last executing test programs: 1m45.718780348s ago: executing program 0 (id=224): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$CEC_RECEIVE(r0, 0xc0386106, &(0x7f00000000c0)={0x6, 0x8000, 0x8bca, 0x3, 0x9, 0x3ff, "f6bd1b9c5920f06ae8a0462918beae47", 0x6, 0x6, 0x7, 0x1, 0x1, 0x1, 0x7}) syz_clone3(&(0x7f00000002c0)={0x280000100, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0, {0x1a}, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=""/81, &(0x7f0000000280)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8, {r0}}, 0x58) sched_setattr(r1, &(0x7f0000000340)={0x38, 0x0, 0x68, 0xfffffffe, 0x9, 0xeb000000, 0x79, 0xa, 0x0, 0xacc}, 0x0) fspick(r0, &(0x7f0000000380)='./file0\x00', 0x1) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440), 0x0, 0xfffffffffffffff9) r3 = add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000500)="69eaedc8ed87e6707b9a502082ee74b9fa1a7eeec65d9071b6826a10dd375e344eab6de03fc8a960613bab2f059d6c782ceb0cbcc49dcecdfd9f249043a4cf24f170fe138fc3abd4d00c4eab875c85efea5bc72eecf56bda6bfc4c1e94a8c621da79a68420e40c78372938482eedf96d20ff5002721dc265d1bcadd52b870c12da2d4e45cc7886ef1a", 0x89, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000005c0)={r2, 0x0, r3}, &(0x7f0000000600)=""/158, 0x9e, &(0x7f0000000740)={&(0x7f00000006c0)={'crc32c-generic\x00'}, &(0x7f0000000700)="a5f8e5aabe5986", 0x7}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000780)={0x2, [[0x9, 0x10001, 0x8000, 0x101, 0x8, 0x101, 0x3ff, 0xfffff788], [0x5, 0x9, 0x8, 0xfffffff9, 0x6, 0x8, 0x5, 0x4], [0x9, 0x6, 0x4, 0x6, 0x80000001, 0xc2, 0x6]], '\x00', [{0x80000000, 0x3, 0x0, 0x1, 0x1, 0x1}, {0x9, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x10000, 0xffffffff, 0x1, 0x1, 0x0, 0x1}, {0x9, 0x800, 0x1, 0x0, 0x1, 0x1}, {0x1ff, 0x1, 0x0, 0x1, 0x1}, {0xa6, 0xfffffff9, 0x1}, {0x3, 0x7, 0x1, 0x1}, {0x1, 0x2, 0x0, 0x1, 0x1, 0x1}, {0x9, 0xff, 0x0, 0x0, 0x1}, {0xb3, 0xfff, 0x1, 0x1, 0x1, 0x1}, {0x29, 0xfff, 0x1, 0x1, 0x1, 0x1}, {0xa, 0x7ff, 0x0, 0x0, 0x1}], '\x00', 0x1ff}) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000a80)=[@textreal={0x8, &(0x7f0000000a00)="baa100b8b72aefbaf80c66b8e81ed88f66efbafc0c66b80700000066ef65f68ffffc9c0f00dcba4000edf30f214b0f7908660f16a1f7ff65670f12c90f20d86635080000000f22d8", 0x48}], 0x1, 0x20, &(0x7f0000000ac0), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000b00)={0x0, 0x0}) sched_setattr(r4, &(0x7f0000000b80)={0x38, 0x3, 0x40, 0x3, 0x401, 0x1, 0x1, 0x2, 0x3, 0x2}, 0x0) pselect6(0x40, &(0x7f0000000bc0)={0xffffffffffffa0eb, 0x23, 0xe, 0x6, 0x6, 0x10, 0xfffffffffffffffb, 0x8}, &(0x7f0000000c00)={0x6, 0x1, 0x7, 0x33f8, 0x8, 0x5, 0x5, 0x7}, &(0x7f0000000c40)={0x10001, 0x3, 0xffffffffffffffff, 0xd74, 0xeb21, 0x3, 0x1, 0x5}, &(0x7f0000000c80)={0x0, 0x989680}, &(0x7f0000000d00)={&(0x7f0000000cc0)={[0x1e9]}, 0x8}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000dc0)={'syztnl2\x00', &(0x7f0000000d40)={'sit0\x00', 0x0, 0x80, 0x20, 0x40, 0x1, {{0xb, 0x4, 0x3, 0x23, 0x2c, 0x65, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010102, @loopback, {[@generic={0x94, 0x8, "71b7e00b0396"}, @timestamp_prespec={0x44, 0xc, 0xc0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x1b}, 0x400}]}, @ra={0x94, 0x4, 0x1}]}}}}}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000e00)={r5, 0x1, 0x6, @remote}, 0x10) sched_getattr(0xffffffffffffffff, &(0x7f0000000e40)={0x38}, 0x38, 0x0) socket$alg(0x26, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x7) sched_setattr(r4, &(0x7f0000000e80)={0x38, 0x0, 0x10, 0x9, 0x4, 0x1c5c112a, 0x7, 0x80, 0x2, 0x44d}, 0x0) ioctl$int_out(r6, 0x5462, &(0x7f0000000ec0)) r7 = io_uring_setup(0x192a, &(0x7f0000000f00)={0x0, 0xc41, 0x10000, 0x1, 0x28c}) io_uring_enter(r7, 0x1b22, 0x37d3, 0x20, &(0x7f0000000f80)={[0x5]}, 0x8) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000fc0)={'pimreg1\x00', 0x9a}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000001000)={{0x2, 0x4e24, @rand_addr=0x64010100}, {0x1, @local}, 0x10, {0x2, 0x4e21, @local}, 'ip_vti0\x00'}) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001080), 0x101000, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001140)={0x0, 0x68, &(0x7f00000010c0)=[@in6={0xa, 0x4e22, 0x8, @private1, 0x7}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x3, @private2, 0x324}, @in={0x2, 0x4e22, @multicast1}]}, &(0x7f0000001180)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f00000011c0)={r9, 0x2, 0x5, [0xc000, 0x5, 0x1, 0x3, 0x9]}, 0x12) 1m45.358768476s ago: executing program 0 (id=226): socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000780)='./bus\x00', 0x400141042, 0x0) (async, rerun: 64) r0 = socket(0xf, 0x3, 0x2) (rerun: 64) write(r0, &(0x7f0000a97ff0)="02", 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000640)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/100, 0x64, 0x2, 0x6}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/37, 0x25, 0x1, 0x28}, @fd}, &(0x7f0000000140)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) (async, rerun: 64) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (rerun: 64) socket$netlink(0x10, 0x3, 0x8000000004) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r5, &(0x7f0000000080)='syz0\x00', 0x1ff) (async) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="a3ff33"], 0x0) (async) r6 = openat$cgroup(r5, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c"], 0x140}}, 0x0) r8 = openat$cgroup_type(r6, &(0x7f0000000040), 0x2, 0x0) readv(r8, &(0x7f0000001880)=[{&(0x7f00000003c0)=""/228, 0xe4}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000100)=[@free_buffer], 0x0, 0x0, 0x0}) (async) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f0000005180)={0x2020}, 0x2020) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000300)={'veth1_vlan\x00', 0x200}) 1m44.89764874s ago: executing program 0 (id=229): r0 = syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000206b1d010140000102030109025f0003010000000904000000010100"], 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) getpeername$l2tp6(r1, 0x0, &(0x7f0000000140)) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xb}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000400)={0x14, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x38, @string={0x38, 0x3, "6cbd87551224e3c8275120611eb137edc1efaa4436a252be915e9ccf0428ac904e71039a29ebe9624df68af5025c0b2c4fbe50f429dc"}}}, 0x0) syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000206b1d010140000102030109025f0003010000000904000000010100"], 0x0) (async) socket(0x40000000015, 0x5, 0x0) (async) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) (async) getpeername$l2tp6(r1, 0x0, &(0x7f0000000140)) (async) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xb}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$uac1(r0, &(0x7f0000000400)={0x14, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x38, @string={0x38, 0x3, "6cbd87551224e3c8275120611eb137edc1efaa4436a252be915e9ccf0428ac904e71039a29ebe9624df68af5025c0b2c4fbe50f429dc"}}}, 0x0) (async) 1m43.487765503s ago: executing program 0 (id=234): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='_id=\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = syz_io_uring_setup(0x1390, &(0x7f0000000300)={0x0, 0x2483, 0x2, 0xfffffffb, 0x220}, &(0x7f0000000500), &(0x7f0000000140)) io_uring_enter(r2, 0x47fa, 0x2acb, 0x6f, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x8) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1m43.215069197s ago: executing program 0 (id=236): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x38) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result={0x0, 0xfffffffd}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x2}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue={0x1, {0xfffffff8, 0x6}}}, {0x80, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000180)=r3) getpeername$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) write$sndseq(r1, &(0x7f00000004c0)=[{0x81, 0x80, 0x2, 0x4, @time={0x8, 0x5}, {0x3, 0x31}, {0xff, 0x7f}, @queue={0x80, {0x8, 0x4}}}, {0x8, 0x2, 0x8f, 0x6, @time={0x3, 0x1cddab93}, {0x0, 0x6e}, {0xf2, 0x30}, @addr={0x9, 0x1}}, {0x8, 0x7, 0x0, 0xe3, @time={0x200, 0x9}, {0x8}, {0x6, 0x1}, @raw8={"7aa27555b79e43403e7fa600"}}, {0x0, 0x7, 0x3, 0x6, @time={0x1, 0x7}, {0x8, 0xfd}, {0x93, 0x80}, @queue={0x14, {0x10, 0x80}}}, {0x6, 0x8, 0x3, 0x40, @tick=0xf6, {0x2, 0x8}, {0x3}, @ext={0x0, 0x0}}, {0xba, 0x6, 0x54, 0x7, @time={0xe5b, 0x10001}, {0x80, 0x8}, {0x2, 0x7f}, @control={0x5, 0x40, 0x5}}, {0x3, 0xc, 0x4, 0x6, @time={0x6, 0x1}, {0x10, 0x4}, {0x8, 0xa}, @raw8={"80408bcf99ee1216e4e59519"}}, {0xd2, 0x5, 0xd1, 0x0, @time={0x8, 0x4}, {0x54, 0x6}, {0x8, 0x8}, @result={0x5, 0x6}}, {0xcf, 0x1, 0xff, 0x5, @tick=0x9, {0x4, 0xb3}, {0x80, 0xd}, @control={0x66, 0x800, 0x3}}], 0xfc) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0x198b, 0x10100, 0x0, 0x3aa, 0x0, r6}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r10 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x40, 0x1, 0x0) mq_timedreceive(r10, &(0x7f0000000000)=""/83, 0x9b0c4f391059f39b, 0x20000900, &(0x7f0000000100)={0x77359400}) 1m42.9102211s ago: executing program 0 (id=239): r0 = socket$alg(0x26, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000010bd408205000000000000000109022400011b0000000904"], 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000001, 0xffffffffffffffff}) (async) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000001, 0xffffffffffffffff}) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x4000) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$netlink(r5, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000000100)={0xb8, 0x22, 0x0, 0x70bd2d, 0x25dfdbfe, "", [@generic="8d190934166533b6a5ffa3f834131c10f79e950c1ffa438ed2ff7aff922a373c9e157db44c5bc09e55ae5828d52feec9d7f00739188459a6901b12805adbaf4a70dc1c1fa7bbe669e8bab85b7180c0e1be4af0145a14c15c5f97ede8dae79bde3f371836c003b681e3e5d6d5dab9c66802f7449732c8047b5061a60fe126566e805386bfb559c58e4dfb6ca8511bfba65ed373515764ba23d0d1b7b4609553f4dbc2577d26"]}, 0xb8}, {&(0x7f00000002c0)={0x48, 0x24, 0x400, 0x70bd28, 0x25dfdbff, "", [@generic="598d7f10774f601576da3354bf0bf6fba455d491b4af22e43963a10929b48b11262ea9aa8164809ec4e90cb797b66583b354ebff62"]}, 0x48}], 0x2, 0x0, 0x0, 0x20000000}, 0x801) syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x40, 0xf, 0xea, 0x8, 0x1397, 0xbd, 0xd254, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x8c, 0x58, 0x73, 0x0, [], [{{0x9, 0x5, 0x1}}]}}]}}]}}, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x40, 0xf, 0xea, 0x8, 0x1397, 0xbd, 0xd254, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x8c, 0x58, 0x73, 0x0, [], [{{0x9, 0x5, 0x1}}]}}]}}]}}, 0x0) 1m42.140660394s ago: executing program 32 (id=239): r0 = socket$alg(0x26, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000010bd408205000000000000000109022400011b0000000904"], 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000001, 0xffffffffffffffff}) (async) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000001, 0xffffffffffffffff}) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x4000) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$netlink(r5, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000000100)={0xb8, 0x22, 0x0, 0x70bd2d, 0x25dfdbfe, "", [@generic="8d190934166533b6a5ffa3f834131c10f79e950c1ffa438ed2ff7aff922a373c9e157db44c5bc09e55ae5828d52feec9d7f00739188459a6901b12805adbaf4a70dc1c1fa7bbe669e8bab85b7180c0e1be4af0145a14c15c5f97ede8dae79bde3f371836c003b681e3e5d6d5dab9c66802f7449732c8047b5061a60fe126566e805386bfb559c58e4dfb6ca8511bfba65ed373515764ba23d0d1b7b4609553f4dbc2577d26"]}, 0xb8}, {&(0x7f00000002c0)={0x48, 0x24, 0x400, 0x70bd28, 0x25dfdbff, "", [@generic="598d7f10774f601576da3354bf0bf6fba455d491b4af22e43963a10929b48b11262ea9aa8164809ec4e90cb797b66583b354ebff62"]}, 0x48}], 0x2, 0x0, 0x0, 0x20000000}, 0x801) syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x40, 0xf, 0xea, 0x8, 0x1397, 0xbd, 0xd254, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x8c, 0x58, 0x73, 0x0, [], [{{0x9, 0x5, 0x1}}]}}]}}]}}, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x40, 0xf, 0xea, 0x8, 0x1397, 0xbd, 0xd254, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x8c, 0x58, 0x73, 0x0, [], [{{0x9, 0x5, 0x1}}]}}]}}]}}, 0x0) 13.269499305s ago: executing program 1 (id=564): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000180000000001000000b7080000000010007baa00fe00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000004040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087}, 0x94) 13.060181307s ago: executing program 1 (id=566): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x0, 0x1, 0xb}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) 9.732425427s ago: executing program 1 (id=571): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000003600)=ANY=[@ANYBLOB="4bca7181fb170e0a506fc327b82a520fb723d25dd2c5dcc6b211f2a74fe8d9732ced93dc877f5c1b8407f0f59cfec33d28fc46cdf523f77f6a9cd160e1c517ccf4227ab1a67c3f69d62da6d09525faa85a77d1e744e148add45f756fea1cb3a57dde1e1592bad5bc4db3debf891f9ea11a9c00f38f79deb25ff154bbe7d657819dd6b1cf950162ae357bb092d0d10a2cd43a246f03820f927814f423e9cbd4107ccfc58e80855dab7318f8719b6763e8a29edfa59874ddbceb8b5fd107b9156136953b00de5a674400cc5c6ac4ca2aa53f026517356d28929013f8e7a4eeeef6e3fdcfbdbe47b97c5fe140dacc0d2deda11a6dd74674723f20cd16120a267c0e64407fa055907cb57bf53e0943a105723be79cf098b8368f65f9656daa4cad22f9401f4c7e8b5a07e86b9a6fca14042a243937e7aa75c6f8913f4c22af6e98311869a92d92f064260db1a063b9c75f778b73600bbb2d9db4ff78085c55f91c0676e878fff2747c245b32fca7441e6f162f916f8445760c308db5238d4f86720c53e2f5f60970a5e0eeedf4039b78d6bc297c12bfb178978b9047b8e71b2ebdaa271219df42fb483831ce0db1d299c09c835ba450461e40e2e3ccfb218469509626dec78991f1170ad8a52ccf24b36d79ef11b45b90f37506ff300d158db3e51c641c21b6f193818d5b9878a9558091ffb1cd30e84d27dd4afc841386a6a2b96838a6d0931725ec39a9522be9de3849af35899ba966287cce5e0df105d591f74941fec1d2e611ddb3ca23477584cf5d9f06b9d985b084b5c6064959ba775c2b1f121c8d382549ec5b68a72632a4796dd00604b42f73e69a79d645e41afc27e1aa42fcf45b22ca38ee23c3a0c087a809d32948454ac5cf3b2e364dda4b901d929c04c26ef704a19291377daac08b13c39a099aafeb1a00ef107cc04dd5c9b344cadfa32db83cf0e26db837184d0c16d61722f8fa5ec08ba91c98a63df7cd863f3e7aa171370b1bda8e95c28c8441220a6a3226d2570370a477fc2c6014a67c350b50a0e14a5df3a2aa81afc2dee797e0b956898b24390025f9a14fbc61752a910ecf765bb16dabd35163f5f6aeed0a8a5b07184c6808f5e1d7c5092332a2f49a7f44718a7904ce6c7c9bbb77b6d00036374ca716f63f0fa36dc6c30bec6472c5419cd57698cd6a0115a7462426c8a54acc3980f3d3ad97880c297eb930582187d11186a409bfef9c166f144f28bb01991c92deed8d1458599de788314a0d34cb02144895c4d61fd72399d0bda5609448b6d53caa186cca9a23d084a05a2e2344db04b3c842dc7e26fcc11d24069d282bd03e40afe9e6d9a5e1e6c1946e47291c4dff9af8edd33caf044f944e82163c9c6ecfea25b7ad174b6743b94fdb0bb32f5e4c281cdcc7a8509264f030fc8c7c395e87636092c2f47e33f23997de0ca44207cc7068ce20813856c7af008efb36c6146973c7a2d0ae8db61d5e177a173ea0b03acea1de5a1fffba7df1d848e60f6d8991f9cd1a6d79d46cada9d0056ab51c9b536d5d078ac09cfe053f6d616df572760ecdbdc4bfaab5fd99bacccac8810e837309140bf999d1325f54679868a2d0bd5bac2f0b313cbefa23611a24b9b34adb1b53b1d39ef10c24c02ffeb51a6ad3d2bbeece46488ce5dd6df38b35018bb45bd26274d062592602caf7b644d39bf44bdfb8e23b2876f8fc42a637212e7fd26ecc329cd2b31fc7c8a587821b1750fd459645e5bdbd0e6be55229e0dea0a8d8a0313de129583fa883e5ed79dbefce4d39f9fc1437dcb7b9cd53b2c5f9b0d1471902b51c9c83a462376a0a87a3f4e3bc64ffc7ce2859c99ed0fd05a6cd143a7441b5dbaad2beaa3c2379a9e3589d22a9d3d70c26a44efe96fbe7dd067ec41b1abe2972432a0d0f23561b7087b89c4a6f7324de929708b0ba3e4ec2a0e28bff0341ed6a7e2b6f92fb18f39068bad553dd159bc0721c00db70963b8387098c0222152fe52633d99eb95ab69b17ea25f0ea9682324af0e2415fd2e8cc1c6328dfac70a732869bb049a28d24911a54db4c58eedcc6362167ea654f8084270f665b6c05d284c1a22ac58c671191cef323c79c654cb9c0b02b0dbcaf51d6d28f4fe253128e2b09bcdc943204b60fce4073e95faddcdc564df4f26379078548a7ff34aa52edc13ef0b503b37beb78b86321dba18559b29e0375288649f8ff79cecc1130bbfff7b4a16508ceed654b88bc0ab1a9432bdb9257ea0a127fdcc985ee0bcd81f6fbf4e9ed4d9f91fbeb17da93fbfe7aa1218905051f8c42168fb24e945cde513ce38cadb218410782ee4e509c1852136db5b40d4ed9fd4919770a0a80f9760317e33d9ecd3cff95ed8814cb6d19f98cb30efc0093acad0a660386a0829f418b3d04e03ad5b17f406511552d89599a56bb3d65f7464666473b47f15ce2d6e9cfcbf8f1d22fba391cc5a3e81c90b13719c8b2018ff3dee9c0b0c82bb688a66ea3b7b8fe8d5ea237327dde508becfa23b40f005c715149c1729ff74244d0cb2744321051acb8a61af52e70beca1b43f3808a0acffc6767ad00f6212399e7e3f4496eb8f58452223cf12bd07b1a901fc957c600e5b571b0d0ee201746292865e351da810c05eb97938df76d56a474bd59077af20f2bc6a4076de5adb1118a6442177c573d2588aa82c3ad211656437718435103b2b5067bb7120588941c65d78c93c9495f87cbf91621c3c35a63a8a2a249db2409e2edcbd3fb7ccb8e93908833b7b52551270ea3d00326d68b3f3dcc0fb5b01c967742866cbe8e27b238b9885ddc4325bc9167d9427e3accb0ac3136b3fe6a8b6a0ed20b2bcf58482bf2a992d34d49add83569929743764cdf16db78900525e903ee6fa001091a49fab3b4cba6935c4287f7229aeb4e963111961f1c231621f9467214a30c6a75b398cd3077b0f9520fcc71272cf4141287f017bdae7f59962878a6af60deeb4301a20a6a7372dbe5f209a19105e3d5a430e5869d11c4912eb6d85af9defa0c957db5fea3a967abf53b3100e0c95882595d6615336606c7702ff6409bb130cbbcac9ae52354a8d44249b8541a0f4aa478501051271681d0bfa5dbb771d50c96fe8c48486e76249845cf0df72f8d5dcfe794a5218e8e02d5d93f2a57479ae6e793d925209b1c1e4c983cc94890838defacdd784f510b9ccb91f8320b6b64235bf545d631a5a739cbe2a72a374ad2a019586c13980ba21f875b46ad6ce2169dfe47fded62b61d04ce090523d8a0efe0661a7077840c4f2161d1c239ce3d88e22796878df46c08ebef0e12cb762d4dc0d10e5ecf287f679078ab539ebf5011eca4dc3d3d78bd2b52361294b5d749e6925cca938d8e048d2782dc42645aeb537883cce674b652c456f7a18063900114d3297d5347d1419729f2b5c43899688eca4ea37df74df828b0758066b34962d8a35b9b37c72a04edac6fd427fe2904ebfd6abbbe7a39b70a685b52ccaac74f046304035430bd05c87e9e8b55fad39c36fb427c98a63086d0a57f2d1665b301c95d9308aa306897b45f6f4f4af2d0c44795937740fadd27de9f6614f17ffe048186e61e4fa87fd447f115efeb8917031ecd1de4e6ffa4203e5ad4adad6dbb0fb31ac3d4d23c2a2ec5d2b4eb9f7d665f0cad6f8ecda8300d692b65878d53a0a77f071cf34734be2a2007567b79209e81591c181a395078bb53b5da2684890752e75463f1bc5319f14e307720158325774af0aca5c5474159aa2184c4643a86f5d7a20eb4de7c94d276db77f0e8f277340e7e49dc15217748f2907b01813660c65ca2dcd69394b4fc7781479ef80d62a941c4e65d3d41319d77c89261dec98f2fe8c0a29aa145174b7c9b97122a27a3a54911f981b953d4666d7473dabd56db9df4b854a0e3add9968d9816ae2357006532941940a28f53bd4088a2b9079f0de00eec0ee3889221f4a8ae5e0bf0a9f1d410188472679817f6f8e036e4fde3b9a460edb4b28a088d3323143314d805b456f59aae9dfaf3d8474d116bf1b5e80ee9edfb594c061cfa3caa35bd5dba99be05cbdbfc62ca79d96664ebe9fea5b16b70227274842ed15b1bdada1020d4f06b1eefe59b60de1e0937f51d3a7d44ee231558b10b1c1d4954907b0cf246fd32770fd7fe399641d3e99dbe65e98abb5f20c4f4e08da7ab3ea0dfd96b3ccfa0418771b3017f1a140b51e04eae94dc54cf56493b9d8e7aeacc46bfc5faa5d4c639b4e3a86b8d880f5897dca1733d1776bb28b878728f4cc88a956c8f5f29381356be6968435cd19731a5014703187d626cb9d9088d305108cd944069af5dc9b731a3f8de79a7cc5ec14a2b5c04012ab5b7f8f638141bd9a3249ddf75976b8bdfd17ff09fa36a4d58ba8f5ed9a3414a798b067db389a358cd628b8ca6bc61b6e385ac557f80739a46e443d8db1049aeddb89d408bb1f94c0a4a4d215779dbd588bcb4893e40575b84d2f29a76af87be8d90001e39b2ba6e9c094dcf0aaa08d9fbaa4e30c2c740d8c54e57bebce093809a9ed9f717f4f280ca00fe09a415e062ab59e07ae10cfac6f824f9f394b391c058a8936ec616f23b6e2dfca010c6cfaa5f7a47a139e84354c22c25f1e04abe090e4c2f8b85b6206c05a42a0eb71963260aedef3737c14ea56e40d387fd0a60ab6f741c1a0c4519ef654c2d1d838ea1118ac516fb9deeeb6d923a6a0c09fb113c9347618cb980134911760cc6c7f4172b51595c41083196d52c788b0a53e87229e1bb6f74a8f4434dfb32511df7ef5265a17af03812cdca45e8201fcb1548756955f066bb418d63fb2d68d8eb87391c3957cf8cae58102461e4224146018d5ed8b841611576f3f2e264120516afaac35fc342e6f6b9e750b46174509ae1759cbdc109943b2c1c1446f5bf8a01f3793e4d1959a3a4d31357bcfaa46663f48d13851416ca03ec569129985340d3cda5d365b0c3c683546176d15a7865f2bd4a441399838f9f534505619d16bca1fdd390bc3b865c078abe4d6140ee41e973a1a31f852bb1e318c469fae30e20adf239da01edf6e6cf1b8c602dfbb72c7ccb176af5e0e10e51992c69d53ad9f93007afd0d775482a09f7460823a1a952ae3a050b8de67a12d4b4977e5e60c1e41a6a7d21857f9f25d7b804c5db7ea1339820106db4d15b53f8c6421ed2127d61897b73122d9bf9e94434e95ac2bd779435f08863d2f050c6c4c374e9c7858201b6dd6d193eaa383100b9e1414a9cf370dfbaf0f53debcac0997f5c401d17ed01f757422b80436e5f14bb9fb75b2b389765123d281c06b7992f56cd60620747c5beddcf629b42c9a0094344b116fb8beeb783556461f5b1e200360fd012daa7486f9dc5243fbee7b35267931dcbaff5d5798191532a5b157e73fc7c3f17623ef7e6fe54044f7966a592f0138b611fdc02b46184f932a98165ace60ec7ce5bf8573d439bc2ca702782483adc802b0260cada7ac6b8de24a4d3afc017b30ec7ccb80ac79d2b157ad6b24996033cec9e3449e125cb2990fa9cba321dd1f42b28acbeb727c221f779e756f1e7b1b0b10d7d8a6b858cafa574fc85a2c548326c38ca3d5b2907b3b52c4d91cef6594a163f108d559e4f96fbfa19addaf5fd2e3c7dee1068cf0c5596b7db03d2674aa2293e37b81640cdab8070a929a1a11f9be4c303241f9f2e767feb9366f23f7a2e4584488dc74b3ca81bdda3de17fd3526152801a19d6146b428a3dba79ce886c432872b4229e43982e6495222e06f7cda128a39f6c8f2c0df6d84feba5187533939bcc9a1ec7312da18", @ANYBLOB="df2247c0ea158887ae5b4dffc7d58d403d1e41bf01c8ad0a82f46480ac5e6d0d79f3fc09b52cab6bbdb1402cb9ca0d00fe20fabee13b1affcc1687e06cd6be7dffefe254288acf91b701d88839f01d5087ea8a06ad911a556425ed9f", @ANYRES8=0x0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES16=r0], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) sigaltstack(&(0x7f0000001040)={0x0, 0x1}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x0, 0x0, 0x1, "9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) readv(r2, &(0x7f0000000480)=[{&(0x7f0000001580)=""/4091, 0x18}], 0x1) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000000)=0x3) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x20000400) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x20) r4 = syz_usb_connect$cdc_ncm(0x3, 0x11c, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10a, 0x2, 0x1, 0x8, 0x0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "ee"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x5, 0x7, 0x7f}, {0x6, 0x24, 0x1a, 0x8, 0x1}, [@mdlm_detail={0xad, 0x24, 0x13, 0xff, "f3637527f929a3db1f8823996b10b9c654a866dd7f26d7054b229f09051adce5241e2e101fe8b5418182877fbcd6ad1de1054dadd69a9738aea3173325be96e05bd9703acade6fb9ca8f2f87dbacc76c4301522e68ab0bed13173883590135dd0ae3f4a8dbad25dc32f4efb480b0ba3717e6bfa9de99621efcfc7342c014327598ec8c52e4864c5be73a926b25915b27295bd074cc9e7b8a4a55e12757d33388c9c14ec7949ddc33a0"}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xff, 0x7, 0xe}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3, 0x6, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x2, 0x4, 0x8}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0xff, 0x8, 0x2, 0x8, 0xf5}, 0xf, &(0x7f0000000200)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0x0, 0x8}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x5f, &(0x7f00000002c0)=@string={0x5f, 0x3, "890e49d3bb64f18bc0c01c4ae2fcb0c0395041787ad9e73abb027559c18e10f6e50cb814c15d9310be65e1c1ab43be95260adf2a43396fbadcc4347cfb14e6e1a5d4e163c65bc8207b8178a82b1abc177eadccce77aabe28e59ca79aaf"}}, {0x86, &(0x7f0000000580)=@string={0x86, 0x3, "d2501af3d4eda827f0305eb40abcbd494b1d8f32dac79809761fbcd40e90d93d56fa41abd33f8c3b2aac95b949c35b16c05c1f508e13d8b0202b108c36c3c9558227373faa9b0dc349391a0c04afc230dfc1259b255ee60e497ce68112917da49b111598b0f5e76cd6a8e6c23b5c17a5ef4daf5e91e2fb945e65c9546ed458ae394a79ec"}}, {0x52, &(0x7f0000000340)=@string={0x52, 0x3, "4fc14a628e50f881d40b29b7615d0b845ddcd404dd7466f34284e94239e36a7ad0b47897cd01f6bf887a7e3835b7459a6558148963bfb9591aabcfcffd79da9d31296e82646a2f7e08a624247a23e8b9"}}]}) syz_usb_control_io$cdc_ncm(r4, &(0x7f00000007c0)={0x14, &(0x7f0000000680)={0x20, 0x8, 0xd4, {0xd4, 0xe, "397478aa25c92e4e42c3526bbb95e0f18d0e8a1a0156d771781e7d73234c5a2bc7ba4030aa791f990abff7d0d581cf779168b8d17bfe1efb69faeac3ce2d0b7af1660b5772fad48a2e1b67bf5889031d338204abc53c721096d992ab04e8ee4cc99bd2c56894bd06b9888ef917120718f8cfae28a85c1110845e46324c39db27a2e3be65c9f38ff38923923b38aa400fabaf619551e66d9d9e3b6e2ef417e73d1220641a28430b3e0f9ab782288c1acc62b0d0a10a811182916cf79700a7a6a044fa6698ccfb1f372ad84fc54b9b25354a99"}}, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000ac0)={0x44, &(0x7f0000000840)={0x20, 0xe, 0x7d, "b3bc39f4d1d40e9b0ad4467d061d6d0c3bb6a59366032d407cf21e5279fa044b62e0e9971ee97961a192eadf76adff0e022bff396a4214114af3838cbbfc0e5acb7448461c77af98ff8814627fdc601b895acbff968b3acadcc8551edab5ac13b000229496b07a191050dc8f97af90d1d6ba8687d8eaa2ffa4eb33e56c"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000980)={0x20, 0x80, 0x1c, {0x8, 0xb3, 0x3, 0x0, 0xff, 0xd4d2, 0x2, 0x0, 0xf57c, 0xff, 0x81, 0x9b0a}}, &(0x7f00000009c0)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000a00)={0x20, 0x83, 0x2}, &(0x7f0000000a40)={0x20, 0x87, 0x2, 0x1000}, &(0x7f0000000a80)={0x20, 0x89, 0x2}}) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c00000043005f4627bd7000fedbdf250000f0ff070002"], 0x6c}, 0x1, 0x0, 0x0, 0x48810}, 0x22048055) socket$nl_route(0x10, 0x3, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000003600)=ANY=[@ANYBLOB="4bca7181fb170e0a506fc327b82a520fb723d25dd2c5dcc6b211f2a74fe8d9732ced93dc877f5c1b8407f0f59cfec33d28fc46cdf523f77f6a9cd160e1c517ccf4227ab1a67c3f69d62da6d09525faa85a77d1e744e148add45f756fea1cb3a57dde1e1592bad5bc4db3debf891f9ea11a9c00f38f79deb25ff154bbe7d657819dd6b1cf950162ae357bb092d0d10a2cd43a246f03820f927814f423e9cbd4107ccfc58e80855dab7318f8719b6763e8a29edfa59874ddbceb8b5fd107b9156136953b00de5a674400cc5c6ac4ca2aa53f026517356d28929013f8e7a4eeeef6e3fdcfbdbe47b97c5fe140dacc0d2deda11a6dd74674723f20cd16120a267c0e64407fa055907cb57bf53e0943a105723be79cf098b8368f65f9656daa4cad22f9401f4c7e8b5a07e86b9a6fca14042a243937e7aa75c6f8913f4c22af6e98311869a92d92f064260db1a063b9c75f778b73600bbb2d9db4ff78085c55f91c0676e878fff2747c245b32fca7441e6f162f916f8445760c308db5238d4f86720c53e2f5f60970a5e0eeedf4039b78d6bc297c12bfb178978b9047b8e71b2ebdaa271219df42fb483831ce0db1d299c09c835ba450461e40e2e3ccfb218469509626dec78991f1170ad8a52ccf24b36d79ef11b45b90f37506ff300d158db3e51c641c21b6f193818d5b9878a9558091ffb1cd30e84d27dd4afc841386a6a2b96838a6d0931725ec39a9522be9de3849af35899ba966287cce5e0df105d591f74941fec1d2e611ddb3ca23477584cf5d9f06b9d985b084b5c6064959ba775c2b1f121c8d382549ec5b68a72632a4796dd00604b42f73e69a79d645e41afc27e1aa42fcf45b22ca38ee23c3a0c087a809d32948454ac5cf3b2e364dda4b901d929c04c26ef704a19291377daac08b13c39a099aafeb1a00ef107cc04dd5c9b344cadfa32db83cf0e26db837184d0c16d61722f8fa5ec08ba91c98a63df7cd863f3e7aa171370b1bda8e95c28c8441220a6a3226d2570370a477fc2c6014a67c350b50a0e14a5df3a2aa81afc2dee797e0b956898b24390025f9a14fbc61752a910ecf765bb16dabd35163f5f6aeed0a8a5b07184c6808f5e1d7c5092332a2f49a7f44718a7904ce6c7c9bbb77b6d00036374ca716f63f0fa36dc6c30bec6472c5419cd57698cd6a0115a7462426c8a54acc3980f3d3ad97880c297eb930582187d11186a409bfef9c166f144f28bb01991c92deed8d1458599de788314a0d34cb02144895c4d61fd72399d0bda5609448b6d53caa186cca9a23d084a05a2e2344db04b3c842dc7e26fcc11d24069d282bd03e40afe9e6d9a5e1e6c1946e47291c4dff9af8edd33caf044f944e82163c9c6ecfea25b7ad174b6743b94fdb0bb32f5e4c281cdcc7a8509264f030fc8c7c395e87636092c2f47e33f23997de0ca44207cc7068ce20813856c7af008efb36c6146973c7a2d0ae8db61d5e177a173ea0b03acea1de5a1fffba7df1d848e60f6d8991f9cd1a6d79d46cada9d0056ab51c9b536d5d078ac09cfe053f6d616df572760ecdbdc4bfaab5fd99bacccac8810e837309140bf999d1325f54679868a2d0bd5bac2f0b313cbefa23611a24b9b34adb1b53b1d39ef10c24c02ffeb51a6ad3d2bbeece46488ce5dd6df38b35018bb45bd26274d062592602caf7b644d39bf44bdfb8e23b2876f8fc42a637212e7fd26ecc329cd2b31fc7c8a587821b1750fd459645e5bdbd0e6be55229e0dea0a8d8a0313de129583fa883e5ed79dbefce4d39f9fc1437dcb7b9cd53b2c5f9b0d1471902b51c9c83a462376a0a87a3f4e3bc64ffc7ce2859c99ed0fd05a6cd143a7441b5dbaad2beaa3c2379a9e3589d22a9d3d70c26a44efe96fbe7dd067ec41b1abe2972432a0d0f23561b7087b89c4a6f7324de929708b0ba3e4ec2a0e28bff0341ed6a7e2b6f92fb18f39068bad553dd159bc0721c00db70963b8387098c0222152fe52633d99eb95ab69b17ea25f0ea9682324af0e2415fd2e8cc1c6328dfac70a732869bb049a28d24911a54db4c58eedcc6362167ea654f8084270f665b6c05d284c1a22ac58c671191cef323c79c654cb9c0b02b0dbcaf51d6d28f4fe253128e2b09bcdc943204b60fce4073e95faddcdc564df4f26379078548a7ff34aa52edc13ef0b503b37beb78b86321dba18559b29e0375288649f8ff79cecc1130bbfff7b4a16508ceed654b88bc0ab1a9432bdb9257ea0a127fdcc985ee0bcd81f6fbf4e9ed4d9f91fbeb17da93fbfe7aa1218905051f8c42168fb24e945cde513ce38cadb218410782ee4e509c1852136db5b40d4ed9fd4919770a0a80f9760317e33d9ecd3cff95ed8814cb6d19f98cb30efc0093acad0a660386a0829f418b3d04e03ad5b17f406511552d89599a56bb3d65f7464666473b47f15ce2d6e9cfcbf8f1d22fba391cc5a3e81c90b13719c8b2018ff3dee9c0b0c82bb688a66ea3b7b8fe8d5ea237327dde508becfa23b40f005c715149c1729ff74244d0cb2744321051acb8a61af52e70beca1b43f3808a0acffc6767ad00f6212399e7e3f4496eb8f58452223cf12bd07b1a901fc957c600e5b571b0d0ee201746292865e351da810c05eb97938df76d56a474bd59077af20f2bc6a4076de5adb1118a6442177c573d2588aa82c3ad211656437718435103b2b5067bb7120588941c65d78c93c9495f87cbf91621c3c35a63a8a2a249db2409e2edcbd3fb7ccb8e93908833b7b52551270ea3d00326d68b3f3dcc0fb5b01c967742866cbe8e27b238b9885ddc4325bc9167d9427e3accb0ac3136b3fe6a8b6a0ed20b2bcf58482bf2a992d34d49add83569929743764cdf16db78900525e903ee6fa001091a49fab3b4cba6935c4287f7229aeb4e963111961f1c231621f9467214a30c6a75b398cd3077b0f9520fcc71272cf4141287f017bdae7f59962878a6af60deeb4301a20a6a7372dbe5f209a19105e3d5a430e5869d11c4912eb6d85af9defa0c957db5fea3a967abf53b3100e0c95882595d6615336606c7702ff6409bb130cbbcac9ae52354a8d44249b8541a0f4aa478501051271681d0bfa5dbb771d50c96fe8c48486e76249845cf0df72f8d5dcfe794a5218e8e02d5d93f2a57479ae6e793d925209b1c1e4c983cc94890838defacdd784f510b9ccb91f8320b6b64235bf545d631a5a739cbe2a72a374ad2a019586c13980ba21f875b46ad6ce2169dfe47fded62b61d04ce090523d8a0efe0661a7077840c4f2161d1c239ce3d88e22796878df46c08ebef0e12cb762d4dc0d10e5ecf287f679078ab539ebf5011eca4dc3d3d78bd2b52361294b5d749e6925cca938d8e048d2782dc42645aeb537883cce674b652c456f7a18063900114d3297d5347d1419729f2b5c43899688eca4ea37df74df828b0758066b34962d8a35b9b37c72a04edac6fd427fe2904ebfd6abbbe7a39b70a685b52ccaac74f046304035430bd05c87e9e8b55fad39c36fb427c98a63086d0a57f2d1665b301c95d9308aa306897b45f6f4f4af2d0c44795937740fadd27de9f6614f17ffe048186e61e4fa87fd447f115efeb8917031ecd1de4e6ffa4203e5ad4adad6dbb0fb31ac3d4d23c2a2ec5d2b4eb9f7d665f0cad6f8ecda8300d692b65878d53a0a77f071cf34734be2a2007567b79209e81591c181a395078bb53b5da2684890752e75463f1bc5319f14e307720158325774af0aca5c5474159aa2184c4643a86f5d7a20eb4de7c94d276db77f0e8f277340e7e49dc15217748f2907b01813660c65ca2dcd69394b4fc7781479ef80d62a941c4e65d3d41319d77c89261dec98f2fe8c0a29aa145174b7c9b97122a27a3a54911f981b953d4666d7473dabd56db9df4b854a0e3add9968d9816ae2357006532941940a28f53bd4088a2b9079f0de00eec0ee3889221f4a8ae5e0bf0a9f1d410188472679817f6f8e036e4fde3b9a460edb4b28a088d3323143314d805b456f59aae9dfaf3d8474d116bf1b5e80ee9edfb594c061cfa3caa35bd5dba99be05cbdbfc62ca79d96664ebe9fea5b16b70227274842ed15b1bdada1020d4f06b1eefe59b60de1e0937f51d3a7d44ee231558b10b1c1d4954907b0cf246fd32770fd7fe399641d3e99dbe65e98abb5f20c4f4e08da7ab3ea0dfd96b3ccfa0418771b3017f1a140b51e04eae94dc54cf56493b9d8e7aeacc46bfc5faa5d4c639b4e3a86b8d880f5897dca1733d1776bb28b878728f4cc88a956c8f5f29381356be6968435cd19731a5014703187d626cb9d9088d305108cd944069af5dc9b731a3f8de79a7cc5ec14a2b5c04012ab5b7f8f638141bd9a3249ddf75976b8bdfd17ff09fa36a4d58ba8f5ed9a3414a798b067db389a358cd628b8ca6bc61b6e385ac557f80739a46e443d8db1049aeddb89d408bb1f94c0a4a4d215779dbd588bcb4893e40575b84d2f29a76af87be8d90001e39b2ba6e9c094dcf0aaa08d9fbaa4e30c2c740d8c54e57bebce093809a9ed9f717f4f280ca00fe09a415e062ab59e07ae10cfac6f824f9f394b391c058a8936ec616f23b6e2dfca010c6cfaa5f7a47a139e84354c22c25f1e04abe090e4c2f8b85b6206c05a42a0eb71963260aedef3737c14ea56e40d387fd0a60ab6f741c1a0c4519ef654c2d1d838ea1118ac516fb9deeeb6d923a6a0c09fb113c9347618cb980134911760cc6c7f4172b51595c41083196d52c788b0a53e87229e1bb6f74a8f4434dfb32511df7ef5265a17af03812cdca45e8201fcb1548756955f066bb418d63fb2d68d8eb87391c3957cf8cae58102461e4224146018d5ed8b841611576f3f2e264120516afaac35fc342e6f6b9e750b46174509ae1759cbdc109943b2c1c1446f5bf8a01f3793e4d1959a3a4d31357bcfaa46663f48d13851416ca03ec569129985340d3cda5d365b0c3c683546176d15a7865f2bd4a441399838f9f534505619d16bca1fdd390bc3b865c078abe4d6140ee41e973a1a31f852bb1e318c469fae30e20adf239da01edf6e6cf1b8c602dfbb72c7ccb176af5e0e10e51992c69d53ad9f93007afd0d775482a09f7460823a1a952ae3a050b8de67a12d4b4977e5e60c1e41a6a7d21857f9f25d7b804c5db7ea1339820106db4d15b53f8c6421ed2127d61897b73122d9bf9e94434e95ac2bd779435f08863d2f050c6c4c374e9c7858201b6dd6d193eaa383100b9e1414a9cf370dfbaf0f53debcac0997f5c401d17ed01f757422b80436e5f14bb9fb75b2b389765123d281c06b7992f56cd60620747c5beddcf629b42c9a0094344b116fb8beeb783556461f5b1e200360fd012daa7486f9dc5243fbee7b35267931dcbaff5d5798191532a5b157e73fc7c3f17623ef7e6fe54044f7966a592f0138b611fdc02b46184f932a98165ace60ec7ce5bf8573d439bc2ca702782483adc802b0260cada7ac6b8de24a4d3afc017b30ec7ccb80ac79d2b157ad6b24996033cec9e3449e125cb2990fa9cba321dd1f42b28acbeb727c221f779e756f1e7b1b0b10d7d8a6b858cafa574fc85a2c548326c38ca3d5b2907b3b52c4d91cef6594a163f108d559e4f96fbfa19addaf5fd2e3c7dee1068cf0c5596b7db03d2674aa2293e37b81640cdab8070a929a1a11f9be4c303241f9f2e767feb9366f23f7a2e4584488dc74b3ca81bdda3de17fd3526152801a19d6146b428a3dba79ce886c432872b4229e43982e6495222e06f7cda128a39f6c8f2c0df6d84feba5187533939bcc9a1ec7312da18", @ANYBLOB="df2247c0ea158887ae5b4dffc7d58d403d1e41bf01c8ad0a82f46480ac5e6d0d79f3fc09b52cab6bbdb1402cb9ca0d00fe20fabee13b1affcc1687e06cd6be7dffefe254288acf91b701d88839f01d5087ea8a06ad911a556425ed9f", @ANYRES8=0x0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES16=r0], 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) (async) sigaltstack(&(0x7f0000001040)={0x0, 0x1}, 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x0, 0x0, 0x1, "9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) (async) readv(r2, &(0x7f0000000480)=[{&(0x7f0000001580)=""/4091, 0x18}], 0x1) (async) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000000)=0x3) (async) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) unshare(0x20000400) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x20) (async) syz_usb_connect$cdc_ncm(0x3, 0x11c, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10a, 0x2, 0x1, 0x8, 0x0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "ee"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x5, 0x7, 0x7f}, {0x6, 0x24, 0x1a, 0x8, 0x1}, [@mdlm_detail={0xad, 0x24, 0x13, 0xff, "f3637527f929a3db1f8823996b10b9c654a866dd7f26d7054b229f09051adce5241e2e101fe8b5418182877fbcd6ad1de1054dadd69a9738aea3173325be96e05bd9703acade6fb9ca8f2f87dbacc76c4301522e68ab0bed13173883590135dd0ae3f4a8dbad25dc32f4efb480b0ba3717e6bfa9de99621efcfc7342c014327598ec8c52e4864c5be73a926b25915b27295bd074cc9e7b8a4a55e12757d33388c9c14ec7949ddc33a0"}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xff, 0x7, 0xe}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3, 0x6, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x2, 0x4, 0x8}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0xff, 0x8, 0x2, 0x8, 0xf5}, 0xf, &(0x7f0000000200)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0x0, 0x8}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x5f, &(0x7f00000002c0)=@string={0x5f, 0x3, "890e49d3bb64f18bc0c01c4ae2fcb0c0395041787ad9e73abb027559c18e10f6e50cb814c15d9310be65e1c1ab43be95260adf2a43396fbadcc4347cfb14e6e1a5d4e163c65bc8207b8178a82b1abc177eadccce77aabe28e59ca79aaf"}}, {0x86, &(0x7f0000000580)=@string={0x86, 0x3, "d2501af3d4eda827f0305eb40abcbd494b1d8f32dac79809761fbcd40e90d93d56fa41abd33f8c3b2aac95b949c35b16c05c1f508e13d8b0202b108c36c3c9558227373faa9b0dc349391a0c04afc230dfc1259b255ee60e497ce68112917da49b111598b0f5e76cd6a8e6c23b5c17a5ef4daf5e91e2fb945e65c9546ed458ae394a79ec"}}, {0x52, &(0x7f0000000340)=@string={0x52, 0x3, "4fc14a628e50f881d40b29b7615d0b845ddcd404dd7466f34284e94239e36a7ad0b47897cd01f6bf887a7e3835b7459a6558148963bfb9591aabcfcffd79da9d31296e82646a2f7e08a624247a23e8b9"}}]}) (async) syz_usb_control_io$cdc_ncm(r4, &(0x7f00000007c0)={0x14, &(0x7f0000000680)={0x20, 0x8, 0xd4, {0xd4, 0xe, "397478aa25c92e4e42c3526bbb95e0f18d0e8a1a0156d771781e7d73234c5a2bc7ba4030aa791f990abff7d0d581cf779168b8d17bfe1efb69faeac3ce2d0b7af1660b5772fad48a2e1b67bf5889031d338204abc53c721096d992ab04e8ee4cc99bd2c56894bd06b9888ef917120718f8cfae28a85c1110845e46324c39db27a2e3be65c9f38ff38923923b38aa400fabaf619551e66d9d9e3b6e2ef417e73d1220641a28430b3e0f9ab782288c1acc62b0d0a10a811182916cf79700a7a6a044fa6698ccfb1f372ad84fc54b9b25354a99"}}, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000ac0)={0x44, &(0x7f0000000840)={0x20, 0xe, 0x7d, "b3bc39f4d1d40e9b0ad4467d061d6d0c3bb6a59366032d407cf21e5279fa044b62e0e9971ee97961a192eadf76adff0e022bff396a4214114af3838cbbfc0e5acb7448461c77af98ff8814627fdc601b895acbff968b3acadcc8551edab5ac13b000229496b07a191050dc8f97af90d1d6ba8687d8eaa2ffa4eb33e56c"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000980)={0x20, 0x80, 0x1c, {0x8, 0xb3, 0x3, 0x0, 0xff, 0xd4d2, 0x2, 0x0, 0xf57c, 0xff, 0x81, 0x9b0a}}, &(0x7f00000009c0)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000a00)={0x20, 0x83, 0x2}, &(0x7f0000000a40)={0x20, 0x87, 0x2, 0x1000}, &(0x7f0000000a80)={0x20, 0x89, 0x2}}) (async) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c00000043005f4627bd7000fedbdf250000f0ff070002"], 0x6c}, 0x1, 0x0, 0x0, 0x48810}, 0x22048055) (async) 8.297948851s ago: executing program 5 (id=575): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r1, @ANYBLOB="a428040000000f001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 7.703342995s ago: executing program 4 (id=581): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat2(r0, &(0x7f0000000080)='./cgroup/../file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x11}, 0x18) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x4, 0x81, 0x9, 0x1a6, 0x19, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x12}, 0x1, 0x7800, 0x4, 0xffff}}) 7.444278038s ago: executing program 4 (id=582): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x52}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x13) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000080)={0x3, 0x8ba, 0x4, {0x4, @pix_mp={0x7, 0x7, 0x56595559, 0x3, 0x2, [{0x0, 0x9}, {0x4, 0x1}, {0x6, 0x7f9}, {0x4, 0x3ff}, {0x9, 0x400}, {0x7fffffff, 0x3}, {0x6}, {0x40, 0x2}], 0x5, 0x9, 0x7}}, 0x9592}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x0) r4 = syz_clone(0x2010800, 0x0, 0x40, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x40000000, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0x0, 0x804) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r5, 0xff07, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0x5459, 0x1000000000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0x4d613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 7.358519083s ago: executing program 5 (id=583): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000040)={0x0, 0x11, 0x6b, "380400000000000000182eef808a284252fc7dd19feb866c68afcf32de491528eb6a4e582f617f4893f44fc36e4c7cd2bed35920565e7d5b309151b527360d69f50f4153c2bd55bf2f17123c53abe4b3126e350e63eb222939010e0c35bb1a2651343f5a167e764a1446be"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x8c}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x10003, 0x0, 0x0, 0x2000, &(0x7f0000a05000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x2, 0x3}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x3a, 0xb, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x3a, 0xb, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) syz_emit_ethernet(0x1ee, &(0x7f0000000800)={@local, @random="bfee05ab5ac3", @void, {@ipv6={0x86dd, @dccp_packet={0x3, 0x6, "ec820e", 0x1b8, 0x21, 0x0, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[@fragment={0x1e, 0x0, 0x60, 0x1, 0x0, 0x6, 0x67}, @hopopts={0x0, 0x1d, '\x00', [@calipso={0x7, 0x40, {0x3, 0xe, 0x84, 0x6, [0x0, 0xfff, 0x5, 0x5, 0x5, 0x8, 0x8]}}, @enc_lim={0x4, 0x1, 0x81}, @enc_lim={0x4, 0x1, 0x8}, @calipso={0x7, 0x50, {0x3, 0x12, 0x5, 0x8, [0x4, 0x80000001, 0x721, 0x1, 0xb4c, 0x0, 0x0, 0x4, 0xcc]}}, @jumbo={0xc2, 0x4, 0x7}, @ra={0x5, 0x2, 0x8}, @calipso={0x7, 0x38, {0x3, 0xc, 0xa, 0xbf02, [0xc, 0x1, 0x2, 0x6, 0x10000, 0xfffffffffffffffa]}}, @pad1, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @srh={0x2c, 0xc, 0x4, 0x6, 0x9, 0x40, 0x2, [@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @local]}, @dstopts={0x2c, 0x1, '\x00', [@ra={0x5, 0x2, 0x3}, @jumbo={0xc2, 0x4, 0xb}]}, @dstopts={0x16, 0x2, '\x00', [@ra={0x5, 0x2, 0xffff}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @fragment={0xff, 0x0, 0x7, 0x0, 0x0, 0x4, 0x67}], {{0x4e20, 0x4e21, 0x4, 0x1, 0xf, 0x0, 0x0, 0x5, 0x7, "03ae81", 0x85, "b925fd"}}}}}}}, 0x0) connect$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @empty, 0x4}}, 0x24) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x204000, 0x0) 6.324780505s ago: executing program 1 (id=585): personality(0x619641b6fb4b8591) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x4f) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$inet6(r1, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}}], 0x1, 0x84) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x92e1, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14, 0x3, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xc0ac8dffa9135494}, 0xc890) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) uname(&(0x7f0000000180)=""/224) socket$nl_netfilter(0x10, 0x3, 0xc) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="0211068df7df87a6b1124a3919c492dc0000000100000000000000040000000000000010"], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) add_key(0x0, 0x0, &(0x7f00000001c0)="c8941b7394716f5ddb8a956ecfc8bbf680974f5a363b6e0180e6c70457c89d6f2d531d69a44eb097ff39310c4293a440636fbf99f28e5c5b2046e39ab3b37b18ac9116193f4fcd566ca1cccdcce925631ae3d0786cf6aae09ae25e05693951ac5f8a97250c4321934fb081dfcffb34", 0x6f, 0xfffffffffffffff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) rmdir(&(0x7f0000000080)='./file0\x00') 6.2603852s ago: executing program 3 (id=586): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x22020400) fallocate(0xffffffffffffffff, 0x28, 0x2, 0x5) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket(0x1a, 0xa, 0xfffffffd) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) r4 = socket$inet6_sctp(0xa, 0x4, 0x84) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) syz_emit_ethernet(0x62, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa008100000086dd697c78ec0028211c854d05ce13bc186cffff010000000000000001000000000001fe80000000000000000000000000002e2f02002a0000000000000000000000000000ffffac1414aa4e224e240451907864b71de7a8fcf9a5"], 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xe0}}, 0x20008844) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000080)=0x2) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r8 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90f, 0x8000, '\x00', @string=&(0x7f0000000140)}}) 5.763787789s ago: executing program 3 (id=587): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = dup(r2) r4 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r4, 0x200004) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$apparmor_exec(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000000000000"], 0x8) sendfile(r3, r4, 0x0, 0x80001d00c0d1) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) execve(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) 5.140425553s ago: executing program 5 (id=590): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000040)={0x0, r0, 0x31, {0x5, 0x10001}, 0x6}, 0x1) 4.684662888s ago: executing program 5 (id=591): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000180000000001000000b7080000000010007baa00fe00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000006040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087}, 0x94) 4.332317603s ago: executing program 5 (id=592): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x40}], 0x18}], 0x1, 0x0) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000980)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x6001}, 0x10044001) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x2) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100800201020824050503"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000100)=ANY=[@ANYRESHEX=r1]}]}) 4.260772752s ago: executing program 4 (id=593): syz_usb_connect(0x0, 0x24, &(0x7f000000a680)={{0x12, 0x1, 0x201, 0xa2, 0x9f, 0x5d, 0x10, 0x2c7c, 0x306, 0x3c51, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x8, 0x70, 0x9, [{{0x9, 0x4, 0x7d, 0x2, 0x0, 0xff, 0xff, 0xff, 0x6}}]}}]}}, &(0x7f000000acc0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000025f85e40fd0b1700a32f0102030109022400010000000009040000"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001006d617463680000002000028008000300b07346e30a0001007374617465000000080002"], 0xd0}}, 0x0) socket(0x10, 0x2, 0x0) (async) r1 = socket(0x10, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xb3, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x7}]}) accept(r3, &(0x7f0000000140)=@ethernet={0x0, @link_local}, &(0x7f00000000c0)=0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/cgroup\x00') (async) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/cgroup\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x34, r2, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3f}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x31}, @NL80211_ATTR_NETNS_FD={0xffffffb1, 0xdb, r7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c090}, 0x40) 3.973967682s ago: executing program 1 (id=595): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r4 = socket$inet(0x2, 0x4000000805, 0x0) listen(r4, 0x5) sendmmsg(r4, &(0x7f0000000280)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local, 0x2}, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000084"], 0x18}}], 0x2, 0x844) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) truncate(0x0, 0xad) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r6, 0x80045518, &(0x7f0000002a40)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4803}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 3.770041542s ago: executing program 2 (id=596): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = add_key$keyring(&(0x7f00000085c0), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000008540), &(0x7f0000008580)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$unlink(0x9, r1, r0) (async) keyctl$unlink(0x9, r1, r0) (async) request_key(&(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)='\x00', 0x0) (async) keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f0000000000)='!-\':&\x00', &(0x7f0000000080)) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x951a, 0x3010, 0x1}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) recvfrom(r2, &(0x7f0000000880)=""/4096, 0x1000, 0x2, &(0x7f0000000240)=@generic={0x9, "54b479c014643e4b7b9885c56d4b754766d03f4a685e3f33ba52a046f1e8e201cd9d31947420bd39c931d2b99079bd4bd276972c4b5df0fbc0530276267b207e29cfa23de6d998e51be655e606bdfca207713d6152256db37763901e276d5272268f8908340c919928814c241f50282d2f6faca5a56b788bcd2ae12d0729"}, 0x80) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000540)="16", 0x1}], 0x1, &(0x7f0000001400)=ANY=[], 0x10}, 0x0, 0x4040092}) (async) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) (async) shutdown(r6, 0x1) ioctl$SIOCGSTAMPNS(r6, 0x8907, 0x0) (async) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) r8 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000000)={r8, 0x0, 0x0, 0x1000000}) (async) recvmmsg(r6, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) (async) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 3.460263989s ago: executing program 3 (id=597): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x300, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3c}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@loopback, {0x0, 0x0, 0x8, 0x5, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd27, 0x0, 0x2, 0x0, 0x2, 0x41}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = dup(r1) (async) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000000c0)=0x0) (async) r6 = syz_open_dev$dri(&(0x7f00000017c0), 0x0, 0x2000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000001800)={0x0, 0x0, r6}) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r5, &(0x7f0000000200), 0x4003) (async) statx(r2, &(0x7f0000000880)='./file0\x00', 0x400, 0x2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f00000009c0)={0xbf07, 0xb0, {0xffffffffffffffff}, {}, 0x9, 0x8}) (async) r9 = geteuid() (async) r10 = getegid() (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@secondary) (async) add_key$user(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='4>+', 0x3, 0x0) add_key$fscrypt_v1(&(0x7f00000016c0), &(0x7f0000001700)={'fscrypt:', @desc4}, &(0x7f0000001740)={0x0, "c6d0338d8d946274030b025b9400df93ff850d14a8e877f2ca2b1e77b44f5b24734c38b07b3b7e81bfefda30cbb349bc283cf27008bde2b5ac4a41461e00eff0", 0x39}, 0x48, 0x0) r11 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0) r12 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001500), 0x8000, 0x0) sendmmsg$unix(r1, &(0x7f0000001580)=[{{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000100)="5c9e1c34fb98494f4805e86b3bc71daf950ca63eb1451e267698ada799974dcddd12907d2325c9ec3dc780bd5a355b0ff367c55855435aac10c9dc53b67c23aaeffcd4cf3b6eb70c382c9413512d6138dc630384f3b5d7115e5985f09031a2af6efb922ac96d79508ca6f8d674e007d334272db060e44f6e2d6ff9d041ba8806078dd14e2082e3204278a9e0f1d69a1d3f75de58f6b16a5ada777c050a738ffef1efacbdbb1fc6e810e73cfc9856597b077cf3ac634969f51bd47d3df6d6fa425a38abe13c8a23307a7924ede8f1c6d47fefa8f1f7adc0acaa59", 0xda}, {&(0x7f0000000200)="df821a0881ddc232642e56a19bc3b2613a008f4fe68ae5bf255307", 0x1b}, {&(0x7f0000000240)="15ac237053469c2422e15cbdd033aaabd001f4a1d7a026426f6655e2ac6f1eb8172b0f2a15b16dec478aa18b25b3958a4b1e2a226dedab43c5ec9ae1120489914892c1471273ac40d0420110352ff2dda2e85e13fd7704a34a201f0772f42306b664d799deb603a871da0c707f3ca465b7fcd825d3b47e6ac0dc1f208f35b3568a41d514cb6b61f40a0af5f01c288fc4d3bf0e86232a7ae97a91b3c45b78b2c2bb2d9a68c245c3626fec3b9d2298389d89512c6a4ef30a808e2efcfe960e2c8f500f1bf46346fa97e35eb73f993dce92eee2f7adb82a49b615e52415727aca49acd239f2700581b05d0fe7b3b61d", 0xee}, {&(0x7f0000000340)="e26fac7cdcacf59bc0a6eb936442cdd0c89a20960a1b89ac948aa7b0103b573c1d4f00fb624799ca7e4ea10e7736b0a48c6ce8ff2d28b6f43a54ffa85bf306aa4065a9173312c9346e38c60daa2754012d354d82d7a040f7ee51b3549ed862dda0892e03206618c0bce31b9f89edf0c36fda386f9b94399fe36a6e5077dd8e417d81872fea5c415ab6f932e717ea4bff4e49a603e545fc8de5a60c5e57b570b0c09ce5073231b94a4d64a101e505e27a4fe3b87620ff4924e848bffc880dc613e88fd3452548475625c34dfb7b1e292ebbf4dcd94a86344afba74d8b3c0603043017ee288a74aaf7c7ad", 0xea}, {&(0x7f0000000440)="379fd4a86bfdb546", 0x8}, {&(0x7f0000000480)="97c94457eb24aa3b836d5731e5e4d9a70e7a418e2d9ad3c95d716e9d6c896ab0ba878ffb7aa03e652721152813fdc8ecf6fe80c2848d794e1218915a340e28d655a17f1c879b239895534068eed619ada2fb01aa02022f218ac37fb19810d5fb999c8f68a96edab53c2dc49d696186001d42590b638ced0f0011dc759f4489f91c79b44e4a35bdf1b711b1d996dd049ff5c516de6e30f5b950a897389dd6a4cbfb421ee67ca1356a2971b693ae290be828c7b811e8e8fd027207af58b47201fc4c5d9ad1f3c3a8cbd863e0307bc34a6a44f0bbb41f8e", 0xd6}], 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="30000000000000000500000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r1], 0x30, 0x20000}}, {{&(0x7f0000000680)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000700)="25bd09addfd8d6ec2f9cf44754c5e2ac9cd9c6cb2325f6c8c061a8ed1799adb91d9d280af14e801c845b22aae026a43597bd91177b5c46c0d0bca4ea230efb6a14f9e6d148f6d287c346e99f33299455b11f77c2ed119136405c5e", 0x5b}, {&(0x7f0000000780)="a1842ff3aa773fa24f5dc4cfb9f30e1a8bc4f26947bbc80b5e000d3fbc390e0748bd872c84fad9495da010df014cd23ff4f46e71d274db351ff9bfca4b660a1204c250c90ed0a3629f77f38e33ef21fa3adb1b56e94bc69e8ca00bcfbfcd33bddf67fd24bee48617a610d27cc5b4632dd4b3403392aecf42ab72b157e68a27711b947d5b73ece0246fade4aed653422cb8767b8f37", 0x95}], 0x2, &(0x7f0000000a00)=[@cred={{0x1c, 0x1, 0x2, {r5, r7, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58, 0x80}}, {{&(0x7f0000000a80)=@abs={0xfba5372f8aed53ab, 0x0, 0x4e24}, 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000b00)="e95bd33989bfebff5fcf566b717d5a3f63abbbe15a85be378b2988494367767c6112f6c56efdc0ba5e21ee7fc5644d4d1ea3ee2095cc1f0116688b5bf5dec811e7247d78fa6aa06d1fbad9ec205a335dcbbd0f56faf581b1019b6df3db5462503a7d7efb18cbadd9ff7acae1067ca8bc7ff8b28956cd46ce6cc068806d993d0758ba41cdf69cc57733c365051d2e9f757b0f1c0f81b597c93da62164675becb38d8275b810597580dbf221ac04a056fe9399139ee25735e765d4368c2c1e9c27de8e39e2660da55566c0", 0xca}, {&(0x7f0000000c00)="a23a146699803d16950d8436e736428a983964f3e8478fd918205fe46ac0980a0ddb8f1a396fd4a4e24529f451e9d8321b708f52632d918b939e39e6d1bbbb9dea249031f548d355db1162e69e3ecb37819ffd62e7fbe8bc95265842a67f800ee3bd5ef96b047b6794d476cece4cb549888e1e98a0343a9029ceb805d0728a1628fc8a8be61d1e5ee21e8557a56c6650411020b6c00acd91745f8d67770f052e68715f9bc8f9f66ebeeb3dbbab006244cf50e3750f8858a54b0d67d0e698cb2454f6", 0xc2}, {&(0x7f0000000d00)="8acf549041722563cbeb927a2ca3d4a75ea20d5a84f54afdc95be3010c8645c474e867f6", 0x24}, {&(0x7f0000000d40)="96dec345736a91cf56e92cb7d161bea0683307d630254cde2e139731c92aa1cfe23ee860290c4d66e3ef838793b5cea0c784fbbdee5c280b7d1edf1b8c0ea939e57441248003d3", 0x47}, {&(0x7f0000000dc0)="49277650670ce878b6a58a5e21fa52313bf5a82996a7ae8162188179509d1815f55289cf7d7c7df6917df2792d0766b89236cfa13b91679c491beebe15f8aa15ca8f53ec009716c86a6985ab5f4ed056d0ecf1bb5e64e0df2b6b7af3e6e65e1fa6de4ae27d55ae10dde3ab8174cb71a165534fabebb6f0c1536d", 0x7a}], 0x5}}, {{&(0x7f0000000ec0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001200)=[{&(0x7f0000000f40)="6e87642f1e24c54d23cf5c428da9ed66dde1369d853af5fe602cff50", 0x1c}, {&(0x7f0000000f80)="d7f760e3fe59978f0b8591b8f0a4b046524604c3c08db415cfb6cb1178e43fee30ea8981df40f9fea0ce7f08e9a0a014377e0620fb0a33f6415d6535e85b17009f875c83f371381f5df375c22beb57aaa2eaaa81362e38910ce99b5b9179e27a7f966de6f45ca05d5db63b4274a5d542b23daf343498489afe9056350443055295e0ea1e552b8b5f0e0564b3c08129b7576c164ef692aa572e86a652ffa656f67ed94f677fbaacd57ce15281eefb85d914fec37b62e1638b2ba22f209c7d16900b24db2e3174", 0xc6}, {&(0x7f0000001080)="c81c9379475e83a9e35bc75a5efa7aa8ed913571d0372a02de3e760df6fcc7a54718ab5f744d56b0b40fbb9ebf47f37e52f441e758b6a677f1c3fe54fb68587a55059965a12d56e68eb76bb18fcdf71c73fda0be1e0c21a6ed0ffdb92e4b9f528b61cb74bcb48fd2a5f911da858b066570b517d30ef496d0f0a291ef4f9b746967c130207bd643a4732fbb2600cbbd14a8f03e1e0fed6330e8af1f699e25efe254807a1ed7ec4d0b4eec5612", 0xac}, {&(0x7f0000001140)="1cfd", 0x2}, {&(0x7f0000001180)="4bd5fa8e906bc3cb6562723ccd73941d646d119ffcc3daa1ddbf402eaecde9ae7e7086df63e9342e121eb800686b1a9324275aca512ec9b1a730fd3c88caca379385e4fb0f50f5b657", 0x49}], 0x5, &(0x7f00000012c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x1c, 0x1, 0x1, [r11, r1, r1]}}], 0x38, 0x40000}}, {{&(0x7f0000001300)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000001380)="e115c8f9f9b6ff85658b8ab00352e233d46d52d2a98c5e50e3a433454ad6cf041577494cafcab2ff59d004de79e2d363bff42bc3f1f4177f9d65ad5ec4e9b0348c913c4ed0fe59092930fe4bd82a35cdf7a57dfb5a74b2263f16294499", 0x5d}, {&(0x7f0000001400)="111c6641ae3a05572e14be90d743a560e1e3ce563fa934ab70ac1db3f4a5ae66f85e5ec51c3795cfcc960baaced09c06090fea600c7895b066cdff5ca3d0a1025cf035650c99fc80b74bdafc1c34a371f9d40628127189e4206366a32ba29cc3fd94769ea6f0", 0x66}, {&(0x7f0000001480)="2651058eb478cb3e6f0cd63821aa43858dfff2881e780754f487079470cbc6921daf", 0x22}], 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="2800001702", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32=r12], 0x28, 0x8002}}], 0x5, 0xc8d0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r1, 0x0) (async) unshare(0x22020600) r13 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r13, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="000002010000605b4826ae25828574bf77e1170000"], 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) 3.380743749s ago: executing program 2 (id=598): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000000c0)="b0abdf777b87afc2935574", 0xb}, {&(0x7f0000000180)="49cb2eafe60cdb95b12b66e41b4c34372b3e8e90aae3659dfc515edcbfa5e7cbf8497a529d9c9b9b7083ff8cb569c04bd5ae33d54e4e468b5713247d6af21793a6e114f3bbcc402766", 0x49}, {&(0x7f0000000240)="94142e84dd8ba4abf7991ddea7b21265f110f57a629b514e2ef73a2aeb4e62d03cab1c0d2107499cc7a6ef0e1ff6cbe9303e756761da55847a7153885cbb72b41bc3d839bc1cca55fac5829c508d737dc6165a925098d85d7752d99dc505ade184576afde17cb7e6bc864f2932999316c0ee101f7ef8b91c71010a4efd2a79662b7c5f5e9ca311cb40f0fcc517771e9131956c097293d1f49b9d348bd82459d13b540de485f89514b67c7e62b6382775cc12f9e9b56a95f1c9eea2dc0abd1c36be52fe71eff06897b3f7adfd1a2d8afc21d895", 0xd3}, {&(0x7f00000003c0)="6c79b363d7fc3aa06f5b99a3ad8e122223e2a8badbd3b0dc02649f59d4e1add4f6871191eb324f8cfd882187c8817548fc02f7d3d1deef0bf5a663d1a9bb255addf4e04cb1094aee57e0fb6ccf2314d50450fe6c3d66869584025d1b5b04a7c9cf39248a68e8a579b8087f08f4fe104df686df64a71e619d31ea81f6b1e67bf8b5", 0x81}, {&(0x7f0000000680)="e4ef44560f602c4cf9f33039519ca07bcbc8cbe0ea9655c4e9e21cd57555e53ced039d9ac5c27928fb7e8de7115980c6c8a15bfb8458d34ade810bd8c35783f9e7f2c4a2d9c3e7c195bbce32b7e7d5ccb325cd26211ea3f76f1905f360f28e12f300d0b032011d1fe1e70abf5019be94084e964ec41af3fb95c90fad47aa4b84a06afb273c41984323515d307c11f821dfa8e5f91ed3e38c903a7ef98f3bbb763e6fe462b00eadeca38ded5d80d6fe8c199af5e3e272fa04d0124ca3f7e20ed268830955ef10f29809d4f9b4eb87d846eaad5ba8ca1786e338c86d8f28a2ec9a07aeea8522396b1e6730b2da9f1e886b15c0fcc9", 0xf4}, {&(0x7f0000000580)}, {&(0x7f0000000780)="df2541b2521f8b0d6f6970c5ffaf7b8f7220a3ad053fd28ba156bc017121c75c8e81878093daa6b7172db1274272d20aea65713cfcd44b0dfa6983f600ef905d58e36c8bcad34e245ccdaf9f1cac839b9ed62ebe1c0595387f3720a0da4253e654a68f2e39af6a782b7a08a6760df55096bcd91d79dd3b269963c6f2f02d3e60dfc4dbc11bc8e2057910b5f097535a316d2079889a474ab7e219b9", 0x9b}, {&(0x7f00000005c0)="4d95e52e25", 0x5}, {&(0x7f0000000840)="acb7cd3fca5a27f0711533140e45b73ad8f4a80bd87d20a6d558f8824e49c4a06823581119a0c5f876bf03b53b", 0x2d}], 0x9, &(0x7f0000000a80)=[@rights={{0x24, 0x1, 0x1, [r3, 0xffffffffffffffff, r3, r1, r5]}}, @rights={{0x38, 0x1, 0x1, [r7, r0, 0xffffffffffffffff, r0, r1, r0, r7, r5, r2, r2]}}], 0x60, 0x4004053}}, {{&(0x7f0000000b00)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000b80)="00133dd4c08d7c637991decb48cf8e1a0a1db48344ec086e0cce12b32e3c623f74537125b53d96d082fe5a39c7eb05fe90fb0638966bbe4c587431578f88b7a35b809dafef5a5074ff6c5c52a654228055742719a61e149e2f248255f42462911eb0c81e6babf5a4a2d3f4c4bf120ecaec64cee641fc60f19ce594b5137fe3642fa3ca7c3541a9f76c95bdd6f0ace40e6df70ce00fd543318374689eb1dc95a3d6a8bb", 0xa3}, {&(0x7f0000000c40)="29047a6a3ce15b8593e66707fc44edf394f75172e8ec64f9c7abfee0948ce7f80a49e10d2c6e3397d19734aa245f22f9cf4541f8c79862059f9a3690f446e53b5415f1c8b581b8a47ad9398ea610b825a106ccfb8bc0d510ae8557ec828741762a8622d05bd2698af5ed089e754b368d7f49d02867c02f1bfa35d86015c577e6f4eb40f7236f2be646a2624fd66742e90965ef7d832074a0de13a29ec96422546f092d502e439c03c5bc4bd6dfe25b11e176bdce4dbbfd089dd0ea4fed88b0081d3d", 0xc2}, {&(0x7f0000000d40)="2bf2ec02b2d2b92390515b81084f3fb2ef22088cd25f3ea8fce6e9ad4bb09677297cbeb7a9103cb7844b97a740a1b70bb6f6acddee581e89ae934ce4ffae2f1d386528570772e7a78026f7b83727ed104a2b9c", 0x53}, {&(0x7f0000000dc0)="603c700c3526799e54b733e78dfa36b7d87111e76caf3ffd059acdf14b155cd40da955bd4416f29ba48fdb78c71a81f60a2fbf3ff6ac8fb9c085d4c54dc7ef95ffe04c94253c1a4ec3b3cd3f46e88ee301b85e11900af133658812e46e67c07ff114198b840086a2935fdeb1cb9627a8ab3591af53fbf8c2d081aab780b0bf61bbe413d70e0e2df0a0bac84ef80098f3f21ced488948", 0x96}, {&(0x7f0000000e80)="12ac3b0ba6c5d089aa9f6fd7755a089b99958b8b23a7ed9fd33275b8762a0b30f38268552c760544dfd8cde82c0306a97979db28061cce66763f68a53606c0e1ee07b23461122aaeeba7df9b0ca7acfe0ab10a192d336380372fcda7eb13243085115cc8ba75b83a06122b1b9c5a0a1bb2d05c39664cb465467d6d6c27c35e330acab2cbf129d98154a65391641bd5badc8a79d65a8353e0edb82a00759966044240b70e6af029b2955e8169fb27f9f5a1e05a59342ef79144ce40291d8d8d36af17", 0xc2}, {&(0x7f0000000f80)="e66f778d9f561cdaebfe60d3bcaab6069b6aa35037135bc9417e6a2bc2e45166cdb89cf21bcd0469ecc17851394f325ae94e08cb9d397915da287b6190d8fd7d5785757a5d64720f6a2483947c3731f8af6445d5e02def2145826f5cc9b186c0fb0803654a1969a4b6222f9f1e68aef88ec6dbab21c2d74d1b818acaee19ba3ca9bb97cb9993d8af6456ef248a0b77f0ade8099047b8c012c975faba07baa8e918835109e837ebe50853785c78fe5f7a8d2fdbcb576ead23eb9abc0bd5d8e90cc68a5c622d671ab8d759d65c86886a7502659105a03efad105d3e070d33757c4b3a1dd8f81040f0023c9833ca8690f15dd", 0xf1}, {&(0x7f0000001080)="bc553aa02215093fcc7db9a9cb8f3302500367a3bbe2446a97a5c13ca8bee089740b065bd7f1992dc508c012daa914f80e7b", 0x32}, {&(0x7f00000010c0)="e50d45a489ffd25dd7e75b32117a9322ad464c17871622f0e92e5560c27593639edc48a1d6c18c61583dd38bee6f6443d0ad9679ea9ef177a0795f60642d75c3d9e24e0d9548ae69a73d95159d14626686a3d9579f196e5949abef822fd0043dbc3c5218e6", 0x65}], 0x8, 0x0, 0x0, 0x20000000}}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f00000011c0)="c03693a9001e2d1b1a650f8f4593de4fd7b856847ea0ae16f03946fac4cd2ad67fd10eb398409ab12a951336e7fddf06da2c009bcad29d2079b947de0e", 0x3d}], 0x1, &(0x7f0000001240)=[@rights={{0x1c, 0x1, 0x1, [r6, r0, r1]}}], 0x20, 0x40400}}, {{&(0x7f0000001280)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000001340)=[{&(0x7f0000002a00)="3dc7da9c06e3055e30d6b070bd2a2a01eeec0f1d6297ea162a1386dc066f213092cd24a79b624366ba97cd230ef1c3b46a284efdb2f4effc0f6d45dd9b0ca18c174e27a671bb4519822dfd9589df03219a4ef40fa7c7a7fbd9e6dd2aa7c85a63a3a3694130f03a5c1bf1b072bb2e6ff32d04a4325ffb15660699586319070123ded8dd2889fa03bc62154828fc44ab2db91ecc2b156471d8a41635ea8532464f5abce5d3918e62a2060b73d7ef3f739e8ac1d941cb54d958da1da09de84464381fd8656272c5b89c5b7d2f76708db632b45f0150a13a88c172f79a2ea382027769ded1ea86ab9665aa4098f1a54e131878bee54c23d67d0e7a3cc144470ef8779cb0c694f8eab2b4a9e236520bfbdd2f67489cb28613a98fba9303178a760283d84b739887d89950a730b3c4d7d775f51103a05bfe6015e4434918d2330e158c37a7d1b80cc8d1c7cd42299b173b2fb696571ba45f1b86d44c857d01fc2c9be56604e599d1e47066db635be83003a04cfcd068710143cae37114ff2c9c0993550172a82d313158ed4e62cb6addac2aae6a2bef643eaceaecebb7750a9e90a8490a02bfa3eca2c6ca1578a12359ea7516fdf136cf728306031b666cd80464034c80d8cf6e8979bd819670323eb14aabebdcf930047be01f02474b005f4675cb726f0778e86af4692499f80abd0ace5929e0053e679cc46ccdf85340b71ec06878280804782a73ad3665febb62f25eff32be977494bece6a83c25d7b76ecbc2572429d2f9a918ceed690555dd6b5abefbbcab75a2e8204784aa2e015ef0f7a567ad3a37f8dc18a8949be50a641c2573369dacd4041dd9196e9a6b1a0018dace66c7e70f422886479b7abfdf53b2c262e8ad275224831bcfb9b7a624061585234321a217704d444a9857a3e380e1d5fbdfe7e4f6f5b22212d685b943f67777e3841fd91d1602083c56c19e84dffeaa1b14297fe12676b949d9fb0f2a349ecb44d18b9663366c0acdf22f5ccd8280674573050240b2e6a9ee0c31aeed34c45b36e8ac3b921b9fe7e9c82178f73fca4f1a284903c328d4cdbcc0e3acee290ef501eb4e5c5d9cff6ff6773d96c2a30f7925ef33a0149cfcd04cc8854059ca3a757961f0b23f9e75a776bc601f2d4ec04a2efdad144eed1d41a4e61cd2a840158b72258999ca1e0da196a228b3bd1ba3e2292cf38b8f0a3633f9903868095ee4fbbced01aa161392c8f4540ccdc03acfc6bdb4eb51b237a3531f4334aaf1580b12eaa07d5450da920cb0da3cb2e271739ce474535bb7d7664e929edce93106c1d33ebf5a54f087c24f3e9fbaa843057a3a635cf991935317ca65812f197e9492c858717477d98e34bdbfb78020bdbd44d8c004ae922d734a98b905037f5f874319ac959a3f9523c5fc38c2f26e659b0f86f61d8b5b31e6066e96b87398d9a118c4c3bad864fdf1f3012a6e187dcf23c7b65661ba51b954b53fd0282d946442f94fadedecb096fd3498b8562f887444dee524372183b2775c77a79b31101511a61cf155ee2492d58c63e3fe759d8e78ed0b2e1035ed8043ea546e66276ccf2f07ba79bbad83c311b161175fe0141e2884c4eed8c678e3520089713079e4852ef6921de1eebe5b5b50624078489a886cb2ca0ea74be2f7390ae9915af83e01e36928f481ae9b4483e01ed33e83e75d4d2c3519dc6c2e691e50dbadd8fac4b85be038913b4408d3bbd95f55d030fe7d215705a0f598c69c6ca9f477675db426d342781be1b6b6127ab7853100b8f6f0316d4ee9847a91355745e8d2be7c4654ed12f31b15e6a86143ee42b558570868d84b33d8fd3ab98b64ab4cdb256d42b26def0c87e2082d88256f83220f74fb26e4aa3ec2b2f03d638d9722a4fa051ccd38a015cdd072c3af526f464fc914385fdf60c0354a59a15d77934924c79b63c69d7dfee66c7c938a8fa3d0cb9c0cea1fce982d99ad5bb220cfe1fe299ca049de58ae0e26df8b061759097735e14f97234569258fcb062d9b689d05485d5af0ea9de824ef9841160104da918bba0ea559b5c59245f81d3da57ac7d9af1b968d363238d9121b767241fbd7453fbaa6baff78229dfd7c9cf630771ef8a29a7b2256884441a62e59f9a13e695acea42a3025aa6026ec7f3d6e8d78c95a241df9e9fdc214abfe33e97b18f79684788d66bf4bcf17865004b77a0b790e53d3e471c59d0b90a3a54d651447c0226af46b462afff736af1136843590d2ce1888357ec48279fe56d45ce285513979cfe597587aa7dcbf9623592ba4a9b5b0f60ec351fdd978a4248b1daf57a34078cda74d456a878e43d450a0ce25f83fbf83f8f930613d090e460b865df2bf5568aa545925148ebd4dd23558533d7d73d0a112670164b8d9625a7b7defa8f327cc80f3cdfad969c79916452585c159eb694907b326cdd451603f5df37be04f56ebdf399f3fb4b5bb0717a1e89469d442755885a9af2bd9f61a308fdc3ae84190e95f70fb24f38f094252e8f2115132bc17faa5c6e22c138ec364b89b0a81e27d87ac98a7f5472729f72e786a62428969d3445d63521f1b3c07a8c1940d8b35e4d8543414e2fef6f40131a93e140170f1c499d2421f7cfe326f4280c7ec96b05867ff19313c7f05efb8e7eb5eee27eca7125c8e51edad57cadfdabc19f19cf897f8765e55cbcac624ac7d21b5d73abc4e8d53e3148ff7c8668adbb668de565b57c2e1836de46755e747c0f8fbb3c17056780d946965e24d2ed31ba2b81c028fecca206a369f51341999a794d52f3d109660f1488f21b176e7b68f72b1b910410dcc24e504ad368c7c7f09ecb9b59ca03155156bd9d91e1d53b93df73ceebbc2edb9bb39c540d271431b9a0b8609d650ee9631bccbec0f91773e21fb3a1812560d4d93b4b47c4be1d921195cc5d8affcaa4736b82f252b8950031949feeca43e50bf02fef42e41973dd9f5255e8a4e0254dd7aeebf4739773b35b76ff337c53fda4c834dfc8235276e695bc1ce267a0f79b28c0d031b2a311a9bb71bc4ca071f732b9ae9e511397c6f512fdf6393fd15f6fbdc5ad01b68c656c841ca96ca1efaeeb981bf393f7ffeff059c023aae6f2919604b16f23266d1543e2c2deb8114fafa265da4ecd41dcf0cc4f664de6cc5b840e2c8f3cc2478c9e84e14b5442cc27d9964183e9df9a94fcabc172040e7a14ff081b52e1575da4f9ab28a803aac64e218dba96e90ee67db5b25fe865a6a6c2fa39edc124b2a09abd3ad8717eb2f0cfe1d6f89ffa7a555d72a9d735770fb620dcf564546db72409d52187f0cc8b62806e87970c5e7e3eae68077b4f1de58c0e6b3b934bcae200837b17e59d16036dbeeebb45e7613b2c642b98e2eb971446a7147d4f25a302895c3eac311f6cc5008e797164b34025a3254383904117e074370f2b7790e3c043c65841812c3ecfec9e1ee5b2fe13dcf126cd798618fee983b10bf888bd3ceb63db25e419663fed15ec79108898c437138568a3c198b0c037dbc1d56a4af829a2bd89ed78110666b556db0b7311ecf96fa9d76556fda8c8ee9110afd572cce85b21fda9672800e9732f912d20523027cdbb1975bbb86440c1ccb6a166002c4733b86ae66d8a6a25cfa58e9c3f902b19c6e23457b325c37184fa36f1eb81921692c3d9daa102500814c6fc9e43b59e4120ebd1c5bf528b25566595bfde55aaef5f13e9fbe7ee1e08a2baea06ef309fd80914b434b79dfeb3687ca751d612a5223444d70eb7958c183aa77ceeb89a6c67c0a7ee5041fe7cf7c5cb33ecdce7a593dd392674172f2fe2245a42ff5b67d2c7dab7a3f894d615e2af11ebf6939df2867464d928ef864b7a3c8155d42c6785603dd9c1bba03648a78e0c88a1d158c977db242e24147de450322e0e7a83099c0cc069b29beb6f4a463715c598d02113a285d5165b82ff694ab89c7ca9cac806c4e84b11576a8bd3e6dc04c695df90755795e2fffb389a717690716e1b7cb5ce6d242485b94cba71368053b3bb2b7c5373a6646616a2086890995e907774d4602cab8e6f9b4da510ca1d14cf18f0250dfce51997fa6ec3fc527477f35056c764906c14c648e34c95c5cb9cf3d7c813e34072c74e8da5364fee834a52a0f1d18dfa80a6eeae432fa54239169ce1432652907195c875400d89de783352cbf93b65e3414541a1c43515bcf09095d64a264ad24b55ce8995aad982a09ecd31ddf5d91feb9ffdbc14869a912251fea4fad0690ebc7c85f3db0dfb4835077dec54127e6d9d1ea8bf652c5e59874259860a67cadfd219aa33c7293e37e456fa7897e3fd04c8534f9d7480e9edfbc494046607b46a9f0e2f2bbdaa78e8d355154e2da4c788ddfe85c193e85ba8525146d86675de712bad12fdca5320268d5c5e27cd1775c21d7ecabd134ad05621aa0d66ea41bdbc4ea838d6c44d8f83faae42f06b214ddab8fe8f52b3d304be1e2a185951820f9849d7fa33d34d71646a5a383368f42daa22a71e02b369a7d3e8b93b3d2183e81fbe59818fb19338ba0935b5e096e167737c435b88c7cc33df440df23120a32bc4f72a412890e33eb776da978507eafe53e7ff8a8626945d42fe48f0a34383180d64c2aeb451a09fd5389e3fb73f663729b5aaccc7f15805c01468f45ad3faa55ba7c392c0ee950e83b3ca41b5eddd2fa49676113e0adc0cee49d04d8e16896a7269a27c3f23c0fa266e5099c16beb67f14361c9cf62055106f55bf7e6a6f71ca2ad0b229a3f78398dd660cccae102819fdade49fd6d1599583b53f42e48e0bafb9833da4cbd7d9488f29e53d72ff005a5075fffa36197346b88c0442280e079e2bcb7fac7ec244994308c46950e1ff033bccf9047ee4484f2b71e1564b0bb67d30f88bdc10b1bf941317931b01282b093ae2df5cf34c15e56ced94ea605a4de4d8d133ec94bc41ea857375e48f8843398d8be73247425a809536ab16098ea2b711a368d30bc7682e08c51e8e175d17e98b45270f2e4f7e3d8ebd57f82de92f7a9bf7e200dd47b377df46734ed9538dee6a1e96456f50451ff1349a18cdb37b07afa65ffa7e8e35fad8d16012b83efa95511665e90c6be511c776df59391d5fa236dc954a4dd5d4e860e73484cf92465b9c155ca88c79dd1c1d030e6d631abe254b885111027ac4c7daf35cb8c1246e5824ee7d14ecca66b904d87a3badfe35aa4b4378bbc4dda7f08c19d0e72c6486956e042788eb047cd9ce67665ad0aed901be0cecc5b9a0f6b124e1545e27b257e8451d946d10cdb711beb3fdf1cf1d03ffe3be604b91cc345580511c9b9c8537f964b1c66f19d50833cd37091afcb081c7d6fd3f14672e68913638c9d1954c5954d183938409a644a6b9ac78e0a645df03cf135e121861cb1ec0ea0b51664450573ec1a07e7d9085b7b8be7985491c1fdd610e212f53a33bcc8d9abcea877d98b977a85eb263b46255df57db945af9bfd0d18c01bb03065938abab72535fac9feafce3a9046fce21e62ef03cd1b479e800d7c5315b91dd521858b11e6d4b3605078cacac31bed339b954dfdc4e2157db84e25cb26f40ec7ccdae1e6480fa546d49e067d07edc19ee17563b984b46ae3eb176103dcb706ead5a4fcb24146b08b8c6bf929cc3a703368a66543448dc3352116b82c26034fa06464ba3f160e0df676465e3a896650512fcd184933499a41363c4d46e45315e6e4b3c91a05a0cfbc3bd94c001ae08bf7d8413179f04dd5bc99a4d6d6fa445c94a57be5cc77a18d15f19e6ae70415e3e47380c65c47baba429392872be453acf7b0b2", 0x1000}, {&(0x7f0000001300)="91d9c459d6948307871ae23d10328b0b6793a24aa6cd07b5a89dbe27b1afde5e2f162d33b16088b2ffa7133e7f5f393a", 0x30}], 0x2, &(0x7f0000001540)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [r2, r0, r2, r3]}}, @cred={{0x1c}}], 0x78, 0x24044011}}, {{&(0x7f00000015c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001840)=[{&(0x7f0000001640)="6067bb90f9d8d63f87bc1757877256bd38e7316217b18ac15f81f50410165dec85f6a212056bb79ddb699f08263845b2aa48331940bfc9540ab7e7141bc87f12551839b1b88469dcac5785b1020593ad378d56308519e6c2859b1a3ae1d52d8852eb1426f4026de2c67f6431a430528d108c1a077f1b6032c4221bf1334011106e4d7975cc248b4edbeb82af8f9b87ded33b352932ef0fb054edd85250899dc148c91affe74619b26af70d74256b8e6213eadaa881395149e8e5", 0xba}, {&(0x7f0000001700)="1563dc561a54bd6a6ca374ef6cf875dde45532a882db99a6d0518da60abc2472965113ed8bb40c", 0x27}, {&(0x7f0000001740)="654aa8dfef2178118a6a21a7b763d10047ba17c1dc2ddf2caa59de1020126ad1c72992ca04f20a4d964eda5f353b3838", 0x30}, {&(0x7f0000001780)="8be2719e333cebabf246810a26d2bb2438b6b8698bbea0bd4f2996ea9c9a87e8322369c5c33635d87d9753a3febe4e13aa71523d4743b3b74fdaa013c0b322d3d0e8ce19d6a4c2f84046533864a29a486ff9ddf3ab84667fb58998e2bacb7a15b095956d4f0a24bd030ab4e058be4a548445b19b92c0a15c404b46a9f4dcd73cf1858c38258a", 0x86}], 0x4, &(0x7f00000018c0)=[@rights={{0x34, 0x1, 0x1, [r4, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}], 0x38, 0x4001}}], 0x5, 0x0) recvmmsg(r4, &(0x7f0000001100), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r7, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x8880) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0x1, 0x0, 0x0, 0x4, 0x118, 0x21000000008, 0x2, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x842, 0x1df) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$inet(0x2, 0x6000000000000001, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010014"], 0x1c}}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r11 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x8000) ioctl$LOOP_CONFIGURE(r11, 0x125d, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b00010074617267657400002400028010000100434f4e4e5345434d41524b0005000300ef00000008000240000000000900010073797a30000000000900020073797a32000000001400058008000240000000ce"], 0xa0}}, 0x14b6deac033214c2) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000080)=0x3ad, 0x4) connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$sock_int(r9, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4) recvfrom$inet(r9, 0x0, 0x0, 0x2043, 0x0, 0x0) 3.210607591s ago: executing program 3 (id=599): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r2, 0x400, 0x0) open(&(0x7f0000000340)='./file1\x00', 0x20081, 0x100) fcntl$getflags(r2, 0x401) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 3.004765345s ago: executing program 2 (id=600): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r1, @ANYBLOB="a42804ffffffef001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 2.312323285s ago: executing program 2 (id=601): r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = socket(0x1d, 0x1, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000020601080000000014"], 0x24}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) r3 = dup(r2) ioctl$PTP_EXTTS_REQUEST2(r3, 0xc0603d06, &(0x7f0000000040)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='cmdline\x00') r5 = dup3(r0, r1, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x4161, 0x0) read$FUSE(r4, &(0x7f00000022c0)={0x2020}, 0x2020) 2.260149274s ago: executing program 5 (id=602): getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000480), 0x10) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001ca1a604004230f02de3b010203b30c3049e2ecf9010902120001000000000904ac0000e103b30000"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000040)={0x20, 0x21, 0xe0, {0xe0, 0x4, "dd0360241b6678d4b56ffed6e58c01f67b42efe761a00f2033b445328062e8434e9d2c57a0ec17be4a3b33bee9d63b5853f39aa4dcf4ded9fed8e0302602c909f7ae50fa4fabd1b9ed64f474a6cc68b4ab646ab9e344fd965f9f0eadf757705e75b1a66693af6f7b76c7750ee3e35e132486b82b07619497ac4c1968aa91c670d2c20cd5148ed32783cce6c8cb62ff2a808b63c72cbf3174fb45065b692f74005a520bf9f99a4673106d66c37f30a8c7d1aac8c16d348b8b0437a31778aea540a3dfc7f93bd77eda5ea6a9f6a43e59dc4fd5aa8118ef5f1d4dc8b9d5b6b7"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c20}}, &(0x7f0000000180)={0x0, 0x22, 0xb, {[@local=@item_4={0x3, 0x2, 0x9, "d16439d6"}, @global=@item_4={0x3, 0x1, 0x9, "30e52277"}, @main=@item_012={0x0, 0x0, 0xd}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4af8, 0xe0, 0x1, {0x22, 0x605}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x20, 0x13, 0x21, "a7b6d9fa18e3ab761cbf551270144aaacb3a18d4382f093bd710d25881e27362a6"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x66}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xce}, &(0x7f0000000300)={0x20, 0x1, 0xf6, "f393382085180250c049ff6fadd5563ee6b03b8f12b04744ce1252a1ed49964825cbe3d93df6820f90e6c16171ea1af901cc0c3b534f0eb8d9fd1f52add2dc223056ca463ccf4decf9366cc78569f70ceaa69c29776ae8a84c98d3e4e7c9bfe75b5d1486be6814734a99878a0881906ee3391bf9fe261438c02b32ba341aec76804bd4f7f04887d88bf46fd58125cd1e64a1c3c330fc42f06362f1217738b2ded8a0091feec9f4b57b0f5647bf52f8acfc3056882ce3ca9f75ce723d45e3af3a86e47d6a93e4a70a5a3c66b98f31c7cf4eb3b9ecd40adf526773456a21e8d2f62437052272515d630dcb731fe51f9e181c345c4b6fb3"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x7a}}) 2.036845251s ago: executing program 1 (id=603): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) socketpair(0x26, 0x5, 0x2, &(0x7f0000000c00)) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x0, 0x5, 0xb4, {0xb4, 0x4, "925768c659db95f511ad7e01f1e14c16e7014eb48a340daa5d7311a774d6a6e4937191069a47ef76426fb114498ea1010c7061904953543db5c45bfd4255fcb1030f152c0edbddcfe4fb2a7eef6a0bc56acefb6fbf06ca522e37a343a1bcdd9a6cc41ea7265de5f3d50b3faa723b76de5dd92fc6e471042a19f6a0d04c2e4129b9cc4937102e9e6319389c7a3270093d29cbf4a805f326dff81b4f603ddbc628ea318c4b7e76ee9be4691c3e4ee48802f400"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4c0a}}}, &(0x7f0000000300)={0x34, &(0x7f0000000180)={0x0, 0xb, 0xf, "bb9c82c1dcf78e5af44607de80707b"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x77}, &(0x7f0000000240)={0x20, 0x0, 0x1e, {0x1c, "3c31f949840e390b8953b7194c744ed850a58c5f54594bc264e053e0"}}, &(0x7f0000000280)={0x20, 0x1, 0x1, 0x2}, &(0x7f00000002c0)={0x20, 0x0, 0x1, 0x40}}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000006c0)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0}) 1.940661518s ago: executing program 4 (id=604): add_key$user(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="ed", 0x1, 0xffffffffffffffff) (async) r0 = add_key$user(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="ed", 0x1, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0x101000) (async) keyctl$set_timeout(0xf, r0, 0x101000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0xfffc, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, @remote, @multicast2, {[@noop, @timestamp_addr={0x44, 0xc, 0x2, 0x1, 0x0, [{@remote, 0x5}]}, @cipso={0x86, 0x2a, 0x3, [{0x2, 0x6, "84924d89"}, {0x6, 0x2}, {0x2, 0xf, "d109567cb50ec760777fb80755"}, {0x5, 0x9, "c92d3002d91d90"}, {0x0, 0x2}, {0x0, 0x2}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "ade34b13"}]}]}}}}}}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@deltfilter={0x1bc0, 0x2d, 0x20, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x8}, {0xfff2, 0x9}, {0xfff1, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x6}}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x70}}, @TCA_CHAIN={0x8, 0xb, 0xe59}, @filter_kind_options=@f_fw={{0x7}, {0x125c, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xc, 0xfff2}}, @TCA_FW_POLICE={0x1034, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xfcfa, 0xf4, 0x2, 0x8, 0x1, 0xc, 0x200, 0x5, 0xe32, 0x400, 0xa, 0x6, 0x4, 0x2, 0xfffffff3, 0x2, 0x1, 0xe9, 0x4e, 0xc8, 0x8000, 0x2, 0x1, 0x1d, 0x200, 0xd, 0x3, 0x1, 0xa, 0xfffffffa, 0x2, 0xffffffff, 0x8, 0x4, 0x7f, 0x7fff, 0x10001, 0x4, 0x4, 0xc, 0x4, 0x9e, 0x2, 0x10000, 0x8e48, 0x10000, 0x1, 0x0, 0x3, 0x81, 0x8, 0x2, 0xe, 0x9, 0x7, 0x1, 0x0, 0x0, 0x5, 0xfd7b, 0x80400, 0x63, 0x7, 0x5, 0x3, 0x5, 0x5, 0x1, 0x0, 0x7, 0x3, 0x7ff, 0x0, 0x0, 0x1000, 0x7fffffff, 0x2, 0x6, 0x0, 0xffffffff, 0x6, 0x2, 0x7, 0x4, 0x5, 0x0, 0x6, 0xd1, 0x3, 0xcec, 0x1, 0x80, 0x2, 0x0, 0xfffffffe, 0x4000, 0x9, 0x7, 0x3, 0x4, 0x89b, 0x1, 0xfffffe01, 0x0, 0xf6, 0x6, 0x800, 0x0, 0x3, 0x8000, 0x6, 0x6, 0x7, 0x5, 0xb, 0xe46, 0x78, 0x0, 0xfffffffb, 0xee, 0x8, 0x7, 0x7, 0x3, 0x7, 0x8, 0x80000001, 0x2, 0xeba, 0x6, 0x4, 0x39b, 0x80000000, 0x5, 0x6, 0x20000, 0x7, 0x1, 0x200, 0xb2b2, 0x2, 0x83, 0x0, 0x2, 0x3, 0x5, 0x4, 0x4000, 0x4, 0xfff, 0x81, 0xd, 0x1, 0x9, 0x56, 0x8001, 0x3, 0x7fff, 0xdc9, 0x9, 0x4, 0x4, 0xff, 0xfffeffff, 0x200, 0x7, 0xa4f, 0x6, 0x3, 0x7, 0x3, 0x10, 0x83f, 0xe000, 0x24, 0x9, 0x9, 0x6a98, 0x7, 0x5, 0x6, 0x1ff, 0x5, 0x0, 0x7, 0xf6b7, 0xbec9, 0x2, 0x80000001, 0x6, 0x81, 0xd79, 0xdd, 0x80, 0x0, 0x3ff, 0x200, 0x4, 0x9, 0x0, 0x10000, 0x0, 0x61, 0x5, 0xffffffff, 0x101, 0x6, 0x0, 0xa, 0x978, 0xcea, 0x1, 0x4, 0x0, 0xf, 0x3d33b22b, 0x1, 0x6, 0x3, 0xf8, 0x800, 0x7ff, 0x7, 0xfffffbff, 0x0, 0x1ff, 0x6, 0xffffff01, 0x8, 0x0, 0x7, 0x7, 0x4, 0x9212, 0x8, 0x1, 0x2, 0x7, 0x3, 0xb, 0x2, 0xffffff85, 0xa3e, 0x0, 0x4, 0x7, 0xffff, 0x1, 0x10000, 0x6, 0xffffffff, 0x4, 0x5, 0x6, 0xef6, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x40, 0x5, 0x800, 0xffff, 0xfffffffd, 0x6, 0x1, 0x60, 0x3, 0x9, 0x9, 0x4c, 0x9, 0x35f, 0x80000001, 0x8000, 0xfffffff8, 0x3, 0x7ffffffe, 0x4, 0x6, 0x2, 0x6, 0x80000001, 0xcd, 0xfffffff4, 0x5, 0xcf, 0x10001, 0x1000006, 0x7, 0x8, 0x8, 0xc, 0x400, 0x8, 0x5, 0x4, 0xcf, 0x0, 0x8, 0x0, 0x6, 0x9, 0x2, 0x4, 0xe, 0x101, 0xc, 0xc3, 0x0, 0x1, 0x0, 0x237a, 0x10, 0x10000, 0x5, 0x6, 0xd4e, 0x6, 0x4, 0xff, 0x200, 0x6, 0x6, 0x6, 0x4, 0x101, 0xbb7d, 0x6, 0x7, 0x7ff, 0x9, 0x1, 0x3, 0x2, 0x5, 0x4, 0x0, 0x1ff, 0x9, 0x9, 0x5, 0x2, 0x6, 0x1, 0x380000, 0x80000001, 0x48f, 0x9, 0x2af29bae, 0x80, 0x400, 0xe2e0, 0x74, 0x1, 0xfffffffe, 0xfffffffa, 0x1469, 0x4, 0xf3f, 0x6f, 0x10, 0xf1, 0x80000000, 0xc, 0x4, 0xa1, 0x6, 0x9, 0x800, 0x0, 0xffffffff, 0x6, 0x8, 0xe3, 0x1, 0x9, 0x6, 0x4, 0x1, 0x3, 0xd99e, 0x8, 0x2, 0x9, 0x4af, 0x4, 0xe, 0x5, 0x0, 0x78c7, 0x1, 0x8, 0x3, 0x9, 0x5, 0x7f, 0x8000, 0x7, 0x3, 0x80000000, 0xf, 0x954, 0xfffff602, 0x1000, 0x6, 0xd, 0x9, 0x55c1, 0xffffffff, 0x2, 0x9, 0x9, 0x4, 0x8, 0x2, 0x40, 0x2, 0x3, 0x9, 0x7fff, 0x2f9, 0x7, 0x1, 0xf96, 0x855, 0x800, 0x9, 0x5, 0x9327, 0x8, 0x1, 0x6c0e, 0x8, 0x8, 0x6, 0x8, 0x5, 0x6, 0xbcb0, 0x1, 0x7fffffff, 0x8, 0x76, 0xffff, 0x0, 0x2fe, 0x200, 0x10000, 0x4, 0x5, 0x7fffffff, 0x8, 0x6, 0x1, 0x3, 0x8, 0x40, 0x9, 0x6, 0xfffffff0, 0x5, 0x2, 0x9, 0x9, 0x3cfe, 0x0, 0x9, 0x4, 0x9, 0x3ed, 0x891, 0xa0, 0x5, 0xffffd7da, 0x9, 0x300000, 0xfffffffe, 0xff, 0x8001, 0x8, 0x4, 0x4, 0x3, 0x8, 0x0, 0x7fffffff, 0x4, 0x7, 0x7, 0x9, 0x6, 0x2, 0x4, 0x1ff, 0xb, 0x0, 0x5, 0x6, 0x3, 0x0, 0xff, 0x9, 0x0, 0x483, 0x100, 0x0, 0x101, 0x9, 0xfffffffb, 0x2, 0xffffffff, 0x101, 0x8001, 0xfff]}, @TCA_POLICE_RATE={0x404, 0x2, [0xa0b, 0x1, 0x8, 0xffffffff, 0x40, 0x5, 0x0, 0xa, 0xfffffff9, 0x10000, 0x81, 0xfcc, 0xfffff7ed, 0xc980, 0x9, 0x2, 0xb9a7, 0x3, 0x4, 0x7, 0x1, 0x9, 0x2, 0xe81, 0xfffffff2, 0xf, 0x7, 0x2, 0xe, 0x2, 0x5, 0x2, 0x9, 0x6, 0x4, 0x91ff, 0x6, 0x80000001, 0x6a, 0x7ff, 0x37, 0xffff0001, 0x2, 0x7, 0x9, 0x2, 0x7, 0xfffffffd, 0x3, 0x71925147, 0x4, 0x3, 0x6, 0x0, 0x3, 0x7, 0x9, 0x0, 0x7ff, 0x2, 0x5, 0x9, 0x2, 0xab49, 0xfffffffb, 0x3b, 0x19, 0x2, 0x6, 0xbff, 0x9, 0xffffff6b, 0x0, 0x200, 0x7, 0x7fffffff, 0xc2f, 0x5, 0x1, 0xd, 0x9, 0x212e, 0x4, 0x5, 0x10001, 0x9, 0x9, 0x9, 0x9, 0x2, 0x4, 0x0, 0xd375, 0x9, 0x7, 0x45e, 0x7ff, 0xa, 0x0, 0x7, 0x1, 0x2, 0x3, 0xffff, 0x80000000, 0x6, 0x1, 0x3, 0x5, 0xff, 0xfff, 0x9, 0x8, 0x7, 0x6, 0x2, 0x2, 0x22c7, 0x9, 0x0, 0x7, 0x3ff, 0xfffffffb, 0x0, 0xfffffffe, 0x2, 0x7, 0x1000, 0x7, 0x8, 0x0, 0x4, 0x80000000, 0x7, 0x1, 0x7fff, 0x3, 0x6, 0x3ff, 0x5, 0x7faf, 0x7f, 0x400, 0x3, 0x80000001, 0x9, 0x7, 0x80000000, 0x40, 0x7fffffff, 0x373, 0x9, 0x1, 0x8d7, 0x4, 0x1, 0x2, 0x5, 0x744f, 0x4b24, 0x10001, 0x7, 0x8, 0x3, 0x7, 0x7, 0x9, 0x5, 0x6, 0xe89, 0xf, 0x2, 0x4, 0x5, 0x8, 0x2, 0x5, 0x4, 0x8, 0xc0, 0xff, 0x6, 0x8, 0x3, 0x100, 0x2, 0x6, 0x6, 0x2, 0xace, 0x1, 0x5, 0xcd, 0x2, 0x6, 0x8, 0x4, 0x9, 0x4af0, 0xf, 0x54, 0x5, 0x5, 0xab0, 0x8, 0x6a, 0x0, 0xffff8000, 0x6, 0x100, 0x0, 0x12229c5b, 0xe43, 0x2, 0x0, 0x8, 0xa, 0x81, 0x420, 0x0, 0x7, 0xfffffffc, 0x3562767d, 0x6, 0xe, 0x1, 0xffffffff, 0x2, 0xfff, 0x9b, 0x51, 0x7, 0x4, 0x8, 0xe0, 0x9, 0x1000, 0xfffffeff, 0x73be, 0x4, 0x8001, 0x1, 0x100, 0x10000, 0x3a84, 0x4, 0x6, 0x81, 0x1, 0x7ff, 0xe90e, 0xcac, 0x7, 0xf2, 0x0, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffff9}, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0x7f, 0xd21, 0x8, 0x7fff, 0x8, 0x9, 0x7, 0x7, 0x4, 0x2, 0xe62, 0x1, 0x2, 0x3, 0x2, 0xfffffff9, 0x6, 0x2, 0x9, 0x0, 0x9, 0x0, 0x6dc, 0x7fff, 0x80000000, 0x4, 0xfffffff9, 0xaabc, 0x101, 0x7, 0x8, 0x7fffffff, 0x7, 0x9, 0xd5a8, 0x9, 0xfffffffe, 0x9, 0x0, 0x3ff, 0x10001, 0x8, 0x1, 0x6, 0x4, 0x8, 0xffff3672, 0x7fff, 0x800, 0x8aa, 0x27, 0x1, 0x6bb, 0x5, 0x3, 0x2, 0x0, 0xfffffa99, 0x3, 0x7, 0x8, 0xfdfffffe, 0x4, 0xb, 0x5, 0x8, 0x8, 0x0, 0xb, 0xd108, 0x81, 0x2, 0x9, 0x200, 0x1, 0x8, 0x1, 0x290c, 0x9, 0x2, 0x1, 0x2, 0x80000001, 0x54, 0x800, 0x7, 0x2, 0x2, 0x1, 0x0, 0x1, 0xffffffff, 0xfffffffa, 0x81, 0x81, 0x6, 0xf, 0x4, 0xdc20, 0x2, 0xfd70, 0xfffff6d3, 0x53, 0x9, 0x1, 0x8, 0x8, 0xa, 0x8, 0x3, 0xc, 0xfffffff8, 0x9, 0xc4b6, 0x0, 0x0, 0xfffffff9, 0x6, 0x8, 0xe651, 0x1, 0x5, 0xd, 0x5, 0x7, 0x2, 0x0, 0xba, 0x4, 0x5, 0x8, 0x4, 0xcc, 0x0, 0x7, 0x3, 0x7fffffff, 0x7fffffff, 0x8001, 0xfffffe01, 0x9, 0x0, 0x7, 0x8, 0x80000000, 0x7ff, 0x800, 0xe1f, 0x8, 0x0, 0xb, 0x0, 0x81, 0x4, 0x6, 0xffffffff, 0x8, 0x4f, 0x9, 0x800, 0x0, 0x0, 0x101, 0x7, 0x2, 0x2, 0x1, 0x8, 0x5, 0xc, 0xffffffff, 0x5, 0x7, 0xde, 0xe, 0x7fffffff, 0x3207, 0xc8, 0x1be6b242, 0x4, 0x41f, 0x9, 0x63f859ac, 0x9, 0x34, 0x8, 0x10, 0x0, 0x7fd4, 0x0, 0x2, 0x8, 0x7, 0xa26, 0x5, 0xfffffffb, 0x3, 0xdba, 0x1, 0x6, 0x9, 0x9, 0xe, 0x8, 0x1, 0x3, 0x5, 0x3, 0x2, 0x9, 0x4, 0x2, 0x1ff, 0x6, 0x1000, 0x80000001, 0xc, 0x1ff, 0x9eb17e2, 0x10001, 0x7, 0x8, 0x39c03a5d, 0x5, 0x8, 0x1000, 0xa8000000, 0x0, 0x7, 0xb, 0xceed056, 0x0, 0x4, 0xff, 0x5, 0x80, 0x8, 0xfae, 0x991, 0x1, 0xe, 0x8000, 0xff, 0x9, 0xc, 0x9, 0x0, 0x1000, 0x7ff, 0x1, 0x8001, 0x9, 0x5, 0x3ff, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000000000000001}]}, @TCA_FW_INDEV={0x14, 0x3, 'pim6reg0\x00'}, @TCA_FW_ACT={0x74, 0x4, [@m_bpf={0x70, 0xe, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x3c, 0x6, "3c8173962135225546745b552eec5042132948872cba6996f988b67973efa547f68c3f1a8e6ba6a3fa6625926a42bcd69938b7e11860d071"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xffe0, 0xffff}}, @TCA_FW_ACT={0x164, 0x4, [@m_mpls={0x4c, 0x2, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x2}]}, {0x17, 0x6, "d8d6e06153db72248cc12b54d0f941f86a6b1c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_vlan={0x114, 0x16, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x641}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x84d}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x184}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x9, 0x5, 0xfff, 0x2}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x80, 0x7, 0x2, 0x4, 0xc}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x6, 0x0, 0x3, 0x2}, 0x3}}]}, {0x7b, 0x6, "25fcaf4c1cd9ad05f86d22c800d75b64999e589946e528b67804ea45aeada511434b9bcc6bb38b863275dc592d5f9949340e835adbf259ce610da568f2a30b84b5f2785f95c68b03ee21db5fcb41edddf0aca353f3000070ba2dfe6658220f4083819bd8251effa0d7111cd66b0cf9e704f043f12b82e9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'ip6_vti0\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'ipvlan1\x00'}]}}, @filter_kind_options=@f_fw={{0x7}, {0x900, 0x2, [@TCA_FW_POLICE={0x814, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0xfffffffb, 0x2, 0x0, 0x0, 0x2, 0x4d, 0x0, 0xbbff, 0x7f, 0x8, 0x7, 0x7, 0x8, 0x9, 0x4, 0x7fff, 0x0, 0x14, 0x200, 0x3a29, 0x1, 0x9d96, 0x7, 0x86, 0x180, 0x2, 0x10001, 0x3, 0x7, 0x3ff, 0x2, 0xfffffff9, 0x6, 0x0, 0x1, 0x4, 0x9, 0xffffffff, 0xb, 0x10001, 0x6, 0x3, 0xc, 0x9, 0x1, 0x40, 0x800, 0x7fff, 0x1, 0x8001, 0x6, 0x7, 0xbd2d, 0x7508, 0x4, 0x2, 0x800, 0x4, 0x8, 0x40, 0x0, 0x1, 0x1, 0x3, 0x100, 0x1, 0x7, 0x0, 0x2, 0x10000, 0x40, 0x1, 0x3, 0x3, 0x9, 0x9, 0xcf, 0x7, 0x0, 0x6c7, 0xe, 0x77cc, 0x401, 0x7, 0x8, 0x679d, 0x8, 0x0, 0x7fff, 0x3, 0xbd63, 0x94, 0x4, 0xff, 0xfffffff9, 0x5, 0x3, 0x200, 0x6, 0x6, 0x40, 0xc, 0xfffff7c3, 0x401, 0x2, 0x7, 0x5, 0x4, 0x3, 0x1, 0xfffffffc, 0x6, 0x0, 0x1, 0x6, 0xc, 0x2, 0x7, 0x4, 0x400, 0x1, 0x7, 0xa7, 0xb0b0, 0x6, 0x42, 0x5, 0xfffffff1, 0xf8000000, 0x0, 0xffffff01, 0xe3, 0xf, 0x5ca167bb, 0x1, 0x9, 0x1, 0x5f656737, 0x9, 0x4, 0x139, 0xed6, 0x12a6, 0x121, 0x4, 0x5, 0x1e, 0x5, 0x10, 0x101, 0x4ec, 0x1, 0x7, 0x1, 0xffff1770, 0x6, 0xffffffff, 0xca5, 0xfffff10e, 0x1, 0x5, 0x7f, 0x0, 0x3, 0x10001, 0x7, 0x2, 0x6f5, 0x8, 0x80, 0x6, 0x10001, 0x3, 0xfffffff9, 0x6, 0x6, 0x4, 0x4, 0x55d, 0x40, 0x8, 0x9, 0x401, 0x7fffffff, 0x4, 0x3, 0xc36, 0x401, 0x6, 0x81, 0x8, 0xbd2, 0x8f9, 0x2, 0x8, 0x51c6, 0xff, 0x3, 0x1, 0xc, 0x2, 0x30e, 0x0, 0x4, 0x4, 0x5, 0x5, 0x2, 0x4, 0x96fb, 0xffff, 0xe, 0xd, 0x2, 0x5, 0x0, 0xd, 0x5, 0x6, 0x910, 0x3, 0x7, 0x8000, 0xfffffff9, 0x80, 0x2, 0x2, 0x2, 0x3, 0x1000, 0xfffffffc, 0x7f, 0x7, 0xb, 0x4, 0x3, 0x40, 0xfffffffb, 0x10, 0x4, 0x5, 0x9, 0x1, 0x7, 0x7, 0x4, 0x2, 0x9, 0x8, 0x5, 0x9, 0x2, 0x8, 0xc2, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x100, 0x6, 0xffffffff, 0x40100000, 0x4, 0x4, 0x8, 0xfffffaef, 0x8, 0xffffffd7, 0x8, 0xe9, 0xf, 0x4, 0x5, 0xfffffffa, 0x7, 0x1000, 0xd1, 0x3ff, 0x80000000, 0x69, 0x1, 0xf59, 0x4, 0x6, 0x6, 0x5, 0xb960, 0x5, 0x8, 0x0, 0x1, 0x2087, 0x7, 0x9, 0x7, 0x0, 0x5, 0x3, 0x1, 0x1, 0x0, 0x101, 0xc, 0x4, 0x4, 0x1, 0x3, 0x5f00, 0x0, 0x8, 0xb, 0x8001, 0xa9e, 0x7, 0x2, 0x3, 0x6, 0xe027, 0x80, 0xc923, 0x8683, 0x3, 0xa, 0xb1b, 0x3, 0x8, 0x2d3, 0x1, 0xfffffb2d, 0x80, 0xac, 0xfffffff9, 0x9, 0x1, 0x1000, 0x1, 0x8, 0x2, 0x0, 0x8, 0xadf1, 0x5, 0x655bed3e, 0x400, 0x4, 0x6602b106, 0x10, 0x2, 0x9, 0x8, 0x348, 0x1, 0x3, 0x5, 0x37e, 0x7, 0x800, 0x401, 0x8, 0x1ff, 0x7fff, 0x9, 0x1, 0x60f, 0x5, 0x5, 0x6, 0x3aa, 0x5, 0x0, 0x8, 0x8, 0xb, 0xb, 0x5, 0x6, 0x9, 0x0, 0x7, 0xf3c, 0x9, 0x400, 0x6, 0x6, 0xc, 0x4, 0x6, 0x1, 0x9, 0x0, 0xe, 0x6, 0x1, 0xe9c, 0xff, 0x200, 0x1f, 0xff, 0x10000, 0x8, 0x3, 0x6, 0x10, 0x3d, 0x28000, 0x9, 0x1, 0x8, 0xe, 0x3, 0x458, 0x8, 0x3, 0x800, 0x7, 0x2, 0xfffffffe, 0x6, 0x3, 0x6, 0x3, 0xfffffffa, 0x40, 0x5b5, 0x4, 0x80000001, 0x1, 0x0, 0x7, 0x40, 0xf, 0x4, 0x1, 0x8, 0x6, 0x101, 0x4, 0xe43a, 0x6, 0x7, 0x1, 0x2, 0x1, 0x7fffffff, 0x81, 0x1000, 0x7, 0x7d5, 0x7, 0xc, 0x9, 0xffffff96, 0x9, 0x3, 0x7cf, 0x1ff, 0x2, 0x9, 0x1, 0xf25b, 0xc, 0xfffffff0, 0xfff, 0x3, 0x9, 0x7, 0x0, 0x1, 0x8, 0xa9, 0x9, 0x9, 0x2, 0x0, 0x6, 0x1b, 0x9, 0x998, 0x6, 0xf3, 0xf9d, 0x7, 0xc38, 0x8001, 0xe, 0xffffbc8a, 0xfffff15e, 0x3, 0x9, 0x8, 0x4, 0x7fb, 0xd832, 0x1000, 0x6, 0x2, 0x4, 0xa51, 0x2, 0x9, 0x6, 0x3, 0xa056, 0x67b9, 0x6, 0x6, 0x80000000, 0x9, 0x800, 0x7fff, 0x6, 0x2, 0x0, 0x7ff]}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x6, 0x7}}, @TCA_FW_INDEV={0x14, 0x3, 'bond_slave_1\x00'}, @TCA_FW_MASK={0x8, 0x5, 0x2}, @TCA_FW_POLICE={0xc4, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x5, 0x600, 0x8, 0x8, {0x1, 0x0, 0x2b21, 0xfff, 0x6553, 0x7ff}, {0xcd, 0x1, 0x4, 0x6, 0xb, 0x8}, 0x1, 0x6, 0x9}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7ff, 0x6, 0x405, 0x525d, 0x80000000, {0x6, 0x1, 0x3, 0x40, 0x5, 0x6}, {0x50, 0x0, 0x8, 0x6, 0x3, 0x4}, 0x1, 0x0, 0x80}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x2, 0x3, 0x10000, 0x9, {0x6, 0x2, 0x10, 0x200, 0x4, 0x3}, {0x0, 0xda0fe02246b470fd, 0xb7, 0x7, 0xfff9, 0xa}, 0x7, 0x5, 0x5}}]}]}}]}, 0x1bc0}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0xc, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x44}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) syz_emit_ethernet(0x8a, &(0x7f0000000400)={@local, @random, @void, {@x25={0x805, {0x0, 0x4d, 0x1f, "2efe02183697459cbb3adc4d70b9175d293d5c1e69a465d1d134f6b4138c401e6ae5b8aefe1f5d000e10543279adb8a61d12ede6d87b96935555b030bb73c0f3ac1fdd3563099085657b910e610d4e2681d32167382103d16b4b321e4ded022fce367436e22991bd7627dcf6be95331146a17d13c8bdc3971e"}}}}, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000280)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xc}}, {0x306, @local}, 0x24, {0x2, 0x4e21, @multicast1}, 'batadv_slave_0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) (async) r8 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x40900, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x40900, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f00000004c0)={r2, 0x2, 0x4, 0x8}) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x400}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x400}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() ioctl$BLKIOMIN(r8, 0x1278, &(0x7f00000003c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1.393087814s ago: executing program 2 (id=605): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x18, &(0x7f0000000080)=0x5, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_LSEEK(r0, &(0x7f00000021c0)={0x18, 0x0, r3, {0x7}}, 0x18) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000002140)={0x20, 0x0, r4, {0x0, 0x0, 0x80003ff}}, 0x20) lstat(&(0x7f0000008800)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000008d00)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004340)="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", 0x2000, &(0x7f0000008c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008700)=ANY=[@ANYBLOB="3000000000000000000000000000000000000000643b1475000000000000000006"], 0x0, 0x0, 0x0, 0x0}) getdents64(r1, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) getdents64(r1, 0x0, 0x300) linkat(r1, &(0x7f0000002180)='./file0\x00', r1, 0x0, 0x1400) r6 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r6, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10, 0x0, r5}, 0x10) 888.783805ms ago: executing program 4 (id=606): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) r1 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000a21000/0x3000)=nil) shmat(r1, &(0x7f000049e000/0x3000)=nil, 0x5000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000080)={{0x0, 0x804, 0x0, 0x10}, 'syz1\x00', 0x41}) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000100)={0x35, {0x9, 0x0, 0x2000000, 0x3, 0x101}}) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r4, 0x5501) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xd, {0xfffffffd, 0x1}}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x6c}}, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) 714.06881ms ago: executing program 4 (id=607): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x140b, 0x2, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r3 = getuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {r3, 0xee00}}, './file0\x00'}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r4, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80, 0x26e) 418.174354ms ago: executing program 2 (id=608): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x51a9497) move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x2) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000000000000000000000000000000080000", 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000800000020040000", @ANYRES32=r0, @ANYBLOB="0100000000000000000000000000000000000000d42e83e43d5b069cafef21f55f89648c87d41f23fb39fb1ade4d41a7ffffffffffff318a443d5660a37dd7236c0506600b8a97ae", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x8, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7eff}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYRESOCT=r3, @ANYRES16=0x0, @ANYRESOCT=r3], 0x0) 48.609298ms ago: executing program 3 (id=609): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x31, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x823, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x7, 0x1, 0x0, 0x1}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff9}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_fd={0x18, 0x3, 0x1, 0x0, 0x1}, @tail_call, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x29, &(0x7f0000000200)=""/41, 0x41100, 0x72, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x6, 0xfffffff9, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xad7e}, 0x94) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@map=0x1, 0x2e, 0x1, 0x0, &(0x7f0000000440)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x0}, 0x40) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000600), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)={@cgroup=r3, r0, 0x32, 0x2000, r1, @value=r4, @void, @void, @void, r2}, 0x20) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$FIONREAD(r5, 0x541b, &(0x7f0000000640)) unshare(0x40400) r6 = add_key$user(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x3}, &(0x7f0000000700), 0x0, 0xfffffffffffffffb) r7 = add_key$user(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x2}, &(0x7f00000007c0)="7acfceef5bcc1e062480b5215fa2b30ccf1972b749e54fc1861cf8368aab4817c6a0a3654e9135bd01d3f7d4d5610a7fad43186286db5e7ec46036aa67744025c3cacce9540cb26b7044e19eb83aac6700235267802096987d8d731ea11d245e374e7e41a939badcc0d079165e33faa320af468028f220f0836e6cf27589fbdbb39dfc408e9484f4d915ed472f2c379e6e24070fdbafb1405dc4946b6cad2ebb2bb10483aae652134735aa11cbeb3445c3c1cf857e", 0xb5, 0xfffffffffffffffc) r8 = add_key$user(&(0x7f0000000880), &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)="9fe4f7385a8d2e7837d421cc4d6e06a92517d953b8f890095e70a60838b9bb0fa1bcc7b9b11002399b449e157dfcddd143c8a94cd0bbc1f13443492c3c729d10d0833a2e5217f86e9863479b84f4ac6d92cc26e6e19a8ae6ab3acb11c02ea3f171f3f3c0dabccb162bfb87e640d85b57269dc166682f45d91f428b007dd33c8e966a4b926211c894524cc831e6240283f6e805eb5ba548abc0babbd92a8681855a43f269c9860c6d5ab91666b8aba7442baad218b88fff8683dbb97f0ae3a08c5a45c58433d3e60d6c08a48fab8f5e153f8c84b95006b12648c91c7fab3eb87b17", 0xe1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000a00)={r6, r7, r8}, &(0x7f0000000a40)=""/182, 0xb6, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) fsetxattr$trusted_overlay_upper(r9, &(0x7f0000000b00), &(0x7f0000000b40)={0x0, 0xfb, 0xb6, 0x4, 0x8, "6ac7656e9b03218723a841520f19763b", "2dd54ea177883c6739d213a68eee3a4087abbf781d2de426691b4efc7366b2d9e24ab1eef3be70729603ad522ec0af9aed67dad226a59775c61bad1e54e399aea051284248115983a54698b31c425203568f1072857b449180ca0124756e2cbcab051e147b69bc8af436ea32f1638867b6f8a20a7ef136699886927db5b1ee7b3db53d753a3fcd54ade2c240e24b6604f0f02724eba8d52727ca5a0342301b21e5"}, 0xb6, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x0) r10 = dup(r5) syz_open_dev$loop(&(0x7f0000000c00), 0x9, 0x0) openat$cgroup(r10, &(0x7f0000000c40)='syz1\x00', 0x200002, 0x0) getsockopt$sock_buf(r9, 0x1, 0x1c, &(0x7f0000000c80)=""/94, &(0x7f0000000d00)=0x5e) bind$vsock_stream(r10, &(0x7f0000000d40)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) getsockopt$inet_sctp6_SCTP_STATUS(r10, 0x84, 0xe, &(0x7f0000000d80)={0x0, 0x1, 0x3, 0xd0, 0x1, 0x2, 0x3, 0x9, {0x0, @in={{0x2, 0x4e24, @multicast1}}, 0x8001, 0x5, 0xd, 0x3, 0x8000}}, &(0x7f0000000e40)=0xb0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r10, 0x84, 0x17, &(0x7f0000000e80)={r11, 0x8, 0x91, "f52ae1fc4d7270ea22cf416026afee38c96d7aad5c263293e29817df69afe3f3e185ffca165bfa41be155e6818ee60dd560f78bbeccccce15b43d6c041b488b838691474552974f92eaa9982ac09c09a7a54df00c211c75f68e77aaf2b70e849d61cd70ece71306bb68aa7b6bbe0a3e3365c0d0fe4913dad42ad7fa1de35e04213b6ebab948831c5e9d22f97b688da9bc5"}, 0x99) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002, 0x20010, r10, 0x8000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000f80)={0x5, &(0x7f0000000f40)=[{0x0, 0x3, 0x0, 0x4}, {0x2, 0xb, 0xef, 0x8}, {0x3, 0x8, 0x1, 0x6}, {0xfff, 0x0, 0x67, 0x4f9f}, {0x2, 0x2d, 0x4, 0x5}]}) setsockopt$TIPC_MCAST_BROADCAST(r10, 0x10f, 0x85) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r10, &(0x7f0000001140)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x4c, r12, 0x0, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x8, 0x2a}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r10, 0x10e, 0x4, &(0x7f0000001180)=0x7, 0x4) 0s ago: executing program 3 (id=610): setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) timer_create(0x3, 0x0, &(0x7f0000000300)=0x0) unshare(0x40000000) setrlimit(0x0, 0x0) timer_settime(r0, 0x1, &(0x7f0000000100)={{0x0, 0x3938700}}, 0x0) kernel console output (not intermixed with test programs): ][ T5901] usb 1-1: Using ep0 maxpacket: 8 [ 155.020370][ T5942] usb 5-1: config 6 has an invalid interface number: 32 but max is 2 [ 155.047411][ T5901] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 155.057099][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.071571][ T5942] usb 5-1: config 6 has an invalid interface number: 165 but max is 2 [ 155.081779][ T5901] usb 1-1: Product: syz [ 155.088263][ T5942] usb 5-1: config 6 has an invalid interface number: 192 but max is 2 [ 155.124156][ T5901] usb 1-1: Manufacturer: syz [ 155.153065][ T92] usb 2-1: USB disconnect, device number 12 [ 155.185024][ T5901] usb 1-1: SerialNumber: syz [ 155.204561][ T5942] usb 5-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 155.233709][ T5901] usb 1-1: config 0 descriptor?? [ 155.252101][ T5942] usb 5-1: config 6 has 4 interfaces, different from the descriptor's value: 3 [ 155.263502][ C1] powermate: config urb returned -71 [ 155.269168][ C1] powermate: config urb returned -71 [ 155.276096][ C1] powermate: config urb returned -71 [ 155.286351][ T2151] usb 3-1: USB disconnect, device number 18 [ 155.292350][ C1] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 155.307640][ T5942] usb 5-1: config 6 has no interface number 0 [ 155.316496][ T5942] usb 5-1: config 6 has no interface number 1 [ 155.341745][ T5942] usb 5-1: config 6 has no interface number 2 [ 155.358534][ T5942] usb 5-1: config 6 has no interface number 3 [ 155.371125][ T5942] usb 5-1: config 6 interface 124 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 155.392395][ T5942] usb 5-1: config 6 interface 124 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 155.404343][ T5942] usb 5-1: config 6 interface 124 altsetting 5 endpoint 0xF has invalid maxpacket 1032, setting to 64 [ 155.425466][ T5942] usb 5-1: config 6 interface 124 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 155.439294][ T5942] usb 5-1: config 6 interface 124 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 155.467717][ T5942] usb 5-1: too many endpoints for config 6 interface 32 altsetting 181: 187, using maximum allowed: 30 [ 155.480156][ T5942] usb 5-1: config 6 interface 32 altsetting 181 has 0 endpoint descriptors, different from the interface descriptor's value: 187 [ 155.505099][ T6752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.508824][ T5901] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 155.530113][ T6752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.547104][ T5942] usb 5-1: config 6 interface 165 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 155.578775][ T5901] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 155.622321][ T5942] usb 5-1: config 6 interface 192 altsetting 64 has a duplicate endpoint with address 0x8, skipping [ 155.676611][ T5901] usb 1-1: USB disconnect, device number 14 [ 155.689040][ T5942] usb 5-1: config 6 interface 192 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 155.733732][ T5942] usb 5-1: config 6 interface 192 altsetting 64 has a duplicate endpoint with address 0x7, skipping [ 155.788618][ T5942] usb 5-1: config 6 interface 192 altsetting 64 endpoint 0x4 has an invalid bInterval 248, changing to 7 [ 155.816702][ T5942] usb 5-1: config 6 interface 192 altsetting 64 endpoint 0xD has invalid wMaxPacketSize 0 [ 155.891370][ T5942] usb 5-1: config 6 interface 192 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 155.937507][ T5942] usb 5-1: config 6 interface 192 altsetting 64 has a duplicate endpoint with address 0x9, skipping [ 156.248497][ T5942] usb 5-1: config 6 interface 192 altsetting 64 has a duplicate endpoint with address 0xD, skipping [ 156.568111][ T5942] usb 5-1: config 6 interface 192 altsetting 64 has a duplicate endpoint with address 0x7, skipping [ 156.595137][ T5942] usb 5-1: config 6 interface 192 altsetting 64 has a duplicate endpoint with address 0x6, skipping [ 156.614953][ T5942] usb 5-1: config 6 interface 192 altsetting 64 has a duplicate endpoint with address 0x9, skipping [ 156.682821][ T5942] usb 5-1: config 6 interface 192 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 156.694081][ T5942] usb 5-1: config 6 interface 192 altsetting 64 has a duplicate endpoint with address 0x85, skipping [ 156.696124][ T6774] netlink: 16 bytes leftover after parsing attributes in process `syz.2.209'. [ 156.801554][ T6774] warning: `syz.2.209' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 156.813069][ T5942] usb 5-1: config 6 interface 192 altsetting 64 has 16 endpoint descriptors, different from the interface descriptor's value: 15 [ 156.813107][ T5942] usb 5-1: config 6 interface 124 has no altsetting 0 [ 156.813125][ T5942] usb 5-1: config 6 interface 32 has no altsetting 0 [ 156.813144][ T5942] usb 5-1: config 6 interface 165 has no altsetting 0 [ 156.813162][ T5942] usb 5-1: config 6 interface 192 has no altsetting 0 [ 156.815872][ T5942] usb 5-1: Dual-Role OTG device on HNP port [ 156.861546][ T6776] xt_hashlimit: max too large, truncated to 1048576 [ 156.874931][ T6776] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 156.934721][ T5942] usb 5-1: New USB device found, idVendor=0403, idProduct=a5ad, bcdDevice= 6.ec [ 156.979451][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.987600][ T5942] usb 5-1: Product: syz [ 156.995091][ T5942] usb 5-1: Manufacturer: 譳뤞柭뮡斬셹ê™è´¨ä‹£ê¿¹â“¥æ‡‰ã¨’梁՞æ‘糞ꞑ畸陯☯ìªçž¹ä±¤ïœ©ãš€è°µæµ€è¥‡à¾¼æ—怎峞압å·Ð´é¤›å¶á„Œâµé˜„ì™ç½¬é„£â«¨ì¢»é·½é‡²è£µâœ´ï‰ã­è‹‚⢓뤑넊ä½æ€›âµ¸èƒ£à²£î¼®î¦‹ç«ˆâ³©à«‚繶Ø鎲긓벉䛘耦ï„穑逾⇢Ⓘáµì½ŠçŽã»¡ã’°ï–¯èˆƒà¼ˆé¡™îœ™ä»“긚뾴쩳갠 [ 157.033776][ T5942] usb 5-1: SerialNumber: syz [ 157.473709][ T5942] ftdi_sio 5-1:6.124: FTDI USB Serial Device converter detected [ 157.488629][ T5942] ftdi_sio ttyUSB0: unknown device type: 0x6ec [ 157.546319][ T6783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.581218][ T5942] ftdi_sio 5-1:6.32: FTDI USB Serial Device converter detected [ 157.590500][ T6783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.624782][ T6786] trusted_key: syz.2.211 sent an empty control message without MSG_MORE. [ 157.640580][ T5942] ftdi_sio ttyUSB1: unknown device type: 0x6ec [ 157.696768][ T5942] ftdi_sio 5-1:6.165: FTDI USB Serial Device converter detected [ 157.747720][ T5942] ftdi_sio ttyUSB2: unknown device type: 0x6ec [ 157.755255][ T6787] kvm: Disabled LAPIC found during irq injection [ 157.779406][ T2151] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 157.791316][ T5942] ftdi_sio 5-1:6.192: FTDI USB Serial Device converter detected [ 157.808934][ T5942] ftdi_sio ttyUSB3: unknown device type: 0x6ec [ 157.905103][ T5942] usb 5-1: USB disconnect, device number 20 [ 157.961151][ T5942] ftdi_sio 5-1:6.124: device disconnected [ 158.065863][ T5942] ftdi_sio 5-1:6.32: device disconnected [ 158.100267][ T5942] ftdi_sio 5-1:6.165: device disconnected [ 158.175352][ T5942] ftdi_sio 5-1:6.192: device disconnected [ 158.180712][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.215'. [ 158.214822][ T6795] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 158.260682][ T6795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.499165][ T2151] usb 3-1: device descriptor read/64, error -71 [ 159.509407][ T2151] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 159.685232][ T2151] usb 3-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 159.705286][ T2151] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.725527][ T2151] usb 3-1: Product: syz [ 159.736298][ T2151] usb 3-1: Manufacturer: syz [ 159.746475][ T2151] usb 3-1: SerialNumber: syz [ 159.774431][ T6813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.220'. [ 159.828632][ T6811] netlink: 12 bytes leftover after parsing attributes in process `syz.4.220'. [ 159.855974][ T6810] xt_CT: No such helper "snmp" [ 159.995661][ T6791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.014724][ T6791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.077372][ T2151] gspca_main: pac207-2.14.0 probing 093a:2476 [ 160.129114][ T2151] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 160.150001][ T2151] usb 3-1: USB disconnect, device number 20 [ 161.069115][ T5942] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 161.338885][ T5942] usb 5-1: Using ep0 maxpacket: 32 [ 161.349813][ T5942] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.361212][ T5942] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.380998][ T2151] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 161.485745][ T5942] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 161.536263][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 161.560629][ T2151] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.568755][ T5942] usb 5-1: Product: syz [ 161.578408][ T2151] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.578806][ T5942] usb 5-1: Manufacturer: syz [ 161.636674][ T5942] usb 5-1: SerialNumber: syz [ 161.638570][ T2151] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 161.655034][ T2151] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.685669][ T5942] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input20 [ 161.719386][ T2151] usb 1-1: Product: syz [ 161.725886][ T2151] usb 1-1: Manufacturer: syz [ 161.745036][ T2151] usb 1-1: SerialNumber: syz [ 161.872786][ T6832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.911437][ T6832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.993823][ T92] usb 5-1: USB disconnect, device number 21 [ 162.053498][ T92] appletouch 5-1:1.0: input: appletouch disconnected [ 162.172096][ T2151] usb 1-1: cannot find UAC_HEADER [ 162.251961][ T2151] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 162.300503][ T5920] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 162.328403][ T6520] udevd[6520]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 162.374059][ T6851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.387329][ T6851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.427812][ T2151] usb 1-1: USB disconnect, device number 15 [ 162.463252][ T5920] usb 3-1: Using ep0 maxpacket: 16 [ 162.482735][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 162.519414][ T43] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 162.537815][ T5920] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 162.552144][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.564892][ T5920] usb 3-1: Product: syz [ 162.571855][ T5920] usb 3-1: Manufacturer: syz [ 162.576623][ T5920] usb 3-1: SerialNumber: syz [ 162.587876][ T5920] usb 3-1: config 0 descriptor?? [ 162.593904][ T6867] fuse: Bad value for 'user_id' [ 162.601898][ T6867] fuse: Bad value for 'user_id' [ 162.615516][ T5920] hub 3-1:0.0: bad descriptor, ignoring hub [ 162.626855][ T5920] hub 3-1:0.0: probe with driver hub failed with error -5 [ 162.674461][ T5920] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input21 [ 162.689092][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 162.698703][ T43] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 162.717671][ T6870] netlink: 12 bytes leftover after parsing attributes in process `syz.4.235'. [ 162.718793][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.740757][ T6870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.235'. [ 162.745918][ T43] usb 2-1: Product: syz [ 162.765782][ T43] usb 2-1: Manufacturer: syz [ 162.772012][ T43] usb 2-1: SerialNumber: syz [ 162.783555][ T43] usb 2-1: config 0 descriptor?? [ 162.799044][ T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 162.819568][ T43] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 162.949403][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 162.962302][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.979733][ T92] usb 3-1: USB disconnect, device number 21 [ 163.001366][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.043437][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 163.086914][ T24] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 163.121619][ T24] usb 4-1: Product: syz [ 163.133414][ T24] usb 4-1: Manufacturer: syz [ 163.135071][ T152] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.148792][ T24] usb 4-1: SerialNumber: syz [ 163.195005][ T24] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input22 [ 163.343973][ T152] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.395761][ T6865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.436024][ T6865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.471726][ T92] usb 4-1: USB disconnect, device number 21 [ 163.558030][ T92] appletouch 4-1:1.0: input: appletouch disconnected [ 163.618107][ T152] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.750114][ T152] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.091321][ T6884] input: syz1 as /devices/virtual/input/input23 [ 164.136244][ T6883] batadv0: entered promiscuous mode [ 164.158758][ T6883] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 164.307018][ T152] bridge_slave_1: left allmulticast mode [ 164.330823][ T152] bridge_slave_1: left promiscuous mode [ 164.358080][ T152] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.413165][ T152] bridge_slave_0: left allmulticast mode [ 164.418882][ T152] bridge_slave_0: left promiscuous mode [ 164.445339][ T152] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.797956][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 164.811022][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 164.821181][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 164.838416][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 164.847979][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 165.003148][ T6898] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 165.026724][ T6894] netlink: 40 bytes leftover after parsing attributes in process `syz.3.244'. [ 165.088073][ T6899] netlink: 40 bytes leftover after parsing attributes in process `syz.3.244'. [ 165.285151][ T152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.297471][ T152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.317408][ T152] bond0 (unregistering): Released all slaves [ 165.360977][ T5941] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 165.446097][ T43] gspca_sonixj: reg_w1 err -71 [ 165.509141][ T43] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 165.539172][ T5941] usb 5-1: Using ep0 maxpacket: 32 [ 165.539971][ T43] usb 2-1: USB disconnect, device number 13 [ 165.584252][ T5941] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.629414][ T5941] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 165.653995][ T5941] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 165.666706][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 165.675394][ T5941] usb 5-1: Product: syz [ 165.681478][ T5941] usb 5-1: Manufacturer: syz [ 165.815197][ T5941] usb 5-1: SerialNumber: syz [ 165.851213][ T5941] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input24 [ 165.916967][ T6909] syzkaller1: entered promiscuous mode [ 165.977279][ T6909] syzkaller1: entered allmulticast mode [ 166.051760][ T6901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.086009][ T6901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.164111][ T5942] usb 5-1: USB disconnect, device number 22 [ 166.209239][ T5941] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 166.285623][ T5942] appletouch 5-1:1.0: input: appletouch disconnected [ 166.403466][ T5941] usb 4-1: Using ep0 maxpacket: 16 [ 166.926825][ T152] hsr_slave_0: left promiscuous mode [ 166.939269][ T5844] Bluetooth: hci1: command tx timeout [ 167.016324][ T152] hsr_slave_1: left promiscuous mode [ 167.022540][ T152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.043218][ T152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.071922][ T152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.156695][ T152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.229063][ T92] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 167.229071][ T152] veth1_macvtap: left promiscuous mode [ 167.317137][ T152] veth0_macvtap: left promiscuous mode [ 167.333823][ T152] veth1_vlan: left promiscuous mode [ 167.345166][ T152] veth0_vlan: left promiscuous mode [ 167.510076][ T92] usb 2-1: Using ep0 maxpacket: 16 [ 167.651214][ T92] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 167.752008][ T92] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 167.856172][ T92] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.879089][ T43] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 167.910933][ T92] usb 2-1: Product: syz [ 167.919454][ T92] usb 2-1: Manufacturer: syz [ 167.928305][ T92] usb 2-1: SerialNumber: syz [ 167.985945][ T92] usb 2-1: config 0 descriptor?? [ 168.006156][ T92] hub 2-1:0.0: bad descriptor, ignoring hub [ 168.024642][ T92] hub 2-1:0.0: probe with driver hub failed with error -5 [ 168.029032][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 168.099227][ T92] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input26 [ 168.127855][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.181368][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 168.224233][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 168.414773][ T43] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 168.465695][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.527568][ T43] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 168.566740][ T43] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 168.762694][ T43] usb 5-1: Manufacturer: syz [ 168.807574][ T43] usb 5-1: config 0 descriptor?? [ 169.019343][ T5844] Bluetooth: hci1: command tx timeout [ 169.179233][ T43] rc_core: IR keymap rc-hauppauge not found [ 169.208815][ T43] Registered IR keymap rc-empty [ 169.220668][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 169.249174][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 169.282155][ T43] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 169.306783][ T43] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input27 [ 169.334711][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 169.354216][ T152] team0 (unregistering): Port device team_slave_1 removed [ 169.359292][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 169.389202][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 169.409164][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 169.418893][ T152] team0 (unregistering): Port device team_slave_0 removed [ 169.431544][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 169.460371][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 169.489279][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 169.509303][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 169.529190][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 169.549297][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 169.591666][ T43] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 169.605740][ T43] mceusb 5-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 169.702453][ T6938] sctp: [Deprecated]: syz.4.252 (pid 6938) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.702453][ T6938] Use struct sctp_sack_info instead [ 169.725837][ T5942] usb 5-1: USB disconnect, device number 23 [ 170.178674][ T5941] usb 4-1: unable to get BOS descriptor or descriptor too short [ 170.230282][ T5941] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 170.237925][ T5941] usb 4-1: can't read configurations, error -71 [ 170.266187][ T92] usb 2-1: USB disconnect, device number 14 [ 170.626837][ T6958] batadv0: entered promiscuous mode [ 170.652741][ T6948] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 170.680316][ T6958] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 170.978142][ T6895] chnl_net:caif_netlink_parms(): no params data found [ 171.105086][ T5844] Bluetooth: hci1: command tx timeout [ 171.741303][ T2151] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 171.920380][ T6895] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.019685][ T2151] usb 4-1: Using ep0 maxpacket: 8 [ 172.019804][ T6895] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.055511][ T6895] bridge_slave_0: entered allmulticast mode [ 172.086701][ T6895] bridge_slave_0: entered promiscuous mode [ 172.137105][ T6895] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.159530][ T2151] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 172.184544][ T6895] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.199868][ T6895] bridge_slave_1: entered allmulticast mode [ 172.220505][ T6895] bridge_slave_1: entered promiscuous mode [ 172.261284][ T2151] usb 4-1: config 0 interface 0 has no altsetting 0 [ 172.346804][ T2151] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 172.442078][ T2151] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.465078][ T2151] usb 4-1: Product: syz [ 172.471033][ T2151] usb 4-1: Manufacturer: syz [ 172.505973][ T2151] usb 4-1: SerialNumber: syz [ 172.561975][ T2151] usb 4-1: config 0 descriptor?? [ 172.575801][ T92] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 172.582818][ T2151] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 172.599841][ T6895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.669782][ T6895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.816941][ T92] usb 5-1: Using ep0 maxpacket: 16 [ 172.862367][ T92] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 172.980708][ T92] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 172.982578][ T2151] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 173.015502][ T92] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.044478][ T2151] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 173.062502][ T2151] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 173.097102][ T6895] team0: Port device team_slave_0 added [ 173.106830][ T92] usb 5-1: Product: syz [ 173.134163][ T92] usb 5-1: Manufacturer: syz [ 173.151545][ T92] usb 5-1: SerialNumber: syz [ 173.186343][ T5844] Bluetooth: hci1: command tx timeout [ 173.207062][ T92] usb 5-1: config 0 descriptor?? [ 173.251589][ T92] hub 5-1:0.0: bad descriptor, ignoring hub [ 173.257858][ T92] hub 5-1:0.0: probe with driver hub failed with error -5 [ 173.270004][ T6895] team0: Port device team_slave_1 added [ 173.287222][ T92] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input29 [ 174.137452][ T92] input: failed to attach handler mousedev to device input29, error: -5 [ 174.543674][ T6895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.568410][ T6895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.674708][ T6895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.714881][ T6895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.747631][ T6895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.819011][ T6895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.208461][ T6895] hsr_slave_0: entered promiscuous mode [ 175.247919][ T6895] hsr_slave_1: entered promiscuous mode [ 175.267485][ T6895] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.296351][ T6895] Cannot create hsr debugfs directory [ 175.393983][ T7042] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 176.482807][ T24] usb 4-1: USB disconnect, device number 24 [ 176.542307][ T2151] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 176.553586][ T6895] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 176.667738][ T6895] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 176.679836][ T7065] netlink: 'syz.4.273': attribute type 1 has an invalid length. [ 176.696645][ T6895] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 176.736490][ T2151] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.751636][ T6895] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 176.758420][ T2151] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 176.788069][ T2151] usb 2-1: New USB device found, idVendor=0421, idProduct=0223, bcdDevice=43.58 [ 176.816621][ T2151] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.868319][ T2151] usb 2-1: config 0 descriptor?? [ 176.984238][ T7065] 8021q: adding VLAN 0 to HW filter on device bond2 [ 176.995236][ T7072] tipc: Failed to remove unknown binding: 66,1,1/0:3603096223/3603096225 [ 177.017963][ T7072] tipc: Failed to remove unknown binding: 66,1,1/0:3603096223/3603096225 [ 177.029040][ T7072] tipc: Failed to remove unknown binding: 66,1,1/0:3603096223/3603096225 [ 177.110121][ T7066] bond1: (slave erspan0): Releasing active interface [ 177.142951][ T7066] bond2: (slave erspan0): making interface the new active one [ 177.163390][ T7066] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 177.213323][ T7055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.243140][ T7055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.432641][ T2151] usb 2-1: USB disconnect, device number 15 [ 177.454222][ T6895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.537201][ T6895] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.592470][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.599634][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.677654][ T3572] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.684838][ T3572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.892577][ T5186] usb 5-1: reset high-speed USB device number 24 using dummy_hcd [ 177.926850][ T5186] usb 5-1: device reset changed ep0 maxpacket size! [ 177.952237][ T92] usb 5-1: USB disconnect, device number 24 [ 178.134310][ T7093] Cannot find map_set index 0 as target [ 178.209135][ T92] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 178.258254][ T6895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.393380][ T92] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 178.444605][ T7100] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.281'. [ 178.464472][ T92] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.542305][ T92] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.552876][ T92] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 178.568311][ T92] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 178.607149][ T92] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 178.663240][ T92] usb 5-1: Manufacturer: syz [ 178.711145][ T92] usb 5-1: config 0 descriptor?? [ 178.717263][ T6895] veth0_vlan: entered promiscuous mode [ 178.739170][ T2151] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 178.777551][ T6895] veth1_vlan: entered promiscuous mode [ 178.850296][ T6895] veth0_macvtap: entered promiscuous mode [ 178.932672][ T6895] veth1_macvtap: entered promiscuous mode [ 178.969519][ T2151] usb 3-1: Using ep0 maxpacket: 16 [ 178.993653][ T5901] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 179.148277][ T2151] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 179.191046][ T2151] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 179.213619][ T2151] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.227654][ T92] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 179.238316][ T2151] usb 3-1: Product: syz [ 179.239261][ T6895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.252022][ T2151] usb 3-1: Manufacturer: syz [ 179.263637][ T5901] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 179.278810][ T2151] usb 3-1: SerialNumber: syz [ 179.290074][ T92] appleir 0003:05AC:8243.0006: No inputs registered, leaving [ 179.303769][ T6895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.307923][ T5901] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 179.340162][ T92] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 179.352626][ T5901] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.368254][ T5901] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 179.377442][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.380731][ T2151] usb 3-1: config 0 descriptor?? [ 179.473519][ T5901] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 179.476976][ T6895] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.521051][ T5901] usb 2-1: invalid MIDI out EP 0 [ 179.551167][ T2151] hub 3-1:0.0: bad descriptor, ignoring hub [ 179.557153][ T2151] hub 3-1:0.0: probe with driver hub failed with error -5 [ 179.604480][ T6895] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.624247][ T6895] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.634040][ T2151] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input31 [ 179.679024][ T6895] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.853669][ T5901] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 180.243704][ T6381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.380791][ T6381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.415258][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.446786][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.996722][ T7121] x_tables: duplicate underflow at hook 3 [ 181.128635][ T7121] netlink: 'syz.5.240': attribute type 3 has an invalid length. [ 181.274748][ T5942] usb 2-1: USB disconnect, device number 16 [ 181.796646][ T5901] usb 5-1: USB disconnect, device number 25 [ 182.060374][ T24] usb 3-1: USB disconnect, device number 22 [ 182.172021][ T7148] fuse: Bad value for 'fd' [ 182.286632][ T7148] fuse: Bad value for 'group_id' [ 182.309430][ T7148] fuse: Bad value for 'group_id' [ 182.568739][ T7161] bridge0: port 3(syz_tun) entered blocking state [ 182.592881][ T7161] bridge0: port 3(syz_tun) entered disabled state [ 182.626563][ T7161] syz_tun: entered allmulticast mode [ 182.666369][ T7161] syz_tun: entered promiscuous mode [ 182.690385][ T7161] bridge0: port 3(syz_tun) entered blocking state [ 182.697245][ T7161] bridge0: port 3(syz_tun) entered forwarding state [ 182.904290][ T2151] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 183.127314][ T2151] usb 3-1: Using ep0 maxpacket: 32 [ 183.179975][ T2151] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.219369][ T2151] usb 3-1: config 0 has no interfaces? [ 183.235609][ T2151] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 183.285370][ T7175] input: syz1 as /devices/virtual/input/input32 [ 183.309058][ T2151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.354453][ T2151] usb 3-1: config 0 descriptor?? [ 183.886540][ T5901] usb 3-1: USB disconnect, device number 23 [ 184.058705][ T7201] netlink: 148 bytes leftover after parsing attributes in process `syz.1.299'. [ 184.199545][ T5941] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 184.278789][ T24] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 184.381550][ T5941] usb 5-1: Using ep0 maxpacket: 8 [ 184.405285][ T5941] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 184.419459][ T5941] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.437517][ T5941] usb 5-1: config 0 has no interface number 0 [ 184.479973][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 184.494007][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 184.503238][ T5941] usb 5-1: config 0 interface 113 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 184.597443][ T5941] usb 5-1: config 0 interface 113 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 7 [ 184.680557][ T24] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 184.726170][ T5941] usb 5-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a [ 184.737217][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.780169][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.788048][ T24] usb 4-1: Product: syz [ 184.809986][ T24] usb 4-1: Manufacturer: syz [ 184.814684][ T24] usb 4-1: SerialNumber: syz [ 184.818806][ T5941] usb 5-1: Product: syz [ 184.823683][ T5941] usb 5-1: Manufacturer: syz [ 184.828306][ T5941] usb 5-1: SerialNumber: syz [ 184.850762][ T24] usb 4-1: config 0 descriptor?? [ 184.894887][ T24] hub 4-1:0.0: bad descriptor, ignoring hub [ 184.899222][ T5941] usb 5-1: config 0 descriptor?? [ 184.933050][ T5941] ttusb_dec_send_command: command bulk message failed: error -8 [ 184.947186][ T24] hub 4-1:0.0: probe with driver hub failed with error -5 [ 184.967413][ T5941] ttusb-dec 5-1:0.113: probe with driver ttusb-dec failed with error -8 [ 184.984335][ T24] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input33 [ 185.028192][ T5941] usbhid 5-1:0.113: couldn't find an input interrupt endpoint [ 185.161527][ T5941] usb 5-1: USB disconnect, device number 26 [ 185.504620][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.303'. [ 186.673504][ T92] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 186.717286][ T7258] input: syz1 as /devices/virtual/input/input34 [ 186.846270][ T92] usb 5-1: Using ep0 maxpacket: 16 [ 186.862325][ T92] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 186.896757][ T92] usb 5-1: config 0 has no interface number 0 [ 186.941626][ T92] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 186.949530][ T24] usb 4-1: USB disconnect, device number 25 [ 186.977870][ T92] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 187.032442][ T92] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 187.056505][ T92] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.092762][ T92] usb 5-1: Product: syz [ 187.097112][ T92] usb 5-1: Manufacturer: syz [ 187.102908][ T92] usb 5-1: SerialNumber: syz [ 187.122349][ T92] usb 5-1: config 0 descriptor?? [ 187.128188][ T7252] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 187.139149][ T7252] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 187.380768][ T7252] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 187.393825][ T7252] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 187.759202][ T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 187.839254][ T5920] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 187.936103][ T24] usb 3-1: config 0 has an invalid interface number: 204 but max is 0 [ 187.946164][ T24] usb 3-1: config 0 has no interface number 0 [ 187.956264][ T24] usb 3-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 187.965591][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.973770][ T24] usb 3-1: Product: syz [ 187.977991][ T24] usb 3-1: Manufacturer: syz [ 187.982728][ T24] usb 3-1: SerialNumber: syz [ 187.989168][ T5920] usb 4-1: device descriptor read/64, error -71 [ 188.002785][ T24] usb 3-1: config 0 descriptor?? [ 188.011954][ T24] ems_usb 3-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 188.022723][ T24] ems_usb 3-1:0.204: probe with driver ems_usb failed with error -22 [ 188.231836][ T5920] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 188.384185][ T5920] usb 4-1: device descriptor read/64, error -71 [ 188.499882][ T5920] usb usb4-port1: attempt power cycle [ 188.879071][ T5920] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 188.919520][ T5920] usb 4-1: device descriptor read/8, error -71 [ 188.979696][ T24] usb 3-1: USB disconnect, device number 24 [ 189.229037][ T5920] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 189.290080][ T5920] usb 4-1: device descriptor read/8, error -71 [ 189.404397][ T5920] usb usb4-port1: unable to enumerate USB device [ 189.732247][ T92] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0002: -71 [ 189.810919][ T92] asix 5-1:0.251 (unnamed net_device) (uninitialized): Could not register MDIO bus [ 189.866845][ T92] asix 5-1:0.251: probe with driver asix failed with error -5 [ 189.937074][ T92] usb 5-1: USB disconnect, device number 27 [ 190.019754][ T7314] xt_NFQUEUE: number of total queues is 0 [ 190.219106][ T5941] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 190.281371][ T7325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.409335][ T5941] usb 3-1: Using ep0 maxpacket: 16 [ 190.430778][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 190.481031][ T5941] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 190.509554][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.538482][ T5941] usb 3-1: Product: syz [ 190.552260][ T5941] usb 3-1: Manufacturer: syz [ 190.556919][ T5941] usb 3-1: SerialNumber: syz [ 190.609075][ T92] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 190.650590][ T5941] usb 3-1: config 0 descriptor?? [ 190.680001][ T5941] hub 3-1:0.0: bad descriptor, ignoring hub [ 190.690370][ T5941] hub 3-1:0.0: probe with driver hub failed with error -5 [ 190.736579][ T5941] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input35 [ 190.807992][ T92] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 190.839137][ T92] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 190.879056][ T92] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 190.911641][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.927962][ T7346] FAULT_INJECTION: forcing a failure. [ 190.927962][ T7346] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 190.946869][ T5920] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 190.951141][ T7329] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 190.981964][ T7346] CPU: 0 UID: 0 PID: 7346 Comm: syz.3.330 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 190.981997][ T7346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 190.982008][ T7346] Call Trace: [ 190.982016][ T7346] [ 190.982026][ T7346] dump_stack_lvl+0x189/0x250 [ 190.982058][ T7346] ? __pfx____ratelimit+0x10/0x10 [ 190.982086][ T7346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.982114][ T7346] ? __pfx__printk+0x10/0x10 [ 190.982149][ T7346] should_fail_ex+0x414/0x560 [ 190.982178][ T7346] _copy_to_user+0x31/0xb0 [ 190.982199][ T7346] simple_read_from_buffer+0xe1/0x170 [ 190.982224][ T7346] proc_fail_nth_read+0x1df/0x250 [ 190.982250][ T7346] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 190.982276][ T7346] ? rw_verify_area+0x258/0x650 [ 190.982303][ T7346] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 190.982327][ T7346] vfs_read+0x200/0x980 [ 190.982360][ T7346] ? __pfx___mutex_lock+0x10/0x10 [ 190.982389][ T7346] ? __pfx_vfs_read+0x10/0x10 [ 190.982429][ T7346] ? __fget_files+0x2a/0x420 [ 190.982454][ T7346] ? __fget_files+0x3a0/0x420 [ 190.982473][ T7346] ? __fget_files+0x2a/0x420 [ 190.982504][ T7346] ksys_read+0x145/0x250 [ 190.982534][ T7346] ? __pfx_ksys_read+0x10/0x10 [ 190.982558][ T7346] ? rcu_is_watching+0x15/0xb0 [ 190.982592][ T7346] ? do_syscall_64+0xbe/0x3b0 [ 190.982613][ T7346] do_syscall_64+0xfa/0x3b0 [ 190.982628][ T7346] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.982654][ T7346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.982671][ T7346] ? clear_bhb_loop+0x60/0xb0 [ 190.982694][ T7346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.982711][ T7346] RIP: 0033:0x7faec078d33c [ 190.982728][ T7346] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 190.982744][ T7346] RSP: 002b:00007faec16d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 190.982766][ T7346] RAX: ffffffffffffffda RBX: 00007faec09b5fa0 RCX: 00007faec078d33c [ 190.982776][ T7346] RDX: 000000000000000f RSI: 00007faec16d50a0 RDI: 0000000000000005 [ 190.982785][ T7346] RBP: 00007faec16d5090 R08: 0000000000000000 R09: 0000000000000000 [ 190.982793][ T7346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 190.982804][ T7346] R13: 0000000000000000 R14: 00007faec09b5fa0 R15: 00007faec0adfa28 [ 190.982836][ T7346] [ 191.226800][ T92] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 191.319078][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 191.339719][ T5920] usb 5-1: unable to get BOS descriptor or descriptor too short [ 191.476981][ T5920] usb 5-1: config 8 has an invalid interface number: 143 but max is 3 [ 191.528328][ T5920] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 191.571444][ T5920] usb 5-1: config 8 has 1 interface, different from the descriptor's value: 4 [ 191.600349][ T5920] usb 5-1: config 8 has no interface number 0 [ 191.613150][ T5920] usb 5-1: config 8 interface 143 altsetting 193 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 191.646099][ T5920] usb 5-1: config 8 interface 143 altsetting 193 endpoint 0x9 has invalid wMaxPacketSize 0 [ 191.712495][ T5920] usb 5-1: config 8 interface 143 altsetting 193 bulk endpoint 0x9 has invalid maxpacket 0 [ 191.755322][ T5920] usb 5-1: config 8 interface 143 altsetting 193 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 191.807268][ T5920] usb 5-1: config 8 interface 143 has no altsetting 0 [ 191.835450][ T5920] usb 5-1: New USB device found, idVendor=1608, idProduct=021d, bcdDevice= 8.a4 [ 191.849828][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.869428][ T5920] usb 5-1: Product: syz [ 191.874258][ T5920] usb 5-1: Manufacturer: syz [ 191.879280][ T5920] usb 5-1: SerialNumber: syz [ 192.106085][ T5920] io_ti 5-1:8.143: required endpoints missing [ 192.113628][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 192.126960][ T5920] usb 5-1: USB disconnect, device number 28 [ 192.143460][ T5941] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 192.279047][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 192.285971][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 192.298722][ T24] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 192.309225][ T5941] usb 4-1: Using ep0 maxpacket: 32 [ 192.309730][ T24] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 192.323156][ T24] usb 6-1: Product: syz [ 192.327379][ T24] usb 6-1: Manufacturer: syz [ 192.329752][ T5941] usb 4-1: config 0 interface 0 has no altsetting 0 [ 192.332557][ T24] usb 6-1: SerialNumber: syz [ 192.348417][ T5941] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 192.351361][ T24] usb 6-1: config 0 descriptor?? [ 192.371671][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.371935][ T7365] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 192.393253][ T24] hub 6-1:0.0: bad descriptor, ignoring hub [ 192.398040][ T5941] usb 4-1: config 0 descriptor?? [ 192.399434][ T24] hub 6-1:0.0: probe with driver hub failed with error -5 [ 192.949191][ T5901] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 193.025248][ T5920] usb 3-1: USB disconnect, device number 25 [ 193.119608][ T5901] usb 5-1: Using ep0 maxpacket: 8 [ 193.126647][ T5901] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 193.135195][ T5901] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.145510][ T5901] usb 5-1: config 0 has no interface number 0 [ 193.154416][ T5901] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 193.165074][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.173213][ T5901] usb 5-1: Product: syz [ 193.177444][ T5901] usb 5-1: Manufacturer: syz [ 193.184180][ T5901] usb 5-1: SerialNumber: syz [ 193.191989][ T5901] usb 5-1: config 0 descriptor?? [ 193.363439][ T24] usb 6-1: USB disconnect, device number 2 [ 193.370712][ T5920] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 193.406186][ T5901] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 193.417581][ T5901] usb 5-1: No valid video chain found. [ 193.424677][ T2151] usb 2-1: USB disconnect, device number 17 [ 193.541297][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 193.566529][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.584185][ T24] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 193.602897][ T5920] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 193.616316][ T5920] usb 3-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 193.626229][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.637695][ T5920] usb 3-1: config 0 descriptor?? [ 193.655415][ T5920] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input36 [ 193.762959][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 193.802438][ T24] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 193.824565][ T24] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 193.843154][ T24] usb 6-1: Product: syz [ 193.847513][ T24] usb 6-1: Manufacturer: syz [ 193.857209][ T5186] bcm5974 3-1:0.0: could not read from device [ 193.899346][ T24] usb 6-1: SerialNumber: syz [ 193.914770][ T7384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.338'. [ 193.941394][ T5186] bcm5974 3-1:0.0: could not read from device [ 193.963525][ T24] usb 6-1: config 0 descriptor?? [ 193.970297][ T5920] usb 3-1: USB disconnect, device number 26 [ 194.000469][ T7370] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 194.005367][ T6520] bcm5974 3-1:0.0: could not read from device [ 194.020941][ T24] hub 6-1:0.0: bad descriptor, ignoring hub [ 194.031905][ T24] hub 6-1:0.0: probe with driver hub failed with error -5 [ 194.061893][ T6520] udevd[6520]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 194.094187][ T6520] udevd[6520]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 194.121602][ T6520] udevd[6520]: Error opening device "/dev/input/event4": No such file or directory [ 194.170485][ T6520] udevd[6520]: Unable to EVIOCGABS device "/dev/input/event4" [ 194.194793][ T6520] udevd[6520]: Unable to EVIOCGABS device "/dev/input/event4" [ 194.214545][ T24] usb 5-1: USB disconnect, device number 29 [ 194.240658][ T6520] udevd[6520]: Unable to EVIOCGABS device "/dev/input/event4" [ 194.275514][ T6520] udevd[6520]: Unable to EVIOCGABS device "/dev/input/event4" [ 194.345827][ T43] usb 6-1: USB disconnect, device number 3 [ 194.471224][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.477644][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.795469][ T5941] usbhid 4-1:0.0: can't add hid device: -71 [ 194.836689][ T5941] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 194.873781][ T5941] usb 4-1: USB disconnect, device number 30 [ 195.365426][ T5941] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 195.475290][ T7425] syzkaller1: entered promiscuous mode [ 195.483144][ T7425] syzkaller1: entered allmulticast mode [ 195.488454][ T43] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 195.512561][ T5941] usb 4-1: device descriptor read/64, error -71 [ 195.652341][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 195.673664][ T43] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.689655][ T43] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.728589][ T43] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 195.740035][ T43] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 195.748617][ T43] usb 5-1: Product: syz [ 195.752871][ T43] usb 5-1: Manufacturer: syz [ 195.758347][ T43] usb 5-1: SerialNumber: syz [ 195.789143][ T43] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input37 [ 195.804181][ T5941] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 195.979104][ T5941] usb 4-1: device descriptor read/64, error -71 [ 196.049886][ T92] usb 5-1: USB disconnect, device number 30 [ 196.108518][ T5941] usb usb4-port1: attempt power cycle [ 196.151740][ T92] appletouch 5-1:1.0: input: appletouch disconnected [ 196.469279][ T5941] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 196.532528][ T5941] usb 4-1: device descriptor read/8, error -71 [ 196.794729][ T5941] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 196.830767][ T5941] usb 4-1: device descriptor read/8, error -71 [ 196.939578][ T5941] usb usb4-port1: unable to enumerate USB device [ 197.040378][ T7469] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 197.299129][ T5941] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 197.409062][ T5901] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 197.449038][ T5941] usb 5-1: Using ep0 maxpacket: 32 [ 197.462088][ T92] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 197.473585][ T5941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 197.497959][ T5941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 197.515324][ T5941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 197.526324][ T5941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 197.548753][ T5941] usb 5-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 197.558161][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.567428][ T5901] usb 6-1: Using ep0 maxpacket: 32 [ 197.576185][ T5941] usb 5-1: Product: syz [ 197.603254][ T5941] usb 5-1: Manufacturer: syz [ 197.612328][ T7474] loop2: detected capacity change from 0 to 3 [ 197.621748][ T5941] usb 5-1: SerialNumber: syz [ 197.630697][ T7474] ldm_validate_privheads(): Disk read failed. [ 197.638741][ T5941] usb 5-1: config 0 descriptor?? [ 197.648097][ T92] usb 3-1: Using ep0 maxpacket: 8 [ 197.653940][ T7474] Dev loop2: unable to read RDB block 3 [ 197.661292][ T7474] loop2: unable to read partition table [ 197.670218][ T7474] loop2: partition table beyond EOD, truncated [ 197.676654][ T92] usb 3-1: unable to get BOS descriptor or descriptor too short [ 197.685345][ T7474] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 197.700288][ T5941] cypress_m8 5-1:0.0: HID->COM RS232 Adapter converter detected [ 197.708682][ T92] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.727033][ T5941] cyphidcom ttyUSB0: required endpoint is missing [ 197.735264][ T5901] usb 6-1: unable to get BOS descriptor or descriptor too short [ 197.745721][ T92] usb 3-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 197.774761][ T5901] usb 6-1: too many configurations: 105, using maximum allowed: 8 [ 197.790282][ T5901] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 197.800329][ T92] usb 3-1: config 1 interface 0 has no altsetting 0 [ 197.809328][ T5901] usb 6-1: can't read configurations, error -71 [ 197.836878][ T92] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 197.854046][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.864666][ T92] usb 3-1: Product: syz [ 197.868878][ T92] usb 3-1: Manufacturer: syz [ 197.884768][ T92] usb 3-1: SerialNumber: syz [ 198.404173][ T92] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 198.474197][ T92] usb 3-1: USB disconnect, device number 27 [ 199.677488][ T7500] netlink: 'syz.3.362': attribute type 1 has an invalid length. [ 199.778085][ T7500] 8021q: adding VLAN 0 to HW filter on device bond1 [ 199.843927][ T7502] bond1: (slave erspan0): making interface the new active one [ 199.881758][ T7502] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 199.953808][ T5901] usb 5-1: USB disconnect, device number 31 [ 199.975897][ T5901] cypress_m8 5-1:0.0: device disconnected [ 200.110093][ T92] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 200.287718][ T92] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.310421][ T92] usb 3-1: config 0 interface 0 has no altsetting 0 [ 200.327198][ T92] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 200.346938][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.366764][ T92] usb 3-1: Product: syz [ 200.371085][ T5901] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 200.380744][ T92] usb 3-1: Manufacturer: syz [ 200.385570][ T92] usb 3-1: SerialNumber: syz [ 200.419657][ T92] usb 3-1: config 0 descriptor?? [ 200.433718][ T92] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 200.470701][ T92] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 200.539926][ T5901] usb 5-1: Using ep0 maxpacket: 16 [ 200.548702][ T5901] usb 5-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 200.629270][ T5901] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 200.645127][ T92] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 200.650574][ T43] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 200.669060][ T92] usb 3-1: media controller created [ 200.682450][ T5901] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 200.759046][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.829155][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 200.862969][ T92] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 200.872695][ T5901] usb 5-1: config 0 descriptor?? [ 201.136001][ T92] DVB: Unable to find symbol tda10046_attach() [ 201.259043][ T92] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 201.278890][ T92] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 201.322389][ T5901] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 201.889842][ T5901] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 202.059370][ T5901] usb 6-1: Using ep0 maxpacket: 32 [ 202.067952][ T7530] loop2: detected capacity change from 0 to 3 [ 202.084737][ T7530] ldm_validate_privheads(): Disk read failed. [ 202.100907][ T7530] Dev loop2: unable to read RDB block 3 [ 202.115310][ T7530] loop2: unable to read partition table [ 202.132328][ T7530] loop2: partition table beyond EOD, truncated [ 202.155559][ T7530] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 202.213743][ T5901] usb 6-1: unable to get BOS descriptor or descriptor too short [ 202.227445][ T5901] usb 6-1: too many configurations: 105, using maximum allowed: 8 [ 202.254997][ T5901] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 202.276699][ T5901] usb 6-1: can't read configurations, error -71 [ 203.295156][ T2151] usb 5-1: USB disconnect, device number 32 [ 203.885118][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 203.893866][ T43] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 203.922787][ T43] usb 4-1: can't read configurations, error -71 [ 204.220105][ T92] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -110 [ 204.559131][ T43] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 204.740925][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 204.751496][ T43] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 204.768317][ T43] usb 4-1: config 0 has no interface number 0 [ 204.781876][ T43] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 204.799407][ T43] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 204.810027][ T43] usb 4-1: config 0 interface 41 has no altsetting 0 [ 204.837529][ T43] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 204.899402][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.910755][ T43] usb 4-1: Product: syz [ 204.915475][ T43] usb 4-1: Manufacturer: syz [ 204.920568][ T43] usb 4-1: SerialNumber: syz [ 204.927181][ T43] usb 4-1: config 0 descriptor?? [ 204.933082][ T7571] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 204.998361][ T7571] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 205.219196][ T43] dm9601 4-1:0.41: probe with driver dm9601 failed with error -71 [ 205.235320][ T43] sr9700 4-1:0.41: probe with driver sr9700 failed with error -71 [ 205.385686][ T43] usb 4-1: USB disconnect, device number 36 [ 205.543405][ T7588] netlink: 'syz.2.375': attribute type 1 has an invalid length. [ 205.626336][ T7588] 8021q: adding VLAN 0 to HW filter on device bond2 [ 205.697530][ T7591] bond1: (slave erspan0): Releasing active interface [ 205.721215][ T7591] bond2: (slave erspan0): making interface the new active one [ 205.730867][ T7591] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 205.855430][ T7591] syz.2.375 (7591) used greatest stack depth: 19976 bytes left [ 206.657218][ T43] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 206.736827][ T7625] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 206.759884][ T7625] netlink: 16 bytes leftover after parsing attributes in process `syz.1.384'. [ 206.839732][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 206.851485][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.889277][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 206.910227][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 206.929479][ T5942] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 206.947013][ T43] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 206.986188][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.012115][ T43] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 207.030122][ T43] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 207.038208][ T43] usb 4-1: Manufacturer: syz [ 207.062214][ T43] usb 4-1: config 0 descriptor?? [ 207.095071][ T5942] usb 6-1: config 0 has an invalid interface number: 169 but max is 0 [ 207.137532][ T5942] usb 6-1: config 0 has no interface number 0 [ 207.159631][ T5942] usb 6-1: New USB device found, idVendor=05ac, idProduct=9222, bcdDevice= f.a9 [ 207.176423][ T5942] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.205406][ T5942] usb 6-1: Product: syz [ 207.226249][ T5942] usb 6-1: Manufacturer: syz [ 207.238521][ T5942] usb 6-1: SerialNumber: syz [ 207.256990][ T5942] usb 6-1: config 0 descriptor?? [ 207.282482][ T5942] appledisplay 6-1:0.169: Could not find int-in endpoint [ 207.328802][ T5942] usbhid 6-1:0.169: couldn't find an input interrupt endpoint [ 207.487457][ T5942] usb 6-1: USB disconnect, device number 8 [ 207.903115][ T43] rc_core: IR keymap rc-hauppauge not found [ 207.938267][ T43] Registered IR keymap rc-empty [ 207.971731][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 208.009022][ T7660] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 208.021498][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 208.052049][ T7665] input: syz1 as /devices/virtual/input/input39 [ 208.083982][ T43] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 208.147304][ T43] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input38 [ 208.227776][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 208.269096][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 208.303013][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 208.395754][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 208.429246][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 208.515894][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 208.561046][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 208.619652][ T7680] netlink: 'syz.5.392': attribute type 8 has an invalid length. [ 208.683636][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 208.749583][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 208.800376][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 208.837895][ T7688] netlink: 324 bytes leftover after parsing attributes in process `syz.2.395'. [ 208.846367][ T43] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 208.856325][ T43] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 208.976287][ T43] usb 4-1: USB disconnect, device number 37 [ 209.090133][ T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 209.211110][ T7699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.279014][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 209.312825][ T7686] loop2: detected capacity change from 0 to 3 [ 209.369549][ T7699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.370586][ T7686] ldm_validate_privheads(): Disk read failed. [ 209.433739][ T7686] Dev loop2: unable to read RDB block 3 [ 209.485213][ T7686] loop2: unable to read partition table [ 209.539268][ T7686] loop2: partition table beyond EOD, truncated [ 209.546409][ T7686] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 209.627011][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 209.672092][ T24] usb 2-1: too many configurations: 105, using maximum allowed: 8 [ 209.762650][ T24] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 209.773967][ T24] usb 2-1: can't read configurations, error -71 [ 210.560027][ T43] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 210.719015][ T43] usb 6-1: device descriptor read/64, error -71 [ 210.808329][ T7734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.839497][ T7734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.903103][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.404'. [ 211.009319][ T43] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 211.169184][ T43] usb 6-1: device descriptor read/64, error -71 [ 211.309115][ T43] usb usb6-port1: attempt power cycle [ 211.661817][ T5942] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 211.702843][ T43] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 211.755520][ T43] usb 6-1: device descriptor read/8, error -71 [ 211.889328][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.900904][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 211.901007][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 211.902006][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 211.907660][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 211.929323][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.941834][ T5942] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 211.951275][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.970792][ T5942] usb 2-1: config 0 descriptor?? [ 212.030753][ T43] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 212.097898][ T43] usb 6-1: device descriptor read/8, error -71 [ 212.265039][ T43] usb usb6-port1: unable to enumerate USB device [ 212.334131][ T5901] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 212.408252][ T5942] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 212.443044][ T5942] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 212.715271][ T5901] usb 5-1: Using ep0 maxpacket: 32 [ 212.733171][ T7773] loop2: detected capacity change from 0 to 3 [ 212.759812][ T7773] ldm_validate_privheads(): Disk read failed. [ 212.766466][ T7773] Dev loop2: unable to read RDB block 3 [ 212.772499][ T7773] loop2: unable to read partition table [ 212.783149][ T7773] loop2: partition table beyond EOD, truncated [ 212.789766][ T7773] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 212.838552][ T5901] usb 5-1: unable to get BOS descriptor or descriptor too short [ 212.852224][ T5942] cp2112 0003:10C4:EA90.0007: Part Number: 0x82 Device Version: 0xFE [ 212.898629][ T5901] usb 5-1: too many configurations: 105, using maximum allowed: 8 [ 212.941624][ T5901] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 212.962975][ T5901] usb 5-1: can't read configurations, error -71 [ 213.064316][ T7755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.100695][ T7755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.555585][ T5942] cp2112 0003:10C4:EA90.0007: error reading lock byte: -71 [ 213.608656][ T5942] usb 2-1: USB disconnect, device number 20 [ 213.663933][ T7798] netlink: 'syz.4.417': attribute type 1 has an invalid length. [ 214.219283][ T5901] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 214.405536][ T7810] netlink: 'syz.1.419': attribute type 1 has an invalid length. [ 214.439324][ T5901] usb 5-1: device descriptor read/64, error -71 [ 214.635043][ T7810] 8021q: adding VLAN 0 to HW filter on device bond3 [ 214.670385][ T7813] bond2: (slave erspan0): Releasing active interface [ 214.690207][ T7813] bond3: (slave erspan0): making interface the new active one [ 214.697805][ T5901] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 214.707780][ T7813] bond3: (slave erspan0): Enslaving as an active interface with an up link [ 214.774437][ T5942] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 214.959056][ T5942] usb 4-1: device descriptor read/64, error -71 [ 214.965426][ T5901] usb 5-1: device descriptor read/64, error -71 [ 215.194481][ T5901] usb usb5-port1: attempt power cycle [ 215.309068][ T5941] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 215.340923][ T5942] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 215.489860][ T5942] usb 4-1: device descriptor read/64, error -71 [ 215.549033][ T5901] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 215.592333][ T5901] usb 5-1: device descriptor read/8, error -71 [ 215.609661][ T5942] usb usb4-port1: attempt power cycle [ 215.849146][ T5901] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 215.930004][ T5901] usb 5-1: device descriptor read/8, error -71 [ 216.029304][ T43] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 216.048803][ T5901] usb usb5-port1: unable to enumerate USB device [ 216.055796][ T5942] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 216.219205][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 216.233894][ T43] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.245420][ T43] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 216.259272][ T5942] usb 4-1: device descriptor read/8, error -71 [ 216.261128][ T43] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 216.274880][ T43] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 216.285570][ T43] usb 2-1: Product: syz [ 216.292417][ T43] usb 2-1: Manufacturer: syz [ 216.297369][ T43] usb 2-1: SerialNumber: syz [ 216.446206][ T43] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input40 [ 216.523019][ T5942] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 216.539856][ T7832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.549967][ T7832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.590053][ T43] usb 2-1: USB disconnect, device number 21 [ 216.600657][ T5942] usb 4-1: device descriptor read/8, error -71 [ 216.662089][ T43] appletouch 2-1:1.0: input: appletouch disconnected [ 216.710028][ T5942] usb usb4-port1: unable to enumerate USB device [ 217.131368][ T5942] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 217.409197][ T5942] usb 5-1: Using ep0 maxpacket: 32 [ 217.455009][ T7845] loop2: detected capacity change from 0 to 3 [ 217.462447][ T7845] ldm_validate_privheads(): Disk read failed. [ 217.468603][ T7845] Dev loop2: unable to read RDB block 3 [ 217.488627][ T7845] loop2: unable to read partition table [ 217.512925][ T7845] loop2: partition table beyond EOD, truncated [ 217.535600][ T7845] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 217.636458][ T5942] usb 5-1: unable to get BOS descriptor or descriptor too short [ 217.671345][ T5942] usb 5-1: too many configurations: 105, using maximum allowed: 8 [ 217.712712][ T5942] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 217.748999][ T5942] usb 5-1: can't read configurations, error -71 [ 217.888235][ T7854] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 218.435105][ T7872] loop4: detected capacity change from 0 to 7 [ 218.451267][ T7872] Dev loop4: unable to read RDB block 7 [ 218.465737][ T7872] loop4: unable to read partition table [ 218.483078][ T7872] loop4: partition table beyond EOD, truncated [ 218.505099][ T7872] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 218.733548][ T7877] xt_hashlimit: max too large, truncated to 1048576 [ 218.989853][ T7887] input: syz0 as /devices/virtual/input/input41 [ 219.020465][ T9] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 219.199130][ T9] usb 4-1: device descriptor read/64, error -71 [ 219.276196][ T7891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.305233][ T7891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.363861][ T30] audit: type=1326 audit(1750920355.305:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.2.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56d018e929 code=0x7ffc0000 [ 219.429563][ T30] audit: type=1326 audit(1750920355.305:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.2.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56d018e929 code=0x7ffc0000 [ 219.469414][ T9] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 219.514001][ T30] audit: type=1326 audit(1750920355.335:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.2.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56d018e929 code=0x7ffc0000 [ 219.536733][ T30] audit: type=1326 audit(1750920355.335:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.2.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56d018e929 code=0x7ffc0000 [ 219.620194][ T9] usb 4-1: device descriptor read/64, error -71 [ 219.705340][ T30] audit: type=1326 audit(1750920355.335:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.2.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56d018e929 code=0x7ffc0000 [ 219.736107][ T30] audit: type=1326 audit(1750920355.335:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.2.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56d018e929 code=0x7ffc0000 [ 219.763938][ T9] usb usb4-port1: attempt power cycle [ 219.854323][ T30] audit: type=1326 audit(1750920355.335:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.2.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f56d018e929 code=0x7ffc0000 [ 219.880991][ C1] vkms_vblank_simulate: vblank timer overrun [ 219.991948][ T30] audit: type=1326 audit(1750920355.335:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.2.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56d018e929 code=0x7ffc0000 [ 220.013976][ C1] vkms_vblank_simulate: vblank timer overrun [ 220.096382][ T7903] netlink: 'syz.5.445': attribute type 1 has an invalid length. [ 220.119950][ T7905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.144617][ T30] audit: type=1326 audit(1750920355.335:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.2.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f56d018d290 code=0x7ffc0000 [ 220.149025][ T9] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 220.166725][ C1] vkms_vblank_simulate: vblank timer overrun [ 220.172822][ T30] audit: type=1326 audit(1750920355.335:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.2.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56d018e929 code=0x7ffc0000 [ 220.222586][ T9] usb 4-1: device descriptor read/8, error -71 [ 220.224418][ T7905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.244297][ T7903] 8021q: adding VLAN 0 to HW filter on device bond1 [ 220.459367][ T9] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 220.495451][ T9] usb 4-1: device descriptor read/8, error -71 [ 220.629606][ T9] usb usb4-port1: unable to enumerate USB device [ 220.839099][ T5941] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 220.907107][ T7924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.918536][ T7924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.932227][ T7924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.944173][ T7924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.009890][ T5941] usb 5-1: Using ep0 maxpacket: 16 [ 221.017675][ T5941] usb 5-1: config 0 has an invalid interface number: 5 but max is 0 [ 221.027567][ T5941] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.037941][ T5941] usb 5-1: config 0 has no interface number 0 [ 221.044111][ T5941] usb 5-1: config 0 interface 5 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 221.057196][ T5941] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 221.066309][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.076587][ T5941] usb 5-1: config 0 descriptor?? [ 221.739336][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 221.923255][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 222.012362][ T7930] netlink: 208 bytes leftover after parsing attributes in process `syz.5.452'. [ 222.147159][ T7949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.163807][ T7949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.256054][ T7949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.274553][ T7949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.299786][ T43] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 222.388064][ T7951] netlink: 'syz.1.459': attribute type 1 has an invalid length. [ 222.448687][ T7951] 8021q: adding VLAN 0 to HW filter on device bond4 [ 222.458638][ T7953] bond3: (slave erspan0): Releasing active interface [ 222.461890][ T43] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 222.473673][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.489994][ T43] usb 4-1: config 0 has no interface number 0 [ 222.497058][ T43] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 222.507137][ T43] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.523386][ T43] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 222.527213][ T7953] bond4: (slave erspan0): making interface the new active one [ 222.532802][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.553572][ T43] usb 4-1: Product: syz [ 222.567403][ T7953] bond4: (slave erspan0): Enslaving as an active interface with an up link [ 222.576331][ T43] usb 4-1: Manufacturer: syz [ 222.581335][ T43] usb 4-1: SerialNumber: syz [ 222.590376][ T43] usb 4-1: config 0 descriptor?? [ 222.946706][ T7959] netlink: 44 bytes leftover after parsing attributes in process `syz.2.461'. [ 223.451439][ T7965] fuse: Unknown parameter '0x00000000000000000x000000000000000a' [ 223.466839][ T7965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.479510][ T7965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.488624][ T7965] delete_channel: no stack [ 223.589956][ T92] usb 4-1: USB disconnect, device number 46 [ 223.647975][ T9] usb 5-1: USB disconnect, device number 41 [ 224.828887][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 224.980817][ T24] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 225.001604][ T24] usb 6-1: can't read configurations, error -71 [ 225.349249][ T7993] netlink: 'syz.5.470': attribute type 1 has an invalid length. [ 225.508181][ T7993] 8021q: adding VLAN 0 to HW filter on device bond2 [ 225.675495][ T7996] bond2: (slave erspan0): making interface the new active one [ 225.684412][ T7996] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 226.100506][ T8007] vivid-000: kernel_thread() failed [ 226.329154][ T92] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 226.389373][ T8017] fuse: Bad value for 'fd' [ 226.491331][ T92] usb 4-1: device descriptor read/64, error -71 [ 226.749068][ T92] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 226.770570][ T8025] syz.1.476 (8025): drop_caches: 0 [ 226.970143][ T92] usb 4-1: device descriptor read/64, error -71 [ 227.089321][ T92] usb usb4-port1: attempt power cycle [ 227.430001][ T92] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 227.509791][ T92] usb 4-1: device descriptor read/8, error -71 [ 227.763422][ T92] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 227.822504][ T92] usb 4-1: device descriptor read/8, error -71 [ 227.942446][ T92] usb usb4-port1: unable to enumerate USB device [ 228.310242][ T43] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 228.617336][ T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.629117][ T43] usb 6-1: config 0 interface 0 has no altsetting 0 [ 228.640203][ T43] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 228.652315][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.661061][ T43] usb 6-1: Product: syz [ 228.665300][ T43] usb 6-1: Manufacturer: syz [ 228.672775][ T43] usb 6-1: SerialNumber: syz [ 228.683068][ T43] usb 6-1: config 0 descriptor?? [ 228.703832][ T43] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 228.761915][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 228.864056][ T43] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 228.885741][ T43] usb 6-1: media controller created [ 228.994359][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 229.214202][ T8044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.482'. [ 229.287781][ T8044] netlink: 'syz.3.482': attribute type 3 has an invalid length. [ 229.314505][ T43] DVB: Unable to find symbol tda10046_attach() [ 229.362195][ T43] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 229.416051][ T43] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 229.471694][ T8047] netlink: 'syz.2.483': attribute type 1 has an invalid length. [ 229.803381][ T8047] 8021q: adding VLAN 0 to HW filter on device bond3 [ 229.997932][ T43] dvb_usb_m920x 6-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 230.058367][ T43] usb 6-1: USB disconnect, device number 16 [ 230.366006][ T8061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.390389][ T8061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.640739][ T2151] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 230.799268][ T43] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 230.821720][ T2151] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 230.832095][ T2151] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.850717][ T2151] usb 5-1: config 0 descriptor?? [ 230.981355][ T43] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.032655][ T43] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 231.061846][ T43] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 231.093443][ T2151] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 231.111341][ T43] usb 6-1: New USB device found, idVendor=0525, idProduct=86a1, bcdDevice= 0.40 [ 231.159189][ T2151] [drm:udl_init] *ERROR* Selecting channel failed [ 231.169975][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.174708][ T8024] syz.1.476 (8024): drop_caches: 1 [ 231.218573][ T43] usb 6-1: Product: syz [ 231.239511][ T43] usb 6-1: Manufacturer: syz [ 231.273642][ T43] usb 6-1: SerialNumber: syz [ 231.294376][ T2151] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 231.357432][ T2151] [drm] Initialized udl on minor 2 [ 231.377274][ T2151] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 231.407966][ T2151] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 231.489681][ T2151] usb 5-1: USB disconnect, device number 42 [ 231.495964][ T24] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 231.530611][ T24] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 231.749426][ T92] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 232.040482][ T43] cdc_ncm 6-1:1.0: bind() failure [ 232.167234][ T43] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 232.224935][ T43] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 232.259252][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 232.290354][ T92] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.300604][ T92] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 232.316643][ T92] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 232.326053][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.336877][ T92] usb 4-1: config 0 descriptor?? [ 232.427867][ T92] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 232.442288][ T43] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 232.476231][ T43] usb 6-1: USB disconnect, device number 17 [ 232.559455][ T92] dvb-usb: bulk message failed: -22 (3/0) [ 232.569211][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 232.640844][ T92] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 232.664428][ T8079] pim6reg: entered allmulticast mode [ 232.858586][ T8072] pim6reg: left allmulticast mode [ 232.864189][ T92] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 232.864259][ T92] usb 4-1: media controller created [ 232.867571][ T92] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 232.901296][ T92] dvb-usb: bulk message failed: -22 (6/0) [ 232.907979][ T92] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 232.927456][ T92] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input43 [ 233.004618][ T92] dvb-usb: schedule remote query interval to 150 msecs. [ 233.023016][ T92] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 233.180593][ T5901] dvb-usb: bulk message failed: -22 (1/0) [ 233.192250][ T92] usb 4-1: USB disconnect, device number 51 [ 233.210404][ T5901] dvb-usb: error while querying for an remote control event. [ 233.541362][ T92] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 234.129641][ T8102] netlink: 'syz.5.495': attribute type 1 has an invalid length. [ 234.272502][ T8102] 8021q: adding VLAN 0 to HW filter on device bond3 [ 234.484964][ T8100] bond2: (slave erspan0): Releasing active interface [ 234.645066][ T8100] bond3: (slave erspan0): making interface the new active one [ 234.740332][ T8100] bond3: (slave erspan0): Enslaving as an active interface with an up link [ 234.905597][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 234.921109][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 234.928756][ T9] usb 2-1: can't read configurations, error -71 [ 235.137688][ T43] IPVS: starting estimator thread 0... [ 235.249720][ T8113] IPVS: using max 25 ests per chain, 60000 per kthread [ 235.268546][ T8116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.289706][ T43] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 235.324011][ T8116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.429770][ T43] usb 5-1: device descriptor read/64, error -71 [ 235.679050][ T43] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 235.983275][ T43] usb 5-1: device descriptor read/64, error -71 [ 236.193713][ T43] usb usb5-port1: attempt power cycle [ 236.545097][ T43] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 236.569910][ T43] usb 5-1: device descriptor read/8, error -71 [ 236.700234][ T8137] netlink: 72 bytes leftover after parsing attributes in process `syz.1.506'. [ 236.810253][ T2151] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 236.851687][ T43] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 236.879843][ T43] usb 5-1: device descriptor read/8, error -71 [ 236.959435][ T2151] usb 4-1: device descriptor read/64, error -71 [ 236.990215][ T43] usb usb5-port1: unable to enumerate USB device [ 237.199110][ T2151] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 237.280951][ T43] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 237.361843][ T2151] usb 4-1: device descriptor read/64, error -71 [ 237.479364][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 237.485307][ T2151] usb usb4-port1: attempt power cycle [ 237.493032][ T43] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 237.573082][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.586509][ T43] usb 2-1: config 0 descriptor?? [ 237.803645][ T43] usb 2-1: string descriptor 0 read error: -71 [ 237.836243][ T43] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 237.891251][ T43] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 237.904086][ T43] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 237.915818][ T2151] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 237.939845][ T2151] usb 4-1: device descriptor read/8, error -71 [ 238.187309][ T2151] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 238.260402][ T2151] usb 4-1: device descriptor read/8, error -71 [ 238.379382][ T2151] usb usb4-port1: unable to enumerate USB device [ 238.454655][ T5909] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 238.661504][ T5909] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.661566][ T5909] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 238.661590][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.669886][ T5909] usb 5-1: config 0 descriptor?? [ 238.677317][ T5909] pwc: Askey VC010 type 2 USB webcam detected. [ 238.740904][ T8161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.511'. [ 238.740966][ T8161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.511'. [ 238.740979][ T8161] netlink: 60 bytes leftover after parsing attributes in process `syz.1.511'. [ 238.740997][ T8161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.511'. [ 238.879368][ T5909] pwc: send_video_command error -71 [ 238.879391][ T5909] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 238.879509][ T5909] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 238.891586][ T5909] usb 5-1: USB disconnect, device number 47 [ 239.229324][ T5909] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 239.384289][ T5909] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.423897][ T5909] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 239.463402][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.491308][ T5909] usb 5-1: config 0 descriptor?? [ 239.504122][ T5909] pwc: Askey VC010 type 2 USB webcam detected. [ 239.549164][ T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 239.575333][ T8175] xt_TPROXY: Can be used only with -p tcp or -p udp [ 239.717850][ T5909] pwc: recv_control_msg error -71 req 02 val 2b00 [ 239.759292][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 239.776273][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219 [ 239.789099][ T5909] pwc: recv_control_msg error -71 req 02 val 2700 [ 239.816530][ T5909] pwc: recv_control_msg error -71 req 02 val 2c00 [ 239.838293][ T5909] pwc: recv_control_msg error -71 req 04 val 1000 [ 239.838707][ T9] usb 6-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 239.865490][ T5909] pwc: recv_control_msg error -71 req 04 val 1300 [ 239.875601][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.912951][ T5909] pwc: recv_control_msg error -71 req 04 val 1400 [ 239.914128][ T9] usb 6-1: Product: syz [ 240.026765][ T5909] pwc: recv_control_msg error -71 req 02 val 2000 [ 240.049218][ T9] usb 6-1: Manufacturer: syz [ 240.056556][ T5909] pwc: recv_control_msg error -71 req 02 val 2100 [ 240.065073][ T9] usb 6-1: SerialNumber: syz [ 240.082106][ T8188] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 240.091167][ T8188] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 240.115205][ T5909] pwc: recv_control_msg error -71 req 04 val 1500 [ 240.120024][ T9] usb 6-1: config 0 descriptor?? [ 240.137021][ T8170] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 240.137963][ T5909] pwc: recv_control_msg error -71 req 02 val 2500 [ 240.162862][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 240.192167][ T5909] pwc: recv_control_msg error -71 req 02 val 2400 [ 240.202751][ T5909] pwc: recv_control_msg error -71 req 02 val 2600 [ 240.213508][ T5909] pwc: recv_control_msg error -71 req 02 val 2900 [ 240.238202][ T5909] pwc: recv_control_msg error -71 req 02 val 2800 [ 240.254124][ T5909] pwc: recv_control_msg error -71 req 04 val 1100 [ 240.271807][ T5909] pwc: recv_control_msg error -71 req 04 val 1200 [ 240.342282][ T5909] pwc: Registered as video103. [ 240.360928][ T5909] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input45 [ 240.437765][ T5909] usb 5-1: USB disconnect, device number 48 [ 240.509461][ T9] usb 6-1: USB disconnect, device number 18 [ 240.605273][ T5988] udevd[5988]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 241.210358][ T8196] netlink: 'syz.5.520': attribute type 10 has an invalid length. [ 241.569443][ T8196] syz_tun: entered promiscuous mode [ 241.580578][ T8196] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 243.149624][ T2151] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 243.157261][ T8236] netlink: 4 bytes leftover after parsing attributes in process `syz.5.529'. [ 243.343115][ T2151] usb 5-1: unable to get BOS descriptor or descriptor too short [ 243.383033][ T2151] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 243.492979][ T2151] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 243.518712][ T2151] usb 5-1: config 129 descriptor has 1 excess byte, ignoring [ 243.606538][ T2151] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 243.626368][ T2151] usb 5-1: config 129 has no interface number 0 [ 243.633095][ T2151] usb 5-1: config 129 has no interface number 1 [ 243.845672][ T2151] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 243.895088][ T2151] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 243.906779][ T2151] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 243.921821][ T2151] usb 5-1: config 129 interface 135 has no altsetting 0 [ 243.935121][ T2151] usb 5-1: config 129 interface 5 has no altsetting 0 [ 243.947260][ T2151] usb 5-1: string descriptor 0 read error: -22 [ 243.962708][ T2151] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 243.972660][ T2151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.990239][ T2151] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 244.009604][ T2151] usb 5-1: MIDIStreaming interface descriptor not found [ 244.282583][ T2151] usb 5-1: USB disconnect, device number 49 [ 244.398154][ T8249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.496759][ T8249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.057154][ T8251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.533'. [ 245.316076][ T8251] team0 (unregistering): Port device team_slave_0 removed [ 245.335431][ T8251] team0 (unregistering): Port device team_slave_1 removed [ 245.641844][ T8265] loop2: detected capacity change from 0 to 7 [ 245.658666][ T8265] Dev loop2: unable to read RDB block 7 [ 245.666575][ T8265] loop2: AHDI p1 p2 p3 [ 245.676468][ T8265] loop2: partition table partially beyond EOD, truncated [ 245.707017][ T8265] loop2: p1 start 1601398130 is beyond EOD, truncated [ 245.750231][ T8265] loop2: p2 start 1702059890 is beyond EOD, truncated [ 246.678125][ T8286] netlink: 28 bytes leftover after parsing attributes in process `syz.3.541'. [ 247.679982][ T8294] ======================================================= [ 247.679982][ T8294] WARNING: The mand mount option has been deprecated and [ 247.679982][ T8294] and is ignored by this kernel. Remove the mand [ 247.679982][ T8294] option from the mount to silence this warning. [ 247.679982][ T8294] ======================================================= [ 247.714876][ C1] vkms_vblank_simulate: vblank timer overrun [ 247.754875][ T8297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.817310][ T8294] fuse: Bad value for 'user_id' [ 247.850030][ T8297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.859443][ T8294] fuse: Bad value for 'user_id' [ 248.000283][ T8301] tipc: Failed to remove unknown binding: 66,1,1/0:3272660960/3272660962 [ 248.069081][ T8302] tipc: Failed to remove unknown binding: 66,1,1/0:3272660960/3272660962 [ 248.077740][ T8302] tipc: Failed to remove unknown binding: 66,1,1/0:3272660960/3272660962 [ 248.089879][ T8297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.121190][ T8304] netlink: 20 bytes leftover after parsing attributes in process `syz.5.547'. [ 248.139240][ T2151] usb 5-1: new low-speed USB device number 50 using dummy_hcd [ 248.147662][ T8297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.224863][ T8306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.548'. [ 248.281495][ T2151] usb 5-1: device descriptor read/64, error -71 [ 248.389068][ T5902] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 248.529128][ T5902] usb 6-1: device descriptor read/64, error -71 [ 248.555445][ T2151] usb 5-1: new low-speed USB device number 51 using dummy_hcd [ 248.809772][ T2151] usb 5-1: device descriptor read/64, error -71 [ 248.869839][ T5902] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 248.934019][ T2151] usb usb5-port1: attempt power cycle [ 249.019989][ T5902] usb 6-1: device descriptor read/64, error -71 [ 249.149304][ T5902] usb usb6-port1: attempt power cycle [ 249.299424][ T2151] usb 5-1: new low-speed USB device number 52 using dummy_hcd [ 249.410104][ T2151] usb 5-1: device descriptor read/8, error -71 [ 249.531852][ T5902] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 249.560044][ T5902] usb 6-1: device descriptor read/8, error -71 [ 249.650602][ T2151] usb 5-1: new low-speed USB device number 53 using dummy_hcd [ 249.688634][ T2151] usb 5-1: device descriptor read/8, error -71 [ 249.809011][ T5902] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 249.820164][ T2151] usb usb5-port1: unable to enumerate USB device [ 249.829981][ T5902] usb 6-1: device descriptor read/8, error -71 [ 249.939592][ T5902] usb usb6-port1: unable to enumerate USB device [ 250.617822][ T8335] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 250.688369][ T8340] FAULT_INJECTION: forcing a failure. [ 250.688369][ T8340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.731529][ T8340] CPU: 0 UID: 0 PID: 8340 Comm: syz.4.556 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 250.731559][ T8340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 250.731566][ T8340] Call Trace: [ 250.731571][ T8340] [ 250.731576][ T8340] dump_stack_lvl+0x189/0x250 [ 250.731598][ T8340] ? __pfx____ratelimit+0x10/0x10 [ 250.731614][ T8340] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.731630][ T8340] ? __pfx__printk+0x10/0x10 [ 250.731642][ T8340] ? __might_fault+0xb0/0x130 [ 250.731659][ T8340] should_fail_ex+0x414/0x560 [ 250.731676][ T8340] _copy_from_user+0x2d/0xb0 [ 250.731687][ T8340] ___sys_sendmsg+0x158/0x2a0 [ 250.731703][ T8340] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.731736][ T8340] ? __fget_files+0x2a/0x420 [ 250.731747][ T8340] ? __fget_files+0x3a0/0x420 [ 250.731764][ T8340] __sys_sendmmsg+0x227/0x430 [ 250.731780][ T8340] ? __pfx___sys_sendmmsg+0x10/0x10 [ 250.731791][ T8340] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 250.731821][ T8340] ? ksys_write+0x22a/0x250 [ 250.731833][ T8340] ? __pfx_ksys_write+0x10/0x10 [ 250.731841][ T8340] ? rcu_is_watching+0x15/0xb0 [ 250.731867][ T8340] __x64_sys_sendmmsg+0xa0/0xc0 [ 250.731881][ T8340] do_syscall_64+0xfa/0x3b0 [ 250.731891][ T8340] ? lockdep_hardirqs_on+0x9c/0x150 [ 250.731905][ T8340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.731915][ T8340] ? clear_bhb_loop+0x60/0xb0 [ 250.731928][ T8340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.731939][ T8340] RIP: 0033:0x7f628fd8e929 [ 250.731950][ T8340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.731959][ T8340] RSP: 002b:00007f6290bb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 250.731972][ T8340] RAX: ffffffffffffffda RBX: 00007f628ffb5fa0 RCX: 00007f628fd8e929 [ 250.731980][ T8340] RDX: 0000000000000001 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 250.731987][ T8340] RBP: 00007f6290bb6090 R08: 0000000000000000 R09: 0000000000000000 [ 250.731994][ T8340] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.732001][ T8340] R13: 0000000000000000 R14: 00007f628ffb5fa0 R15: 00007f62900dfa28 [ 250.732018][ T8340] [ 251.344969][ T8350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.364719][ T8350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.519823][ T9] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 251.519927][ T2151] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 251.699019][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 251.712976][ T9] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 251.714300][ T2151] usb 4-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 251.731743][ T9] usb 5-1: config 0 has no interface number 0 [ 251.762946][ T2151] usb 4-1: config 1 interface 0 has no altsetting 0 [ 251.764604][ T9] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 251.781739][ T2151] usb 4-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.40 [ 251.798959][ T2151] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.798986][ T9] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 251.817029][ T2151] usb 4-1: Product: syz [ 251.817051][ T2151] usb 4-1: Manufacturer: syz [ 251.817065][ T2151] usb 4-1: SerialNumber: syz [ 251.818969][ T5920] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 251.872174][ T9] usb 5-1: config 0 interface 126 has no altsetting 0 [ 251.894083][ T9] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 251.913424][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.933645][ T9] usb 5-1: Product: syz [ 251.938849][ T9] usb 5-1: Manufacturer: syz [ 251.953612][ T9] usb 5-1: SerialNumber: syz [ 251.985696][ T9] usb 5-1: config 0 descriptor?? [ 252.008765][ T8349] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 252.036604][ T8349] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 252.063820][ T5920] usb 6-1: unable to get BOS descriptor or descriptor too short [ 252.095640][ T5920] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 252.107217][ T5920] usb 6-1: can't read configurations, error -71 [ 252.267092][ T2151] usbhid 4-1:1.0: can't add hid device: -71 [ 252.289222][ T2151] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 252.370136][ T2151] usb 4-1: USB disconnect, device number 56 [ 252.493764][ T9] ir_usb 5-1:0.126: IR Dongle converter detected [ 252.716228][ T9] usb 5-1: IRDA class descriptor not found, device not bound [ 253.170270][ T8385] FAULT_INJECTION: forcing a failure. [ 253.170270][ T8385] name failslab, interval 1, probability 0, space 0, times 0 [ 253.204096][ T8385] CPU: 1 UID: 0 PID: 8385 Comm: syz.5.567 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 253.204116][ T8385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 253.204123][ T8385] Call Trace: [ 253.204128][ T8385] [ 253.204134][ T8385] dump_stack_lvl+0x189/0x250 [ 253.204160][ T8385] ? __pfx____ratelimit+0x10/0x10 [ 253.204177][ T8385] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.204193][ T8385] ? __pfx__printk+0x10/0x10 [ 253.204206][ T8385] ? __pfx___might_resched+0x10/0x10 [ 253.204222][ T8385] ? fs_reclaim_acquire+0x7d/0x100 [ 253.204237][ T8385] should_fail_ex+0x414/0x560 [ 253.204255][ T8385] should_failslab+0xa8/0x100 [ 253.204268][ T8385] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 253.204279][ T8385] ? __alloc_skb+0x112/0x2d0 [ 253.204293][ T8385] __alloc_skb+0x112/0x2d0 [ 253.204307][ T8385] alloc_skb_with_frags+0xca/0x890 [ 253.204323][ T8385] ? __lock_acquire+0xab9/0xd20 [ 253.204341][ T8385] sock_alloc_send_pskb+0x857/0x990 [ 253.204367][ T8385] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 253.204383][ T8385] ? is_bpf_text_address+0x26/0x2b0 [ 253.204404][ T8385] __ip6_append_data+0x2ab5/0x3de0 [ 253.204430][ T8385] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 253.204450][ T8385] ? ima_match_policy+0x10b/0x2150 [ 253.204466][ T8385] ? look_up_lock_class+0x74/0x170 [ 253.204485][ T8385] ? __pfx___ip6_append_data+0x10/0x10 [ 253.204500][ T8385] ? ip6_setup_cork+0xa1c/0x10e0 [ 253.204527][ T8385] ip6_make_skb+0x2ce/0x410 [ 253.204552][ T8385] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 253.204572][ T8385] ? __pfx_ip6_make_skb+0x10/0x10 [ 253.204594][ T8385] ? ip6_dst_hoplimit+0x96/0x350 [ 253.204603][ T8385] ? ip6_dst_hoplimit+0x96/0x350 [ 253.204615][ T8385] udpv6_sendmsg+0x1c12/0x2710 [ 253.204637][ T8385] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 253.204654][ T8385] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 253.204670][ T8385] ? __pfx___might_resched+0x10/0x10 [ 253.204696][ T8385] ? aa_sk_perm+0x81e/0x950 [ 253.204710][ T8385] ? __lock_acquire+0xab9/0xd20 [ 253.204728][ T8385] ? inet_send_prepare+0x5c/0x270 [ 253.204740][ T8385] ? inet6_sendmsg+0xe4/0x120 [ 253.204752][ T8385] __sock_sendmsg+0xe5/0x270 [ 253.204770][ T8385] ____sys_sendmsg+0x52d/0x830 [ 253.204786][ T8385] ? __pfx_____sys_sendmsg+0x10/0x10 [ 253.204805][ T8385] ? import_iovec+0x74/0xa0 [ 253.204818][ T8385] ___sys_sendmsg+0x21f/0x2a0 [ 253.204832][ T8385] ? __pfx____sys_sendmsg+0x10/0x10 [ 253.204867][ T8385] ? __fget_files+0x2a/0x420 [ 253.204878][ T8385] ? __fget_files+0x3a0/0x420 [ 253.204896][ T8385] __sys_sendmmsg+0x227/0x430 [ 253.204913][ T8385] ? __pfx___sys_sendmmsg+0x10/0x10 [ 253.204924][ T8385] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 253.204956][ T8385] ? ksys_write+0x22a/0x250 [ 253.204968][ T8385] ? __pfx_ksys_write+0x10/0x10 [ 253.204976][ T8385] ? rcu_is_watching+0x15/0xb0 [ 253.204996][ T8385] __x64_sys_sendmmsg+0xa0/0xc0 [ 253.205010][ T8385] do_syscall_64+0xfa/0x3b0 [ 253.205019][ T8385] ? lockdep_hardirqs_on+0x9c/0x150 [ 253.205040][ T8385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.205051][ T8385] ? clear_bhb_loop+0x60/0xb0 [ 253.205064][ T8385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.205074][ T8385] RIP: 0033:0x7f2fe898e929 [ 253.205085][ T8385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.205095][ T8385] RSP: 002b:00007f2fe98b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 253.205109][ T8385] RAX: ffffffffffffffda RBX: 00007f2fe8bb5fa0 RCX: 00007f2fe898e929 [ 253.205117][ T8385] RDX: 0000000000000001 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 253.205123][ T8385] RBP: 00007f2fe98b8090 R08: 0000000000000000 R09: 0000000000000000 [ 253.205130][ T8385] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.205137][ T8385] R13: 0000000000000000 R14: 00007f2fe8bb5fa0 R15: 00007f2fe8cdfa28 [ 253.205154][ T8385] [ 253.586519][ C1] vkms_vblank_simulate: vblank timer overrun [ 253.998969][ T5920] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 254.999101][ T5941] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 255.402008][ T5941] usb 6-1: Using ep0 maxpacket: 16 [ 255.511496][ T5941] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 255.610216][ T5941] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 255.620211][ T5941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.640803][ T5941] usb 6-1: Product: syz [ 255.649042][ T5941] usb 6-1: Manufacturer: syz [ 255.658995][ T5941] usb 6-1: SerialNumber: syz [ 255.696111][ T5941] usb 6-1: config 0 descriptor?? [ 255.729404][ T5941] hub 6-1:0.0: bad descriptor, ignoring hub [ 255.735427][ T5941] hub 6-1:0.0: probe with driver hub failed with error -5 [ 255.760227][ T5941] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input46 [ 255.914782][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.921844][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.070902][ T5941] usb 5-1: USB disconnect, device number 54 [ 256.759448][ T5941] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 256.923480][ T5941] usb 5-1: Using ep0 maxpacket: 32 [ 256.943848][ T5941] usb 5-1: config 0 has an invalid interface number: 53 but max is 0 [ 256.972522][ T5941] usb 5-1: config 0 has no interface number 0 [ 257.071902][ T5941] usb 5-1: config 0 interface 53 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 16 [ 257.139620][ T5941] usb 5-1: config 0 interface 53 has no altsetting 0 [ 257.173032][ T5941] usb 5-1: New USB device found, idVendor=07c0, idProduct=158a, bcdDevice=dd.2e [ 257.191829][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.200154][ T5941] usb 5-1: Product: syz [ 257.204414][ T5941] usb 5-1: Manufacturer: syz [ 257.209195][ T5941] usb 5-1: SerialNumber: syz [ 257.215843][ T5941] usb 5-1: config 0 descriptor?? [ 257.239642][ T8417] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 257.253147][ T5941] iowarrior 5-1:0.53: no interrupt-in endpoint found [ 257.455142][ T5920] usb 5-1: USB disconnect, device number 55 [ 257.743327][ T24] usb 6-1: USB disconnect, device number 25 [ 257.867133][ T8439] netlink: 'syz.5.575': attribute type 1 has an invalid length. [ 257.952970][ T8439] 8021q: adding VLAN 0 to HW filter on device bond4 [ 258.179389][ T8439] bond3: (slave erspan0): Releasing active interface [ 258.305146][ T8439] bond4: (slave erspan0): making interface the new active one [ 258.340777][ T8439] bond4: (slave erspan0): Enslaving as an active interface with an up link [ 258.343580][ T8456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.409779][ T8456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.470559][ T8456] dlm: no locking on control device [ 258.491902][ T8456] netlink: 16 bytes leftover after parsing attributes in process `syz.2.580'. [ 259.070259][ T2151] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 259.329078][ T24] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 259.439101][ T2151] usb 6-1: Using ep0 maxpacket: 8 [ 259.503388][ T2151] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 259.522141][ T24] usb 5-1: config 0 has no interfaces? [ 259.533114][ T2151] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.615365][ T2151] usb 6-1: Product: syz [ 259.632879][ T24] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 259.669092][ T2151] usb 6-1: Manufacturer: syz [ 259.692840][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.731554][ T2151] usb 6-1: SerialNumber: syz [ 259.757491][ T24] usb 5-1: Product: syz [ 259.765834][ T24] usb 5-1: Manufacturer: syz [ 259.785967][ T24] usb 5-1: SerialNumber: syz [ 259.801604][ T2151] usb 6-1: config 0 descriptor?? [ 259.860060][ T24] usb 5-1: config 0 descriptor?? [ 259.958261][ T8490] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 259.972086][ T8490] syzkaller1: Linktype set failed because interface is up [ 260.014368][ T2151] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 260.031586][ T152] syzkaller1: tun_net_xmit 86 [ 260.051646][ T5920] syzkaller1: tun_net_xmit 90 [ 260.068182][ T2151] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 260.313230][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 260.313252][ T30] audit: type=1326 audit(1750920396.255:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8505 comm="syz.3.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec078e929 code=0x7ffc0000 [ 260.360763][ T30] audit: type=1326 audit(1750920396.285:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8505 comm="syz.3.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7faec078e929 code=0x7ffc0000 [ 260.387749][ T30] audit: type=1326 audit(1750920396.285:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8505 comm="syz.3.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec078e929 code=0x7ffc0000 [ 260.810506][ T30] audit: type=1326 audit(1750920396.285:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8505 comm="syz.3.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7faec078e929 code=0x7ffc0000 [ 260.820671][ T2151] usb 6-1: USB disconnect, device number 26 [ 260.914663][ T30] audit: type=1326 audit(1750920396.285:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8505 comm="syz.3.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec078e929 code=0x7ffc0000 [ 261.050147][ T30] audit: type=1326 audit(1750920396.295:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8505 comm="syz.3.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7faec078e929 code=0x7ffc0000 [ 261.719552][ T5901] usb 5-1: USB disconnect, device number 56 [ 262.177222][ T8541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.595'. [ 262.289160][ T5941] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 262.339434][ T2151] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 262.438263][ T8541] 8021q: adding VLAN 0 to HW filter on device bond5 [ 262.473072][ T5941] usb 6-1: Using ep0 maxpacket: 32 [ 262.492764][ T5941] usb 6-1: unable to get BOS descriptor or descriptor too short [ 262.506225][ T5941] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 262.525135][ T5941] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 262.539371][ T2151] usb 5-1: Using ep0 maxpacket: 16 [ 262.550355][ T2151] usb 5-1: unable to get BOS descriptor or descriptor too short [ 262.582706][ T2151] usb 5-1: config 1 has an invalid interface number: 125 but max is 0 [ 262.606580][ T5941] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 262.611648][ T2151] usb 5-1: config 1 has no interface number 0 [ 262.629970][ T8554] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.597'. [ 262.647287][ T2151] usb 5-1: config 1 interface 125 has no altsetting 0 [ 262.656186][ T5941] usb 6-1: config 128 has no interface number 0 [ 262.665814][ T2151] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0306, bcdDevice=3c.51 [ 262.689949][ T5941] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 262.699105][ T2151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.719502][ T5941] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 262.743268][ T2151] usb 5-1: Product: syz [ 262.747493][ T2151] usb 5-1: Manufacturer: syz [ 262.757670][ T2151] usb 5-1: SerialNumber: syz [ 262.759719][ T5941] usb 6-1: config 128 interface 127 has no altsetting 0 [ 262.780726][ T8559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.598'. [ 262.802889][ T5941] usb 6-1: language id specifier not provided by device, defaulting to English [ 262.824730][ T5941] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 262.844106][ T5941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.862501][ T5941] usb 6-1: Product: syz [ 262.874477][ T5941] usb 6-1: Manufacturer: syz [ 262.892821][ T5941] usb 6-1: SerialNumber: syz [ 263.017644][ T8534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.044570][ T8534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.073801][ T8567] netlink: 'syz.2.600': attribute type 1 has an invalid length. [ 263.120334][ T24] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 263.217226][ T8567] 8021q: adding VLAN 0 to HW filter on device bond4 [ 263.298142][ T5941] usb 6-1: USB disconnect, device number 27 [ 263.309226][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 263.316444][ T24] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 263.335497][ T24] usb 4-1: config 0 has no interface number 0 [ 263.354862][ T8571] bond2: (slave erspan0): Releasing active interface [ 263.373977][ T24] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 263.412093][ T8571] bond4: (slave erspan0): making interface the new active one [ 263.414161][ T5935] udevd[5935]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 263.446658][ T8571] bond4: (slave erspan0): Enslaving as an active interface with an up link [ 263.458530][ T24] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 263.476517][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.509649][ T24] usb 4-1: Product: syz [ 263.517225][ T2151] qmi_wwan 5-1:1.125: probe with driver qmi_wwan failed with error -22 [ 263.541563][ T24] usb 4-1: Manufacturer: syz [ 263.546349][ T24] usb 4-1: SerialNumber: syz [ 263.567816][ T2151] usb 5-1: USB disconnect, device number 57 [ 263.598103][ T24] usb 4-1: config 0 descriptor?? [ 263.627805][ T24] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 263.643025][ T24] em28xx 4-1:0.132: Video interface 132 found: [ 263.660553][ T8537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.595'. [ 264.069894][ T92] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 264.083181][ T24] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 264.182596][ T8592] netlink: 52 bytes leftover after parsing attributes in process `syz.4.604'. [ 264.204900][ T8592] netlink: 52 bytes leftover after parsing attributes in process `syz.4.604'. [ 264.216569][ T8592] netlink: 52 bytes leftover after parsing attributes in process `syz.4.604'. [ 264.249877][ T92] usb 6-1: too many configurations: 179, using maximum allowed: 8 [ 264.288459][ T92] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 264.305468][ T92] usb 6-1: can't read configurations, error -61 [ 264.447007][ T8581] can: request_module (can-proto-0) failed. [ 264.453624][ T92] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 264.512074][ T24] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 264.549917][ T24] em28xx 4-1:0.132: board has no eeprom [ 264.628461][ T92] usb 6-1: too many configurations: 179, using maximum allowed: 8 [ 264.639260][ T24] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 264.653175][ T92] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 264.657387][ T24] em28xx 4-1:0.132: analog set to bulk mode. [ 264.669695][ T2151] em28xx 4-1:0.132: Registering V4L2 extension [ 264.679060][ T92] usb 6-1: can't read configurations, error -61 [ 264.716701][ T92] usb usb6-port1: attempt power cycle [ 265.069494][ T92] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 265.101751][ T92] usb 6-1: too many configurations: 179, using maximum allowed: 8 [ 265.113033][ T92] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 265.129015][ T92] usb 6-1: can't read configurations, error -61 [ 265.172008][ T8615] input: syz1 as /devices/virtual/input/input47 [ 265.273433][ T92] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 265.300473][ T92] usb 6-1: too many configurations: 179, using maximum allowed: 8 [ 265.311238][ T92] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 265.320381][ T92] usb 6-1: can't read configurations, error -61 [ 265.329544][ T92] usb usb6-port1: unable to enumerate USB device [ 265.589379][ T5920] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 265.731851][ T8622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.740820][ T8622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.769018][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 265.776171][ T5920] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 265.786830][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.799395][ T5920] usb 5-1: config 0 descriptor?? [ 265.816652][ T5920] gspca_main: sunplus-2.14.0 probing 041e:400b [ 265.851777][ T2151] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 265.852115][ T92] usb 4-1: USB disconnect, device number 58 [ 265.862664][ T2151] em28xx 4-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 265.882892][ T92] em28xx 4-1:0.132: Disconnecting em28xx [ 266.025679][ T2151] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 266.034289][ T2151] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 266.044411][ T2151] em28xx 4-1:0.132: No AC97 audio processor [ 266.060417][ T2151] usb 4-1: Decoder not found [ 266.075376][ T2151] em28xx 4-1:0.132: failed to create media graph [ 266.088534][ T2151] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 266.185362][ T2151] em28xx 4-1:0.132: Remote control support is not available for this card. [ 266.185498][ T8629] ================================================================== [ 266.202173][ T8629] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 266.209587][ T8629] Read of size 8 at addr ffff888020ff8738 by task v4l_id/8629 [ 266.217056][ T8629] [ 266.219390][ T8629] CPU: 0 UID: 0 PID: 8629 Comm: v4l_id Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 266.219409][ T8629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 266.219418][ T8629] Call Trace: [ 266.219424][ T8629] [ 266.219430][ T8629] dump_stack_lvl+0x189/0x250 [ 266.219454][ T8629] ? __virt_addr_valid+0x1c8/0x5c0 [ 266.219468][ T8629] ? rcu_is_watching+0x15/0xb0 [ 266.219488][ T8629] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.219508][ T8629] ? rcu_is_watching+0x15/0xb0 [ 266.219531][ T8629] ? lock_release+0x4b/0x3e0 [ 266.219551][ T8629] ? __virt_addr_valid+0x1c8/0x5c0 [ 266.219564][ T8629] ? __virt_addr_valid+0x4a5/0x5c0 [ 266.219577][ T8629] print_report+0xd2/0x2b0 [ 266.219594][ T8629] ? v4l2_fh_open+0xc7/0x430 [ 266.219613][ T8629] kasan_report+0x118/0x150 [ 266.219628][ T8629] ? v4l2_fh_open+0xc7/0x430 [ 266.219651][ T8629] v4l2_fh_open+0xc7/0x430 [ 266.219674][ T8629] ? __pfx___mutex_lock+0x10/0x10 [ 266.219696][ T8629] em28xx_v4l2_open+0x157/0x9a0 [ 266.219720][ T8629] v4l2_open+0x20f/0x360 [ 266.219735][ T8629] chrdev_open+0x4c9/0x5e0 [ 266.219751][ T8629] ? __pfx_chrdev_open+0x10/0x10 [ 266.219768][ T8629] ? __pfx_chrdev_open+0x10/0x10 [ 266.219781][ T8629] do_dentry_open+0xdf0/0x1970 [ 266.219806][ T8629] vfs_open+0x3b/0x340 [ 266.219822][ T8629] ? path_openat+0x2ecd/0x3830 [ 266.219842][ T8629] path_openat+0x2ee5/0x3830 [ 266.219860][ T8629] ? arch_stack_walk+0xfc/0x150 [ 266.219882][ T8629] ? __pfx_path_openat+0x10/0x10 [ 266.219906][ T8629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.219926][ T8629] do_filp_open+0x1fa/0x410 [ 266.219946][ T8629] ? __lock_acquire+0xab9/0xd20 [ 266.219967][ T8629] ? __pfx_do_filp_open+0x10/0x10 [ 266.219992][ T8629] ? _raw_spin_unlock+0x28/0x50 [ 266.220007][ T8629] ? alloc_fd+0x64c/0x6c0 [ 266.220024][ T8629] do_sys_openat2+0x121/0x1c0 [ 266.220042][ T8629] ? __pfx_do_sys_openat2+0x10/0x10 [ 266.220059][ T8629] ? exc_page_fault+0x76/0xf0 [ 266.220080][ T8629] ? do_user_addr_fault+0xc8a/0x1390 [ 266.220102][ T8629] __x64_sys_openat+0x138/0x170 [ 266.220120][ T8629] do_syscall_64+0xfa/0x3b0 [ 266.220132][ T8629] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.220150][ T8629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.220163][ T8629] ? clear_bhb_loop+0x60/0xb0 [ 266.220178][ T8629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.220191][ T8629] RIP: 0033:0x7fba0d1d8407 [ 266.220205][ T8629] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 266.220218][ T8629] RSP: 002b:00007ffe7c1789e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 266.220238][ T8629] RAX: ffffffffffffffda RBX: 00007fba0d14c880 RCX: 00007fba0d1d8407 [ 266.220248][ T8629] RDX: 0000000000000000 RSI: 00007ffe7c178f1b RDI: ffffffffffffff9c [ 266.220258][ T8629] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 266.220266][ T8629] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 266.220275][ T8629] R13: 00007ffe7c178c30 R14: 00007fba0d431000 R15: 000056398fa3f4d8 [ 266.220290][ T8629] [ 266.220295][ T8629] [ 266.524262][ T8629] Allocated by task 2151: [ 266.528598][ T8629] kasan_save_track+0x3e/0x80 [ 266.533291][ T8629] __kasan_kmalloc+0x93/0xb0 [ 266.537889][ T8629] __kmalloc_cache_noprof+0x230/0x3d0 [ 266.543273][ T8629] em28xx_v4l2_init+0x10b/0x2e70 [ 266.548217][ T8629] em28xx_init_extension+0x11d/0x1c0 [ 266.553507][ T8629] process_scheduled_works+0xae1/0x17b0 [ 266.559061][ T8629] worker_thread+0x8a0/0xda0 [ 266.563666][ T8629] kthread+0x70e/0x8a0 [ 266.567743][ T8629] ret_from_fork+0x3fc/0x770 [ 266.572351][ T8629] ret_from_fork_asm+0x1a/0x30 [ 266.577122][ T8629] [ 266.579450][ T8629] Freed by task 2151: [ 266.583432][ T8629] kasan_save_track+0x3e/0x80 [ 266.588120][ T8629] kasan_save_free_info+0x46/0x50 [ 266.593151][ T8629] __kasan_slab_free+0x62/0x70 [ 266.597927][ T8629] kfree+0x18e/0x440 [ 266.601831][ T8629] em28xx_v4l2_init+0x1683/0x2e70 [ 266.606863][ T8629] em28xx_init_extension+0x11d/0x1c0 [ 266.612157][ T8629] process_scheduled_works+0xae1/0x17b0 [ 266.617710][ T8629] worker_thread+0x8a0/0xda0 [ 266.622313][ T8629] kthread+0x70e/0x8a0 [ 266.626385][ T8629] ret_from_fork+0x3fc/0x770 [ 266.630983][ T8629] ret_from_fork_asm+0x1a/0x30 [ 266.635748][ T8629] [ 266.638075][ T8629] The buggy address belongs to the object at ffff888020ff8000 [ 266.638075][ T8629] which belongs to the cache kmalloc-8k of size 8192 [ 266.652133][ T8629] The buggy address is located 1848 bytes inside of [ 266.652133][ T8629] freed 8192-byte region [ffff888020ff8000, ffff888020ffa000) [ 266.666105][ T8629] [ 266.668434][ T8629] The buggy address belongs to the physical page: [ 266.674851][ T8629] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20ff8 [ 266.683622][ T8629] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 266.692122][ T8629] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 266.699672][ T8629] page_type: f5(slab) [ 266.703661][ T8629] raw: 00fff00000000040 ffff88801a442280 ffffea0001e40200 0000000000000006 [ 266.712248][ T8629] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 266.720840][ T8629] head: 00fff00000000040 ffff88801a442280 ffffea0001e40200 0000000000000006 [ 266.729513][ T8629] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 266.738186][ T8629] head: 00fff00000000003 ffffea000083fe01 00000000ffffffff 00000000ffffffff [ 266.746857][ T8629] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 266.755526][ T8629] page dumped because: kasan: bad access detected [ 266.761941][ T8629] page_owner tracks the page as allocated [ 266.767657][ T8629] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5592, tgid 5592 (init), ts 57803096907, free_ts 57746407479 [ 266.787545][ T8629] post_alloc_hook+0x240/0x2a0 [ 266.792318][ T8629] get_page_from_freelist+0x21e4/0x22c0 [ 266.797868][ T8629] __alloc_frozen_pages_noprof+0x181/0x370 [ 266.803686][ T8629] alloc_pages_mpol+0x232/0x4a0 [ 266.808539][ T8629] allocate_slab+0x8a/0x3b0 [ 266.813050][ T8629] ___slab_alloc+0xbfc/0x1480 [ 266.817731][ T8629] __kmalloc_cache_noprof+0x296/0x3d0 [ 266.823105][ T8629] tomoyo_init_log+0x111f/0x1f70 [ 266.828053][ T8629] tomoyo_supervisor+0x340/0x1480 [ 266.833088][ T8629] tomoyo_env_perm+0x149/0x1e0 [ 266.837855][ T8629] tomoyo_find_next_domain+0x15cf/0x1aa0 [ 266.843494][ T8629] tomoyo_bprm_check_security+0x11c/0x180 [ 266.849224][ T8629] security_bprm_check+0x89/0x270 [ 266.854256][ T8629] bprm_execve+0x8ee/0x1450 [ 266.858770][ T8629] do_execveat_common+0x510/0x6a0 [ 266.863794][ T8629] __x64_sys_execve+0x94/0xb0 [ 266.868483][ T8629] page last free pid 5496 tgid 5496 stack trace: [ 266.874806][ T8629] __free_frozen_pages+0xc71/0xe70 [ 266.879931][ T8629] __slab_free+0x326/0x400 [ 266.884351][ T8629] qlist_free_all+0x97/0x140 [ 266.888954][ T8629] kasan_quarantine_reduce+0x148/0x160 [ 266.894426][ T8629] __kasan_slab_alloc+0x22/0x80 [ 266.899279][ T8629] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 266.904747][ T8629] getname_flags+0xb8/0x540 [ 266.909257][ T8629] vfs_fstatat+0x43/0x170 [ 266.913587][ T8629] __x64_sys_newfstatat+0x116/0x190 [ 266.918789][ T8629] do_syscall_64+0xfa/0x3b0 [ 266.923297][ T8629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.929201][ T8629] [ 266.931527][ T8629] Memory state around the buggy address: [ 266.937157][ T8629] ffff888020ff8600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 266.945224][ T8629] ffff888020ff8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 266.953287][ T8629] >ffff888020ff8700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 266.961345][ T8629] ^ [ 266.967241][ T8629] ffff888020ff8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 266.975301][ T8629] ffff888020ff8800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 266.983362][ T8629] ================================================================== [ 266.992953][ T92] em28xx 4-1:0.132: Closing input extension [ 267.056592][ T8629] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 267.063836][ T8629] CPU: 0 UID: 0 PID: 8629 Comm: v4l_id Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 267.075496][ T8629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 267.085588][ T8629] Call Trace: [ 267.088893][ T8629] [ 267.091862][ T8629] dump_stack_lvl+0x99/0x250 [ 267.096497][ T8629] ? __asan_memcpy+0x40/0x70 [ 267.101123][ T8629] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.106354][ T8629] ? __pfx__printk+0x10/0x10 [ 267.111059][ T8629] panic+0x2db/0x790 [ 267.114973][ T8629] ? __pfx_panic+0x10/0x10 [ 267.119398][ T8629] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 267.125301][ T8629] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 267.131633][ T8629] ? print_memory_metadata+0x314/0x400 [ 267.137099][ T8629] ? v4l2_fh_open+0xc7/0x430 [ 267.141695][ T8629] check_panic_on_warn+0x89/0xb0 [ 267.146640][ T8629] ? v4l2_fh_open+0xc7/0x430 [ 267.151239][ T8629] end_report+0x78/0x160 [ 267.155487][ T8629] kasan_report+0x129/0x150 [ 267.159996][ T8629] ? v4l2_fh_open+0xc7/0x430 [ 267.164596][ T8629] v4l2_fh_open+0xc7/0x430 [ 267.169022][ T8629] ? __pfx___mutex_lock+0x10/0x10 [ 267.174060][ T8629] em28xx_v4l2_open+0x157/0x9a0 [ 267.178932][ T8629] v4l2_open+0x20f/0x360 [ 267.183179][ T8629] chrdev_open+0x4c9/0x5e0 [ 267.187598][ T8629] ? __pfx_chrdev_open+0x10/0x10 [ 267.192540][ T8629] ? __pfx_chrdev_open+0x10/0x10 [ 267.197492][ T8629] do_dentry_open+0xdf0/0x1970 [ 267.202266][ T8629] vfs_open+0x3b/0x340 [ 267.206340][ T8629] ? path_openat+0x2ecd/0x3830 [ 267.211117][ T8629] path_openat+0x2ee5/0x3830 [ 267.215724][ T8629] ? arch_stack_walk+0xfc/0x150 [ 267.220586][ T8629] ? __pfx_path_openat+0x10/0x10 [ 267.225529][ T8629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.231614][ T8629] do_filp_open+0x1fa/0x410 [ 267.236819][ T8629] ? __lock_acquire+0xab9/0xd20 [ 267.241679][ T8629] ? __pfx_do_filp_open+0x10/0x10 [ 267.246718][ T8629] ? _raw_spin_unlock+0x28/0x50 [ 267.251574][ T8629] ? alloc_fd+0x64c/0x6c0 [ 267.255938][ T8629] do_sys_openat2+0x121/0x1c0 [ 267.260646][ T8629] ? __pfx_do_sys_openat2+0x10/0x10 [ 267.265865][ T8629] ? exc_page_fault+0x76/0xf0 [ 267.270566][ T8629] ? do_user_addr_fault+0xc8a/0x1390 [ 267.275860][ T8629] __x64_sys_openat+0x138/0x170 [ 267.280724][ T8629] do_syscall_64+0xfa/0x3b0 [ 267.285228][ T8629] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.290434][ T8629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.296504][ T8629] ? clear_bhb_loop+0x60/0xb0 [ 267.301185][ T8629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.307079][ T8629] RIP: 0033:0x7fba0d1d8407 [ 267.311499][ T8629] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 267.331131][ T8629] RSP: 002b:00007ffe7c1789e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 267.339561][ T8629] RAX: ffffffffffffffda RBX: 00007fba0d14c880 RCX: 00007fba0d1d8407 [ 267.347545][ T8629] RDX: 0000000000000000 RSI: 00007ffe7c178f1b RDI: ffffffffffffff9c [ 267.355523][ T8629] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 267.363499][ T8629] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 267.371472][ T8629] R13: 00007ffe7c178c30 R14: 00007fba0d431000 R15: 000056398fa3f4d8 [ 267.379455][ T8629] [ 267.382740][ T8629] Kernel Offset: disabled [ 267.387061][ T8629] Rebooting in 86400 seconds..