last executing test programs: 34.071563636s ago: executing program 3 (id=556): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0d00000000000000000087f2", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) r1 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x80, {0xa, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x4}]}, 0x24}}, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000680)=@assoc_value, &(0x7f0000000700)=0x8) ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8411, 0x22, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c"}, {0x7fff, 0x10, 0x0, 0x0}], 0x2}) syz_usb_control_io$uac1(r1, &(0x7f0000000180)={0x14, &(0x7f00000003c0)={0x40, 0x10, 0x83, {0x83, 0x2, "2bcff982b0586db06caeeddc90f6f4662e997cd7ed78d8b5337c95fb15c8c87eebc823cbf01f093b350ad8890f35165202709a2195b139ea5459b1c49595935037f10cd36d22de643d13b16e625f0ae3a1411e311bdd0cf4001c76eadadf23465659cf2fd7313f145993cff0512e9b10a3a79d0ba599fcaf1ad4141a8ca51058ca"}}, &(0x7f0000000080)={0x0, 0x3, 0xb, @string={0xb, 0x3, "44d3596b4914d7153b"}}}, &(0x7f0000000600)={0x44, &(0x7f0000000240)={0x20, 0x9, 0x45, "a269dd536dc656059958d8fd973590d22bed686ee4893cdabb1cd78407d0bc674461d09a9a47ed0fff0c8baf7ce29a5c260e1c336eaa40bf9f41d6ca7cc4c0356d79e5df82"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x31}, &(0x7f0000000480)={0x20, 0x81, 0x3, "b43cb6"}, &(0x7f00000004c0)={0x20, 0x82, 0x2, "fbe8"}, &(0x7f0000000540)={0x20, 0x83, 0x2, "125b"}, &(0x7f0000000580)={0x20, 0x84, 0x2, "03a4"}, &(0x7f00000005c0)={0x20, 0x85, 0x3, "81efbb"}}) syz_usb_control_io$uac1(r1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) sendmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)="87e8ae1a40dca7f0ff2478efce8e1c831a44e5b275dc913413ade883c7809f2e7d309efc", 0x24}], 0x1}}], 0x2, 0x0) r5 = dup(r0) r6 = socket(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_usb_control_io$uac1(r1, &(0x7f00000008c0)={0x14, &(0x7f0000000740)={0x40, 0x30, 0xe4, {0xe4, 0xc, "ebc3029682c7f43ee9ccedd2aee162149bbbf8c352be1abe78714b26372fc37d30e6836177c062848e5f81a4a88faa2b59c3c2120927787a9e129cb8338409c07fa6db0270148ed7a92a78c3a22d22e5467620b74ff526576c1fc8a8c6163a0de2099bc7cf5143e83dff9cff95a4e67334bc44152fbfe26d453bf621e7412fb4610de6bf504c50196422becb7fa0cb8ab6f4bbd0773150f351d48b4ef97c108bee40dea3ff7fdd539c348615b1e291ae20098b47b2776f5a3dae010a04589e2f279f0bec0cd116d2c76f1d7fe0368a2a560fd77f58ccf7a18784069c36c996406cc6"}}, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x418}}}, &(0x7f0000000b80)={0x44, &(0x7f0000000900)={0x0, 0x14, 0xa2, "cf1e14ae9ce776469e40101ad25a72afd64aea6d4486ddf269478be8366b7beab559f48038ab084bd131844200c4ae89d01d3bdcfae8335c35db0afdec65ac8df19667c454856c6ef3b7baef7649ce6a3865e2a3b533ade68b99e72ac67b1c928f50c587097307b4e25836a7a44185c83ebf3f10ba4785608cd03885ea5bab6dac46f245be56d5bd13f956dc955cecbabdc78caebc6fd66b2ece4d7dd12a0a45166a"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000a40)={0x20, 0x81, 0x1, '\''}, &(0x7f0000000a80)={0x20, 0x82, 0x1, 'K'}, &(0x7f0000000ac0)={0x20, 0x83, 0x3, "65e2dd"}, &(0x7f0000000b00)={0x20, 0x84, 0x2, "fd46"}, &(0x7f0000000b40)={0x20, 0x85, 0x3, "b87d55"}}) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@random="cfb14e407d33", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0x1, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0x2, 0x6, "081331", 0x9, 0xff, 0x0, @loopback, @loopback, [@fragment={0x3b, 0x0, 0xe, 0x0, 0x0, 0x3, 0x65}]}}}}}}}, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) 30.809994149s ago: executing program 3 (id=573): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) close(r2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000400)) getpid() sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000009060102000000000000000000000000090002007379"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x8f}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x34, r5, 0x917, 0x70bd28, 0x0, {0x1, 0x0, 0xffff}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8}]}, 0x34}, 0x1, 0x620b}, 0x0) 29.743831784s ago: executing program 3 (id=576): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket(0x10, 0x803, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, &(0x7f0000000680)="98"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000040)={0x20, 0x0, &(0x7f0000000380)=[@request_death={0x400c6313}, @decrefs={0x40046307, 0x3}, @acquire], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3000000010000100fcfffffffedbdf250000000016db201f3616e24c81567ebd787e64a431a54aa1cda2ba937e48115931916c913c8d1785676e25f16009d7ce779bb5359f6f91c15b5b33d3aed1b2b7c83820f646a174e1a17d725854b329b901ba03c8b554fe98c440d83c6a242d508d20294de6538b4927aa2594b9654b6b8328c73da766b90de2f04c8accd14c98d0556379e433b0bdbb6e2fa20c91c88e54", @ANYRES32=0x0, @ANYBLOB="002500000000000008002e000300000008001c00", @ANYRES32, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x20004080) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x129a82, 0x0) sendfile(r6, r6, 0x0, 0x8) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x60000, 0x0) read$alg(r7, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)='::,\n-&\xf5\xcc\xd7\x06f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112i\x88\n\x13.\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb\xa7&,\xe9\xa3\'\x91>C\x1b\x15\x87\xeb\xfe\x1c\x9d\\C\xfeI\'\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n:///\x00\x00\x00\x85^\x00\x0f\bu\x01\xab\x8c\x95?\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe4r\x93\xb3\xd3J \x06\x03\xae', 0xfeffffff00000000) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff00000000000905"], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x31, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x40) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x85, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x2000}, 0x90) sendmmsg$inet(r9, &(0x7f0000000780)=[{{&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000140)="a5", 0x1}], 0x1}}], 0x1, 0x20048040) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f00000001c0)={{0xffffffff, 0x1, 0xb, 0x7, 0xf7, 0x5, 0x3d, 0x29, 0x0, 0xc6, 0x19}, {0xd000, 0x1, 0xc, 0x0, 0x40, 0x5, 0x7d, 0x8, 0x58, 0x3, 0x3, 0x1}, {0xa000, 0x3000, 0x10, 0x9, 0x3, 0x7, 0xfe, 0x9, 0x1, 0xa8, 0x5, 0x81}, {0x58000, 0x26000, 0x9, 0x5d, 0x4, 0x42, 0x9, 0xff, 0x3, 0x6, 0xe}, {0xdddd0000, 0x9000, 0x8, 0x3, 0x7, 0xb, 0x9, 0x7f, 0x9e, 0x83, 0xf7, 0x83}, {0x1000, 0x10000, 0x0, 0xa0, 0xb1, 0x8, 0x0, 0xa0, 0x80, 0xf, 0x1, 0xfd}, {0x10000, 0x2, 0x8, 0x0, 0x6, 0x2, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0x0, 0x1000, 0xe, 0x5, 0x2f, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0x4000, 0x30}, {0x4000, 0x86}, 0x80000019, 0x0, 0x26000, 0x242120, 0xb, 0x0, 0xa000, [0xc3, 0x3, 0x5a, 0x100]}) 28.13887055s ago: executing program 3 (id=584): syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) eventfd2(0xe3a1, 0x0) r0 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000100)=0x0) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="00f0", 0x2}], 0x1, 0xd) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff90acedc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x180, 0x0, 0xfffffffffffffff9, [{{0x1, 0x2, 0x3, 0x6, 0x5, 0x3fff, {0x6, 0x9, 0x0, 0xff, 0x0, 0x2, 0x7fffffff, 0xe860, 0x3, 0x8005, 0x3ff, r5, r6, 0x4, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0x9, ':-(\\\xc9\x80\x00\x00\x00\xc3\x00\x00\xf39}\xd8mM\x92\x8d$\xd3\xa4a\xb6\x02E\x89\x85V\xc6\x00\x00\x00\x00\x00\x00+\x13;\x00\x00\x00'}}, {{0x2, 0x3, 0xffffffffffff7c32, 0xff, 0x3, 0x8, {0x6, 0x8001, 0x3, 0x4, 0xfffffffffffffffa, 0x9, 0x7, 0x6, 0x8000, 0xc000, 0x6, 0x0, r6, 0x4, 0x4}}, {0x1, 0x3, 0xa, 0x1026, '/dev/fuse\x00'}}]}, 0x0, 0x0, 0x0}) capget(&(0x7f00000005c0)={0x19980330, r7}, &(0x7f0000000780)={0x9, 0x5b2c153, 0x9, 0x313a, 0x6, 0x1}) getdents64(r8, &(0x7f0000000100)=""/134, 0x86) syz_fuse_handle_req(r3, &(0x7f0000010ec0)="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", 0x2000, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) readv(r9, &(0x7f0000000580)=[{&(0x7f0000000540)=""/42, 0x2a}], 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)=""/219, 0xdb}, {0x0}], 0x2, 0x1e}) r10 = syz_clone(0x1000, &(0x7f0000000440)="63fb243411e01253ca14eaf98b096e0d455afada4b02612517473f795adfeba0001950f929f32383bd57b61ea82547ae8e7c60bfdfae8620c6d0de1eeb15207e42a7f6ba6fa0695b5c9c03deb18c68cd28ed92be7c2bb409f820a801514fc243a7044ee28a3a72c7b5e3ea8bf714281e0462", 0x72, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f00000005c0)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000600)=0x0) r12 = gettid() syz_clone3(&(0x7f0000000700)={0x1004000, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200), {0x3}, &(0x7f0000000e00)=""/4096, 0x1000, &(0x7f0000000380)=""/139, &(0x7f00000006c0)=[r10, r11, r12], 0x3}, 0x58) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) memfd_secret(0x0) 26.965871086s ago: executing program 3 (id=588): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="32b55754ba8d579975fcd1e207c941f0e74b795ac62e96faf21b17982acd6be0a40f3d58f0d92f09296d4937fd231c79b9a62669a899e3af928fe451f33ab153664833e997421245cf2c2cf6b607c86e10326b3d0c47b7d5fbae2fa677b942c335069cfae5b7aa63ba557bdbeca2ec546b4f663d17ce0207c785661df09d6275b76aa964b545cbc80d705d67142f5d6d6724dfded6e81d011d", @ANYBLOB="1c00000004"], 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000000c0)=0x2009, 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x240008d4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x1c) accept4$inet(r2, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10, 0x80800) sendmsg$tipc(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x44) 26.212836635s ago: executing program 3 (id=592): socket$netlink(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)='\x00\x00\x00\x00\x00\x00 \x00', 0x8) r1 = accept(r0, 0x0, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000500)=[{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000003800)="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", 0x1000}, {&(0x7f0000000180)="cf", 0x1}], 0x3, 0x0, 0x0, 0x800}], 0x1, 0x20008000) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0xc) syz_usb_connect(0x0, 0x62, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724040501", @ANYRES8=r2], 0x0) 25.806390844s ago: executing program 32 (id=592): socket$netlink(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)='\x00\x00\x00\x00\x00\x00 \x00', 0x8) r1 = accept(r0, 0x0, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000500)=[{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000003800)="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", 0x1000}, {&(0x7f0000000180)="cf", 0x1}], 0x3, 0x0, 0x0, 0x800}], 0x1, 0x20008000) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0xc) syz_usb_connect(0x0, 0x62, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724040501", @ANYRES8=r2], 0x0) 12.709887613s ago: executing program 2 (id=636): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f0000000200)={0x74, 0x0, 0x10}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r10, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000300)=ANY=[@ANYBLOB='_\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000003000000210001800400028008000300fdffffff0e0001"], 0x68}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$NL80211_CMD_RADAR_DETECT(r8, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)={0x54, 0x0, 0x604, 0x9, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x401}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ec}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x210}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x1) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r12, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) setfsuid(0xffffffffffffffff) 11.305861487s ago: executing program 4 (id=642): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6(0x2d, 0x806, 0x0) socket(0x25, 0x80000, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, 0x4) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x202, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000024c0)=ANY=[@ANYBLOB="940200001900010000000000fcdbdf2500000000000023000000000040000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000049e9835b00000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa000000000102000000"], 0x294}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x8}, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x1, {0x3, @sliced={0x1, [0x12e, 0x1fd5, 0x7, 0x0, 0xfff9, 0x80, 0x8000, 0x2, 0x6, 0x753, 0x6, 0x8, 0x5, 0x1ea, 0x1, 0x2, 0x8001, 0x0, 0x5, 0x401, 0x2, 0x0, 0x9, 0x8, 0x5, 0x0, 0x6, 0x9, 0x0, 0x2, 0x400, 0x0, 0xfffb, 0x2, 0x66, 0x4, 0xb, 0x4, 0x2, 0xff, 0x8, 0x39, 0x1, 0x1, 0xe05, 0x7, 0x6, 0x80], 0x2}}, 0x6b}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000300)='illinois', 0x8) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020600) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) renameat2(r6, &(0x7f00000002c0)='./file0\x00', r6, &(0x7f00000003c0)='./bus\x00', 0x0) 11.209225471s ago: executing program 2 (id=643): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xb}, 0x94) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r7 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r7, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(r7, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="0f3166b842000f00d864660f38f61bb9a00000000f01c53e0f070f01ca0f0130670f01c2f2360f217a0f07", 0x2b}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r8, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0xb00) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x13, r8, 0x0) clock_settime(0x17, &(0x7f0000000240)) r9 = socket$xdp(0x2c, 0x3, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r10, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) 10.159960583s ago: executing program 2 (id=646): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket(0x10, 0x803, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, &(0x7f0000000680)="98"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000040)={0x20, 0x0, &(0x7f0000000380)=[@request_death={0x400c6313}, @decrefs={0x40046307, 0x3}, @acquire], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3000000010000100fcfffffffedbdf250000000016db201f3616e24c81567ebd787e64a431a54aa1cda2ba937e48115931916c913c8d1785676e25f16009d7ce779bb5359f6f91c15b5b33d3aed1b2b7c83820f646a174e1a17d725854b329b901ba03c8b554fe98c440d83c6a242d508d20294de6538b4927aa2594b9654b6b8328c73da766b90de2f04c8accd14c98d0556379e433b0bdbb6e2fa20c91c88e54", @ANYRES32=0x0, @ANYBLOB="002500000000000008002e000300000008001c00", @ANYRES32, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x20004080) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x129a82, 0x0) sendfile(r6, r6, 0x0, 0x8) r7 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x60000, 0x0) read$alg(r7, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)='::,\n-&\xf5\xcc\xd7\x06f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112i\x88\n\x13.\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb\xa7&,\xe9\xa3\'\x91>C\x1b\x15\x87\xeb\xfe\x1c\x9d\\C\xfeI\'\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n:///\x00\x00\x00\x85^\x00\x0f\bu\x01\xab\x8c\x95?\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe4r\x93\xb3\xd3J \x06\x03\xae', 0xfeffffff00000000) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff00000000000905"], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x31, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x40) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x85, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x2000}, 0x90) sendmmsg$inet(r9, &(0x7f0000000780)=[{{&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000140)="a5", 0x1}], 0x1}}], 0x1, 0x20048040) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f00000001c0)={{0xffffffff, 0x1, 0xb, 0x7, 0xf7, 0x5, 0x3d, 0x29, 0x0, 0xc6, 0x19}, {0xd000, 0x1, 0xc, 0x0, 0x40, 0x5, 0x7d, 0x8, 0x58, 0x3, 0x3, 0x1}, {0xa000, 0x3000, 0x10, 0x9, 0x3, 0x7, 0xfe, 0x9, 0x1, 0xa8, 0x5, 0x81}, {0x58000, 0x26000, 0x9, 0x5d, 0x4, 0x42, 0x9, 0xff, 0x3, 0x6, 0xe}, {0xdddd0000, 0x9000, 0x8, 0x3, 0x7, 0xb, 0x9, 0x7f, 0x9e, 0x83, 0xf7, 0x83}, {0x1000, 0x10000, 0x0, 0xa0, 0xb1, 0x8, 0x0, 0xa0, 0x80, 0xf, 0x1, 0xfd}, {0x10000, 0x2, 0x8, 0x0, 0x6, 0x2, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0x0, 0x1000, 0xe, 0x5, 0x2f, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0x4000, 0x30}, {0x4000, 0x86}, 0x80000019, 0x0, 0x26000, 0x242120, 0xb, 0x0, 0xa000, [0xc3, 0x3, 0x5a, 0x100]}) 9.126697836s ago: executing program 0 (id=648): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x54, r1, 0x303, 0x80000000, 0x25dfdbfd, {0x3d}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x880}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x7, &(0x7f0000000080)=@raw=[@exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @generic={0xee, 0x8, 0x0, 0x4ab1, 0x3a}, @map_fd={0x18, 0xa, 0x1, 0x0, 0x1}, @map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ff00000}], &(0x7f0000000200)='GPL\x00', 0x7, 0x72, &(0x7f0000000240)=""/114, 0x41100, 0x22, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xc, 0x10001, 0x10000000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0x1, 0xffffffffffffffff], &(0x7f0000000380)=[{0x3, 0x5, 0xe, 0xb}, {0x5, 0x1, 0x1, 0x3}], 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYRESHEX=r2], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x8}, 0x10, 0x0, r2}, 0x94) 8.892555483s ago: executing program 0 (id=649): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000380)={0x8, {{0x2, 0x4e20, @private=0xa010101}}, 0x1, 0x1, [{{0x2, 0x4e24, @private=0xa010100}}]}, 0x110) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r4, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6tnl0\x00', r4, 0x2f, 0x7, 0xf7, 0x6, 0x44, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x8, 0x7, 0x7}}) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x74cf, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000280), &(0x7f00000001c0)) io_uring_enter(r5, 0x2ded, 0xef92, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f00000000c0)={[0x8]}, 0x8) 8.238266097s ago: executing program 2 (id=650): syz_emit_ethernet(0x52, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x0) fsopen(&(0x7f0000000180)='vxfs\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffffffffffe}, 0x0) listen(0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r5, 0xf502, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000073, 0x0, 0x85}]}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sync() socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'netdevsim0\x00'}) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/18, @ANYRESOCT=r2, @ANYRES32, @ANYBLOB="0000000ed2eed7580b0000000000000000"], 0x50) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f00000002c0)={{0x11, 0x8}, 'port0\x00', 0x80, 0x80010, 0x9, 0x1, 0x7, 0x5, 0x4, 0x0, 0x2, 0x10}) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 8.150642151s ago: executing program 4 (id=651): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x40, 0x15, 0x42, 0x20, 0x5a9, 0x1550, 0xe4bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8e, 0xc4, 0x6f}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000600)={0x0, 0x5, 0x10}, 0xc) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r1, 0x0, 0xffff, 0x2) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/37, 0x25, 0x60, &(0x7f0000000140)={0xa, 0x4e24, 0x142f, @local, 0x5}, 0x1c) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x6, 0x401) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.588190738s ago: executing program 0 (id=652): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x6, &(0x7f0000000380)=[{0x4, 0x1, 0xa, 0x7}, {0x100, 0xa, 0x9, 0xffffffff}, {0x7, 0x9, 0x10, 0x8}, {0x81, 0x2, 0xfd, 0x9}, {0x9, 0x0, 0x94, 0x2}, {0x4, 0x8, 0x5, 0x5}]}) read(0xffffffffffffffff, &(0x7f0000000400)=""/169, 0xa9) (async, rerun: 64) r0 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r0, 0x0, 0x0) (async, rerun: 64) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 64) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x98}], 0x1, 0x800) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x1bd94, 0x2000, 0x1, 0x80000204}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async, rerun: 64) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="f8000000160001000000000000000000e0000d0000000000630f4497cd00000000000000007f00000100000000000000000000000000000000000000020000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ac1e0101000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000ffffffff"], 0xf8}}, 0x20000000) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0xc, 0x2}]}, 0x10) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x15, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0x10}) io_uring_enter(r3, 0x47bc, 0x20, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x400, 0x40, 0x550, 0x1e0, 0x1000, 0x0, 0x1, 0x0, {0x0, 0x9}, {0x350, 0x20002, 0xfffffffd}, {0xf4ef, 0x0, 0x3}, {0x4, 0x0, 0x7fe}, 0x3, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x9ac4}}, './file0\x00'}) (async) r8 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) (async) r9 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@rand_addr=' \x01\x00', @in=@empty, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x5, 0x80000000, 0x0, 0x7fffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010100, 0x350a, 0x4, 0x3, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) (async) connect$inet6(r9, &(0x7f0000000000)={0xa, 0xfdff, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async) write$binfmt_elf32(r8, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x69) (async) close(r8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000300)={0x0, 0x5}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000580)={r10, 0x1c, &(0x7f0000000540)=[@in6={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfff}]}, &(0x7f0000000600)=0x10) (async) sendto$rxrpc(r7, 0x0, 0x0, 0x0, 0x0, 0x0) 7.309518365s ago: executing program 0 (id=654): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e1c}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ftruncate(r3, 0x100000001) eventfd(0x38) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$can_raw(0x1d, 0x3, 0x1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 6.574366487s ago: executing program 5 (id=655): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0d00000000000000000087f2", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) r1 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x80, {0xa, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x4}]}, 0x24}}, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000680)=@assoc_value, &(0x7f0000000700)=0x8) ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8411, 0x22, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c"}, {0x7fff, 0x10, 0x0, 0x0}], 0x2}) syz_usb_control_io$uac1(r1, &(0x7f0000000180)={0x14, &(0x7f00000003c0)={0x40, 0x10, 0x83, {0x83, 0x2, "2bcff982b0586db06caeeddc90f6f4662e997cd7ed78d8b5337c95fb15c8c87eebc823cbf01f093b350ad8890f35165202709a2195b139ea5459b1c49595935037f10cd36d22de643d13b16e625f0ae3a1411e311bdd0cf4001c76eadadf23465659cf2fd7313f145993cff0512e9b10a3a79d0ba599fcaf1ad4141a8ca51058ca"}}, &(0x7f0000000080)={0x0, 0x3, 0xb, @string={0xb, 0x3, "44d3596b4914d7153b"}}}, &(0x7f0000000600)={0x44, &(0x7f0000000240)={0x20, 0x9, 0x45, "a269dd536dc656059958d8fd973590d22bed686ee4893cdabb1cd78407d0bc674461d09a9a47ed0fff0c8baf7ce29a5c260e1c336eaa40bf9f41d6ca7cc4c0356d79e5df82"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x31}, &(0x7f0000000480)={0x20, 0x81, 0x3, "b43cb6"}, &(0x7f00000004c0)={0x20, 0x82, 0x2, "fbe8"}, &(0x7f0000000540)={0x20, 0x83, 0x2, "125b"}, &(0x7f0000000580)={0x20, 0x84, 0x2, "03a4"}, &(0x7f00000005c0)={0x20, 0x85, 0x3, "81efbb"}}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) sendmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)="87e8ae1a40dca7f0ff2478efce8e1c831a44e5b275dc913413ade883c7809f2e7d309efc", 0x24}], 0x1}}], 0x2, 0x0) r5 = dup(r0) r6 = socket(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_usb_control_io$uac1(r1, &(0x7f00000008c0)={0x14, &(0x7f0000000740)={0x40, 0x30, 0xe4, {0xe4, 0xc, "ebc3029682c7f43ee9ccedd2aee162149bbbf8c352be1abe78714b26372fc37d30e6836177c062848e5f81a4a88faa2b59c3c2120927787a9e129cb8338409c07fa6db0270148ed7a92a78c3a22d22e5467620b74ff526576c1fc8a8c6163a0de2099bc7cf5143e83dff9cff95a4e67334bc44152fbfe26d453bf621e7412fb4610de6bf504c50196422becb7fa0cb8ab6f4bbd0773150f351d48b4ef97c108bee40dea3ff7fdd539c348615b1e291ae20098b47b2776f5a3dae010a04589e2f279f0bec0cd116d2c76f1d7fe0368a2a560fd77f58ccf7a18784069c36c996406cc6"}}, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x418}}}, &(0x7f0000000b80)={0x44, &(0x7f0000000900)={0x0, 0x14, 0xa2, "cf1e14ae9ce776469e40101ad25a72afd64aea6d4486ddf269478be8366b7beab559f48038ab084bd131844200c4ae89d01d3bdcfae8335c35db0afdec65ac8df19667c454856c6ef3b7baef7649ce6a3865e2a3b533ade68b99e72ac67b1c928f50c587097307b4e25836a7a44185c83ebf3f10ba4785608cd03885ea5bab6dac46f245be56d5bd13f956dc955cecbabdc78caebc6fd66b2ece4d7dd12a0a45166a"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000a40)={0x20, 0x81, 0x1, '\''}, &(0x7f0000000a80)={0x20, 0x82, 0x1, 'K'}, &(0x7f0000000ac0)={0x20, 0x83, 0x3, "65e2dd"}, &(0x7f0000000b00)={0x20, 0x84, 0x2, "fd46"}, &(0x7f0000000b40)={0x20, 0x85, 0x3, "b87d55"}}) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@random="cfb14e407d33", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0x1, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0x2, 0x6, "081331", 0x9, 0xff, 0x0, @loopback, @loopback, [@fragment={0x3b, 0x0, 0xe, 0x0, 0x0, 0x3, 0x65}]}}}}}}}, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) 5.899197351s ago: executing program 0 (id=656): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0xfffd, 0x2, 0x3, 0xfff, 0x6, 0x401, 0x4]}}]}]}]}, 0x38}}, 0x0) unshare(0x20000400) r3 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x200082, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{0x40000001, 0x5, 0x7, 0x35e, 0x7fffffff, 0x5, 0x2}, {0x80000000, 0x0, 0x5, 0x6, 0x9, 0x5240, 0x3}]}) r6 = syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r8 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r8, 0x4) r9 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r9, 0x1) r10 = landlock_create_ruleset(&(0x7f0000000040)={0x408, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r10, 0x0) r11 = landlock_create_ruleset(&(0x7f0000000040)={0x14, 0x3}, 0x18, 0x0) landlock_restrict_self(r11, 0x0) r12 = syz_clone(0x80, 0x0, 0x5d, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r13 = landlock_create_ruleset(&(0x7f0000000000)={0x19a1, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r13, 0x6) rt_tgsigqueueinfo(r12, r12, 0x4, &(0x7f0000000140)={0x2b, 0x5, 0xfffffff9}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r15, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x1c, r14, 0x801, 0x3fd, 0x0, {{}, {@val={0x8, 0x3, r16}, @void}}}, 0x1c}}, 0x0) syz_usb_disconnect(r6) read(r7, 0x0, 0x0) 5.12883606s ago: executing program 1 (id=657): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="e00000001300010026bd7000ffdbdf2573686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffff03000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000412000"/210], 0xe0}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 4.76366505s ago: executing program 2 (id=658): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008095) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/71, 0x47}], 0x1) r4 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x7fff, &(0x7f0000000240)="12d6cacc400cb28384641a92606ff1d67f7718dadaa571f32ee2eb179974146cb14384e0e9a430de36da9cfa0941cbdb45400dbbf771a9f0d840b73de0cb08d1d3be1afc468f2a26a39cdfba80aa009e0b6b4bab31776e6f4b3cbe471b323c3e805335edbad98b115636442e777dce7bc27e899b8bc13ebd3a9b22f3813b493bcddc5ecc46eada6853") ptrace$setregset(0x4205, r4, 0x1, &(0x7f0000000000)={&(0x7f0000000100)="023a3b32a8530d0648444f138d9c176b04f0f91de6b9fe513adb984d", 0x1c}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, [@map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000000)='syzkaller\x00', 0xb, 0xff5, &(0x7f00000013c0)=""/4085}, 0x94) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101000000090400000302060000052406000005240000000d240f01000000000000000000090582"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.054084321s ago: executing program 4 (id=659): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async) r2 = mq_open(&(0x7f0000001080)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x44, &(0x7f0000000040)={0x1294, 0x2, 0x5}) mq_getsetattr(r2, &(0x7f0000000000)={0x800, 0x4, 0x9, 0x9a}, 0x0) (async) mq_timedreceive(r2, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0) (async) mq_timedreceive(r2, &(0x7f0000000080)=""/87, 0x57, 0x1000002, 0x0) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x180, 0x2, 0x10, 0xf1, 0x100000001, 0x1, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbd9], 0xffff1001, 0x43100}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x28}}], 0x1, 0x854) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x7f}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r8 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_current(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="7065726d68617420d3"], 0x25) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0xeeee8000, 0x202}) (async) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x1, 0x5, 0x75, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x4, 0x6, 0x5, 0x7f, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x87, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0x0, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x18227000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x42, 0x70}, {0xdddd0000, 0xa000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x91}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.050268151s ago: executing program 5 (id=660): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket(0x10, 0x803, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, &(0x7f0000000680)="98"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000040)={0x20, 0x0, &(0x7f0000000380)=[@request_death={0x400c6313}, @decrefs={0x40046307, 0x3}, @acquire], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3000000010000100fcfffffffedbdf250000000016db201f3616e24c81567ebd787e64a431a54aa1cda2ba937e48115931916c913c8d1785676e25f16009d7ce779bb5359f6f91c15b5b33d3aed1b2b7c83820f646a174e1a17d725854b329b901ba03c8b554fe98c440d83c6a242d508d20294de6538b4927aa2594b9654b6b8328c73da766b90de2f04c8accd14c98d0556379e433b0bdbb6e2fa20c91c88e54", @ANYRES32=0x0, @ANYBLOB="002500000000000008002e000300000008001c00", @ANYRES32, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x20004080) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x129a82, 0x0) sendfile(r6, r6, 0x0, 0x8) r7 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x60000, 0x0) read$alg(r7, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)='::,\n-&\xf5\xcc\xd7\x06f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112i\x88\n\x13.\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb\xa7&,\xe9\xa3\'\x91>C\x1b\x15\x87\xeb\xfe\x1c\x9d\\C\xfeI\'\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n:///\x00\x00\x00\x85^\x00\x0f\bu\x01\xab\x8c\x95?\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe4r\x93\xb3\xd3J \x06\x03\xae', 0xfeffffff00000000) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff00000000000905"], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x31, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x40) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x85, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x2000}, 0x90) sendmmsg$inet(r9, &(0x7f0000000780)=[{{&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000140)="a5", 0x1}], 0x1}}], 0x1, 0x20048040) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f00000001c0)={{0xffffffff, 0x1, 0xb, 0x7, 0xf7, 0x5, 0x3d, 0x29, 0x0, 0xc6, 0x19}, {0xd000, 0x1, 0xc, 0x0, 0x40, 0x5, 0x7d, 0x8, 0x58, 0x3, 0x3, 0x1}, {0xa000, 0x3000, 0x10, 0x9, 0x3, 0x7, 0xfe, 0x9, 0x1, 0xa8, 0x5, 0x81}, {0x58000, 0x26000, 0x9, 0x5d, 0x4, 0x42, 0x9, 0xff, 0x3, 0x6, 0xe}, {0xdddd0000, 0x9000, 0x8, 0x3, 0x7, 0xb, 0x9, 0x7f, 0x9e, 0x83, 0xf7, 0x83}, {0x1000, 0x10000, 0x0, 0xa0, 0xb1, 0x8, 0x0, 0xa0, 0x80, 0xf, 0x1, 0xfd}, {0x10000, 0x2, 0x8, 0x0, 0x6, 0x2, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0x0, 0x1000, 0xe, 0x5, 0x2f, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0x4000, 0x30}, {0x4000, 0x86}, 0x80000019, 0x0, 0x26000, 0x242120, 0xb, 0x0, 0xa000, [0xc3, 0x3, 0x5a, 0x100]}) 3.598373941s ago: executing program 4 (id=661): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6(0x2d, 0x806, 0x0) socket(0x25, 0x80000, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, 0x4) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x202, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000024c0)=ANY=[@ANYBLOB="940200001900010000000000fcdbdf2500000000000023000000000040000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000049e9835b00000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa000000000102000000"], 0x294}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x8}, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x1, {0x3, @sliced={0x1, [0x12e, 0x1fd5, 0x7, 0x0, 0xfff9, 0x80, 0x8000, 0x2, 0x6, 0x753, 0x6, 0x8, 0x5, 0x1ea, 0x1, 0x2, 0x8001, 0x0, 0x5, 0x401, 0x2, 0x0, 0x9, 0x8, 0x5, 0x0, 0x6, 0x9, 0x0, 0x2, 0x400, 0x0, 0xfffb, 0x2, 0x66, 0x4, 0xb, 0x4, 0x2, 0xff, 0x8, 0x39, 0x1, 0x1, 0xe05, 0x7, 0x6, 0x80], 0x2}}, 0x6b}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000300)='illinois', 0x8) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x3, 0x9, @mcast1, 0xfffffffa}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020600) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) renameat2(r6, &(0x7f00000002c0)='./file0\x00', r6, &(0x7f00000003c0)='./bus\x00', 0x0) 3.418036752s ago: executing program 1 (id=662): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0, 0xffe0}}, 0xfc36) 2.595783277s ago: executing program 0 (id=663): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfff5, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c) shutdown(r1, 0x1) sendto$inet6(r1, &(0x7f0000000540)="1a", 0x1, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) close(0x3) r2 = syz_open_dev$I2C(&(0x7f00000001c0), 0x1, 0x402) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x5c, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x7, 0x3ff, 0xe432, 0x2, 0xdfbc, 0x8}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44004}, 0x0) r5 = epoll_create1(0x80000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x14, &(0x7f0000000080), 0x4) fcntl$dupfd(r6, 0x406, r5) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000580)={0x10000001}) r8 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000003540)={0x20002008}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x0}) 2.348619923s ago: executing program 1 (id=664): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x60, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x2c, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x1}, @TCA_FQ_CODEL_FLOWS={0x5, 0x5, 0x7ffffffe}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xd}, @TCA_FQ_CODEL_INTERVAL={0xffffffdd, 0x3, 0x9}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x5}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_getnetconf={0x24, 0x52, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0x7d86}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x44) 2.182478858s ago: executing program 5 (id=665): bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0xa, 0x0, @val=@netfilter={0xa, 0x1, 0x4652}}, 0x20) (async, rerun: 64) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 64) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000006c0)={0x77774002, 0x1b000, 0x22}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x8000000, 0x10000}) (async, rerun: 64) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0xdddd0000, 0x10000}) (async, rerun: 64) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x480d0) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x14, 0x0, 0x0}) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x5) (async) r6 = socket$inet6(0x10, 0x3, 0x0) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000004c0)=@ipv4_newaddr={0x60, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x18, 0x0, 0xcb, r9}, [@IFA_LABEL={0x14, 0x3, 'ip6gre0\x00'}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LOCAL={0x8, 0x2, @remote}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_CACHEINFO={0x14, 0x6, {0x8, 0x2, 0x48e0}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) (async, rerun: 64) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async, rerun: 64) sendmmsg(r5, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200", @ANYRES8=r5], 0x108}}], 0x2, 0xc040) (async) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'bond0\x00'}) (async) r11 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r11, 0xc0305710, &(0x7f0000000100)={0x1, 0x7c, 0xfffffffffffffffd, 0x1, 0xffffffff}) (async) setsockopt$packet_int(r10, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) 1.995961246s ago: executing program 1 (id=666): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8a00fe00000300bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 1.935624988s ago: executing program 5 (id=667): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)={0x1dc, r2, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x1b8, 0x8, 0x0, 0x1, [{0xbc, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @mcast1, 0x20}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1171ee8da334a5099295af009a5d237a7f4102f01f0000430600001a00"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a549"}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 1.820371988s ago: executing program 1 (id=668): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r5, 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r5, 0x8008f513, &(0x7f0000000080)) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000200)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) flock(r6, 0x2) 1.73302703s ago: executing program 5 (id=669): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x408400) openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0), 0x610300, 0x0) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000140)={0x6, 0xa20e, 0x0, 0x0, 0x5989, 0x2}) (async) move_pages(r2, 0x0, 0x0, 0x0, 0x0, 0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) (async) r5 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) (async) r6 = fsmount(r5, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000600)={'geneve0\x00', 0x400}) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2b, 'cpuset'}]}, 0xe) (async, rerun: 32) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000380)="ebe3a0e961837b796cfd1647e2080000000000000080b3720022205e81f4a7f71c197baae1efd7e8004a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000006c0)="e8710e444d50a969ff678371e3214aeee71dee3819271482a4975a52c18b9b8b4db3945d1032005eabe97b4dc33a47d3a158da98255ccdd4c15eb6c9857345444d8456d30026b433a2efdd5b00186f35cdcdb93a4722bf356a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e8927d2a8103ef2f4b93766b756b66f74f46cf801704d27a8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511ce678c0bb8e26d7b48241847bf9e343ef4e55d45e2a0000000000000000000", 0xfffffe7f}, {&(0x7f0000000400)="04c6a9c756754e10ed8d88c06d7a674db97cd0e21437530a3945ac896fa7f8e368f87de990e40a896805e49ce1e13103d82fffe82237f587e63d95e01ef451eaba2dd01c56e7f23c1fcccbea54dae8e295f2e533e4a34175026a9964eebc1aaae05e44a19a27bee2f591abe2f456448754670a7c3e2e4b47a71bc7"}, {&(0x7f0000000300)}], 0x3}], 0x1, 0x40800) (rerun: 32) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) process_mrelease(0xffffffffffffffff, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e24, @multicast1}}, 0x2, 0x5, 0x9, 0x3, 0x1ff}, &(0x7f0000000480)=0x98) (async) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) (async, rerun: 64) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000140)={r8, 0x401, 0x3}, &(0x7f0000000180)=0x8) (rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="2703022b590200c9000000", 0xb}], 0x1}, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000680), 0x0, 0x0) 1.109548831s ago: executing program 2 (id=670): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0d00000000000000000087f2", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) r1 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x80, {0xa, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x4}]}, 0x24}}, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000680)=@assoc_value, &(0x7f0000000700)=0x8) ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8411, 0x22, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c"}, {0x7fff, 0x10, 0x0, 0x0}], 0x2}) syz_usb_control_io$uac1(r1, &(0x7f0000000180)={0x14, &(0x7f00000003c0)={0x40, 0x10, 0x83, {0x83, 0x2, "2bcff982b0586db06caeeddc90f6f4662e997cd7ed78d8b5337c95fb15c8c87eebc823cbf01f093b350ad8890f35165202709a2195b139ea5459b1c49595935037f10cd36d22de643d13b16e625f0ae3a1411e311bdd0cf4001c76eadadf23465659cf2fd7313f145993cff0512e9b10a3a79d0ba599fcaf1ad4141a8ca51058ca"}}, &(0x7f0000000080)={0x0, 0x3, 0xb, @string={0xb, 0x3, "44d3596b4914d7153b"}}}, &(0x7f0000000600)={0x44, &(0x7f0000000240)={0x20, 0x9, 0x45, "a269dd536dc656059958d8fd973590d22bed686ee4893cdabb1cd78407d0bc674461d09a9a47ed0fff0c8baf7ce29a5c260e1c336eaa40bf9f41d6ca7cc4c0356d79e5df82"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x31}, &(0x7f0000000480)={0x20, 0x81, 0x3, "b43cb6"}, &(0x7f00000004c0)={0x20, 0x82, 0x2, "fbe8"}, &(0x7f0000000540)={0x20, 0x83, 0x2, "125b"}, &(0x7f0000000580)={0x20, 0x84, 0x2, "03a4"}, &(0x7f00000005c0)={0x20, 0x85, 0x3, "81efbb"}}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) sendmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)="87e8ae1a40dca7f0ff2478efce8e1c831a44e5b275dc913413ade883c7809f2e7d309efc", 0x24}], 0x1}}], 0x2, 0x0) r5 = dup(r0) r6 = socket(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_usb_control_io$uac1(r1, &(0x7f00000008c0)={0x14, &(0x7f0000000740)={0x40, 0x30, 0xe4, {0xe4, 0xc, "ebc3029682c7f43ee9ccedd2aee162149bbbf8c352be1abe78714b26372fc37d30e6836177c062848e5f81a4a88faa2b59c3c2120927787a9e129cb8338409c07fa6db0270148ed7a92a78c3a22d22e5467620b74ff526576c1fc8a8c6163a0de2099bc7cf5143e83dff9cff95a4e67334bc44152fbfe26d453bf621e7412fb4610de6bf504c50196422becb7fa0cb8ab6f4bbd0773150f351d48b4ef97c108bee40dea3ff7fdd539c348615b1e291ae20098b47b2776f5a3dae010a04589e2f279f0bec0cd116d2c76f1d7fe0368a2a560fd77f58ccf7a18784069c36c996406cc6"}}, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x418}}}, &(0x7f0000000b80)={0x44, &(0x7f0000000900)={0x0, 0x14, 0xa2, "cf1e14ae9ce776469e40101ad25a72afd64aea6d4486ddf269478be8366b7beab559f48038ab084bd131844200c4ae89d01d3bdcfae8335c35db0afdec65ac8df19667c454856c6ef3b7baef7649ce6a3865e2a3b533ade68b99e72ac67b1c928f50c587097307b4e25836a7a44185c83ebf3f10ba4785608cd03885ea5bab6dac46f245be56d5bd13f956dc955cecbabdc78caebc6fd66b2ece4d7dd12a0a45166a"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000a40)={0x20, 0x81, 0x1, '\''}, &(0x7f0000000a80)={0x20, 0x82, 0x1, 'K'}, &(0x7f0000000ac0)={0x20, 0x83, 0x3, "65e2dd"}, &(0x7f0000000b00)={0x20, 0x84, 0x2, "fd46"}, &(0x7f0000000b40)={0x20, 0x85, 0x3, "b87d55"}}) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@random="cfb14e407d33", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0x1, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0x2, 0x6, "081331", 0x9, 0xff, 0x0, @loopback, @loopback, [@fragment={0x3b, 0x0, 0xe, 0x0, 0x0, 0x3, 0x65}]}}}}}}}, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) 883.979057ms ago: executing program 5 (id=671): write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="3a2f080000030300010000000000450a00280068000005069078ac1e0301ffffffff4e204e21", @ANYRES32=0x41424344], 0xfce) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905"], 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(0x0, 0xf01c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000f0000001c0007800c000400002e0000000000000c0003002d"], 0x30}}, 0x0) write$P9_RVERSION(r0, &(0x7f0000002200)=ANY=[], 0xfffffcd9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)=0x9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000440)={0x0, 0x79a8, 0x20, 0x5, 0x296}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000080)=0x200000000) 785.788383ms ago: executing program 1 (id=672): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$xdp(0x2c, 0x3, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000002000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e", @ANYRESDEC=0x0], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="34040000", @ANYRES16=r1, @ANYBLOB="df4800000000fddbdf250c0000000c0003800800038004000180180001801400020064756d6d79300000000000000000000098020380c6000400de2c3645fb5604118f9f23e4a35aecffd463b3451bd614aca14e01fe7abaf793196e21ac423b44230782d24e36691a0441a0273e942679e9a4690a31d9366bfd281eab6641ec951c085bc96df66b2ef54ca7e327e0bd9bed4d95c75847dce58391b019d688ee54465d5010193016e9a4156198faea0760bcd9cf66e3d4df5c5985c2ac4dd50e06b71be959451744c077679db78ca0961b15ca276d4055292970802c36563ce1597776c7201c54b59ae1817355dd9f03fcc5a0e93a8d05af7518230e00000800020001800000b60004006437a181719e09509d18a6fa0629d518e916218c219781006283d0d28901fca799fe8fa155decbad70ca4f49487e77eb249b8c137cd215bad947d48fed5630f0aebf62c86924df30cd0a7e15707ec9308d6c9b5d4273035f3fdf760fe02d93ef7630d80fe2483c02089ccf77f215f75db8dce1dffba1c084bd4ad94198b32e9204b96fef2164b985547f35f78a192402d20f4719045859663de05895e70d5593b718214e519009fa8f02c70e199c9c4ca4660000080002000300000008000200be0e000088000500580b33040da263c614a56bf3476907f7489ea23c9ec9bd15a60767991f667c80c2332120291271790fcdf0b17487a76b42de82c6548d64b6fe305bd816e17e71bf0efab5794b3d8a2e9d58b8e3ef45f401db1b6bcc6d00ca00e38fb985e29003c95ab82c0e71b37c26d6a2e07b53dbd0a00eda25a6822dffe449ebf9fd1f31061f2b0de16c000380040001802400018008000100aa0d00000800010004000000040003000b00020064756d6d79300000400001800b00020064756d6d793000000800010027000000060002005e0000000c000200657468746f6f6c0008000100f3ffffff0b00020064756d6d7930000008000200ff07000064000380080002000200000057000400877cb4a0d4e2a5b9f7322c86cbb34d57dae83482206101f301baa0b0e4ddcb2f52567452ab6aec64b7a939969369674982b824fc78d9cca6c017585b86c79b634472a16272bdb64b45325cf8c2313676976c05000001038021000400715b48a123aae123785957d9a137469eabdc2b81eb11b678ec778c1b0900000008000200060000000600020000000000680003801c000180040003000c000200657468746f6f6c000800010002000000340001800b00020064756d6d7930000004000300080001000200000008000100ff01000004000300080001000900000004000300140001800c000200657468746f6f6c00040003005e0004001b77173d5ef80ab8f59f6c1988c54a277b7a3032f50a70e58c35248ff6465f3f4cb1627d55cc715aadf77b9c25b95b593f9af845cbea21c3096f95a0fdfaf55e47ab01a5ac060395271fce9c772ef2ccd73e43a0b0316cb2a35a00009bf5"], 0x434}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) clock_gettime(0x0, &(0x7f0000000000)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000ec0), 0xc242, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x4000010, r3, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000140)=@IORING_OP_NOP={0x0, 0x63}) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f00000009c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000840)={0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f0000001ec0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x401}}], 0x18}}], 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)=@multiplanar_fd={0x6, 0x0, 0x4, 0x4, 0x5, {}, {0x4, 0x8, 0x7, 0x3, 0x8, 0x3, "8772a995"}, 0x9, 0x4, {&(0x7f0000000280)=[{0x9, 0x624, {r2}, 0x1}, {0x3, 0x60f}]}, 0x7, 0x0, r3}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events.local\x00', 0x26e1, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0xc0145b0e, &(0x7f0000000040)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 315.90903ms ago: executing program 4 (id=673): r0 = socket(0x10, 0x80002, 0x0) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x4000) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) io_setup(0x8, &(0x7f0000002740)=0x0) io_getevents(r5, 0x4, 0x13, &(0x7f0000000000), 0x0) io_destroy(r5) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRESOCT, @ANYRES32=r4], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, 0x0, 0x0, 0x0) recvmmsg(r7, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r9 = openat(0xffffffffffffff9c, 0x0, 0x4043, 0x1ff) close(0xffffffffffffffff) execve(0x0, 0x0, 0x0) ioctl$FBIOGET_FSCREENINFO(r9, 0x4602, &(0x7f00000002c0)) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="0100cd46efff40b3d933000000e200000000", @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 0s ago: executing program 4 (id=674): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000004e04010000000000d3400202010000004704000001ed00007b130000000000001d440200000000007a0a00fe00ffffffc3030000e1000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1a864a710aad58db6a6c3692e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5be14ecf7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e347a8ad880d2cd829b847400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c35b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af8612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5e69048ddff6da409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18ec0ae564162a27afea62d84f3a10746443d64364f50000e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc286463a2b1e992894269f478341d02d0f5ad4bcb524a5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39e415140200000020cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a22048516d6aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe0e669e5e20100005353193f82ade69d0540059fe6c7fe7cd8697502c7596566d6740300da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc02290beaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24c87afce829ba0f85da6d8a8f18ea40ab959f6074ab2a4009b9e5f07ab5138aa6e3d37fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e6b0b384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208160fb04c98375b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27feeb741680f6f2f9a6a8346962a350845ffa0d829e4f79ad7d87906943408e6df3adbfd03aac93df8866fb010aecfed9092ca4d0f3e1116a0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a530600d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe92c7719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b1dba94a6ea80c33ead5722c3293986e02c8e0a6dda1eca493f14795bd068826fe8df15efaaeea831555877f958a19e499666a38d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a8784d0899ed888141e2fae6691d1aee1da02ba516467df3e7d1daac19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa57d2c93f49c47944fec01a8aa7749f3187e9efb00000000e0884160b765b07ec9ba020362310223c81e48d6d3b6e5b50d45248efe43a409773e3ed01cd663f3aaab9e1c0000f43b64bb54e5b30be3399e3dd1eb1cfd1935a323023fe5792879833c7eb356b95cfb135045b1d8f7da2fa5bfedef411d0791523a9e64c884e9dfed9cd413afe66bd8ee831cdb34726fe0434fbf44c7b33a853330bcaf37ba4e36705807468b37d32087e599165f1bce015145444ef5967b443222f46173cc876015b2d1874be9846f7c1653c02d2ef9a75fdc45820c69bbe1cb575f9aa21aa9d3d58bd5e5fe026142a72e24049b8400c4a28b2d5db8d5f53cb354fba19975fb0b3739baae51cb4b034993ef1463dcdba2da419b320420efdd091d7f6e83c8ac2ccc6c9392a42a33907421ab847c9590c213eda9a7e1db598a23e75a3c0933fc803ca994a86476b995c37c445f68fd99fb4d335ff00d15bc4630c993fffffe000000000000a236a791bcb6eff8d488041db6b8f2c158c2c3f4baacd0c8cc7eb1fd7fba93237e598771cf6f281aa72139"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) close(r2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000400)) getpid() sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000009060102000000000000000000000000090002007379"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x8f}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x34, r5, 0x917, 0x70bd28, 0x0, {0x1, 0x0, 0xffff}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8}]}, 0x34}, 0x1, 0x620b}, 0x0) kernel console output (not intermixed with test programs): , SerialNumber=3 [ 151.031621][ T5824] usb 2-1: Product: syz [ 151.035939][ T5824] usb 2-1: Manufacturer: syz [ 151.045114][ T5824] usb 2-1: SerialNumber: syz [ 151.055315][ T5824] usb 2-1: config 0 descriptor?? [ 151.065056][ T7050] netlink: 408 bytes leftover after parsing attributes in process `syz.4.311'. [ 151.108584][ T5824] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 151.260822][ T7034] netlink: 20 bytes leftover after parsing attributes in process `syz.3.307'. [ 151.498742][ T7039] netlink: 'syz.1.309': attribute type 12 has an invalid length. [ 151.596791][ T7056] netlink: 24 bytes leftover after parsing attributes in process `syz.1.309'. [ 151.805405][ T5824] gspca_zc3xx: reg_r err -110 [ 151.810683][ T5824] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 152.224781][ T5824] usb 2-1: USB disconnect, device number 20 [ 153.045089][ T6008] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 153.162682][ T977] pwc: send_video_command error -71 [ 153.183377][ T977] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 153.220318][ T977] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 153.223826][ T7070] FAULT_INJECTION: forcing a failure. [ 153.223826][ T7070] name failslab, interval 1, probability 0, space 0, times 0 [ 153.247838][ T6008] usb 3-1: Using ep0 maxpacket: 16 [ 153.281645][ T6008] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 153.302818][ T6008] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.322395][ T7070] CPU: 0 UID: 0 PID: 7070 Comm: syz.1.317 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.322412][ T7070] Tainted: [L]=SOFTLOCKUP [ 153.322416][ T7070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 153.322422][ T7070] Call Trace: [ 153.322426][ T7070] [ 153.322431][ T7070] dump_stack_lvl+0xe8/0x150 [ 153.322455][ T7070] should_fail_ex+0x414/0x560 [ 153.322473][ T7070] should_failslab+0xa8/0x100 [ 153.322486][ T7070] __kmalloc_noprof+0xdf/0x800 [ 153.322495][ T7070] ? kfree+0x4d/0x660 [ 153.322507][ T7070] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 153.322522][ T7070] tomoyo_realpath_from_path+0xe3/0x5d0 [ 153.322535][ T7070] ? tomoyo_domain+0xd8/0x130 [ 153.322550][ T7070] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 153.322560][ T7070] tomoyo_path_number_perm+0x1e8/0x5a0 [ 153.322572][ T7070] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 153.322581][ T7070] ? __lock_acquire+0x6b6/0x2cf0 [ 153.322598][ T7070] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 153.322619][ T7070] ? __fget_files+0x2a/0x420 [ 153.322631][ T7070] ? __fget_files+0x2a/0x420 [ 153.322641][ T7070] ? __fget_files+0x3a0/0x420 [ 153.322651][ T7070] ? __fget_files+0x2a/0x420 [ 153.322664][ T7070] security_file_ioctl+0xcb/0x2d0 [ 153.322674][ T7070] __se_sys_ioctl+0x47/0x170 [ 153.322689][ T7070] do_syscall_64+0xec/0xf80 [ 153.322703][ T7070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.322712][ T7070] ? trace_irq_disable+0x37/0x100 [ 153.322724][ T7070] ? clear_bhb_loop+0x60/0xb0 [ 153.322739][ T7070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.322749][ T7070] RIP: 0033:0x7fcf1278f749 [ 153.322762][ T7070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.322769][ T7070] RSP: 002b:00007fcf1368e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.322780][ T7070] RAX: ffffffffffffffda RBX: 00007fcf129e5fa0 RCX: 00007fcf1278f749 [ 153.322787][ T7070] RDX: 0000200000000040 RSI: 00000000000089f9 RDI: 0000000000000003 [ 153.322793][ T7070] RBP: 00007fcf1368e090 R08: 0000000000000000 R09: 0000000000000000 [ 153.322799][ T7070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.322804][ T7070] R13: 00007fcf129e6038 R14: 00007fcf129e5fa0 R15: 00007fcf12b0fa28 [ 153.322819][ T7070] [ 153.322824][ T7070] ERROR: Out of memory at tomoyo_realpath_from_path. [ 153.475279][ T977] usb 4-1: USB disconnect, device number 22 [ 153.487860][ T6008] usb 3-1: Product: syz [ 153.685242][ T6008] usb 3-1: Manufacturer: syz [ 153.692494][ T6008] usb 3-1: SerialNumber: syz [ 153.733676][ T6008] usb 3-1: config 0 descriptor?? [ 154.005943][ T5920] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 154.035138][ T977] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 154.135148][ T5907] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 154.152649][ T6008] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 154.164826][ T6008] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 154.165083][ T5920] usb 2-1: Using ep0 maxpacket: 16 [ 154.203929][ T6008] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 154.206176][ T977] usb 4-1: Using ep0 maxpacket: 16 [ 154.215645][ T6008] usb 3-1: media controller created [ 154.242685][ T5920] usb 2-1: config 0 has an invalid interface number: 236 but max is 0 [ 154.254310][ T6008] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 154.271639][ T5920] usb 2-1: config 0 has no interface number 0 [ 154.279989][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.295140][ T5907] usb 1-1: Using ep0 maxpacket: 16 [ 154.304453][ T5907] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 154.323764][ T5920] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=84.33 [ 154.333715][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.343223][ T977] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 154.353813][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.362799][ T5907] usb 1-1: Product: syz [ 154.367361][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.376623][ T5907] usb 1-1: Manufacturer: syz [ 154.381616][ T5920] usb 2-1: Product: syz [ 154.391644][ T5920] usb 2-1: Manufacturer: syz [ 154.397038][ T5907] usb 1-1: SerialNumber: syz [ 154.406151][ T977] usb 4-1: config 0 descriptor?? [ 154.428560][ T5920] usb 2-1: SerialNumber: syz [ 154.438955][ T6008] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 154.448320][ T5907] usb 1-1: config 0 descriptor?? [ 154.466960][ T5920] usb 2-1: config 0 descriptor?? [ 154.472637][ T6008] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 154.483317][ T5920] usb-storage 2-1:0.236: USB Mass Storage device detected [ 154.497846][ T5907] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 154.565984][ T5920] usb-storage 2-1:0.236: device ignored [ 154.674419][ T7068] dtv5100: wlen = 0, aborting. [ 154.697152][ T5893] usb 2-1: USB disconnect, device number 21 [ 154.711776][ T5824] usb 1-1: USB disconnect, device number 15 [ 155.493978][ T7108] netlink: 'syz.0.330': attribute type 32 has an invalid length. [ 155.605139][ T6008] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 155.671119][ T7111] netlink: 'syz.4.331': attribute type 21 has an invalid length. [ 155.674296][ T7108] delete_channel: no stack [ 155.679257][ T7111] IPv6: NLM_F_CREATE should be specified when creating new route [ 155.756369][ T6008] usb 2-1: Using ep0 maxpacket: 16 [ 155.763457][ T6008] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 155.801766][ T6008] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 155.832140][ T6008] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 155.852435][ T6008] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 155.877319][ T6008] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 155.887624][ T6008] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.918187][ T6008] usb 2-1: Product: syz [ 155.922443][ T6008] usb 2-1: Manufacturer: syz [ 155.928397][ T6008] usb 2-1: SerialNumber: syz [ 155.936158][ T6008] usb 2-1: config 0 descriptor?? [ 155.942597][ T7106] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 155.961541][ C0] port100 2-1:0.0: NFC: Urb failure (status -71) [ 155.969012][ T6008] port100 2-1:0.0: NFC: Could not get supported command types [ 156.055135][ T5912] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 156.205119][ T5912] usb 5-1: Using ep0 maxpacket: 16 [ 156.218951][ T5912] usb 5-1: config 8 has an invalid interface number: 39 but max is 0 [ 156.230547][ T5912] usb 5-1: config 8 has no interface number 0 [ 156.237336][ T5912] usb 5-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 156.249489][ T5912] usb 5-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 156.261644][ T5912] usb 5-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 156.281601][ T5912] usb 5-1: config 8 interface 39 has no altsetting 0 [ 156.330788][ T5907] usb 3-1: USB disconnect, device number 14 [ 156.374653][ T5912] usb 5-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 156.652852][ T5907] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 156.657058][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.746947][ T977] usbhid 4-1:0.0: can't add hid device: -71 [ 156.768646][ T977] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 156.791153][ T977] usb 4-1: USB disconnect, device number 23 [ 156.925604][ T5912] usb 5-1: Product: syz [ 156.929798][ T5912] usb 5-1: Manufacturer: syz [ 157.015110][ T5912] usb 5-1: SerialNumber: syz [ 157.172750][ T7144] loop2: detected capacity change from 0 to 7 [ 157.200708][ T7144] loop2: [POWERTEC] p1 p2 p3 [ 157.217078][ T7144] loop2: p2 start 524319 is beyond EOD, truncated [ 157.233169][ T7144] loop2: p3 start 1932423285 is beyond EOD, truncated [ 157.436038][ T5823] udevd[5823]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 157.604673][ T7149] netlink: 'syz.3.342': attribute type 32 has an invalid length. [ 157.677256][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.333'. [ 157.724551][ T7119] gre1: entered allmulticast mode [ 157.737626][ T5912] ipheth 5-1:8.39: ipheth_enable_ncm: usb_control_msg: -71 [ 157.774690][ T7149] delete_channel: no stack [ 157.807521][ T5912] ipheth 5-1:8.39: Apple iPhone USB Ethernet device attached [ 157.886795][ T5912] usb 5-1: USB disconnect, device number 23 [ 158.002243][ T5912] ipheth 5-1:8.39: Apple iPhone USB Ethernet now disconnected [ 158.433593][ T977] usb 2-1: USB disconnect, device number 22 [ 158.698501][ T7168] netlink: 45 bytes leftover after parsing attributes in process `syz.1.346'. [ 158.766012][ T7164] syzkaller0: entered promiscuous mode [ 158.844629][ T7164] syzkaller0: entered allmulticast mode [ 159.065125][ T977] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 159.085139][ T5907] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 159.246286][ T5907] usb 2-1: no configurations [ 159.250997][ T5907] usb 2-1: can't read configurations, error -22 [ 159.265225][ T977] usb 1-1: Using ep0 maxpacket: 16 [ 159.278165][ T977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.291159][ T977] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 159.327123][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.386189][ T5907] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 159.402753][ T977] usb 1-1: config 0 descriptor?? [ 159.567474][ T5907] usb 2-1: no configurations [ 159.572217][ T5907] usb 2-1: can't read configurations, error -22 [ 159.691094][ T5907] usb usb2-port1: attempt power cycle [ 160.045199][ T5907] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 160.066090][ T5907] usb 2-1: no configurations [ 160.070749][ T5907] usb 2-1: can't read configurations, error -22 [ 160.145082][ T5912] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 160.257506][ T5907] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 160.287212][ T5907] usb 2-1: no configurations [ 160.292072][ T5907] usb 2-1: can't read configurations, error -22 [ 160.301401][ T5907] usb usb2-port1: unable to enumerate USB device [ 160.365105][ T5912] usb 3-1: Using ep0 maxpacket: 8 [ 160.376980][ T5912] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 160.389039][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 160.412679][ T5912] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 160.465092][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.501760][ T5912] usb 3-1: Product: syz [ 160.513621][ T5912] usb 3-1: Manufacturer: syz [ 160.529478][ T5912] usb 3-1: SerialNumber: syz [ 160.553877][ T5912] usb 3-1: config 0 descriptor?? [ 160.565148][ T5907] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 160.750928][ T5907] usb 4-1: unable to get BOS descriptor or descriptor too short [ 160.785073][ T5912] rc_core: IR keymap rc-streamzap not found [ 160.792456][ T5907] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 160.803875][ T5912] Registered IR keymap rc-empty [ 160.806187][ T5907] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 160.830231][ T5912] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 160.901342][ T5912] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input16 [ 160.914328][ T5907] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 160.924299][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.051791][ T7189] netlink: 'syz.4.354': attribute type 32 has an invalid length. [ 161.062224][ T5912] usb 3-1: USB disconnect, device number 15 [ 161.121013][ T5907] usb 4-1: Product: 俓졻⚿諙嬨匪戈匼曎응ꍯ괍ڻ캣컡୐ঁ쇢㮢鲧䨿떍꓾ⱻ嗡σ待鼏㵛즾㑵髤趀ꛡ䡎ꉺ︿ឩ꫿㝑棃뿟⨟魬몷쳑繁Õ䮊㼛ⵕ☪蘺嘇Ħ釳꒘ɗട굤濠䒴 [ 161.259867][ T5907] usb 4-1: SerialNumber: ᄽ쭩蕅諮ṑꗩ괶族녖䚅၄ૼἑꉴ宴櫖ᚆ㎷ꌻ챗룱嗏熚럶懺䦴偍話⧇䟪䅗鮪귰᮶푦孌㈼쵁띬詝ꑰ軁鎓䍵賅Û [ 161.316459][ T7189] delete_channel: no stack [ 162.631395][ T7199] FAULT_INJECTION: forcing a failure. [ 162.631395][ T7199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.725405][ T7199] CPU: 0 UID: 0 PID: 7199 Comm: syz.2.357 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.725434][ T7199] Tainted: [L]=SOFTLOCKUP [ 162.725440][ T7199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 162.725450][ T7199] Call Trace: [ 162.725457][ T7199] [ 162.725465][ T7199] dump_stack_lvl+0xe8/0x150 [ 162.725491][ T7199] should_fail_ex+0x414/0x560 [ 162.725521][ T7199] _copy_from_user+0x2d/0xb0 [ 162.725542][ T7199] snd_pcm_oss_write+0x6e1/0xf20 [ 162.725580][ T7199] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 162.725605][ T7199] ? bpf_lsm_file_permission+0x9/0x20 [ 162.725622][ T7199] ? security_file_permission+0x75/0x290 [ 162.725641][ T7199] ? rw_verify_area+0x255/0x4d0 [ 162.725664][ T7199] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 162.725689][ T7199] vfs_write+0x27e/0xb30 [ 162.725713][ T7199] ? __pfx_vfs_write+0x10/0x10 [ 162.725731][ T7199] ? __fget_files+0x2a/0x420 [ 162.725754][ T7199] ? __fget_files+0x2a/0x420 [ 162.725772][ T7199] ? __fget_files+0x3a0/0x420 [ 162.725790][ T7199] ? __fget_files+0x2a/0x420 [ 162.725815][ T7199] ksys_write+0x145/0x250 [ 162.725834][ T7199] ? __pfx_ksys_write+0x10/0x10 [ 162.725861][ T7199] do_syscall_64+0xec/0xf80 [ 162.725880][ T7199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.725896][ T7199] ? trace_irq_disable+0x37/0x100 [ 162.725916][ T7199] ? clear_bhb_loop+0x60/0xb0 [ 162.725936][ T7199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.725953][ T7199] RIP: 0033:0x7fe15938f749 [ 162.725968][ T7199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.725981][ T7199] RSP: 002b:00007fe15a161038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 162.726001][ T7199] RAX: ffffffffffffffda RBX: 00007fe1595e5fa0 RCX: 00007fe15938f749 [ 162.726014][ T7199] RDX: 000000000000fc36 RSI: 0000200000000500 RDI: 0000000000000003 [ 162.726025][ T7199] RBP: 00007fe15a161090 R08: 0000000000000000 R09: 0000000000000000 [ 162.726036][ T7199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.726053][ T7199] R13: 00007fe1595e6038 R14: 00007fe1595e5fa0 R15: 00007fe15970fa28 [ 162.726082][ T7199] [ 162.977336][ T977] usbhid 1-1:0.0: can't add hid device: -71 [ 162.983439][ T977] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 163.249848][ T977] usb 1-1: USB disconnect, device number 16 [ 163.696278][ T977] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 163.867389][ T977] usb 1-1: Using ep0 maxpacket: 8 [ 163.889510][ T977] usb 1-1: config 162 has an invalid interface number: 84 but max is 2 [ 163.898749][ T977] usb 1-1: config 162 has an invalid interface number: 3 but max is 2 [ 163.907401][ T977] usb 1-1: config 162 has no interface number 0 [ 163.913692][ T977] usb 1-1: config 162 has no interface number 1 [ 163.921997][ T977] usb 1-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 163.942137][ T977] usb 1-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 163.952931][ T977] usb 1-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 163.966852][ T977] usb 1-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 163.978395][ T977] usb 1-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 163.993993][ T977] usb 1-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 164.008874][ T977] usb 1-1: config 162 interface 84 has no altsetting 0 [ 164.016490][ T977] usb 1-1: config 162 interface 2 has no altsetting 0 [ 164.023445][ T977] usb 1-1: config 162 interface 3 has no altsetting 0 [ 164.034709][ T977] usb 1-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 164.044018][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.053309][ T977] usb 1-1: Product: syz [ 164.057695][ T977] usb 1-1: Manufacturer: syz [ 164.062324][ T977] usb 1-1: SerialNumber: syz [ 164.337022][ T5836] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 164.352469][ T977] usb 1-1: USB disconnect, device number 17 [ 164.814525][ T7180] xfrm1: entered allmulticast mode [ 165.026588][ T5907] cdc_ncm 4-1:1.0: bind() failure [ 165.127276][ T30] audit: type=1326 audit(1768064137.620:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.1.364" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf1278f749 code=0x0 [ 165.131838][ T5907] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 165.223444][ T5907] cdc_ncm 4-1:1.1: bind() failure [ 165.260799][ T7231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.363'. [ 165.284711][ T5907] usb 4-1: USB disconnect, device number 24 [ 167.535167][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 167.537297][ T7226] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 168.167746][ T7226] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 168.181523][ T7226] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 168.192664][ T7226] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 168.200433][ T7226] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 168.208660][ T7226] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 168.218861][ T7226] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 168.225638][ T7226] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 168.233264][ T7226] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 168.240727][ T7226] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 168.247870][ T7226] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 168.257390][ T7226] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 168.266159][ T7226] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 168.272221][ T7226] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 168.280096][ T7226] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 168.578751][ T5907] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 168.763057][ T5907] usb 5-1: Using ep0 maxpacket: 16 [ 168.806582][ T5907] usb 5-1: config 0 has an invalid interface number: 109 but max is 0 [ 168.816529][ T5920] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 168.831110][ T5907] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.848796][ T5907] usb 5-1: config 0 has no interface number 0 [ 168.864088][ T5907] usb 5-1: New USB device found, idVendor=0421, idProduct=0094, bcdDevice=28.8e [ 168.873639][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.888760][ T5907] usb 5-1: Product: syz [ 168.897842][ T5907] usb 5-1: Manufacturer: syz [ 168.912033][ T5907] usb 5-1: SerialNumber: syz [ 168.927884][ T5907] usb 5-1: config 0 descriptor?? [ 168.965148][ T5920] usb 3-1: device descriptor read/64, error -71 [ 169.139296][ T7248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.148963][ T7248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.168819][ T7248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.188437][ T7274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.197720][ T7248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.208993][ T7274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.218607][ T5920] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 169.248945][ T5907] rndis_host 5-1:0.109: More than one union descriptor, skipping ... [ 169.294605][ T5907] usb 5-1: bad CDC descriptors [ 169.305642][ T5907] cdc_acm 5-1:0.109: More than one union descriptor, skipping ... [ 169.355109][ T5920] usb 3-1: device descriptor read/64, error -71 [ 169.379729][ T5907] usb 5-1: USB disconnect, device number 24 [ 169.408924][ T7279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.381'. [ 169.465844][ T5920] usb usb3-port1: attempt power cycle [ 169.494856][ T7279] bridge0: port 1(veth0_to_bond) entered blocking state [ 169.502479][ T7279] bridge0: port 1(veth0_to_bond) entered disabled state [ 169.512256][ T7279] veth0_to_bond: entered allmulticast mode [ 169.520119][ T7279] veth0_to_bond: entered promiscuous mode [ 169.627081][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 169.695233][ T5907] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 169.805101][ T5920] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 169.825823][ T5920] usb 3-1: device descriptor read/8, error -71 [ 169.855165][ T5907] usb 5-1: Using ep0 maxpacket: 16 [ 169.864012][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.875107][ T977] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 169.883956][ T5907] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 169.902880][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.938014][ T5907] usb 5-1: config 0 descriptor?? [ 170.046629][ T977] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 170.055237][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.065156][ T5920] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 170.074784][ T977] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 170.084198][ T977] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 170.094260][ T5920] usb 3-1: device descriptor read/8, error -71 [ 170.100668][ T977] usb 4-1: Manufacturer: syz [ 170.109248][ T977] usb 4-1: config 0 descriptor?? [ 170.205976][ T5920] usb usb3-port1: unable to enumerate USB device [ 170.249921][ T977] rc_core: IR keymap rc-hauppauge not found [ 170.256173][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 170.265946][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 170.272036][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 170.274282][ T977] Registered IR keymap rc-empty [ 170.289639][ T977] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 170.335201][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 170.363729][ T977] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input17 [ 170.393679][ C1] igorplugusb 4-1:0.0: Error: urb status = -32 [ 170.427699][ T977] usb 4-1: USB disconnect, device number 25 [ 170.535133][ T980] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 170.683916][ T5907] usbhid 5-1:0.0: can't add hid device: -71 [ 170.692412][ T5907] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 170.693149][ T980] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 170.717840][ T5907] usb 5-1: USB disconnect, device number 25 [ 170.730959][ T980] usb 2-1: config 0 interface 0 has no altsetting 0 [ 170.741545][ T980] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 170.751138][ T980] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 170.762282][ T980] usb 2-1: Product: syz [ 170.768503][ T980] usb 2-1: Manufacturer: syz [ 170.773236][ T980] usb 2-1: SerialNumber: syz [ 170.781721][ T980] usb 2-1: config 0 descriptor?? [ 170.793280][ T980] usb 2-1: selecting invalid altsetting 0 [ 171.062552][ T5912] usb 2-1: USB disconnect, device number 27 [ 171.171152][ T7312] loop2: detected capacity change from 0 to 7 [ 171.184605][ T5833] loop2: [POWERTEC] p1 p2 p3 [ 171.193076][ T5833] loop2: p2 start 524319 is beyond EOD, truncated [ 171.210651][ T5833] loop2: p3 start 1932423285 is beyond EOD, truncated [ 171.230075][ T7312] loop2: [POWERTEC] p1 p2 p3 [ 171.263194][ T7312] loop2: p2 start 524319 is beyond EOD, truncated [ 171.263620][ T30] audit: type=1326 audit(1768064143.750:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7292 comm="syz.1.385" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf1278f749 code=0x0 [ 171.286059][ T7312] loop2: p3 start 1932423285 is beyond EOD, truncated [ 171.316812][ T7293] netlink: 24 bytes leftover after parsing attributes in process `syz.1.385'. [ 171.340854][ T7293] netlink: 24 bytes leftover after parsing attributes in process `syz.1.385'. [ 171.419210][ T5833] udevd[5833]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 171.488721][ T5833] udevd[5833]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 171.715103][ T5912] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 171.715480][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 171.725536][ T5893] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 171.941833][ T5912] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 171.954664][ T5912] usb 4-1: config 0 has no interface number 0 [ 171.977174][ T5893] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 171.988902][ T5893] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.021189][ T5893] usb 5-1: config 0 has no interface number 0 [ 172.031365][ T5912] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 172.060182][ T5893] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 172.095859][ T5912] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 172.124522][ T5893] usb 5-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 172.149219][ T5912] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 172.159763][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.183019][ T5893] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 172.194152][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.212549][ T5893] usb 5-1: Product: syz [ 172.217040][ T5893] usb 5-1: Manufacturer: syz [ 172.221832][ T5893] usb 5-1: SerialNumber: syz [ 172.242449][ T5912] usb 4-1: config 0 descriptor?? [ 172.258407][ T5893] usb 5-1: config 0 descriptor?? [ 172.268756][ T7318] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 172.299492][ T5912] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 172.337461][ T980] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 172.345361][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 172.345383][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 172.351384][ T5151] Bluetooth: hci3: command 0x0c1a tx timeout [ 172.425695][ T5834] Bluetooth: hci4: command 0x0c1a tx timeout [ 172.495414][ T5907] usb 4-1: USB disconnect, device number 26 [ 172.527073][ T980] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.666341][ T980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 172.682972][ T980] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 172.709945][ T980] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.720576][ T980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 172.731574][ T980] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 172.791382][ T980] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.842159][ T980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 172.872969][ T980] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 172.949602][ T980] usb 1-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 172.979958][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.002677][ T980] usb 1-1: Product: syz [ 173.016907][ T980] usb 1-1: Manufacturer: syz [ 173.035278][ T980] usb 1-1: SerialNumber: syz [ 173.062346][ T980] usb 1-1: config 0 descriptor?? [ 173.097805][ T980] ti_usb_3410_5052 1-1:0.0: required endpoints missing [ 173.269435][ T7352] syzkaller0: entered promiscuous mode [ 173.295446][ T7352] syzkaller0: entered allmulticast mode [ 173.908791][ T7365] loop2: detected capacity change from 0 to 7 [ 173.921922][ T7365] loop2: [POWERTEC] p1 p2 p3 [ 173.947381][ T7365] loop2: p2 start 524319 is beyond EOD, truncated [ 173.969454][ T7365] loop2: p3 start 1932423285 is beyond EOD, truncated [ 174.124247][ T5833] udevd[5833]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 174.415192][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 174.415371][ T5151] Bluetooth: hci3: command 0x0c1a tx timeout [ 174.427993][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 174.495724][ T5151] Bluetooth: hci4: command 0x0c1a tx timeout [ 174.509498][ T5893] usb 5-1: USB disconnect, device number 26 [ 174.581542][ T7369] netlink: 40 bytes leftover after parsing attributes in process `syz.1.402'. [ 174.608538][ T7374] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 174.621348][ T7374] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 174.670120][ T7374] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 174.676685][ T7374] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 174.730825][ T7374] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 174.738791][ T7374] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 174.756455][ T7374] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 174.780835][ T7374] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 174.823975][ T7374] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 174.839073][ T7374] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 174.969294][ T5893] usb 1-1: USB disconnect, device number 18 [ 175.819778][ T7400] netlink: 408 bytes leftover after parsing attributes in process `syz.1.410'. [ 175.965100][ T980] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 176.186841][ T7406] netlink: 408 bytes leftover after parsing attributes in process `syz.0.413'. [ 176.535435][ T980] usb 4-1: device descriptor read/64, error -71 [ 176.605106][ T5907] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 176.755093][ T5907] usb 5-1: Using ep0 maxpacket: 8 [ 176.785139][ T980] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 176.963931][ T5907] usb 5-1: unable to get BOS descriptor or descriptor too short [ 176.971899][ T980] usb 4-1: device descriptor read/64, error -71 [ 177.005453][ T5907] usb 5-1: config 7 has an invalid interface number: 142 but max is 0 [ 177.036527][ T5907] usb 5-1: config 7 has no interface number 0 [ 177.092781][ T5907] usb 5-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 177.112228][ T980] usb usb4-port1: attempt power cycle [ 177.126123][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.167450][ T5907] usb 5-1: Product: syz [ 177.173071][ T5907] usb 5-1: Manufacturer: syz [ 177.178747][ T5907] usb 5-1: SerialNumber: syz [ 177.523035][ T7402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.533340][ T7402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.545440][ T980] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 177.589019][ T980] usb 4-1: device descriptor read/8, error -71 [ 177.850131][ T980] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 177.895625][ T980] usb 4-1: device descriptor read/8, error -71 [ 178.005850][ T980] usb usb4-port1: unable to enumerate USB device [ 178.015188][ T5912] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 178.175342][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 178.183507][ T5912] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 178.200979][ T5912] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 178.212607][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 178.221307][ T5912] usb 3-1: Product: syz [ 178.226785][ T5912] usb 3-1: Manufacturer: syz [ 178.236552][ T5912] usb 3-1: SerialNumber: syz [ 178.261198][ T5912] usb 3-1: config 0 descriptor?? [ 178.271715][ T7412] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 178.285232][ T5912] hub 3-1:0.0: bad descriptor, ignoring hub [ 178.297341][ T5912] hub 3-1:0.0: probe with driver hub failed with error -5 [ 178.487166][ T7412] netlink: 36 bytes leftover after parsing attributes in process `syz.2.415'. [ 178.854012][ T5907] usb 5-1: USB disconnect, device number 27 [ 179.255165][ T5907] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 179.405103][ T5907] usb 5-1: Using ep0 maxpacket: 16 [ 179.417419][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.427874][ T7425] FAULT_INJECTION: forcing a failure. [ 179.427874][ T7425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.431100][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.452989][ T7425] CPU: 0 UID: 0 PID: 7425 Comm: syz.1.421 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.453014][ T7425] Tainted: [L]=SOFTLOCKUP [ 179.453020][ T7425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 179.453030][ T7425] Call Trace: [ 179.453036][ T7425] [ 179.453044][ T7425] dump_stack_lvl+0xe8/0x150 [ 179.453071][ T7425] should_fail_ex+0x414/0x560 [ 179.453099][ T7425] _copy_from_user+0x2d/0xb0 [ 179.453120][ T7425] snd_pcm_oss_write+0x6e1/0xf20 [ 179.453154][ T7425] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 179.453178][ T7425] ? bpf_lsm_file_permission+0x9/0x20 [ 179.453194][ T7425] ? security_file_permission+0x75/0x290 [ 179.453211][ T7425] ? rw_verify_area+0x255/0x4d0 [ 179.453235][ T7425] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 179.453258][ T7425] vfs_write+0x27e/0xb30 [ 179.453281][ T7425] ? __pfx_vfs_write+0x10/0x10 [ 179.453297][ T7425] ? __fget_files+0x2a/0x420 [ 179.453318][ T7425] ? __fget_files+0x2a/0x420 [ 179.453335][ T7425] ? __fget_files+0x3a0/0x420 [ 179.453354][ T7425] ? __fget_files+0x2a/0x420 [ 179.453381][ T7425] ksys_write+0x145/0x250 [ 179.453400][ T7425] ? __pfx_ksys_write+0x10/0x10 [ 179.453427][ T7425] do_syscall_64+0xec/0xf80 [ 179.453446][ T7425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.453462][ T7425] ? trace_irq_disable+0x37/0x100 [ 179.453482][ T7425] ? clear_bhb_loop+0x60/0xb0 [ 179.453502][ T7425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.453518][ T7425] RIP: 0033:0x7fcf1278f749 [ 179.453534][ T7425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.453548][ T7425] RSP: 002b:00007fcf1368e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 179.453567][ T7425] RAX: ffffffffffffffda RBX: 00007fcf129e5fa0 RCX: 00007fcf1278f749 [ 179.453579][ T7425] RDX: 000000000000fc36 RSI: 0000200000000500 RDI: 0000000000000003 [ 179.453591][ T7425] RBP: 00007fcf1368e090 R08: 0000000000000000 R09: 0000000000000000 [ 179.453601][ T7425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.453612][ T7425] R13: 00007fcf129e6038 R14: 00007fcf129e5fa0 R15: 00007fcf12b0fa28 [ 179.453640][ T7425] [ 179.458672][ T5907] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 179.745177][ T5920] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 179.811580][ T5907] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 179.826882][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.847911][ T5907] usb 5-1: config 0 descriptor?? [ 179.958410][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.970750][ T5920] usb 4-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 179.983238][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.016936][ T5920] usb 4-1: config 0 descriptor?? [ 180.132755][ T7433] @: renamed from veth0_vlan (while UP) [ 180.461774][ T5920] usbhid 4-1:0.0: can't add hid device: -71 [ 180.470106][ T7421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.470119][ T5920] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 180.491502][ T7421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.515659][ T5920] usb 4-1: USB disconnect, device number 31 [ 180.516258][ T7438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.548248][ T7438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.654305][ T5907] usbhid 5-1:0.0: can't add hid device: -71 [ 180.669365][ T5907] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 180.691852][ T5907] usb 5-1: USB disconnect, device number 28 [ 181.074933][ T7448] FAULT_INJECTION: forcing a failure. [ 181.074933][ T7448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.088897][ T7448] CPU: 0 UID: 0 PID: 7448 Comm: syz.0.429 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.088924][ T7448] Tainted: [L]=SOFTLOCKUP [ 181.088930][ T7448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 181.088941][ T7448] Call Trace: [ 181.088948][ T7448] [ 181.088956][ T7448] dump_stack_lvl+0xe8/0x150 [ 181.088982][ T7448] should_fail_ex+0x414/0x560 [ 181.089012][ T7448] _copy_to_user+0x31/0xb0 [ 181.089034][ T7448] simple_read_from_buffer+0xe1/0x170 [ 181.089059][ T7448] proc_fail_nth_read+0x1b3/0x220 [ 181.089080][ T7448] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 181.089100][ T7448] ? rw_verify_area+0x2a6/0x4d0 [ 181.089124][ T7448] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 181.089142][ T7448] vfs_read+0x200/0xa30 [ 181.089158][ T7448] ? fdget_pos+0x247/0x320 [ 181.089181][ T7448] ? __pfx___mutex_lock+0x10/0x10 [ 181.089201][ T7448] ? __pfx_vfs_read+0x10/0x10 [ 181.089219][ T7448] ? __fget_files+0x2a/0x420 [ 181.089243][ T7448] ? __fget_files+0x3a0/0x420 [ 181.089260][ T7448] ? __fget_files+0x2a/0x420 [ 181.089288][ T7448] ksys_read+0x145/0x250 [ 181.089306][ T7448] ? __pfx_ksys_read+0x10/0x10 [ 181.089333][ T7448] do_syscall_64+0xec/0xf80 [ 181.089350][ T7448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.089365][ T7448] ? trace_irq_disable+0x37/0x100 [ 181.089384][ T7448] ? clear_bhb_loop+0x60/0xb0 [ 181.089398][ T7448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.089407][ T7448] RIP: 0033:0x7f80b818e15c [ 181.089417][ T7448] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 181.089425][ T7448] RSP: 002b:00007f80b90a8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 181.089436][ T7448] RAX: ffffffffffffffda RBX: 00007f80b83e5fa0 RCX: 00007f80b818e15c [ 181.089444][ T7448] RDX: 000000000000000f RSI: 00007f80b90a80a0 RDI: 0000000000000004 [ 181.089450][ T7448] RBP: 00007f80b90a8090 R08: 0000000000000000 R09: 0000000000000000 [ 181.089456][ T7448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 181.089461][ T7448] R13: 00007f80b83e6038 R14: 00007f80b83e5fa0 R15: 00007f80b850fa28 [ 181.089477][ T7448] [ 181.096974][ T5907] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 181.345139][ T5893] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 181.445156][ T5907] usb 5-1: device descriptor read/64, error -71 [ 181.507276][ T5893] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 181.518869][ T5893] usb 4-1: config 0 interface 0 has no altsetting 0 [ 181.528159][ T5893] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 181.539467][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 181.547758][ T5893] usb 4-1: Product: syz [ 181.552106][ T5893] usb 4-1: Manufacturer: syz [ 181.559931][ T5893] usb 4-1: SerialNumber: syz [ 181.568703][ T5893] usb 4-1: config 0 descriptor?? [ 181.618086][ T5893] usb 4-1: selecting invalid altsetting 0 [ 181.685183][ T5907] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 181.825192][ T5907] usb 5-1: device descriptor read/64, error -71 [ 181.860096][ T7446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.884428][ T7446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.913072][ T5893] usb 4-1: USB disconnect, device number 32 [ 181.965505][ T5907] usb usb5-port1: attempt power cycle [ 182.027304][ T980] usb 3-1: USB disconnect, device number 20 [ 182.335191][ T5907] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 182.366104][ T5907] usb 5-1: device descriptor read/8, error -71 [ 182.605196][ T5907] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 182.625718][ T5907] usb 5-1: device descriptor read/8, error -71 [ 182.735516][ T5907] usb usb5-port1: unable to enumerate USB device [ 182.795811][ T7484] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.814154][ T7486] fuse: Bad value for 'fd' [ 182.825412][ T7487] netlink: 240 bytes leftover after parsing attributes in process `syz.3.443'. [ 182.898647][ T7491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.446'. [ 182.908022][ T980] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 183.065082][ T980] usb 2-1: Using ep0 maxpacket: 32 [ 183.081572][ T980] usb 2-1: config index 0 descriptor too short (expected 2210, got 1175) [ 183.104485][ T980] usb 2-1: config 0 has an invalid interface number: 241 but max is 2 [ 183.129438][ T980] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.152124][ T980] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 183.161961][ T980] usb 2-1: config 0 has no interface number 0 [ 183.169476][ T980] usb 2-1: config 0 interface 241 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 183.182088][ T980] usb 2-1: config 0 interface 241 altsetting 4 has an endpoint descriptor with address 0xAE, changing to 0x8E [ 183.198165][ T980] usb 2-1: config 0 interface 241 altsetting 4 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 183.209573][ T980] usb 2-1: config 0 interface 241 altsetting 4 endpoint 0x8E has invalid wMaxPacketSize 0 [ 183.219785][ T980] usb 2-1: config 0 interface 241 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 183.233563][ T980] usb 2-1: config 0 interface 241 has no altsetting 0 [ 183.243050][ T980] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=e0.70 [ 183.265046][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.276046][ T980] usb 2-1: Product: syz [ 183.280293][ T980] usb 2-1: Manufacturer: syz [ 183.284989][ T980] usb 2-1: SerialNumber: syz [ 183.295283][ T980] usb 2-1: config 0 descriptor?? [ 183.536617][ T980] usb 2-1: USB disconnect, device number 28 [ 183.818264][ T7509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.451'. [ 183.901104][ T7512] syzkaller1: entered promiscuous mode [ 183.915473][ T7512] syzkaller1: entered allmulticast mode [ 184.148847][ T7522] fuse: Invalid uid '00000000000000000004' [ 184.189810][ T7528] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 184.517077][ T7539] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 184.524323][ T7539] IPv6: NLM_F_CREATE should be set when creating new route [ 184.537629][ T5920] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 184.626195][ T7541] netlink: 76 bytes leftover after parsing attributes in process `syz.0.460'. [ 184.706521][ T5920] usb 5-1: Using ep0 maxpacket: 16 [ 184.731993][ T5920] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 184.747780][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 185.180491][ T5920] usb 5-1: Product: syz [ 185.184735][ T5920] usb 5-1: Manufacturer: syz [ 185.210580][ T5920] usb 5-1: SerialNumber: syz [ 185.407029][ T5920] usb 5-1: config 0 descriptor?? [ 185.631405][ T5920] usb 5-1: USB disconnect, device number 33 [ 185.680512][ T5952] udevd[5952]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.865159][ T5907] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 186.146213][ T5907] usb 2-1: Using ep0 maxpacket: 16 [ 186.164128][ T5907] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 186.173383][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.196005][ T5907] usb 2-1: Product: syz [ 186.203217][ T5907] usb 2-1: Manufacturer: syz [ 186.225744][ T5907] usb 2-1: SerialNumber: syz [ 186.239839][ T5907] usb 2-1: config 0 descriptor?? [ 186.661982][ T5907] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 186.682274][ T5907] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 186.723616][ T5907] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 186.748804][ T5907] usb 2-1: media controller created [ 186.802680][ T5907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 186.865574][ T7552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.891435][ T7552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.949533][ T5907] zl10353_read_register: readreg error (reg=127, ret==0) [ 186.965255][ T5907] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 186.983205][ T5907] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 187.012573][ T5907] usb 2-1: USB disconnect, device number 29 [ 187.101094][ T5907] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 187.251911][ T7577] IPVS: set_ctl: invalid protocol: 25966 105.112.95.118:29440 [ 187.580918][ T7591] netlink: 408 bytes leftover after parsing attributes in process `syz.3.474'. [ 187.725168][ T5907] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 188.046809][ T7600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.476'. [ 188.065675][ T7600] netlink: 'syz.1.476': attribute type 3 has an invalid length. [ 188.087246][ T5907] usb 5-1: config 162 has an invalid interface number: 79 but max is 1 [ 188.095950][ T5907] usb 5-1: config 162 has an invalid interface number: 183 but max is 1 [ 188.109164][ T5907] usb 5-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 188.144269][ T5907] usb 5-1: config 162 has no interface number 0 [ 188.199645][ T5907] usb 5-1: config 162 has no interface number 1 [ 188.247797][ T5907] usb 5-1: config 162 interface 79 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 188.281568][ T5907] usb 5-1: config 162 interface 183 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 188.309544][ T5907] usb 5-1: config 162 interface 183 altsetting 1 endpoint 0x2 is Bulk; changing to Interrupt [ 188.350224][ T5907] usb 5-1: config 162 interface 183 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 8 [ 188.374675][ T5907] usb 5-1: config 162 interface 183 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 188.392609][ T5907] usb 5-1: config 162 interface 183 altsetting 1 endpoint 0x86 is Bulk; changing to Interrupt [ 188.417229][ T5907] usb 5-1: config 162 interface 183 altsetting 1 endpoint 0x86 has invalid wMaxPacketSize 0 [ 188.605211][ T5912] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 188.656853][ T5907] usb 5-1: config 162 interface 79 has no altsetting 0 [ 188.663902][ T5907] usb 5-1: config 162 interface 183 has no altsetting 0 [ 188.705094][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 188.862743][ T5912] usb 3-1: config 4 has an invalid interface number: 88 but max is 0 [ 188.877532][ T5912] usb 3-1: config 4 has no interface number 0 [ 188.899027][ T5912] usb 3-1: config 4 interface 88 altsetting 119 has an invalid endpoint descriptor of length 5, skipping [ 188.922074][ T5912] usb 3-1: config 4 interface 88 altsetting 119 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 188.948334][ T9] usb 2-1: config 0 has no interfaces? [ 188.953864][ T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 188.962955][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.972346][ T5912] usb 3-1: config 4 interface 88 has no altsetting 0 [ 189.001924][ T9] usb 2-1: config 0 descriptor?? [ 189.009854][ T5912] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 189.052412][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.082998][ T5912] usb 3-1: Product: syz [ 189.103987][ T5912] usb 3-1: Manufacturer: syz [ 189.341376][ T5912] usb 3-1: SerialNumber: syz [ 189.360538][ T7602] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 189.578655][ T5912] usb 3-1: USB disconnect, device number 21 [ 190.429866][ T5907] usb 5-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 190.447397][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.492571][ T5907] usb 5-1: can't set config #162, error -71 [ 190.524975][ T5907] usb 5-1: USB disconnect, device number 34 [ 190.612227][ T7622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.483'. [ 190.654205][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.483'. [ 190.668982][ T7622] netlink: 60 bytes leftover after parsing attributes in process `syz.2.483'. [ 190.731887][ T30] audit: type=1326 audit(1768064163.220:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036c38f749 code=0x7ffc0000 [ 190.934443][ T5907] usb 2-1: USB disconnect, device number 30 [ 190.958025][ T30] audit: type=1326 audit(1768064163.250:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f036c38f749 code=0x7ffc0000 [ 191.009570][ T30] audit: type=1326 audit(1768064163.250:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036c38f749 code=0x7ffc0000 [ 191.110443][ T30] audit: type=1326 audit(1768064163.250:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036c38f749 code=0x7ffc0000 [ 191.192697][ T30] audit: type=1326 audit(1768064163.310:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f036c38f749 code=0x7ffc0000 [ 191.283002][ T30] audit: type=1326 audit(1768064163.310:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036c38f749 code=0x7ffc0000 [ 191.329425][ T30] audit: type=1326 audit(1768064163.310:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f036c38f749 code=0x7ffc0000 [ 191.354329][ T7633] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3851450944 (3851450944 ns) > initial count (1115526657 ns). Using initial count to start timer. [ 191.396699][ T30] audit: type=1326 audit(1768064163.310:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036c38f749 code=0x7ffc0000 [ 191.452127][ T30] audit: type=1326 audit(1768064163.310:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f036c38f749 code=0x7ffc0000 [ 191.714946][ T7645] netlink: 24 bytes leftover after parsing attributes in process `syz.4.490'. [ 191.765127][ T5912] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 191.980272][ T5912] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 191.980302][ T5912] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 191.980316][ T5912] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 191.980329][ T5912] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 191.980341][ T5912] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 191.981231][ T5912] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 191.981276][ T5912] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 191.981297][ T5912] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 191.981310][ T5912] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 191.981322][ T5912] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 191.982554][ T5912] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 191.982594][ T5912] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 191.982619][ T5912] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 191.982642][ T5912] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 191.982664][ T5912] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 191.991570][ T5912] usb 2-1: string descriptor 0 read error: -22 [ 191.991678][ T5912] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 191.991699][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.998442][ T5912] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 192.149794][ T7657] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 192.150792][ T7657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.493'. [ 192.223856][ T7637] netlink: 796 bytes leftover after parsing attributes in process `syz.1.489'. [ 192.226000][ T980] usb 2-1: USB disconnect, device number 31 [ 192.595279][ T5912] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 192.764891][ T5912] usb 4-1: Using ep0 maxpacket: 8 [ 192.790763][ T5912] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 192.808916][ T5912] usb 4-1: config 0 has no interface number 0 [ 192.842772][ T5912] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 192.874227][ T7666] netlink: 408 bytes leftover after parsing attributes in process `syz.4.495'. [ 192.918328][ T5912] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 192.935121][ T5912] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 192.949504][ T5912] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.975723][ T5912] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 193.049262][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.109851][ T7670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.497'. [ 193.126034][ T5912] usb 4-1: Product: syz [ 193.131919][ T5912] usb 4-1: Manufacturer: syz [ 193.146065][ T5912] usb 4-1: SerialNumber: syz [ 193.156370][ T5907] hid (null): invalid report_size 2486 [ 193.178149][ T5912] usb 4-1: config 0 descriptor?? [ 193.198793][ T5907] hid-generic 0002:0001:0003.0007: unknown main item tag 0x0 [ 193.213885][ T5907] hid-generic 0002:0001:0003.0007: invalid report_size 2486 [ 193.229980][ T5907] hid-generic 0002:0001:0003.0007: item 0 2 1 7 parsing failed [ 193.260142][ T5907] hid-generic 0002:0001:0003.0007: probe with driver hid-generic failed with error -22 [ 193.326248][ T7680] loop7: detected capacity change from 0 to 7 [ 193.407413][ T5912] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 193.581740][ T7680] Dev loop7: unable to read RDB block 7 [ 193.601614][ T7680] loop7: unable to read partition table [ 193.610121][ T7685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.618940][ T7685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.648721][ T7680] loop7: partition table beyond EOD, truncated [ 193.683929][ T7680] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 193.706394][ T5979] usb 4-1: USB disconnect, device number 33 [ 193.742551][ T7694] netlink: 'syz.3.503': attribute type 32 has an invalid length. [ 193.784762][ T7694] delete_channel: no stack [ 193.875119][ T5907] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 194.070825][ T5907] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 194.087565][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.155437][ T5907] usb 3-1: config 0 descriptor?? [ 194.165111][ T5979] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 194.195416][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.201805][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.213057][ T5907] gspca_main: spca508-2.14.0 probing 8086:0110 [ 194.355134][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 194.369176][ T5979] usb 2-1: config 0 has an invalid interface number: 22 but max is 0 [ 194.377817][ T5979] usb 2-1: config 0 has no interface number 0 [ 194.384030][ T5979] usb 2-1: config 0 interface 22 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.388590][ T7686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.395389][ T5907] gspca_spca508: reg_read err -32 [ 194.423306][ T5979] usb 2-1: config 0 interface 22 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.434647][ T7686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.449736][ T5979] usb 2-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 194.459161][ T5907] gspca_spca508: reg_read err -32 [ 194.471901][ T5979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.487969][ T5979] usb 2-1: config 0 descriptor?? [ 194.525389][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 194.533140][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.545119][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.565115][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 194.596019][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 194.610361][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.631806][ T9] usb 4-1: config 0 descriptor?? [ 194.667841][ T5907] gspca_spca508: reg_read err -32 [ 194.676314][ T5907] gspca_spca508: reg_read err -32 [ 194.736426][ T7698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.754949][ T7698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.885413][ T5907] gspca_spca508: reg write: error -71 [ 194.891079][ T5907] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 194.905875][ T5907] usb 3-1: USB disconnect, device number 22 [ 195.050568][ T9] HID 045e:07da: Invalid code 65791 type 1 [ 195.062726][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0009/input/input18 [ 195.065560][ T5979] elo 0003:04E7:0030.0008: item fetching failed at offset 6/7 [ 195.090926][ T5979] elo 0003:04E7:0030.0008: parse failed [ 195.115218][ T5979] elo 0003:04E7:0030.0008: probe with driver elo failed with error -22 [ 195.176120][ T9] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 195.241606][ T9] usb 2-1: USB disconnect, device number 32 [ 195.527043][ T7710] FAULT_INJECTION: forcing a failure. [ 195.527043][ T7710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.586425][ T7710] CPU: 0 UID: 0 PID: 7710 Comm: syz.2.508 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.586446][ T7710] Tainted: [L]=SOFTLOCKUP [ 195.586450][ T7710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 195.586457][ T7710] Call Trace: [ 195.586461][ T7710] [ 195.586471][ T7710] dump_stack_lvl+0xe8/0x150 [ 195.586488][ T7710] should_fail_ex+0x414/0x560 [ 195.586506][ T7710] _copy_from_user+0x2d/0xb0 [ 195.586519][ T7710] snd_pcm_oss_write+0x6e1/0xf20 [ 195.586541][ T7710] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 195.586555][ T7710] ? bpf_lsm_file_permission+0x9/0x20 [ 195.586565][ T7710] ? security_file_permission+0x75/0x290 [ 195.586576][ T7710] ? rw_verify_area+0x255/0x4d0 [ 195.586589][ T7710] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 195.586603][ T7710] vfs_write+0x27e/0xb30 [ 195.586616][ T7710] ? __pfx_vfs_write+0x10/0x10 [ 195.586626][ T7710] ? __fget_files+0x2a/0x420 [ 195.586639][ T7710] ? __fget_files+0x2a/0x420 [ 195.586649][ T7710] ? __fget_files+0x3a0/0x420 [ 195.586665][ T7710] ? __fget_files+0x2a/0x420 [ 195.586679][ T7710] ksys_write+0x145/0x250 [ 195.586690][ T7710] ? __pfx_ksys_write+0x10/0x10 [ 195.586704][ T7710] do_syscall_64+0xec/0xf80 [ 195.586715][ T7710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.586725][ T7710] ? trace_irq_disable+0x37/0x100 [ 195.586736][ T7710] ? clear_bhb_loop+0x60/0xb0 [ 195.586747][ T7710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.586757][ T7710] RIP: 0033:0x7fe15938f749 [ 195.586767][ T7710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.586775][ T7710] RSP: 002b:00007fe15a161038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 195.586787][ T7710] RAX: ffffffffffffffda RBX: 00007fe1595e5fa0 RCX: 00007fe15938f749 [ 195.586794][ T7710] RDX: 000000000000fc36 RSI: 0000200000000500 RDI: 0000000000000003 [ 195.586800][ T7710] RBP: 00007fe15a161090 R08: 0000000000000000 R09: 0000000000000000 [ 195.586806][ T7710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 195.586812][ T7710] R13: 00007fe1595e6038 R14: 00007fe1595e5fa0 R15: 00007fe15970fa28 [ 195.586827][ T7710] [ 195.952468][ T5979] usb 4-1: USB disconnect, device number 34 [ 196.213379][ T7728] loop4: detected capacity change from 0 to 1 [ 196.228597][ T7728] Dev loop4: unable to read RDB block 1 [ 196.234641][ T7728] loop4: unable to read partition table [ 196.251686][ T7728] loop4: partition table beyond EOD, truncated [ 196.262014][ T7728] loop_reread_partitions: partition scan of loop4 (被x^> ) failed (rc=-5) [ 196.435159][ T5979] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 196.586798][ T5979] usb 1-1: device descriptor read/64, error -71 [ 196.845345][ T5979] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 196.855114][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 197.005109][ T5979] usb 1-1: device descriptor read/64, error -71 [ 197.028934][ T9] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 197.040681][ T9] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 197.063032][ T9] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 197.089048][ T9] usb 3-1: config 220 has no interface number 2 [ 197.101336][ T9] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 197.114590][ T7752] FAULT_INJECTION: forcing a failure. [ 197.114590][ T7752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.128029][ T5979] usb usb1-port1: attempt power cycle [ 197.135280][ T7752] CPU: 0 UID: 0 PID: 7752 Comm: syz.1.521 Tainted: G L syzkaller #0 PREEMPT(full) [ 197.135306][ T7752] Tainted: [L]=SOFTLOCKUP [ 197.135312][ T7752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 197.135321][ T7752] Call Trace: [ 197.135327][ T7752] [ 197.135333][ T7752] dump_stack_lvl+0xe8/0x150 [ 197.135351][ T7752] should_fail_ex+0x414/0x560 [ 197.135368][ T7752] _copy_from_user+0x2d/0xb0 [ 197.135384][ T7752] snd_pcm_oss_write+0x6e1/0xf20 [ 197.135407][ T7752] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 197.135420][ T7752] ? bpf_lsm_file_permission+0x9/0x20 [ 197.135430][ T7752] ? security_file_permission+0x75/0x290 [ 197.135441][ T7752] ? rw_verify_area+0x255/0x4d0 [ 197.135461][ T7752] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 197.135475][ T7752] vfs_write+0x27e/0xb30 [ 197.135488][ T7752] ? __pfx_vfs_write+0x10/0x10 [ 197.135498][ T7752] ? __fget_files+0x2a/0x420 [ 197.135511][ T7752] ? __fget_files+0x2a/0x420 [ 197.135521][ T7752] ? __fget_files+0x3a0/0x420 [ 197.135531][ T7752] ? __fget_files+0x2a/0x420 [ 197.135545][ T7752] ksys_write+0x145/0x250 [ 197.135556][ T7752] ? __pfx_ksys_write+0x10/0x10 [ 197.135571][ T7752] do_syscall_64+0xec/0xf80 [ 197.135581][ T7752] ? rcu_is_watching+0x15/0xb0 [ 197.135592][ T7752] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.135601][ T7752] ? clear_bhb_loop+0x60/0xb0 [ 197.135613][ T7752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.135622][ T7752] RIP: 0033:0x7fcf1278f749 [ 197.135631][ T7752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.135640][ T7752] RSP: 002b:00007fcf1368e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 197.135654][ T7752] RAX: ffffffffffffffda RBX: 00007fcf129e5fa0 RCX: 00007fcf1278f749 [ 197.135665][ T7752] RDX: 000000000000fc36 RSI: 0000200000000500 RDI: 0000000000000003 [ 197.135676][ T7752] RBP: 00007fcf1368e090 R08: 0000000000000000 R09: 0000000000000000 [ 197.135686][ T7752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 197.135695][ T7752] R13: 00007fcf129e6038 R14: 00007fcf129e5fa0 R15: 00007fcf12b0fa28 [ 197.135717][ T7752] [ 197.359969][ T9] usb 3-1: config 220 interface 0 has no altsetting 0 [ 197.367710][ T9] usb 3-1: config 220 interface 76 has no altsetting 0 [ 197.374588][ T9] usb 3-1: config 220 interface 1 has no altsetting 0 [ 197.401643][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 197.675548][ T5979] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 197.705221][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.706595][ T5979] usb 1-1: device descriptor read/8, error -71 [ 197.751824][ T9] usb 3-1: Product: syz [ 197.757053][ T9] usb 3-1: Manufacturer: syz [ 197.762887][ T9] usb 3-1: SerialNumber: syz [ 197.955188][ T5920] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 197.963202][ T5979] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 198.016231][ T5979] usb 1-1: device descriptor read/8, error -71 [ 198.125169][ T5920] usb 2-1: device descriptor read/64, error -71 [ 198.135325][ T5979] usb usb1-port1: unable to enumerate USB device [ 198.365152][ T5920] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 198.495176][ T5920] usb 2-1: device descriptor read/64, error -71 [ 198.605784][ T5920] usb usb2-port1: attempt power cycle [ 198.895225][ T5979] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 199.006249][ T7781] netlink: 408 bytes leftover after parsing attributes in process `syz.4.529'. [ 199.068540][ T5920] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 199.089137][ T5979] usb 4-1: Using ep0 maxpacket: 16 [ 199.095914][ T5920] usb 2-1: device descriptor read/8, error -71 [ 199.222757][ T5979] usb 4-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 199.234089][ T5979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.249815][ T5979] usb 4-1: Product: syz [ 199.258137][ T5979] usb 4-1: Manufacturer: syz [ 199.262874][ T5979] usb 4-1: SerialNumber: syz [ 199.366952][ T5920] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 199.403360][ T5920] usb 2-1: device descriptor read/8, error -71 [ 199.542671][ T5920] usb usb2-port1: unable to enumerate USB device [ 199.623656][ T9] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 199.639131][ T9] uvcvideo 3-1:220.0: No valid video chain found. [ 199.645990][ T9] usb 3-1: selecting invalid altsetting 0 [ 199.692720][ T9] usb 3-1: selecting invalid altsetting 0 [ 199.699367][ T5912] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 199.717749][ T9] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 199.735127][ T9] usb 3-1: USB disconnect, device number 23 [ 199.946153][ T7786] xt_connbytes: Forcing CT accounting to be enabled [ 199.961213][ T7786] Cannot find del_set index 1 as target [ 200.835166][ T5907] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 200.996227][ T5907] usb 3-1: Using ep0 maxpacket: 32 [ 201.011224][ T5907] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 201.022106][ T5907] usb 3-1: config 0 has no interface number 0 [ 201.040281][ T5907] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 201.049780][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.073060][ T5907] usb 3-1: Product: syz [ 201.101171][ T5907] usb 3-1: Manufacturer: syz [ 201.214660][ T5907] usb 3-1: SerialNumber: syz [ 201.236432][ T5907] usb 3-1: config 0 descriptor?? [ 201.252592][ T5907] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 202.054165][ T7803] netlink: 28 bytes leftover after parsing attributes in process `syz.1.536'. [ 202.314560][ T5979] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 202.362140][ T5979] snd-usb-audio 4-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 202.401632][ T5979] usb 4-1: USB disconnect, device number 35 [ 202.412531][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 202.709531][ T7816] fuse: Bad value for 'fd' [ 203.618027][ T5907] usb 3-1: qt2_attach - failed to power on unit: -71 [ 203.637657][ T5907] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71 [ 203.706209][ T5907] usb 3-1: USB disconnect, device number 24 [ 204.084222][ T7841] netlink: 'syz.2.548': attribute type 4 has an invalid length. [ 204.161152][ T7841] netlink: 'syz.2.548': attribute type 4 has an invalid length. [ 204.204116][ T5979] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 204.436004][ T5979] usb 5-1: device descriptor read/64, error -71 [ 204.705190][ T5979] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 204.865113][ T5979] usb 5-1: device descriptor read/64, error -71 [ 205.065666][ T5979] usb usb5-port1: attempt power cycle [ 205.405893][ T5979] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 205.552908][ T5979] usb 5-1: device descriptor read/8, error -71 [ 205.861012][ T7857] netlink: 408 bytes leftover after parsing attributes in process `syz.1.552'. [ 205.915114][ T5979] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 205.956533][ T5979] usb 5-1: device descriptor read/8, error -71 [ 206.086259][ T5979] usb usb5-port1: unable to enumerate USB device [ 206.221625][ T7865] netlink: 'syz.0.554': attribute type 32 has an invalid length. [ 206.364086][ T7863] delete_channel: no stack [ 206.865416][ T5907] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 207.048040][ T5907] usb 4-1: Using ep0 maxpacket: 16 [ 207.085709][ T5907] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 207.094812][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.105409][ T5907] usb 4-1: Product: syz [ 207.113999][ T5907] usb 4-1: Manufacturer: syz [ 207.125267][ T5907] usb 4-1: SerialNumber: syz [ 207.140686][ T5907] usb 4-1: config 0 descriptor?? [ 207.551941][ T5907] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 207.577297][ T5907] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 207.606676][ T5907] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 207.632403][ T5907] usb 4-1: media controller created [ 207.708017][ T5907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 207.806042][ T7871] dtv5100: wlen = 0, aborting. [ 207.992844][ T5915] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 208.008039][ T5907] zl10353_read_register: readreg error (reg=127, ret==0) [ 208.025323][ T5907] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 208.045091][ T5907] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 208.114044][ T30] audit: type=1326 audit(1768064180.600:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7891 comm="syz.0.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b818f749 code=0x7ffc0000 [ 208.138635][ T30] audit: type=1326 audit(1768064180.630:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7891 comm="syz.0.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b818f749 code=0x7ffc0000 [ 208.163428][ T5915] usb 3-1: Using ep0 maxpacket: 8 [ 208.169175][ T30] audit: type=1326 audit(1768064180.630:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7891 comm="syz.0.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b818f749 code=0x7ffc0000 [ 208.192521][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.203862][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.214893][ T5915] usb 3-1: New USB device found, idVendor=056a, idProduct=7d84, bcdDevice= 0.0a [ 208.225215][ T30] audit: type=1326 audit(1768064180.630:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7891 comm="syz.0.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b818f749 code=0x7ffc0000 [ 208.250636][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.270654][ T5915] usb 3-1: config 0 descriptor?? [ 208.276968][ T30] audit: type=1326 audit(1768064180.660:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7891 comm="syz.0.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f80b818f749 code=0x7ffc0000 [ 208.303482][ T30] audit: type=1326 audit(1768064180.660:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7891 comm="syz.0.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b818f749 code=0x7ffc0000 [ 208.329755][ T30] audit: type=1326 audit(1768064180.660:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7891 comm="syz.0.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b818f749 code=0x7ffc0000 [ 208.354974][ T30] audit: type=1326 audit(1768064180.660:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7891 comm="syz.0.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b818f749 code=0x7ffc0000 [ 208.380597][ T30] audit: type=1326 audit(1768064180.660:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7891 comm="syz.0.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b818f749 code=0x7ffc0000 [ 208.403630][ T30] audit: type=1326 audit(1768064180.690:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7891 comm="syz.0.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f80b818f749 code=0x7ffc0000 [ 208.710673][ T5915] wacom 0003:056A:7D84.000A: unknown main item tag 0x0 [ 208.719616][ T5915] wacom 0003:056A:7D84.000A: unknown main item tag 0x0 [ 208.728866][ T5915] wacom 0003:056A:7D84.000A: Unknown device_type for 'HID 056a:7d84'. Ignoring. [ 208.910964][ T5915] usb 3-1: USB disconnect, device number 25 [ 209.175202][ T5907] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 209.189470][ T7909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.570'. [ 209.198841][ T7909] netlink: 'syz.0.570': attribute type 3 has an invalid length. [ 209.219739][ T7909] ip6gretap1: entered promiscuous mode [ 209.225394][ T7909] ip6gretap1: entered allmulticast mode [ 209.521571][ T5907] usb 2-1: device descriptor read/64, error -71 [ 209.603162][ T5979] usb 4-1: USB disconnect, device number 36 [ 209.646752][ T5979] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 209.665738][ T977] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 209.765357][ T5907] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 209.896366][ T977] usb 1-1: config 0 has no interfaces? [ 209.902156][ T977] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 209.912333][ T7925] netlink: 'syz.2.572': attribute type 29 has an invalid length. [ 209.925194][ T5907] usb 2-1: device descriptor read/64, error -71 [ 209.931548][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.949892][ T7925] netlink: 'syz.2.572': attribute type 29 has an invalid length. [ 209.959871][ T977] usb 1-1: config 0 descriptor?? [ 210.014317][ T7929] netlink: 232 bytes leftover after parsing attributes in process `syz.4.575'. [ 210.023496][ T7929] openvswitch: netlink: Flow actions attr not present in new flow. [ 210.039097][ T7925] netlink: 500 bytes leftover after parsing attributes in process `syz.2.572'. [ 210.045728][ T5907] usb usb2-port1: attempt power cycle [ 210.090731][ T7930] netlink: 132 bytes leftover after parsing attributes in process `syz.4.575'. [ 210.305167][ T5893] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 210.405092][ T5907] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 210.437026][ T5907] usb 2-1: device descriptor read/8, error -71 [ 210.475120][ T5893] usb 3-1: Using ep0 maxpacket: 8 [ 210.481629][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.493839][ T5893] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 210.512236][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.557443][ T5893] usb 3-1: config 0 descriptor?? [ 210.695375][ T5907] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 210.769181][ T5907] usb 2-1: device descriptor read/8, error -71 [ 210.889359][ T5907] usb usb2-port1: unable to enumerate USB device [ 210.900654][ T7932] binder: 7931:7932 ioctl c0306201 200000000180 returned -14 [ 210.915297][ T7934] netlink: 16 bytes leftover after parsing attributes in process `syz.3.576'. [ 210.940405][ T7935] netlink: 12 bytes leftover after parsing attributes in process `syz.4.577'. [ 210.972477][ T7935] bridge1: port 1(veth0_to_bond) entered blocking state [ 210.980657][ T5893] wacom 0003:056A:0084.000B: unknown main item tag 0x0 [ 210.988757][ T5893] wacom 0003:056A:0084.000B: unknown main item tag 0x0 [ 211.003087][ T7935] bridge1: port 1(veth0_to_bond) entered disabled state [ 211.011935][ T7935] veth0_to_bond: entered allmulticast mode [ 211.019051][ T5893] wacom 0003:056A:0084.000B: hidraw0: USB HID v0.00 Device [HID 056a:0084] on usb-dummy_hcd.2-1/input0 [ 211.031520][ T7935] veth0_to_bond: entered promiscuous mode [ 211.185308][ T5912] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 211.222466][ T7940] netlink: 408 bytes leftover after parsing attributes in process `syz.4.578'. [ 211.337692][ T5912] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 211.349608][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 211.360926][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 211.371419][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 54, changing to 9 [ 211.382791][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 8237, setting to 1024 [ 211.397230][ T5912] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 211.406821][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.416753][ T5912] usb 4-1: Product: syz [ 211.421699][ T5912] usb 4-1: Manufacturer: syz [ 211.429443][ T5912] usb 4-1: SerialNumber: syz [ 211.438186][ T5912] usb 4-1: config 0 descriptor?? [ 211.449605][ T5912] iguanair 4-1:0.0: failed to submit urb: -90 [ 211.459413][ T5912] iguanair 4-1:0.0: probe with driver iguanair failed with error -90 [ 211.663701][ T5979] usb 4-1: USB disconnect, device number 37 [ 212.120269][ T5979] usb 1-1: USB disconnect, device number 24 [ 212.295128][ T5893] usb 3-1: reset high-speed USB device number 26 using dummy_hcd [ 212.548262][ T5915] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 212.862282][ T5915] usb 2-1: config 1 interface 0 has no altsetting 0 [ 212.908238][ T5915] usb 2-1: New USB device found, idVendor=1e71, idProduct=200f, bcdDevice= 0.40 [ 212.990501][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.019853][ T5915] usb 2-1: Product: ꠨풾㔤⫉ꌓ졕❈࠻馅엂椻✨㳰拤࿼斣ﹽඎㇱㄺ绑꣨馨둘췵症禉靧脤㓄驇▦ፋ僱ꆰ늋ꥐ໎빙ྋ䏸풆榐횗ဓ嵲뼤⼱ [ 213.057404][ T5915] usb 2-1: Manufacturer: 䪂穋྾ࣛᯃ뢮豿읲ｼ⭄牸鞂ꓪ룛젇핉⫨纋瘻님䄎룤藸췁瘠꧉诜ᙥ뀂␍䤛趡ꭹ埠瓴얽뛷撽婤휰ﯕ伲艅홤뾀溟᥯鄋轋㦖☯瓥篓ᢝ欃䂌雮甴ᇯ㣟∽鰧季垞ᓐ쿓떕톙᪌迫鑟㈤몒䘘ꝗ [ 213.117010][ T5915] usb 2-1: SerialNumber: ᤁ㻾鉹ⶔ曡諭緣챬翋封Ȍ巏蠀鰀뭽鏬є迌뱂蹜揜쟯ꉅ鎂풟倥堜暴ᜧ䌁훷㰍䂳썫작﹜猝᭖䏠뱹뎯赜ᏽ觀䞃칏繒ቻ蔤湧ꗜ帋ꧬ亀鸚認⛄㺔ㅍﻒ饿죸暬렿郈텱ꎧ晗디遱㉠ዓ헐뒱狏㞎秾잌锕隂寜塞묊羁隬 [ 213.254755][ T5912] usb 3-1: USB disconnect, device number 26 [ 213.465108][ T5912] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 213.614990][ T5915] usbhid 2-1:1.0: can't add hid device: -71 [ 213.623525][ T5915] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 213.643665][ T5912] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.657972][ T5912] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 213.676409][ T5915] usb 2-1: USB disconnect, device number 41 [ 213.693335][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.713712][ T5912] usb 3-1: Product: syz [ 213.723727][ T5912] usb 3-1: Manufacturer: syz [ 213.733766][ T5912] usb 3-1: SerialNumber: syz [ 213.747590][ T5912] usb 3-1: config 0 descriptor?? [ 213.760567][ T5912] usb 3-1: no audio or video endpoints found [ 213.956050][ T7966] netlink: 24 bytes leftover after parsing attributes in process `syz.2.587'. [ 213.988471][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.149619][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.175795][ T5907] usb 3-1: USB disconnect, device number 27 [ 214.357230][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.387427][ T7978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.591'. [ 214.396584][ T7978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.591'. [ 214.490660][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.782948][ T49] veth0_to_bond: left allmulticast mode [ 214.801657][ T49] veth0_to_bond: left promiscuous mode [ 214.817232][ T49] bridge0: port 1(veth0_to_bond) entered disabled state [ 214.826000][ T7982] binder: 7981:7982 ioctl c0306201 200000000180 returned -14 [ 214.852438][ T7982] netlink: 16 bytes leftover after parsing attributes in process `syz.0.594'. [ 215.076555][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 215.087360][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 215.119616][ T30] kauditd_printk_skb: 326 callbacks suppressed [ 215.119633][ T30] audit: type=1326 audit(1768064187.590:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7991 comm="syz.2.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15938f749 code=0x7ffc0000 [ 215.119636][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 215.157610][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 215.165702][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 215.183076][ T5151] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 215.190381][ T5151] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 215.198841][ T5151] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 215.208872][ T5151] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 215.216520][ T5151] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 215.232017][ T30] audit: type=1326 audit(1768064187.590:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7991 comm="syz.2.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15938f749 code=0x7ffc0000 [ 215.255514][ T5915] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 215.451282][ T8007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.597'. [ 215.513562][ T30] audit: type=1326 audit(1768064187.590:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7991 comm="syz.2.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fe15938f749 code=0x7ffc0000 [ 215.582712][ T5915] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 215.623134][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 215.647743][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 215.693171][ T30] audit: type=1326 audit(1768064187.600:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7991 comm="syz.2.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15938f749 code=0x7ffc0000 [ 215.737415][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 54, changing to 9 [ 215.842554][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 8237, setting to 1024 [ 215.865188][ T30] audit: type=1326 audit(1768064187.600:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7991 comm="syz.2.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15938f749 code=0x7ffc0000 [ 215.903008][ T30] audit: type=1326 audit(1768064187.600:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7991 comm="syz.2.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fe15938f749 code=0x7ffc0000 [ 215.963848][ T5915] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 215.978398][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.992066][ T5915] usb 1-1: Product: syz [ 216.013886][ T5915] usb 1-1: Manufacturer: syz [ 216.040271][ T5915] usb 1-1: SerialNumber: syz [ 216.058131][ T30] audit: type=1326 audit(1768064187.600:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7991 comm="syz.2.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15938f749 code=0x7ffc0000 [ 216.203052][ T30] audit: type=1326 audit(1768064187.600:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7991 comm="syz.2.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe15938f749 code=0x7ffc0000 [ 216.229263][ T5915] usb 1-1: config 0 descriptor?? [ 216.249349][ T30] audit: type=1326 audit(1768064188.110:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7991 comm="syz.2.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15938f749 code=0x7ffc0000 [ 216.272361][ T5915] iguanair 1-1:0.0: failed to submit urb: -90 [ 216.295753][ T5915] iguanair 1-1:0.0: probe with driver iguanair failed with error -90 [ 216.433004][ T30] audit: type=1326 audit(1768064188.110:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7991 comm="syz.2.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15938f749 code=0x7ffc0000 [ 216.829841][ T49] bond1 (unregistering): Released all slaves [ 216.911813][ T8035] netlink: 408 bytes leftover after parsing attributes in process `syz.1.601'. [ 216.983315][ T5979] usb 1-1: USB disconnect, device number 25 [ 217.455444][ T5836] Bluetooth: hci4: command tx timeout [ 217.607898][ T49] hsr_slave_0: left promiscuous mode [ 217.617035][ T49] hsr_slave_1: left promiscuous mode [ 217.623982][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.654637][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.722285][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.735521][ T5912] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 217.753823][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.872330][ T49] veth1_macvtap: left promiscuous mode [ 217.878454][ T49] veth0_macvtap: left promiscuous mode [ 217.884353][ T49] veth1_vlan: left promiscuous mode [ 217.893709][ T49] veth0_vlan: left promiscuous mode [ 217.909273][ T5912] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 217.920448][ T5912] usb 3-1: config 0 interface 0 has no altsetting 0 [ 217.927388][ T5912] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 217.942220][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.968851][ T5912] usb 3-1: config 0 descriptor?? [ 217.982635][ T8040] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 218.045109][ T5915] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 218.227322][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.238290][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.265222][ T5915] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 218.307177][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.349986][ T5915] usb 5-1: config 0 descriptor?? [ 218.454468][ T5912] samsung 0003:0419:0600.000C: hidraw0: USB HID v0.04 Device [HID 0419:0600] on usb-dummy_hcd.2-1/input0 [ 218.583030][ T8045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.595649][ T8045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.882626][ T49] team0 (unregistering): Port device team_slave_1 removed [ 218.938371][ T49] team0 (unregistering): Port device team_slave_0 removed [ 218.955634][ T5915] usbhid 5-1:0.0: can't add hid device: -71 [ 218.961876][ T5915] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 218.981249][ T5915] usb 5-1: USB disconnect, device number 40 [ 219.263311][ T8050] sch_tbf: peakrate 10862992458708367263 is lower than or equals to rate 17038211371681383082 ! [ 219.388358][ T5915] usb 3-1: USB disconnect, device number 28 [ 219.540492][ T5836] Bluetooth: hci4: command tx timeout [ 219.649828][ T8012] chnl_net:caif_netlink_parms(): no params data found [ 219.719144][ T8058] xt_CT: No such helper "pptp" [ 219.899574][ T5907] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 219.922635][ T8012] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.954035][ T8012] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.980083][ T8012] bridge_slave_0: entered allmulticast mode [ 220.008341][ T8012] bridge_slave_0: entered promiscuous mode [ 220.033905][ T8077] dummy0: entered promiscuous mode [ 220.043155][ T8077] macvtap1: entered allmulticast mode [ 220.048959][ T8077] dummy0: entered allmulticast mode [ 220.069211][ T8077] dummy0: left allmulticast mode [ 220.074329][ T8077] dummy0: left promiscuous mode [ 220.086738][ T5907] usb 1-1: config 0 interface 0 has no altsetting 0 [ 220.108815][ T5915] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 220.110109][ T5907] usb 1-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice=94.24 [ 220.135085][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.150495][ T8012] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.167221][ T8012] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.176583][ T5907] usb 1-1: Product: syz [ 220.182460][ T5907] usb 1-1: Manufacturer: syz [ 220.189242][ T8012] bridge_slave_1: entered allmulticast mode [ 220.196870][ T5907] usb 1-1: SerialNumber: syz [ 220.204564][ T8012] bridge_slave_1: entered promiscuous mode [ 220.212260][ T5907] usb 1-1: config 0 descriptor?? [ 220.275391][ T5915] usb 5-1: Using ep0 maxpacket: 16 [ 220.303893][ T5915] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 220.335162][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.350946][ T8012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.364737][ T5915] usb 5-1: Product: syz [ 220.367941][ T8012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.386336][ T5915] usb 5-1: Manufacturer: syz [ 220.402205][ T5915] usb 5-1: SerialNumber: syz [ 220.426621][ T8063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.428325][ T5915] usb 5-1: config 0 descriptor?? [ 220.469802][ T8063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.484112][ T8088] syzkaller1: entered promiscuous mode [ 220.497051][ T8088] syzkaller1: entered allmulticast mode [ 220.500472][ T8063] netlink: 20 bytes leftover after parsing attributes in process `syz.0.608'. [ 220.516214][ T8012] team0: Port device team_slave_0 added [ 220.519871][ T8086] netlink: 'syz.1.613': attribute type 11 has an invalid length. [ 220.526997][ T8012] team0: Port device team_slave_1 added [ 220.552260][ T8090] netlink: 16 bytes leftover after parsing attributes in process `syz.2.614'. [ 220.555691][ T8086] netlink: 'syz.1.613': attribute type 11 has an invalid length. [ 220.569143][ T8089] binder: 8087:8089 ioctl c0306201 200000000180 returned -14 [ 220.650718][ T8012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.668418][ T5907] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 220.678629][ T8012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.678660][ T8012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.705532][ T8012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.705551][ T8012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.705576][ T8012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.855641][ T5912] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 220.868984][ T5915] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 220.891771][ T8012] hsr_slave_0: entered promiscuous mode [ 220.892974][ T5915] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 220.897989][ T5907] usb 1-1: USB disconnect, device number 26 [ 220.914286][ T8012] hsr_slave_1: entered promiscuous mode [ 220.930290][ T5915] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 220.930434][ T8012] debugfs: 'hsr0' already exists in 'hsr' [ 220.951299][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 220.978407][ T8012] Cannot create hsr debugfs directory [ 221.002673][ T5915] usb 5-1: media controller created [ 221.023802][ T5912] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 221.077444][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 221.093046][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 221.133945][ T8072] dtv5100: wlen = 0, aborting. [ 221.168349][ T5915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 221.225501][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 54, changing to 9 [ 221.260510][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 8237, setting to 1024 [ 221.347041][ T5912] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 221.356551][ T5915] zl10353_read_register: readreg error (reg=127, ret==0) [ 221.364883][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.373197][ T5915] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 221.405151][ T5912] usb 3-1: Product: syz [ 221.409374][ T5915] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 221.422870][ T5912] usb 3-1: Manufacturer: syz [ 221.440035][ T5912] usb 3-1: SerialNumber: syz [ 221.492834][ T5912] usb 3-1: config 0 descriptor?? [ 221.530550][ T5912] iguanair 3-1:0.0: failed to submit urb: -90 [ 221.558754][ T5912] iguanair 3-1:0.0: probe with driver iguanair failed with error -90 [ 221.616819][ T5836] Bluetooth: hci4: command tx timeout [ 221.791328][ T8012] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 221.828301][ T8012] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 221.830026][ T5907] usb 3-1: USB disconnect, device number 29 [ 221.911902][ T8012] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 221.945314][ T8012] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 222.162387][ T8125] tipc: Started in network mode [ 222.167452][ T8125] tipc: Node identity f64fa2edce24, cluster identity 4711 [ 222.181077][ T8125] tipc: Enabled bearer , priority 0 [ 222.232237][ T8126] syzkaller0: entered promiscuous mode [ 222.243343][ T8126] syzkaller0: entered allmulticast mode [ 222.319875][ T8125] tipc: Resetting bearer [ 222.376373][ T8012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.404666][ T8012] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.419836][ T8124] tipc: Resetting bearer [ 222.434799][ T8124] tipc: Disabling bearer [ 222.463108][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.470305][ T1007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.537198][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.544435][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.714419][ T8012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.767990][ T8146] netlink: 408 bytes leftover after parsing attributes in process `syz.0.621'. [ 222.818199][ T8012] veth0_vlan: entered promiscuous mode [ 222.871795][ T8012] veth1_vlan: entered promiscuous mode [ 222.894334][ T5915] usb 5-1: USB disconnect, device number 41 [ 223.036727][ T8012] veth0_macvtap: entered promiscuous mode [ 223.062918][ T8154] netlink: 12 bytes leftover after parsing attributes in process `syz.2.622'. [ 223.093018][ T8012] veth1_macvtap: entered promiscuous mode [ 223.142331][ T8012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.145126][ T5915] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 223.172373][ T8158] netlink: 540 bytes leftover after parsing attributes in process `syz.2.622'. [ 223.309124][ T8012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.401694][ T1135] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.414619][ T1135] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.482049][ T8154] netlink: 12 bytes leftover after parsing attributes in process `syz.2.622'. [ 223.510819][ T1135] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.571288][ T1135] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.696774][ T5836] Bluetooth: hci4: command tx timeout [ 223.986730][ T2126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.041590][ T2126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.175587][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.197648][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.805684][ T10] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 225.005086][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 225.027246][ T10] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 225.062848][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.126237][ T10] usb 2-1: config 0 descriptor?? [ 225.381083][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 225.422075][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 225.448742][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 225.473675][ T10] usb 2-1: media controller created [ 225.531504][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 225.724379][ T8199] binder: 8198:8199 ioctl c0306201 200000000180 returned -14 [ 225.732177][ T8203] netlink: 16 bytes leftover after parsing attributes in process `syz.2.629'. [ 226.015135][ T5824] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 226.658148][ T5824] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 226.691122][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 226.702396][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 226.715541][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 54, changing to 9 [ 226.726740][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 8237, setting to 1024 [ 226.742557][ T5824] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 226.752272][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.760668][ T5824] usb 3-1: Product: syz [ 226.765356][ T5824] usb 3-1: Manufacturer: syz [ 226.772540][ T5824] usb 3-1: SerialNumber: syz [ 226.777902][ T10] az6027: usb out operation failed. (-71) [ 226.784533][ T10] stb0899_attach: Driver disabled by Kconfig [ 226.791638][ T10] az6027: no front-end attached [ 226.791638][ T10] [ 226.804037][ T10] az6027: usb out operation failed. (-71) [ 226.814077][ T5824] usb 3-1: config 0 descriptor?? [ 226.819674][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 226.843342][ T5824] iguanair 3-1:0.0: failed to submit urb: -90 [ 226.849661][ T5912] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 226.866630][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input28 [ 226.884192][ T5824] iguanair 3-1:0.0: probe with driver iguanair failed with error -90 [ 226.890372][ T8215] bond0: Error: Cannot enslave bond to itself. [ 226.897563][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 226.919819][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 226.936652][ T10] usb 2-1: USB disconnect, device number 42 [ 227.001499][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 227.030932][ T5912] usb 1-1: Using ep0 maxpacket: 16 [ 227.059254][ T5824] usb 3-1: USB disconnect, device number 30 [ 227.079258][ T5912] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 227.098256][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.162019][ T5912] usb 1-1: Product: syz [ 227.177202][ T5912] usb 1-1: Manufacturer: syz [ 227.187824][ T5912] usb 1-1: SerialNumber: syz [ 227.201076][ T5912] usb 1-1: config 0 descriptor?? [ 227.302760][ T8223] netlink: 'syz.1.635': attribute type 4 has an invalid length. [ 227.627078][ T5912] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 227.644002][ T5912] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 227.657265][ T5912] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 227.676625][ T5912] usb 1-1: media controller created [ 227.700008][ T5912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 227.882127][ T5912] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 227.890869][ T5912] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 227.964313][ T8233] netlink: 8 bytes leftover after parsing attributes in process `syz.5.637'. [ 228.029775][ T8236] tipc: Enabling of bearer rejected, already enabled [ 228.102021][ T8236] netlink: 39 bytes leftover after parsing attributes in process `syz.2.636'. [ 228.111311][ T8209] dtv5100: wlen = 0, aborting. [ 228.118125][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 228.118142][ T30] audit: type=1326 audit(1768064200.500:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8229 comm="syz.2.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15938f749 code=0x7ffc0000 [ 228.155941][ T8236] netlink: 1 bytes leftover after parsing attributes in process `syz.2.636'. [ 228.226136][ T30] audit: type=1326 audit(1768064200.510:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8229 comm="syz.2.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15938f749 code=0x7ffc0000 [ 228.290287][ T8236] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 228.330520][ T8236] tipc: Enabled bearer , priority 10 [ 228.341967][ T30] audit: type=1326 audit(1768064200.510:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8229 comm="syz.2.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe15938f749 code=0x7ffc0000 [ 228.394662][ T30] audit: type=1326 audit(1768064200.510:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8229 comm="syz.2.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15938f749 code=0x7ffc0000 [ 228.453941][ T30] audit: type=1326 audit(1768064200.510:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8229 comm="syz.2.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15938f749 code=0x7ffc0000 [ 228.530927][ T30] audit: type=1326 audit(1768064200.510:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8229 comm="syz.2.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe15938f749 code=0x7ffc0000 [ 228.593440][ T30] audit: type=1326 audit(1768064200.510:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8229 comm="syz.2.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe15938f749 code=0x7ffc0000 [ 228.651598][ T30] audit: type=1326 audit(1768064200.510:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8229 comm="syz.2.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe159391667 code=0x7ffc0000 [ 228.844565][ T30] audit: type=1326 audit(1768064200.510:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8229 comm="syz.2.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fe1593915dc code=0x7ffc0000 [ 228.932245][ T30] audit: type=1326 audit(1768064200.510:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8229 comm="syz.2.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe159391514 code=0x7ffc0000 [ 229.312438][ T8255] netlink: 408 bytes leftover after parsing attributes in process `syz.4.642'. [ 229.325096][ T5979] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 229.675788][ T5979] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 229.684626][ T5979] usb 6-1: config 0 has no interface number 0 [ 229.690845][ T5979] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 229.714026][ T5907] usb 1-1: USB disconnect, device number 27 [ 229.776606][ T5979] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 229.809387][ T5907] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 229.827264][ T5979] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 229.886582][ T5979] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 229.907278][ T8259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.013459][ T5979] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 230.032322][ T5979] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 230.340227][ T5979] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 230.358036][ T5979] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.380893][ T5979] usb 6-1: config 0 descriptor?? [ 230.393436][ T8249] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 230.405098][ T8249] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 230.419269][ T8268] binder: 8266:8268 ioctl c0306201 200000000180 returned -14 [ 230.427004][ T8269] netlink: 16 bytes leftover after parsing attributes in process `syz.2.646'. [ 230.448189][ T5979] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 230.629515][ T8249] ldusb 6-1:0.55: Write buffer overflow, 1 bytes dropped [ 230.675239][ T5979] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 230.837132][ T5979] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 230.850155][ T5979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 230.870531][ T5979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 230.899809][ T5979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 54, changing to 9 [ 230.930411][ T5979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 8237, setting to 1024 [ 230.957277][ T5979] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 230.971136][ T5979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.991553][ T5979] usb 3-1: Product: syz [ 231.002676][ T5979] usb 3-1: Manufacturer: syz [ 231.007668][ T5979] usb 3-1: SerialNumber: syz [ 231.031321][ T5979] usb 3-1: config 0 descriptor?? [ 231.050054][ T5979] iguanair 3-1:0.0: failed to submit urb: -90 [ 231.060136][ T5979] iguanair 3-1:0.0: probe with driver iguanair failed with error -90 [ 231.264427][ T5979] usb 3-1: USB disconnect, device number 31 [ 232.175650][ T5912] usb 6-1: USB disconnect, device number 2 [ 232.212538][ T5912] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 232.975621][ T5824] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 233.145166][ T5824] usb 5-1: Using ep0 maxpacket: 32 [ 233.238559][ T5824] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 233.255767][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.272718][ T5824] usb 5-1: Product: syz [ 233.282604][ T5824] usb 5-1: Manufacturer: syz [ 233.292955][ T5824] usb 5-1: SerialNumber: syz [ 233.321931][ T5824] usb 5-1: config 0 descriptor?? [ 233.338792][ T5824] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 234.144426][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 234.435164][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 234.444923][ T9] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 234.455672][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.474923][ T9] usb 6-1: Product: syz [ 234.481532][ T9] usb 6-1: Manufacturer: syz [ 234.496965][ T9] usb 6-1: SerialNumber: syz [ 234.516121][ T9] usb 6-1: config 0 descriptor?? [ 234.835285][ T5893] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 234.928088][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 234.940337][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 234.951739][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 234.959868][ T9] usb 6-1: media controller created [ 234.975335][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 234.987648][ T5893] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 235.003835][ T5893] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 235.015242][ T5893] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 235.027521][ T5893] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 235.038935][ T5893] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 235.052747][ T5893] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 235.060651][ T5893] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 235.073105][ T5893] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 235.084864][ T5893] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 235.096049][ T5893] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 235.108524][ T5893] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 235.115998][ T5893] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 235.126745][ T5893] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 235.138698][ T5893] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 235.150589][ T5893] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 235.205785][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 235.230540][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 235.251513][ T5893] usb 1-1: string descriptor 0 read error: -22 [ 235.258904][ T5893] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 235.293357][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.417099][ T5893] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 235.454815][ T8310] dtv5100: wlen = 0, aborting. [ 235.470354][ T5824] gspca_ov534_9: reg_r err -110 [ 235.661514][ T5979] usb 6-1: USB disconnect, device number 3 [ 235.751052][ T5979] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 235.845244][ T5824] gspca_ov534_9: Unknown sensor 0000 [ 235.845365][ T5824] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 236.334435][ T5979] usb 5-1: USB disconnect, device number 42 [ 236.584933][ T8347] netlink: 24 bytes leftover after parsing attributes in process `syz.4.659'. [ 236.621910][ T8340] binder: 8339:8340 ioctl c0306201 200000000180 returned -14 [ 236.658179][ T8344] netlink: 16 bytes leftover after parsing attributes in process `syz.5.660'. [ 236.975224][ T5979] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 237.107753][ T8357] netlink: 408 bytes leftover after parsing attributes in process `syz.4.661'. [ 237.169769][ T5979] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 237.208331][ T5979] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 237.239266][ T5979] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 237.277308][ T5979] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 54, changing to 9 [ 237.309622][ T5979] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 8237, setting to 1024 [ 237.348740][ T5979] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 237.387332][ T5979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.433176][ T5979] usb 6-1: Product: syz [ 237.446485][ T5979] usb 6-1: Manufacturer: syz [ 237.457543][ T5979] usb 6-1: SerialNumber: syz [ 237.483239][ T5979] usb 6-1: config 0 descriptor?? [ 237.507608][ T5979] iguanair 6-1:0.0: failed to submit urb: -90 [ 237.527636][ T5979] iguanair 6-1:0.0: probe with driver iguanair failed with error -90 [ 237.784895][ T5979] usb 6-1: USB disconnect, device number 4 [ 237.832857][ T5907] usb 1-1: USB disconnect, device number 28 [ 238.207017][ T8372] netlink: 'syz.1.664': attribute type 5 has an invalid length. [ 238.229106][ T8372] netlink: 16 bytes leftover after parsing attributes in process `syz.1.664'. [ 239.665675][ T5979] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 239.836367][ T5979] usb 3-1: Using ep0 maxpacket: 16 [ 239.848282][ T5979] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 239.868491][ T5979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.877934][ T5920] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 239.897595][ T5979] usb 3-1: Product: syz [ 239.906343][ T5979] usb 3-1: Manufacturer: syz [ 239.912370][ T5979] usb 3-1: SerialNumber: syz [ 239.916898][ T5824] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 239.929848][ T5979] usb 3-1: config 0 descriptor?? [ 240.015144][ T5893] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 240.067406][ T5920] usb 6-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 240.093732][ T5824] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 240.104348][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.112511][ T5920] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 240.134179][ T5824] usb 1-1: Product: syz [ 240.144335][ T5824] usb 1-1: Manufacturer: syz [ 240.154420][ T5824] usb 1-1: SerialNumber: syz [ 240.154491][ T5920] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 240.173087][ T5824] usb 1-1: config 0 descriptor?? [ 240.185298][ T5893] usb 2-1: Using ep0 maxpacket: 8 [ 240.193989][ T5893] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 240.196066][ T5920] usb 6-1: config 0 interface 0 has no altsetting 0 [ 240.214159][ T5824] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 029 [ 240.220047][ T5920] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 240.223991][ T5893] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 240.231513][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 240.252185][ T5920] usb 6-1: Product: syz [ 240.260817][ T5893] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 240.274708][ T5893] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 240.282460][ T5920] usb 6-1: Manufacturer: syz [ 240.285466][ T5893] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 240.302767][ T5920] usb 6-1: SerialNumber: syz [ 240.305387][ T5893] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 240.319726][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.337850][ T5920] usb 6-1: config 0 descriptor?? [ 240.345671][ T5979] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 240.365910][ T8406] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 240.368412][ T8419] netlink: 28 bytes leftover after parsing attributes in process `syz.4.673'. [ 240.382226][ T5920] usb 6-1: selecting invalid altsetting 0 [ 240.394106][ T5979] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 240.437566][ T5979] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 240.448436][ T5979] usb 3-1: media controller created [ 240.474214][ T5979] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 240.551496][ T8410] netlink: 'syz.1.672': attribute type 2 has an invalid length. [ 240.625944][ T5979] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 240.633973][ T5979] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 240.685674][ T5824] (null): failure reading functionality [ 240.705275][ T5824] i2c i2c-2: failure reading functionality [ 240.772205][ T5824] i2c i2c-2: connected i2c-tiny-usb device [ 240.808554][ T5893] usb 2-1: usb_control_msg returned -71 [ 240.843194][ T5893] usbtmc 2-1:16.0: can't read capabilities [ 240.880490][ T5893] usb 2-1: USB disconnect, device number 43 [ 240.905914][ T8406] tipc: Started in network mode [ 240.921004][ T8406] tipc: Node identity 2dd0bd99abf10e0b002e, cluster identity 4711 [ 240.945711][ T8401] dtv5100: wlen = 0, aborting. [ 240.973254][ T8406] usb 6-1: BOGUS urb xfer, pipe 0 != type 1 [ 241.075160][ T8440] ------------[ cut here ]------------ [ 241.080690][ T8440] usb 3-1: BOGUS control dir, pipe 80002080 doesn't match bRequestType c0 [ 241.089325][ T8440] WARNING: drivers/usb/core/urb.c:414 at usb_submit_urb+0x105c/0x18d0, CPU#0: syz.0.663/8440 [ 241.099764][ T8440] Modules linked in: [ 241.103956][ T8440] CPU: 0 UID: 0 PID: 8440 Comm: syz.0.663 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.115650][ T8440] Tainted: [L]=SOFTLOCKUP [ 241.119976][ T8440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 241.130693][ T8440] RIP: 0010:usb_submit_urb+0x111c/0x18d0 [ 241.136372][ T8440] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b7 f2 ff ff 89 e9 [ 241.156210][ T8440] RSP: 0018:ffffc900035f7680 EFLAGS: 00010246 [ 241.162271][ T8440] RAX: 0000000000000000 RBX: ffff888034477600 RCX: 0000000080002080 [ 241.170289][ T8440] RDX: ffff88801dfb2380 RSI: ffffffff8c140a20 RDI: ffffffff8f8ee730 [ 241.178365][ T8440] RBP: 1ffff11006922cb0 R08: 00000000000000c0 R09: 0000000000000000 [ 241.186450][ T8440] R10: ffffc900035f7780 R11: fffff520006beefc R12: ffff88807743c100 [ 241.194408][ T8440] R13: ffff888034916580 R14: 0000000080002080 R15: ffff88801dfb2380 [ 241.202450][ T8440] FS: 00007f80b90876c0(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 241.212358][ T8440] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 241.219520][ T8440] CR2: 0000200000115030 CR3: 000000006b1a8000 CR4: 00000000003526f0 [ 241.227525][ T8440] Call Trace: [ 241.230793][ T8440] [ 241.233710][ T8440] ? __init_swait_queue_head+0xa9/0x150 [ 241.239286][ T8440] usb_start_wait_urb+0x115/0x4f0 [ 241.244392][ T8440] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 241.250056][ T8440] usb_control_msg+0x232/0x3e0 [ 241.254812][ T8440] dtv5100_i2c_msg+0x231/0x2f0 [ 241.259615][ T8440] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 241.264459][ T8440] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 241.270126][ T8440] __i2c_transfer+0x79a/0x1f00 [ 241.274878][ T8440] ? __lock_acquire+0x6b6/0x2cf0 [ 241.279924][ T8440] __i2c_smbus_xfer+0xf5d/0x1e20 [ 241.284861][ T8440] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 241.290264][ T8440] ? lockdep_hardirqs_on+0x7b/0x110 [ 241.295472][ T8440] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 241.301262][ T8440] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 241.306683][ T8440] i2c_smbus_xfer+0x1f4/0x310 [ 241.311953][ T8440] i2cdev_ioctl_smbus+0x1cd/0x750 [ 241.317486][ T8440] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 241.323029][ T8440] i2cdev_ioctl+0x5d3/0x820 [ 241.327567][ T8440] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 241.332583][ T8440] ? __fget_files+0x2a/0x420 [ 241.337295][ T8440] ? __fget_files+0x3a0/0x420 [ 241.341957][ T8440] ? bpf_lsm_file_ioctl+0x9/0x20 [ 241.346910][ T8440] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 241.351916][ T8440] __se_sys_ioctl+0xfc/0x170 [ 241.356538][ T8440] do_syscall_64+0xec/0xf80 [ 241.361026][ T8440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.367109][ T8440] ? trace_irq_disable+0x37/0x100 [ 241.372118][ T8440] ? clear_bhb_loop+0x60/0xb0 [ 241.376808][ T8440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.382682][ T8440] RIP: 0033:0x7f80b818f749 [ 241.387139][ T8440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.406853][ T8440] RSP: 002b:00007f80b9087038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 241.415921][ T8440] RAX: ffffffffffffffda RBX: 00007f80b83e6090 RCX: 00007f80b818f749 [ 241.423884][ T8440] RDX: 0000200000000180 RSI: 0000000000000720 RDI: 0000000000000003 [ 241.432386][ T8440] RBP: 00007f80b8213f91 R08: 0000000000000000 R09: 0000000000000000 [ 241.440478][ T8440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.448487][ T8440] R13: 00007f80b83e6128 R14: 00007f80b83e6090 R15: 00007f80b850fa28 [ 241.456490][ T8440] [ 241.459494][ T8440] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 241.466756][ T8440] CPU: 0 UID: 0 PID: 8440 Comm: syz.0.663 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.477493][ T8440] Tainted: [L]=SOFTLOCKUP [ 241.481794][ T8440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 241.491827][ T8440] Call Trace: [ 241.495092][ T8440] [ 241.498006][ T8440] vpanic+0x1e0/0x670 [ 241.501972][ T8440] panic+0xb9/0xc0 [ 241.505695][ T8440] ? __pfx_panic+0x10/0x10 [ 241.510099][ T8440] __warn+0x317/0x4b0 [ 241.514063][ T8440] ? usb_submit_urb+0x105c/0x18d0 [ 241.519073][ T8440] ? usb_submit_urb+0x105c/0x18d0 [ 241.524082][ T8440] __report_bug+0x288/0x500 [ 241.528567][ T8440] ? usb_submit_urb+0x105c/0x18d0 [ 241.533574][ T8440] ? __pfx___report_bug+0x10/0x10 [ 241.538579][ T8440] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 241.544363][ T8440] ? lockdep_hardirqs_on+0x7b/0x110 [ 241.549540][ T8440] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 241.555323][ T8440] ? stack_depot_save_flags+0x3f3/0x810 [ 241.560847][ T8440] report_bug_entry+0x19a/0x290 [ 241.565677][ T8440] ? usb_submit_urb+0x111c/0x18d0 [ 241.570682][ T8440] ? usb_submit_urb+0x1121/0x18d0 [ 241.575704][ T8440] handle_bug+0xca/0x200 [ 241.579928][ T8440] exc_invalid_op+0x1a/0x50 [ 241.584411][ T8440] asm_exc_invalid_op+0x1a/0x20 [ 241.589239][ T8440] RIP: 0010:usb_submit_urb+0x111c/0x18d0 [ 241.594848][ T8440] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b7 f2 ff ff 89 e9 [ 241.614430][ T8440] RSP: 0018:ffffc900035f7680 EFLAGS: 00010246 [ 241.620483][ T8440] RAX: 0000000000000000 RBX: ffff888034477600 RCX: 0000000080002080 [ 241.628445][ T8440] RDX: ffff88801dfb2380 RSI: ffffffff8c140a20 RDI: ffffffff8f8ee730 [ 241.636398][ T8440] RBP: 1ffff11006922cb0 R08: 00000000000000c0 R09: 0000000000000000 [ 241.644371][ T8440] R10: ffffc900035f7780 R11: fffff520006beefc R12: ffff88807743c100 [ 241.652329][ T8440] R13: ffff888034916580 R14: 0000000080002080 R15: ffff88801dfb2380 [ 241.660346][ T8440] ? __init_swait_queue_head+0xa9/0x150 [ 241.665884][ T8440] usb_start_wait_urb+0x115/0x4f0 [ 241.670899][ T8440] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 241.676435][ T8440] usb_control_msg+0x232/0x3e0 [ 241.681185][ T8440] dtv5100_i2c_msg+0x231/0x2f0 [ 241.685936][ T8440] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 241.690781][ T8440] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 241.696416][ T8440] __i2c_transfer+0x79a/0x1f00 [ 241.701178][ T8440] ? __lock_acquire+0x6b6/0x2cf0 [ 241.706196][ T8440] __i2c_smbus_xfer+0xf5d/0x1e20 [ 241.711158][ T8440] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 241.716522][ T8440] ? lockdep_hardirqs_on+0x7b/0x110 [ 241.721714][ T8440] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 241.727505][ T8440] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 241.732860][ T8440] i2c_smbus_xfer+0x1f4/0x310 [ 241.737521][ T8440] i2cdev_ioctl_smbus+0x1cd/0x750 [ 241.742536][ T8440] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 241.748071][ T8440] i2cdev_ioctl+0x5d3/0x820 [ 241.752551][ T8440] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 241.757572][ T8440] ? __fget_files+0x2a/0x420 [ 241.762144][ T8440] ? __fget_files+0x3a0/0x420 [ 241.766809][ T8440] ? bpf_lsm_file_ioctl+0x9/0x20 [ 241.771728][ T8440] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 241.776730][ T8440] __se_sys_ioctl+0xfc/0x170 [ 241.781305][ T8440] do_syscall_64+0xec/0xf80 [ 241.785791][ T8440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.791832][ T8440] ? trace_irq_disable+0x37/0x100 [ 241.796834][ T8440] ? clear_bhb_loop+0x60/0xb0 [ 241.801490][ T8440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.807360][ T8440] RIP: 0033:0x7f80b818f749 [ 241.811754][ T8440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.831431][ T8440] RSP: 002b:00007f80b9087038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 241.839830][ T8440] RAX: ffffffffffffffda RBX: 00007f80b83e6090 RCX: 00007f80b818f749 [ 241.847782][ T8440] RDX: 0000200000000180 RSI: 0000000000000720 RDI: 0000000000000003 [ 241.855735][ T8440] RBP: 00007f80b8213f91 R08: 0000000000000000 R09: 0000000000000000 [ 241.863684][ T8440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.871633][ T8440] R13: 00007f80b83e6128 R14: 00007f80b83e6090 R15: 00007f80b850fa28 [ 241.879595][ T8440] [ 241.882968][ T8440] Kernel Offset: disabled [ 241.887277][ T8440] Rebooting in 86400 seconds..