ T5915] usb 6-1: config 0 descriptor?? [ 284.156410][ T984] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 284.206329][ T5936] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 284.318399][ T984] usb 4-1: config 0 has no interfaces? [ 284.327120][ T984] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 284.336803][ T984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.356300][ T5936] usb 7-1: Using ep0 maxpacket: 16 [ 284.363595][ T5936] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.387285][ T5936] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 284.400729][ T984] usb 4-1: Product: syz [ 284.409498][ T984] usb 4-1: Manufacturer: syz [ 284.420081][ T5936] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 284.432382][ T984] usb 4-1: SerialNumber: syz [ 284.451402][ T984] usb 4-1: config 0 descriptor?? [ 284.458871][ T5936] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 284.481443][ T5936] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 284.510838][ T5936] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 284.520521][ T5936] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 284.537637][ T5936] usb 7-1: Manufacturer: syz [ 284.548883][ T5915] pegasus 6-1:0.0: probe with driver pegasus failed with error -32 [ 284.572822][ T5936] usb 7-1: config 0 descriptor?? [ 284.913045][ T8586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.923706][ T8586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.935043][ T5936] rc_core: IR keymap rc-hauppauge not found [ 284.949640][ T5936] Registered IR keymap rc-empty [ 284.957979][ T5936] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 284.974237][ T984] usb 6-1: USB disconnect, device number 8 [ 284.986914][ T5915] usb 5-1: USB disconnect, device number 40 [ 285.013682][ T5936] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 285.082077][ T5936] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 285.115588][ T8590] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 285.155396][ T5936] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input11 [ 285.216997][ T5936] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 285.318901][ T5936] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 285.346987][ T5936] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 285.673589][ T5936] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 285.696497][ T5936] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 285.730033][ T5936] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 285.816709][ T5936] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 285.845634][ T5936] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 285.876411][ T5936] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 285.908029][ T5936] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 286.032531][ T5936] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 286.046326][ T5936] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 286.081348][ T5936] usb 7-1: USB disconnect, device number 2 [ 286.456590][ T1212] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 286.594242][ T8606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.618490][ T1212] usb 6-1: config 0 has an invalid interface number: 20 but max is 0 [ 286.626916][ T1212] usb 6-1: config 0 has no interface number 0 [ 286.647176][ T1212] usb 6-1: config 0 interface 20 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.699283][ T1212] usb 6-1: config 0 interface 20 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.776373][ T1212] usb 6-1: config 0 interface 20 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 286.825375][ T1212] usb 6-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 286.834915][ T1212] usb 6-1: New USB device strings: Mfr=51, Product=0, SerialNumber=0 [ 286.855036][ T1212] usb 6-1: Manufacturer: syz [ 286.905574][ T5915] usb 4-1: USB disconnect, device number 23 [ 286.917439][ T1212] usb 6-1: config 0 descriptor?? [ 287.270429][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.754'. [ 287.280311][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.754'. [ 287.289671][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.754'. [ 287.299008][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.754'. [ 287.308155][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.754'. [ 287.317620][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.754'. [ 287.327000][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.754'. [ 287.460580][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.754'. [ 287.469968][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.754'. [ 287.481937][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.754'. [ 287.594596][ T8603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.603955][ T8603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.674168][ T1212] usbhid 6-1:0.20: can't add hid device: -71 [ 287.717482][ T1212] usbhid 6-1:0.20: probe with driver usbhid failed with error -71 [ 287.808952][ T1212] usb 6-1: USB disconnect, device number 9 [ 287.984162][ T8629] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 288.383742][ T30] audit: type=1800 audit(1764305202.535:112): pid=8631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.760" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 290.387398][ T31] INFO: task kworker/1:5:5914 blocked for more than 143 seconds. [ 290.395165][ T31] Not tainted syzkaller #0 [ 290.438325][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 290.477974][ T31] task:kworker/1:5 state:D stack:20920 pid:5914 tgid:5914 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 290.519159][ T31] Workqueue: usb_hub_wq hub_event [ 290.530042][ T31] Call Trace: [ 290.550671][ T31] [ 290.582365][ T31] __schedule+0x1798/0x4cc0 [ 290.598484][ T31] ? __pfx___schedule+0x10/0x10 [ 290.617021][ T31] ? schedule+0x91/0x360 [ 290.642553][ T31] schedule+0x165/0x360 [ 290.665148][ T31] schedule_timeout+0x9a/0x270 [ 290.698394][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 290.901533][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 290.931069][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.958590][ T31] ? wait_for_completion+0x267/0x5d0 [ 290.986459][ T31] wait_for_completion+0x2bf/0x5d0 [ 290.991758][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 291.002167][ T31] i2c_del_adapter+0x581/0x6e0 [ 291.024333][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.053577][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 291.074827][ T31] ? rcu_is_watching+0x15/0xb0 [ 291.096396][ T31] ? devres_log+0x11e/0x330 [ 291.121588][ T31] devres_release_group+0x2ed/0x340 [ 291.144214][ T31] ? __pfx_devres_release_group+0x10/0x10 [ 291.166068][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 291.190171][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 291.220569][ T31] ? __pfx_mcp2221_remove+0x10/0x10 [ 291.245455][ T31] hid_device_remove+0x250/0x370 [ 291.260678][ T31] ? __pfx_hid_device_remove+0x10/0x10 [ 291.273320][ T31] device_release_driver_internal+0x46f/0x800 [ 291.457010][ T31] bus_remove_device+0x34d/0x410 [ 291.466757][ T31] device_del+0x511/0x8e0 [ 291.471330][ T31] ? __pfx_device_del+0x10/0x10 [ 291.476429][ T31] hid_destroy_device+0x6b/0x1b0 [ 291.481556][ T31] usbhid_disconnect+0x9f/0xc0 [ 291.486632][ T31] usb_unbind_interface+0x26e/0x910 [ 291.492062][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 291.498738][ T31] device_release_driver_internal+0x4d9/0x800 [ 291.505013][ T31] bus_remove_device+0x34d/0x410 [ 291.511881][ T31] device_del+0x511/0x8e0 [ 291.517153][ T31] ? __pfx_device_del+0x10/0x10 [ 291.522260][ T31] ? kobject_put+0x446/0x480 [ 291.527593][ T31] usb_disable_device+0x3e9/0x8a0 [ 291.532848][ T31] usb_disconnect+0x330/0x950 [ 291.538214][ T31] hub_event+0x1cf5/0x4a20 [ 291.543104][ T31] ? do_raw_spin_lock+0x121/0x290 [ 291.548837][ T31] ? register_lock_class+0x51/0x320 [ 291.554382][ T31] ? __pfx_hub_event+0x10/0x10 [ 291.559895][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 291.565943][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 291.571527][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 291.578219][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 291.584170][ T31] process_scheduled_works+0xae1/0x17b0 [ 291.592344][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 291.599028][ T31] worker_thread+0x8a0/0xda0 [ 291.603943][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 291.611567][ T31] ? __kthread_parkme+0x7b/0x200 [ 291.618565][ T31] kthread+0x711/0x8a0 [ 291.623000][ T31] ? __pfx_worker_thread+0x10/0x10 [ 291.628906][ T31] ? __pfx_kthread+0x10/0x10 [ 291.633807][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 291.639734][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.645235][ T31] ? __pfx_kthread+0x10/0x10 [ 291.650769][ T31] ret_from_fork+0x4bc/0x870 [ 291.655736][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 291.661735][ T31] ? __switch_to_asm+0x39/0x70 [ 291.667162][ T31] ? __switch_to_asm+0x33/0x70 [ 291.672189][ T31] ? __pfx_kthread+0x10/0x10 [ 291.677635][ T31] ret_from_fork_asm+0x1a/0x30 [ 291.682856][ T31] [ 291.690567][ T31] [ 291.690567][ T31] Showing all locks held in the system: [ 291.698676][ T31] 1 lock held by khungtaskd/31: [ 291.703918][ T31] #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 291.715046][ T31] 2 locks held by getty/5592: [ 291.720391][ T31] #0: ffff88814d1db0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 291.733102][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 291.744211][ T31] 6 locks held by kworker/1:5/5914: [ 291.750008][ T31] #0: ffff888144aa0948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 291.762063][ T31] #1: ffffc9000ab47ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 291.774672][ T31] #2: ffff888145b22198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 291.784427][ T31] #3: ffff888056fb5198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x950 [ 291.794603][ T31] #4: ffff88807dbc0160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 291.806022][ T31] #5: ffff888077a29a20 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 291.817623][ T31] 3 locks held by syz.0.416/7441: [ 291.823025][ T31] 2 locks held by syz.1.515/7767: [ 291.835179][ T31] #0: ffff888024943a38 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0xfb/0x1f0 [ 291.847885][ T31] #1: ffffffff8df920a8 (relay_channels_mutex){+.+.}-{4:4}, at: relay_open+0x3b8/0x920 [ 291.858298][ T31] 1 lock held by syz.2.765/8650: [ 291.863408][ T31] #0: ffffffff8df43040 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 291.874020][ T31] 2 locks held by syz.3.766/8655: [ 291.879475][ T31] #0: ffff8880b883a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 291.893528][ T31] #1: ffff8880b8824048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 291.903045][ T31] [ 291.905503][ T31] ============================================= [ 291.905503][ T31] [ 291.958561][ T31] NMI backtrace for cpu 1 [ 291.958585][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 291.958609][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 291.958620][ T31] Call Trace: [ 291.958627][ T31] [ 291.958635][ T31] dump_stack_lvl+0x189/0x250 [ 291.958668][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.958692][ T31] ? __pfx__printk+0x10/0x10 [ 291.958720][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 291.958743][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 291.958765][ T31] ? __pfx__printk+0x10/0x10 [ 291.958792][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 291.958823][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 291.958847][ T31] watchdog+0xf60/0xfa0 [ 291.958869][ T31] ? watchdog+0x1e2/0xfa0 [ 291.958891][ T31] kthread+0x711/0x8a0 [ 291.958918][ T31] ? __pfx_watchdog+0x10/0x10 [ 291.958935][ T31] ? __pfx_kthread+0x10/0x10 [ 291.958964][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 291.958988][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.959011][ T31] ? __pfx_kthread+0x10/0x10 [ 291.959035][ T31] ret_from_fork+0x4bc/0x870 [ 291.959055][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 291.959079][ T31] ? __switch_to_asm+0x39/0x70 [ 291.959092][ T31] ? __switch_to_asm+0x33/0x70 [ 291.959105][ T31] ? __pfx_kthread+0x10/0x10 [ 291.959129][ T31] ret_from_fork_asm+0x1a/0x30 [ 291.959165][ T31] [ 291.959203][ T31] Sending NMI from CPU 1 to CPUs 0: [ 292.105037][ C0] NMI backtrace for cpu 0 [ 292.105068][ C0] CPU: 0 UID: 0 PID: 5817 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 292.105089][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 292.105100][ C0] RIP: 0010:do_nanosleep+0x2c8/0x610 [ 292.105127][ C0] Code: ff ff ff f3 0f 1e fa 4d 89 f5 e8 13 ed 76 f6 bf 01 20 00 00 e8 69 d5 46 f6 e9 65 fe ff ff e8 ff ec 76 f6 eb 05 e8 f8 ec 76 f6 <48> 8b 44 24 38 42 80 3c 20 00 48 8b 4c 24 08 74 0f 48 8b 7c 24 08 [ 292.105149][ C0] RSP: 0018:ffffc90003fafc00 EFLAGS: 00000293 [ 292.105166][ C0] RAX: ffffffff8b4916b1 RBX: 0000000000000000 RCX: ffff888030c91e40 [ 292.105180][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 292.105190][ C0] RBP: ffffc90003fafcf0 R08: ffffffff8f7cee77 R09: 1ffffffff1ef9dce [ 292.105204][ C0] R10: dffffc0000000000 R11: fffffbfff1ef9dcf R12: dffffc0000000000 [ 292.105217][ C0] R13: ffffc90003fafd80 R14: ffff888030c91e40 R15: ffffc90003fafd40 [ 292.105231][ C0] FS: 0000555583bd7500(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 292.105246][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 292.105258][ C0] CR2: 0000200000404030 CR3: 0000000027b0a000 CR4: 00000000003526f0 [ 292.105274][ C0] Call Trace: [ 292.105282][ C0] [ 292.105292][ C0] ? do_nanosleep+0x7f/0x610 [ 292.105315][ C0] ? __pfx_do_nanosleep+0x10/0x10 [ 292.105338][ C0] ? __hrtimer_setup+0x187/0x210 [ 292.105357][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 292.105380][ C0] hrtimer_nanosleep+0x169/0x360 [ 292.105403][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 292.105425][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 292.105447][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 292.105480][ C0] __se_sys_clock_nanosleep+0x339/0x390 [ 292.105501][ C0] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 292.105522][ C0] ? do_syscall_64+0xbe/0xfa0 [ 292.105551][ C0] do_syscall_64+0xfa/0xfa0 [ 292.105577][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.105594][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 292.105612][ C0] ? clear_bhb_loop+0x60/0xb0 [ 292.105632][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.105649][ C0] RIP: 0033:0x7f7b2ddc1fc3 [ 292.105664][ C0] Code: 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 292.105679][ C0] RSP: 002b:00007ffe00b45618 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 292.105697][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7b2ddc1fc3 [ 292.105709][ C0] RDX: 00007ffe00b45630 RSI: 0000000000000000 RDI: 0000000000000000 [ 292.105720][ C0] RBP: 0000000000000000 R08: 7fffffffffffffff R09: 3fffffffffffffff [ 292.105732][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe00b45a80 [ 292.105743][ C0] R13: 0000000000000004 R14: 00007ffe00b4566c R15: 00007ffe00b45700 [ 292.105765][ C0] [ 294.689456][ T7441] syz.0.416: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 294.707746][ T7441] CPU: 0 UID: 0 PID: 7441 Comm: syz.0.416 Not tainted syzkaller #0 PREEMPT(full) [ 294.707775][ T7441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 294.707789][ T7441] Call Trace: [ 294.707797][ T7441] [ 294.707806][ T7441] dump_stack_lvl+0x189/0x250 [ 294.707847][ T7441] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.707879][ T7441] ? __pfx__printk+0x10/0x10 [ 294.707902][ T7441] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 294.707934][ T7441] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 294.707967][ T7441] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 294.708012][ T7441] warn_alloc+0x214/0x310 [ 294.708054][ T7441] ? __pfx_warn_alloc+0x10/0x10 [ 294.708098][ T7441] ? __get_vm_area_node+0x28f/0x300 [ 294.708131][ T7441] ? relay_open_buf+0x215/0xe50 [ 294.708165][ T7441] __vmalloc_node_range_noprof+0x690/0x12d0 [ 294.708224][ T7441] ? alloc_pages_mpol+0x3cd/0x4a0 [ 294.708251][ T7441] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 294.708288][ T7441] ? rcu_is_watching+0x15/0xb0 [ 294.708315][ T7441] ? relay_open_buf+0x215/0xe50 [ 294.708346][ T7441] __kvmalloc_node_noprof+0x674/0x910 [ 294.708381][ T7441] ? relay_open_buf+0x215/0xe50 [ 294.708409][ T7441] ? trace_kmalloc+0x1f/0xd0 [ 294.708439][ T7441] ? relay_open_buf+0x17f/0xe50 [ 294.708475][ T7441] relay_open_buf+0x215/0xe50 [ 294.708523][ T7441] relay_open+0x427/0x920 [ 294.708560][ T7441] do_blk_trace_setup+0x561/0x980 [ 294.708596][ T7441] blk_trace_setup+0x116/0x1f0 [ 294.708626][ T7441] ? __pfx_blk_trace_setup+0x10/0x10 [ 294.708647][ T7441] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.708690][ T7441] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 294.708729][ T7441] blk_trace_ioctl+0x181/0x430 [ 294.708752][ T7441] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 294.708782][ T7441] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 294.708847][ T7441] blkdev_ioctl+0x41d/0x6d0 [ 294.708872][ T7441] ? __pfx_blkdev_ioctl+0x10/0x10 [ 294.708892][ T7441] ? __fget_files+0x3a0/0x420 [ 294.708913][ T7441] ? __fget_files+0x2a/0x420 [ 294.708938][ T7441] ? bpf_lsm_file_ioctl+0x9/0x20 [ 294.708965][ T7441] ? __pfx_blkdev_ioctl+0x10/0x10 [ 294.708995][ T7441] __se_sys_ioctl+0xfc/0x170 [ 294.709027][ T7441] do_syscall_64+0xfa/0xfa0 [ 294.709060][ T7441] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.709092][ T7441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.709115][ T7441] ? clear_bhb_loop+0x60/0xb0 [ 294.709142][ T7441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.709164][ T7441] RIP: 0033:0x7feec658f749 [ 294.709190][ T7441] Code: Unable to access opcode bytes at 0x7feec658f71f. [ 294.709202][ T7441] RSP: 002b:00007feec742f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 294.709225][ T7441] RAX: ffffffffffffffda RBX: 00007feec67e5fa0 RCX: 00007feec658f749 [ 294.709242][ T7441] RDX: 0000200000000380 RSI: 00000000c0481273 RDI: 0000000000000003 [ 294.709256][ T7441] RBP: 00007feec6613f91 R08: 0000000000000000 R09: 0000000000000000 [ 294.709270][ T7441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.709283][ T7441] R13: 00007feec67e6038 R14: 00007feec67e5fa0 R15: 00007feec690fa28 [ 294.709319][ T7441] [ 294.709477][ T7441] Mem-Info: [ 295.013470][ T7441] active_anon:1743 inactive_anon:7 isolated_anon:0 [ 295.013470][ T7441] active_file:8194 inactive_file:264 isolated_file:0 [ 295.013470][ T7441] unevictable:768 dirty:165 writeback:0 [ 295.013470][ T7441] slab_reclaimable:7603 slab_unreclaimable:103321 [ 295.013470][ T7441] mapped:37697 shmem:777 pagetables:3641 [ 295.013470][ T7441] sec_pagetables:0 bounce:0 [ 295.013470][ T7441] kernel_misc_reclaimable:0 [ 295.013470][ T7441] free:121676 free_pcp:46059 free_cma:0 [ 295.060284][ T7441] Node 0 active_anon:8kB inactive_anon:28kB active_file:676kB inactive_file:12kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122900kB dirty:20kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12592kB pagetables:4800kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB [ 295.091577][ T7441] Node 1 active_anon:6964kB inactive_anon:0kB active_file:32100kB inactive_file:1044kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:27888kB dirty:640kB writeback:0kB shmem:1572kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:432kB pagetables:9828kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 295.123208][ T7441] Node 0 DMA free:10156kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:156kB local_pcp:120kB free_cma:0kB [ 295.153824][ T7441] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 295.159860][ T7441] Node 0 DMA32 free:37908kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:28kB active_file:676kB inactive_file:12kB unevictable:1536kB writepending:20kB zspages:0kB present:3129332kB managed:2565140kB mlocked:0kB bounce:0kB free_pcp:23168kB local_pcp:11556kB free_cma:0kB [ 295.193428][ T7441] lowmem_reserve[]: 0 0 0 0 0 [ 295.198481][ T7441] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 295.227836][ T7441] lowmem_reserve[]: 0 0 0 0 0 [ 295.232592][ T7441] Node 1 Normal free:438580kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6964kB inactive_anon:0kB active_file:32100kB inactive_file:1044kB unevictable:1536kB writepending:640kB zspages:4836kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:161456kB local_pcp:76784kB free_cma:0kB [ 295.266835][ T7441] lowmem_reserve[]: 0 0 0 0 0 [ 295.271641][ T7441] Node 0 DMA: 7*4kB (M) 6*8kB (UM) 6*16kB (M) 6*32kB (UM) 1*64kB (M) 2*128kB (UM) 1*256kB (U) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 10156kB [ 295.287713][ T7441] Node 0 DMA32: 1*4kB (M) 38*8kB (ME) 86*16kB (UE) 132*32kB (UME) 120*64kB (UME) 54*128kB (UME) 26*256kB (UME) 9*512kB (M) 6*1024kB (M) 0*2048kB 0*4096kB = 37908kB [ 295.304678][ T7441] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 295.316326][ T7441] Node 1 Normal: 1*4kB (U) 2*8kB (ME) 2*16kB (UE) 0*32kB 2*64kB (UM) 1*128kB (E) 0*256kB 2*512kB (ME) 1*1024kB (E) 1*2048kB (U) 106*4096kB (M) = 438580kB [ 295.332122][ T7441] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 295.341905][ T7441] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 295.351379][ T7441] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 295.360988][ T7441] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 295.370335][ T7441] 10292 total pagecache pages [ 295.375033][ T7441] 1059 pages in swap cache [ 295.379539][ T7441] Free swap = 100688kB [ 295.383722][ T7441] Total swap = 124996kB [ 295.387987][ T7441] 2097051 pages RAM [ 295.391850][ T7441] 0 pages HighMem/MovableOnly [ 295.396630][ T7441] 424124 pages reserved [ 295.400823][ T7441] 0 pages cma reserved